Still getting spam

ssgill

Verified User
Joined
May 9, 2012
Messages
164
Hello all, we have started getting spam. My server have the latest builds of Spamblocker install from this post

https://help.directadmin.com/item.php?id=576

Email header of spam mail

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from matrix2.domain.com
by matrix2.domain.com with LMTP
id KDcgCAvZsloaWwAAGPd+5w
(envelope-from <[email protected]>)
for <[email protected]>; Wed, 21 Mar 2018 16:13:31 -0600
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Wed, 21 Mar 2018 16:13:31 -0600
Received: from [188.213.232.237] (helo=ianolg.stream)
by matrix2.domain.com with esmtp (Exim 4.90_1)
(envelope-from <[email protected]>)
id 1eylz1-0006n8-JY
for [email protected]; Wed, 21 Mar 2018 16:13:31 -0600
From: " Kristopher Hart" <[email protected]>
Date: Wed, 21 Mar 2018 16:46:55 -0500
MIME-Version: 1.0
Subject: Survive in bed (men only)
To: <[email protected]>
Message-ID: <xUoO1CO3BTR_994QRUw2YVxOVigLBqyG7ZNMw7y9ExE.yNHvUv_CWkLaAtKgWE2qpiSwvpJy3W-rOdh0p1eBQ1g@ianolg.stream>
Content-Type: multipart/alternative;
boundary="------------55402559765609900384512"
SPFCheck: Soft Fail, 30 Spam score
X-Spam-Score: 4.2 (++++)
X-Spam-Report: Spam detection software, running on the system "matrix2.domain.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.



Content analysis details: (4.2 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.7 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.1 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.3 DIGEST_MULTIPLE Message hits more than one network digest check
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
SpamTally: Final spam score: 72
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

This message should have been marked as spam but not any ideas how to fix this.

Thanks
 
Hello,

SpamAssassin Content analysis details: 4.2 points, 5.0 required

Easy Spam fighter: SPF Soft Fail, 30 Spam score, 100 required.


Not enough to be blocked.
 
Back
Top