Spamassassin filter
 

hello,


i used mailscanner and works well now, but confused why still get spam mail...for just one user email address.....sometimes 10 spam mail user will get

actually how the best way to configure for mail spamassassin ?

i already setting spamassassin services but spam still log to my server...


anyone have face this problem....pls help me..

Open up the spam and check the message headers to see what SA thinks of it. If they for instance share the same FORGED_RCVD_HELO but it puts the total score just below spam threshold then you could add a custom "score FORGED_RCVD_HELO 3.0" to your ~/.spamassassin/user_prefs. (See /usr/share/spamassassin*/*_scores.cf or /var/lib/spamassassin/*/updates*/*_scores.cf for details.) Else maybe feed SA the messages again and tell it it's spam.

spamassassin
 

i din't get the user.pref only have directory at /root .spamassassin.

i use centos where place should i configure, actually i already setting at /etc/mail/spamassassin/ for local.cf



any suggestion ?

Root email should end up in an account other than root to be read by a human user. Best create an unprivileged user account and redirect root email there.


Open up the spam, check the message headers to see what SA thinks of it and show us.

spamassassin update
 

what do you mean with header? are you means with setting on amavis ?

can give detail

No, I mean email header. You know: Return-Path:, Received:, To:, From: and such fields. There's one or two SA uses.

spam header
 

code:

From: Tenesha Honey <tenesha.honeygj@tenethealth.com>
Subject: {Spam?} Perfect Watches Clones Cheap from $150. Buy Rep1icaWatches: Swiss Rep1icaWatch hed
Date: September 6, 2010 2:49:32 AM GMT+08:00
To: Bunsi <baresan@apex.com.my>
Return-Path: <tenesha.honeygj@tenethealth.com>
Received: from mail.apex.com.my ([unix socket]) by mail.apex.com.my (Cyrus v2.2.12-OS X 10.4.8) with LMTPA; Mon, 06 Sep 2010 01:49:46 +0800
Received: from milter (unknown [192.168.100.1]) by mail.apex.com.my (Postfix) with ESMTP id 60D7341A4445; Mon, 6 Sep 2010 01:49:46 +0800 (MYT)
Received: from xxkzlm (unknown [60.243.10.97]) by milter (Postfix) with ESMTP id 4AA95291878A; Mon, 6 Sep 2010 09:50:08 +0800 (MYT)
X-Sieve: CMU Sieve 2.2
In-Reply-To: <2aa301cb49fc$92022fe6$bdd5cea3@yox50l1>
Mime-Version: 1.0
X-Sender: <tenesha.honeygj@tenethealth.com>
Message-Id: <4C83E63C.B304AAFB@tenethealth.com>
Sender: <tenesha.honeygj@tenethealth.com>
Content-Type: multipart/alternative; boundary="----=_Part_7949_0BB5_960C604E.1D3AC4C4"
User-Agent: Mozilla/5.024 (Macintosh; U; PPC; U; NT4.0; en-us) Gecko/25250101
X-Accept-Language: en
X-Apex-Mailscanner-Information: Please contact the ISP for more information
X-Mailscanner-Id: 4AA95291878A.ACB25
X-Apex-Mailscanner: Found to be clean
X-Apex-Mailscanner-Spamcheck: spam, SpamAssassin (not cached, score=22.52, required 6, autolearn=spam, BAYES_99 3.50, DATE_IN_PAST_06_12 1.54, FSL_HELO_NON_FQDN_1 0.00, HELO_NO_DOMAIN 0.00, HTML_MESSAGE 0.00, RCVD_IN_BRBL_LASTEXT 1.45, RCVD_IN_PBL 3.33, RCVD_IN_XBL 0.38, RDNS_NONE 0.79, T_SURBL_MULTI1 0.01, T_SURBL_MULTI2 0.01, T_SURBL_MULTI3 0.01, T_SURBL_MULTI4 0.01, T_URIBL_BLACK_OVERLAP 0.01, URIBL_AB_SURBL 4.50, URIBL_BLACK 1.73, URIBL_DBL_SPAM 1.70, URIBL_JP_SURBL 1.25, URIBL_OB_SURBL 0.12, URIBL_SC_SURBL 0.57, URIBL_WS_SURBL 1.61)
X-Apex-Mailscanner-Spamscore: ssssssssssssssssssssss
X-Apex-Mailscanner-From: tenesha.honeygj@tenethealth.com
X-Spam-Status: Yes

/code:

Based on the absence of any X-Spam-Checker-Version:, X-Spam-Level: or X-Spam-Status headers that SA should put in by default one could conclude this message didn't pass through SA at all.

spamassassin header
 

ok ....then how to pass sa, what supposed to do and where part should i configure.

can you help me

Please find the Mailscanner installation instructions for Spamassassin at http://wiki.mailscanner.info/.