I've created a series of spam rules that are based on Header Contains..
eg:
Header, Contains -> RCVD_IN_DNSWL_NONE RBL
OR Header, Contains -> RCVD_IN_BL_SPAMCOP_NET RBL
OR Header, Contains -> RCVD_IN_BRBL_LASTEXT RBL
The message should then be moved to JUNK.
This seems to work for some messages but not others.
eg: This was delivered to the user :
X-Ham-Report: Spam detection software, running on the system "mailserver.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Winning Racehorse Owner LEE BOLINGBROKE invites you to sample
for FREE his highly profitable information line. Unsubscribe here, if you
no longer want to receive these emails: -link removed -
[...]
Content analysis details: (2.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 FH_FROM_GET_NAME From name says Get
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[217.26.233.170 listed in bb.barracudacentral.org]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
Shouldn't this has gone to JUNK ?
Thanks
