The following email (full headers and SA report only) is getting falsely marked as spam, even though we have 'whitelist-from *@techdata.com' in /etc/mail/spamassassin/local.cf.
My suspicion is that the From: Header is actually 'FROM:', and the case
difference is causing the problem. Is there any way to avoid this short
of complaining to TechData that their email doesn't follow the RFCs?
Thanks,
Matthew
-----------------------------------------------
Return-Path: <[EMAIL PROTECTED]>
Received: from bridge.uniqsys.com (IDENT:[EMAIL PROTECTED]
[65.165.122.193]) by itchy.uniqsys.com (8.11.6/8.9.3) with ESMTP id
g27IHPW01964; Thu, 7 Mar 2002 13:17:25 -0500
Received: from usclwecon01.techdata.com (talon.techdata.com
[169.153.28.57]) by bridge.uniqsys.com (8.11.6/8.11.6) with ESMTP id
g27IHOd17295 for <[EMAIL PROTECTED]>; Thu, 7 Mar 2002 13:17:24 -0500
Message-Id: <[EMAIL PROTECTED]>
Received: from AspEmail (web5.techdata.com [169.153.202.105]) by
usclwecon01.techdata.com with SMTP (Microsoft Exchange Internet Mail
Service Version 5.5.2653.13) id FQZ7C3FT; Thu, 7 Mar 2002 13:18:33 -0500
FROM: "WWW - Webmaster" <[EMAIL PROTECTED]>
TO: [EMAIL PROTECTED]
DATE: Thu, 07 Mar 2002 13:18:34 -0500
MIME-Version: 1.0
Content-Type: text/plain
X-AntiVirus: scanned for viruses by AMaViS 0.2.1 (http://amavis.org/)
Subject: *****SPAM***** Thank you for your Tech Data order # 5710793
X-Spam-Status: Yes, hits=8.8 required=5.0
tests=FROM_MISSING,ALL_CAPS_SUBJECT,MSG_ID_ADDED_BY_MTA_2,DATE_MISSING,HTML_
WITH_BGCOLOR,JAVASCRIPT,FREQ_SPAM_PHRASE,MISSING_HEADERS version=2.1
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.1 (devel $Id: SpamAssassin.pm,v 1.59
2002/01/23 08:01:53 jmason Exp $)
X-Spam-Prev-Content-Type:
multipart/mixed;boundary="B6CD_D60C_1920_4D32_BB78_ABEF_108C_7E27"
Status: O
X-Evolution-Source: pop:[EMAIL PROTECTED]/inbox
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (8.83 hits, 5 required)
SPAM: Hit! (1 point) Missing From: header
SPAM: Hit! (2.36 points) SUBJECT: header found
SPAM: Hit! (1 point) 'Message-Id' was added by a relay (2)
SPAM: Hit! (1 point) Missing Date: header
SPAM: Hit! (1.2 points) BODY: HTML mail with non-white background
SPAM: Hit! (0.01 points) BODY: JavaScript code
SPAM: Hit! (1.56 points) Contains phrases frequently found in spam
SPAM: [score: 11, hits: com subject, com with, for]
SPAM: [any, for your, reply this, thank you, this]
SPAM: [email, you for, you need, your business, your]
SPAM: [order]
SPAM: Hit! (0.7 points) Missing To: header
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
--
Matthew T. Jachimstal | Phone: (419) 861-3331 .~.
System Administrator | FAX: (419) 861-3340 /V\
Unique Systems, Inc. | http://www.uniqsys.com // \\
6920 Spring Valley Drive, Suite 106 | [EMAIL PROTECTED] /( )\
Holland, OH 43528 | ^`~'^
signature.asc
Description: This is a digitally signed message part
