You can set $sa_tag_level_deflt (different from $sa_tag2_level_deflt) to lower level - mails with scores above $sa_tag_level_deflt will have spam info header added; this header shows how amavis has calculated the score.
On 19 July 2017 at 14:02, Scappatura Rocco <rocco.scappat...@infracom.it> wrote: > Thank you for the answer. > > > > Yes, you are right. Anyway I set ‘$sa_kill_level_deflt = 6.31’ too in > amavis configuration. > > > > I could agree for the differnce of the score of the message assigned by > amavis and the score of the SA test of the quarantined message.. > > > > But, I would like to understand why amavis assigns a so high score (7.946) > to a harmless message .. > > > > Regards, > > > > RS > > > > > > *Da:* amavis-users [mailto:amavis-users-bounces+rocco.scappatura= > infracom...@amavis.org] *Per conto di *Dominic Raferd > *Inviato:* mercoledì 19 luglio 2017 14:28 > *A:* amavis-users@amavis.org > *Oggetto:* Re: R: R: R: R: Message quarantined as SPAM > > > > > > > > On 19 July 2017 at 12:56, Scappatura Rocco <rocco.scappat...@infracom.it> > wrote: > > Hello. > > Even after the changes done to the amavis configuration, I still notice > that some messages has been blocked as SPAM. For example: > > Jul 18 12:04:55 zzz amavis[18242]: (18242-14) Blocked SPAM > {DiscardedInbound,Quarantined}, [195.245.231.137]:39849 [193.67.127.189] < > orderfl...@example.org> -> <iagro...@example.net>, quarantine: > B/spam-BknEtFAN2Yh1.gz, Queue-ID: 31099D5C4B, Message-ID: < > of2b08da46.86f90238-on80258161.00376...@leaseplancorp.net>, mail_id: > BknEtFAN2Yh1, Hits: 7.946, size: 170434, 551 ms > > while the score I get while testing the messages is much lower that > $sa_tag2_level_deflt (1.9 < 6.31): > > ... > > > > Where is the problem? Why the message is tagged as SPAM and quarantined? > > > > It is not $sa_tag2_level_deflt that determines whether message is > quarantined, this only determines whether to add 'spam detected' headers in > the emails. > > > > Score above $sa_kill_level_deflt triggers evasive action (i.e. according > to $spam_quarantine_method). > > > > Also I am not sure you can rely on getting same spam calculation when you > re-test a quarantined email as when it arrives from outside, perhaps this > is why header shows score of 7.946 but retest only 1.9? >
