LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-05-2010, 06:27 AM   #1
alphatest
Member
 
Registered: Aug 2010
Location: KL
Distribution: Centos, ubuntu
Posts: 137

Rep: Reputation: 2
Spamassassin filter


hello,


i used mailscanner and works well now, but confused why still get spam mail...for just one user email address.....sometimes 10 spam mail user will get

actually how the best way to configure for mail spamassassin ?

i already setting spamassassin services but spam still log to my server...


anyone have face this problem....pls help me..
 
Old 09-05-2010, 06:51 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Open up the spam and check the message headers to see what SA thinks of it. If they for instance share the same FORGED_RCVD_HELO but it puts the total score just below spam threshold then you could add a custom "score FORGED_RCVD_HELO 3.0" to your ~/.spamassassin/user_prefs. (See /usr/share/spamassassin*/*_scores.cf or /var/lib/spamassassin/*/updates*/*_scores.cf for details.) Else maybe feed SA the messages again and tell it it's spam.
 
Old 09-05-2010, 09:35 AM   #3
alphatest
Member
 
Registered: Aug 2010
Location: KL
Distribution: Centos, ubuntu
Posts: 137

Original Poster
Rep: Reputation: 2
spamassassin

i din't get the user.pref only have directory at /root .spamassassin.

i use centos where place should i configure, actually i already setting at /etc/mail/spamassassin/ for local.cf



any suggestion ?
 
Old 09-05-2010, 11:21 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Quote:
Originally Posted by alphatest View Post
i din't get the user.pref only have directory at /root .spamassassin.
Root email should end up in an account other than root to be read by a human user. Best create an unprivileged user account and redirect root email there.


Quote:
Originally Posted by alphatest View Post
any suggestion
Open up the spam, check the message headers to see what SA thinks of it and show us.
 
Old 09-05-2010, 11:55 AM   #5
alphatest
Member
 
Registered: Aug 2010
Location: KL
Distribution: Centos, ubuntu
Posts: 137

Original Poster
Rep: Reputation: 2
spamassassin update

what do you mean with header? are you means with setting on amavis ?

can give detail
 
Old 09-05-2010, 12:40 PM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
No, I mean email header. You know: Return-Path:, Received:, To:, From: and such fields. There's one or two SA uses.
 
Old 09-05-2010, 01:05 PM   #7
alphatest
Member
 
Registered: Aug 2010
Location: KL
Distribution: Centos, ubuntu
Posts: 137

Original Poster
Rep: Reputation: 2
spam header

code:

From: Tenesha Honey <tenesha.honeygj@tenethealth.com>
Subject: {Spam?} Perfect Watches Clones Cheap from $150. Buy Rep1icaWatches: Swiss Rep1icaWatch hed
Date: September 6, 2010 2:49:32 AM GMT+08:00
To: Bunsi <baresan@apex.com.my>
Return-Path: <tenesha.honeygj@tenethealth.com>
Received: from mail.apex.com.my ([unix socket]) by mail.apex.com.my (Cyrus v2.2.12-OS X 10.4.8) with LMTPA; Mon, 06 Sep 2010 01:49:46 +0800
Received: from milter (unknown [192.168.100.1]) by mail.apex.com.my (Postfix) with ESMTP id 60D7341A4445; Mon, 6 Sep 2010 01:49:46 +0800 (MYT)
Received: from xxkzlm (unknown [60.243.10.97]) by milter (Postfix) with ESMTP id 4AA95291878A; Mon, 6 Sep 2010 09:50:08 +0800 (MYT)
X-Sieve: CMU Sieve 2.2
In-Reply-To: <2aa301cb49fc$92022fe6$bdd5cea3@yox50l1>
Mime-Version: 1.0
X-Sender: <tenesha.honeygj@tenethealth.com>
Message-Id: <4C83E63C.B304AAFB@tenethealth.com>
Sender: <tenesha.honeygj@tenethealth.com>
Content-Type: multipart/alternative; boundary="----=_Part_7949_0BB5_960C604E.1D3AC4C4"
User-Agent: Mozilla/5.024 (Macintosh; U; PPC; U; NT4.0; en-us) Gecko/25250101
X-Accept-Language: en
X-Apex-Mailscanner-Information: Please contact the ISP for more information
X-Mailscanner-Id: 4AA95291878A.ACB25
X-Apex-Mailscanner: Found to be clean
X-Apex-Mailscanner-Spamcheck: spam, SpamAssassin (not cached, score=22.52, required 6, autolearn=spam, BAYES_99 3.50, DATE_IN_PAST_06_12 1.54, FSL_HELO_NON_FQDN_1 0.00, HELO_NO_DOMAIN 0.00, HTML_MESSAGE 0.00, RCVD_IN_BRBL_LASTEXT 1.45, RCVD_IN_PBL 3.33, RCVD_IN_XBL 0.38, RDNS_NONE 0.79, T_SURBL_MULTI1 0.01, T_SURBL_MULTI2 0.01, T_SURBL_MULTI3 0.01, T_SURBL_MULTI4 0.01, T_URIBL_BLACK_OVERLAP 0.01, URIBL_AB_SURBL 4.50, URIBL_BLACK 1.73, URIBL_DBL_SPAM 1.70, URIBL_JP_SURBL 1.25, URIBL_OB_SURBL 0.12, URIBL_SC_SURBL 0.57, URIBL_WS_SURBL 1.61)
X-Apex-Mailscanner-Spamscore: ssssssssssssssssssssss
X-Apex-Mailscanner-From: tenesha.honeygj@tenethealth.com
X-Spam-Status: Yes

/code:
 
Old 09-05-2010, 02:51 PM   #8
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Based on the absence of any X-Spam-Checker-Version:, X-Spam-Level: or X-Spam-Status headers that SA should put in by default one could conclude this message didn't pass through SA at all.
 
Old 09-05-2010, 09:30 PM   #9
alphatest
Member
 
Registered: Aug 2010
Location: KL
Distribution: Centos, ubuntu
Posts: 137

Original Poster
Rep: Reputation: 2
spamassassin header

ok ....then how to pass sa, what supposed to do and where part should i configure.

can you help me
 
Old 09-06-2010, 12:18 PM   #10
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Please find the Mailscanner installation instructions for Spamassassin at http://wiki.mailscanner.info/.
 
  


Reply

Tags
spamassasin


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How to filter spam with Spamassassin and Postfix in Debian LXer Syndicated Linux News 0 04-20-2008 04:50 PM
Postfix Spamassassin Filter gr0undz3r0 Linux - Server 5 10-21-2006 01:44 AM
Spamassassin and Postfix: Filter only incoming mails? Fonk Linux - Software 0 10-07-2004 12:43 PM
Anybody know how to configure spamassassin to filter mail from hotwayd server? cmisip Linux - Networking 2 11-10-2003 06:46 PM
Spamassassin doesn't filter bear2x Linux - Software 1 09-05-2003 05:18 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 12:31 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration