I know you are correct about SpamAssassin, but as I explained earlier we run a commercial email server and when we first started to use SpamAssassin we had several customers complain about the false positives, just like "script909" is complaining about them at Gmail. So we have purposely set the rules for SpamAssassin loose. We started to use SpamAssassin two or three years ago, before spam was the serious problem it is today. We could probably tighten SpamAssassin up today and nobody would complain. In fact I may just do that.