I need help understanding #SpamAssassin
I have a mail here that got scored with RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.408

Looking at https://github.com/apache/spamassassin/blob/d8b971c6432eba0ec1d5fcf89e61f3551b6446cd/rules/20_dnsbl_tests.cf#L159-L162 this seems to mean that Validity told me to fuck off (fair, I don't pay them), but why does that increase the score of the mail?
The score matches https://github.com/apache/spamassassin/blob/d8b971c6432eba0ec1d5fcf89e61f3551b6446cd/rulesrc/scores/72_scores.cf#L328 and I see no score for RCVD_IN_VALIDITY_CERTIFIED there.
There is a 0 score in https://github.com/apache/spamassassin/blob/d8b971c6432eba0ec1d5fcf89e61f3551b6446cd/rules/50_scores.cf#L520 which implies that check should be disabled anyway?

spamassassin/rules/20_dnsbl_tests.cf at d8b971c6432eba0ec1d5fcf89e61f3551b6446cd · apache/spamassassin

Read-only mirror of Apache SpamAssassin. Contribute to apache/spamassassin development by creating an account on GitHub.

GitHub

First mail with a "high" score from that rule is from 28 Feb 2026, the last with a low (0.001) score is from 8 Feb 2026

What happened in between?!

I guess the winner is https://github.com/apache/spamassassin/commit/383b05aeefb685ed732124173b85627f3a61bd9b which changes
score RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 # force non-zero
to
score RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.798
wat?
updated scores for revision 1931870 active rules added since last mas… · apache/spamassassin@383b05a

…s-check git-svn-id: https://svn.apache.org/repos/asf/spamassassin/trunk@1931878 13f79535-47bb-0310-9956-ffa450edef68

GitHub
Log in to SA Bugzilla

And added
dns_query_restriction deny bl.score.senderscore.com sa-accredit.habeas.com sa-trusted.bondedsender.org
to /etc/spamassassin/local.cf
This thread was brought to you by "why the fuck does the pizza order confirmation mail not show up in my inbox?!"

Seems that wasn't enough.

DIRECT_LOW_CONTRAST=2.499 since r1931861 is placing Grafana notifications into spam.

@zhenech people are still using spamassassin in 2026? srsly?

@zhenech because rspamd.

maybe 10 years ago, SA became so bad in detecting spam (or spam became too good for SA), that I switched - at least in my bubble nobody uses it anmore.