[Evolution-users] Spam Management

Wolf Drechsel wd-p at trolink.de
Fri Apr 10 09:19:12 UTC 2026


Hello friends,

after some experiments I'm still a little helpless. Tried as well evo
3.52 (generic ubuntu) as 3.60 (flatpak).

My server does some (not so bad) spam filtering and marks spam messages
with ***SPAM*** in the subject line.

Valued advice given in this list was (AFAIU):

1. disable evo's local SPAM filtering, let the server do the work, set
up a rule to shift SPAM to the spam folder
2. enable evo's local SPAM filterig, so you can still mark messages as
"non-spam", which falsely are treated as SPAM by evo.

Using #1, I set up a rule "shift ***SPAM*** -flagged messages to SPAM
folder". This works nice, but any falsely flagged message will
immediately be shifted back to SPAM folder when manually flagged as
non-SPAM.

With using #2, my initial problem persists:
Messages, not marked as SPAM by the server, go to the SPAM folder. When
I flag them as "non-spam", they will oscillate between SPAM folder and
inbox. 


So I do not really know how to deal with this setup. Is there somewhere
some basic advice how to set up evo correctly to deal with a SPAM
filtering server?

Greetings,
Wolf 

PS: Here are headers of two SPAM messages - one flagged by the server,
one not. Both, with method #2, where shifted to SPAM folder, what is
good. 
Below, header of a non-SPAM message, which, when flagged as HAM, will
oscillate.


X-Spam-Status: No, score=4.0
X-Spam-Score: 40
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "cp127.sp-
server.net",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Timeless Luxury Watches From $250 Timeless Style
Starts Here
    Discover premium luxury watches designed for elegance and
performance. Elevate
    your look with high-end craftsmanship - now starting at just $250.
Explore
    Collection Unsubsc [...] 
 Content analysis details:   (4.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- ------------------------------------------
--------
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with
Strict
                             Alignment
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5267]
  1.1 INVALID_DATE           Invalid Date: header (not RFC 2822)
  0.0 T_DATE_IN_FUTURE_96_Q  Date: is 4 days to 4 months after
Received:
                             date
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME
parts
  2.0 RDNS_NONE              Delivered to internal network by a host
with no rDNS
X-Spam-Flag: NO

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam-Status: Yes, score=11.5
X-Spam-Score: 115
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system
"cp127.sp-server.net",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  vart Klarna Letzte Mahnung _ offene Rechnung 
 Content analysis details:   (11.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- ------------------------------------------
--------
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record
(softfail)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record
(softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with
Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the
message and
                             the domain has no DMARC policy
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.4998]
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME
parts
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  1.7 KAM_STORAGE_GOOGLE     Google Storage API being abused by
spammers
  3.0 GOOG_STO_NOIMG_HTML    Apparently using google content hosting to
avoid
                             URIBL
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject:  ***SPAM***  Letzte Mahnung =?UTF-
8?B?4oCTIG9mZmVuZSBSZWNobnVuZyBiaXMgMTAuMDQuMjAyNiBiZWdsZWljaGVuIA==?=


+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam-Status: No, score=-2.8
X-Spam-Score: -27
X-Spam-Bar: --
X-Ham-Report: Spam detection software, running on the system "cp127.sp-
server.net",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  ....Hoffentlich sterben sie nicht !!!!!!!!!!!!!!!!
Am 08.04.2026
    um 11:30 schrieb Wolf Drechsel: > Liebe Kolleginnen, > > ich habe
mehrfach
    deutlich darauf hingewiesen, da_ aufgrund eines > Programmfehlers
*kein
   Enddatum im* *Abo, *sondern nur in der [...] 
 Content analysis details:   (-2.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- ------------------------------------------
--------
 -0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at
https://www.dnswl.org/, low
                             trust
                             [212.227.17.22 listed in list.dnswl.org]
  0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [212.227.17.22 listed in wl.mailspike.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature
from author's
                             domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not
necessarily valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature
from
                             envelope-from domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK
signature
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser
mail provider
                             [christine.schwarz(at)gmx.de]
  0.0 HTML_MESSAGE           BODY: HTML included in message
X-Spam-Flag: NO
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osuosl.org/pipermail/evolution-users/attachments/20260410/eb8bf7e0/attachment.htm>


More information about the evolution-users mailing list