Spam sneaking in.

[Matus UHLAR - fantomas]

>>On 31.07.19 11:47, Bob D wrote:
>>>I have an Ubuntu 18.04 server running Postfix, Clamav, 
>>>Spamassassin, Dovecot with virtual hosts/emails.

are you using amavis or not? 

>>>X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
>>>        MyServer1-2.mydomain.com
>>>X-Spam-Level:
>>>X-Spam-Status: No, score=0.6 required=4.0 
>>>tests=BAYES_99,BAYES_999,DKIM_SIGNED,
>>>        DKIM_VALID,DKIM_VALID_AU,DKIM_VERIFIED,HTML_MESSAGE,
>>>        T_KAM_HTML_FONT_INVALID,T_REMOTE_IMAGE autolearn=no 
>>>autolearn_force=no
>>>        version=3.4.2

>On 7/31/19 12:36 PM, Matus UHLAR - fantomas wrote:
>>strange, BAYES_99+BAYES_999 scores 3.7
>>DKIM_VALID,DKIM_VALID_AU and DKIM_VERIFIED substract only 0.3 points
>>
>>try setting sa_tag_level_deflt to 'undef' and you can see scores of those
>>rules...

On 01.08.19 15:01, Bob D wrote:
>Well, I changed the sa_tag_level_deflt to 'undef', it was at '-9999'.
>A few got in and it appears no difference in the headers.
>Here is one
>----------------------------------------------------------------------------------------------
>
>X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
>	myserver.mydomain.com
>X-Spam-Level: **
>X-Spam-Status: No, score=2.3 required=4.0 tests=BAYES_99,BAYES_999,DKIM_SIGNED,
>	DKIM_VALID,DKIM_VALID_AU,DKIM_VERIFIED,HTML_FONT_LOW_CONTRAST,
>	HTML_MESSAGE,KAM_SHORT,URIBL_BLACK autolearn=no autolearn_force=no
>	version=3.4.2

I missed this last time: This is not an amavis header. You apparently run
spamassassin on different lace. 

amavis header looks like this:

X-Spam-Status: No, score=1.173 required=6.31 tests=[ALL_TRUSTED=-1,
        BAYES_00=-1.9, DCC_CHECK=1.1, DIGEST_MULTIPLE=0.293,
        DOS_OUTLOOK_TO_MX=2.845, FSL_BULK_SIG=0.84, FSL_HELO_NON_FQDN_1=0.001,
        HELO_NO_DOMAIN=0.001, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.1,
        PYZOR_CHECK=1.392, SUBJ_ALL_CAPS=0.5, TRUSTED_SUBMISSION=-3]
        autolearn=no autolearn_force=no


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fucking windows! Bring Bill Gates! (Southpark the movie)