Zimbra marks local domain emails as SPAM

[leog21]

I am seeing a lot of false positives in emails we send to each other on our zimbra server. Especially if they contain urls inside the email content.

Is anyone else having this problem?

Using: Zimbra 5.0.16_GA_2921.RHEL5_64

Thanks,
Leo

[uxbod]

Please post the headers from one of the emails and we should be able to decipher what is happening.

[leog21]

X-Virus-Scanned: amavisd-new at localhost.localdomain
X-Spam-Flag: YES
X-Spam-Score: 5.072
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.072 tagged_above=-10 required=5
tests=[BAYES_50=0.001, FH_DATE_PAST_20XX=3.188, HTML_MESSAGE=0.001,
RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1]

[jrefl5]

Have you looked at

[SOLVED] FH_DATE_PAST_20XX - Spamassassin bug - incorrect tagging from Jan 1, 2010 on

correcting that will drop "FH_DATE_PAST_20XX=3.188"

[leog21]

I added our domain to the white list and fixed the FH_DATE, thank you

[dwmtractor]

Actually there's something else you ought to look at. Notice this part of your SA headers:

RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877

Two realtime blacklists list your IP. Though you've whitelisted yourself, others who use those blacklists may score them higher, which means your IP may be classified as a spammer to some of the people in the Real World who you'd like to email. You would be wise to examine what's causing your IP to be blacklisted. . .first candidate--are you using DSL, cable, or other dynamic IP?

Second issue:

RDNS_NONE=0.1

Only 0.1 point for you, but some filters also make a big deal about not having a reverse DNS lookup for the IP of the mail server. Modifying your DNS to include a reverse lookup zone will eliminate this issue.

Again, small score for you, but fixing these two things will improve the likelihood of your messages making it to their intended recipients, in and out of your domain.