Re: HTML Preheader affected by NORDNS_LOW_CONTRAST

2019-08-30 Thread Bill Cole
On 30 Aug 2019, at 16:11, Jerry Martinez wrote: I have noticed an unusually high amount of my HTML emails are being tagged as spam. The offending rule appears to be: ScanSA rules applied: (1.8) ...NORDNS_LOW_CONTRAST=1.82 This is an overly simplistic analysis. No single rule with a score of

Re: HTML Preheader affected by NORDNS_LOW_CONTRAST

2019-08-30 Thread Bill Cole
On 30 Aug 2019, at 16:48, Jerry Martinez wrote: Thanks for the reply. "my HTML emails" refers to email that I am sending through MailChimp. For the receiving end (I am also a recipient of those emails), we use DuoCircle as our email gateway which then forwards emails to our internal email se

RE: HTML Preheader affected by NORDNS_LOW_CONTRAST

2019-08-30 Thread Jerry Martinez
Thanks for the reply. "my HTML emails" refers to email that I am sending through MailChimp. For the receiving end (I am also a recipient of those emails), we use DuoCircle as our email gateway which then forwards emails to our internal email server (hMailServer). I have confirmed that the emails a

Re: HTML Preheader affected by NORDNS_LOW_CONTRAST

2019-08-30 Thread RW
On Fri, 30 Aug 2019 16:11:21 -0400 Jerry Martinez wrote: > I have noticed an unusually high amount of my HTML emails are being > tagged as spam. The offending rule appears to be: > > ScanSA rules applied: (1.8) ...NORDNS_LOW_CONTRAST=1.82 Note the NORDNS part which means 'no reverse DNS'; very l

HTML Preheader affected by NORDNS_LOW_CONTRAST

2019-08-30 Thread Jerry Martinez
I have noticed an unusually high amount of my HTML emails are being tagged as spam. The offending rule appears to be: ScanSA rules applied: (1.8) ...NORDNS_LOW_CONTRAST=1.82 I gather the NORDNS_LOW_CONTRAST rule is being triggered by the PREHEADER that is coded within the HTML email. Preheaders a

Re: Many sa-learn processes getting stuck

2019-08-30 Thread @lbutlr
On 30 Aug 2019, at 12:32, @lbutlr wrote: > That is probably my error then. I remove the -Q flag manually and didn’t > check -u since there is a scan user on the system. Found the problem, it wasn’t spam assassin at all, it was an old crontab script that someone how was re-enabled. removed it fr

Re: Many sa-learn processes getting stuck

2019-08-30 Thread @lbutlr
On 30 Aug 2019, at 11:49, RW wrote: > On Fri, 30 Aug 2019 10:58:30 -0600 > @lbutlr wrote: > >> I have a lot of processes that look like this: >> >> root 48359 100.0 1.4 55984 47680 - R17:53 989:39.50 >> /usr/local/bin/perl -T -w /usr/local/bin/sa-learn --spam -u vscan > ... >>

Re: Many sa-learn processes getting stuck

2019-08-30 Thread @lbutlr
On 30 Aug 2019, at 11:49, RW wrote: > On Fri, 30 Aug 2019 10:58:30 -0600 > @lbutlr wrote: > >> I have a lot of processes that look like this: >> >> root 48359 100.0 1.4 55984 47680 - R17:53 989:39.50 >> /usr/local/bin/perl -T -w /usr/local/bin/sa-learn --spam -u vscan > ... >>

Re: Many sa-learn processes getting stuck

2019-08-30 Thread RW
On Fri, 30 Aug 2019 10:58:30 -0600 @lbutlr wrote: > I have a lot of processes that look like this: > > root 48359 100.0 1.4 55984 47680 - R17:53 989:39.50 > /usr/local/bin/perl -T -w /usr/local/bin/sa-learn --spam -u vscan ... > /var/spool/spamd/.spamassassin/bayes_toks Aug 30 1

Many sa-learn processes getting stuck

2019-08-30 Thread @lbutlr
I have a lot of processes that look like this: root 48359 100.0 1.4 55984 47680 - R17:53 989:39.50 /usr/local/bin/perl -T -w /usr/local/bin/sa-learn --spam -u vscan /usr/local/virtual/kr...@kreme.com/Maildir/.Junk/cur/15670… /usr/local/virtual/kr...@kreme.com/Maildir/.Junk/cu

Re: Spanish language i.c.w. DRUGS_ERECTILE et al.

2019-08-30 Thread Samy Ascha
On 29 Aug 2019, at 20:13, John Hardin wrote: > > On Thu, 29 Aug 2019, Samy Ascha wrote: > >> Thx a lot for that extra info. That was enough to find the match here: >> >> Aug 29 17:11:59.202 [10745] dbg: rules: ran body rule __DRUGS_ERECTILE3 >> ==> got hit: " C I A L I S " >> >> Face-palm

Re: Spanish language i.c.w. DRUGS_ERECTILE et al.

2019-08-30 Thread Matus UHLAR - fantomas
On Wed, 28 Aug 2019, Samy Ascha wrote: Today, I encountered, for the first time, an issue with scanning an email that is composed in Spanish. It is hitting a fuzzy match somewhere in the DRUGS_ERECTILE and DRUGS_ERECTILE_OBFU rules matches. I'm generally looking for a way to manipulate these