On Thu, 12 Aug 2021, Lukasz Maik wrote:
Dear John,
Sure, please find full tests results here:
https://www.mail-tester.com/test-bw02eaxrt
We've lost a point for not having DKIM/DMARC authentication, which is
unfortunately not supported by our hosted exchange.
That's not something SA scores for.
We also lost 0.5 point for not having alt attribute in the images, so we will
add it.
That's also not something SA scores for. The above problems are things
mail-tester thinks you can do to improve your message, independent of
whatever SA thinks of it.
The net SA score for that test message is 0.644 points, which is well
under the default spam threshold of 5 points.
This is in the headers in that test message:
X-Spam-Status: No/0.7/5.0
"No".
I agree with Bill's comments regarding www.mail-tester.com, and echo that
"www.naadac.org" is not listed at SBL.
Total is 7.8/10.
Meaningless.
The problem, when user is sending normal work e-mails, recipients are
finding those messages in the Junk Email folder. Even people with who he
was previously working before.
If we could see one of *those* mails (which was quarantined in a
production environment versus analyzed in a misconfigured and stale
theoretical environment), with all headers intact (<- this is important),
then we might be able to tell you why it ended up there.
Kind Regards
Lukas
-----Original Message-----
From: John Hardin <jhar...@impsec.org>
Sent: Thursday, August 12, 2021 5:43 AM
To: users@spamassassin.apache.org
Subject: Re: Question about whitelisting of naadac.org
On Wed, 11 Aug 2021, Lukasz Maik wrote:
Hi All,
The company naadac.org is experiencing problems with their e-mails
being marked as SPAM, when they are putting link to their domain
https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.naadac.org%2F&data=04%7C01%7CLukasz.Maik%40ricoh-europe.com%7Cd9ba04e2fffa42bd4b1b08d95d435fec%7Cdd29478d624e429eb453fffc969ac768%7C0%7C0%7C637643367114945933%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=IkcJvzYcpJvlUWr3l%2FzGbvD3IbSSaeia66LNwTjOj60%3D&reserved=0
in the signature of their mails.
Is it possible to whitelist this domain/link in your SPAM filtering?
Results from the mail-tester.com tool are available below:
[cid:image001.png@01D78EFB.CD78CAE0]
0.644 points is not sufficient to mark a message as spam using the default
scoring, and isn't worth hitting the panic button. If it's being marked as spam
by some recipients, there are other reason(s). Is this analysis the only thing
you are basing your analysis on?
As Kenneth said, contact Spamhaus regarding why that domain is listed.
In order to offer more advice, we would have to see the results from a site
that is actually marking such a message as spam (i.e. where it's scoring 5 or
more points).
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...every time I sit down in front of a Windows machine I feel as
if the computer is just a place for the manufacturers to put their
advertising. -- fwadling on Y! SCOX
-----------------------------------------------------------------------
Today: the 900th anniversary of the muslim Seljuq defeat at Didgori