Message quarantined as SPAM
Scappatura Rocco
Rocco.Scappatura at infracom.it
Thu Jun 22 14:13:53 CEST 2017
Hi,
I have Debian Lenny with postfix+amavisd-new+spamassassin+clamav.
I have detected that a message has been quarantined:
Jun 22 11:45:48 av8 amavis[22610]: (22610-11) Blocked SPAM {DiscardedOpenRelay,Quarantined}, [xxx.yyy.zzz.uuu]:50412 [xxx.yyy.zzz.uuu] <aaa at example.com> -> <bbb at mydomain>, quarantine: z/spam-zRJd9Wo5250M.gz, Queue-ID: 8647AD5DBA, Message-ID: <776AB7C587CC457C95FF35582FC9F0E1 at AutoRPZ.local>, mail_id: zRJd9Wo5250M, Hits: 6.793, size: 77514, 364 ms
But I have checked it against spamassassin:
gunzip -c z/spam-zRJd9Wo5250M.gz | spamassassin -t
and I get:
.
.
.
Content analysis details: (4.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HTML_MESSAGE BODY: HTML included in message
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
1.7 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
0.0 TVD_SPACE_RATIO No description available.
1.4 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image
1.8 IMG_DIRECT_TO_MX No description available.
So the total score is 4,2.
In amavisd configuraton file I have set:
$sa_spam_subject_tag = '[Spam] ';
$sa_tag_level_deflt = 2.0; # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 6.31; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 6.31; # triggers spam evasive actions
$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent
How the the score 6.793 of amavis is obtained?
Regards,
RS
More information about the amavis-users
mailing list