Help !

[Pete]

Jeremy Ervine wrote:

> Hello,
>
> I am using MailScanner on my Redhat Fedora Core 1 incoming mailserver
> running Sendmail as the MTA, however am having trouble getting
> MailScanner to stop spam, and about once a day MailScanner itself
> stops functioning.
>
> What I am trying to achieve is that each message is checked against
> all the open relay lists, then checked against spamassasin, and if the
> spam assassin score is over 5, it will bounce the message. There are a
> number of messages that come through with spam assasin scores over 5
> and they never get bounced, below is an extract of my logfiles for a
> message which is clearly spam:
>
> Apr 29 11:39:44 mx2 MailScanner[10724]: Message i3T29aMt016204 from
> 202.144.11.203 (_hofgune at epomail.com_) to egplant.com.au is not spam
> (whitelisted), SpamAssassin (score=11.608, required 5, autolearn=spam,
> BAYES_50, HTML_60_70, HTML_FONT_BIG, HTML_MESSAGE, HTML_TAG_BALANCE_A,
> MIME_HTML_ONLY, MIME_HTML_ONLY_MULTI, RCVD_IN_BL_SPAMCOP_NET,
> RCVD_IN_DSBL, RCVD_IN_NJABL, RCVD_IN_NJABL_PROXY, RCVD_IN_OPM,
> RCVD_IN_OPM_HTTP, RCVD_IN_OPM_HTTP_POST, RCVD_IN_SORBS,
> RCVD_IN_SORBS_HTTP)
>
>
> I have attached my MailScanner and spam assassin config files. I feel
> completely out of my depth here and confused as no matter what I do it
> seems that I can't stop the spam. Virus Protection and file-type
> filtering seems to be working quite well. Usually once a day or so,
> MailScanner ceases to function however the sendmail MTA continues to
> operate, restarting mailscanner doesn't fix the problem, the only
> solution I have to the problem is completely reboot the server.
>
> Any help greatly appreciated !
>
> Regards,
> Jeremy Ervine
> -------------------------- MailScanner list ---------------------- To
> leave, send leave mailscanner to jiscmail at jiscmail.ac.uk For further
> info about MailScanner, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/ and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html

Well your its aint gonna bounce as long you have the following in your
config - suggest you dont use delete at all untill you get a better
handle of this, and have a read of the original config files comments as
they content all the infio you need, like what available spam actions
there are - eg bounce.
Spam Actions = delete
High Scoring Spam Actions = delete

and you have
Required SpamAssassin Score = 5
High SpamAssassin Score = 5

whicxh doesnt make sense - maybe try High Score of 10 or 15 while testing ?

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at    http://www.mailscanner.biz/maq/     and the archives
at    http://www.jiscmail.ac.uk/lists/mailscanner.html