I have a customer asking why some mails where tagged as ***Possible SPAM*** so I checked my settings and this is what they look like: SPAM tag level 3 SPAM tag2 level 6 SPAM kill level 9 SPAM dsn cutoff level 9 SPAM quarantine cutoff level 15 SPAM modifies subject YES SPAM subject tag ***POSSIBLE SPAM*** SPAM subject tag2 ***SPAM*** Now that explains why thus particular email that had a score of 3.4 was tagged as it was but I'm now struggling to find out WHY Amavis tagged it with this particular score and I have no idea what RelayedTaggedInbound means as I guess that would be the explanation?
You would have to look at the mail's source code to find this out. There should be an explanation in the mails source what spam-checks and scores were applied. It's mostly impossible to see the reason when only looking at the mail log.
Ah, thanks. I checked and found: Then I went and checked what RCVD_ILLEGAL_IP means, found explanations here: http://wiki.apache.org/spamassassin/Rules/RCVD_ILLEGAL_IP I'm just not sure which IP the check has a problem with. The only possible problem I see is in a hello: HELO ?10.0.1.5? And there is a 0.0.0.0 somewhere in the middle of the chain!? Can you see something that I don't see?
Possibly, just curious, does Amavis check for RCVD_ILLEGAL_IP inside the whole email chain? I assumed it just checked the last step, i.e. where the destination mail server received the email from... Thanks for your help!
It's not amavis, that checks this. Amavis pipes the message through spamassassin and this checks all the lines, not only the last "received".
