All local mails goes in Junk !!!

[Samp]

Hi,

We just migrate on Zimbra ZCS 6.0.4 (250 accounts) and lot of local mails (not ALL local mails) are marked as spam and goes in junk folder, even we have already marked as "No junk" in Junk folder and mail back in Inbox.

We have to fix this problem, there is 250 users calling us...

Thanks for your help.

Sam.

Release 6.0.4_GA_2038.DEBIAN5 DEBIAN5 FOSS edition

[uxbod]

Would you please post the headers from one of the emails.

You may be hitting [SOLVED] FH_DATE_PAST_20XX - Spamassassin bug - incorrect tagging from Jan 1, 2010 on.

[Samp]

Originally Posted by uxbod

Would you please post the headers from one of the emails.

You may be hitting [SOLVED] FH_DATE_PAST_20XX - Spamassassin bug - incorrect tagging from Jan 1, 2010 on.

Return-Path: g.geismar@geismar.com
Received: from zimbra.geismar.com (LHLO zimbra.geismar.com) (88.191.228.37)
by zimbra.geismar.com with LMTP; Wed, 17 Mar 2010 11:02:39 +0000 (UTC)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zimbra.geismar.com (Postfix) with ESMTP id 1971F9FC036
for <samp@geismar.com>; Wed, 17 Mar 2010 12:02:39 +0100 (CET)
X-Virus-Scanned: amavisd-new at zimbra.geismar.com
X-Spam-Flag: YES
X-Spam-Score: 8.273
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.273 tagged_above=-10 required=6.6
tests=[AWL=1.484, BAYES_99=3.5, FH_DATE_PAST_20XX=3.188,
HTML_MESSAGE=0.001, RDNS_NONE=0.1] autolearn=no
Received: from zimbra.geismar.com ([127.0.0.1])
by localhost (zimbra.geismar.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id N1YQjlyYMN4P for <samp@geismar.com>;
Wed, 17 Mar 2010 12:02:34 +0100 (CET)
Received: from zimbra.geismar.com (localhost.localdomain [127.0.0.1])
by zimbra.geismar.com (Postfix) with ESMTP id EA3479FC034
for <samp@geismar.com>; Wed, 17 Mar 2010 12:02:34 +0100 (CET)
Date: Wed, 17 Mar 2010 11:02:34 +0000 (UTC)
From: GEISMAR Gabriel <g.geismar@geismar.com>
To: Sam Przyswa <samp@geismar.com>
Message-ID: <27781834.7891.1268823754912.JavaMail.root@zimbra. geismar.com>
In-Reply-To: <13771443.7836.1268823226842.JavaMail.root@zimbra. geismar.com>
Subject: {Spam}Re: Gestion de l'antispam inefficace pour l'instant !
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_7890_18323127.1268823754911"
X-Originating-IP: [81.255.74.149]
X-Mailer: Zimbra 6.0.4_GA_2038.DEBIAN5 (ZimbraWebClient - FF3.0 (Win)/6.0.4_GA_2038.DEBIAN5)

------=_Part_7890_18323127.1268823754911
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

And there is the mail body:

Bonjour,=20

test antispam mails locaux.=20

Cordialement,=20

Gabriel Geismar=20


----- Mail Original -----=20
De: "Sam Przyswa" <samp@geismar.com>=20
=C3=80: "Gabriel Geismar Zimbra" <g.geismar@geismar.com>=20
Envoy=C3=A9: Mercredi 17 Mars 2010 11:53:46=20
Objet: Re: Gestion de l'antispam inefficace pour l'instant !=20


Pouvez-vous faire une r=C3=A9ponse =C3=A0 ce mail afin de tester l'antispam=
 sur les mails locaux.=20

Merci d'avance.=20

Sam Przyswa.=20


----- Mail Original -----=20
De: "Gabriel Geismar Zimbra" <g.geismar@geismar.com>=20
=C3=80: "Sam Przyswa" <samp@geismar.com>=20
Cc: "David Ditner" <d.ditner@geismar.com>, "Bernard Brajzblat" <b.brajzblat=
@geismar.com>, "JL GARNIER" <jl.garnier@geismar.com>=20
Envoy=C3=A9: Mardi 16 Mars 2010 17:57:13=20
Objet: {Spam}Gestion de l'antispam inefficace pour l'instant !=20

=EF=BB=BF=20
Bonsoir M. Przyswa,=20

Nous n'avons pas l'impression que l'antispam "apprenne" quoi que ce soit :=
=20

Sur tous les comptes de Neuilly, les mails internes pour parler d'un exempl=
e simple et courant continuent de se retrouver dans le dossier spam alors q=
ue les utilisateurs les ont d=C3=A9j=C3=A0 cliqu=C3=A9s plusieurs fois comm=
e mails acceptables dans l'interface Zimbra.=20

