Score btw 9 and 12 Options

[obazavil]

I have stopped almost all spam

just for gatherring info, I have searched in my server inbox, for high scores.

I found this:

CODE

/home/XXXX/mail/inbox:X-Exiscan-SA-Score: 9.3 (+++++++++)
/home/XXXX/mail/inbox:X-Exiscan-SA-Score: 11.3 (+++++++++++)
/home/XXXX/mail/inbox:X-Exiscan-SA-Score: 9.3 (+++++++++)
/home/XXXX/mail/inbox:X-Exiscan-SA-Score: 11.4 (+++++++++++)
/home/XXXX/mail/XXXX.com.mx/ing/inbox:X-Exiscan-SA-Score: 9.3 (+++++++++)
/home/XX/mail/XX.com.mx/edgar_a/inbox:X-Exiscan-SA-Score: 10.9 (++++++++++)
/home/X/mail/inbox:X-Exiscan-SA-Score: 9.4 (+++++++++)
/home/XXX/mail/inbox:X-Exiscan-SA-Score: 10.8 (++++++++++)
/home/XXXXXX/mail/XXXXXX.biz/kunthwood/inbox:X-Exiscan-SA-Score: 10.3 (++++++++++)
/home/XXXXXXX/mail/XXXXXXX.com/atencion/inbox:X-Exiscan-SA-Score: 10.3 (++++++++++)

Since they aren't 12, they didn't got dumped.

Any idea how I could make my filtering more accurate to try to dump this few email exceptions?

using :
use_bayes 1
auto_learn 1

in local.cf helps in some way?

I'm getting very good results, but well, never is enough. I was condering if something can be donde about this

[pairote]

You can try to increase the various options in /etc/mail/spamassassin/local.cf such as:

score BAYES_99 0.00 3.00 3.00 3.00

This is a mail that Bayesian database give 99% confident that it is spam.

Also the scores for URIBL are worth to increase.

score URIBL_AB_SURBL
score URIBL_OB_SURBL
score URIBL_SBL
score URIBL_SC_SURBL
score URIBL_WS_SURBL

[obazavil]

Currently, I _DON'T_ have
use_bayes 1

in local.cf...

apart from
score BAYES_99 0.00 3.00 3.00 3.00

what other things i must specify to get that instruction to work...

now, with your guide, bayes database is "learning" ?

[pairote]

Spamassasin run autolearn by default. Check by run

spamassassin -D --lint

It will show all checking for spamassassin. You should also find the baye database at /var/spool/mqueue/.spamassassin/.

[obazavil]

well. I ran that command, and about bayes i found

CODE

debug: using "/root/.spamassassin" for user state dir
debug: bayes: 13665 tie-ing to DB file R/O /root/.spamassassin/bayes_toks
debug: bayes: 13665 tie-ing to DB file R/O /root/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3

the dir /var/spool/mqueue/.spamassassin/ doesn't even exists...

maybe its just me.. maybe I missed something in the configuration.. but i double checked the guide, and did everything acording to that :/

I checked /var/log/maillog, and I see this:

CODE

Jan  8 01:34:20 hikaru spamd[30914]: result: Y 19 - ALL_TRUSTED,DCC_CHECK,DIGEST_MULTIPLE,DNS_FROM_AHBL_RHSBL,GTUBE,RAZOR2_CF_RANGE_
1_100,RAZOR2_CHECK scantime=0.9,size=834,mid=<GTUBE1.1010101@example.net>,autolearn=no

so.. any ideas?

thanks for your help, btw... a lot

[pairote]

I am sorry from the last post. When you run spamassassin -D -lint, it will use root homedir as a folder for bayes. But when exim invoke spamassassin, it will run as user mailnull, and its home directory is /var/spool/mqueue. If this folder doesn't exist, you have to manually create it. It will look like this.

root@server [~]# ll /var/spool/mqueue/
total 16
drwxr-xr-x 4 mailnull mail 4096 Aug 19 13:50 ./
drwxr-xr-x 22 root root 4096 Sep 28 10:36 ../
drwxr-xr-x 2 mailnull mail 4096 Jan 8 05:08 .razor/
drwx------ 2 mailnull mail 4096 Jan 8 14:49 .spamassassin/

tail -f /var/log/maillog to see the spamassassin score when its run, it will show you the rules that apply.