What the thresholds look like
SpamAssassin marks mail as spam from 5.0 points by default. Rspamd works with actions: depending on the score a message is delayed, marked, gets a rewritten subject or is rejected, and rejection defaults to 15 points. Every receiver sets its own thresholds and large providers add their own methods. A score just below the threshold can therefore already be spam for some recipients.
Typical triggers
- Missing or conspicuous headers such as Date, Message-ID, Subject or From.
- Failed or missing authentication (SPF, DKIM, DMARC).
- HTML-only mail without a plain-text part and images without accompanying text.
- Shortened links, links to domains on blocklists and subject lines in capital letters.
- A sending IP on a blacklist or with generic reverse DNS.
Lowering the points
- Fix the rules with the greatest weight first. sender.report lists them by points with a description.
- Complete authentication and check reverse DNS.
- Separate text and HTML cleanly, use spelled-out links and choose a clear subject.