spam problem

sanjibgupta · 09-02-2004, 11:39 PM

Hi
I have installed spamassassin 2.51 in mail server (Redhat 9.0) and it able to stop spams but mails like .exe/.pif/.zip is not stopped.
Can you have help me stop this mails.
Sanjib Gupta
INDIA

btmiller · 09-02-2004, 11:53 PM

Do you want to stop all mails with attachments or just known viruses? If the latter, you should look into a virus scanning solution like ClamAV, which can be installed on servers (I have it on one of my own servers).

HappyTux · 09-02-2004, 11:56 PM

Quote:

Originally posted by sanjibgupta
Hi
I have installed spamassassin 2.51 in mail server (Redhat 9.0) and it able to stop spams but mails like .exe/.pif/.zip is not stopped.
Can you have help me stop this mails.
Sanjib Gupta
INDIA

You could try something like this in the preferences file.

Code:

score MICROSOFT_EXECUTABLE 5.100

Although I doubt that will get the .zip file and you may want to check Rules Du Jour a nice little script I put in my cron.daily directory that gets updated rule sets automatically for you.

sanjibgupta · 09-03-2004, 12:34 AM

i have been using it for system wide spam blocking. How do i use clamav with spamassign.
I am attaching the local.cf file fro spammassin how do i stop the .pif files and more over how do i stop mails which i think to be a spam# How many hits before a message is considered spam.
required_hits 5.0

# Whether to change the subject of suspected spam
rewrite_subject 1

# Text to prepend to subject if rewrite_subject is used
subject_tag *****LIKELY TO BE A SPAM*****

# Encapsulate spam in an attachment
report_safe 1

# Use terse version of the spam report
use_terse_report 0

# Enable the Bayes system
use_bayes 1

# Enable Bayes auto-learning
auto_learn 1

# Enable or disable network checks
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1

# Mail using languages used in these country codes will not be marked
# as being possibly spam in a foreign language.
# - english
ok_languages en

# Mail using locales used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales en

#etc/mail/spamassassin/local.cf

sanjibgupta · 09-07-2004, 02:26 AM

I am able to stop mails from spamassassin. But how do i stop this type mails from spamassassin

Sanjib Gupta

From a@b.c.d Tue Sep 7 10:24:57 2004
Return-Path: a@b.c.d
Received: from b.c.d.e(b.c.d.e [127.0.0.1])
by b.c.d.e (8.12.8/8.12.8) with ESMTP id i874svVw004943
for <s@b.c.d>; Tue, 7 Sep 2004 10:24:57 +0530
From: "anuradha" <a@b.c.d.e>
To: s@b.c.d
Subject: Fw: Yours Will Be Thicker And Fuller for the New Year
Date: Tue, 7 Sep 2004 10:24:57 +0530
Message-Id: <20040907045457.M56192@b.c.d.e>
In-Reply-To: <CEMNDFNAECJBPADKCEPPLHBIEEAA.dorthytrotter_as@hotmail.com>
References: <CEMNDFNAECJBPADKCEPPLHBIEEAA.dorthytrotter_as@hotmail.com>
X-Mailer: Open WebMail 1.81 20030107
X-OriginatingIP: 22.147.148.28 (a)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-Spam-Status: No, hits=-9.9 required=5.0
tests=IN_REP_TO,REFERENCES
autolearn=ham version=2.51
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.51 (1.174.2.5-2003-03-20-exp)
Status: R Simple headers

---------- Forwarded Message -----------
From: "Dorthy Trotter" <dorthytrotter_as@hotmail.com>
To: xxx@y.z.q
Sent: Mon, 06 Sep 2004 17:41:10 +0000
Subject: Yours Will Be Thicker And Fuller for the New Year

No Pills Or Capsules No Lotions Or Cremes No Pumps, Weights, Or Eercises No
Prescription Necssary Doctor Designed & Endorsed 100% Safe & Natural More
Stamina & Energy Increase Size By 2’’ To 4’’ Results
in 3 days http://zvr.extra36.info/pp/index.php?pid=eph4748 copy and paste URL
x3xcmz28lnmxu0W10 Stay little http://qlk.extra36.info/pp/chair.php
p0v60i19adq9W10

HappyTux · 09-07-2004, 03:31 AM

The Rules de Jour I already mentioned catches all that stuff on my machine. For some reason though on your machine it is auto learning it as ham did you set it up. Here is what it looks like on here working.

Code:

X-Spam-Flag: YES
 X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on HappyTux
 X-Spam-Level: *********************
X-Spam-Status: Yes, hits=21.6 required=2.8 tests=BAYES_99,BIZ_TLD,
        BigEvilList_24,HTML_IMAGE_ONLY_04,HTML_MESSAGE,MIME_HTML_NO_CHARSET,
        MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,
        RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_NJABL_DUL,
        RCVD_IN_SORBS_DUL,RCVD_IN_XBL autolearn=spam version=2.64

Get a bunch of them saved up in a folder for that purpose called say spam then sa-learn --spam --dir /home/user/Mail/spam/* to train the filter properly you need to do this with over 200 spam for the filters to start working properly IIRC.