Email

ID #342

Why is/isn't an email being marked as spam?

Applies to: Grid System

When you have your spam filtering enabled, Modwest uses a variety of different methods to filter your email.

If you want to know more details about how your messages are being filtered for spam, then you can look at the headers for the email. If you are unsure how to view the headers of your email, check out our FAQ here.

Within the headers of the email you can find out about how the spam filtering is working for each individual email. There are two headers to look for when trying to determine how/if the message has been marked as spam:


X-Spam-Status:
X-Spam-Report:


These two headers will contain information about the different tests that a particular message has failed. Let's take a look at the headers of an email that has been marked as spam:


X-Spam-Status: Yes, score=5.9 required=5.0 tests=HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
URIBL_JP_SURBL autolearn=disabled version=3.1.7-deb
X-Spam-Report:
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
* above 50%
* [cf: 100]
* 0.5 RAZOR2_CHECK Listed in Razor2 ( http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]
* 3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: basekept.cn]


There is quite a bit of information here. Let's examine the important parts of this:
X-Spam-Status:


  • score=5.9 - the total score that was given to this email based on the scores from the X-Spam-Report.

  • required=5.0 - number based on what you have your spam filtering set to ( 5.0 = Spam Detection Level of "High")

  • test=... - the different tests that were triggered by the content of the email


X-Spam-Report:
This part of the headers is split up into three sections. Let's take a look at one of the lines from the X-Spam-Report section of the headers:
* 0.5 RAZOR2_CHECK Listed in Razor2 ( http://razor.sf.net/)


  • The first item listed on the line is the number of points added for not passing the particular test (0.5)

  • The second item listed is the name of the test that done (RAZOR2_CHECK)

  • The rest of the information usually contains details about the test or a link to find out more information about the test


NOTE: the tests that appear in the headers of the email only appear if the content of the message has failed the test. There are numerous tests that are used in attempting to filter spam.

If you want more information about SpamAssassin and the various tests that it performs, you can check out their documentation here.


Last update: 2010-10-05 16:01
Author: FAQ Admin
Revision: 1.2

Digg it! Share on Facebook Print this record Send FAQ to a friend Show this as PDF file
Please rate this FAQ:

Average rating: 2 (1 Vote)

completely useless 1 2 3 4 5 most valuable

You can comment this FAQ