<html>
<head>
<meta name="generator" content="Windows Mail 17.5.9600.20498">
<style data-externalstyle="true"><!--
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph {
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
}
p.MsoNormal, li.MsoNormal, div.MsoNormal {
margin:0in;
margin-bottom:.0001pt;
}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst,
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle,
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast {
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
line-height:115%;
}
--></style></head>
<body dir="ltr">
<div data-externalstyle="false" dir="ltr" style="font-family: 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif';font-size:12pt;"><div>the only one not enabled as Always Include SpamAssassin Report. the spam score number format was %d I think, but I tried the setting below, looks like that will be more verbose.</div><div><br></div><div>overall, im not seeing rules get skipped, but emails that are obviously spams are just being no scored as such.</div><div><br></div><div>thanks for the advice!<br></div><div data-signatureblock="true"><div><br></div><div><br></div><div><br></div></div><div style="padding-top: 5px; border-top-color: rgb(229, 229, 229); border-top-width: 1px; border-top-style: solid;"><div><font face=" 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif'" style='line-height: 15pt; letter-spacing: 0.02em; font-family: "Calibri", "Segoe UI", "Meiryo", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "sans-serif"; font-size: 12pt;'><b>From:</b> <a href="mailto:maxsec@gmail.com" target="_parent">Martin Hepworth</a><br><b>Sent:</b> Friday, May 23, 2014 9:32 AM<br><b>To:</b> <a href="mailto:mailscanner@lists.mailscanner.info" target="_parent">mailscanner@lists.mailscanner.info</a></font></div></div><div><br></div><div dir=""><div dir="ltr">Hi<br>add the SA info into email headers to see what the score and rule hits are ( helps with debug), in <code>MailScanner.conf</code> make sure the follow are set thus:
<p>
<code>Spam Score Number Format = %5.2f</code>
</p>
<p>
<code>Detailed Spam Report = yes</code>
</p>
<p>
<code>Include Scores In SpamAssassin Report = yes</code>
</p>
<p>
<code>Always Include SpamAssassin Report = yes</code>
</p>
<p>
<code>Spam Score Number Format = %5.2f</code><br></p>This should give you some clue as to whats (not) happening as first step<br></div><div class="gmail_extra"><br clear="all"><div>-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div>
<br><br><div class="gmail_quote">On 23 May 2014 06:45, Michael Huntley <span dir="ltr"><<a href="mailto:michael@huntley.net" target="_parent">michael@huntley.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: solid;">
<div>
I always keep a sizable chunk of recent spam on hand to feed to
spamassassin. I do it on a 45 day or so schedule. I place the spam
in a folder and sa-learn it using the proper user. This seems to
keep things sane.<br>
<br>
Cheers!<br>
<br>
mph<div><div class="h5"><br>
<br>
<div>On 5/22/2014 7:12 PM, Jonathan Horne
wrote:<br>
</div>
<blockquote style="margin-top: 0px; margin-bottom: 0px;">
<div style='font-family: "Calibri","Segoe UI","Meiryo","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","sans-serif"; font-size: 12pt;' dir="ltr">
<div>
<div>Greetings,</div>
<div><br>
</div>
<div>I have several MailScanner installs that lately, have
been allowing an increased amount of spam to deliver. all
separate systems, at separate sites, but all behaving the
same way. more and more spam each week is getting thru.
ive been noticing an increase at least over the past 3-4
weeks.</div>
<div><br>
</div>
<div>is there anything that can be done? previously when
these systems were deployed (about 9-12 months ago, I forget
now) they were incredibly effective.</div>
<div><br>
</div>
<div>thanks for any tips,</div>
<div>Jonathan</div>
<br>
</div>
<div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
</div></div></div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_parent">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_parent">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_parent">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br></div>
</div></div>
</body>
</html>