Par exemple : M. Ditner est toujours consid=C3=A9r=C3=A9 comme un spam alor=
s que je l'ai cliqu=C3=A9 en mail acceptable au moins 5 fois... Et c'est la=
 meme chose sur tous les comptes. C'est le point le plus fastidieux pour to=
ut le monde, =C3=A0 quel moment la gestion de l'antispam va-t-elle devenir =
productive ?=20

Cordialement,=20
G. Geismar=20




----- Original Message -----=20
From: Sam Przyswa=20
To: David Ditner ; Bernard Brajzblat ; Gabriel GEISMAR ; JL GARNIER=20
Sent: Tuesday, March 16, 2010 3:51 PM=20
Subject: Quelques astuces...=20


J'ai install=C3=A9 deux Zimlet utiles que vous trouverez dans la barre de g=
auche de Zimbra.=20

Colored Email: Permet de colorer les mails re=C3=A7us afin de les mettre en=
 =C3=A9vidence, il suffit de cliquer et d=C3=A9placer un mail sur lequel vo=
us souhaitez appliquer cette fonction, choisir la couleur du texte et/ou la=
 couleur du fond.=20

StickyNotes: Il permet de mettre un PostIt (une note collante) sur un mail =
qui s'ouvrira =C3=A0 chaque fois que l'on cliquera sur ce mail. D'abord cli=
quer sur le Zimlet pour cocher l'option " Add StickyNotes button to main to=
olbar " ensuite il vous suffira de cliquer sur cette ic=C3=B4ne dans la bar=
re de menu des mail pour ajouter une note =C3=A0 ce mail. Un tag jaune sera=
 cr=C3=A9=C3=A9 afin d'identifier les mails not=C3=A9s.=20

Enfin pour la gestion des spams vous avez dans les pr=C3=A9f=C3=A9rences et=
 le menu Mail, en bas de page la possibilit=C3=A9 de d=C3=A9finir des adres=
ses mail =C3=A0 blacklister ou whitelister, ceci individualement par utilis=
ateur.=20

Sam Przyswa.=20

--=20
Sam Przyswa - Chef de projet=20
Email: samp@arial-concept.com=20
Arial Concept - Int=C3=A9grateur Internet=20
36, rue de Turin - 75008 - Paris - France=20
Tel: 01 40 54 86 04 - Fax: 01 40 54 83 01=20
Fax priv=C3=A9: 09 57 12 27 22=20
Skype ID: arial-concept=20
Web: http://www.arial-concept.com=20


--=20
Sam Przyswa - Chef de projet=20
Email: samp@arial-concept.com=20
Arial Concept - Int=C3=A9grateur Internet=20
36, rue de Turin - 75008 - Paris - France=20
Tel: 01 40 54 86 04 - Fax: 01 40 54 83 01=20
Fax priv=C3=A9: 09 57 12 27 22=20
Skype ID: arial-concept=20
Web: http://www.arial-concept.com=20

------=_Part_7890_18323127.1268823754911
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><=
div style=3D'font-family: Arial, Helvetica, sans-serif; font-size: 10pt; co=
lor: #000000'>Bonjour,<br><br>test antispam mails locaux.<br><br>Cordialeme=
nt,<br><br>Gabriel Geismar<br><br><br>----- Mail Original -----<br>De: "Sam=
 Przyswa" &lt;samp@geismar.com&gt;<br>=C3=80: "Gabriel Geismar Zimbra" &lt;=
g.geismar@geismar.com&gt;<br>Envoy=C3=A9: Mercredi 17 Mars 2010 11:53:46<br=
>Objet: Re: Gestion de l'antispam inefficace pour l'instant !<br><br><style=
>p { margin: 0; }</style><div style=3D"font-family: Arial; font-size: 10pt;=
 color: rgb(0, 0, 0);">Pouvez-vous faire une r=C3=A9ponse =C3=A0 ce mail af=
in de tester l'antispam sur les mails locaux.<br><br>Merci d'avance.<br><br=
>Sam Przyswa.<br><br><br>----- Mail Original -----<br>De: "Gabriel Geismar =
Zimbra" &lt;g.geismar@geismar.com&gt;<br>=C3=80: "Sam Przyswa" &lt;samp@gei=
smar.com&gt;<br>Cc: "David Ditner" &lt;d.ditner@geismar.com&gt;, "Bernard B=
rajzblat" &lt;b.brajzblat@geismar.com&gt;, "JL GARNIER" &lt;jl.garnier@geis=
mar.com&gt;<br>Envoy=C3=A9: Mardi 16 Mars 2010 17:57:13<br>Objet: {Spam}Ges=
tion de l'antispam inefficace pour l'instant !<br><br>=EF=BB=BF


