too high score from DNSBL

[vertito <ve...@aim-consultants.com>]

loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
 
i am using the above plugins, and noticed that a normal email from yahoo shows
 
X-Spam-Status: No, score=3.0 required=5.0 tests=DNS_FROM_RFC_ABUSE, 
    DNS_FROM_RFC_POST,DNS_FROM_RFC_WHOIS,HTML_MESSAGE autolearn=no 
    version=3.1.7 
 
which catches my attention. Yes, it is not spam, but a score of 3.0 from DNSBL is a little
bit high for me. anybody can advise how can i lower them down?
 
if i combined both plugins to be enable together with
 
loadplugin Mail::SpamAssassin::Plugin::SpamCop
 
 
yahoo emails goes to SPAM folder! - which is not right as yahoo is attaching
sponsored links like mortgage links, credit cards, degrees as email footers.
 
anyone pls?

Re: too high score from DNSBL

[Matt Kettler <mk...@verizon.net>]

vertito wrote:
> loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
>  
> i am using the above plugins, and noticed that a normal email from
> yahoo shows
>  
> *X-Spam-Status:* No, score=3.0 required=5.0 tests=DNS_FROM_RFC_ABUSE,
>     DNS_FROM_RFC_POST,DNS_FROM_RFC_WHOIS,HTML_MESSAGE autolearn=no
>     version=3.1.7
>  
> which catches my attention. Yes, it is not spam, but a score of 3.0
> from DNSBL is a little
> bit high for me. anybody can advise how can i lower them down?
>  
> if i combined both plugins to be enable together with
>  
> loadplugin Mail::SpamAssassin::Plugin::SpamCop
>  
>  
> yahoo emails goes to SPAM folder! - which is not right as yahoo is
> attaching
> sponsored links like mortgage links, credit cards, degrees as email
> footers.

Erm.. that plugin doesn't enable the spamcop RBL nor does it enable
URIBLs.. All it does is enables spamcop reporting. It does not have any
score impact on anything, therefore it has nothing to do with yahoo
ending up in the spam folder.

As for 3.0 from a DNSBL, I can see that in some cases, but in the case
of RFCI, it's overkill. This list is generally more trouble than it's
worth IMHO. Some of the RFCI lists have actually been removed from the
3.2 devel branch because of their FP problems. Currently 3.2 only keeps
the DSN and BOGUSMX tests.

You can change the scores to disable these tests pretty easily:

score DNS_FROM_RFC_ABUSE 0
score DNS_FROM_RFC_POST 0
score DNS_FROM_RFC_WHOIS 0

Which would reflect what 3.2 is doing because POST, ABUSE, and WHOIS all
have less than a 0.8 S/O (ie: less than 80% of the email they match is
actually spam)

See also:

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4628




>  
> anyone pls?
>

Re: too high score from DNSBL

[Jan Doberstein <jd...@hosteurope.de>]

hiya,

vertito schrieb:
> which catches my attention. Yes, it is not spam, but a score of 3.0 from DNSBL is a little
> bit high for me. anybody can advise how can i lower them down?

just change scoring ... best is in your local.cf or a new .cf that you
name scoring.cf (for example).

there you but the rulename and your scoring.

mine looks like:

--- cat z_local_scoring.cf --
## customized scores ##

# DUL List (lower Score)
score RCVD_IN_SORBS_DUL 0.5
score RCVD_IN_NJABL_DUL 0.5
score HELO_DYNAMIC_IPADDR 1.2
score HELO_DYNAMIC_DHCP 1.2

----- cat end ---------------

just am example ! Just take a look in the Header of your mis-scored Mails.

\jd