Re: why did spamassassin block this ?

LC's No-Spam Newsreading account wrote:
All such confirmation messages were blocked by our spamassassin with a
score of about 8. This is an example of info in the header.

X-Spam-Status: Yes, hits=8.087 tag=-999 tag2=4.5 kill=4.5 tests=AWL,
BAYES_05,
DNS_FROM_SECURITYSAGE, FORGED_RCVD_HELO, HTML_10_20, HTML_EXTRA_CLOSE,
HTML_MESSAGE, HTML_SHORT_LENGTH, NO_REAL_NAME, UPPERCASE_25_50

As far as I understand, none of the above rules has a score above 0.38
(usually quite lower and marginal, 0.007 or 0.001). except AWL which has
1 (in fact the address is recorded in awlst with a score of 8).

AWL doesn’t have a set score: it reflects the history from that address
and that network. (By default, the post-AWL score is half-way between
the pre-AWL score and the historical average for that sender / network).

In this case, if the AWL brought the average score to
over eight, then there must have been some pretty spammy e-mail from
that address in the past. You can think of it as a reputation system.

See http://wiki.apache.org/spamassassin/AutoWhitelist for more details.

We suggested to our colleague to arrange so that everything was sent
in plain text. He did so (now there is no Content-Type in the header
and no HTML tags in the body), and now the messages are getting through.

Right: this won’t be because the e-mails changed, but because the AWL
score changed. And this is because the succession of good e-mails from
that address and network lowered the historical average.

Three other points: it looks like you’re on an old version of
SpamAssassin. An update might help you catch more spam and allow you to
put the “kill” score back to 5.

Few of the scores are arbitrary: the rest are calculated by a perceptron
on collections of spam and non-spam. If a rule hits a lot of non-spam,
it will either be given a low score or be removed.

You may also benefit from joining one of the mailing lists:
http://wiki.apache.org/spamassassin/MailingLists . If you’d have asked
this question there, several of the developers would have at least
jumped in if I got anything incorrect.

Hope this helps,

James.

--
E-mail: james@ | The Inquirer was set up by Mike Magee (ticker: DODGY),
aprilcottage.co.uk | who co-founded well-known IT site The Register seven
| years ago after countless years editing and managing all
| manner of things which could be Aardvark Today and Fish
| Farming Monthly but weren't. -- The Inquirer, 2001
.

Relevant Pages

  • Re: Streaming Live AVI
    ... it over a network for similiar results... ... You simply need to write your own muxer because the stock ... then seek back to the beginning to fix the header, ... the parser on the receiving side also needs to be ...
    (microsoft.public.win32.programmer.directx.video)
  • Re: Wireless settings
    ... LPARAM lParam) ... NMHDR* header = NULL; ... // See what type of network connectivity the user ...
    (microsoft.public.windowsce.embedded.vc)
  • Re: 10 * 172.16 * 192.168 ... why?
    ... around doesn't require dedicated hardware. ... How were routers constructed when IPv4 was designed? ... Assume a router with three network interfaces. ... Ethernet header of 14 bytes ) and ...
    (comp.os.linux.networking)
  • Re: header footer autotext
    ... after replacing the normal.dot file with one from ... I lost the options to choose filename/path in header ... >> replaced the normal.dot file with one from the network (realize this isn't ...
    (microsoft.public.word.docmanagement)