Spam False Positive - Curious as to why

[nevetslee]

Hi all,

I'm just curious as to to why the following got marked at 5.5. No biggie as I'm just "Marking & Passing" all the email. Also, the sender now's been Safe-Listed. I was asked the question though and thought I'd see if there was an easy answer...

I removed any identifiable names from the email...

Steve

------------------------------------------
-----Original Message-----
From: Someone [mailto:someone@someplace.com]
Sent: Wednesday, October 31, 2007 5:16 PM
To: My Boss!
Subject: [SPAM] RE: Louisville Furniture Row elevations

The attached message from Someone <someone@someplace.com>
was determined by Untangle Spam Blocker to be spam based on a score
of 5.5 where anything above 4.3 is spam.



Subject:
RE: Louisville Furniture Row elevations
From:
"Someone" <someone@someplace.com>
Date:
Wed, 31 Oct 2007 17:16:09 -0400
To:
"My Boss" <myboss@btmeng.com>

Thank you. Can I print these on letter paper?

-----Original Message-----
From: "My Boss" <myboss@btmeng.com>
To: "Someone" <someone@someplace.com>
Sent: 10/31/2007 4:58 PM
Subject: FW: Louisville Furniture Row elevations

Will,

Here are the renderings. I am printing them and will provide copies to the
Planning Commission.

My Boss' Name
BTM Engineering
Our Address
Louisville, KY



-----Original Message-----
From: Some other Guy[mailto:anemailaddress.net]
Sent: Wednesday, October 31, 2007 4:17 PM
To: myboss@btmeng.com
Cc: Yet Another Guy
Subject: Louisville Furniture Row elevations

Attached are the requested colored elevations for the Furniture Row in
Louisville KY. All sheets are to be printed on 11x17 sheets.

An architecht
A Bunch of Architects, Inc

[juank]

You can find that easily.

Copy the message (including all headers and all) to a text file on your untangle box.

Then do

spamassassin -D < text.file

It will show you exactly what's going on.

[dmorris]

Or you can go back and read through /var/log/syslog
It logs all the messages and scores as it processes them