LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 10-22-2004, 05:21 PM   #1
jonwatson
Member
 
Registered: Jun 2004
Location: Nova Scotia, Canada!
Distribution: Ubuntu
Posts: 170

Rep: Reputation: 30
Unhappy Exim4/ sa-exim/Spamassassin - Flags as Spam but Still Accepts


Hello All....

I've sucessfully set up Spamassassin on my Debian box with exim4 (I've installed sa-exim as well). SA is running, I know so because I can watch it in exim4's mainlog and the X headers are appearing in my delivered emails. It is rejecting some emails outright (those with a score of 17 is what I've seen so far) but letting ones with scores like 7.5 through even though they are marked as spam. Here's the applicable headers from one that got delivered to me:

Code:
X-SA-Exim-Connect-IP 63.241.65.15  
From Jon Watson <munged@munged.com>               
 
Subject WINNING NOTIFICATION.  
X-Spam-Flag YES  
X-Spam-Checker-Version SpamAssassin 3.0.0 (2004-09-13) on theheatsinkbbs  
X-Spam-Level *******  
X-Spam-Status Yes, score=7.5 required=5.0 tests=AWL,MILLION_USD,
NIGERIAN_BODY1,NIGERIAN_BODY2,NIGERIAN_BODY3,SUBJ_ALL_CAPS,
UNCLAIMED_MONEY,US_DOLLARS_3 autolearn=no version=3.0.0  
Content-Type multipart/mixed; boundary="----------=_41790D6E.959EFB98"  
X-SA-Exim-Version 4.1 (built Tue, 17 Aug 2004 11:06:07 +0200)  
X-SA-Exim-Scanned Yes (on theheatsinkbbs)
As you can see in the X-Spam-Status header, SA has determined (correctly) that this message is spam yet it still delivered it to me.

I am aware of the threshold setting (which you can see I have set to 5), but is there some other setting that I'm missing? Something like "anything between 5 and 10 still deliver to me?"

I've looked in the docs and I've given up on the wiki at the Spamassassin site (man I hate Wiki software). Does anyone have any ideas?

Thanks!

Jon
 
Old 10-22-2004, 05:42 PM   #2
jonwatson
Member
 
Registered: Jun 2004
Location: Nova Scotia, Canada!
Distribution: Ubuntu
Posts: 170

Original Poster
Rep: Reputation: 30
Aha...I think I got it.....

It seems (initial tests bear this out), that the lower threshold where messages will be marked as spam is the required_hits in the local.cf file. The upperthreshold where mail stops being delivered even if it is spam is the SApermreject value in the sa-exim.conf file.

To recap if anyone else is looking for this info, if required_hits is 5.0 and SApermreject is 12.0 then:

All messages with scores under 12.0 will be delivered
Messages with scores under 5.0 will not be marked as spam (X-Spam-Flag: NO)
Messages with scores between 5.1 and 12.0 will be marked as spam (X-Spam-Flag: YES)
Messages with scores higher than 12.0 will not be delivered.

HTH

Jon
 
Old 10-25-2004, 11:11 AM   #3
jonwatson
Member
 
Registered: Jun 2004
Location: Nova Scotia, Canada!
Distribution: Ubuntu
Posts: 170

Original Poster
Rep: Reputation: 30
Quote:
Originally posted by heatsink
Aha...I think I got it.....

It seems (initial tests bear this out), that the lower threshold where messages will be marked as spam is the required_hits in the local.cf file. The upperthreshold where mail stops being delivered even if it is spam is the SApermreject value in the sa-exim.conf file.

To recap if anyone else is looking for this info, if required_hits is 5.0 and SApermreject is 12.0 then:

All messages with scores under 12.0 will be delivered
Messages with scores under 5.0 will not be marked as spam (X-Spam-Flag: NO)
Messages with scores between 5.1 and 12.0 will be marked as spam (X-Spam-Flag: YES)
Messages with scores higher than 12.0 will not be delivered.

HTH

Jon
OK...still screwed...

Where do I set the score at which Spamassassin will reject an email? I thought it was in local.cf (where it was set to 5.0) but when I set this value to 3.0, the score header on emails still reads that 5.0 is required.

Anyone?
 
Old 10-29-2004, 04:33 PM   #4
jonwatson
Member
 
Registered: Jun 2004
Location: Nova Scotia, Canada!
Distribution: Ubuntu
Posts: 170

Original Poster
Rep: Reputation: 30
Quote:
Originally posted by heatsink
OK...still screwed...

Where do I set the score at which Spamassassin will reject an email? I thought it was in local.cf (where it was set to 5.0) but when I set this value to 3.0, the score header on emails still reads that 5.0 is required.

Anyone?

Once again I answer my own post...man....I'm the BEST!

At some point, probably many weeks ago, I made an error in the local.cf file. I changed required_hits 5.0 to required_hits=5.0 (notice the = sign). This is incorrect and spamassassin ignores it. However, it doesn't tell you it ignores it...it just does.

I stumbled across a nifty command called spamassassin --lint that parses the various cf files and tells you if there are errors. Try it, you'll like it.

Thanks Jon.

You're welcome Jon.
 
Old 11-29-2004, 07:18 PM   #5
flipper333
Member
 
Registered: Nov 2003
Posts: 51

Rep: Reputation: 15
no

sa-exim.so is controlling delivery by The upperthreshold where mail stops being delivered even if it is spam is the SApermreject value in the sa-exim.conf file.

not the sa local.cf

Last edited by flipper333; 11-29-2004 at 07:19 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Email and spam in different folders using spamassassin tensigh Linux - Software 3 08-11-2005 11:21 AM
Spamassassin, Exim, delay problems jademan83 *BSD 0 05-16-2005 05:23 PM
Exim4 conf problem (spam suspected by Yahoo) zahoo Linux - Networking 5 03-04-2005 11:44 PM
EXIM - sending spam from PHP scrips GRisha Linux - Software 0 06-05-2004 12:07 PM
Exim/spamassassin problems tensigh Linux - Software 1 04-27-2004 06:01 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 01:34 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration