On 10/8/21 12:00 PM, Reindl Harald wrote:
Am 08.10.21 um 11:18 schrieb Thomas Seilund:
Hi All
I run SA 3.4.2 on Debian GNU/Linux 10 (buster)
If I look at incomming mails after SA has processed the incomming
mail then the list of SA rules that have been run is not the same for
all mails.
Below are to examples:
X-Spam-Status: No, score=-2.0 required=2.0 tests=BAYES_00,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,
T_KAM_HTML_FONT_INVALID autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Status: No, score=2.9 required=3.0 tests=BAYES_50,HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK
autolearn=no autolearn_force=no version=3.4.2
For instance, rule RCVD_IN_DNSWL_NONE is run for the first mail but
not for the second.
why do you expect that the same rules hit?
these are two different senders and two different mails given the
difference in BAYES_* and SPF_HELO_NONE versus SPF_HELO_PASS
Thanks. It was my understanding that the list showed the rules that have
been run. No matter if the rule contribute to the score or not.
When you say a rule hits do you then mean that the rule contribute to
the score? Can a rule hit and contribute with a value of zero to the score?
I am a new to SA so please bear over with the basic questions.
Again thanks a lot!
