problem with spam report--could it be a bug? - SpamAssassin

This is a discussion on problem with spam report--could it be a bug? - SpamAssassin ; I was told by Kintera, our email service, to email this address regarding a problem I'm having with my spam score report. A report is generated with each test email we send to ourselves via Kintera. The report lists things ...

+ Reply to Thread
Results 1 to 5 of 5

Thread: problem with spam report--could it be a bug?

  1. problem with spam report--could it be a bug?

    I was told by Kintera, our email service, to email this address regarding a
    problem I'm having with my spam score report. A report is generated with each
    test email we send to ourselves via Kintera. The report lists things that may
    trigger high spam scores. I was given the report below for an email newsletter I
    send every month (I've never had a problem before) and have an unusually high
    score because, presumably, of the word Rolex. That word does not appear anywhere
    in the coding of my message. I've even removed all instances of the word "role"
    and "watch" but nothing changes the score. Am I misinterpreting the report or
    could there be a bug in the spamassassin software that is generating incorrect
    results?



    Thank you for any guidance you can provide.



    Sincerely, Amy Marcott



    The report below identifies areas of your eMail that might trigger spam

    blocking software for your recipients by simulating the process typically

    used by most ISPs. If an ISP identifies this mail as spam, it could cause

    your recipient not to receive your mailing.



    As a guideline, a score of 2.2 or lower should be received successfully

    in most cases (Yahoo typically blocks items with a score of 2.3 or higher,

    and Hotmail will block scores of 2.4 or higher.) For the highest success

    rate, a score of 2.0 or lower is recommended.



    *NOTE: The scores above do not reflect any guarantee of mail delivery or

    acceptance by email providers. They are provided only as general guidelines.

    Information on current spam scores is available on ISP websites or for

    more information on SpamAssassin visit: http://www.spamassassin.org




    **************************** Score Summary ****************************



    Your spam score is: 4.5 points



    Score Details:

    pts rule name description

    ---- ---------------------- --------------------------------------------------

    -1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP

    3.1 FRT_ROLEX BODY: ReplaceTags: Rolex

    1.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

    0.0 HTML_MESSAGE BODY: HTML included in message

    1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts



    The original message was not completely plain text, and may be unsafe to

    open with some email clients; in particular, it may contain a virus,

    or confirm that your address can receive spam. If you wish to view

    it, it may be safer to save it to a file and open it with an editor.







    _________________________________

    Amy Marcott
    Web Writer/Editor
    MIT Alumni Association
    201 Vassar Street
    Building W59-200
    Cambridge, MA 02139-4307
    617.324.0106
    amarcott@mit.edu
    http://alum.mit.edu





  2. Re: problem with spam report--could it be a bug?

    I was told by Kintera, our email service, to email this address
    regarding a problem I'm having with my spam score report. A report is
    generated with each test email we send to ourselves via Kintera. The
    report lists things that may trigger high spam scores. I was given the
    report below for an email newsletter I send every month (I've never
    had a problem before) and have an unusually high score because,
    presumably, of the word Rolex. That word does not appear anywhere in
    the coding of my message. I've even removed all instances of the word
    "role" and "watch" but nothing changes the score. Am I misinterpreting
    the report or could there be a bug in the spamassassin software that
    is generating incorrect results?

    Your test message seems to be html, so you should be looking at the raw
    html with a text editor (such as emacs), rather than in some html
    renderer or editor. It's possible that the offending word rolex is
    somehow in the html source but not rendered. It is also possible that
    there is a bug in the SA rule and that it's falsing.

    The rule is FRT_ROLEX, which is defined as:

    ##{ FRT_ROLEX

    ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
    body FRT_ROLEX /\b(?!rolex)/i
    describe FRT_ROLEX ReplaceTags: Rolex
    endif
    ##} FRT_ROLEX

    So it may be detecting a set of html tags which looks like an attempte
    to spell out rolex.

    See
    http://wiki.apache.org/spamassassin/ReplaceTags
    http://spamassassin.apache.org/full/...placeTags.html

    Your spam score is: 4.5 points

    -1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
    3.1 FRT_ROLEX BODY: ReplaceTags: Rolex
    1.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
    0.0 HTML_MESSAGE BODY: HTML included in message
    1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

    The ALL_TRUSTED rule is firing for kintera's test, but that means that
    the message was only handled by trustworthy senders. So it will likely
    not fire when the mail arrives, and thus your score is higher than you
    think.

    The mail is probably only in html, rather than being
    multipart/alternative with the same content in plain text. Fixing that
    problem would help. (I use to get some newsletters from MIT Alumni
    Association, but unsubscribed because they were html only.)

    Without you posting the draft mail, or somehow making it available, I do
    not expect that anyone will be able to help you beyond advice like the
    above.

    In your case (being at MIT) I would recommend that you call SIPB and ask
    for help.


  3. Re: problem with spam report--could it be a bug?

    On 12.06.08 13:45, Amy Marcott wrote:
    > I was told by Kintera, our email service, to email this address regarding a
    > problem I'm having with my spam score report. A report is generated with each
    > test email we send to ourselves via Kintera. The report lists things that may
    > trigger high spam scores. I was given the report below for an email newsletter I
    > send every month (I've never had a problem before) and have an unusually high
    > score because, presumably, of the word Rolex. That word does not appear anywhere
    > in the coding of my message. I've even removed all instances of the word "role"
    > and "watch" but nothing changes the score. Am I misinterpreting the report or
    > could there be a bug in the spamassassin software that is generating incorrect
    > results?


    could you please upload the raw message somewhere?

    --
    Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
    Warning: I wish NOT to receive e-mail advertising to this address.
    Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
    I feel like I'm diagonally parked in a parallel universe.


  4. Re: problem with spam report--could it be a bug?

    Hi Amy,
    At 10:45 12-06-2008, Amy Marcott wrote:
    >I was told by Kintera, our email service, to email this address
    >regarding a problem I'm having with my spam score report. A report


    Usually, it's up to your email service provider to deal with such questions.

    http://spamassassin.apache.org/users.html

    >is generated with each test email we send to ourselves via Kintera.
    >The report lists things that may trigger high spam scores. I was
    >given the report below for an email newsletter I send every month
    >(I've never had a problem before) and have an unusually high score
    >because, presumably, of the word Rolex. That word does not appear
    >anywhere in the coding of my message. I've even removed all
    >instances of the word "role" and "watch" but nothing changes the
    >score. Am I misinterpreting the report or could there be a bug in
    >the spamassassin software that is generating incorrect results?


    If you are not an end-user, post a link to the message including full
    headers and the spam score report.

    If it was a bug in the SpamAssassin software, it can be fixed. That
    doesn't mean that it will solve your problem unless your email
    service provider and the receiving ends update their software to
    include the bug fix.

    Regards,
    -sm


  5. Re: problem with spam report--could it be a bug?

    I talked with Amy offline and she sent me the raw message. I figured
    out what happened:

    FRT_ROLEX fired (at 3.1 points), as it did when kintera evaluated:

    [11035] dbg: rules: ran body rule FRT_ROLEX ======> got hit: "Roll Ex"

    Searching in the message, I found a list with "... Honor Roll" followed by
    "Externship Sponsors", with each wrapped in and style=...>.

    So the rule feels like it might be a bit too agressive to me.