You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by aritza sobrinos <ar...@gmail.com> on 2008/02/26 19:30:21 UTC

failed spf_helo_softfail in SA

Hi,

Im getting false positives like this:

X-Spam-Status: Yes, score=3.776 tag=x tag2=3.5 kill=3.5 tests=[BAYES_50=
0.001,
 HTML_10_20=0.246, HTML_MESSAGE=0.001, HTML_SHORT_LENGTH=0.389,
 SPF_HELO_SOFTFAIL=3.14, SPF_PASS=-0.001]


SPF_HELO_SOFTFAIL and SPF_PASS in the same mail, is this ok ? is happens
only for one domain other spf works correctly only with pass


any ideas ?

im using:

SpamAssassin version 3.0.3
  running on Perl version 5.8.4

amavisd-new-2.4.2


thanks in adavance !

Re: failed spf_helo_softfail in SA

Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
On 26.02.08 19:30, aritza sobrinos wrote:
> Im getting false positives like this:
> 
> X-Spam-Status: Yes, score=3.776 tag=x tag2=3.5 kill=3.5 tests=[BAYES_50=
> 0.001,
>  HTML_10_20=0.246, HTML_MESSAGE=0.001, HTML_SHORT_LENGTH=0.389,
>  SPF_HELO_SOFTFAIL=3.14, SPF_PASS=-0.001]
> 
> 
> SPF_HELO_SOFTFAIL and SPF_PASS in the same mail, is this ok ? is happens
> only for one domain other spf works correctly only with pass

yes. SPF_HELO_* is related to HELO string, while SPF_PASS is related to from
address, both in relation to sender's IP/hostname.
-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol. 

Re: failed spf_helo_softfail in SA

Posted by John Hardin <jh...@impsec.org>.
On Tue, 26 Feb 2008, aritza sobrinos wrote:

> Im getting false positives like this:
>
> X-Spam-Status: Yes, score=3.776 tag=x tag2=3.5 kill=3.5 tests=[BAYES_50=
> 0.001,
> HTML_10_20=0.246, HTML_MESSAGE=0.001, HTML_SHORT_LENGTH=0.389,
> SPF_HELO_SOFTFAIL=3.14, SPF_PASS=-0.001]
>
> SPF_HELO_SOFTFAIL and SPF_PASS in the same mail, is this ok ? is happens
> only for one domain other spf works correctly only with pass
>
> any ideas ?

Increase your threshold to 5.0 as all of the base rules have their scores 
assigned with that threshold in mind. If you lower it without adjusting 
the default scores you *will* get more FPs than you should.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Look at the people at the top of both efforts. Linus Torvalds is a
   university graduate with a CS degree. Bill Gates is a university
   dropout who bragged about dumpster-diving and using other peoples'
   garbage code as the basis for his code. Maybe that has something to
   do with the difference in quality/security between Linux and
   Windows.                           -- anytwofiveelevenis on Y! SCOX
-----------------------------------------------------------------------
  16 days until Albert Einstein's 129th Birthday