spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alex <mysqlstud...@gmail.com>
Subject Re: DHL From Russia
Date Fri, 09 Aug 2013 15:27:52 GMT
Hi,

>> 1.6 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
>>                            [62.109.30.143 listed in
>> bb.barracudacentral.org]
>> 1.5 RELAY_RU               Relayed through RU
>> -0.0 SPF_PASS               SPF: sender matches SPF record
>> 2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
>> 0.0 T_HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
>>                            domains are different
>> 0.1 STARS_ON_FORTY_FOOR    URI: contains 4 chars url at end
>> 0.0 HTML_MESSAGE           BODY: HTML included in message
>> 0.5 HTML_TITLE_MISSING     Meta: !__HTML_TITLE_BEGIN && !__HTML_TITLE_END
>> &&
>>                            HTML_MESSAGE
>> 1.3 RDNS_NONE              Delivered to internal network by a host with no
>> rDNS
>> 0.1 HTML_DOCTYPE_MISSING   Meta: !__DOCTYPE_ALL && HTML_MESSAGE
>> 1.3 SAGREY                 Adds score to spam from first-time senders
>
> unfortunately RELAY_IT, RELAY_RU STARS_ON_FORTY_FOOR, STARS_ON_FORTY_SIX and
> SAGREY are not stock rules.  the RCVD_IN_BRBL_LASTEXT and URIBL_BLACK may
> not apply for early recipients.
> you also seem have modified scoresd for URIBL_BLACK, at least what I have
> locally:
>
> 50_scores.cf:score URIBL_BLACK 0 1.775 0 1.725 # n=0 n=2
>
> ... and I have quite actual scores:
> -rw-r--r-- 1 debian-spamd debian-spamd 44575 Aug  9 02:23 50_scores.cf
>
> just noticing...

... and no BAYES?

These looks like the types of messages where either a specific body
pattern would be necessary, or block the IP with postfix.

Regards,
Alex

Mime
View raw message