How to tune RBL checks and Spam score

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Magda Hewryk wrote:

>Hi,
>
>Two questions about scoring SPAM because thousands of emails on our system
>are not flagged correctly as SPAM:
>
>1.)
>I'd like all emails detected by RBL as spam to be marked as spam,
>regardless of the required SpamAssassin score.
>How can I accomplish it?
>
>
See the "Spam List" setting in MailScanner.conf. This does exactly what
you want.

>For example the following email was not marked as spam  and it was a spam.
>
>LOG:
>=======
>30 07:59:32 host MailScanner[5299]: RBL checks: iBUCxTIt027267 found in
>SBL+XBL, DSBL, spamcop.net
>Dec 30 07:59:43 mailgw02 MailScanner[5299]: Message iBUCxTIt027267 from
>99.99.99.99  (ixxx at fxxx.com) to xxx.com  i
>s spam, SBL+XBL, DSBL, spamcop.net, SpamAssassin (score=0.704, required
>4.9, BAYES_44 -0.00, MSGID_FROM_MTA_HEADER 0.70)
>Dec 30 07:59:43 hostMailScanner[5299]: Spam Checks: Found 1 spam messages
>Dec 30 07:59:43 host  MailScanner[5299]: Spam Actions: message
>iBUCxTIt027267 actions are deliver
>
>2.)
>How can I make sure BAYES_xx doesn't sscore   with eg. "1-1.43"?
>
>
? It didn't. As Bayes was saying it probably wasn't spam (50% is the "no
indication either way" point, >50% is spam, <50% is not spam) it knocked
1.43 off the score, which is entirely correct. If you want to change the
scores for the different BAYES_* levels, then set their scores in
spam.assassin.prefs.conf.

>LOG:
>========
>Dec 28 14:19:46 host MailScanner[26230]: Spam Checks: Starting
>Dec 28 14:19:46 host  MailScanner[26230]: RBL checks: iBSJJdvB029996 found
>in SBL+XBL, DSBL, spamcop.net
>Dec 28 14:19:48 host MailScanner[26230]: Message iBSJJdvB029996 from
>99.99.99.99(rxxx at base.com.br) to xxx.com is
>spam, SBL+XBL, DSBL, spamcop.net, SpamAssassin (score=-1.428, required 4.9,
>autolearn=not spam, BAYES_20 -1.43)
>Dec 28 14:19:48 mailgw01 MailScanner[26230]: Spam Checks: Found 1 spam
>messages
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!