Spam sneaking in.

[Matus UHLAR - fantomas]

>On 8/6/19 5:51 PM, Bob D wrote:
>>root at M1-2:~# grep -Fr '$sa_local_tests_only' /etc/amavis/conf.d
>>/etc/amavis/conf.d/20-debian_defaults:$sa_local_tests_only = 0;    # 
>>only tests which do not require internet access?
>>root at M1-2:~#
>>
>>I assume 0 = false
>>This one was in a bunch in today,
>>X-Spam-Flag: NO
>>X-Spam-Score: 0.311
>>X-Spam-Level:
>>X-Spam-Status: No, score=0.311 required=4 tests=[BAYES_99=3.5,
>>	DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
>>	DKIM_VALID_EF=-0.1, DKIM_VERIFIED=-3, HTML_MESSAGE=0.001,
>>	T_REMOTE_IMAGE=0.01] autolearn=no autolearn_force=no
>>
>>Here is the replay to:
>>Reply-To:lowtestosterone.treatment at colubiastruts.com
>>0.311 ?

On 06.08.19 18:20, Bob D wrote:
>Here is the amavis debug of the above mail at receive.
>https://pastebin.com/kHY09Bim

50_scores.cf:score DKIM_VERIFIED 0

why/where did you set DKIM_VERIFIED score to -3?

DKIM_VERIFIED only confirms that the message was sent from proper server, it
says nothing about hamminess.
nearly all yahoo/gmail/hotmail spam has DKIM_VERIFIED.

maybe you are early recipient, and maybe you don't have supporting software
for network checks like razor, pyzor and dcc installed. They help much.


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers.