On 12/3/2022 1:34 π.μ., Nikolaos Milas wrote:
different mail addresses in the From header (regardless whether
there is an encrypted zip attachment or not)?
...
On 12.03.22 18:21, Nikolaos Milas wrote:
Regarding the above, I understand I could probably simply raise the
score for the PDS_FROM_2_EMAILS rule in
/etc/mail/spamassassin/local.cf, like:
score PDS_FROM_2_EMAILS 4.0
However, it strikes me that incoming mail like the one I originally
referred to, with a header field like:
From: "<John Doe> [email protected]" <[email protected]>
does NOT mention any scoring by this rule:
X-Spam-Status: Yes, score=4.693 tagged_above=-999 required=3.4
tests=[BAYES_50=0.8, DATE_IN_FUTURE_12_24=3.199, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MISSING_MID=0.497,
RCVD_IN_MSPIKE_H2=-0.4, RDNS_NONE=0.793, SPF_HELO_NONE=0.001,
SPF_PASS=-0.1, TVD_SPACE_RATIO=0.001, URIBL_BLOCKED=0.001]
autolearn=disabled
this is because PDS_FROM_2_EMAILS has some exceptions, which is why I
advised you to use something different.
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759
