<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:monospace">Hi All,<br><br>Thank you very much for all the suggestions.<br>We will try out one by one.<br><br>Given below is a partial output of a message Zimbra caught as spam.<br><br><br>*----------------------------------------------------------------------------*<br><br>Content analysis details:   (16.2 points, 5.0 required)<br><br> pts rule name              description<br>---- ---------------------- --------------------------------------------------<br>-1.0 ALL_TRUSTED            Passed through trusted hosts only via SMTP<br> 3.5 BAYES_99               BODY: Bayes spam probability is 99 to 100%<br>                            [score: 1.0000]<br> 0.2 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%<br>                            [score: 1.0000]<br> 1.0 HK_RANDOM_REPLYTO      Reply-To username looks random<br> 4.1 LOCAL_MAILSCANNER_SPAM MailScanner marked SPAM<br> 1.0 HK_RANDOM_FROM         From username looks random<br> 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider<br>                            (hulsingcrm6[at]<a href="http://aliyun.com">aliyun.com</a>)<br> 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail<br>                            domains are different<br> 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record<br> 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit<br>                            (hulsingcrm6[at]<a href="http://aliyun.com">aliyun.com</a>)<br> 0.0 HTML_MESSAGE           BODY: HTML included in message<br> 0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts<br> 6.0 DMARC_FAIL_QUAR        DMARC validation failed and policy is quarantine<br> 0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom<br>                             freemail headers are different<br> 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS<br><br>*----------------------------------------------------------------------------*<br><br><br>thanks<br><br>---<br>Thomas Stephen Lee<br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019 at 10:47 PM Mark Sapiro <<a href="mailto:mark@msapiro.net">mark@msapiro.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 11/1/19 6:05 AM, Shawn Iverson via MailScanner wrote:<br>
> +1<br>
> <br>
> We need to put this on the MailScanner website as "Things you can do to<br>
> enhance your MailScanner" :)<br>
<br>
+1<br>
<br>
The old web site used to have some tips. See<br>
<<a href="https://web.archive.org/web/20150315051129/http://mailscanner.info/gettingthebest.html" rel="noreferrer" target="_blank">https://web.archive.org/web/20150315051129/http://mailscanner.info/gettingthebest.html</a>>.<br>
Some of this is out of date, but we should have similar info on the<br>
current web site.<br>
<br>
<br>
-- <br>
Mark Sapiro <<a href="mailto:mark@msapiro.net" target="_blank">mark@msapiro.net</a>>        The highway is for gamblers,<br>
San Francisco Bay Area, California    better use your sense - B. Dylan<br>
<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
</blockquote></div>