Scoring questions

Computer Bob bob at inter-control.com
Mon Jan 29 17:22:07 CET 2018


Greetings to all,

I have an issue with my setup somehow and it seems to be in amavis-new, 
most spam gets detected and delt with, some gets through and the scoring 
seems odd.
This one came in this morning and is typical of those that get through:

Return-Path: <rejuvalex at jodiariastrial.com> Subject: Regrow your Hair in 
3 Weeks.

X-Spam-Flag: NO X-Spam-Score: 1.995 X-Spam-Level: * X-Spam-Status: No, 
score=1.995 tagged_above=-9999 required=5 
tests=[HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, 
PYZOR_CHECK=1.985, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, 
T_REMOTE_IMAGE=0.01] autolearn=no autolearn_force=no


If I run the email through on the command line with:
cat {mailfile} | spamassassin -D -t
The results are:
Content analysis details:   (7.5 points, 4.0 required)
  pts rule name              description
---- ---------------------- 
--------------------------------------------------
  5.5 URIBL_DBL_SPAM         Contains a spam URL listed in the DBL blocklist
                             [URIs: jodiariastrial.com]
-0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
                             background
  2.0 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
  0.0 T_REMOTE_IMAGE         Message contains an external image

I am running:
Ubuntu 14.04.5
Postfix mail_version = 2.11.0 milter_macro_v = $mail_name $mail_version
amavisd-new-2.7.1 (20120429)
ClamAV 0.99.2/24255/Thu Jan 25 11:22:47 2018
Anti-Virus scanner version: 13.0.3114
SpamAssassin version 3.4.0
    running on Perl version 5.18.2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20180129/f7f0c430/attachment.html>


More information about the amavis-users mailing list