Score btw 9 and 12 |
![]() ![]() |
Score btw 9 and 12 |
Jan 8 2005, 04:01 AM
Post
#1
|
|
|
Newbie ![]() Group: Members Posts: 8 Joined: 2-January 05 Member No.: 420 |
I have stopped almost all spam
just for gatherring info, I have searched in my server inbox, for high scores. I found this: CODE /home/XXXX/mail/inbox:X-Exiscan-SA-Score: 9.3 (+++++++++) /home/XXXX/mail/inbox:X-Exiscan-SA-Score: 11.3 (+++++++++++) /home/XXXX/mail/inbox:X-Exiscan-SA-Score: 9.3 (+++++++++) /home/XXXX/mail/inbox:X-Exiscan-SA-Score: 11.4 (+++++++++++) /home/XXXX/mail/XXXX.com.mx/ing/inbox:X-Exiscan-SA-Score: 9.3 (+++++++++) /home/XX/mail/XX.com.mx/edgar_a/inbox:X-Exiscan-SA-Score: 10.9 (++++++++++) /home/X/mail/inbox:X-Exiscan-SA-Score: 9.4 (+++++++++) /home/XXX/mail/inbox:X-Exiscan-SA-Score: 10.8 (++++++++++) /home/XXXXXX/mail/XXXXXX.biz/kunthwood/inbox:X-Exiscan-SA-Score: 10.3 (++++++++++) /home/XXXXXXX/mail/XXXXXXX.com/atencion/inbox:X-Exiscan-SA-Score: 10.3 (++++++++++) Since they aren't 12, they didn't got dumped. Any idea how I could make my filtering more accurate to try to dump this few email exceptions? using : use_bayes 1 auto_learn 1 in local.cf helps in some way? I'm getting very good results, but well, never is enough. I was condering if something can be donde about this |
|
|
|
Jan 8 2005, 04:30 AM
Post
#2
|
|
|
Administrator ![]() ![]() ![]() Group: Admin Posts: 4,252 Joined: 13-June 03 Member No.: 1 |
You can try to increase the various options in /etc/mail/spamassassin/local.cf such as:
score BAYES_99 0.00 3.00 3.00 3.00 This is a mail that Bayesian database give 99% confident that it is spam. Also the scores for URIBL are worth to increase. score URIBL_AB_SURBL score URIBL_OB_SURBL score URIBL_SBL score URIBL_SC_SURBL score URIBL_WS_SURBL |
|
|
|
Jan 8 2005, 04:44 AM
Post
#3
|
|
|
Newbie ![]() Group: Members Posts: 8 Joined: 2-January 05 Member No.: 420 |
Currently, I _DON'T_ have
use_bayes 1 in local.cf... apart from score BAYES_99 0.00 3.00 3.00 3.00 what other things i must specify to get that instruction to work... now, with your guide, bayes database is "learning" ? |
|
|
|
Jan 8 2005, 11:55 AM
Post
#4
|
|
|
Administrator ![]() ![]() ![]() Group: Admin Posts: 4,252 Joined: 13-June 03 Member No.: 1 |
Spamassasin run autolearn by default. Check by run
spamassassin -D --lint It will show all checking for spamassassin. You should also find the baye database at /var/spool/mqueue/.spamassassin/. |
|
|
|
Jan 8 2005, 02:38 PM
Post
#5
|
|
|
Newbie ![]() Group: Members Posts: 8 Joined: 2-January 05 Member No.: 420 |
well. I ran that command, and about bayes i found
CODE debug: using "/root/.spamassassin" for user state dir debug: bayes: 13665 tie-ing to DB file R/O /root/.spamassassin/bayes_toks debug: bayes: 13665 tie-ing to DB file R/O /root/.spamassassin/bayes_seen debug: bayes: found bayes db version 3 the dir /var/spool/mqueue/.spamassassin/ doesn't even exists... maybe its just me.. maybe I missed something in the configuration.. but i double checked the guide, and did everything acording to that :/ I checked /var/log/maillog, and I see this: CODE Jan 8 01:34:20 hikaru spamd[30914]: result: Y 19 - ALL_TRUSTED,DCC_CHECK,DIGEST_MULTIPLE,DNS_FROM_AHBL_RHSBL,GTUBE,RAZOR2_CF_RANGE_ 1_100,RAZOR2_CHECK scantime=0.9,size=834,mid=<GTUBE1.1010101@example.net>,autolearn=no so.. any ideas? thanks for your help, btw... a lot |
|
|
|
Jan 8 2005, 02:53 PM
Post
#6
|
|
|
Administrator ![]() ![]() ![]() Group: Admin Posts: 4,252 Joined: 13-June 03 Member No.: 1 |
I am sorry from the last post. When you run spamassassin -D -lint, it will use root homedir as a folder for bayes. But when exim invoke spamassassin, it will run as user mailnull, and its home directory is /var/spool/mqueue. If this folder doesn't exist, you have to manually create it. It will look like this.
root@server [~]# ll /var/spool/mqueue/ total 16 drwxr-xr-x 4 mailnull mail 4096 Aug 19 13:50 ./ drwxr-xr-x 22 root root 4096 Sep 28 10:36 ../ drwxr-xr-x 2 mailnull mail 4096 Jan 8 05:08 .razor/ drwx------ 2 mailnull mail 4096 Jan 8 14:49 .spamassassin/ tail -f /var/log/maillog to see the spamassassin score when its run, it will show you the rules that apply. |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 2nd September 2010 - 10:36 PM |