Zimbra is spamming me (not really)

[ewilen]

Has anyone else gotten the newsletter with subject line "Zimbra News: Appliance Launches | Attend VMworld | Online Training"

It looks pretty spammy to SA under ZCS 6.0.7:

X-Spam-Flag: YES
X-Spam-Score: 6.171
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.171 tagged_above=-10 required=4.4
	tests=[BAYES_00=-1.9, EXCUSE_REMOVE=3.299, HTML_MESSAGE=0.001,
	SPOOF_COM2COM=2.048, SPOOF_COM2OTH=2.723] autolearn=no

The Excuse Remove rule has been bumped up a fair amount, I think, since 6.0.6 (was .001 if I'm not mistaken). The com2com and com2oth rules are scoring about the same. I think the com2oth rule is being triggered by text in the html body source such as

http://lfov.net/webrecorder/c/?cid=LF_fe2186a1&lid=989919&vid=2fd7492d-3a2e-9611-3dfb-c78a55c17369&email=XXX@XXX.com&kid=54

(XXX being the recipient's address.) Not sure why com2com is being triggered.

Meanwhile, the score for Bayes_00 has been raised from -2.599 to -1.9.

I wonder if others are seeing similar scores, especially if they've run sa_update?

[ddrazyk]

I have received the newsletter and it was marked as spam. The scores are pretty much the same for SPOOF and EXCUSE_REMOVE. The overall score was higher 8,07

[brf]

I received it tagged as spam as well, and I use the stock 6.0.7 rules.

Fairly amusing, really. Sending out a newsletter that your own customers will likely never see because your own software classifies it as junk.

6.0.7 also classifies its own "Daily mail report" nightly things as junk, as well.

[ewilen]

6.0.7 also classifies its own "Daily mail report" nightly things as junk, as well.

Daily mail report going to Spam ?!

For that, I'd recommend using a whitelisting via ZWC although LMStone has a different approach.