On Sonntag 03 Mai 2009 Benny Pedersen wrote: > use whitelist_from_spf to turn it into a ham msg
That's the wrong way. The mail has *nothing* to do with spam nor VALIUM, but fires 3 Valium Rules and FUZZY_CREDIT, and ALL of them are false positives. I know I can change scores or do other nifty stuff, but when rules misfire it's a bug and needs a fix. > > 0.0 DKIM_SIGNED Domain Keys Identified Mail: message has > > a signature > > where is dkim header ? It was there in the original mail, I've double checked. This mail was forwarded from Outlook so no headers avail, but I looked into other messages. Also, the text itselfs reveals it's a real message from PayPal. > > 1.6 FRT_VALIUM1 BODY: ReplaceTags: Valium > > 0.0 FUZZY_VLIUM BODY: Attempt to obfuscate words in > > spam 1.3 FRT_VALIUM2 BODY: ReplaceTags: Valium (2) > > 2.0 TRACKER_ID BODY: Beinhaltet eine Identitätsnummer > > zur Nutzerbeobachtung > > 1.2 FUZZY_CREDIT BODY: Attempt to obfuscate words in > > spam -3.6 BAYES_00 BODY: Spamwahrscheinlichkeit nach > > Bayes- Test: 0-1% [score: 0.0000] > > 0.0 HTML_MESSAGE BODY: Nachricht enthält HTML > > 0.7 MPART_ALT_DIFF BODY: Nachrichtentext im Text- und > > HTML- Format unterscheiden sich > > 1.4 MIME_QP_LONG_LINE RAW: "quoted-printable"-kodierte Zeile > > länger als 76 Zeichen > > 0.1 AWL AWL: From: address is in the auto > > white-list > > and no dkim whitelist, so its spam or forged I can guarantee it's origin, and it's not spam nor forged. mfg zmi -- // Michael Monnerie, Ing.BSc ----- http://it-management.at // Tel: 0660 / 415 65 31 .network.your.ideas. // PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import" // Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4 // Keyserver: wwwkeys.eu.pgp.net Key-ID: 1C1209B4
signature.asc
Description: This is a digitally signed message part.