Search The ForumSearch   RegisterRegister  LoginLogin

MailBee Objects

 AfterLogic Forum : MailBee Objects
Subject Topic: Mailbee messages marked as spam Post ReplyPost New Topic
Author
Message << Prev Topic | Next Topic >>
Luca
Newbie
Newbie


Joined: 15 October 2006
Online Status: Offline
Posts: 17
Posted: 10 May 2007 at 11:33am | IP Logged Quote Luca

Hello,

in a multipart message, the part boundaries format used by MailBee seems to trigger most common antispam filters. As a result, messages constructed with MailBee (independently of which component is sending them) generate high spam scores and are generally filtered out.

The spam rule which is triggered is:

MIME_BOUND_NEXTPART    Spam tool pattern in MIME boundary

You can reproduce this issue by checking any MailBee-generated multipart message with SpamAssassin32:

http://sawin32.sourceforge.net/

(I've tried manually changing part boundaries in one message's raw body, and substituting them with boundaries similar to those produced by Outlook, and it fixes the problem for that message)

The problem occurs with a lot of very popular antispam filters (both server-side, as Spam Assassin, and client-side, as AVG) - if you are using your own components for sending out your newsletter, this may be very relevant for you too ;-)
Back to Top View Luca's Profile Search for other posts by Luca
 
Alex
AfterLogic Support
AfterLogic Support
Avatar

Joined: 19 November 2003
Online Status: Offline
Posts: 2206
Posted: 10 May 2007 at 1:58pm | IP Logged Quote Alex

We tried http://sawin32.sourceforge.net/ to check what's going on there but could not make it work. I submitted MailBee message and got MIME_BOUND_NEXTPART in X-Spam-Status. Then, I manually took the boundary from a SPAM mail and then pasted it into MailBee message instead of the original one. MIME_BOUND_NEXTPART disappeared! Looks quite strange that SPAM mails receive less score.

I think there is some kind of a bug in SA rules.

Regards,
Alex
Back to Top View Alex's Profile Search for other posts by Alex
 
Luca
Newbie
Newbie


Joined: 15 October 2006
Online Status: Offline
Posts: 17
Posted: 10 May 2007 at 8:14pm | IP Logged Quote Luca

Hi Alex,

I agree with you with that - I mean, that it's SA fault, not MailBee; and a rule based on boundaries is silly in itself if you ask me.

But the problem is that Spam Assassin engine is the most widely used on the Internet by far: apart from the server side versions, which run on most Linux mail servers, it is incorporated in a lot of commercial software too (as AVG security suite) - see http://spamassassin.apache.org/

As a result, messages created with MailBee encounter great difficulties in being delivered - we were first alerted about that by a lot of users (we publish a mailing software), then that was checked by us and confirmed.

I see two possible workarounds: either the dll is updated so that boundaries can be somehow changed, or some code could be provided that works on raw body and changes boundaries without breaking the message structure.

I know this is bothering, as it comes from someone else's poor design... but there's no other option as it is impossible that mailservers worldwide update :)
Back to Top View Luca's Profile Search for other posts by Luca
 
Alex
AfterLogic Support
AfterLogic Support
Avatar

Joined: 19 November 2003
Online Status: Offline
Posts: 2206
Posted: 11 May 2007 at 12:41pm | IP Logged Quote Alex

You know, we contacted SA support, they said that MIME_BOUND_NEXTPART should not really cause the message to be considered spam. It's score is just 0.2 while 6.3 is required to consider a message to be spam. Maybe, there is something more important in that mails which were filtered out? Could you submit the entire X-Spam-Status string of a typical message which gets blocked?

I think we'll anyway make boundaries SA-safe but I'm not sure it will really help in your case (if you're getting high scores for some other reason).

Regards,
Alex
Back to Top View Alex's Profile Search for other posts by Alex
 
Alex
AfterLogic Support
AfterLogic Support
Avatar

Joined: 19 November 2003
Online Status: Offline
Posts: 2206
Posted: 11 May 2007 at 4:00pm | IP Logged Quote Alex

http://www.afterlogic.com/updates/mailbee.zip is MailBee.dll with fixed boundaries. This should decrease spam score by 0.2.

However, we're still interested in what makes e-mails you're sending get spam level score.

Regards,
Alex
Back to Top View Alex's Profile Search for other posts by Alex
 
Luca
Newbie
Newbie


Joined: 15 October 2006
Online Status: Offline
Posts: 17
Posted: 12 May 2007 at 4:39am | IP Logged Quote Luca

Hi Alex,

thank you, that was great as usual!

The rest of the spam issue does not involve Mailbee objects at all; it comes from the way messages are composed - using "too graphic" e-mail templates, so that rules like these are triggered:

HTML_IMAGE_RATIO_04
DC_IMG_TEXT_RATIO

But this is something I can easily deal with (it's just a matter of designing better templates).

SpamAssassin allows changing rules' scores and spam thresholds, and I've noticed that a lot of servers use 4 (instead of 6.3) as a spam indicator - while some softwares use higher spam scoring for each rule. Therefore, even small improvements may make a big difference.
Back to Top View Luca's Profile Search for other posts by Luca
 
Alex
AfterLogic Support
AfterLogic Support
Avatar

Joined: 19 November 2003
Online Status: Offline
Posts: 2206
Posted: 12 May 2007 at 7:46am | IP Logged Quote Alex

Yes, this makes sense. Thank you for your feedback.

Regards,
Alex
Back to Top View Alex's Profile Search for other posts by Alex
 

If you wish to post a reply to this topic you must first login
If you are not already registered you must first register

  Post ReplyPost New Topic
Printable version Printable version

Forum Jump

Powered by Web Wiz Forums version 7.9
Copyright ©2001-2004 Web Wiz Guide