Return-Path: <users-return-115589-archive-asf-public=cust-asf.ponee.io@spamassassin.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id 911C4200CE5
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Sun,  6 Aug 2017 20:47:25 +0200 (CEST)
Received: by cust-asf.ponee.io (Postfix)
	id 8F784164302; Sun,  6 Aug 2017 18:47:25 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id D2ABD164300
	for <archive-asf-public@cust-asf.ponee.io>; Sun,  6 Aug 2017 20:47:24 +0200 (CEST)
Received: (qmail 40708 invoked by uid 500); 6 Aug 2017 18:47:23 -0000
Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:users-help@spamassassin.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@spamassassin.apache.org>
List-Post: <mailto:users@spamassassin.apache.org>
List-Id: <users.spamassassin.apache.org>
Delivered-To: mailing list users@spamassassin.apache.org
Delivered-To: moderator for users@spamassassin.apache.org
Received: (qmail 42750 invoked by uid 99); 6 Aug 2017 17:37:43 -0000
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 2.313
X-Spam-Level: **
X-Spam-Status: No, score=2.313 tagged_above=-999 required=6.31
	tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_NONE=-0.0001,
	URI_HEX=1.313] autolearn=disabled
Date: Sun, 6 Aug 2017 10:37:36 -0700 (MST)
From: Scott <techlist06@msxc.com>
To: users@spamassassin.apache.org
Message-ID: <1502041056760-137946.post@n5.nabble.com>
Subject: Logwatch from local machine being flagged as spam
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
archived-at: Sun, 06 Aug 2017 18:47:25 -0000

Centos7
Posftfix 3.2.2
Amavisd 2.11.0
spamassassin-3.4.0

I have a logwatch output that gets mailed to me daily.  Spamassassin is
scoring it high enough as exceed my threshold for whacking it as spam.  

While this is not good, I'm concerned I have something fundamental
misconfigured where it would flag anything internal at all.  Bayes is not
being used yet (tokens <200).  What is the proper way to allow messages form
the server itself to not get flagged by SA?

I have the server's IP address (y.y.y.y) in my lists of trusted and internal
as so:
trusted_networks xx.xx.xx.xx
trusted_networks y.y.y.y
trusted_networks z.z.z.z

internal_networks xx.xx.xx.xx
internal_networks y.y.y.y
internal_networks z.z.z.z

I don't see that that made any difference.  Shouldn't it have?

Header of intercepted message:

From MAILER-DAEMON  Sun Aug  6 04:02:19 2017
Return-Path: <>
X-Original-To: spam@myserver.com
Delivered-To: spam@myserver.com
X-Envelope-From: <root@mail2.myserver.com>
X-Envelope-To: <root@mail2.myserver.com>
X-Envelope-To-Blocked: <root@mail2.myserver.com>
X-Quarantine-ID: <oadqecN-93HM>
X-Spam-Flag: YES
X-Spam-Score: 7.332
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.332 tag=-9999 tag2=5 kill=6.4
        tests=[NORMAL_HTTP_TO_IP=0.001, NO_RELAYS=-0.001,
        URIBL_ABUSE_SURBL=1.948, URIBL_BLACK=1.7, URIBL_DBL_SPAM=2.5,
        URIBL_GREY=1.084, URIBL_SBL_A=0.1] autolearn=no autolearn_force=no
To: root@mail2.myserver.com
From: logwatch@mail2.myserver.com
Subject: Logwatch for mail2.myserver.com (Linux)
Auto-Submitted: auto-generated
Precedence: bulk
Content-Type: text/plain; charset="iso-8859-1"
Date: Sun,  6 Aug 2017 04:02:03 -0500 (CDT)




--
View this message in context: http://spamassassin.1065346.n5.nabble.com/Logwatch-from-local-machine-being-flagged-as-spam-tp137946.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.