Thanks for pasting those, super helpful!
Ok, lets look at each one:
1. the lists.riseup.net one: we actually did properly "shortcircuit" our spam system on that one, you can see at the top this:
X-Spam-Status: No, score=-100.0 required=6.0 tests=SHORTCIRCUIT,
USER_IN_WHITELIST shortcircuit=ham autolearn=disabled version=3.4.0
That means this message was given a *minus* 100 score, you need a 6 to consider it spam. It was shortcircuited as 'ham' which is good.
So why did it go to Spam? I am pretty sure its because the subject:
Subject: Re: [kellerag] ***SPAM*** Anti-Flag (!!!)
Our system looked at that and thought that it was spam, and put it in the spam folder. Not sure why that subject is there, but people replying with that in the subject are going to continue to cause that to happen. So try to remove that from the subject!
2. the second one -- this one got classified as spam because it got a score of 7.2 (required=6.0), the BIG reason why it got that high was because of this check: "5.0 KAM_FAKE_DELIVER Fake delivery notifications" - that one fires if the content of the email has some typical text that is related to delivery of a package, but meets certain spam criteria. There are some *very* common fake package delivery spam emails that exist out there and it seems like this message (with the body of the mail, which was not included), has some of those phrases. We could either try and whitelist the blackmosquito site, or we could look at the contents of the message and see what happened there and see if we can tweak our rules some more.