SPam getting through....

[Rob]

MessageSo I downloaded and added to /etc/mail/spamassisain a few custom cf files I got from a site mentioned here... do I have to do anything to make SA see them? Just restart MS /etc/init.d/Mailscanner restart ?

Thanks  for everyone's help!

Rob....



  ----- Original Message ----- 
  From: Rob 
  To: MAILSCANNER at JISCMAIL.AC.UK 
  Sent: Thursday, May 27, 2004 9:02 AM
  Subject: Re: SPam getting through....


  It has 100's of the token.expire files. I can delete these right? I mean up to a recent date? But funny enough this morning I had about 300 of them that filled up my root partition and all were dated May 25th & 26th

  And I am running 2.63

  Rob....


   
    ----- Original Message ----- 
    From: Jason Burzenski 
    To: MAILSCANNER at JISCMAIL.AC.UK 
    Sent: Tuesday, May 25, 2004 4:01 PM
    Subject: Re: SPam getting through....


    I had a similar problem a few weeks back.  It turns out it was due to the large size of my bayes database (~150MB).  The fix for me was to upgrade to SA 2.63 and recreate the bayes set.  

    What does your /root/.spamassassin directory look like?  
      -----Original Message-----
      From: Rob [mailto:rob at THEHOSTMASTERS.COM] 
      Sent: Tuesday, May 25, 2004 11:56 AM
      To: MAILSCANNER at JISCMAIL.AC.UK
      Subject: SPam getting through....


      I seem to be getting allot of spam in the last 2 weeks, here is an example of headers from a popular one... it seems like it was not even scanned for spam or that mailscanner did not see it as spam at all??


      I am using SA 2.63 and MS 4.28.6-1

      Any help appreciated....

      Thanks...

      Return-Path: <unoalia at clickforadate.com>
      Received: from clickforadate.com ([222.65.41.83])
       by localhost.localdomain (8.12.11/8.12.5) with SMTP id i4P8klDQ013184;
       Tue, 25 May 2004 04:46:59 -0400
      Message-ID: <883e01c44248$5c25dbc0$38c986cf at unoalia>
      From: "garrett lovato" <unoalia at clickforadate.com>
      To: "adrian hurl" <candi at stupidguytalk.org>
      Cc: "quinn alston" <rob at stupidguytalk.org>,
              "victor jacoby" <adult-jokes at stupidguytalk.org>
      Subject: Ppbykdbg your prescripti0n source
      Date: Tue, 25 May 2004 01:06:42 -1000
      MIME-Version: 1.0
      Content-Type: text/plain;
       charset="us-ascii"
      Content-Transfer-Encoding: 7bit
      X-MSMail-Priority: Normal
      X-Mailer: Microsoft Outlook Express 5.00.2919.6700
      X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
      X-MailScanner-Information: Please contact info at thehostmasters.com for more info
      X-MailScanner: Found to be clean
      X-MailScanner-From: unoalia at clickforadate.com
      X-UIDL: #,A"!RS)#!53("!>S+"!

      hexdigtoint  nrl-mag  nesheiwa  


      We are your your convenient, safe and private online source for FDA
      a`p`p`roved pharmacy prescriptions. 


      ---------------------------------------------------------------------------
      the rest was cut, no need to see crude...


       
      -------------------------- MailScanner list ----------------------
      To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
      Before posting, please see the Most Asked Questions at
      http://www.mailscanner.biz/maq/ and the archives at
      http://www.jiscmail.ac.uk/lists/mailscanner.html

    -------------------------- MailScanner list ----------------------
    To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
    Before posting, please see the Most Asked Questions at
    http://www.mailscanner.biz/maq/ and the archives at
    http://www.jiscmail.ac.uk/lists/mailscanner.html

  -------------------------- MailScanner list ----------------------
  To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
  Before posting, please see the Most Asked Questions at
  http://www.mailscanner.biz/maq/ and the archives at
  http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040527/e2b0f6e6/attachment.html