thold email detected as SPAM

[torstentfk]

Hi,

our SPAM firewall has filtered the thold alarm email with this points:


Content analysis details: (7.1 points, 5.5 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
1.2 BLANK_LINES_70_80 BODY: Message body has 70-80% blank lines
5.0 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------------
Could the source code of the email changed to pass through the filter?


Torsten

[cigamit]

I will see what I can do for the next version, the Content analysis details will definitely help.

[F.Ultra]

Spamassassin triggered on this aswell, as far as I can see the complaint is for this line in the SMTP header:

Content-Type: multipart/related; type="text/html"; boundary="b1_efbafa6f1f0a4514c11985476afeb786"

Where 'type="text/html";' seams to be the main culprit. I have looked at other types of html mail and have not seen any such type=""; element in the Content-Type line.

[torstentfk]

If have added some extra lines to the code (html- email code and normal code) and now the alerts are not detected as spam.

thold-function.php:

Code: Select all

    Line 509     include_once($config["base_path"] . "/plugins/thold/class.phpmailer.php");
  line   510     $message=$message . "<p>This is an automatic generated message from the monitoring system.<br> Do         not reply to this address.<br>This is an automatic generated message from the monitoring system.<br> D        o not reply to this address.<br>This is an automatic generated message from the monitoring system.<br>         Do not reply to this address.<br>This is an automatic generated message from the monitoring system.<b        r> Do not reply to this address.<br>This is an automatic generated message from the monitoring system.        <br> Do not reply to this address.<br>This is an automatic generated message from the monitoring syste        m.<br> Do not reply to this address.<br><p> This is not a Spam Mail - if you do not want to get any fu        rther emails please contact you local monitoring administrator (in most cases this is the local cacti-        guru)";

Line    589       $mail->Body .="<p>This is an automatic generated message from the monitoring system.<br> Do not         reply to this address.<br>This is an automatic generated message from the monitoring system.<br> Do no        t reply to this address.<br>This is an automatic generated message from the monitoring system.<br> Do         not reply to this address.<br>This is an automatic generated message from the monitoring system.<br> D        o not reply to this address.<br>This is an automatic generated message from the monitoring system.<br>         Do not reply to this address.<br>This is an automatic generated message from the monitoring system.<b        r> Do not reply to this address.<br><p> This is not a Spam Mail - if you do not want to get any furthe        r emails please contact you local monitoring administrator (in most cases this is the local cacti-guru        )";
Line    590         $mail->AttachAll();

[cigamit]

I plan on having it actually add some host info, stats, and a little bit of other text into the email, which should solve the issue.