<style>P {
=09MARGIN: 0px
}
</style>


<div><font face=3D"Arial" size=3D"2">Bonsoir M. Przyswa,</font></div>
<div><font face=3D"Arial" size=3D"2"></font>&nbsp;</div>
<div><font face=3D"Arial" size=3D"2">Nous n'avons pas l'impression que l'an=
tispam=20
"apprenne" quoi que ce soit&nbsp;:</font></div>
<div><font face=3D"Arial" size=3D"2"></font>&nbsp;</div>
<div><font face=3D"Arial" size=3D"2">Sur tous les comptes de Neuilly,&nbsp;=
les mails=20
internes pour parler d'un exemple simple et courant continuent de se retrou=
ver=20
dans le dossier&nbsp;spam alors que les&nbsp;utilisateurs les ont=20
d=C3=A9j=C3=A0&nbsp;cliqu=C3=A9s plusieurs fois comme mails acceptables dan=
s l'interface=20
Zimbra. </font></div>
<div><font face=3D"Arial" size=3D"2"></font>&nbsp;</div>
<div><font face=3D"Arial" size=3D"2">Par exemple : M. Ditner est toujours c=
onsid=C3=A9r=C3=A9=20
comme un spam alors que je l'ai cliqu=C3=A9 en mail acceptable au moins 5 f=
ois... Et=20
c'est la meme chose sur tous les comptes. C'est le point le plus&nbsp;fasti=
dieux=20
pour tout le monde, =C3=A0 quel moment&nbsp;la gestion de l'antispam va-t-e=
lle=20
devenir&nbsp;productive ? </font></div>
<div><font face=3D"Arial" size=3D"2"></font>&nbsp;</div>
<div><font face=3D"Arial" size=3D"2">Cordialement,</font></div>
<div><font face=3D"Arial" size=3D"2">G. Geismar</font></div>
<div><font face=3D"Arial" size=3D"2"></font>&nbsp;</div>
<div><font face=3D"Arial" size=3D"2"></font>&nbsp;</div>
<blockquote dir=3D"ltr" style=3D"border-left: 2px solid rgb(0, 0, 0); paddi=
ng-right: 0px; padding-left: 5px; margin-left: 5px; margin-right: 0px;">
  <div style=3D"font-family: arial; font-style: normal; font-variant: norma=
l; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adj=
ust: none; font-stretch: normal;">----- Original Message ----- </div>
  <div style=3D"background: rgb(228, 228, 228) none repeat scroll 0% 0%; -m=
oz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -mo=
z-background-inline-policy: -moz-initial; font-family: arial; font-style: n=
ormal; font-variant: normal; font-weight: normal; font-size: 10pt; line-hei=
ght: normal; font-size-adjust: none; font-stretch: normal;"><b>From:</b>=20
  <a title=3D"samp@geismar.com" href=3D"mailto:samp@geismar.com" target=3D"=
_blank">Sam Przyswa</a>=20
</div>
  <div style=3D"font-family: arial; font-style: normal; font-variant: norma=
l; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adj=
ust: none; font-stretch: normal;"><b>To:</b> <a title=3D"d.ditner@geismar.c=
om" href=3D"mailto:d.ditner@geismar.com" target=3D"_blank">David Ditner</a>=
 ; <a title=3D"b.brajzblat@geismar.com" href=3D"mailto:b.brajzblat@geismar.=
com" target=3D"_blank">Bernard=20
  Brajzblat</a> ; <a title=3D"g.geismar@geismar.com" href=3D"mailto:g.geism=
ar@geismar.com" target=3D"_blank">Gabriel GEISMAR</a> ; <a title=3D"jl.garn=
ier@geismar.com" href=3D"mailto:jl.garnier@geismar.com" target=3D"_blank">J=
L=20
  GARNIER</a> </div>
  <div style=3D"font-family: arial; font-style: normal; font-variant: norma=
l; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adj=
ust: none; font-stretch: normal;"><b>Sent:</b> Tuesday, March 16, 2010 3:51=
=20
  PM</div>
  <div style=3D"font-family: arial; font-style: normal; font-variant: norma=
l; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adj=
ust: none; font-stretch: normal;"><b>Subject:</b> Quelques astuces...</div>
  <div><br></div>
  <div style=3D"font-size: 10pt; color: rgb(0, 0, 0); font-family: Arial;">=
<span>J'ai=20
  install=C3=A9 deux Zimlet utiles que vous trouverez dans la barre de gauc=
he de=20
  Zimbra.<br><br><span style=3D"font-weight: bold; text-decoration: underli=
ne;">Colored Email:</span>=20
  Permet de colorer les mails re=C3=A7us afin de les mettre en =C3=A9videnc=
e, il suffit de=20
  cliquer et d=C3=A9placer un mail sur lequel vous souhaitez appliquer cett=
e=20
  fonction, choisir la couleur du texte et/ou la couleur du fond.<br><br><s=
pan style=3D"font-weight: bold; text-decoration: underline;">StickyNotes:</=
span> Il=20
  permet de mettre un PostIt (une note collante) sur un mail qui s'ouvrira =
=C3=A0=20
  chaque fois que l'on cliquera sur ce mail. D'abord cliquer sur le Zimlet =
pour=20
  cocher l'option "</span><span style=3D"font-style: italic;">Add StickyNot=
es=20
  button to main toolbar</span><span>"=20
  ensuite il vous suffira de cliquer sur cette ic=C3=B4ne dans la barre de =
menu des=20
  mail pour ajouter une note =C3=A0 ce mail. Un tag jaune sera cr=C3=A9=C3=
=A9 afin d'identifier=20
  les mails not=C3=A9s.<br><br>Enfin pour la gestion des spams vous avez da=
ns les=20
  pr=C3=A9f=C3=A9rences et le menu Mail, en bas de page la possibilit=C3=A9=
 de d=C3=A9finir des=20
  adresses mail =C3=A0 blacklister ou whitelister, ceci individualement par=
=20
  utilisateur.<br><br>Sam Przyswa.<br><br>-- <br>Sam Przyswa - Chef de=20
  projet<br>Email: samp@arial-concept.com<br>Arial Concept - Int=C3=A9grate=
ur=20
  Internet<br>36, rue de Turin - 75008 - Paris - France<br>Tel: 01 40 54 86=
 04 -=20
  Fax: 01 40 54 83 01<br>Fax priv=C3=A9: 09 57 12 27 22<br>Skype ID:=20
  arial-concept<br>Web:=20
http://www.arial-concept.com<br></span></div></blockquote><span id=3D"81570=
80b-db9e-4e7d-9289-d33c1dcebc27"><br><br>-- <br>Sam Przyswa - Chef de proje=
t<br>Email: samp@arial-concept.com<br>Arial Concept - Int=C3=A9grateur Inte=
rnet<br>36, rue de Turin - 75008 - Paris - France<br>Tel: 01 40 54 86 04 - =
Fax: 01 40 54 83 01<br>Fax priv=C3=A9: 09 57 12 27 22<br>Skype ID: arial-co=
ncept<br>Web: http://www.arial-concept.com<br></span></div></div></body></h=
tml>
------=_Part_7890_18323127.1268823754911--

