> > Ah. Okay. You might also be able to look up the Message-ID in > /var/log/maillog, if you're using spamd. >
Didn't think of that. Here is the corresponding spam result for the pastbin entry (http://pastebin.com/m51fd9344) <503bb52.5...@biblegame.info> Aug 19 14:53:10 hsoakmsa03l02 spamd[28319]: spamd: processing message <503bb52.5...@biblegame.info> for filter:124 Aug 19 14:53:10 hsoakmsa03l02 spamd[28319]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,SPF_HELO_SOFTFAIL,URIBL_BLACK,URIBL_RHS_DOB scantime=0.1,size=4525,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=58357,mid=<503bb52.5...@biblegame.info>,bayes=0.499430,autolearn=no +----------------+ | spam_threshold | +----------------+ | 7 | +----------------+ Here are some more from the same set/type of senders. Aug 19 14:39:46 hsoakmsa03l02 spamd[28319]: spamd: result: Y 2 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_RHS_DOB scantime=0.2,size=4584,user=filter,uid=124, required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=37185,mid=<1359ae2.5...@parishstore.info>,bayes=0.490932,autolearn=no Aug 19 14:45:18 hsoakmsa03l02 spamd[28319]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RHS_DOB scantime=0.2,size=4516,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=33643,mid=<509800d.5...@biblegame.info>,bayes=0.498825,autolearn=no Aug 19 14:46:52 hsoakmsa03l02 spamd[28319]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,SPF_HELO_SOFTFAIL,URIBL_BLACK,URIBL_RHS_DOB scantime=0.1,size=4511,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=33664,mid=<2b19fe.5...@apostlesblog.info>,bayes=0.499484,autolearn=no Aug 19 14:48:58 hsoakmsa03l02 spamd[29369]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RHS_DOB scantime=4.0,size=4610,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=54478,mid=<1359ae2.5...@parishstore.info>,bayes=0.490647,autolearn=no Aug 19 14:50:54 hsoakmsa03l02 spamd[28319]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RHS_DOB scantime=0.1,size=4554,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=54515,mid=<5b96444.5...@parishstore.info>,bayes=0.446187,autolearn=no Aug 19 14:53:10 hsoakmsa03l02 spamd[28319]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,SPF_HELO_SOFTFAIL,URIBL_BLACK,URIBL_RHS_DOB scantime=0.1,size=4525,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=58357,mid=<503bb52.5...@biblegame.info>,bayes=0.499430,autolearn=no Aug 19 14:53:11 hsoakmsa03l02 spamd[28319]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,SPF_HELO_SOFTFAIL,URIBL_BLACK,URIBL_RHS_DOB scantime=0.1,size=5905,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=58363,mid=<503bb52.5...@biblegame.info>,bayes=0.496882,autolearn=no Aug 19 14:53:43 hsoakmsa03l02 spamd[28319]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RHS_DOB scantime=0.1,size=4579,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=58369,mid=<5b96444.5...@parishstore.info>,bayes=0.446202,autolearn=no Aug 19 14:55:38 hsoakmsa03l02 spamd[28319]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,SPF_HELO_SOFTFAIL,URIBL_BLACK,URIBL_RHS_DOB scantime=0.2,size=4508,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=58422,mid=<2b19fe.5...@biblegame.info>,bayes=0.499487,autolearn=no Aug 19 14:56:17 hsoakmsa03l02 spamd[28319]: spamd: result: Y 5 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,RDNS_NONE,SPF_HELO_SOFTFAIL,URIBL_BLACK,URIBL_RHS_DOB scantime=0.2,size=4545,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=58442,mid=<1a25f92.5...@biblegame.info>,bayes=0.498743,autolearn=no Aug 19 14:58:42 hsoakmsa03l02 spamd[28319]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RHS_DOB scantime=0.2,size=4594,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=52316,mid=<1a25f92.5...@parishstore.info>,bayes=0.487605,autolearn=no Aug 19 15:03:11 hsoakmsa03l02 spamd[28319]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RHS_DOB scantime=0.2,size=4543,user=filter,uid=124,required_score=0.0,rhost=10.80.65.9,raddr=10.80.65.9,rport=53097,mid=<509800d.5...@biblegame.info>,bayes=0.498828,autolearn=no This servers average scores (not too many domains going through this one right now). Count Score 3 -1 267 -10 47 -11 26 -12 22 -13 53 -14 7 -15 9 -16 8 -17 6 -18 10 -19 2 -2 4 -20 2 -21 2 -23 5 -3 6 -4 3 -5 4 -6 39 -7 45 -8 108 -9 17 0 29 1 23 10 14 11 23 12 18 13 29 14 37 15 37 16 31 17 48 18 13 19 24 2 24 20 22 21 18 22 9 23 3 24 14 25 7 26 4 27 3 28 32 3 38 4 85 5 24 6 43 7 25 8 22 9
