Spam score is negative, yet message is still marked as spam

[Jonathan B Bayer]

Hello Joakim,

Monday, March 12, 2007, 10:23:29 AM, you wrote:

>    
>  Check for this line
>  
>  # This is the list of spam blacklists (RBLs) which you are using.
>  Spam List = # ORDB-RBL SBL+XBL # You can un-comment this to enable them

That is in MailScanner.conf.  I'm looking to do this in SpamAssassin.


JBB


>  
>  
>  Jonathan B Bayer skrev: 
>   
> Hello Anthony,

> OK, I understand that.  I've looked at SpamAssassin, and while I see
> where it enables RBL checks, I don't see where I can specify which RBL
> checks to do.


> JBB


> Monday, March 12, 2007, 9:42:14 AM, you wrote: 
>   
>   
> Hi, 
>   
>   
>  
>   
>   
> Jonathan B Bayer wrote: 
>   
>   
> Hello mailscanner,

> Hello all.

> I have a new installation of MailScanner installed on a new mail
> server.  The basic configuration is:

> RedHat Enterprise 3
> Postfix 2.1.3
> Mailscanner 4.58.9-1

> One of the users has been sending messages to the company president.
> These messages are being marked as spam and moved to the spam folder.

> However, when I examined the message headers, I found the following:

> X-*****************_com-MailScanner-Information: Please contact the ISP for more information
> X-*****************_com-MailScanner: Found to be clean
> X-*****************_com-MailScanner-SpamCheck: spam, spamhaus-ZEN, 
>   
>   
>  ^^^^^^^^^^^^ 
>   
>   
>  
>   
>   
> This mail hit the spamhaus-ZEN RBL, and you have MailScanner configured
> to mark as spam any message that hits on your RBLs. 
>   
>   
>  
>   
>   
> Personally I don't have MailScanner set to check any RBLs, I use the 
> scoring features on SpamAssassin for that. 
>   
>   
>  
>   
>   
>   
>  SpamAssassin (not cached, score=-4.17, required 6,
>  autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -2.60,
>  HTML_MESSAGE 0.00, HTML_TAG_BALANCE_BODY 0.23)
> X-*****************_com-MailScanner-From:
> dmakhijani@*****************.comX-Spam-Status: Yes


> and the subject had the {Spam?}  inserted.

> Why would this be marked as spam, if the score is -4.17 ?

> What's even stranger is that the user's computer connects directly
> with the mail server to send the email, so it isn't even going through
> another relay.


> Thanks in advance.


> JBB
> ---
> Superior solutions for small business, home office and home users

> Jonathan B Bayer,CEO mailto:jbayer at BayerTechnologyGroup.comBayer
> Technology Group         Work: (609) 632-1200
> 23 Exeter Rd.                  Mobile: (609) 658-9408
> East Windsor, NJ 08520 
>   
>   
>   
>  
>   
>   



-- 
Superior solutions for small business, home office and home users

Jonathan B Bayer,CEO           mailto:jbayer at BayerTechnologyGroup.com
Bayer Technology Group         Work: (609) 632-1200
23 Exeter Rd.                  Mobile: (609) 658-9408
East Windsor, NJ 08520