Menu

#377 amavis incorectly sums spam scores

open
nobody
score (1)
3
2013-11-19
2013-11-19
vontomke
No

Please find below all of the email header, how come it ended up with spam score of 16.412 ?

Return-Path: <>
Delivered-To: spam-quarantine
X-Envelope-From: Adam.Yyyy@XXX2
X-Envelope-To: msome1@XXX.pl
X-Envelope-To-Blocked: msome1@XXX.pl
X-Quarantine-ID: <iPrkIWB-PpAM>
X-Amavis-OS-Fingerprint: Windows XP/2000 (RFC1323+, w+, tstamp-) (firewall!)
[GENERIC] Signature: [8192:116:0:52:M1460,N,W8,N,N,S:.:Windows:?],
(distance 12, link: ethernet/modem)
X-Spam-Flag: YES
X-Spam-Score: 16.412
X-Spam-Level: ****
X-Spam-Status: Yes, score=16.412 tag=0 tag2=6 kill=10 tests=[BAYES_99=3.5,
BOTNET_SERVERWORDS=-0.01, FUZZY_OCR_WRONG_CTYPE=1.500,
FUZZY_OCR_WRONG_EXTENSION=1.500, HTML_MESSAGE=0.001, L_P0F_WXP=2.5,
RCVD_IN_DNSWL_NONE=-0.0001, SARE_GIF_ATTACH=1.42, URIBL_BLOCKED=0.001]

autolearn=spam
Received: from smtp.XXX.pl ([127.0.0.1])
by localhost (mail.XXX.pl [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id iPrkIWB-PpAM for msome1@XXX.pl;
Mon, 18 Nov 2013 10:45:16 +0100 (CET)
Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3lp0080.outbound.protection.outlook.com [213.199.154.80])
(using TLSv1 with cipher AES128-SHA (128/128 bits))
(Client CN "mail.protection.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK))
by smtp.XXX.pl (Postfix) with ESMTPS id 312E0160050
for msome1@XXX.pl; Mon, 18 Nov 2013 10:45:15 +0100 (CET)
Received: from AMSPR07CA005.eurprd07.prod.outlook.com (10.242.77.173) by
AMSPR07MB100.eurprd07.prod.outlook.com (10.242.90.27) with Microsoft SMTP
Server (TLS) id 15.0.820.5; Mon, 18 Nov 2013 09:45:20 +0000
Received: from AM1FFO11FD044.protection.gbl (2a01:111:f400:7e00::120) by
AMSPR07CA005.outlook.office365.com (2a01:111:e400:8000::45) with Microsoft
SMTP Server (TLS) id 15.0.820.5 via Frontend Transport; Mon, 18 Nov 2013
09:45:20 +0000
Received: from CENPR426.intra.local (194.104.194.224) by
AM1FFO11FD044.mail.protection.outlook.com (10.174.64.233) with Microsoft SMTP
Server (TLS) id 15.0.825.6 via Frontend Transport; Mon, 18 Nov 2013 09:45:19
+0000
Received: from CENPR425.intra.local ([::1]) by CENPR426.intra.local ([::1])
with mapi id 14.03.0123.003; Mon, 18 Nov 2013 10:45:16 +0100
From: "Yyyy, Adam" Adam.Yyyy@XXX2
To: =?utf-8?B?TWHFgm9ncnphdGEgU2Fkbw==?= msome1@XXX.pl
Subject: FW: Potwierdzenie zawarcia ubezpieczenia OC+AC
Thread-Topic: Potwierdzenie zawarcia ubezpieczenia OC+AC
Thread-Index: AQHO4fAEAWMWQJ6xYkCeIOzuxld01ZomHJwAgASlN0A=
Date: Mon, 18 Nov 2013 09:45:15 +0000
Message-ID: DB83E56C93DE764184D0CB7F7DE8D24D06774880@CENPR425.intra.local
Accept-Language: en-US
Content-Language: pl-PL
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.65.6.70]
Content-Type: multipart/mixed;
boundary="009_DB83E56C93DE764184D0CB7F7DE8D24D06774880CENPR425intralo"
MIME-Version: 1.0
X-Forefront-Antispam-Report:
CIP:194.104.194.224;CTRY:NL;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(48214007)(252514010)(377454003)(199002)(189002)(76482001)(51856001)(46102001)(4396001)(47736001)(49866001)(83072001)(47976001)(54356001)(53806001)(16236675002)(87936001)(74706001)(87266001)(76796001)(63696002)(65816001)(20776003)(80976001)(81542001)(76786001)(74876001)(80022001)(81816001)(84326002)(512874002)(85306002)(15975445006)(18206015023)(81342001)(50986001)(76176001)(567704001)(77096001)(15974865002)(56816003)(81686001)(69226001)(15202345003)(6806004)(79102001)(568964001)(16601075003)(54316002)(59766001)(77982001)(44976005)(19580395003)(83322001)(19580405001)(55846006)(31966008)(47446002)(74502001)(2656002)(33656001)(74662001)(74366001)(17760045001)(71186001)(56776001)(562774006);DIR:OUT;SFP:;SCL:1;SRVR:AMSPR07MB100;H:CENPR426.intra.local;CLIP:194.104.194.224;FPR:;RD:InfoDomainNonexistent;A:1;MX:1;LANG:pl;
X-Forefront-PRVS: 00342DD5BC
X-OriginatorOrg: XXX2

Discussion


Log in to post a comment.