The messages getting tagged most positively are on a segment of addresses
that are tagged as dynamically assigned addresses, colloquially called
dialup addresses in the anti-spam community. That is what these mean:
RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL
This is good for several points on any spam checking engine if they do
not go through an emailer that vouches for them.
A major question you never answered is whether it is your own site
filtering outbound mail or other sites that are declaring your email
to be spam.
Looking at your own email it comes from a COMCAST cable connection
in Palmer Ranch Florida through the WFGB mailer. The WFGB mailer is
not in SORBS anywhere. YOUR address most certainly is a dialup. So
it WILL get tagged unless your mail goes through a machine that
properly vouches for it. 68.32.0.0/11 (68.32.0.0-68.63.255.255) is
a dynamic IP netblock.
{^_^}
----- Original Message -----
From: "WFGB Team" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <users@spamassassin.apache.org>
Sent: Saturday, May 20, 2006 07:53
Subject: Re: SPAM-LOW: Re: Spam Assassin Detecting our emails as spam
Thank you for all of the suggestions and comments.
[[[[[[[[[[[[[[[[[]]]]]]]]]]]]]]]]]]]]]]]]
A) But probably your server failed to indicate in its received headers that
the mail from the dynamic IP was authenticated, or SA failed to parse the
received header
B) Don't use a dial-up and send direct? {o.o}
C) Read about trusted_networks and internal_networks in the
Mail::SpamAssassin::Conf man page. These parameters go into your
Local.cf configuration file.
[[[[[[[[[[[[[[[[[]]]]]]]]]]]]]]]]]]]]]]]]
[My Replies]
A) There are 4 main things wrong. Is there the error failing to parse the
received header for all of them?
How do I change that if that is the case. I am using smartermail if anyone
is familiar with it.
How do I get SA to parse the received header if that is the case?
I have placed a header below.
B) We are not using a dial-up. What do you mean send direct?
We have an Ip for our server and we have our mail server on the same box
using a different IP.
We have reverse DNS turned on for both IP's.
C) I have been searching for a manual everywhere for Windows. I cannot find
one.
I am on a windows system and do not have access to the man command.
[This header to an email being picked up as spam and below it is the SA
points]
Received: from localhost by Server-Name-Removed
With SpamAssassin (version 3.1.1);
Tue, 16 May 2006 22:26:26 -0500
From: "Spectacular Stuff" <email-address-removed>
To: <[EMAIL PROTECTED]>
Subject: SPAM: Re: your alltel email message
Date: Tue, 16 May 2006 23:25:54 -0400 (Eastern Daylight Time)
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on DEDE143
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.9 required=8.0 tests=AWL,HELO_DYNAMIC_IPADDR
HTML_MESSAGE,HTML_TAG_EXIST_TBODY,NO_DNS_FOR_FROM,RCVD_IN_NJABL_DUL
RCVD_IN_SORBS_DUL autolearn=no version=3.1.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_446A97E2.4BEC0000"
X-SmarterMail-Spam: SPF_None
X-Rcpt-To: <email-address-removed>
[SA Points]
Content analysis details: (9.9 points, 8.0 required)
Pts rule name description
---- ----------------------
--------------------------------------------------
3.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP
addr1)
0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
0.0 HTML_MESSAGE BODY: HTML included in message
2.6 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[68.56.175.199 listed in dnsbl.sorbs.net]
1.7 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[68.56.175.199 listed in combined.njabl.org]
0.1 AWL AWL: From: address is in the auto white-list
Wayne
-------Original Message-------
From: [EMAIL PROTECTED]
Date: 05/20/06 02:46:01
To: spectacularstuff
Cc: users@spamassassin.apache.org
Subject: SPAM-LOW: Re: Spam Assassin Detecting our emails as spam
I have just set up Spam Assassin on our server.
It is working very nicely however whenever we try to send an email from
our
own server to someone else on the same server, it gets picked up as spam.
I am wondering if anyone here has experience with Spam Assassin and can
help
me fix the issues below as I don't know what they mean exactly.
I have spam assassin set to detect at 8 points whether or not an email is
spam. We are way over that because of the following reasons.
What do I have to fix on our server to fix the 4 issues below?
1. We are losing 3.4 points because of HELO_DYNAMIC_IPADDR.
2. We are losing 2.6 points because of NO_DNS_FOR_FROM.
3. We are losing 2.0 points because of RCVD_IN_SORBS_DUL.
4. We are losing 1.7 points because of RCVD_IN_NJABL_DUL.
Hi,
you did not show the full headers - but probably your server failed to
indicate in its
Received headers that the mail from the dynamic ip was authenticated, or SA
failed
to parse the received header
Wolfgang Hamann
