Home > English, General, Techie > Spamassassin rules, or why my important e-mails get stuck in my anti-spam?

Spamassassin rules, or why my important e-mails get stuck in my anti-spam?

When using spamassassin, you might happen to realize that some important e-mail has been filtered out for some kind of wierd reason.

The e-mail will be classified as spam and get an introduction like this:

Content analysis details: (32.9 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.4 SARE_SUB_ENC_ISO2022JP Subject specifies display in non-English lang
1.0 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t
1.4 PLING_QUERY Subject has exclamation mark and question mark
0.8 SARE_SUB_PCT_LETTER subject has random-text spamsign
0.7 SARE_SUB_CASH_CHAR Subject has letter then $ then letter
3.2 CHARSET_FARAWAY_HEADER A foreign language charset used in headers
2.8 UNWANTED_LANGUAGE_BODY BODY: Message written in an undesired language
2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: getgirl-chancetime.com]
1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: getgirl-chancetime.com]
1.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: getgirl-chancetime.com]
3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: getgirl-chancetime.com]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[URIs: getgirl-chancetime.com]
[221.208.98.157 listed in zen.spamhaus.org]
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?221.208.98.157>]
0.2 SARE_TO_EMPTY To address is set to empty
0.0 DIGEST_MULTIPLE Message hits more than one network digest check
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS

In a case where the e-mail isn’t actually spam (the example above is really spam), you might want to know of a good place to get all these granted spam-points explained in order to help e-mail senders to fix their newsletters or account-renewal reminders, . Well, the way to go is the Spamassassin wiki, of course, but the page might not be so easy to find, so here it is: http://wiki.apache.org/spamassassin/Rules/

  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: