On 2021-05-20 at 18:24:51 UTC-0400 (Thu, 20 May 2021 18:24:51 -0400)
Alex <mysqlstud...@gmail.com>
is rumored to have said:

I'm noticing what I think are a lot of false positives for this rule.

In what way is this a false positive? Looks like a correct positive to
me.

Because it was a legitimate email with an invoice from a pest control
company to their customer.

And it would have been marked as not spam, according to the hits you showed, with the standard threshold value. Were there more hits?

Hitting one rule with a significant positive score is not a false positive per se.

If you disagree with the scoring or purpose of that rule, you are free
to reduce the score locally or discuss it with KAM. He's a very

Nope, just trying to understand.

I think KAM addressed it: Sendgrid has become an objective empirical indicator of spam. Not a perfect indicator, but the whole design theory of SA is that we can put together a lot of imperfect indicators to make the spam/ham judgment.

KAM's
QA is a 100% black box but he makes changes fast when needed.

Yes, and just wanted to be sure that wasn't necessary here.

I don't see any reason that it would be.

Perhaps it's because Return-Path is null?
Return-Path: <>

That's a different problem, apparently with your MTA->SA glue. The fact that something added a non-null "X-Envelope-From:" header and something
(else?) added a null "Return-Path:" header indicates fundamental
breakage. Whether SA is seeing that or if it is a delivery artifact is
unclear.

Perhaps this is a problem with my amavis configuration? It appears all
quarantined messages have a null Return-Path header.

If Amavis is doing the quarantining, it is doing so weirdly but I'd guess that's probably a harmless delivery artifact, in the sense that it is delivering mail to the quarantine with the null Return-Path after SA has seen it. If it is quarantining messages that score less than 2 as suspect spam, that's an unusual configuration choice designed to cause unnecessary false positives.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Reply via email to