Spam slipping thru....

Martin.Hepworth martinh at solidstatelogic.com
Tue Jan 29 09:11:23 GMT 2008


Other thing is that of course the URI-RBLs dcc etc update all the time.

So first run through with MS they might not be listed, but a few hours later when you run manually they are...

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Martin.Hepworth
> Sent: 29 January 2008 09:01
> To: MailScanner discussion
> Subject: RE: Spam slipping thru....
>
> Gordon
>
> I don't run AWL as I find it gets things wrong in a large multiuser
> environment (YMMV though).
>
> I presume all your SA setup is done at the site level in
> /etc/mail/spamassassin ???? (and you've got a mailscanner.cf in there that
> points to spam.assassin.prefs.conf.
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Gareth
> > Sent: 29 January 2008 08:51
> > To: MailScanner discussion
> > Subject: Re: Spam slipping thru....
> >
> > Have a look at my site :-
> > http://www.gbnetwork.co.uk/mailscanner/
> > There are lots of additional rules and plugins there that you can use
> > listed there.
> >
> > On Tue, 2008-01-29 at 04:31, Gordon Colyn wrote:
> > > I am running sendmail, with MailScanner 4.63.8.
> > >
> > > I have enable razor in v320.pre file.
> > >
> > > Gordon
> > > ----- Original Message -----
> > > From: "Glenn Steen" <glenn.steen at gmail.com>
> > > To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> > > Sent: Monday, January 28, 2008 1:32 AM
> > > Subject: Re: Spam slipping thru....
> > >
> > >
> > > On 27/01/2008, Gordon Colyn <gordon at itnt.co.za> wrote:
> > > > ITNT BannerIn the last week I have spam from hotmail and yahoo
> > slipping
> > > > thru.  When I run the test manually it should be blocked results
> > below;
> > > >
> > > > How do i get all the test to run in MailScanner?
> > > >
> > > > ##Manual test
> > > >
> > > > Content analysis details:   (10.0 points, 5.0 required)
> > > >
> > > >  pts rule name              description
> > > > ---- ---------------------- ----------------------------------------
> --
> > --------
> > > >  2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
> > bl.spamcop.net
> > > >                  [Blocked - see
> > > > <http://www.spamcop.net/bl.shtml?66.16.76.43>]
> > > >  1.1 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old
> > > > Bread)
> > > >                             [URIs: seeanserjoovoice.com]
> > > >  1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL
> > > > blocklist
> > > >                             [URIs: seeanserjoovoice.com]
> > > >  1.5 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL
> > > > blocklist
> > > >                             [URIs: seeanserjoovoice.com]
> > > >  0.0 HTML_MESSAGE           BODY: HTML included in message
> > > >  0.0 BAYES_50               BODY: Bayesian spam probability is 40 to
> > 60%
> > > >                             [score: 0.5007]
> > > >  2.0 CONTAINS_RULE10000058  FULL: CONTAINS_RULE10000058
> > > >  1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence
> level
> > > >                             above 50%
> > > >                             [cf:  69]
> > > >  0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
> > > >                             [cf:  69]
> > > >
> > > > ##MailScanner Test
> > > >
> > > > SpamCheck: not spam, SpamAssassin (not cached,
> > > >  score=6.544, required 8, BAYES_50 0.00, CONTAINS_RULE10000058 2.00,
> > > >  HTML_MESSAGE 0.00, RCVD_IN_BL_SPAMCOP_NET 1.96, URIBL_RHS_DOB 1.08,
> > > >  URIBL_SBL 1.50)
> > > >
> > > >
> > > > Thanks
> > > >
> > > You seem to have different settings for different users here.... else
> > > you'd trigger Razor in the MS case too. Are you perhaps running
> > > Postfix? What version of MailScanner? Where have you enabled Razor?
> > >
> > > Cheers
> > > --
> > > -- Glenn
> > > email: glenn < dot > steen < at > gmail < dot > com
> > > work: glenn < dot > steen < at > ap1 < dot > se
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > > Before posting, read http://wiki.mailscanner.info/posting
> > >
> > > Support MailScanner development - buy the book off the website!
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************



More information about the MailScanner mailing list