spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bowie Bailey <Bowie_Bai...@BUC.com>
Subject Re: Negative score spamassassin
Date Tue, 22 Nov 2011 14:26:57 GMT
On 11/22/2011 3:25 AM, ercibrest wrote:
> need to see the rule hits for the negative scores..
>
> also I don't see any RBL, URIBL, pyzor or razor scores in there, have you
> disabled network tests?  these are really valuable - just make sure you
> only choose a couple of the RBL's (see
> http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassinfor
> some ideas - it's a little outdated but still usefull I think)
>
> you can see here example of spam not found :
> my server is mailhost.estaim.fr

Then why is the SpamAssassin scanning being done on ecisnet196.ec-is.net?

> Received: from ecisnet196.ec-is.net (ecisnet196.ec-is.net [62.62.128.89])
>      by mailhost.estaim.fr (Postfix) with ESMTP id A4FBE1DACB3
>      for <silva@lequar.com>; Tue, 22 Nov 2011 09:08:06 +0100 (CET)
> X-Spam-Processed: ecisnet196.ec-is.net, Tue, 22 Nov 2011 09:07:25 +0100
> X-Spam-Level: 
> X-Spam-Status: No, score=-3.9 required=6.0 tests=BAYES_00,FROM_12LTRDOM,
>      RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP shortcircuit=no
> autolearn=ham
>      version=3.3.2
> X-Spam-Report: 
>      * -4.7 BAYES_00 BODY: Bayes spam probability is 0 to 1%
>      * [score: 0.0000]
>      * 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
>      * 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
>      * 0.0 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
>      * 0.0 FROM_12LTRDOM From a 12-letter domain
> X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06)
> Received: from hmxc4jwwtbg1d.52vmcohn.ouicamrsfi ([180.254.164.165])
>      by ecisnet196.ec-is.net (ecisnet196.ec-is.net)
>      (MDaemon PRO v12.5.1)
>      with ESMTP id 34-md50000095393.msg
>      for <silva@lequar.com>; Tue, 22 Nov 2011 09:07:24 +0100
> X-MDOP-RefID: str=0001.0A0B0207.4ECB583D.00C0,ss=1,fgs=0 (_st=1 _vt=0
> _iwf=0)
> X-Rcpt-To: silva@lequar.com
> X-MDRcpt-To: silva@lequar.com
> X-MDRemoteIP: 180.254.164.165
> X-Envelope-From: elizashirl@archwireless.net
> From: "HilaryLavone" <elizashirl@archwireless.net>
> Message-ID: <4ecb65f1.a8731fe2@archwireless.net>
> Date: Tue, 22 Nov 2011 10:05:53 +0100
> MIME-Version: 1.0
> Subject: 4wpa7h
> To: <silva@lequar.com>
> Content-Type: text/plain; charset=iso-8859-1
> Content-Transfer-Encoding: 7bit
> X-Return-Path: <elizashirl@archwireless.net>
> X-MDaemon-Deliver-To: <silva@lequar.com> 
> From: elizashirl@archwireless.net [Add to Whitelist | Add to Blacklist] 
>

The only thing I see here is that your Bayes database appears to be
mistrained.  It is scoring this message as BAYES_00, which means
"definitely not spam".  At a minimum, you need to manually learn any
messages that are being scored the wrong way with Bayes.  If this is
happening with all of your spam, you may want to just delete the Bayes
db completely and start over.

In order to give any more useful feedback, we would need to see the
entire message.  Rather than sending it to the list, please put it in
pastebin.com and give us the link.

Also, when a message ends with a signature that starts with two dashes
(like mine below), please delete the signature in your reply rather than
replying below it.  The two dashes indicate the start of a signature and
quite a few mail clients will automatically remove anything below that
when replying.

-- 
Bowie

Mime
View raw message