On Thu, 20 Dec 2007 03:08:34 -0800, "Merlin" <[EMAIL PROTECTED]> said: > > > > On Thu, 20 Dec 2007 11:59:32 +0100, "Matthias Haegele" > <[EMAIL PROTECTED]> said: > > Merlin schrieb: > > > Hi there, > > > > > > I am running a well trusted travel community page that sends system > > > e-mails like register, notice on comments etc. to its opt-in signed up > > > users. > > > > > > Since two days all E-Mails from that server get an aditional spam score > > > of 3.5!! by Bayes_99. I looked it up and found that Spamassasin believes > > > that it is to 99% spam by training from users. I believe there is more > > > to it, as I can not believe that > > > users mark such msges as spam. I also received another e-mail from > > > another community page that was marked with Bayes_99 despite that it > > > never has before. How come?! I looked into several red lists for my > > > server, but the server is not listed anywhere. The only thing I found is > > > that the server was not set with "reverse mapping" to the correct > > > domain, but to the one the hostmaster has set before (it is a root > > > server). Changed it yesterday to the domain name but still no change > > > today. Still wrong host. Does this have something to do with Bayes_99? > > > > > > I am wondering how to get rid of this Bayes_99 thing and how to get to > > > Bayes_00 that would be more suitable for that e-mail. Do I have to > > > configure Postfix as the sending instance somehow with anything like > > > truested server lists, or with anything else I might have overlooked by > > > configuring it? > > > > > > Here is a header of a false positive: > > > > > > Subject: {SPAM 03.5} Feedback: lost password - please help > > > X-Spam: spam > > > X-Spam-score: 3.5 > > > X-Spam-hits: BAYES_99 3.5, BAYES_USED global > > > X-Spam-source: IP='87.106.60.58', > > > Host='s15229619.onlinehome-server.info', Country='DE', > > > FromHeader='net', MailFrom='net' > > > > > > Thank you for any help, > > > > afaik the bayes results comes only from manual training and autolearn? > > So the reverse dns, missing Pointer record is hit by another rule ... > > > > Perhaps you need to retrain the messages as ham (sa-learn --ham ...). > > Or if your bayes-database is completely "poisoned" start from scratch. > > > > Perhaps you could show the bayes_mumble ... > > > > > Merlin > > > > > > -- > > Greetings & hth > > MH > > > > > > Dont send mail to: [EMAIL PROTECTED] > > -- > > > > > Hi, > > thank you for your reply. I am not the one who can train ist. I am just > running the server with > the community that sends the messages. It is a big problem for me as if > those e-mails do get false > positive no more registration might be pssible etc. > > The funny thing is, that e-mails with almost identical content (for > example notifications on forum > replies) from other sites get even a Bayes_00 while mine get Bayes_99 > (that is true for the fastmail.fm e-mail > provider). How come? Do you believe it has to do with the content, or > the header? It must be the header as > for example feedback msgs. that I receive through an online form also > get marked with Bayes_99. > The e-mails are sent through the PHPmailer class (opensource). I also > looked there, but could not find a misconfig or so. > > Thank you for any help, > > Merlin > -- > Merlin > [EMAIL PROTECTED] > > -- > http://www.fastmail.fm - A no graphics, no pop-ups email service >
Hi, thank you for your reply. I am not the one who can train ist. I am just running the server with the community that sends the messages. It is a big problem for me as if those e-mails do get false positive no more registration might be pssible etc. The funny thing is, that e-mails with almost identical content (for example notifications on forum replies) from other sites get even a Bayes_00 while mine get Bayes_99 (that is true for the fastmail.fm e-mail provider). How come? Do you believe it has to do with the content, or the header? It must be the header as for example feedback msgs. that I receive through an online form also get marked with Bayes_99. The e-mails are sent through the PHPmailer class (opensource). I also looked there, but could not find a misconfig or so. Thank you for any help, Merlin -- Merlin [EMAIL PROTECTED] -- http://www.fastmail.fm - A no graphics, no pop-ups email service