(SCL: 1) Re: Spam scores in headers

[Richard Edge]

Thanks Matt. As mentioned in another message I am using 3.1 not 3.01. It was
a typo on my part. I have removed antidrug.cf. The spam.assassin.prefs.conf
suggested renaming the local.cf file so that it wouldn't be used. Are you
suggesting then that it be used to disable certain SpamAssassin
functions/tests?

Richard Edge
Senior Systems Administrator | Technology Services
Trinity Western University | t: 604.513.2089
f: 604.513.2038 | e: edge at twu.ca | www.twu.ca/technology 

 

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Matt Kettler
Sent: Friday, November 18, 2005 12:56 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: (SCL: 1) Re: Spam scores in headers

Richard Edge wrote:
> I am running MailScanner 4.47.4, SA 3.01

Warning: 3.0.1 is subject to a remote DoS vulnerability in its mime decoder.
Any spammer can exploit this by sending you malformed messages.

with Rules Du Jour and was
> wondering how to configure things to show all of the tests failed.
> Looking at the headers and totaling up the scores it is obvious that 
> some other tests are also being triggered, but not recorded in the 
> "X-MailScanner-SpamCheck:" header lines.
> 
> For example:
> 
> X-TWU-MailScanner-SpamCheck: spam, SpamAssassin (score=7.557, required 
> 5,BAYES_50 0.00, HTML_90_100 0.11, HTML_IMAGE_ONLY_04 
> 3.60,HTML_MESSAGE 0.00, HTML_MIME_NO_HTML_TAG 1.08,HTML_SHORT_LENGTH 
> 1.57, MIME_BASE64_NO_NAME 0.22,MIME_HTML_ONLY 0.00, NO_REAL_NAME 0.96)

Any chance you have the AWL on? (note: disabling this in MailScanner.conf
doesn't work, you have to do it in /etc/mail/spamassassin/local.cf)


> 
> X-TWU-MailScanner-SpamScore: sssssss
> 
> I am using the following RDJ:
> 
> TRUSTED_RULESETS="ANTIDRUG SARE_ADULT SARE_OEM BOGUSVIRUS SARE_FRAUD 
> SARE_OBFU0 SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2
SARE_SPOOF"

Warning: Do not use antidrug.cf with SA 3.0.0 or newer. Antidrug.cf is
intended to be used by users of SA 2.64 and older only.

As of SA 3.0.0 the rules are already built-in to SA. By loading antidrug.cf
you'll over-ride any improvements that the SA developers may have made.

I am the author of antidrug.cf, and although I haven't checked to see if the
devs have updated the rules, I am no longer maintaining this configfile
directly. Any future updates I make will likely be pushed directly to the
spamassassin project, and possibly to separate rulesets like
"antidrug_31.cf", etc.

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, Application/X-PKCS7-SIGNATURE  6.3KB. ]
    [ Unable to print this part. ]