On 2014-01-14 16:30, Larry Rosenman wrote:
I just had 3 messages that are HAM that hit TVD_PH_BODY_META=3.625 and
got marked as SPAM.....
The text contents are: [quote]
This message confirms your deposit of $70.94 has been approved and
processed. Funds could take up to two business days to post to your
account.
Please do not destroy the deposited check yet. Refer to our Check
Handling Procedures for check destruction guidance at
www.goamplify.com/FAQ.
Please do not respond to this message or send email to this address.
This message is for information purposes only.
Thank you,
Amplify Credit Union
NOTICE OF CONFIDENTIALITY: This e-mail message, including any
attachments, is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not
the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message.
[/quote]
Headers:
[quote]
Return-path: <bou...@goamplify.com>
Envelope-to: pare...@lerctr.org
Delivery-date: Tue, 14 Jan 2014 01:13:00 -0600
Received: from 209-99-54-7.fwd.datafoundry.com ([209.99.54.7]:23535
helo=webmail.goamplify.com)
by thebighonker.lerctr.org with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82 (FreeBSD))
(envelope-from <bou...@goamplify.com>)
id 1W2yBH-0009Pf-3d
for pare...@lerctr.org; Tue, 14 Jan 2014 01:13:00 -0600
Received: from CubusApp.ibmtefcu.org (192.168.235.83) by
ExternalRelay.ibmtefcu.org (192.168.235.148) with Microsoft
SMTP
Server id
14.2.328.9; Tue, 14 Jan 2014 01:12:47 -0600
Message-ID: <44210-22014121471244...@goamplify.com>
X-EM-Version: 6, 0, 0, 3
X-EM-Registration: #0030630810D01800AA20
From: cumail <cum...@goamplify.com>
To: pare...@lerctr.org
Subject: AMPLIFY Email Alert: Account Balance
Date: Tue, 14 Jan 2014 01:12:44 -0600
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
X-Spam-Score: 1.1 (+)
X-LERCTR-Spam-Score: 1.1 (+)
X-Spam-Report: SpamScore (1.1/5.0)
BAYES_00=-1.9,EL_STATIC=2,RDNS_DYNAMIC=0.982,TVD_RCVD_IP=0.001
X-LERCTR-Spam-Report: SpamScore (1.1/5.0)
BAYES_00=-1.9,EL_STATIC=2,RDNS_DYNAMIC=0.982,TVD_RCVD_IP=0.001
[/quote]
I've already asked the CU to get VALID reverse DNS for their relay,
but what else should I or they do here
to not hit the rule, or is the rule (which is too complicated for me
to understand atm) too aggressive for this case?
Thanks!
Whoops, wrong headers....
[quote]
Here's the right ones.
Return-path: <amplifymob...@goamplify.com>
Envelope-to: l...@lerctr.org
Delivery-date: Tue, 14 Jan 2014 15:20:57 -0600
Received: from [173.227.169.138] (port=26985
helo=webmail2.goamplify.com)
by thebighonker.lerctr.org with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82 (FreeBSD))
(envelope-from <amplifymob...@goamplify.com>)
id 1W3BPs-000JZi-16
for l...@lerctr.org; Tue, 14 Jan 2014 15:20:57 -0600
Received: from Tweety03 (192.168.199.67) by ExternalRelayDR.ibmtefcu.org
(192.168.220.148) with Microsoft SMTP Server id 14.2.328.9; Tue,
14
Jan 2014
15:20:45 -0600
MIME-Version: 1.0
From: amplifymob...@goamplify.com
To: l...@lerctr.org
Date: Tue, 14 Jan 2014 15:20:45 -0600
Subject: Amplify Mobile Deposit
Content-Type: multipart/alternative;
boundary="--boundary_12747_6699b0bf-fd0f-4cc3-bd2d-fbd3e23ff55e"
Message-ID:
<23e38f7e-b5a5-4eed-83bb-bee9fc64e...@angeliadr.ibmtefcu.org>
X-Spam-Score: 5.2 (+++++)
X-LERCTR-Spam-Score: 5.2 (+++++)
X-Spam-Report: SpamScore (5.2/5.0)
BAYES_50=0.8,HTML_MESSAGE=0.001,RDNS_NONE=0.793,TVD_PH_BODY_META=3.625
X-LERCTR-Spam-Report: SpamScore (5.2/5.0)
BAYES_50=0.8,HTML_MESSAGE=0.001,RDNS_NONE=0.793,TVD_PH_BODY_META=3.625
X-Spam-Flag: YES
X-LERCTR-Spam-Flag: YES
[/quote]
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: l...@lerctr.org
US Mail: 108 Turvey Cove, Hutto, TX 78634-5688
