Figuring out what rules an email is flunking

["Ronald I. Nutter" <ro...@georgetowncollege.edu>]

I am dealing with a problem user who has mail that keeps getting trapped
by SA.  They are using an off campus system that "acts" like it is our
mail server because everything is set to a reply address of my colleges
domain.  When the emails come through, I can look at the header and see
that the email is getting tripped up by 3 rules - no_real_name, AWL and
Bayes_00.  Where can I find more info about these rules ?  I have been
looking for a while but only found some real basic info on no_real_name
but didn't tell me much.  Havent found anything on the other.  Right now
the emails in question are scoring around 7.62.  Trying to get it below
3.75 which is where I have set the bar for spam.

Suggestions ?

Ron	

--------------------------------------------------------------------
Ron Nutter                          ron_nutter@georgetowncollege.edu 
Network Infrastructure & Security Manager
Information Technology Services                        (502)863-7002
Georgetown College                                     
Georgetown, KY                                            40324-1696
--------------------------------------------------------------------

Re: Figuring out what rules an email is flunking

["Jamie L. Penman-Smithson" <li...@silverdream.org>]

On 6 Jun 2006, at 20:28, Ronald I. Nutter wrote:
> I am dealing with a problem user who has mail that keeps getting  
> trapped
> by SA.  They are using an off campus system that "acts" like it is our
> mail server because everything is set to a reply address of my  
> colleges
> domain.  When the emails come through, I can look at the header and  
> see
> that the email is getting tripped up by 3 rules - no_real_name, AWL  
> and
> Bayes_00.  Where can I find more info about these rules ?  I have been
> looking for a while but only found some real basic info on  
> no_real_name
> but didn't tell me much.  Havent found anything on the other.   
> Right now
> the emails in question are scoring around 7.62.  Trying to get it  
> below
> 3.75 which is where I have set the bar for spam.

Firstly, 3.75 is a very low threshold, you may want to rethink this.

NO_REAL_NAME means just that, instead of having:
	From: "John Doe" <jd...@example.com>
it just has:
	From: <jd...@example.com>

This is usually because the sender didn't specify a name to be used.

AWL is AutoWhiteListing, you can find out more about it in the SA wiki:
<http://wiki.apache.org/spamassassin/AutoWhitelist>

BAYES_00 means that SA thought the message was definitely ham.

If you provided the full text of SA's report for the message and the  
version of SA you're running people might be able to give you some  
further pointers.

-j