On 11/22/2011 3:25 AM, ercibrest wrote: > need to see the rule hits for the negative scores.. > > also I don't see any RBL, URIBL, pyzor or razor scores in there, have you > disabled network tests? these are really valuable - just make sure you > only choose a couple of the RBL's (see > http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassinfor > some ideas - it's a little outdated but still usefull I think) > > you can see here example of spam not found : > my server is mailhost.estaim.fr
Then why is the SpamAssassin scanning being done on ecisnet196.ec-is.net? > Received: from ecisnet196.ec-is.net (ecisnet196.ec-is.net [62.62.128.89]) > by mailhost.estaim.fr (Postfix) with ESMTP id A4FBE1DACB3 > for <si...@lequar.com>; Tue, 22 Nov 2011 09:08:06 +0100 (CET) > X-Spam-Processed: ecisnet196.ec-is.net, Tue, 22 Nov 2011 09:07:25 +0100 > X-Spam-Level: > X-Spam-Status: No, score=-3.9 required=6.0 tests=BAYES_00,FROM_12LTRDOM, > RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP shortcircuit=no > autolearn=ham > version=3.3.2 > X-Spam-Report: > * -4.7 BAYES_00 BODY: Bayes spam probability is 0 to 1% > * [score: 0.0000] > * 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS > * 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO > * 0.0 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP > * 0.0 FROM_12LTRDOM From a 12-letter domain > X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) > Received: from hmxc4jwwtbg1d.52vmcohn.ouicamrsfi ([180.254.164.165]) > by ecisnet196.ec-is.net (ecisnet196.ec-is.net) > (MDaemon PRO v12.5.1) > with ESMTP id 34-md50000095393.msg > for <si...@lequar.com>; Tue, 22 Nov 2011 09:07:24 +0100 > X-MDOP-RefID: str=0001.0A0B0207.4ECB583D.00C0,ss=1,fgs=0 (_st=1 _vt=0 > _iwf=0) > X-Rcpt-To: si...@lequar.com > X-MDRcpt-To: si...@lequar.com > X-MDRemoteIP: 180.254.164.165 > X-Envelope-From: elizash...@archwireless.net > From: "HilaryLavone" <elizash...@archwireless.net> > Message-ID: <4ecb65f1.a8731...@archwireless.net> > Date: Tue, 22 Nov 2011 10:05:53 +0100 > MIME-Version: 1.0 > Subject: 4wpa7h > To: <si...@lequar.com> > Content-Type: text/plain; charset=iso-8859-1 > Content-Transfer-Encoding: 7bit > X-Return-Path: <elizash...@archwireless.net> > X-MDaemon-Deliver-To: <si...@lequar.com> > From: elizash...@archwireless.net [Add to Whitelist | Add to Blacklist] > The only thing I see here is that your Bayes database appears to be mistrained. It is scoring this message as BAYES_00, which means "definitely not spam". At a minimum, you need to manually learn any messages that are being scored the wrong way with Bayes. If this is happening with all of your spam, you may want to just delete the Bayes db completely and start over. In order to give any more useful feedback, we would need to see the entire message. Rather than sending it to the list, please put it in pastebin.com and give us the link. Also, when a message ends with a signature that starts with two dashes (like mine below), please delete the signature in your reply rather than replying below it. The two dashes indicate the start of a signature and quite a few mail clients will automatically remove anything below that when replying. -- Bowie
