I've been going through and resetting up SA, trying to get all ham that
has been marked as spam, especially those that have been listed in DCC
and Pyzor, by tuning my 'whitecommon' file in my DCC setup and other
config files such as the Botnet.cf file (haven't actually looked at
Pyzor yet). Below is the markup from an Office Depot ham that was marked
as spam this morning:
Content analysis details: (5.5 points, 5.0 required)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image
area
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK
signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessarily valid
2.2 DCC_CHECK listed in DCC
(http://rhyolite.com/anti-spam/dcc/)
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature
from author's
domain
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
-0.0 DCC_CHECK_NEGATIVE Not listed in DCC
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
0.8 RDNS_NONE Delivered to internal network by a host with
no rDNS
0.3 DIGEST_MULTIPLE Message hits more than one network digest
check
-0.4 AWL AWL: From: address is in the auto white-list
I have this line in my DCC whitecommon file
ok env_from bounce.e.officedepot.com
When tested with 'spamassassin -d -D -t it's not marked as spam and
there is no markup at all added:
Content analysis details: (0.0 points, 5.0 required)
DCC Results are
DCC Brand is
PYZOR Results are
I've put the message here - http://pastebin.com/fhPd96K8
I'm curious as to why there is no markup shown when the message is
tested from the CL.
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
31.11°N 97.89°W (Elev. 1092 ft)
08:25:20 up 1 day, 10:49, 2 users, load average: 0.31, 0.17, 0.19
Ubuntu 14.04.1 LTS, kernel 3.13.0-39-generic
