Justin wrote: > Thanks Gary, > My SA version is 3.1.8 on redhat. > Amavisd-new version 2.4.5 > I couldn't find the yahoo score on /usr/share/spamassassin/50_scores.cf
> Spam scores are: > X-Spam-Flag: YES > X-Spam-Score: 6.116 > X-Spam-Level: ****** > X-Spam-Status: Yes, score=6.116 tagged_above=-999 required=5 > tests=[BIZ_TLD=1.169, DNS_FROM_RFC_ABUSE=0.479, > DNS_FROM_RFC_POST=1.44, DNS_FROM_RFC_WHOIS=0.879, HTML_10_20=0.945, > HTML_MESSAGE=0.001, MAILTO_TO_SPAM_ADDR=0.276, > MSGID_FROM_MTA_ID=0.927] > I do not know if I am on the right track to 0 out yahoo scores. > Thanks again. > Justin Hmm. It looks like 3.2.0 removed these three DNS_FROM_RFC_* rules. If I recall, Yahoo will trigger these. You might consider: score DNS_FROM_RFC_POST 0 It's the the fact that the message had a dot biz URL in it that sent this one over the top - but still, if this really is from Yahoo then it would score pretty high regardless - seems not fair. Senders can help by not using HTML. I would also look in maillog and determine who the envelope sender was and put the sender in @score_sender_maps with a negative score (like -3). Gary V ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/