Scoring questions

[Dino Edwards]

Are you running cat {mailfile} | spamassassin -D –t as root?



From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail.net at amavis.org] On Behalf Of Computer Bob
Sent: Monday, January 29, 2018 11:22 AM
To: amavis-users at amavis.org
Subject: Scoring questions

Greetings to all,

I have an issue with my setup somehow and it seems to be in amavis-new, most spam gets detected and delt with, some gets through and the scoring seems odd.
This one came in this morning and is typical of those that get through:

Return-Path: <rejuvalex at jodiariastrial.com><mailto:rejuvalex at jodiariastrial.com>

Subject: Regrow your Hair in 3 Weeks.

X-Spam-Flag: NO

X-Spam-Score: 1.995

X-Spam-Level: *

X-Spam-Status: No, score=1.995 tagged_above=-9999 required=5

        tests=[HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001,

        PYZOR_CHECK=1.985, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,

        T_REMOTE_IMAGE=0.01] autolearn=no autolearn_force=no

If I run the email through on the command line with:
cat {mailfile} | spamassassin -D -t
The results are:
Content analysis details:   (7.5 points, 4.0 required)
 pts rule name              description
---- ---------------------- --------------------------------------------------
 5.5 URIBL_DBL_SPAM         Contains a spam URL listed in the DBL blocklist
                            [URIs: jodiariastrial.com]
-0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
                            background
 2.0 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 0.0 T_REMOTE_IMAGE         Message contains an external image

I am running:
Ubuntu 14.04.5
Postfix mail_version = 2.11.0 milter_macro_v = $mail_name $mail_version
amavisd-new-2.7.1 (20120429)
ClamAV 0.99.2/24255/Thu Jan 25 11:22:47 2018
Anti-Virus scanner version: 13.0.3114
SpamAssassin version 3.4.0
   running on Perl version 5.18.2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20180129/9aaa84d8/attachment.html>