SPam getting through....

Thu May 27 15:53:39 IST 2004

  /etc/init.d/MailScanner reload

will do it.

Do a

  spamassassin -D --lint -p /etc/MailScanner/spam.assassin.prefs.conf

first to make sure the rules lint OK.

Cheers,

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

  _____

From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Rob
Sent: 27 May 2004 15:41
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: SPam getting through....

So I downloaded and added to /etc/mail/spamassisain a few custom cf files I
got from a site mentioned here... do I have to do anything to make SA see
them? Just restart MS /etc/init.d/Mailscanner restart ?

Thanks  for everyone's help!

Rob....

----- Original Message -----
From: Rob <mailto:rob at THEHOSTMASTERS.COM>
To: MAILSCANNER at JISCMAIL.AC.UK <mailto:MAILSCANNER at JISCMAIL.AC.UK>
Sent: Thursday, May 27, 2004 9:02 AM
Subject: Re: SPam getting through....

It has 100's of the token.expire files. I can delete these right? I mean up
to a recent date? But funny enough this morning I had about 300 of them that
filled up my root partition and all were dated May 25th & 26th

And I am running 2.63

Rob....

----- Original Message -----
From: Jason Burzenski <mailto:jburzenski at AMERICANHM.COM>
To: MAILSCANNER at JISCMAIL.AC.UK <mailto:MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, May 25, 2004 4:01 PM
Subject: Re: SPam getting through....

I had a similar problem a few weeks back.  It turns out it was due to the
large size of my bayes database (~150MB).  The fix for me was to upgrade to
SA 2.63 and recreate the bayes set.

What does your /root/.spamassassin directory look like?

-----Original Message-----
From: Rob [mailto:rob at THEHOSTMASTERS.COM]
Sent: Tuesday, May 25, 2004 11:56 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: SPam getting through....

I seem to be getting allot of spam in the last 2 weeks, here is an example
of headers from a popular one... it seems like it was not even scanned for
spam or that mailscanner did not see it as spam at all??

I am using SA 2.63 and MS 4.28.6-1

Any help appreciated....

Thanks...

Return-Path: <unoalia at clickforadate.com <mailto:unoalia at clickforadate.com> >
Received: from clickforadate.com ([222.65.41.83])
 by localhost.localdomain (8.12.11/8.12.5) with SMTP id i4P8klDQ013184;
 Tue, 25 May 2004 04:46:59 -0400
Message-ID: <883e01c44248$5c25dbc0$38c986cf at unoalia
<mailto:883e01c44248$5c25dbc0$38c986cf at unoalia> >
From: "garrett lovato" <unoalia at clickforadate.com
<mailto:unoalia at clickforadate.com> >
To: "adrian hurl" <candi at stupidguytalk.org <mailto:candi at stupidguytalk.org>
>
Cc: "quinn alston" <rob at stupidguytalk.org <mailto:rob at stupidguytalk.org> >,
        "victor jacoby" <adult-jokes at stupidguytalk.org
<mailto:adult-jokes at stupidguytalk.org> >
Subject: Ppbykdbg your prescripti0n source
Date: Tue, 25 May 2004 01:06:42 -1000
MIME-Version: 1.0
Content-Type: text/plain;
 charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
X-MailScanner-Information: Please contact info at thehostmasters.com
<mailto:info at thehostmasters.com>  for more info
X-MailScanner: Found to be clean
X-MailScanner-From: unoalia at clickforadate.com
<mailto:unoalia at clickforadate.com>
X-UIDL: #,A"!RS)#!53("!>S+"!

hexdigtoint  nrl-mag  nesheiwa

We are your your convenient, safe and private online source for FDA
a`p`p`roved pharmacy prescriptions.

---------------------------------------------------------------------------
the rest was cut, no need to see crude...

-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
<mailto:jiscmail at jiscmail.ac.uk>
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ <http://www.mailscanner.biz/maq/>  and the
archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
<http://www.jiscmail.ac.uk/lists/mailscanner.html>

-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
<mailto:jiscmail at jiscmail.ac.uk>
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ <http://www.mailscanner.biz/maq/>  and the
archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
<http://www.jiscmail.ac.uk/lists/mailscanner.html>

-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
<mailto:jiscmail at jiscmail.ac.uk>
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ <http://www.mailscanner.biz/maq/>  and the
archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
<http://www.jiscmail.ac.uk/lists/mailscanner.html>

-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
<mailto:jiscmail at jiscmail.ac.uk>
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ <http://www.mailscanner.biz/maq/>  and the
archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
<http://www.jiscmail.ac.uk/lists/mailscanner.html>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040527/8951c772/attachment.html