Hi, I've been going through the quarantine, looking for spam with low bayes numbers, and have found a few. I'm not sure enough to make me think the database is screwed up, but I hoped someone could take a look at the below header.
It appears to be just a basic marketing email, but happens to have a URL that's listed in a few blocklists. So my question is, should bayes be able to distinguish this marketing as junk? Do you have rules that are effective on content such as this? I've put the whole email here http://pastebin.com/B2hcMa5R Return-Path: <> Delivered-To: spam-quarantine X-Envelope-From: <cont...@skillfulmarketerpartners.com> X-Envelope-To: <jason.ev...@example.com> X-Envelope-To-Blocked: <jason.ev...@example.com> X-Quarantine-ID: <jHfSRPcXOmf8> X-Spam-Flag: YES X-Spam-Score: 7.17 X-Spam-Level: ******* X-Spam-Status: Yes, score=7.17 tag=-200 tag2=5 kill=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FSL_BULK_SIG=0.136, HTML_MESSAGE=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.886, RAZOR2_CHECK=0.922, RCVD_IN_BRBL_LASTEXT=1.449, RELAYCOUNTRY_US=0.01, RP_MATCHES_RCVD=-0.001, SAGREY=0.01, SPF_PASS=-0.001, URIBL_JP_SURBL=1.25, URIBL_WS_SURBL=1.608] autolearn=no autolearn_force=no X-Spam-Report: * 1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: skillfulmarketerpartners.com] * 1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: skillfulmarketerpartners.com] * 1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available. * [45.57.153.186 listed in bb.barracudacentral.org] * 0.0 RELAYCOUNTRY_US Relayed through United States * -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain * -0.0 SPF_PASS SPF: sender matches SPF record * 0.0 HTML_MESSAGE BODY: HTML included in message * -0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5% * [score: 0.0458] * 0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * 1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's * domain * 0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe * 0.0 SAGREY Adds 0.01 to spam from first-time senders X-Spam-RelaysUntrusted: [ ip=45.57.153.186 rdns=mail2.skillfulmarketerpartners.com helo=mail2.skillfulmarketerpartners.com by=mail01.example.com ident= envfrom= intl=0 id=C4C792AE019 auth= msa=0 ] [ ip=50.243.47.234 rdns= helo=Task01 by=epcl2mta01 ident= envfrom=cont...@skillfulmarketerpartners.com intl=0 id=87/82-04587-DEFB4D55 auth= msa=0 ] Authentication-Results: mail01.example.com (amavisd-new); dkim=pass (1024-bit key) header.d=skillfulmarketerpartners.com Received: from mail01.example.com ([127.0.0.1]) by localhost (mail01.example.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jHfSRPcXOmf8 for <jason.ev...@example.com>; Wed, 19 Aug 2015 13:42:58 -0400 (EDT) X-Greylist: from auto-whitelisted by SQLgrey-1.8.0 Received: from mail2.skillfulmarketerpartners.com (mail2.skillfulmarketerpartners.com [45.57.153.186]) by mail01.example.com (Postfix) with ESMTP id C4C792AE019 for <jason.ev...@example.com>; Wed, 19 Aug 2015 13:42:58 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/simple; d=skillfulmarketerpartners.com; s=s1024; t=1440006125; bh=gXCwiZ0QNCvZOZNtGtLmfsCzBrI=; h=Date:Message-ID:Content-Type:Subject:From:To; b=aBxcIz7VRjdaH+VwE8eeNA8uZBORESabL8jO2HNGawThXIdw0HnfvNQEM9YlgsK+/ qoaFoq22NRsZ3uPofbynEmUGB+wlK9AvaiKeXAC7+kx0k+OsOvm/25diHkbhV+9bMI S1Hp5ytOoc1b9t0zFZT8+eXlgswo20p01gJQ05UQ= Received: from [50.243.47.234] ([50.243.47.234:60593] helo=Task01) by epcl2mta01 (envelope-from <cont...@skillfulmarketerpartners.com>) (ecelerity 3.6.9.48312 r(Core:3.6.9.0)) with ESMTP id 87/82-04587-DEFB4D55; Wed, 19 Aug 2015 13:42:05 -0400 MIME-Version: 1.0 Date: Wed, 19 Aug 2015 13:42:48 -0400 Message-ID: <C65C0F0D401D8ACE33868589AE71DA40A435D548@TASK01> Content-Type: multipart/alternative; boundary="------------080400010204070908020801" X-Priority: 3 (Normal) Subject: Double B2B Landing Page Conversions - 8 Best Practices From: "Skillful Marketer" <cont...@skillfulmarketerpartners.com> To: jason.ev...@example.com Thanks, Alex
