[ctw] Re: ASSP blocking legit ebay notification?

  • From: aklist <aklist_eims@xxxxxxxxxxxxx>
  • To: ctw@xxxxxxxxxxxxx
  • Date: Tue, 04 Oct 2011 14:15:50 -0700

On 10/4/2011 1:58 PM, TR Shaw wrote:

On Oct 4, 2011, at 4:43 PM, aklist wrote:

On 10/4/2011 7:53 AM, aklist wrote:
Hi All: I noticed this ebay notification in the spam folder, and ran it
through analyze-spam (result below).

Why is the strictSPFRe blocking the mail? Is it because the sending
server is not in ebay's SPF record?

"@ebay.com" is in both the "Strict SPF Processing Regex" and "Strict SPF
Blocking Regex". I have SPF set to "score". What should I do to allow
these emails through?

Ahh...on reviewing a second time, I see that the body of the email is what's 
causing the block...it's full of spammy words. What's funny is the recipient 
has a rare coins ebay store, and ebay's day-to-day emails are full of content 
for this recipient that normally would be spammy...but in his case they're not!

Is there any way around this, short of whitelisting the sending address? (not 
sure if it's always the same)


Not sure I haven't run into this before.  I am sure there is a way but I just 
can't think of one other than whitelisting sender at present.  Is there 
something special  you can detect and then score with a minus value to get 
those more breathing room?


Thanks Tom. There's probably something unique, like a store-id or user-ID in the email that could be used for that. Where would I add it if I can find it?

AK


AK


TIA


analyze is restricted to a maximum length of 8000 bytes
no foreign received header line found

general hints:

analyze is restricted to a maximum length of 8000 bytes
no foreign received header line found



sender and reply addresses:
recipient addresses:
Feature Matching:

Strict SPF RE: '@ebay.com'
matching strictSPFRe(@ebay.com): '@ebay.com'
Block Strict SPF RE: '@ebay.com'
matching blockstrictSPFRe(@ebay.com): '@ebay.com'

Bayesian Analysis:
Bad Words:Bad Prob Good Words:Good Prob
no of:0.9999
south africa:0.9983
half dollar:0.9979
maple leaf:0.9969
silver coin:0.9966
oz silver:0.9956
silver eagle:0.9949
your ebay:0.9949
href myebay:0.9942
oz oz:0.9932
silver maple:0.9932
an update:0.9932
href cgi:0.9893
bullion coin:0.9880
href emails:0.9860
href viewitem:0.9849
activity this:0.9848
updated on:0.9848
libertad coin:0.9848
royal mint:0.9848
silver dollars:0.9848
href dll:0.9819

Totals: 0.9999 0.9999 0.9983 0.9979 0.9979 0.9969 0.9966 0.9966 0.9956
0.9956 0.9949 0.9949 0.9949 0.9949 0.9942 0.9932 0.9932 0.9932 0.9893
0.9893 0.9880 0.9880 0.9860 0.9849 0.9849 0.9848 0.9848 0.9848 0.9848
0.9848 0.9819


Spam/Ham Probabilities:


Spam Probability:
probability 1.0000

--Apple-Mail-3-129947929
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq


Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=subscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq


Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Other related posts: