Email/Spam issue

One of my domains is getting emails with the subject line changed like [spanish 73%] or [unknown language 92%]

The headers are below:-

X-Spam-Status: No, score=2.4 required=5.0 tests=AWL,BAYES_00, DNS_FROM_OPENWHOIS,DYN_RDNS_SHORT_HELO_HTML,FH_DATE_PAST_20XX,HTML_MESSAGE, MSGID_MULTIPLE_AT,RDNS_DYNAMIC,TVD_SPACE_RATIO autolearn=no version=3.2.5 It appears to be only 3 or 4 of the users on 1 domain of the 60 odd on the server, but is very confusing.

I have tried turning the spam checking on and off and so far no difference Any clues ?

Thanks

Denis

Status: 
Active

Comments

It looks like the SpamAssassin bayesian filter is marking that email as "ham".

What you can do to fix that is, with that email still on the server, log into Usermin, pull up that message, and click the "Spam" button. That will train SpamAssassin to mark those (and similar messages) as spam rather than ham.

HI

Thanks, this is HAM, but being marked as problem emails, when they should not be. I have also just noticed that one user is not getting the emails, but the main is that the problem exists even if I turn off spam checking for that domain !

Denis

Hmm, that's odd. According to the headers of that email, SpamAssassin doesn't actually think it's spam... it's spam status is "No", it has "AWL" set which means it's part of the "Auto Whitelist", and the bayesian filter is showing it as ham.

How is it being marked as a problem email, is it showing up in the server's spam folder? That would be unusual since SpamAssassin is marking it as ham.

One thing I notice is that "FH_DATE_PAST_20XX" is set... that may suggest that an old rule is present.

One thing that may help is to log into your server over SSH as root, and to run the command "sa-update". That will update all the SpamAssassin rules.

Also, some email clients have their own internal spam checking... Outlook does, for example. If the emails are ending up in Outlook's Junk folder, that may mean that it's Outlook that's marking it as spam. If that's the case, it could be Outlook that needs tweaked.