On 11/29/18 3:30 AM, Rupert Gallagher wrote:
> Message-ID and To have the same domain, but From does not. You should
> have never received that mail.
>
Here's what my mail filters say. You can ignore the DKIM_INVALID
because the body was intentionally modified (redacted) to post to pastbin.
X-Spam-Status: Yes, score=11.0 required=5.0 tests=BAYES_99,DKIM_INVALID,
DKIM_SIGNED,ENA_BAD_SPAM,ENA_RELAY_NOT_US,MSGID_BELONGS_RECIPIENT,
RCVD_IN_IVMBL,UNPARSEABLE_RELAY shortcircuit=no autolearn=no
autolearn_force=no version=3.4.1
X-Spam-Report:
* 5.2 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 0.9980]
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 1.2 RCVD_IN_IVMBL No description available.
* 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
* 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
* 2.2 ENA_RELAY_NOT_US Relayed from outside the US and not on
whitelists
* 2.2 MSGID_BELONGS_RECIPIENT Message-ID domain belongs to recipient
* 0.0 ENA_BAD_SPAM Spam hitting really bad rules.
A well-trained Bayes helps a lot.
You could/should increase the score on MSGID_BELONGS_RECIPIENT in your
/etc/mail/spamassassin local scores file.
Local overrides of scores and settings is typically done in
/etc/mail/spamassassin/local.cf but feel free to make your own *.cf
files in /etc/mail/spamassassin. Amavis can create it's own files to
customize settings in /etc/mail/spamassassin so compare a vanilla SA
installation to what you have to find the best place to put your local
settings.
--
David Jones
