Re: [Assp-user] [jmm] Message is not OK, then is, then is not?

[Thomas E. <Tho...@th...>]

two mails (with different subjects) processed insite a single session - 
nothing magic,, nothing wrong
all information are available in the log
the first mail is detected as ham, the second one as spam


Connected: session:7FCCE111F7D8
12172-05425 Your Adobe Customer Care Case Is Closed CRM 08733000010039  - 
message size announcement: 34.69 kByte - Bayesian Check  - Prob: 0.00003 
=> ham
12175-07486 Your Adobe Customer Care Case Is Closed CRM 08733000010040  - 
message size announcement: 26.41 kByte - Bayesian Check  - Prob: 1.00000 
=> spam
disconnected: session:7FCCE111F7D8 processed ids 12172-05425 12175-07486

Thomas







Von:    "James Moe via Assp-user" <ass...@li...>
An:     "For Users of ASSP" <ass...@li...>
Kopie:  "James Moe" <ji...@so...>
Datum:  15.10.2020 19:18
Betreff:        [Assp-user] [jmm] Message is not OK, then is, then is not?



ASSP 2.6.3 (20020)

"@adobe.com" is in the Domains Whitelist.

  I am confused why this message was marked as Spam.
- @adobe.com is whitelisted
- the Bayesian check fails
- the message is declared MessageOK
- another Bayesian check fails
- the message is sent to the spam folder

2020-10-14_14:49:32 [Worker_1] Connected: session:7FCCE111F7D8 
40.107.76.80:8354
> 192.168.69.246:25 > 127.0.0.1:125
2020-10-14_14:49:32 [Worker_1] 40.107.76.80 info: got STARTTLS request 
from
40.107.76.80
2020-10-14_14:49:32 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> info: found message size 
announcement:
34.69 kByte
2020-10-14_14:49:33 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... info:
detected IP's on the mail routing way: 40.125.63.57, 
2603:10b6:5:1d5:0:0:0:10,
2603:10b6:5:1f7:0:0:0:12
2020-10-14_14:49:33 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... info:
detected source IP: 40.125.63.57

2020-10-14_14:49:35 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... 
Bayesian
Check  - Prob: 0.00003 => ham - answer/query relation: 100% of 332

2020-10-14_14:49:35 12172-05425 [Worker_1] [TLS-in] [TLS-out] [MessageOK]
40.107.76.80 <cus...@ad...> to: 
ji...@so...
message ok [Your Adobe Customer Care Case Is Closed CRM 08733000010039]

2020-10-14_14:49:35 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> info: found message size 
announcement:
26.41 kByte
2020-10-14_14:49:36 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... info:
detected IP's on the mail routing way: 40.125.62.1, 
2603:10b6:5:1d5:0:0:0:10,
2603:10b6:5:1f7:0:0:0:12
2020-10-14_14:49:36 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... info:
detected source IP: 40.125.62.1

2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... 
Bayesian
Check  - Prob: 1.00000 => spam - answer/query relation: 100% of 315

2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] [Bayesian]
40.107.76.80 <cus...@ad...> to: 
ji...@so...
[spam found] (Bayesian) [Your Adobe Customer Care Case Is Closed CRM
08733000010040] -> /usr/local/bin/assp2/spam-
yes/7486.eml;

2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... [SMTP 
Error]
554 5.7.1 Mail has run afoul of a SPAM filter -- send error reports to
pos...@so...
2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... 
finished
message - received DATA size: 14.81 kByte - sent DATA size: 0 Byte
2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80
<cus...@ad...> to: ji...@so... 
disconnected:
session:7FCCE111F7D8 40.107.76.80  - processed ids 12172-05425 12175-07486 
-
processing time 5 seconds


-- 
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
Think.


_______________________________________________
Assp-user mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-user






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************