David, Thanks a lot. I will try to modify the email text to have more 'meat on the bone'. I am just surprised email with no links, no adds, no attempts to sell anything can be interpreted as a spam. That img in the email is a tag from SendGrid email services used to trace the emails. I don't know if I can get rid of it.
Dianne, I have the same concerns with links in the email. We do train our people how to spot 'funny' emails and to avoid clicking links in the emails unless they are absolutely sure of what they are doing and they still do stupid things. Thank you all. -----Original Message----- From: David B Funk [mailto:dbf...@engineering.uiowa.edu] Sent: Monday, August 07, 2017 7:54 PM To: users@spamassassin.apache.org Subject: Re: Sender needs help with false positive On Mon, 7 Aug 2017, David Jones wrote: [snip..] > This IP is listed on SORBS and Spamhaus ZEN which are going to cause > problems with delivery to many receiving mail filters, not just SpamAssassin. > > http://multirbl.valli.org/lookup/68.192.71.191.html > That's his PC which is the MSA. As it's the first hop, it's not surprising it hits Zen PBL (it should, given a host name like ool-44c047bf.dyn.optonline.net). That shouldn't score against him except in broken SA installations. His problem is the small amount of text that looks like a phish spam and the embedded image. -- Dave Funk University of Iowa <dbfunk (at) engineering.uiowa.edu> College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527 #include <std_disclaimer.h> Better is not better, 'standard' is better. B{
