The Doctor wrote:
On Wed, Jul 27, 2005 at 03:48:22PM -0400, Jim Maul wrote:
The Doctor wrote:
<SNIP irate customer message>
All right, the short and simple is that Spam-Assassin may not be doing
the correct job. This user has a whitelist in place and
some e-mail are getting the label of spam.
Even some of my cron jobs are getting a [SPAM] label when they should nt.
Why?
Perhaps if you posted the headers of the messages that were marked as
spam we can look to see what rules hit which would answer your "why?"
question. Until then, no one knows that the problem is, and as such,
wont be able to fix it.
-Jim
<sniped>
Looks like your users send/receive a lot of HTML mail. I had to adjust
the rules for those down slightly to help reduce the possibility of FP's.
Here, I don't care if 'chain mail' is marked as spam -- that is not
legitimate mail for our users, tho, my system doesn't delete up to a
certain threshold.
Your second example had this (watch for line wraps):
[...]
X-Spam-Flag: NO
X-Scanned-By: milter-7bit/0.7.101 (doctor.nl2k.ab.ca [204.209.81.1]);
Wed, 27 Jul 2005 11:24:55 -0600
X-Scanned-By: milter-date/0.12.160 (doctor.nl2k.ab.ca [204.209.81.1]);
Wed, 27 Jul 2005 11:24:55 -0600
X-Scanned-By: milter-spamc/0.25.321 (doctor.nl2k.ab.ca [204.209.81.1]);
Wed, 27 Jul 2005 11:24:33 -0600
X-Spam-Status: NO, hits=2.20 required=5.00
X-Spam-Level: xx
X-Mark-SPAM: YES, score=5.40/5.00, processed for 2.536s on doctor.nl2k.ab.ca
[...]
What looks odd to me is that X-Spam-Status says NO (I'm assuming that
this comes from sa), level is only 2, but X-Mark-Spam: is yes.. with a
score of 5.40.. where is this coming from?
--
Thanks,
James
