Getting messages that are not spam as spam and the opposite !!!

[Martin Hepworth]

Idan

lack of caffiene sorry - should be www.rulesemporium.com

Basically the spammers and anti-software is a constant game of catch up
with each other. Updatiung the rule-sets for SA (and updating SA when
needed) is required in order to keep the whole thing running smoothly.
There's a couple of scripts people have written to help with the rules
updates - on is rulesdujour - which people have modified to run in a
MailScanner envirionment.

Also worth checking that he default rules (/usr/local/etc/spamassassin)
are readable and any RBL's are up to date so infinite monkeys etc etc
aren't used anywhere.

It's also worth looking at inserting the rule detail in the email
headers so you can see which rules aqre being triggered for the false
positives, and looking at creating your own rules that will trap any
missing spams (if they aren't aleady covered by ones in the rules emporium.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Idan Plotnik wrote:
> Hi Martin,
>
> 1. The url you send me is not working
> 2. but why this behavior occur ? I don't think that its because of the
>    Spamassassin version.
>
>
>
>
>
> -----Original Message-----
> From: Martin Hepworth [mailto:martinh at SOLID-STATE-LOGIC.COM]
> Sent: Monday, April 19, 2004 10:56 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Getting messages that are not spam as spam and the opposite
> !!!
>
> Idan
>
> your installation of Spamassassin is quite old.
>
> May I suggest you upgrade and install the additional rules from
> www.rulesemporiam.com. Also you may benefit from using the bayes
> filtering on SA as well. More info on the SA web site and mailing list.
>
>
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Idan Plotnik wrote:
>
>>Hi all,
>>
>>
>>
>>I am using sendmail-8.12.8-4 + mailscanner-4.25-14 +
>>spamassassin-2.44-11.8.x.
>>
>>In the MailScanner.conf  I configure this:
>>
>>
>>
>>#
>>
>># SpamAssassin
>>
>># ------------
>>
>>#
>>
>>
>>
>># Do you want to find spam using the "SpamAssassin" package?
>>
>># This can also be the filename of a ruleset.
>>
>>Use SpamAssassin = yes
>>
>>
>>
>># SpamAssassin is not very fast when scanning huge messages, so
>
> messages
>
>># bigger than this value will be truncated to this length for
>
> SpamAssassin
>
>># testing. The original message will not be affected by this. This
>
> value
>
>># is a good compromise as very few spam messages are bigger than this.
>>
>>Max SpamAssassin Size = 90000
>>
>>
>>
>># This replaces the SpamAssassin configuration value 'required_hits'.
>>
>># If a message achieves a SpamAssassin score higher than this value,
>>
>># it is spam. See also the High SpamAssassin Score configuration
>
> option.
>
>># This can also be the filename of a ruleset, so the SpamAssassin
>>
>># required_hits value can be set to different values for different
>
> messages.
>
>>Required SpamAssassin Score = 5
>>
>>
>>
>># If a message achieves a SpamAssassin score higher than this value,
>>
>># then the "High Scoring Spam Actions" are used. You may want to use
>>
>># this to deliver moderate scores, while deleting very high scoring
>>messsages.
>>
>># This can also be the filename of a ruleset.
>>
>>High SpamAssassin Score = 7
>>
>>
>>
>>The problem is this:
>>
>>
>>
>>I am getting spam mails as non spam mails and non spam mails as spam
>
> mails.
>
>>This behavior occur not with every mail that he is spam ro not, its
>>happened without a logical explenation.
>>
>>
>>
>>Another problem is that I am getting a spam messages form a fake email
>
>
>>address (known issue) in my domain, I mean that form example when I do
>
>
>>telnet in port 25 to my sendmail and tries to send spam inside the
>>organization the MailScanner don't recognized him has spam!!!
>>
>>
>>
>>Can someone give me a solution for this situation ?
>>
>>
>>
>>Thanx
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************