Spamassassin rules not firing correctly

[Jerry Benton]

Stef,

Can you post your MailScanner conf? (A sample of your blacklist rules
specifically.)

Also, I see you have downloaded Mailborder before. If you still have the
Mailborder box running, I’d suggest entering some sample rules in the GUI
and see how the config files are built. Something as simple as using a
space instead of a tab in a rule set can cause issues.


On Fri, May 2, 2014 at 5:07 PM, Stef Morrell <stef at aoc-uk.com> wrote:

>  Would you bother with bayes at all then? It would be impossible to hand
> sort my corpus.
>
>
>
>
>
> *From:* mailscanner-bounces at lists.mailscanner.info [mailto:
> mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Martin Hepworth
> *Sent:* 02 May 2014 15:51
> *To:* MailScanner discussion
> *Subject:* Re: Spamassassin rules not firing correctly
>
>
>
> Stef
> also turn off autolearning - found this not great for a population of more
> than a handful of users.
>
>
>
>
>  --
> Martin Hepworth, CISSP
> Oxford, UK
>
>
>
> On 2 May 2014 11:13, Stef Morrell <stef at aoc-uk.com> wrote:
>
> Hello Kai,
>
>
> On 02 May 2014 10:16 Kai Schaetzl wrote:
> > This is a common misunderstanding. SA via MS may not use the same config
>
> Yes, I take on board the technical suggestions. I've basically been
> through all those checks. :)
>
> I am now starting to believe there is actually nothing wrong and that
> given I'm seeing apparent fails on blacklist rules is because the domains
> aren't blacklisted at the time the spam is generated.
>
> moms-flowersbouquet-nice.me - registered end of 30/04/2014, spam arrived
> early 01/05/2014
> russianbrides-dating-great.me - registered 11 hours ago, spam arrived 3
> hours ago.
>
> So the problem is likely not MS, it's how to detect and deal with spam
> from brand new domains/ip.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>
>
> --
> This email has been scanned by the Alpha Omega Computers Ltd MailCrusader
> for
> viruses, spam and dangerous content.
> For more information please visit *Alpha Omega Computers Ltd*<http://www.aoc-uk.com/>.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 

--
Jerry Benton
Mailborder Systems
www.mailborder.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140502/992d59b1/attachment.html