On Wed, 4 Nov 2020, Thomas Anderson wrote:
Hello,
Email from my child's school is being identified as SPAM, but it's from
his teacher.
Here is the X-SPAM-Report:
X-Spam-Report:
* -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
* [194.25.134.21 listed in wl.mailspike.net]
* 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
* provider (firstname-lastname[at]t-online.de)
Your child's school is using a freemail provider rather than a domain
registered to the school system? Or is the teacher using their private
email account for official school-related purposes?
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
* 0.0 SPF_NONE SPF: sender does not publish an SPF Record
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
* blocked. See
* http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
* for more information.
* [URIs: example.com]
* 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
* 2.5 XPRIO_SHORT_SUBJ Has X-Priority header + short subject
* 1.7 MSM_PRIO_REPTO MSMail priority header + Reply-to + short
* subject
* 1.7 SPOOFED_FREEMAIL No description available.
My best guess is that there was no subject line, but even that would still
cause it to fail the spam test.
Having a long-enough subject would have removed 4.2 points from the total,
giving a total of 3.5 - below the default spam threshold.
Researching a little bit the MSMail priority related errors are related to that
sender's Email client? And, they should
remove X-MSMail-Priority header? I don't use MS system very often, so a little
confused.
Ideally I'd suggest the school use a non-freemail domain and implement SPF
or DKIM so that they can be reliably whitelisted. That's potentially
fairly extensive work on their side, so the immediate recommendation would
be for you to use whitelist_from_rcvd to whitelist the teacher's freemail
account.
There's overlap in the priority-no-subject rules that's unnecessarily
inflating the score, I'll fix that. But that wouldn't bring it down below
the threshold.
Advise the teacher to always provide a meaningful message subject, that's
longer than a word or two.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
5 days until The 82nd anniversary of Kristallnacht - disarmament enables
genocide
