1 Topic by m.coulter

  • m.coulter
  • Member
  • Offline
  • Registered: 2022-02-02
  • Posts: 30

Topic: Why would the same email get a variety of Spam Scores

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.7.1
- Deployed with iRedMail Easy or the downloadable installer? Downloadable
- Linux/BSD distribution name and version: Ubuntu 20.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I notice that the same email delivered to multiple accounts is not scored identically.  Is there a reason why this is?  I ask because I'm having issues with some legitimate messages hitting the spam threshold and I'm trying to prevent anything that might not be working correctly and this seems odd behavior.

Post's attachments

Screenshot 2024-10-19 060203.png 45.81 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,121

Re: Why would the same email get a variety of Spam Scores

Please check the Postfix log lines and check the matched SpamAssassin rules of each message.

3 Reply by m.coulter

  • m.coulter
  • Member
  • Offline
  • Registered: 2022-02-02
  • Posts: 30

Re: Why would the same email get a variety of Spam Scores

Here are log file entries.  Not sure I'm seeing how the SPAM score is being calculated.

Oct 19 07:06:44 email amavis[1724564]: (1724564-01) Passed CLEAN {RelayedInbound}, [209.85.222.197]:51282 [159.135.225.113] ESMTP/ESMTP <bounce+d8fd41.11d54a-n.karsten=big.life@updates.epistle.org> -> <n.karsten@big.life>, (ESMTPS://[209.85.222.197]:51282 < UTF8SMTPS://159.135.225.113), Queue-ID: 4XVt0c2DFkz4wcG, Message-ID: <20241019070637.e22aaa147cc8529d@updates.epistle.org>, mail_id: L7gYKGLZTeeP, b: et5525ayj, Hits: 4.833, size: 18788, queued_as: 4XVt0h524yz4wtG, Subject: "Latest Updates from McLarty Family", From: <mclarty@updates.epistle.org> (dkim:AUTHOR), helo=mail-qk1-f197.google.com, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FORGED_REPLYTO=2.503,HTML_IMAGE_RATIO_02=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-1.25,RCVD_IN_PSBL=2.7,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001,SPF_HELO_NONE=0.001,SPF_SOFTFAIL=0.972,URIBL_BLOCKED=0.001,URIBL_DBL_BLOCKED_OPENDNS=0.001,URIBL_ZEN_BLOCKED_OPENDNS=0.001], autolearn=no...


Oct 19 07:06:45 email amavis[1724572]: (1724572-01) Passed CLEAN {RelayedInbound}, [209.85.222.200]:58754 [159.135.225.113] ESMTP/ESMTP <bounce+63d7ca.11d54a-m.schneider=big.life@updates.epistle.org> -> <m.schneider@big.life>, (ESMTPS://[209.85.222.200]:58754 < UTF8SMTPS://159.135.225.113), Queue-ID: 4XVt0c4LsMz4wkx, Message-ID: <20241019070637.deeb0ed2d1db3fb0@updates.epistle.org>, mail_id: ZuyfBcU7erlV, b: oYqGAKFpY, Hits: 4.832, size: 18827, queued_as: 4XVt0h6F69z4wcG, Subject: "Latest Updates from McLarty Family", From: <mclarty@updates.epistle.org> (dkim:AUTHOR), helo=mail-qk1-f200.google.com, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FORGED_REPLYTO=2.503,HTML_IMAGE_RATIO_02=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-1.25,RCVD_IN_PSBL=2.7,RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001,SPF_HELO_NONE=0.001,SPF_SOFTFAIL=0.972,URIBL_BLOCKED=0.001,URIBL_DBL_BLOCKED_OPENDNS=0.001,URIBL_ZEN_BLOCKED_OPENDNS=0.001], autolearn=no autolearn_force=no, autolearnscore=4...

