<html><body><div style="font-family: Helvetica; font-size: 12pt; color: #000000"><div>MailScanner 5.3.3<br></div><div><br data-mce-bogus="1"></div><div>root@mail:/etc/MailScanner# ls -l<br>total 888<br>(...)<br></div><div>-rw-r--r-- 1 root    root     11404 Apr 30  2019 spamassassin.conf<br>-rw-r--r-- 1 root    root      1870 Jul 24 08:48 spam.assassin.prefs.conf<br data-mce-bogus="1"></div><div>(...)<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div data-marker="__SIG_PRE__"><div>Met vriendelijke groet, Best regards,</div><div><br></div><div><br style="font-family:'helvetica'"><span style="font-family:'helvetica'">Thom van der Boon</span><br style="font-family:'helvetica'"><span style="font-family:'helvetica'">E-Mail: thom@vdb.nl</span></div><div><br></div><div><br data-mce-bogus="1"></div></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>Van: </b>"MailScanner Discussion" <mailscanner@lists.mailscanner.info><br><b>Aan: </b>"MailScanner Discussion" <mailscanner@lists.mailscanner.info><br><b>Cc: </b>"Shawn Iverson" <shawniverson@summitgrid.com><br><b>Verzonden: </b>Vrijdag 24 juli 2020 13:24:23<br><b>Onderwerp: </b>Re: mails with valid SPF sender don't get marked SPF_PASS<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><p><tt>What version of MailScanner do you have?</tt></p>
    <p><tt>And out of curiosity, do you have the following both present?</tt></p>
    <p><tt>/etc/MailScanner/spam.assassin.prefs.conf</tt></p>
    <p><tt>/etc/MailScanner/spamassassin.conf<br>
      </tt></p>
    <div class="moz-cite-prefix">On 7/24/20 3:02 AM, Thom van der Boon
      wrote:<br>
    </div>
    <blockquote>
      
      <div style="font-family:'helvetica';font-size:12pt;color:#000000">
        <div>Mark,<br>
        </div>
        <div><br>
        </div>
        <div>It is a MailScanner issue (I think)<br>
        </div>
        <div><br>
        </div>
        <div>When I run the message through SA directly by the following
          command: </div>
        <div><br>
        </div>
        <div>spamassassin -t -p
          /etc/MailScanner/spam.assassin.prefs.conf < message.txt<br>
        </div>
        <div><br>
        </div>
        <div>I get a SPF_PASS<br>
        </div>
        <div><br>
        </div>
        <div> pts rule name              description<br>
          ---- ----------------------
          --------------------------------------------------<br>
           0.0 RCVD_IN_MSPIKE_H4      RBL: Very Good reputation (+4)<br>
                                      [185.201.16.36 listed in
          wl.mailspike.net]<br>
          -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at
          <a href="https://www.dnswl.org/" target="_blank" rel="nofollow noopener noreferrer">https://www.dnswl.org/</a>,<br>
                                       no trust<br>
                                      [185.201.16.36 listed in
          list.dnswl.org]<br>
          -1.9 BAYES_00               BODY: Bayes spam probability is 0
          to 1%<br>
                                      [score: 0.0000]<br>
           0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF
          Record<br>
          -0.0 SPF_PASS               SPF: sender matches SPF record<br>
           0.1 MIME_HTML_ONLY         BODY: Message only has text/html
          MIME parts<br>
           0.0 HTML_MESSAGE           BODY: HTML included in message<br>
           0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders<br>
           0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure
          with Strict<br>
                                      Alignment<br>
        </div>
        <div><br>
        </div>
        <div>but as stated before; the "live" message that went through
          my mailscanner<br>
        </div>
        <div><br>
        </div>
        <div>
          
