How to tune RBL checks and Spam score

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

The Spam List setting is entirely separate from the SpamAssassin score,
it doesn't use SpamAssassin.  Make sure the lists you are using are all
defined in spam.lists.conf, or else they won't work.
The AHBL list is not defined in the supplied spam.lists.conf so you will
need to add that one yourself.
The only other tweaks you can do are
    Minimum Stars If On Spam List
which sets what gets reported to the user in the headers,
    Spam Lists To Reach High Score
which sets what happens when a message hits multiple Spam Lists,
    Check SpamAssassin If On Spam List
which controls whether it bothers running SpamAssassin on messages which
have hit a Spam List, which saves lots of CPU and network time.



Magda Hewryk wrote:

>Hi Julian,
>
>My Spam List is set.  How can I make sure it overwrites a SpamAssassin
>Score?
>
>
>Spam List = SBL+XBL NJABL DSBL AHBL spamcop.net
>Required SpamAssassin Score = 4.9
>
>
>Thanks,
>
>Magda Hewryk
>--------------------------------
>Mid-Range Systems
>905-273-1637 (Office)
>416-554-0743 (Cell)
>
>
>
>             Julian Field
>             <mailscanner at ECS.
>             SOTON.AC.UK>                                               To
>             Sent by:                  MAILSCANNER at JISCMAIL.AC.UK
>             MailScanner                                                cc
>             mailing list
>             <MAILSCANNER at JISC                                     Subject
>             MAIL.AC.UK>               Re: How to tune RBL checks  and
>                                       Spam score
>
>             12/30/2004 01:22
>             PM
>
>
>             Please respond to
>                MailScanner
>               mailing list
>             <MAILSCANNER at JISC
>                MAIL.AC.UK>
>
>
>
>
>
>
>Magda Hewryk wrote:
>
>
>
>>Hi,
>>
>>Two questions about scoring SPAM because thousands of emails on our system
>>are not flagged correctly as SPAM:
>>
>>1.)
>>I'd like all emails detected by RBL as spam to be marked as spam,
>>regardless of the required SpamAssassin score.
>>How can I accomplish it?
>>
>>
>>
>>
>See the "Spam List" setting in MailScanner.conf. This does exactly what
>you want.
>
>
>
>>For example the following email was not marked as spam  and it was a spam.
>>
>>LOG:
>>=======
>>30 07:59:32 host MailScanner[5299]: RBL checks: iBUCxTIt027267 found in
>>SBL+XBL, DSBL, spamcop.net
>>Dec 30 07:59:43 mailgw02 MailScanner[5299]: Message iBUCxTIt027267 from
>>99.99.99.99  (ixxx at fxxx.com) to xxx.com  i
>>s spam, SBL+XBL, DSBL, spamcop.net, SpamAssassin (score=0.704, required
>>4.9, BAYES_44 -0.00, MSGID_FROM_MTA_HEADER 0.70)
>>Dec 30 07:59:43 hostMailScanner[5299]: Spam Checks: Found 1 spam messages
>>Dec 30 07:59:43 host  MailScanner[5299]: Spam Actions: message
>>iBUCxTIt027267 actions are deliver
>>
>>2.)
>>How can I make sure BAYES_xx doesn't sscore   with eg. "1-1.43"?
>>
>>
>>
>>
>? It didn't. As Bayes was saying it probably wasn't spam (50% is the "no
>indication either way" point, >50% is spam, <50% is not spam) it knocked
>1.43 off the score, which is entirely correct. If you want to change the
>scores for the different BAYES_* levels, then set their scores in
>spam.assassin.prefs.conf.
>
>
>
>>LOG:
>>========
>>Dec 28 14:19:46 host MailScanner[26230]: Spam Checks: Starting
>>Dec 28 14:19:46 host  MailScanner[26230]: RBL checks: iBSJJdvB029996 found
>>in SBL+XBL, DSBL, spamcop.net
>>Dec 28 14:19:48 host MailScanner[26230]: Message iBSJJdvB029996 from
>>99.99.99.99(rxxx at base.com.br) to xxx.com is
>>spam, SBL+XBL, DSBL, spamcop.net, SpamAssassin (score=-1.428, required
>>
>>
>4.9,
>
>
>>autolearn=not spam, BAYES_20 -1.43)
>>Dec 28 14:19:48 mailgw01 MailScanner[26230]: Spam Checks: Found 1 spam
>>messages
>>
>>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!