<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font size="2">Greetings to all,
<br>
<br>
I have an issue with my setup somehow and it seems to be in
amavis-new, most spam gets detected and delt with, some gets
through and the scoring seems odd.
<br>
This one came in this morning and is typical of those that get
through:
<br>
</font><br>
<pre><font size="-1">Return-Path: <a class="moz-txt-link-rfc2396E" href="mailto:rejuvalex@jodiariastrial.com"><rejuvalex@jodiariastrial.com></a>
Subject: Regrow your Hair in 3 Weeks.</font></pre>
<pre><font size="-1">X-Spam-Flag: NO
X-Spam-Score: 1.995
X-Spam-Level: *
X-Spam-Status: No, score=1.995 tagged_above=-9999 required=5
tests=[HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001,
PYZOR_CHECK=1.985, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,
T_REMOTE_IMAGE=0.01] autolearn=no autolearn_force=no</font></pre>
<font size="2"><font size="-1">
</font><br>
If I run the email through on the command line with:
<br>
cat {mailfile} | spamassassin -D -t
<br>
The results are:<br>
<font size="-2">Content analysis details: (7.5 points, 4.0
required)<br>
pts rule name description<br>
---- ----------------------
--------------------------------------------------<br>
5.5 URIBL_DBL_SPAM Contains a spam URL listed in the
DBL blocklist<br>
[URIs: jodiariastrial.com]<br>
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record<br>
0.0 HTML_MESSAGE BODY: HTML included in message<br>
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to<br>
background<br>
2.0 PYZOR_CHECK Listed in Pyzor
(<a class="moz-txt-link-freetext" href="http://pyzor.sf.net/">http://pyzor.sf.net/</a>)<br>
0.0 T_REMOTE_IMAGE Message contains an external image<br>
</font><br>
I am running:
<br>
Ubuntu 14.04.5
<br>
Postfix mail_version = 2.11.0 milter_macro_v = $mail_name
$mail_version
<br>
amavisd-new-2.7.1 (20120429)
<br>
ClamAV 0.99.2/24255/Thu Jan 25 11:22:47 2018
<br>
Anti-Virus scanner version: 13.0.3114
<br>
SpamAssassin version 3.4.0
<br>
running on Perl version 5.18.2
</font>
</body>
</html>