You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by PSuo <pe...@pssoft.fi> on 2010/04/23 14:53:04 UTC
Legitimate mail flagged as Spam
Hi,
I have a problem with legimate mail getting flagged as spam. I have a system
that send software licence certificates over email, and many customers never
receive it. When I send it to my own email it gets marked as spam by
SpamAssin. I've been trying to figure out why. The sending system is a
Windows 2003 SMTP (not Exchange, the one that comes with IIS), and it's
hostname is licsvr.pssoft.fi. The sender email is licence@kasoori.net.
The headers mark as following:
X-Virus-Check-By: mailwash7.pair.com
X-Spam-Check-By: mailwash7.pair.com
X-Spam-Status: Yes, hits=8.7 required=4.0
tests=BAD_ENC_HEADER,HELO_LH_HOME,MIME_BASE64_BLANKS,TRACKER_ID
autolearn=disabled version=3.002005
Message-ID: <E1...@pssoft.fi>
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Filtered: 8217c97b20a887b0ba3c84f733b09305
X-Mailer: Microsoft CDO for Exchange 2000
MIME-Version: 1.0
From: =?utf-8?Q?KAS=C3=96=C3=96RI.NET_Lisenssipalvelu?=
<li...@kasoori.net>
To: <pe...@pssoft.fi>
Date: Fri, 23 Apr 2010 15:46:10 +0300
Subject: =?utf-8?Q?**JUNK**_KAS=C3=96=C3=96RI.NET_Lisenssitilauksenne?=
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
What I'm trying to figure out is what am I doing wrong that causes the tests
to fail and score high points.
Any Help would be appreciated !
br,
Petri
--
View this message in context: http://old.nabble.com/Legitimate-mail-flagged-as-Spam-tp28340960p28340960.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Legitimate mail flagged as Spam
Posted by Per Jessen <pe...@computer.org>.
PSuo wrote:
>
> Hi,
>
> I have a problem with legimate mail getting flagged as spam. I have a
> system that send software licence certificates over email, and many
> customers never receive it. When I send it to my own email it gets
> marked as spam by SpamAssin. I've been trying to figure out why.
Hi Petri
feel free to send me (per@jessen.ch) such an email, and I'll tell you
how and why it scores.
/Per Jessen, Zürich
Re: Legitimate mail flagged as Spam
Posted by John Hardin <jh...@impsec.org>.
On Fri, 23 Apr 2010, PSuo wrote:
> X-Spam-Status: Yes, hits=8.7 required=4.0
> tests=BAD_ENC_HEADER,HELO_LH_HOME,MIME_BASE64_BLANKS,TRACKER_ID
BAD_ENC_HEADER - verify that you are properly encoding your message
headers.
HELO_LH_HOME - what "helo" string does your MTA use when sending
messages?
MIME_BASE64_BLANKS - verify that your body parts are being encoded into
base64 properly.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Insofar as the police deter by their presence, they are very, very
good. Criminals take great pains not to commit a crime in front of
them. -- Jeffrey Snyder
-----------------------------------------------------------------------
Today: Max Planck's 152nd birthday
Re: Legitimate mail flagged as Spam
Posted by Per Jessen <pe...@computer.org>.
Daniel McDonald wrote:
> On 4/23/10 7:53 AM, "PSuo" <pe...@pssoft.fi> wrote:
>
>> The headers mark as following:
>>
>> X-Virus-Check-By: mailwash7.pair.com
>> X-Spam-Check-By: mailwash7.pair.com
>> X-Spam-Status: Yes, hits=8.7 required=4.0
>> tests=BAD_ENC_HEADER,HELO_LH_HOME,MIME_BASE64_BLANKS,TRACKER_ID
>
> You should grep the test names above in
> /var/lib/spamassassin/3.3.1/updates.spamassassin.org
BAD_ENC_HEADER - very often blanks in the MIME-encoded subject. (blanks
should be encoded as underscores). Usually about 3 points.
HELO_LH_HOME - poor helo from your mailserver. Another 3 points.
MIME_BASE64_BLANKS - poor base64 encoding (blank lines\?)
TRACKER_ID - contains a trackerid for user monitoring. 2-3 points.
/Per Jessen, Zürich
Re: Legitimate mail flagged as Spam
Posted by Daniel McDonald <da...@austinenergy.com>.
On 4/23/10 7:53 AM, "PSuo" <pe...@pssoft.fi> wrote:
>
> Hi,
>
> I have a problem with legimate mail getting flagged as spam.
> The headers mark as following:
>
> X-Virus-Check-By: mailwash7.pair.com
> X-Spam-Check-By: mailwash7.pair.com
> X-Spam-Status: Yes, hits=8.7 required=4.0
> tests=BAD_ENC_HEADER,HELO_LH_HOME,MIME_BASE64_BLANKS,TRACKER_ID
>
> What I'm trying to figure out is what am I doing wrong that causes the tests
> to fail and score high points.
>
> Any Help would be appreciated !
>
You should grep the test names above in
/var/lib/spamassassin/3.3.1/updates.spamassassin.org
And then change your mail to not look like them.
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281