HBit
12/05/16, 18:33
Ik ben overgestapt van cPanel naar DirectAdmin en sindsdien ontvang ik enorm veel Duitse spam. SpamAssassin, BlockCracking & Easy Spam Fighter staat ook geinstalleerd en op het account staat SpamAssassin enabled. (Threshold 5.0 + Remove).
Ook staat de tweede optie op een maximum Spam Score van 15. Het rare is dat in de header de SpamTally op 35 staat, deze overschrijdt dan toch de spam score van 15? Hij wordt namelijk niet geflagged als spam. Ook staat RBL enabled in exim.conf.
Return-Path: <noanithin@yahoo.com>
Delivered-To: <cut>
Received: from <cut>
by <cut> (Dovecot) with LMTP id U4H0Gyx5MFdfSQAAhldbNg
for <cut>; Mon, 09 May 2016 14:16:20 +0200
Return-path: <noanithin@yahoo.com>
Envelope-to: ****
Delivery-date: Mon, 09 May 2016 14:16:20 +0200
Received: from [38.109.217.132] (helo=3131388.net)
by <cut> with esmtp (Exim 4.87)
(envelope-from <noanithin@yahoo.com>)
id 1azk6l-00051E-Ki
for <cut>; Mon, 09 May 2016 14:16:20 +0200
To: ****
Subject: Unser Angebot vom 9.5.2016
Message-ID: <3d5caaced551a438fcb3080196ce2bcc@utahskis.com>
Date: Mon, 09 May 2016 14:12:25 +0200
From: "Viola Senckberg" <noanithin@yahoo.com>
Reply-To: noanithin@yahoo.com
MIME-Version: 1.0
X-Mailer-LID: 43
X-Mailer-RecptId: 24137916
X-Mailer-SID: 2062
X-Mailer-Sent-By: 1
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Spam-Score: 3.5 (+++)
X-Spam-Report: Spam detection software, running on the system "******",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Guten Tag, hier finden sie wieder aktuelle Supersonderangebote
genau auf Sie zugeschnitten: Fahrradabsteller aus Stahl 2er bis 5er, mehr
Ordnung vor Haus und Firma schon ab 38,20 Euro [...]
Content analysis details: (3.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(noanithin[at]yahoo.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
SpamTally: Final spam score: 35
Ook staat de tweede optie op een maximum Spam Score van 15. Het rare is dat in de header de SpamTally op 35 staat, deze overschrijdt dan toch de spam score van 15? Hij wordt namelijk niet geflagged als spam. Ook staat RBL enabled in exim.conf.
Return-Path: <noanithin@yahoo.com>
Delivered-To: <cut>
Received: from <cut>
by <cut> (Dovecot) with LMTP id U4H0Gyx5MFdfSQAAhldbNg
for <cut>; Mon, 09 May 2016 14:16:20 +0200
Return-path: <noanithin@yahoo.com>
Envelope-to: ****
Delivery-date: Mon, 09 May 2016 14:16:20 +0200
Received: from [38.109.217.132] (helo=3131388.net)
by <cut> with esmtp (Exim 4.87)
(envelope-from <noanithin@yahoo.com>)
id 1azk6l-00051E-Ki
for <cut>; Mon, 09 May 2016 14:16:20 +0200
To: ****
Subject: Unser Angebot vom 9.5.2016
Message-ID: <3d5caaced551a438fcb3080196ce2bcc@utahskis.com>
Date: Mon, 09 May 2016 14:12:25 +0200
From: "Viola Senckberg" <noanithin@yahoo.com>
Reply-To: noanithin@yahoo.com
MIME-Version: 1.0
X-Mailer-LID: 43
X-Mailer-RecptId: 24137916
X-Mailer-SID: 2062
X-Mailer-Sent-By: 1
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Spam-Score: 3.5 (+++)
X-Spam-Report: Spam detection software, running on the system "******",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Guten Tag, hier finden sie wieder aktuelle Supersonderangebote
genau auf Sie zugeschnitten: Fahrradabsteller aus Stahl 2er bis 5er, mehr
Ordnung vor Haus und Firma schon ab 38,20 Euro [...]
Content analysis details: (3.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(noanithin[at]yahoo.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
SpamTally: Final spam score: 35