How to tune RBL checks and Spam score

[Magda Hewryk]

Hi Julian,

My Spam List is set.  How can I make sure it overwrites a SpamAssassin
Score?


Spam List = SBL+XBL NJABL DSBL AHBL spamcop.net
Required SpamAssassin Score = 4.9


Thanks,

Magda Hewryk
--------------------------------
Mid-Range Systems
905-273-1637 (Office)
416-554-0743 (Cell)



             Julian Field
             <mailscanner at ECS.
             SOTON.AC.UK>                                               To
             Sent by:                  MAILSCANNER at JISCMAIL.AC.UK
             MailScanner                                                cc
             mailing list
             <MAILSCANNER at JISC                                     Subject
             MAIL.AC.UK>               Re: How to tune RBL checks  and
                                       Spam score

             12/30/2004 01:22
             PM


             Please respond to
                MailScanner
               mailing list
             <MAILSCANNER at JISC
                MAIL.AC.UK>






Magda Hewryk wrote:

>Hi,
>
>Two questions about scoring SPAM because thousands of emails on our system
>are not flagged correctly as SPAM:
>
>1.)
>I'd like all emails detected by RBL as spam to be marked as spam,
>regardless of the required SpamAssassin score.
>How can I accomplish it?
>
>
See the "Spam List" setting in MailScanner.conf. This does exactly what
you want.

>For example the following email was not marked as spam  and it was a spam.
>
>LOG:
>=======
>30 07:59:32 host MailScanner[5299]: RBL checks: iBUCxTIt027267 found in
>SBL+XBL, DSBL, spamcop.net
>Dec 30 07:59:43 mailgw02 MailScanner[5299]: Message iBUCxTIt027267 from
>99.99.99.99  (ixxx at fxxx.com) to xxx.com  i
>s spam, SBL+XBL, DSBL, spamcop.net, SpamAssassin (score=0.704, required
>4.9, BAYES_44 -0.00, MSGID_FROM_MTA_HEADER 0.70)
>Dec 30 07:59:43 hostMailScanner[5299]: Spam Checks: Found 1 spam messages
>Dec 30 07:59:43 host  MailScanner[5299]: Spam Actions: message
>iBUCxTIt027267 actions are deliver
>
>2.)
>How can I make sure BAYES_xx doesn't sscore   with eg. "1-1.43"?
>
>
? It didn't. As Bayes was saying it probably wasn't spam (50% is the "no
indication either way" point, >50% is spam, <50% is not spam) it knocked
1.43 off the score, which is entirely correct. If you want to change the
scores for the different BAYES_* levels, then set their scores in
spam.assassin.prefs.conf.

>LOG:
>========
>Dec 28 14:19:46 host MailScanner[26230]: Spam Checks: Starting
>Dec 28 14:19:46 host  MailScanner[26230]: RBL checks: iBSJJdvB029996 found
>in SBL+XBL, DSBL, spamcop.net
>Dec 28 14:19:48 host MailScanner[26230]: Message iBSJJdvB029996 from
>99.99.99.99(rxxx at base.com.br) to xxx.com is
>spam, SBL+XBL, DSBL, spamcop.net, SpamAssassin (score=-1.428, required
4.9,
>autolearn=not spam, BAYES_20 -1.43)
>Dec 28 14:19:48 mailgw01 MailScanner[26230]: Spam Checks: Found 1 spam
>messages
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!