<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p><tt>Hello,</tt></p>
<p><tt><br>
</tt></p>
<p><tt>a quick question - I recently updated my mail server and
therefore, I was paying a bit more attention to spam filtering.
I noticed that total score, indicated in X-Spam-Status header,
does not equal the sum of all the tests listed.</tt></p>
<p><tt>Here I have a real-world example - this is the </tt><tt>X-Spam-Satus</tt><tt>
header of a received spam message (I added newlines for
clarity):<br>
</tt></p>
<p><tt>X-Spam-Status: No, score=-0.499 tagged_above=-999 required=4
tests=[<br>
DKIMWL_WL_MED=-0.001, <br>
DKIM_SIGNED=0.1, <br>
DKIM_VALID=-0.1, <br>
DKIM_VALID_AU=-0.1, <br>
HTML_MESSAGE=0.001, <br>
MAILING_LIST_MULTI=-1, <br>
RCVD_IN_MSPIKE_H4=-0.01, <br>
RCVD_IN_MSPIKE_WL=-0.01, <br>
SPF_HELO_NONE=0.001, <br>
SPF_PASS=-0.001, <br>
T_KAM_HTML_FONT_INVALID=0.01, <br>
RCVD_TLS_ALL=0, <br>
RWL_MAILSPIKE_VERYGOOD=0, <br>
HAS_LIST_UNSUB=-0.01, <br>
R_DKIM_ALLOW=0, <br>
URIBL_GREY=1.5, <br>
MANY_INVISIBLE_PARTS=0.3, <br>
DMARC_POLICY_ALLOW=0, <br>
BAD_REP_POLICIES=0.1, <br>
REPLYTO_DOM_NEQ_FROM_DOM=0, <br>
PREVIOUSLY_DELIVERED=0, <br>
PRECEDENCE_BULK=0, <br>
DKIM_TRACE=0, <br>
MIME_TRACE=0, <br>
MIME_BASE64_TEXT=0.1, <br>
HAS_REPLYTO=0, <br>
RCVD_COUNT_ONE=0, <br>
ASN=0, <br>
MIME_GOOD=-0.1, <br>
TO_DN_EQ_ADDR_ALL=0, <br>
R_SPF_ALLOW=0, <br>
FREEMAIL_REPLYTO=0, <br>
FORGED_SENDER=0.3, <br>
TO_MATCH_ENVRCPT_ALL=0, <br>
ONCE_RECEIVED=0.1, <br>
ARC_NA=0, <br>
RCPT_COUNT_ONE=0, <br>
FROM_NEQ_ENVFROM=0, <br>
FROM_HAS_DN=0<br>
] </tt><tt><code>autolearn=ham autolearn_force=no</code></tt></p>
<p><code></code><tt><br>
</tt></p>
<p><tt>So - total score is -0.499, but if I manually sum up all the
tests, it comes out to 1.18.</tt></p>
<p><tt>Is this something that normally occurs in Amavis or is this a
distro (CentOS 7) specific problem?<br>
</tt></p>
<br>
<p><tt> Best regards,</tt></p>
<p><tt> Danilo</tt></p>
<p><tt><br>
</tt></p>
<div class="moz-signature">
<div></div>
</div>
</body>
</html>