Spam Score Analysis

Matt Goodman matt at
Thu Sep 8 20:37:38 CEST 2011

Yes... tests=[BAYES_00, KHOP_DYNAMIC, RCVD_IN_PBL....etc.] are all "tests"
under SpamAssassin. Each of those tests assign a score. On my system, the
tests are stored in /var/lib/spamassassin/

Your system may place them in a different location. However, the tests in
those files give a brief description of each one. For example:

1) BAYES_00   Bayes spam probability is 0 to 1%
2) RCVD_IN_PBL  Received via a relay in Spamhaus PBL
3) KHOP_DYNAMIC  Relay looks like a dynamic address


So there is a description of each 'test' you just have to find the files
which describe it.

-----Original Message-----
From: at
[ at] On Behalf Of
Carlos Mennens
Sent: Thursday, September 08, 2011 8:28 AM
To: amavis-users at
Subject: Spam Score Analysis

So an email I get from a co-worker with no attachments and small length of
plain text get scored and are marked spam:

X-Virus-Scanned: amavisd-new at ***********.org
X-Spam-Flag: YES
X-Spam-Score: 3.324
X-Spam-Level: ***
X-Spam-Status: Yes, score=3.324 tagged_above=-999 required=3
    tests=[BAYES_00=-1.9, KHOP_DYNAMIC=0.906, RCVD_IN_PBL=3.335,
    RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982] autolearn=no

Is there a way I can determine what caused this email to get scored as such?

More information about the amavis-users mailing list