Mails from my customer are treated as spam! Any help?!

[higeon]

Hi,

All mails from one of my customers are treated as spam mails by zimbra!
How can I make any change to avoid those mails to be spammed?
Any help?!
Thank you!

[uxbod]

It would help if you were to post the headers from one of the emails so we can see how SA is treating it

[higeon]

Return-Path: auemura@ntt-itn.co.jp
Received: from 203.179.82.186 (LHLO mail.newcon.co.jp) (203.179.82.186) by
mail.newcon.co.jp with LMTP; Fri, 31 Jul 2009 13:56:44 +0900 (JST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.newcon.co.jp (Postfix) with ESMTP id 724D6470017B
for <tanaka-m@newcon.co.jp>; Fri, 31 Jul 2009 13:56:44 +0900 (JST)
X-Virus-Scanned: amavisd-new at newcon.co.jp
X-Spam-Flag: YES
X-Spam-Score: 7.864
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.864 tagged_above=-10 required=6.6
tests=[BAYES_00=-2.599, FH_FROMEML_NOTLD=2.696,
FM_FRM_RN_L_BRACK=2.674, FROM_NO_USER=1.483, PLING_QUERY=1.39,
STOX_REPLY_TYPE=0.001, TVD_SPACE_RATIO=2.219]
Received: from mail.newcon.co.jp ([127.0.0.1])
by localhost (mail.newcon.co.jp [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id ZsUa-ojvReQ9 for <tanaka-m@newcon.co.jp>;
Fri, 31 Jul 2009 13:56:40 +0900 (JST)
Received: from mailsrv.ntt-itn.jp (mailsrv.ntt-itn.jp [192.47.161.20])
by mail.newcon.co.jp (Postfix) with ESMTP id 99176470017A
for <tanaka-m@newcon.co.jp>; Fri, 31 Jul 2009 13:56:40 +0900 (JST)
Received: from mailgw (unknown [192.168.6.30])
by mailsrv.ntt-itn.jp (Postfix) with ESMTP id 86FBC277693
for <tanaka-m@newcon.co.jp>; Fri, 31 Jul 2009 13:56:40 +0900 (JST)
X-AuditID: c0a8061e-00000ca8000004f0-43-4a7279884f77
Message-ID: <32FF226AFC2844648EC0EDB4C93166FF@staff.nttitn.co. jp>
Reply-To: =?iso-2022-jp?B?GyRCPmVCPD48VyIbKEI=?= <auemura@ntt-itn.co.jp>
From: =?iso-2022-jp?B?GyRCPmVCPD48VyIbKEI=?= <auemura@ntt-itn.co.jp>
To: =?iso-2022-jp?B?GyRCJUslZSE8JTMlcxsoQiAbJEJFRENmMm04ShsoQg==? = <tanaka-m@newcon.co.jp>
References: <200907310257.JBEAAAAAAwQYYAABYQABNARwAfxU@teamwar e>
Subject: =?iso-2022-jp?B?UmU6IBskQiFaJCpPTSRTIVsbKEIgGyRCJDQwJzsiSyxMZ BsoQg==?=
=?iso-2022-jp?B?GyRCJHIkNSQ7JEYkJCQ/JEAkLSQ/JC8hIRsoQjw8GyRCJUsbKEI=?=
=?iso-2022-jp?B?GyRCJWUhPCUzJXMhP0VEQ2YbKEI+Pg==?=
Date: Fri, 31 Jul 2009 13:56:40 +0900
Organization: =?iso-2022-jp?B?TlRUGyRCJSQlcyU/ITwlTSVDJUgbKEI=?=
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-2022-jp";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-Brightmail-Tracker: AAAAAA==

[uxbod]

Is your customer mailing you in Kanji ? Have you modified /opt/zimbra/conf/spamassassin/local.cf to include

ok_locales en ja ko th zh

You may wish to lower the score on /opt/zimbra/conf/spamassassin/50_scores.cf by adding

score FH_FROMEML_NOTLD 0
score FM_FRM_RN_L_BRACK 1

to /opt/zimbra/conf/spamassassin/local.cf.

[ewilen]

Any idea why this rule is firing? This is the extract from 20_head_tests.cf:

header PLING_QUERY Subject =~ /\?.*!|!.*\?/
describe PLING_QUERY Subject has exclamation mark and question mark

Yet the subject has only question marks, no exclamation marks. Some of the other rules also look like they shouldn't be firing, but I'm not fluent enough in Perl regular expressions to tell for sure.