Mailing List Archive

SPAM report
Hi! There're no line breaks in spam report. Is there a way to make it more
readable?

X-Spam-Report: Content analysis details: (5.4 points, 5.0 required) pts
rule name description ---- ----------------------
-------------------------------------------------- -0.5 BAYES_05

BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
DKIM_VALID_AU
Message has a valid DKIM or DK signature from author's domain -0.1
DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessarily valid 0.0 FREEMAIL_FROM Sender email is commonly
abused
enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE RBL: Sender
listed
at http://www.dnswl.org/, no trust [209.85.221.42 listed in list.dnswl.org]
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
On 9/30/18 4:44 PM, ????????? ???????? via Exim-users wrote:
> Hi! There're no line breaks in spam report.

Exim does not produce that; you must be calling something
else from Exim.
--
Cheers,
Jeremy



--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
No, it doesn't. This is spamassassin report. The relevant part from
exim.conf is

warn add_header = X-Spam-Score: $spam_score\n\
X-Spam-Report: $spam_report

This is exim-4.90.1 on el6.

For the bounced mail there're nice looking reports in exim reject.log. The
question is about spam which goes through. I'd like to make it easier to
read the reports in raw messages.

Thanks.


??, 30 ????. 2018 ?. ? 18:59, Jeremy Harris via Exim-users <
exim-users@exim.org>:

> On 9/30/18 4:44 PM, ????????? ???????? via Exim-users wrote:
> > Hi! There're no line breaks in spam report.
>
> Exim does not produce that; you must be calling something
> else from Exim.
> --
> Cheers,
> Jeremy
>
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
Hello!

On Sun, 30 Sep 2018 at 18:44:36 (+0300), ????????? ???????? via Exim-users wrote:

> Hi! There're no line breaks in spam report. Is there a way to make it more
> readable?

Here's what I use to make report readable:

main config:
SHORTNAME = ${extract{1}{.}{$primary_hostname}}

acl_check_content:
[...]
add_header = X-SHORTNAME-SA: ${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ [}}}{\N\n\s*(-?\d+\.\d+ [[:upper:][:digit:]_]+)\N}{\nX-SHORTNAME-SA: \$1 -> }}}{\N(\s{2,}|\t)\N}{ }}

As I've got several Exim hosts with SpamAssassin checks configured custom X-header is used to determine which host added the report, so you can easily replace "X-SHORTNAME-SA" with more common "X-Spam-Report" for you. SpamAssassin itself is configured to not output report header. Try it and tune to your needs if needed =)

> X-Spam-Report: Content analysis details: (5.4 points, 5.0 required) pts
> rule name description ---- ----------------------
> -------------------------------------------------- -0.5 BAYES_05

> BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
> DKIM_VALID_AU
> Message has a valid DKIM or DK signature from author's domain -0.1
> DKIM_VALID Message has at least one valid DKIM or DK signature
> 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
> necessarily valid 0.0 FREEMAIL_FROM Sender email is commonly
> abused
> enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
> BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
> BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE RBL: Sender
> listed
> at http://www.dnswl.org/, no trust [209.85.221.42 listed in list.dnswl.org]
> 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

--
George L. Yermulnik
[YZ-RIPE]

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
Thanks for sharing, George! The idea is to split the report into several
headers. Got it. I wonder if it's possible to pad the report lines so they
would fold naturally at the right places.

??, 30 ????. 2018 ?. ? 20:51, George L. Yermulnik via Exim-users <
exim-users@exim.org>:

> Hello!
>
> On Sun, 30 Sep 2018 at 18:44:36 (+0300), ????????? ???????? via Exim-users
> wrote:
>
> > Hi! There're no line breaks in spam report. Is there a way to make it
> more
> > readable?
>
> Here's what I use to make report readable:
>
> main config:
> SHORTNAME = ${extract{1}{.}{$primary_hostname}}
>
> acl_check_content:
> [...]
> add_header = X-SHORTNAME-SA:
> ${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ [}}}{\N\n\s*(-?\d+\.\d+
> [[:upper:][:digit:]_]+)\N}{\nX-SHORTNAME-SA: \$1 -> }}}{\N(\s{2,}|\t)\N}{ }}
>
> As I've got several Exim hosts with SpamAssassin checks configured custom
> X-header is used to determine which host added the report, so you can
> easily replace "X-SHORTNAME-SA" with more common "X-Spam-Report" for you.
> SpamAssassin itself is configured to not output report header. Try it and
> tune to your needs if needed =)
>
> > X-Spam-Report: Content analysis details: (5.4 points, 5.0 required) pts
> > rule name description ---- ----------------------
> > -------------------------------------------------- -0.5 BAYES_05
>
> > BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
> > DKIM_VALID_AU
> > Message has a valid DKIM or DK signature from author's domain
> -0.1
> > DKIM_VALID Message has at least one valid DKIM or DK
> signature
> > 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
> > necessarily valid 0.0 FREEMAIL_FROM Sender email is commonly
> > abused
> > enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
> > BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
> > BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE RBL: Sender
> > listed
> > at http://www.dnswl.org/, no trust [209.85.221.42 listed in
> list.dnswl.org]
> > 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
>
> --
> George L. Yermulnik
> [YZ-RIPE]
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
Hello!

On Sun, 30 Sep 2018 at 21:40:49 (+0300), ????????? ???????? via Exim-users wrote:

> Thanks for sharing, George! The idea is to split the report into several
> headers. Got it.

Yup, the idea is to split report into a correspondent amount of header lines to make it readable and to not overflow single header line length. E.g.:
X-nb-Spam-Score: 5.1 [+++++] (nb)
X-nb-SA: host=spamassassin.host score=5.1
X-nb-SA: 1.0 INVALID_DATE -> Invalid Date: header (not RFC 2822)
X-nb-SA: 1.0 MISSING_HEADERS -> Missing To: header
X-nb-SA: 0.8 BAYES_50 -> BODY: Bayes spam probability is 40 to 60% [score: 0.5307]
X-nb-SA: 0.5 MISSING_MID -> Missing Message-Id: header
X-nb-SA: 0.8 RDNS_NONE -> Delivered to internal network by a host with no rDNS
X-nb-SA: 1.0 MISSING_FROM -> Missing From: header

> I wonder if it's possible to pad the report lines so they
> would fold naturally at the right places.

It's not anything to do with Exim. Exim just consumes what SpamAssassin
outputs and makes it possible to insert SpamAssassin's report into headers.
Just keep in mind that length of single header line is limited.

> ??, 30 ????. 2018 ?. ? 20:51, George L. Yermulnik via Exim-users <
> exim-users@exim.org>:

> > Hello!

> > On Sun, 30 Sep 2018 at 18:44:36 (+0300), ????????? ???????? via Exim-users
> > wrote:

> > > Hi! There're no line breaks in spam report. Is there a way to make it
> > more
> > > readable?

> > Here's what I use to make report readable:

> > main config:
> > SHORTNAME = ${extract{1}{.}{$primary_hostname}}

> > acl_check_content:
> > [...]
> > add_header = X-SHORTNAME-SA:
> > ${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ [}}}{\N\n\s*(-?\d+\.\d+
> > [[:upper:][:digit:]_]+)\N}{\nX-SHORTNAME-SA: \$1 -> }}}{\N(\s{2,}|\t)\N}{ }}

> > As I've got several Exim hosts with SpamAssassin checks configured custom
> > X-header is used to determine which host added the report, so you can
> > easily replace "X-SHORTNAME-SA" with more common "X-Spam-Report" for you.
> > SpamAssassin itself is configured to not output report header. Try it and
> > tune to your needs if needed =)

> > > X-Spam-Report: Content analysis details: (5.4 points, 5.0 required) pts
> > > rule name description ---- ----------------------
> > > -------------------------------------------------- -0.5 BAYES_05

> > > BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
> > > DKIM_VALID_AU
> > > Message has a valid DKIM or DK signature from author's domain
> > -0.1
> > > DKIM_VALID Message has at least one valid DKIM or DK
> > signature
> > > 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
> > > necessarily valid 0.0 FREEMAIL_FROM Sender email is commonly
> > > abused
> > > enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
> > > BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
> > > BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE RBL: Sender
> > > listed
> > > at http://www.dnswl.org/, no trust [209.85.221.42 listed in
> > list.dnswl.org]
> > > 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

> > --
> > George L. Yermulnik
> > [YZ-RIPE]

> > --
> > ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> > ## Exim details at http://www.exim.org/
> > ## Please use the Wiki with this list - http://wiki.exim.org/

