Brendan Murtagh wrote:
Many of our employees have BlackBerry devices as well as iPhones, Droids,
etc. However, the only device that is getting flagged as spam by
SpamAssassin is BlackBerry. It doesn't matter if a new email is composed or
its a reply. As long as its being sent from the device, it's being tagged
with some of the tests listed below. The emails are arriving, however they
are being delivered into the Spam folder and not the Inbox due to our mail
server settings which append to the Subject line the spam score and move it
to the Spam folder for email scored 3.0+
Calling mail spam at a threshold of 3 is dangerous at best. Justin
Mason posted some interesting graphs a number of years ago; see
http://taint.org/2008/02/29/155648a.html and
http://taint.org/sa/thresholds-320/.
By lowering the threshold you are declaring that more false positives
than the targetted 0.1% at 5.0 is an acceptable situation.
RATWARE_RCVD_BONUS_SPC=1.00
> VOWEL_URI_5=1.00,
> MR_DIFF_MID=1.00
I'm not certain about 3.2.5 (I don't have a copy of that handy) but none
of these are in the stock 3.3.1 rules. I found a 3.2.3 tarball, and
they're not in that version either.
We are running SpamAssassin 3.2.5 (1.1) with IceWarp Mail Server and
currently the following are whitelisted within IceWarp:
*.bis.na.blackberry.com
*.blackberry.com
*.blackberry.net
@bis.na.blackberry.com
Without an example message, we can't tell if these are relevant or not.
IME the From: address at least is usually the user's regular email
account - you would use these domains along with the sender addresses in
whitelist_from_rcvd instead, if you use SA's whitelisting capabilities.
By "whitelisted in IceWarp", do you mean that SA is bypassed completely?
On emails relayed from hosts in those domains? Emails using those
domains as the envelope sender? Emails using those domains in the From:?
-kgd
