marked as spam unless whitelist

cauw · Unread post by **cauw** » Wed Jul 09, 2008 4:37 am

Here you have a header of the messages i have problems with, it is no spam, the addresses from sender are in my whitelist at local.cf but still it is marked as spam....

Code: Select all

DomainKey-Status: no signature
To: robin@dutchzone.be
Subject: ****SPAM**** HIGH *  NAVIGON - don't travel without !
Date: Tue, 8 Jul 2008 17:59:04 +0200
From: noreply@diditech.eu
Message-ID: <dec3a9b4a1da90592ad315a5dffc71f2@lists.diditech.eu>
Precedence: bulk
Errors-To: unsubscribe@diditech.eu
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="b1_dec3a9b4a1da90592ad315a5dffc71f2"

Unread post by **scott** » Wed Jul 09, 2008 8:32 am

where are you setting your whitelists at? /etc/mail/spamassassin/local.cf?

cauw · Unread post by **cauw** » Thu Jul 10, 2008 1:11 pm

indeed i have that whitelist in /etc/mail/spamassassin/local.cf

Unread post by **scott** » Fri Jul 11, 2008 8:33 am

Weird, that should work. I'd talk to the spamassassin folks about it.

cauw · Unread post by **cauw** » Mon Jul 14, 2008 6:39 am

I'm curious about this issue, it's not funny that things in my whitelist get in the marked spam!

breun · Unread post by **breun** » Mon Jul 14, 2008 6:42 am

Did you restart SpamAssassin after modifying the configuration? Are you sure you got the syntax right?

cauw · Unread post by **cauw** » Mon Jul 14, 2008 9:54 am

breun wrote:Did you restart SpamAssassin after modifying the configuration? Are you sure you got the syntax right?

Yes, SA is restarted, and i'm sure the syntax is right, i have other domains working well! I've checked twice the syntax of the mailaddress that is marked as spam but no solution so far!

breun · Unread post by **breun** » Mon Jul 14, 2008 10:13 am

Did you check /usr/local/psa/var/log/maillog for these messages? It should tell you what tests SpamAssassin used to determine the score for the message.

cauw · Unread post by **cauw** » Mon Jul 14, 2008 12:10 pm

Here you have some part of my log:

Code: Select all

Jul  6 23:36:24 sam spamd[20734]: spamd: checking message <eb2ae7ae9b1e86e4d0e00cd83a8f53e9@lists.diditrade.com> for info@web-vision.be:8
Jul  6 23:36:25 sam spamd[20734]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /var/spool/qscan/.spamassassin/auto-whitelist.lock.sam.dutchzone.be.20734 f
or /var/spool/qscan/.spamassassin/auto-whitelist.lock: Permission denied
Jul  6 23:36:26 sam spamd[20734]: spamd: identified spam (4.2/4.0) for info@web-vision.be:8 in 1.4 seconds, 6238 bytes.
Jul  6 23:36:26 sam spamd[20734]: spamd: result: Y 4 - BAYES_50,HTML_COMMENT_SAVED_URL,HTML_IMAGE_RATIO_02,HTML_MESSAGE,PYZOR_CHECK,SPF_PASS scantime=1.4,size=6238,user=info@web-vision.be,uid=8,required_scor
e=4.0,rhost=sam.dutchzone.be,raddr=127.0.0.1,rport=60648,mid=<eb2ae7ae9b1e86e4d0e00cd83a8f53e9@lists.diditrade.com>,bayes=0.500473,autolearn=spam
Jul  6 23:36:26 sam qmail-scanner[351]: Clear:RC:0(88.198.1.122):SA:1(4.2/4.0): 1.457312 6197 unsubscribe@diditech.eu info@web-vision.be ICYBOX_-_Summer <eb2ae7ae9b1e86e4d0e00cd83a8f53e9@lists.diditrade.com>
 1215380184.353-1.sam.dutchzone.be:4918 orig-sam.dutchzone.be1215380184791351:6197 1215380184.353-0.sam.dutchzone.be:296
Jul  6 23:37:44 sam spamd[20734]: spamd: checking message <a7c7baad1e4beaaaeff94a64f7bcf4eb@lists.diditrade.com> for robin@dutchzone.be:8
Jul  6 23:37:45 sam spamd[20734]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /var/spool/qscan/.spamassassin/auto-whitelist.lock.sam.dutchzone.be.20734 f
or /var/spool/qscan/.spamassassin/auto-whitelist.lock: Permission denied
Jul  6 23:37:46 sam spamd[20734]: spamd: identified spam (7.7/4.0) for robin@dutchzone.be:8 in 1.3 seconds, 6238 bytes.
Jul  6 23:37:46 sam spamd[20734]: spamd: result: Y 7 - BAYES_99,HTML_COMMENT_SAVED_URL,HTML_IMAGE_RATIO_02,HTML_MESSAGE,PYZOR_CHECK,SPF_PASS scantime=1.3,size=6238,user=robin@dutchzone.be,uid=8,required_scor
e=4.0,rhost=sam.dutchzone.be,raddr=127.0.0.1,rport=60654,mid=<a7c7baad1e4beaaaeff94a64f7bcf4eb@lists.diditrade.com>,bayes=1.000000,autolearn=spam
Jul  6 23:37:46 sam qmail-scanner[386]: Clear:RC:0(88.198.1.122):SA:1(7.7/4.0): 1.332253 6197 unsubscribe@diditech.eu robin@dutchzone.be ICYBOX_-_Summer <a7c7baad1e4beaaaeff94a64f7bcf4eb@lists.diditrade.com>

cauw · Unread post by **cauw** » Mon Jul 28, 2008 8:10 am

and still having this problem, is there any way to solve this?

Unread post by **scott** » Mon Jul 28, 2008 10:08 am

BAYES_99,HTML_COMMENT_SAVED_URL,HTML_IMAGE_RATIO_02,HTML_MESSAGE,PYZOR_CHECK,SPF_PASS

This means that the Pyzor network, and the Bayesian classifier on your system are tagging your mail as spam. Thats pretty bad, if pyzor is tagging it then that means everyone in the world that uses pyzor would tag your mail as spam too.

cauw · Unread post by **cauw** » Thu Aug 07, 2008 6:11 pm

scott wrote:BAYES_99,HTML_COMMENT_SAVED_URL,HTML_IMAGE_RATIO_02,HTML_MESSAGE,PYZOR_CHECK,SPF_PASS

This means that the Pyzor network, and the Bayesian classifier on your system are tagging your mail as spam. Thats pretty bad, if pyzor is tagging it then that means everyone in the world that uses pyzor would tag your mail as spam too.

And is there a way how to solve this?
And it is not my own mailaddress but from a company we are working with that is marked as spam...

Unread post by **scott** » Thu Aug 07, 2008 6:22 pm

well they've been tagged by Pyzor, so no. The whole world (or at least the pyzor using parts) are tagging their mail. Its not just you.