{"id":178,"date":"2010-04-08T18:13:24","date_gmt":"2010-04-08T16:13:24","guid":{"rendered":"http:\/\/www.idioten-notschlachten.de\/blog\/?p=178"},"modified":"2010-04-09T15:15:07","modified_gmt":"2010-04-09T13:15:07","slug":"spam-spam-spam-oder-doch-kein-spam","status":"publish","type":"post","link":"https:\/\/www.idioten-notschlachten.de\/blog\/2010\/04\/08\/spam-spam-spam-oder-doch-kein-spam\/","title":{"rendered":"Spam &#8211; Spam &#8211; Spam &#8211; oder doch kein Spam?"},"content":{"rendered":"<p>f\u00fcr alle gl\u00fccklichen Benutzer von Spam-Assassin, was sagt Euch folgende Spam-Statistik:<\/p>\n<p>pts rule name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 description<br \/>\n&#8212;- &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;- &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br \/>\n0.1 RDNS_NONE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Delivered to trusted network by a host with no rDNS<br \/>\n-0.2 BAYES_40\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: Bayesian spam probability is 20 to 40%<br \/>\n[score: 0.3439]<br \/>\n0.0 HTML_MESSAGE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: HTML included in message<br \/>\n1.9 MIME_HTML_ONLY\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: Message only has text\/html MIME parts<br \/>\n2.1 HTML_IMAGE_ONLY_16\u00a0\u00a0\u00a0\u00a0 BODY: HTML: images with 1200-1600 bytes of words<br \/>\n0.0 HTML_MIME_NO_HTML_TAG\u00a0 HTML-only message, but there is no HTML tag<\/p>\n<p>Das Ding hat so 4.0 Punkte (ohne Bayes), d.h., selbst in der Standard-Installation fehlt nur noch ein Punkt zum Abflug.<\/p>\n<p><!--more--><\/p>\n<p>Wenn man Spamassassin aggressiver einstellt, was bei uns der Fall war, dann sind die Dinger weg. Irgendein Amateur-E-mail-Programm sicherlich, oder?<\/p>\n<p>Wer w\u00fcrde schon so bescheuert sein und entgegen dem RFC bei html-Emails den Text-Teil weglassen?<\/p>\n<p>&lt;ironie&gt;<\/p>\n<p>Naja, web.de, so eine Miniklitsche mit vermutlich 5 Postf\u00e4chern macht sowas&#8230;<\/p>\n<p>&lt;\/ironie&gt;<\/p>\n<p>&#8230; und scheint sich nicht wirklich daran zu st\u00f6ren, da\u00df die Post der Nutzer bei vielen Empf\u00e4ngern im Spam-Ordner (oder bei uns im riesigen Spamarchiv, das keiner mehr durchschaut) versandet.<\/p>\n<p>Macht ja nix, gibt ja noch andere Freemailer.<\/p>\n<p>Ich hab&#8217;s jedenfalls mal so gel\u00f6st:<\/p>\n<p>score RCVD_IN_PBL 10<br \/>\nscore RCVD_IN_BL_SPAMCOP_NET 10<br \/>\nscore RCVD_IN_XBL 10<br \/>\nscore URIBL_BLACK 10<br \/>\nscore URIBL_SBL 10<br \/>\nscore URIBL_JP_SURBL 10<br \/>\nscore RCVD_IN_NJABL_DUL 10<br \/>\nscore RCVD_IN_NJABL_PROXY 10<br \/>\nscore RCVD_IN_SORBS_DUL 10<br \/>\nscore RCVD_IN_DSBL 10<br \/>\nscore SPF_FAIL 10<br \/>\nscore HELO_DYNAMIC_IPADDR 10<br \/>\nscore HELO_DYNAMIC_IPADDR2 10<br \/>\nscore HELO_DYNAMIC_SPLIT_IP 10<\/p>\n<p>score BAYES_80 3.2<br \/>\nscore BAYES_90 4.3<br \/>\nscore BAYES_95 4.5<br \/>\nscore BAYES_99 4.8<\/p>\n<p>&#8212;<\/p>\n<p>dann bleibt der gr\u00f6\u00dfte Mist immer noch drau\u00dfen und der Default-Score von 5 kann wieder greifen. Ich hasse solche Tage&#8230;<\/p>\n<p><strong>Kurzes Update<\/strong>: mit Netzwerktests reicht es immer noch nicht, also: Score auf 5.5(!) setzen und Bayes nochmal anpassen, denn, eine einfache Testmail von einem web.de-Account mit leerem Body und Testbetreff liefert:<\/p>\n<p>Content analysis details:\u00a0\u00a0 (5.2 points, 5.0 required)<\/p>\n<p>pts rule name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 description<br \/>\n&#8212;- &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;- &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<br \/>\n0.1 RDNS_NONE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Delivered to trusted network by a host with no rDNS<br \/>\n2.5 HTML_IMAGE_ONLY_12\u00a0\u00a0\u00a0\u00a0 BODY: HTML: images with 800-1200 bytes of words<br \/>\n0.0 HTML_MESSAGE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: HTML included in message<br \/>\n0.0 BAYES_50\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: Bayesian spam probability is 40 to 60%<br \/>\n[score: 0.4116]<br \/>\n1.5 MIME_HTML_ONLY\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: Message only has text\/html MIME parts<br \/>\n1.1 DNS_FROM_OPENWHOIS\u00a0\u00a0\u00a0\u00a0 RBL: Envelope sender listed in bl.open-whois.org.<br \/>\n0.1 HTML_MIME_NO_HTML_TAG\u00a0 HTML-only message, but there is no HTML tag<br \/>\n&#8212;<\/p>\n<p>Fefe w\u00fcrde sagen: sportlich. D.h.: jede Defaultinstallation von Spamassassin r\u00e4umt gnadenlos kurze web.de-Nachrichten ab. Und das ist definitiv nicht die Schuld von Spamassassin&#8230;<\/p>\n<p>Die neuen Bayes-Scores:<\/p>\n<p>score BAYES_90 4.5<br \/>\nscore BAYES_95 5.0<br \/>\nscore BAYES_99 5.3<\/p>\n<p>web.de sollte man echt die Lizenz als Webmailprovider entziehen&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>f\u00fcr alle gl\u00fccklichen Benutzer von Spam-Assassin, was sagt Euch folgende Spam-Statistik: pts rule name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 description &#8212;- &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;- &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211; 0.1 RDNS_NONE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Delivered to trusted network by a host with no rDNS -0.2 BAYES_40\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: Bayesian spam probability is 20 to 40% [score: 0.3439] 0.0 HTML_MESSAGE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: HTML included in message 1.9 MIME_HTML_ONLY\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 BODY: Message only has &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.idioten-notschlachten.de\/blog\/2010\/04\/08\/spam-spam-spam-oder-doch-kein-spam\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Spam &#8211; Spam &#8211; Spam &#8211; oder doch kein Spam?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/posts\/178"}],"collection":[{"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/comments?post=178"}],"version-history":[{"count":5,"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/posts\/178\/revisions"}],"predecessor-version":[{"id":183,"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/posts\/178\/revisions\/183"}],"wp:attachment":[{"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/media?parent=178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/categories?post=178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idioten-notschlachten.de\/blog\/wp-json\/wp\/v2\/tags?post=178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}