--
George L. Yermulnik
[YZ-RIPE]

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
Well, I've tried this padding thing:

warn add_header = X-Spam-Score: $spam_score\n\
X-Spam-Report:
--------------------------------------------------------------\n\
${map{<\n $spam_report}{ ${length_77:$item
}}}

And this is the best I could do:

X-Spam-Report:
--------------------------------------------------------------
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%

[score: 0.0011]

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
aut
domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK
signatu
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessaril
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provi
(xxxxxxxx[at]gmail.com)

5.0 GTUBE BODY: Generic Test for Unsolicited Bulk Email

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no
trust

[209.85.128.45 listed in list.dnswl.org]

1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily


It turned to be difficult to preserve the original formatting as exim
functions do not care about leading white space.


??, 30 ????. 2018 ?. ? 23:26, George L. Yermulnik via Exim-users <
exim-users@exim.org>:

> Hello!
>
> On Sun, 30 Sep 2018 at 21:40:49 (+0300), ????????? ???????? via Exim-users
> wrote:
>
> > Thanks for sharing, George! The idea is to split the report into several
> > headers. Got it.
>
> Yup, the idea is to split report into a correspondent amount of header
> lines to make it readable and to not overflow single header line length.
> E.g.:
> X-nb-Spam-Score: 5.1 [+++++] (nb)
> X-nb-SA: host=spamassassin.host score=5.1
> X-nb-SA: 1.0 INVALID_DATE -> Invalid Date: header (not RFC 2822)
> X-nb-SA: 1.0 MISSING_HEADERS -> Missing To: header
> X-nb-SA: 0.8 BAYES_50 -> BODY: Bayes spam probability is 40 to 60%
> [score: 0.5307]
> X-nb-SA: 0.5 MISSING_MID -> Missing Message-Id: header
> X-nb-SA: 0.8 RDNS_NONE -> Delivered to internal network by a host with
> no rDNS
> X-nb-SA: 1.0 MISSING_FROM -> Missing From: header
>
> > I wonder if it's possible to pad the report lines so they
> > would fold naturally at the right places.
>
> It's not anything to do with Exim. Exim just consumes what SpamAssassin
> outputs and makes it possible to insert SpamAssassin's report into headers.
> Just keep in mind that length of single header line is limited.
>
> > ??, 30 ????. 2018 ?. ? 20:51, George L. Yermulnik via Exim-users <
> > exim-users@exim.org>:
>
> > > Hello!
>
> > > On Sun, 30 Sep 2018 at 18:44:36 (+0300), ????????? ???????? via
> Exim-users
> > > wrote:
>
> > > > Hi! There're no line breaks in spam report. Is there a way to make it
> > > more
> > > > readable?
>
> > > Here's what I use to make report readable:
>
> > > main config:
> > > SHORTNAME = ${extract{1}{.}{$primary_hostname}}
>
> > > acl_check_content:
> > > [...]
> > > add_header = X-SHORTNAME-SA:
> > > ${sg{${sg{${sg{$spam_report}{\N\n\s*\[\N}{ [}}}{\N\n\s*(-?\d+\.\d+
> > > [[:upper:][:digit:]_]+)\N}{\nX-SHORTNAME-SA: \$1 ->
> }}}{\N(\s{2,}|\t)\N}{ }}
>
> > > As I've got several Exim hosts with SpamAssassin checks configured
> custom
> > > X-header is used to determine which host added the report, so you can
> > > easily replace "X-SHORTNAME-SA" with more common "X-Spam-Report" for
> you.
> > > SpamAssassin itself is configured to not output report header. Try it
> and
> > > tune to your needs if needed =)
>
> > > > X-Spam-Report: Content analysis details: (5.4 points, 5.0
> required) pts
> > > > rule name description ---- ----------------------
> > > > -------------------------------------------------- -0.5 BAYES_05
>
> > > > BODY: Bayes spam probability is 1 to 5% [score: 0.0355] -0.1
> > > > DKIM_VALID_AU
> > > > Message has a valid DKIM or DK signature from author's domain
> > > -0.1
> > > > DKIM_VALID Message has at least one valid DKIM or DK
> > > signature
> > > > 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
> > > > necessarily valid 0.0 FREEMAIL_FROM Sender email is
> commonly
> > > > abused
> > > > enduser mail provider (xxxxxxxx[at]gmail.com) 5.0 GTUBE
> > > > BODY: Generic Test for Unsolicited Bulk Email 0.0 HTML_MESSAGE
> > > > BODY: HTML included in message -0.0 RCVD_IN_DNSWL_NONE RBL:
> Sender
> > > > listed
> > > > at http://www.dnswl.org/, no trust [209.85.221.42 listed in
> > > list.dnswl.org]
> > > > 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
>
> > > --
> > > George L. Yermulnik
> > > [YZ-RIPE]
>
> > > --
> > > ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> > > ## Exim details at http://www.exim.org/
> > > ## Please use the Wiki with this list - http://wiki.exim.org/
>
> --
> George L. Yermulnik
> [YZ-RIPE]
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
????????? ???????? via Exim-users wrote on 01/10/2018 13:33:
> Well, I've tried this padding thing:
>
> warn add_header = X-Spam-Score: $spam_score\n\
> X-Spam-Report:
> --------------------------------------------------------------\n\
> ${map{<\n $spam_report}{ ${length_77:$item
> }}}
>
> And this is the best I could do:
You can try to use my:
http://www.blafasel.at/exim/ZIDReport.pm

