Very bad score spamassassin

[Martin Hepworth]

and you're running stock spamassassin rules with no alterations? and
running sa-update at least once per day?

I'd turn on a couple of RBL's (zen and spamcop are useful), enable the
rbl's and make sure all but the ones you want are given a zero score in
local.cf and they won't run.

-- 
Martin Hepworth
Oxford, UK


On 18 November 2011 13:11, eric le corre <eric_le_corre at msn.com> wrote:

> Martin Hepworth <maxsec <at> gmail.com> writes:
>
> >
> >
> > yes disable auto learn by commenting out the plugin in one of
> the /usr/local/spamassassin/*.cf filesyou need to know WHAT spamassassin
> rule
> is dragging the score down, you should be able to see this in Mailwatch or
> alter the following settings in MailWatch.conf and you'll get more info in
> the
> email headers to help diagnose..
> >
> > Spam Score Number Format = %5.2f
> >
> >
> >
> > Detailed Spam Report = yes
> >
> >
> >
> > Include Scores In SpamAssassin Report = yes
> >
> >
> >
> > Always Include SpamAssassin Report = yes
> >
> >
> >
> > Spam Score Number Format = %5.2f
> >
> > -- Martin HepworthOxford, UKOn 17 November 2011 10:31, eric le corre
> <eric_le_corre <at> msn.com> wrote:
> > Spamassassin configuration is in autolearning. So there has to be found
> in
> > spam HAM.
> >  Occasionally, I learn to SpamAssassin manually.
> >  But this problem has been the case since I installed mailscanner. Since
> the
> > beginning I have negative cores.
> >  Do I have to disable the AutoLearn, how?
> >  how can your remove the old tokens?
> >
> > --
> > MailScanner mailing listmailscanner <at>
> lists.mailscanner.infohttp://
> lists.mailscanner.info/mailman/listinfo/mailscanne
> r
> > Before posting, read http://wiki.mailscanner.info/posting
> > Support MailScanner development - buy the book off the website!
> >
>
>
> for example, example of spam that is not considered as spam by spamassasin
> with score 4.90
> in spam report, i can see :
>
> cached not
> score=4.904
> 5 requis
> 3.50 BAYES_99 Bayes spam probability is 99 to 100%
> 0.00 FROM_12LTRDOM
> 1.39 HTML_COMMENT_SAVED_URL HTML message is a saved web page
> 0.00 HTML_MESSAGE HTML included in message
> 0.00 SPF_FAIL SPF: sender does not match SPF record (fail)
> 0.01 T_KHOP_FOREIGN_CLICK
>
> an other one :
> cached not
> score=1.58
> 5 requis
> 0.80 BAYES_50 Bayes spam probability is 40 to 60%
> 0.10 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
> -0.10 DKIM_VALID Message has at least one valid DKIM or DK signature
> 0.00 HTML_MESSAGE HTML included in message
> 0.78 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
>
>
> thanks
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111118/cf5458cf/attachment.html