Merlin schrieb:
On Thu, 20 Dec 2007 03:08:34 -0800, "Merlin" <[EMAIL PROTECTED]> said:
On Thu, 20 Dec 2007 11:59:32 +0100, "Matthias Haegele"
<[EMAIL PROTECTED]> said:
Merlin schrieb:
Hi there,
I am running a well trusted travel community page that sends system
e-mails like register, notice on comments etc. to its opt-in signed up
users.
Since two days all E-Mails from that server get an aditional spam score
of 3.5!! by Bayes_99. I looked it up and found that Spamassasin believes
that it is to 99% spam by training from users. I believe there is more
to it, as I can not believe that
users mark such msges as spam. I also received another e-mail from
another community page that was marked with Bayes_99 despite that it
never has before. How come?! I looked into several red lists for my
server, but the server is not listed anywhere. The only thing I found is
that the server was not set with "reverse mapping" to the correct
domain, but to the one the hostmaster has set before (it is a root
server). Changed it yesterday to the domain name but still no change
today. Still wrong host. Does this have something to do with Bayes_99?
I am wondering how to get rid of this Bayes_99 thing and how to get to
Bayes_00 that would be more suitable for that e-mail. Do I have to
configure Postfix as the sending instance somehow with anything like
truested server lists, or with anything else I might have overlooked by
configuring it?
Here is a header of a false positive:
Subject: {SPAM 03.5} Feedback: lost password - please help
X-Spam: spam
X-Spam-score: 3.5
X-Spam-hits: BAYES_99 3.5, BAYES_USED global
X-Spam-source: IP='87.106.60.58',
Host='s15229619.onlinehome-server.info', Country='DE',
FromHeader='net', MailFrom='net'
Thank you for any help,
afaik the bayes results comes only from manual training and autolearn?
So the reverse dns, missing Pointer record is hit by another rule ...
Perhaps you need to retrain the messages as ham (sa-learn --ham ...).
Or if your bayes-database is completely "poisoned" start from scratch.
Perhaps you could show the bayes_mumble ...
Merlin
--
Greetings & hth
MH
Dont send mail to: [EMAIL PROTECTED]
--
Hi,
thank you for your reply. I am not the one who can train ist. I am just
running the server with
the community that sends the messages. It is a big problem for me as if
those e-mails do get false
positive no more registration might be pssible etc.
The funny thing is, that e-mails with almost identical content (for
example notifications on forum
replies) from other sites get even a Bayes_00 while mine get Bayes_99
(that is true for the fastmail.fm e-mail
provider). How come? Do you believe it has to do with the content, or
the header? It must be the header as
for example feedback msgs. that I receive through an online form also
get marked with Bayes_99.
The e-mails are sent through the PHPmailer class (opensource). I also
looked there, but could not find a misconfig or so.
Hmm. If you couldnt influence the training process and therefore cant
rely on it,
you probably dont want to use Bayes scores or at least lower BAYES_99?
Perhaps you would like to use a pastebin-service like http://pastebin.com/
and show us some "False Positive Samples" (feel free to exchange
confidential parts, understandable plz).
Thank you for any help,
Merlin
--
Gruesse/Greetings
MH
Dont send mail to: [EMAIL PROTECTED]
--