This module "encodes" many values into $spam_report to be extracted by Exim
ACLs. The report itself is nicely formated.

To use it put it in your SpamAssassin config folder and add
--------
loadplugin ZIDReport ZIDReport.pm
clear_report_template
report _ZIDREPORT_
-------
to your local.cf.

Then use parts of...
add_header = X-Spam-Score: $spam_score\n\
X-Spam-Score-Int: $spam_score_int\n\
X-Spam-Level: $spam_bar\n\
X-Spam-Checker-Version: ${extract{version}{$spam_report}}\n\
X-Spam-Status: ${extract{status}{$spam_report}}\n\
X-Spam-Languages: ${extract{langs}{$spam_report}}\n\
X-Spam-Relay-Countries: ${extract{reltlds}{$spam_report}}\n\
X-Spam-Report: ${extract{report}{$spam_report}}
... to add headers.

Greetings, Wolfgang
--
Wolfgang Breyha <wbreyha@gmx.net> | https://www.blafasel.at/
Vienna University Computer Center | Austria


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
Thanks, Wolfgang. Didn't really help much with the part I'm interested:

X-Spam-Report: Content analysis details: (2.1 points) * -1.0 ALL_TRUSTED
Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes spam
probability is 0 to 1% * [score: 0.0000] * 5.0 GTUBE BODY: Generic
Test
for Unsolicited Bulk Email

??, 1 ???. 2018 ?. ? 15:42, Wolfgang Breyha via Exim-users <
exim-users@exim.org>:

> ????????? ???????? via Exim-users wrote on 01/10/2018 13:33:
> > Well, I've tried this padding thing:
> >
> > warn add_header = X-Spam-Score: $spam_score\n\
> > X-Spam-Report:
> > --------------------------------------------------------------\n\
> > ${map{<\n $spam_report}{ ${length_77:$item
> > }}}
> >
> > And this is the best I could do:
> You can try to use my:
> http://www.blafasel.at/exim/ZIDReport.pm
>
> This module "encodes" many values into $spam_report to be extracted by Exim
> ACLs. The report itself is nicely formated.
>
> To use it put it in your SpamAssassin config folder and add
> --------
> loadplugin ZIDReport ZIDReport.pm
> clear_report_template
> report _ZIDREPORT_
> -------
> to your local.cf.
>
> Then use parts of...
> add_header = X-Spam-Score: $spam_score\n\
> X-Spam-Score-Int: $spam_score_int\n\
> X-Spam-Level: $spam_bar\n\
> X-Spam-Checker-Version:
> ${extract{version}{$spam_report}}\n\
> X-Spam-Status: ${extract{status}{$spam_report}}\n\
> X-Spam-Languages: ${extract{langs}{$spam_report}}\n\
> X-Spam-Relay-Countries:
> ${extract{reltlds}{$spam_report}}\n\
> X-Spam-Report: ${extract{report}{$spam_report}}
> ... to add headers.
>
> Greetings, Wolfgang
> --
> Wolfgang Breyha <wbreyha@gmx.net> | https://www.blafasel.at/
> Vienna University Computer Center | Austria
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
????????? ???????? via Exim-users wrote on 01/10/2018 16:55:
> Thanks, Wolfgang. Didn't really help much with the part I'm interested:
>
> X-Spam-Report: Content analysis details: (2.1 points) * -1.0 ALL_TRUSTED
> Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes spam
> probability is 0 to 1% * [score: 0.0000] * 5.0 GTUBE BODY: Generic
> Test
> for Unsolicited Bulk Email

