Hello,
I have had a wonderful experience filtering spam with spamassassin.
However, within the past few weeks (since feb 7th, I think), I have gotten
a number of messages that have been normal but marked as spam.
It may be those that I am speaking with and what they do to their mail,
then again, maybe not.
I'm attaching a message I got from firefly, a Chinese company. I have
more samples, but I'm not too clear on how to tell which message goes
with which record in my logs.
Ultimately, I aught to be able to figure out on my own which rule(s), if
any, are too harsh, but I've never done this before and could use a hand.
I have not altered the message at all. Here is the log record which I've
edited to remove identifying information:
Feb 18 04:24:46 [spamd] spamd: connection from ulgy_thing
[127.0.0.1]:38282 to port 783, fd 5_ Feb 18 04:24:46 [spamd] spamd:
setuid to me succeeded_ Feb 18 04:24:46 [spamd] spamd: checking message
<201702181220.d3d7dc515...@account.t-firefly.com> for me:1000_ Feb 18
04:24:53 [spamd] spamd: identified spam (6.9/5.0) for me:1000 in 6.7
seconds, 4240 bytes._ Feb 18 04:24:53 [spamd] spamd: result: Y 6 -
AWL,BAYES_00,CHARSET_FARAWAY_HEADER,FROM_EXCESS_BASE64,HTML_MESSAGE,MIME_CHARSET_FARAWAY,MIME_HTML_ONLY,RCVD_IN_MSPIKE_H2,RDN
S_NONE,URIBL_BLOCKED
scantime=6.7,size=4240,user=me,uid=1000,required_score=5.0,rhost=ulgy_thing,raddr=127.0.0.1,rport=38282,mid=<201702181220.d3d7dc515474@ac
count.t-firefly.com>,bayes=0.000000,autolearn=no autolearn_force=no_
Thanks,
David
Return-Path: <m...@t-firefly.com>
Received: from lucky1.263xmail.com ([211.157.147.135]) by mx.mail.com
(mxgmxus006 [74.208.5.22]) with ESMTPS (Nemesis) id 0Lsgwh-1cGI6L0p8j-012IBS
for <do...@mail.com>; Sat, 18 Feb 2017 05:24:24 +0100
Received: from mail?t-firefly.com (unknown [192.168.167.239])
by lucky1.263xmail.com (Postfix) with ESMTP id 925056C9
for <do...@mail.com>; Sat, 18 Feb 2017 12:24:19 +0800 (CST)
X-263anti-spam:KSV:0;BIG:0;Original-ABS:0;
X-MAIL-GRAY:1
X-MAIL-DELIVERY:0
X-KSVirus-check:0
X-ADDR-CHECKED:0
X-ABS-CHECKED:0
X-ANTISPAM-LEVEL:2
Received: from uchome (localhost [127.0.0.1])
by smtp.263.net (Postfix) with ESMTP id 879E33A0
for <do...@mail.com>; Sat, 18 Feb 2017 12:24:19 +0800 (CST)
X-RL-SENDER:m...@t-firefly.com
X-FST-TO:do...@mail.com
X-SENDER-IP:121.40.141.164
X-LOGIN-NAME:m...@t-firefly.com
X-UNIQUE-TAG:<56350341b91b9b14ebd84ec744417965>
X-ATTACHMENT-NUM:0
X-SENDER:m...@t-firefly.com
X-DNS-TYPE:0
Received: from uchome (unknown [121.40.141.164])
by smtp.263.net (Postfix) whith ESMTP id 1460582EH4N;
Sat, 18 Feb 2017 12:24:19 +0800 (CST)
Date: Sat, 18 Feb 2017 12:24:20 +0800
To: <do...@mail.com>
Subject: =?gbk?B?W0ZpcmVmbHkgVGVhbV0gRW1haWwgQWRkcmVzcyBWZXJpZnk=?=
From: =?gbk?B?RmlyZWZseSBUZWFt?= <serv...@t-firefly.com>
X-Priority: 3
X-Mailer: account.t-firefly.com X3.1
MIME-Version: 1.0
Content-type: text/html; charset=gbk
Content-Transfer-Encoding: base64
Message-ID: <201702181220.d3d7dc515...@account.t-firefly.com>
Envelope-To: <do...@mail.com>
X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: notjunk:1;V01:K0:tVherNjLfYU=:aBiMm6OAxh/BqcSnliDanV+SYl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PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i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