RobertH wrote: > hello > > i have problems with the cabletv.org email list. > > it is hosted on a charter static and has wierd reverse dns etc etc blah. > > so, almost always scores as spam.... > > here is what it is tripping on... > > 0.7 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d > 1.2 HOST_EQ_STATIC HOST_EQ_STATIC > 0.7 FH_HOST_EQ_D_D_D_DB Host is d-d-d-d > 1.3 HOST_EQ_CHARTER HOST_EQ_CHARTER > 1.9 TVD_RCVD_IP TVD_RCVD_IP > 0.5 FROM_NOT_REPLYTO From: does not match Reply-To: > -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% > [score: 0.0000] > 1.5 SAGREY Adds 1.0 to spam from first-time senders > > pastebin said the headers tripped the spam filter so i have to post this > way... > > here are some headers. > > http://www.abbacomm.net/temp/salisthdr1.txt > > can someone help me formulate a good rule to reduce scoring. > > i tried this, yet it is obviously not working because of my faulty logic i > presume. > > header SPEC_DOMAIN_CABLE From =~ /\...@cabletv\.org/ > describe SPEC_DOMAIN_CABLE Reduce score for domain cabletv.org > score SPEC_DOMAIN_CABLE -5.0 > > i am looking for something reliable to key on and i am certainly not a rule > creation expert yet... > > ..and i need help from you much more expert people please? > Try using To instead of From
Unless SpamAssassin has visibility of the envelope information added to the headers, it won't know the messages are From cabletv.org. Not all setups allow for this. Most notably, any MTA level integration usually has to take extra steps to add this information to the copy of the message SA gets, then remove it before passing it on. Of course, adding SA visibility of the envelope from, is good, but switching to To will at least prove out the theory. Also, make sure spamassassin --lint runs quietly, and doesn't have any complaints that need fixing.