Dear all
If I look at the score reported from within my mail client Thunderbird I
see this section:
X-Spam-Status: No, score=2.9 required=3.0 tests=BAYES_50,HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK
autolearn=no autolearn_force=no version=3.4.2
If I run the same mail through spamc from the command line on the mail
server I see an output with a difference score. Why is that:
cat
/srv/vmail/..../tps/mail/cur/1633659838.M893539P31027......,S=5912,W=6108:2,Sc
| spamc -r
Spam detection software, running on the system "..............",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: The coolest and comfiest sandals to wear around the house,
or even at the office Everyone is talking about these colorful rubber shoes,
designed to ensure maximum comfort and stability. They are non- [...]
Content analysis details: (11.6 points, 2.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: jokepray.bar]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[2.56.57.67 listed in bl.mailspike.net]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[2.56.57.67 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: jokepray.bar]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: jokepray.bar]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
Please note that I have lowered the required score from 3.0 to 2.0
Regards
Thomas S
If I look at the score reported from within my mail client Thunderbird I
see this section:
X-Spam-Status: No, score=2.9 required=3.0 tests=BAYES_50,HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK
autolearn=no autolearn_force=no version=3.4.2
If I run the same mail through spamc from the command line on the mail
server I see an output with a difference score. Why is that:
cat
/srv/vmail/..../tps/mail/cur/1633659838.M893539P31027......,S=5912,W=6108:2,Sc
| spamc -r
Spam detection software, running on the system "..............",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: The coolest and comfiest sandals to wear around the house,
or even at the office Everyone is talking about these colorful rubber shoes,
designed to ensure maximum comfort and stability. They are non- [...]
Content analysis details: (11.6 points, 2.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: jokepray.bar]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[2.56.57.67 listed in bl.mailspike.net]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[2.56.57.67 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: jokepray.bar]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: jokepray.bar]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
Please note that I have lowered the required score from 3.0 to 2.0
Regards
Thomas S