          <pre>X-vdbeu-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
        score=-1.786, required 5, BAYES_00 -1.90, HTML_MESSAGE 0.00,
        KAM_DMARC_STATUS 0.01, MIME_HTML_ONLY 0.10, RCVD_IN_DNSWL_NONE -0.00,
        RCVD_IN_MSPIKE_H4 0.00, RCVD_IN_MSPIKE_WL 0.00, SPF_HELO_NONE 0.00)</pre>
           </div>
        <div><br>
        </div>
        <div>So, I don't get it<br>
        </div>
        <div><br>
        </div>
        <div>MailScanner --link reports nothing weird<br>
        </div>
        <div><br>
        </div>
        <div>
          <div>Met vriendelijke groet, Best regards,</div>
          <div><br>
          </div>
          <div><br style="font-family:'helvetica'">
            <span style="font-family:'helvetica'">Thom van der Boon</span><br style="font-family:'helvetica'">
            <span style="font-family:'helvetica'">E-Mail: <a href="mailto:thom@vdb.nl" target="_blank" rel="nofollow noopener noreferrer">thom@vdb.nl</a></span><br data-mce-bogus="1"></div>
        </div>
        <div><br>
        </div>
        <hr id="zwchr">
        <div><b>Van: </b>"Mark Sapiro"
          <a href="mailto:mark@msapiro.net" target="_blank" rel="nofollow noopener noreferrer"><mark@msapiro.net></a><br>
          <b>Aan: </b>"MailScanner Discussion"
          <a href="mailto:mailscanner@lists.mailscanner.info" target="_blank" rel="nofollow noopener noreferrer"><mailscanner@lists.mailscanner.info></a><br>
          <b>Verzonden: </b>Donderdag 23 juli 2020 22:38:17<br>
          <b>Onderwerp: </b>Re: mails with valid SPF sender don't get
          marked SPF_PASS<br>
        </div>
        <div><br>
        </div>
        <div>On 7/23/20 1:39 AM, Thom van
          der Boon wrote:<br>
          > Hi guys,<br>
          > <br>
          > I have something weird. Most mails with valid SPF record
          are marked<br>
          > correctly (SPF_FAIL or SPF_PASS), but I see some messages
          which should<br>
          > be marked as SPF_PASS get no SPF_PASS<br>
          <br>
          <br>
          Assuming you are talking about the SPF_PASS rule in the
          SpamAssassin<br>
          report in the X-vdbeu-MailScanner-SpamCheck: header, this is a<br>
          SpamAssassin question, not a MailScanner question per se. You
          might do<br>
          better on a SpamAssassin list. See<br>
<a href="https://cwiki.apache.org/confluence/display/SPAMASSASSIN/MailingLists" target="_blank" rel="nofollow noopener noreferrer"><https://cwiki.apache.org/confluence/display/SPAMASSASSIN/MailingLists></a>.<br>
          <br>
          -- <br>
          Mark Sapiro <a href="mailto:mark@msapiro.net" target="_blank" rel="nofollow noopener noreferrer"><mark@msapiro.net></a>        The highway is for
          gamblers,<br>
          San Francisco Bay Area, California    better use your sense -
          B. Dylan<br>
          <br>
          <br>
          -- <br>
          MailScanner mailing list<br>
          <a href="mailto:mailscanner@lists.mailscanner.info" target="_blank" rel="nofollow noopener noreferrer">mailscanner@lists.mailscanner.info</a><br>
          <a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank" rel="nofollow noopener noreferrer">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre"></pre>
    </blockquote>
    <div class="moz-signature">-- <br>
      <img src="http://mailserver.summitgrid.org/logo_text_sig.png"><br>
      Shawn Iverson<br>
      <a href="mailto:shawniverson@summitgrid.com" target="_blank" rel="nofollow noopener noreferrer">shawniverson@summitgrid.com</a><br>
    </div>
  
<br><br><br>-- <br>MailScanner mailing list<br>mailscanner@lists.mailscanner.info<br>http://lists.mailscanner.info/mailman/listinfo/mailscanner<br></div></div></body></html>