Oct 19 07:06:45 email amavis[1724565]: (1724565-01) Passed CLEAN {RelayedInbound}, [209.85.222.197]:53498 [159.135.225.113] ESMTP/ESMTP <bounce+66cd70.11d54a-j.evans=big.life@updates.epistle.org> -> <j.evans@big.life>, (ESMTPS://[209.85.222.197]:53498 < UTF8SMTPS://159.135.225.113), Queue-ID: 4XVt0c2sknz4whv, Message-ID: <20241019070637.6ffcacf98db33ead@updates.epistle.org>, mail_id: ar25_tII48oL, b: A6o2-3pcs, Hits: 4.833, size: 18761, queued_as: 4XVt0h6mbCz4wwy, Subject: "Latest Updates from McLarty Family", From: <mclarty@updates.epistle.org> (dkim:AUTHOR), helo=mail-qk1-f197.google.com, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FORGED_REPLYTO=2.503,HTML_IMAGE_RATIO_02=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-1.25,RCVD_IN_PSBL=2.7,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001,SPF_HELO_NONE=0.001,SPF_SOFTFAIL=0.972,URIBL_BLOCKED=0.001,URIBL_DBL_BLOCKED_OPENDNS=0.001,URIBL_ZEN_BLOCKED_OPENDNS=0.001], autolearn=no aut...

Oct 19 07:06:45 email amavis[1724567]: (1724567-01) Passed CLEAN {RelayedInbound}, [209.85.160.198]:59870 [159.135.225.113] ESMTP/ESMTP <bounce+c2189d.11d54a-j.gerlach=big.life@updates.epistle.org> -> <j.gerlach@big.life>, (ESMTPS://[209.85.160.198]:59870 < UTF8SMTPS://159.135.225.113), Queue-ID: 4XVt0c3XXLz4wj4, Message-ID: <20241019070637.95b854e7cdb25b83@updates.epistle.org>, mail_id: VcBMXhxgC5-f, b: VGJVsYFnV, Hits: 6.085, size: 18799, queued_as: 4XVt0h6lzvz4wlS, Subject: "Latest Updates from McLarty Family", From: <mclarty@updates.epistle.org> (dkim:AUTHOR), helo=mail-qt1-f198.google.com, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FORGED_REPLYTO=2.503,HTML_IMAGE_RATIO_02=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_BLOCKED=0.001,RCVD_IN_MSPIKE_H3=0.001,RCVD_IN_MSPIKE_WL=0.001,RCVD_IN_PSBL=2.7,RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001,SPF_HELO_NONE=0.001,SPF_SOFTFAIL=0.972,URIBL_BLOCKED=0.001,URIBL_DBL_BLOCKED_OPENDNS=0.001,URIBL_ZEN_BLOCKED_OPENDNS=0.001], autolearn=no autolearn_force...

Oct 19 07:06:54 email amavis[1724571]: (1724571-01) Passed CLEAN {RelayedInbound}, [209.85.160.197]:47174 [159.135.225.113] ESMTP/ESMTP <bounce+014c36.11d54a-jo.ibsen=big.life@updates.epistle.org> -> <jo.ibsen@big.life>, (ESMTPS://[209.85.160.197]:47174 < UTF8SMTPS://159.135.225.113), Queue-ID: 4XVt0p1kJpz4wcG, Message-ID: <20241019070643.6ac19fedd4720977@updates.epistle.org>, mail_id: 9VI9D1ZuTSD7, b: dpA5IxRyH, Hits: 3.385, size: 18775, queued_as: 4XVt0t2QgWz4wlN, Subject: "Latest Updates from McLarty Family", From: <mclarty@updates.epistle.org> (dkim:AUTHOR), helo=mail-qt1-f197.google.com, Tests: [DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FORGED_REPLYTO=2.503,HTML_IMAGE_RATIO_02=0.001,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_BLOCKED=0.001,RCVD_IN_MSPIKE_H3=0.001,RCVD_IN_MSPIKE_WL=0.001,RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001,SPF_HELO_NONE=0.001,SPF_SOFTFAIL=0.972,URIBL_BLOCKED=0.001,URIBL_DBL_BLOCKED_OPENDNS=0.001,URIBL_ZEN_BLOCKED_OPENDNS=0.001], autolearn=no autolearn_force=no, autolearnscore...