In addition to my mail just send;
This is the e-mail recieved by the user. Shouldn't "user_in_whitelist" to
score -100 and "user_in_all_spam_to" be also at least more than -1.0?
Spam detection software, running on the system "zoltar.exception.nl", has
identified this incoming email as possible spam. The original message has
been attached to this so you can view it (if it isn't spam) or label similar
future email. If you have any questions, see the administrator of that
system for details.
Content preview: ASCI Technologies maillog 27-09-2005 ASCI Technologies
Filialen in -Assen -Emmen -Enschede -Groningen -Tilburg -en Winschoten
[...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
1.0 MIME_BOUND_RKFINDY Spam tool pattern in MIME boundary (rfkindy)
1.0 X_LIBRARY Message has X-Library header
-1.0 USER_IN_WHITELIST From: address is in the user's white-list
-1.0 USER_IN_WHITELIST_TO User is listed in 'whitelist_to'
-1.0 USER_IN_ALL_SPAM_TO User is listed in 'all_spam_to'
1.0 HTML_60_70 BODY: Message is 60% to 70% HTML
1.0 HTML_BADTAG_00_10 BODY: HTML message is 0% to 10% bad tags
1.0 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
-1.0 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000] 1.0 HTML_TAG_EXIST_MARQUEE
BODY: HTML has "marquee" tag
1.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
1.0 HTML_MESSAGE BODY: HTML included in message
1.0 MPART_ALT_DIFF BODY: HTML and text parts are different
1.0 HTML_NONELEMENT_00_10 BODY: 0% to 10% of HTML elements are
non-standard
1.0 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
-1.6 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus, or
confirm that your address can receive spam. If you wish to view it, it may
be safer to save it to a file and open it with an editor.
Cheers,
Thijs
-----Oorspronkelijk bericht-----
Van: Thijs Koetsier | Exception IT [mailto:[EMAIL PROTECTED]
Verzonden: dinsdag 27 september 2005 20:33
Aan: users@spamassassin.apache.org
Onderwerp: Whitelisted, but marked as spam
Hi all,
I'm having messages marked as spam, for users who are in my whitelist.
In /etc/mail/spamassasin/whitelist.cf are these lines (among others):
all_spam_to [EMAIL PROTECTED]
whitelist_to [EMAIL PROTECTED]
whitelist_to [EMAIL PROTECTED]
Whitelist_from [EMAIL PROTECTED]
(it is this thourough because I didn't get this to work)
However, the user is still getting messages marked as spam, as is show in
the header below.
As you can see, the subject is rewritten with {Spam}, the spam status is
5.4, but below that also is marked as being in the all_spam, whitelist_from
and whitelist_to.
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Tue, 27 Sep 2005 19:17:11 +0200
Received: from Debian-exim by zoltar.exception.nl with spam-scanned (Exim
4.52)
id 1EKJ4o-0001TP-Rn
for [EMAIL PROTECTED]; Tue, 27 Sep 2005 19:17:11 +0200
Received: from localhost by zoltar.exception.nl
with SpamAssassin (version 3.0.4);
Tue, 27 Sep 2005 19:17:11 +0200
From: "User1" <[EMAIL PROTECTED]>
To: "User1" <[EMAIL PROTECTED]>
Subject: {Spam} <ANB5Mail> Maillog 27-09-2005
Date: Tue, 27 Sep 2005 19:17:07 +0200
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
zoltar.exception.nl
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.4 required=5.0 tests=AWL,BAYES_00,HTML_60_70,
HTML_BADTAG_00_10,HTML_MESSAGE,HTML_NONELEMENT_00_10,
HTML_TAG_EXIST_MARQUEE,HTML_TAG_EXIST_TBODY,MIME_BOUND_NEXTPART,
MIME_BOUND_RKFINDY,MIME_HTML_MOSTLY,MPART_ALT_DIFF,
USER_IN_ALL_SPAM_TO,USER_IN_WHITELIST,USER_IN_WHITELIST_TO,X_LIBRARY
autolearn=no version=3.0.4
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_43397E97.410A444D"
Message-Id: <[EMAIL PROTECTED]>
If anyone can enlighten this for me, it would be greatly appreciated!
Cheers,
Thijs
