two mails (with different subjects) processed insite a single session - nothing magic,, nothing wrong all information are available in the log the first mail is detected as ham, the second one as spam
Connected: session:7FCCE111F7D8 12172-05425 Your Adobe Customer Care Case Is Closed CRM 08733000010039 - message size announcement: 34.69 kByte - Bayesian Check - Prob: 0.00003 => ham 12175-07486 Your Adobe Customer Care Case Is Closed CRM 08733000010040 - message size announcement: 26.41 kByte - Bayesian Check - Prob: 1.00000 => spam disconnected: session:7FCCE111F7D8 processed ids 12172-05425 12175-07486 Thomas Von: "James Moe via Assp-user" <[email protected]> An: "For Users of ASSP" <[email protected]> Kopie: "James Moe" <[email protected]> Datum: 15.10.2020 19:18 Betreff: [Assp-user] [jmm] Message is not OK, then is, then is not? ASSP 2.6.3 (20020) "@adobe.com" is in the Domains Whitelist. I am confused why this message was marked as Spam. - @adobe.com is whitelisted - the Bayesian check fails - the message is declared MessageOK - another Bayesian check fails - the message is sent to the spam folder 2020-10-14_14:49:32 [Worker_1] Connected: session:7FCCE111F7D8 40.107.76.80:8354 > 192.168.69.246:25 > 127.0.0.1:125 2020-10-14_14:49:32 [Worker_1] 40.107.76.80 info: got STARTTLS request from 40.107.76.80 2020-10-14_14:49:32 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> info: found message size announcement: 34.69 kByte 2020-10-14_14:49:33 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] info: detected IP's on the mail routing way: 40.125.63.57, 2603:10b6:5:1d5:0:0:0:10, 2603:10b6:5:1f7:0:0:0:12 2020-10-14_14:49:33 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] info: detected source IP: 40.125.63.57 2020-10-14_14:49:35 12172-05425 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] Bayesian Check - Prob: 0.00003 => ham - answer/query relation: 100% of 332 2020-10-14_14:49:35 12172-05425 [Worker_1] [TLS-in] [TLS-out] [MessageOK] 40.107.76.80 <[email protected]> to: [email protected] message ok [Your Adobe Customer Care Case Is Closed CRM 08733000010039] 2020-10-14_14:49:35 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> info: found message size announcement: 26.41 kByte 2020-10-14_14:49:36 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] info: detected IP's on the mail routing way: 40.125.62.1, 2603:10b6:5:1d5:0:0:0:10, 2603:10b6:5:1f7:0:0:0:12 2020-10-14_14:49:36 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] info: detected source IP: 40.125.62.1 2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] Bayesian Check - Prob: 1.00000 => spam - answer/query relation: 100% of 315 2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] [Bayesian] 40.107.76.80 <[email protected]> to: [email protected] [spam found] (Bayesian) [Your Adobe Customer Care Case Is Closed CRM 08733000010040] -> /usr/local/bin/assp2/spam- yes/7486.eml; 2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] [SMTP Error] 554 5.7.1 Mail has run afoul of a SPAM filter -- send error reports to [email protected] 2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] finished message - received DATA size: 14.81 kByte - sent DATA size: 0 Byte 2020-10-14_14:49:37 12175-07486 [Worker_1] [TLS-in] [TLS-out] 40.107.76.80 <[email protected]> to: [email protected] disconnected: session:7FCCE111F7D8 40.107.76.80 - processed ids 12172-05425 12175-07486 - processing time 5 seconds -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! *******************************************************
_______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
