Help Understand SpamAssassin Scores

carlosinfl · 09-08-2011, 01:26 PM

So an email I get from a co-worker with no attachments and small length of plain text get scored and are marked spam:

X-Virus-Scanned: amavisd-new at ***********.org
X-Spam-Flag: YES
X-Spam-Score: 3.324
X-Spam-Level: ***
X-Spam-Status: Yes, score=3.324 tagged_above=-999 required=3
tests=[BAYES_00=-1.9, KHOP_DYNAMIC=0.906, RCVD_IN_PBL=3.335,
RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982] autolearn=no

Is there a way I can determine what caused this email to get scored as such?

AlucardZero · 09-08-2011, 03:06 PM

Quote:

X-Spam-Status: Yes, score=3.324 tagged_above=-999 required=3
tests=[BAYES_00=-1.9, KHOP_DYNAMIC=0.906, RCVD_IN_PBL=3.335,
RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982] autolearn=no

Look up KHOP_DYNAMIC, etc, eg the big one was that the mail was relayed through a host in the Spamhaus PBL. http://wiki.apache.org/spamassassin/Rules/RCVD_IN_PBL

bathory · 09-09-2011, 02:17 AM

Hi,

Quote:

X-Spam-Status: Yes, score=3.324 tagged_above=-999 required=3

Just to add to the above poster, note that 3 is a very low threshold. The default is 5.0, so consider increase it a little bit.

Regards