Maybe I should not ask this, but . . . A relatively innocuous member informational email from a local town Library (monthly) gets marked as spam as shown below. The BAYES_99 and BAYES_999 values are something I am toying with for other reasons. Seems odd these should hit either one of those tests.
So, on the one hand I can add them to whitelist and be done with it, or I can add them to missed HAM for re-learning. Which is the best approach?
X-Spam-Checker-Version: SpamAssassin 3.4.5 (2021-03-20) on elmoid X-Spam-Flag: YES X-Spam-Level: ********* X-Spam-Status: Yes, score=9.9 required=5.0 tests=BAYES_99,BAYES_999, DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU, HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,SPF_HELO_NONE,SPF_SOFTFAIL, T_KAM_HTML_FONT_INVALID autolearn=disabled version=3.4.5 X-Spam-Report: * 4.1 BAYES_99 BODY: Bayes spam probability is 99 to 100% * [score: 1.0000] * 5.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% * [score: 1.0000] * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record * 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level * mail domains are different * 0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) * 0.0 HTML_MESSAGE BODY: HTML included in message * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from * author's domain * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted * Colors in HTML * -0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender Received: . . .[re-dakt-ed]; Thu, 26 Sep 2024 08:05:44 -0400 (EDT) X-Virus-Status: Clean <<<