This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Spam score too high?

Hi all

I've had a few legit emails get blackholed just recently, as they scored 9+ according to the content filter logs (I have messages that score 8+ to be blackholed).

Now the thing is, these messages didn't look like they should have scored anywhere near that mark. From the content log, it shows:

weed:antispam: spamd report: 0.1 X_PRIORITY_HIGH Sent with 'X-Priority' set to high
weed:antispam: spamd report: 0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
weed:antispam: spamd report: 1.0 HTML_FONT_BIG  BODY: HTML tag for a big font size
spamd[19109]: spamd: result: .  1 - HTML_FONT_BIG,HTML_TAG_EXIST_TBODY,X_PRIORITY_HIGH scantime=3.6,size=41314,user=(unknown),uid=65534,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37542,mid=,autolearn=disabled
weed:antispam: protocol: unknown score: 9.2(0/1000)

Now the way I'm reading this, is the score should have been 1.2 (I'm thinking the number in before the type is the score it receives).

Anyhow, is there some other factors that are not logged to add to the spam score, or am I reading this wrong? It's happened on 4 legit emails that I know of so far...

Thanks
Matt


This thread was automatically locked due to age.
Parents Reply Children
  • I don't think that line with unknown protocol 9.2 is part of the spam score, but the actual total score it receieved. All the messages scanned have that lines, but with differing numbers.

    And if I look at the smtp log, this particular email scored 9.2, which indicates it's the total.