Bonjour,
Un email reçu est marqué comme spam.
J'ai décodé le champ X-VR-SPAMCAUSE et je découvre que la raison du score de spam élevé est la suivante : `^E426-42 (300);`
Le mail "gagne" ainsi 300 points de valeur de SPAM, mais je n'ai trouvé aucune ressource sur internet expliquant à quoi cette raison faisait référence.
Quelqu'un en sait-il plus sur le sujet ?
Merci !
Quelqu'un en sait-il plus sur le sujet ?
Bonjour,
Vous avez les headers complets ?
Bonjour,
Merci pour votre réponse.
Les voici :
Return-Path: framasoft.org>
Delivered-To: xxx
Received: from localhost (HELO queue) (127.0.0.1)
by localhost with SMTP; 18 Oct 2023 12:19:03 +0200
Received: from unknown (HELO output33.mail.ovh.net) (192.168.13.111)
by 192.168.9.43 with AES256-GCM-SHA384 encrypted SMTP; 18 Oct 2023 12:19:03 +0200
Received: from vr22.mail.ovh.net (unknown [10.101.8.22])
by out33.mail.ovh.net (Postfix) with ESMTP id 4S9Rdz3z59zWYqJsJ
for ; Wed, 18 Oct 2023 10:19:03 +0000 (UTC)
Received: from in47.mail.ovh.net (unknown [10.101.4.47])
by vr22.mail.ovh.net (Postfix) with ESMTP id 4S9Rdz21p7z3YnvV5
for ; Wed, 18 Oct 2023 10:19:03 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=46.4.82.235; helo=angelica.framasoft.org; envelope-from=ne-pas-repondre+framagenda@framasoft.org; receiver=xxx
Authentication-Results: in47.mail.ovh.net;
dkim=pass (2048-bit key; unprotected) header.d=framasoft.org header.i=@framasoft.org header.b="qknkbPM3";
dkim-atps=neutral
Received: from angelica.framasoft.org (angelica.framasoft.org [46.4.82.235])
by in47.mail.ovh.net (Postfix) with ESMTPS id 4S9Rdz0sj6z2QNs7Q
for ; Wed, 18 Oct 2023 10:19:03 +0000 (UTC)
Received: from hans2.framasoft.org (hans2.framasoft.org [IPv6:2a01:4f8:212:1bd7::2])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256)
(No client certificate requested)
by angelica.framasoft.org (Postfix) with ESMTPS id 4S9Rdy3yjmz12MKK
for ; Wed, 18 Oct 2023 12:19:02 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=framasoft.org;
s=dkim2; t=1697624342; h=from:from:reply-to:reply-to:subject:subject:date:date:
message-id:message-id:to:to:cc:mime-version:mime-version:
content-type:content-type; bh=wJzGGvA7WGL8pmIHVHq2us7MyXcO7xDIA3YgdA/Lrqs=;
b=qknkbPM3Tmc9RxHDAeziaGxNWWFXuz7D33yoIlnjpZlil9W6uA0g4UcNKsX2szTwGLnppJ
oLhww10Nxz35XHjl6lZYw2PU3Ox0q8YYgi1oX7el9fWZw6muUQ2US7LgksxT1wqL1Rr3kb
0Klfn8rfGZ0Plp80MCS4/fPQgngNI3E4uw9EFShwmDalQlZOnzNw/spsB6L1Oe3d/5G54f
iajUU3x46iH5ByXKpLeXmicBS7BAa81s00ujEzaDbGCDMXrQr+v2VOyRGTOT1n9Yea5lk/
KeIrJtL7hefz2m7+nygnMoqt2mi4Y5nTSgduQzsrQjFwMar4+KSysM4v394meQ==
Authentication-Results: angelica.framasoft.org;
none
Received: from localhost ([127.0.0.1] helo=framagenda.org)
by hans2.framasoft.org with esmtp (Exim 4.96)
(envelope-from framasoft.org>)
id 1qt3dm-009lBO-1L
for xxx;
Wed, 18 Oct 2023 12:19:02 +0200
Message-ID: <5e6e6843ce008264fc29b1faf30da905@framagenda.org>
Date: Wed, 18 Oct 2023 10:19:02 +0000
Subject: [SPAM] Invitation
From: "xxx via Framagenda"
framasoft.org>
Reply-To: "xxx"
To: =?utf-8?Q?F=C3=A9lix?= Veith beta.gouv.fr>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=swift_1697624342_476e1bb43ccfddbb9514972a71a08263="
X-Spam-Status: No, score=-91.95
X-OVH-Remote: 46.4.82.235 (angelica.framasoft.org)
X-Ovh-Tracer-Id: 12760668073214062710
X-VR-SPAMSTATE: SPAM
X-VR-SPAMSCORE: 190
X-VR-SPAMCAUSE: xxx
X-Ovh-Spam-Status: SPAM
X-Ovh-Spam-Reason: vr: SPAM; dkim: disabled; spf: disabled
X-Ovh-Message-Type: SPAM
X-Spam-Tag: YES
J'ai enlevé les information personnelles.
Le X-VR-SPAMCAUSE décodé me donne :
AS+AV+AP+RT ProFile: OVH,CHECKCE;
Bailout: 500;
@!Recipients (-100);
^E426-42 (300);
HamHeaderField Header ScorinW (-10);
Hdr=IDSFrTVc@m0j?007;
From="xxx via FramaWenda" ;
VRPattern=BF21602D08A321AE0B70189F35AF2928;
Domain=xxx,FramaWenda.orW;
Ip=46.4.82.235,2a01:4F8:212:1bd7::2;
ClusterSiZe=0;
Param=inet=46.4.82.235,mailFrom=,
nb_rcptto=1,
rcptto=xxx,MTAHost=vr22,dkim=pass,WeoIP=DE,revIP=anWelica.FramasoFt.orW
Avec probablement des "W" qui sont en fait des "G"
@!Recipients (-100);
^E426-42 (300);
HamHeaderField Header ScorinW (-10);
Effectivement 300 - 100 - 10 = 190
X-VR-SPAMSCORE: 190
La question est très pointue, car à part vous et moi, il n'y a pas grand monde capable de décrypter le X-VR-SPAMCAUSE
Demander au support OVH ce que veut dire "^E426-42 (300);" n'a aucune chance d'aboutir. Peut-être via la mailing list [email] https://www.ovhcloud.com/fr/community/mailing-list/?_gl=1*1ubvz68*_gcl_au*OTk3NzYwODA0LjE2OTkyNjQzODc.