That's it.

Sam.

[uxbod]

FH_DATE_PAST_20XX=3.188

Indeed that be your problem.

[Samp]

Originally Posted by uxbod

FH_DATE_PAST_20XX=3.188

Indeed that be your problem.

Where is the date problem, just one is in UTC and other in CET in the header but for the same time...

Sam.

[uxbod]

Read the thread I posted; anything after 2010 is a issue. You need to fix the SA rules.

[Samp]

Originally Posted by uxbod

Read the thread I posted; anything after 2010 is a issue. You need to fix the SA rules.

I modify the score file and set the FH_DATE_PAST_20XX to 0.0 and restart amavis we will se if that's fix the problem.

Thanks for your help.

Sam.

[Samp]

Since I modify H_DATE_PAST_20XX to 0.0 the antispam don't work anymore all spams now comes as good mails even we marked it as spam in first received...

I'm afraid to lose my customer after 2 days on Zimbra we have lot of problems, see my posts here and bug requests on Bugzilla.

Sam.

[y@w]

Originally Posted by Samp

I modify the score file and set the FH_DATE_PAST_20XX to 0.0 and restart amavis we will se if that's fix the problem.

Thanks for your help.

Sam.

Why did you change the score? You should modify the rule as the thread suggests to make it detect messages sent "from the future" slightly more correctly and score accordingly.

I'm not sure what exactly you mean by "local users", but you may also want to look at making this tweak: Spamassassin postfix authenticated users - Zimbra :: Wiki

[Samp]

Originally Posted by y@w

Why did you change the score? You should modify the rule as the thread suggests to make it detect messages sent "from the future" slightly more correctly and score accordingly.

That's what I found :

Rules/FH_DATE_PAST_20XX - Spamassassin Wiki

Sam.