Re: Where are your test definitions?

On Fri, 14 Jun 2024, Bowie Bailey wrote:

> On 6/14/2024 10:39 AM, Thomas Barth via users wrote:
>>  Hello,
>>
>>  I would like to explain a sender what he can do to create an email that is
>>  not classified as spam.
>>
>>  X-Spam-Status: Yes, score=6.248 tagged_above=1 required=5
>>   tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
>>  DKIM_VALID_AU=-0.1,
>>   DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, FONT_INVIS_MSGID=2.497,
>>   FONT_INVIS_NORDNS=1.544, HTML_FONT_TINY_NORDNS=1.514, HTML_MESSAGE=0.001,
>>   RDNS_NONE=0.793, RELAYCOUNTRY_BAD=2, SPF_HELO_NONE=0.001,
>>  SPF_PASS=-0.001,
>>   T_KAM_HTML_FONT_INVALID=0.01, T_SCC_BODY_TEXT_LINE=-0.01]
>
> You can get the definitions directly from the rule files.  On my system, the 
> updated rules are in /var/lib/spamassassin/3.004006/updates_spamassassin_org.
>
> describe  RDNS_NONE   Delivered to internal network by a host with no rDNS
> describe  FONT_INVIS_MSGID   Invisible text + suspicious message ID
> describe  FONT_INVIS_NORDNS   Invisible text + no rDNS
> describe  HTML_FONT_TINY_NORDNS   Font too small to read, no rDNS

You can also configure SA to include the rule descriptions in an 
X-Spam-Report header when the message is scored as "spammy". Take a look 
at config "report_safe 0".


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  [email protected]                         pgpk -a [email protected]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Users mistake widespread adoption of Microsoft Office for
   the development of a document format standard.
-----------------------------------------------------------------------
  4 days until SWMBO's Birthday