You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2015/12/09 13:39:21 UTC

[Bug 7273] New: PGP encrypted Facebook Messages detected as SPAM

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

            Bug ID: 7273
           Summary: PGP encrypted Facebook Messages detected as SPAM
           Product: Spamassassin
           Version: 3.4.0
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: spamassassin
          Assignee: dev@spamassassin.apache.org
          Reporter: dominik@kupschke.net

Since some days my spamassassin starts to detect all pgp encrypted mails from
facebook as spam.

All X-Spam-* Headers of one detected mail:

X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on kupschke.net
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,
    DKIM_VALID,DKIM_VALID_AU,MIME_NO_TEXT,RCVD_IN_DNSWL_NONE,RDNS_DYNAMIC,
    SPF_PASS,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP,UNPARSEABLE_RELAY,XPRIO
    autolearn=no autolearn_force=no version=3.4.0
X-Spam-Report: 
    * -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
    *      trust
    *      [66.220.144.153 listed in list.dnswl.org]
    * -0.0 SPF_PASS SPF: Senderechner entspricht SPF-Datensatz
    * -1.9 BAYES_00 BODY: Spamwahrscheinlichkeit nach Bayes-Test: 0-1%
    *      [score: 0.0000]
    * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
    * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
    *       domain
    *  0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
    *      valid
    *  1.0 RDNS_DYNAMIC Delivered to internal network by host with
    *      dynamic-looking rDNS
    *  0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
    *  0.0 TVD_SPACE_RATIO No description available.
    *  2.0 MIME_NO_TEXT No (properly identified) text body parts
    *  1.6 XPRIO Has X-Priority header
    *  2.7 TVD_SPACE_RATIO_MINFP No description available.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

--- Comment #7 from John Hardin <jh...@impsec.org> ---
Rules update 1720887 is out, which includes the FP avoidance fixes for this.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

--- Comment #6 from Kevin A. McGrail <km...@pccc.com> ---
Just a note that yes, ruleqa is ham starved.  Hopefully soon!

 HAM: 145160 (150000 required)
SPAM: 165560 (150000 required)
Insufficient ham corpus to generate scores; aborting.
Exit Status 8 is not zero for do-nightly-rescore-example

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

--- Comment #4 from John Hardin <jh...@impsec.org> ---
Dangit.  Revision 1718975

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

Kevin A. McGrail <km...@pccc.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kmcgrail@pccc.com

--- Comment #5 from Kevin A. McGrail <km...@pccc.com> ---
I'll take a look at ruleqa tonight to make sure it is starved.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

John Hardin <jh...@impsec.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #3 from John Hardin <jh...@impsec.org> ---
Commit 1718975

It will take a few days to work through masscheck.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

John Hardin <jh...@impsec.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jhardin@impsec.org

--- Comment #1 from John Hardin <jh...@impsec.org> ---
It's usually best to report these to the SA Users mailing list rather than
opening a bug.

Can you add a full sample message to the bug as an attachment? The headers
below don't give enough information to troubleshoot the issue or adjust the
rules to avoid the FP.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7273] PGP encrypted Facebook Messages detected as SPAM

Posted by bu...@bugzilla.spamassassin.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7273

Dominik Kupschke <do...@kupschke.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dominik@kupschke.net

--- Comment #2 from Dominik Kupschke <do...@kupschke.net> ---
Created attachment 5356
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5356&action=edit
Example of an false positive from Facebook.

-- 
You are receiving this mail because:
You are the assignee for the bug.