<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.StileMessaggioDiPostaElettronica17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.StileMessaggioDiPostaElettronica18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.StileMessaggioDiPostaElettronica19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.StileMessaggioDiPostaElettronica20
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=IT link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Can anyone help me to understand?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>RS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Da:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> amavis-users [mailto:amavis-users-bounces+rocco.scappatura=infracom.it@amavis.org] <b>Per conto di </b>Scappatura Rocco<br><b>Inviato:</b> venerdì 23 giugno 2017 09:40<br><b>A:</b> 'amavis-users@amavis.org' <amavis-users@amavis.org><br><b>Oggetto:</b> R: Message quarantined as SPAM<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Hello.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Here the headers:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on av8.mydomain<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Spam-Level: ****<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Spam-Status: No, score=4.1 required=5.0 tests=BAYES_00,HTML_IMAGE_ONLY_08,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> HTML_MESSAGE,IMG_DIRECT_TO_MX,MIME_HTML_MOSTLY,MPART_ALT_DIFF,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> SHORT_HELO_AND_INLINE_IMAGE,TVD_SPACE_RATIO autolearn=no autolearn_force=no<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> version=3.4.0<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Delivered-To: spam-quarantine<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Envelope-To: <bbb@mydomain><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Envelope-To-Blocked: <bbb@mydomain><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Quarantine-ID: <zRJd9Wo5250M><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Received: from av8.mydomain ([127.0.0.1])<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> by localhost (av8.mydomain [127.0.0.1]) (amavisd-new, port 10024)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> with ESMTP id zRJd9Wo5250M for <bbb@mydomain>;<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> Thu, 22 Jun 2017 11:45:47 +0200 (CEST)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Received: from aaa (unknown [xxx.yyy.zzz.uuu])<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> by av8.mydomain (Postfix) with SMTP id 8647AD5DBA<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> for <bbb@mydomain>; Thu, 22 Jun 2017 11:45:43 +0200 (CEST)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Message-ID: <<a href="mailto:776AB7C587CC457C95FF35582FC9F0E1@AutoRPZ.local">776AB7C587CC457C95FF35582FC9F0E1@AutoRPZ.local</a>><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>From: "aaa" <<a href="mailto:aaa@example.com">aaa@example.com</a>><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>To: <bbb@mydomain><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Subject: prova<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Date: Thu, 22 Jun 2017 11:30:23 +0200<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>MIME-Version: 1.0<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Content-Type: multipart/related;<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> type="multipart/alternative";<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'> boundary="----=_NextPart_000_0084_01D2EB4A.F00878C0"<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Priority: 3<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-MSMail-Priority: Normal<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Importance: Normal<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-Mailer: Microsoft Windows Live Mail 16.4.3528.331<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>But they don’t clarify why the messafe is blocked as SPAM and quarantined at all.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Anyone could please </span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>j<span style='color:#1F497D'>ustify what has happened?<o:p></o:p></span></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>RS<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Da:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> amavis-users [<a href="mailto:amavis-users-bounces+rocco.scappatura=infracom.it@amavis.org">mailto:amavis-users-bounces+rocco.scappatura=infracom.it@amavis.org</a>] <b>Per conto di </b>Dominic Raferd<br><b>Inviato:</b> venerdì 23 giugno 2017 08:08<br><b>A:</b> <a href="mailto:amavis-users@amavis.org">amavis-users@amavis.org</a><br><b>Oggetto:</b> Re: Message quarantined as SPAM<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On 22 June 2017 at 13:13, Scappatura Rocco <<a href="mailto:Rocco.Scappatura@infracom.it" target="_blank">Rocco.Scappatura@infracom.it</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><p class=MsoNormal>Hi,<br><br>I have Debian Lenny with postfix+amavisd-new+spamassassin+clamav.<br><br>I have detected that a message has been quarantined:<br><br>Jun 22 11:45:48 av8 amavis[22610]: (22610-11) Blocked SPAM {DiscardedOpenRelay,Quarantined}, [xxx.yyy.zzz.uuu]:50412 [xxx.yyy.zzz.uuu] <<a href="mailto:aaa@example.com">aaa@example.com</a>> -> <bbb@mydomain>, quarantine: z/spam-zRJd9Wo5250M.gz, Queue-ID: 8647AD5DBA, Message-ID: <<a href="mailto:776AB7C587CC457C95FF35582FC9F0E1@AutoRPZ.local">776AB7C587CC457C95FF35582FC9F0E1@AutoRPZ.local</a>>, mail_id: zRJd9Wo5250M, Hits: 6.793, size: 77514, 364 ms<br><br>But I have checked it against spamassassin:<br><br>gunzip -c z/spam-zRJd9Wo5250M.gz | spamassassin -t<br><br>and I get:<br><br>.<br>.<br>.<br><br>Content analysis details: (4.1 points, 5.0 required)<br><br> pts rule name description<br>---- ---------------------- --------------------------------------------------<br> 0.0 HTML_MESSAGE BODY: HTML included in message<br> 0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME<br>-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%<br> [score: 0.0000]<br> 0.8 MPART_ALT_DIFF BODY: HTML and text parts are different<br> 1.7 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words<br> 0.0 TVD_SPACE_RATIO No description available.<br> 1.4 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image<br> 1.8 IMG_DIRECT_TO_MX No description available.<br><br>So the total score is 4,2.<br><br>In amavisd configuraton file I have set:<br><br>$sa_spam_subject_tag = '[Spam] ';<br>$sa_tag_level_deflt = 2.0; # add spam info headers if at, or above that level<br>$sa_tag2_level_deflt = 6.31; # add 'spam detected' headers at that level<br>$sa_kill_level_deflt = 6.31; # triggers spam evasive actions<br>$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent<br><br>How the the score 6.793 of amavis is obtained?<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>If you look at this mail in your quarantine it should have 'X-Spam-Status' header added by amavis showing how the score was calculated. Amavis doesn't only use spamassassin for the calculation.<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></div></div></body></html>