I don't fully understand how to change the way MailScanner handles spam. How can I change MailSc

[David Curtis]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I think MS is classifying these as spam. I just don't understand how to customize how MS determines spam I know how to customize the spamassassin part but it never uses spamassassin when it determines that the mail is spam.

Thanks.

>>Spam Actions = forward spam at test.com
>>High Scoring Spam Actions = 10
>>Non Spam Actions = deliver

Already had these. Have had these since I started with this server.
>>Detailed Spam Report = yes
>>Include Scores In SpamAssassin Report = yes
>>Always Include SpamAssassin Report = yes
>>Log Spam = yes
>>Log Non Spam = yes 

>>> Denis.Beauchemin at USHERBROOKE.CA 2/8/2005 2:19:30 PM >>>
David Curtis wrote:

>Here is what I found in the log. Again I don't see MailScanner doing a spamassassin check on this message.
>Feb  7 17:34:20 spamfilter postfix/smtpd[32477]: connect from alias-2.c10-ave-mta3.cnet.com[206.16.1.191]
>Feb  7 17:34:20 spamfilter postfix/smtpd[32477]: 5538716F5CD: client=alias-2.c10-ave-mta3.cnet.com[206.16.1.191]
>Feb  7 17:34:21 spamfilter postfix/cleanup[32039]: 5538716F5CD: hold: header Received: from alias-2.c10-ave-mta3.cnet.com (alias-2.
>Feb  7 17:34:21 spamfilter postfix/cleanup[32039]: 5538716F5CD: message-id=<13092019.1107815659270.JavaMail.accucast at 206.16.1.189> 
>Feb  7 17:34:22 spamfilter MailScanner[28181]: New Batch: Scanning 1 messages, 5541 bytes 
>Feb  7 17:34:22 spamfilter MailScanner[28181]: MCP Checks: Starting 
>Feb  7 17:34:22 spamfilter MailScanner[28181]: MCP Checks completed at 5541 bytes per second
>Feb  7 17:34:22 spamfilter MailScanner[28181]: Spam Checks: Starting 
>Feb  7 17:34:26 spamfilter postfix/smtpd[32477]: disconnect from alias-2.c10-ave-mta3.cnet.com[206.16.1.191]
>Feb  7 17:34:40 spamfilter MailScanner[28181]: Message 5538716F5CD.EF267 from 206.16.1.191 (cnet_networks_#3.140018.34363630353131.
>Feb  7 17:34:40 spamfilter MailScanner[28181]: Spam Checks: Found 1 spam messages 
>Feb  7 17:34:40 spamfilter MailScanner[28181]: Spam Actions: message 5538716F5CD.EF267 actions are forward,spam at test.com 
>  
>
Looks like MS decided it was SPAM and forwarded the message to 
spam at test.com...

Now, could you answer the following questions:

>>What are your values for:
>>Spam Actions =
>>High Scoring Spam Actions =
>>Non Spam Actions =
>>
>>    
>>
And could you modify your MS config this way?

>>How about adding some verbosity to your MS setup?
>>Detailed Spam Report = yes
>>Include Scores In SpamAssassin Report = yes
>>Always Include SpamAssassin Report = yes
>>Log Spam = yes
>>Log Non Spam = yes  (beware it can produce a lot a output)
>>
>>    
>>

You could also run MS in debug mode (look for Debug = near the end of 
MailScanner.conf) to get a trace of what's going on.

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
/(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045



------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!









This email may contain information protected under the Family
Educational Rights and Privacy Act (FERPA) or the Health Insurance
Portability and Accountability Act (HIPAA).  If this email contains
confidential and/or privileged health or student information and you
are not entitled to access such information under FERPA or HIPAA,
federal regulations require that you destroy this email without
reviewing it and you may not forward it to anyone.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!