Very bad score spamassassin

[Glenn Steen]

And start using the digest tests! DCC and razor at least, and probably
pyzor as well.

But as Markus says... Fix your trust path (and corresponding MailScanner
setting) first!!! A simple search will givevthe details on how (SA has a
good wiki article...).

Cheers
-- 
-- Glenn
Den 18 nov 2011 17:19 skrev "Martin Hepworth" <maxsec at gmail.com>:

> and you're running stock spamassassin rules with no alterations? and
> running sa-update at least once per day?
>
> I'd turn on a couple of RBL's (zen and spamcop are useful), enable the
> rbl's and make sure all but the ones you want are given a zero score in
> local.cf and they won't run.
>
> --
> Martin Hepworth
> Oxford, UK
>
>
> On 18 November 2011 13:11, eric le corre <eric_le_corre at msn.com> wrote:
>
>> Martin Hepworth <maxsec <at> gmail.com> writes:
>>
>> >
>> >
>> > yes disable auto learn by commenting out the plugin in one of
>> the /usr/local/spamassassin/*.cf filesyou need to know WHAT spamassassin
>> rule
>> is dragging the score down, you should be able to see this in Mailwatch or
>> alter the following settings in MailWatch.conf and you'll get more info
>> in the
>> email headers to help diagnose..
>> >
>> > Spam Score Number Format = %5.2f
>> >
>> >
>> >
>> > Detailed Spam Report = yes
>> >
>> >
>> >
>> > Include Scores In SpamAssassin Report = yes
>> >
>> >
>> >
>> > Always Include SpamAssassin Report = yes
>> >
>> >
>> >
>> > Spam Score Number Format = %5.2f
>> >
>> > -- Martin HepworthOxford, UKOn 17 November 2011 10:31, eric le corre
>> <eric_le_corre <at> msn.com> wrote:
>> > Spamassassin configuration is in autolearning. So there has to be found
>> in
>> > spam HAM.
>> >  Occasionally, I learn to SpamAssassin manually.
>> >  But this problem has been the case since I installed mailscanner.
>> Since the
>> > beginning I have negative cores.
>> >  Do I have to disable the AutoLearn, how?
>> >  how can your remove the old tokens?
>> >
>> > --
>> > MailScanner mailing listmailscanner <at>
>> lists.mailscanner.infohttp://
>> lists.mailscanner.info/mailman/listinfo/mailscanne
>> r
>> > Before posting, read http://wiki.mailscanner.info/posting
>> > Support MailScanner development - buy the book off the website!
>> >
>>
>>
>> for example, example of spam that is not considered as spam by spamassasin
>> with score 4.90
>> in spam report, i can see :
>>
>> cached not
>> score=4.904
>> 5 requis
>> 3.50 BAYES_99 Bayes spam probability is 99 to 100%
>> 0.00 FROM_12LTRDOM
>> 1.39 HTML_COMMENT_SAVED_URL HTML message is a saved web page
>> 0.00 HTML_MESSAGE HTML included in message
>> 0.00 SPF_FAIL SPF: sender does not match SPF record (fail)
>> 0.01 T_KHOP_FOREIGN_CLICK
>>
>> an other one :
>> cached not
>> score=1.58
>> 5 requis
>> 0.80 BAYES_50 Bayes spam probability is 40 to 60%
>> 0.10 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
>> -0.10 DKIM_VALID Message has at least one valid DKIM or DK signature
>> 0.00 HTML_MESSAGE HTML included in message
>> 0.78 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
>>
>>
>> thanks
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111119/0e513748/attachment.html