A client of mine wasn't getting my own hand-typed messages.
Unfortunately, they had their SA set to block on a score of 3 (which is
aggressive), and this particular rule hit plus a tiny bit of other
things put it above 3. But what is weird - is that it was hitting on
hand typed-messages from me - that I sent directly from my
latest-version of Thunderbird. So this was NOT "forged" at all! (Also, I
suspect that the bayes hit was due to previous such messages from me
getting blocked and feeding his bayes?)
Any suggestions? Could my client be using a very old version of SA -
where this is fixed already? (they are using SA from Kerio).
Here are the headers:
X-Kerio-Anti-Spam: Build: [Engines: 2.15.8.1169, Stamp: 3], Multi:
[Enabled, t: (0.000012,0.017258)], BW: [Enabled, t: (0.000013)], RTDA:
[Enabled, t: (0.052863), Hit: No, Details: v2.7.15; Id:
15.1i65djr.1conscun2.ocr1k], total: 0(700)
X-Spam-Status: Yes, hits=3.8 required=3.0
tests=KERIO_ANTI_SPAM: -0.000, AWL: -0.000, BAYES_50: 1.567,
FORGED_MUA_MOZILLA: 2.309, HTML_MESSAGE: 0.001, URIBL_BLOCKED: 0.001,
TOTAL_SCORE: 3.878,autolearn=no
Suggestions?
SIDE NOTE: I don't think there was any domain my message that was
blacklisted on URIBL - so I can't explain the "URIBL_BLOCKED", but that
only scored 0.001, so that was innocuous. I suspect that that rule is
malfunctioning on their end, and then they changed the score to .001 -
so just please ignore that for the purpose of this discussion.
--
Rob McEwen
https://www.invaluement.com
