why are not all rules run all the time

2021-10-08 Thread Thomas Seilund
Hi All I run SA 3.4.2 on Debian GNU/Linux 10 (buster) If I look at incomming mails after SA has processed the incomming mail then the list of SA rules that have been run is not the same for all mails. Below are to examples: X-Spam-Status: No, score=-2.0 required=2.0 tests=BAYES_00,DKIM_SIGNE

Re: why are not all rules run all the time

2021-10-08 Thread Matus UHLAR - fantomas
On 08.10.21 11:18, Thomas Seilund wrote: I run SA 3.4.2 on Debian GNU/Linux 10 (buster) If I look at incomming mails after SA has processed the incomming mail then the list of SA rules that have been run is not the same for all mails. Below are to examples: X-Spam-Status: No, score=-2.0 req

Re: why are not all rules run all the time

2021-10-08 Thread Thomas Seilund
On 10/8/21 11:38 AM, Matus UHLAR - fantomas wrote: On 08.10.21 11:18, Thomas Seilund wrote: I run SA 3.4.2 on Debian GNU/Linux 10 (buster) If I look at incomming mails after SA has processed the incomming mail then the list of SA rules that have been run is not the same for all mails. Bel

Re: why are not all rules run all the time

2021-10-08 Thread Bert Van de Poel
DNSWL is a whitelist for mailservers. So the tests based on that use the IP that handed your trusted_networks the email. Several tests are based on the transmitting server instead of just the email contents, since contents can be convincing or not, if the server is notorious for sending spam i

Re: why are not all rules run all the time

2021-10-08 Thread Thomas Seilund
On 10/8/21 12:00 PM, Reindl Harald wrote: Am 08.10.21 um 11:18 schrieb Thomas Seilund: Hi All I run SA 3.4.2 on Debian GNU/Linux 10 (buster) If I look at incomming mails after SA has processed the incomming mail then the list of SA rules that have been run is not the same for all mails.

Re: why are not all rules run all the time

2021-10-08 Thread Anthony Cartmell
> Is it so that the list of rules only show rules that contribute to the score? Yes, only rules that contributed to the spam score are listed. > What do you mean by a rule did not match? SpamAssassin has hundreds/thousands of rules, each one looking at some aspect of the email message. If the

Difference is score when mail is received by Postfix and when tested from the command line

2021-10-08 Thread Thomas Seilund
Dear all If I look at the score reported from within my mail client Thunderbird I see this section: X-Spam-Status: No, score=2.9 required=3.0 tests=BAYES_50,HTML_MESSAGE, HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK autolearn=no autolearn_force=no version=3.4.2 If I run th

Re: Difference is score when mail is received by Postfix and when tested from the command line

2021-10-08 Thread Kevin A. McGrail
Hi Thomas, needing to lower your score to two or three implies To me that your system could use some tweaking. In particular I would guess that your Bayesian tokens need to be cleared. As for the different scores, you would have to know the way that spamassassin is being used on your system. For

Re: Difference is score when mail is received by Postfix and when tested from the command line

2021-10-08 Thread Benny Pedersen
On 2021-10-08 13:24, Thomas Seilund wrote: X-Spam-Status: No, score=2.9 required=3.0 tests=BAYES_50,HTML_MESSAGE, autolearn=no autolearn_force=no version=3.4.2 X-Spam-Status: Yes, score=7.4 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESS

Re: Difference is score when mail is received by Postfix and when tested from the command line

2021-10-08 Thread Benny Pedersen
On 2021-10-08 13:32, Kevin A. McGrail wrote: Hi Thomas, needing to lower your score to two or three implies To me that your system could use some tweaking. In particular I would guess that your Bayesian tokens need to be cleared. X-Spam-Status: Yes, score=7.0 required=5.0 tests=HTML_MESSAGE,

Re: why are not all rules run all the time

2021-10-08 Thread Kenneth Porter
--On Friday, October 08, 2021 2:04 PM +0200 Thomas Seilund wrote: When you say a rule hits do you then mean that the rule contribute to the score? Can a rule hit and contribute with a value of zero to the score? Setting a rule's score to zero (eg. in local.cf) disables the rule. This is how