How do you add that? It definitely looks better here:
X-Spam-Report: Content analysis details: (-2.6 points)
* 1.0 MISSING_HEADERS Missing To: header
* -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
* manager
* 0.3 MIME_8BIT_HEADER Message header contains 8-bit character
* 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
....

And it ever did since 2006;-)

Or is it possible that your MUA messes with header whitespace?

Greetings, Wolfgang
--
Wolfgang Breyha <wbreyha@gmx.net> | https://www.blafasel.at/
Vienna University Computer Center | Austria


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
No, it looks the same in the mailbox but I have some procmail filters which
handle incoming mail. And that can be a problem. Thanks!

??, 1 ???. 2018 ?. ? 18:28, Wolfgang Breyha via Exim-users <
exim-users@exim.org>:

> ????????? ???????? via Exim-users wrote on 01/10/2018 16:55:
> > Thanks, Wolfgang. Didn't really help much with the part I'm interested:
> >
> > X-Spam-Report: Content analysis details: (2.1 points) * -1.0
> ALL_TRUSTED
> > Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes
> spam
> > probability is 0 to 1% * [score: 0.0000] * 5.0 GTUBE BODY: Generic
> > Test
> > for Unsolicited Bulk Email
>
> How do you add that? It definitely looks better here:
> X-Spam-Report: Content analysis details: (-2.6 points)
> * 1.0 MISSING_HEADERS Missing To: header
> * -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
> * manager
> * 0.3 MIME_8BIT_HEADER Message header contains 8-bit character
> * 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
> ....
>
> And it ever did since 2006;-)
>
> Or is it possible that your MUA messes with header whitespace?
>
> Greetings, Wolfgang
> --
> Wolfgang Breyha <wbreyha@gmx.net> | https://www.blafasel.at/
> Vienna University Computer Center | Austria
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: SPAM report [ In reply to ]
So the culprit was a procmail filter which rewrites incoming mail. The
standard report looks just fine with the filter disabled:

X-Spam-Report:
--------------------------------------------------------------
pts rule name description
---- ----------------------
------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
5.0 GTUBE BODY: Generic Test for Unsolicited Bulk Email

I totally forgot about it. Damn! Sorry for all the commotion.


??, 1 ???. 2018 ?. ? 18:53, ????????? ???????? <nevis2us@gmail.com>:

> No, it looks the same in the mailbox but I have some procmail filters
> which handle incoming mail. And that can be a problem. Thanks!
>
> ??, 1 ???. 2018 ?. ? 18:28, Wolfgang Breyha via Exim-users <
> exim-users@exim.org>:
>
>> ????????? ???????? via Exim-users wrote on 01/10/2018 16:55:
>> > Thanks, Wolfgang. Didn't really help much with the part I'm interested:
>> >
>> > X-Spam-Report: Content analysis details: (2.1 points) * -1.0
>> ALL_TRUSTED
>> > Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes
>> spam
>> > probability is 0 to 1% * [score: 0.0000] * 5.0 GTUBE BODY:
>> Generic
>> > Test
>> > for Unsolicited Bulk Email
>>
>> How do you add that? It definitely looks better here:
>> X-Spam-Report: Content analysis details: (-2.6 points)
>> * 1.0 MISSING_HEADERS Missing To: header
>> * -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
>> * manager
>> * 0.3 MIME_8BIT_HEADER Message header contains 8-bit character
>> * 1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
>> ....
>>
>> And it ever did since 2006;-)
>>
>> Or is it possible that your MUA messes with header whitespace?
>>
>> Greetings, Wolfgang
>> --
>> Wolfgang Breyha <wbreyha@gmx.net> | https://www.blafasel.at/
>> Vienna University Computer Center | Austria
>>
>>
>> --
>> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
>> ## Exim details at http://www.exim.org/
>> ## Please use the Wiki with this list - http://wiki.exim.org/
>>
>
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/