<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Beware of header rewriting/modifications if you using
DKIM/SPF/DMARC</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Then you need to install a Sender Framwork Policy
program.</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>If you using spf/dkim/dmarc and your forwarding mails,
it will get rejected to do modified headers. </SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>if you using postfix, setup postsrsd - Sender Rewriting
Scheme (SRS) lookup table for Postfix</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Simple to integrate also. </SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>My current mailscanner results, due to postfix
settings. </SPAN></FONT></DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>
<DIV dir=ltr align=left>
<TABLE class="mail todaystatistics"
style="FONT-SIZE: medium; BORDER-TOP: rgb(0,0,0) 1px solid; FONT-FAMILY: verdana, sans-serif; BORDER-RIGHT: rgb(0,0,0) 1px solid; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-BOTTOM: rgb(0,0,0) 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: rgb(0,0,0) 1px solid; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial"
cellSpacing=1 cellPadding=1 width=220 border=0>
<TBODY>
<TR style="FONT-SIZE: 8pt; BACKGROUND-COLOR: rgb(235,235,235)">
<TD style="WHITE-SPACE: nowrap">Processed:</TD>
<TD style="WHITE-SPACE: nowrap; TEXT-ALIGN: right">898</TD>
<TD
style="WHITE-SPACE: nowrap; TEXT-ALIGN: right">311.38MB</TD></TR></TBODY></TABLE></DIV>
<DIV dir=ltr align=left>
<TABLE class="mail todaystatistics"
style="FONT-SIZE: medium; BORDER-TOP: rgb(0,0,0) 1px solid; FONT-FAMILY: verdana, sans-serif; BORDER-RIGHT: rgb(0,0,0) 1px solid; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-BOTTOM: rgb(0,0,0) 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: rgb(0,0,0) 1px solid; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial"
cellSpacing=1 cellPadding=1 width=220 border=0>
<TBODY>
<TR style="FONT-SIZE: 8pt; BACKGROUND-COLOR: rgb(235,235,235)">
<TD style="WHITE-SPACE: nowrap">Clean:</TD>
<TD style="WHITE-SPACE: nowrap; TEXT-ALIGN: right">896</TD>
<TD
style="WHITE-SPACE: nowrap; TEXT-ALIGN: right">99.8%</TD></TR></TBODY></TABLE></DIV>
<DIV dir=ltr align=left>
<TABLE class="mail todaystatistics"
style="FONT-SIZE: medium; BORDER-TOP: rgb(0,0,0) 1px solid; FONT-FAMILY: verdana, sans-serif; BORDER-RIGHT: rgb(0,0,0) 1px solid; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-BOTTOM: rgb(0,0,0) 1px solid; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: rgb(0,0,0) 1px solid; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial"
cellSpacing=1 cellPadding=1 width=220 border=0>
<TBODY>
<TR style="FONT-SIZE: 8pt; BACKGROUND-COLOR: rgb(235,235,235)">
<TD style="WHITE-SPACE: nowrap">Spam:</TD>
<TD style="WHITE-SPACE: nowrap; TEXT-ALIGN: right">2</TD>
<TD
style="WHITE-SPACE: nowrap; TEXT-ALIGN: right">0.2%</TD></TR></TBODY></TABLE></DIV>
<DIV dir=ltr align=left><SPAN class=978300813-01112019>All othere 0.
</SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=978300813-01112019></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=978300813-01112019>No greylisting used, no
postwhite used. </SPAN></DIV></SPAN></FONT>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Best used of my server postfix postscreen + fail2ban.
</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>I use this setup for postscreen. </SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Black and white lists are used to for postscreen its
counter</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>postscreen_dnsbl_threshold
= 7<BR></SPAN></FONT><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>postscreen_dnsbl_sites
=<BR>
zen.spamhaus.org*4<BR>
b.barracudacentral.org*4<BR>
dnsbl.cobion.com*2<BR>
bl.spameatingmonkey.net*2<BR>
fresh.spameatingmonkey.net*2<BR>
dnsbl.kempt.net*1<BR>
dnsbl.inps.de*2<BR>
bl.spamcop.net*2<BR>
srn.surgate.net=127.0.0.2*1<BR>
spam.dnsbl.sorbs.net*1<BR>
psbl.surriel.com*2<BR>
bl.mailspike.net*2<BR>
rep.mailspike.net=127.0.0.[13;14]*1<BR>
bl.suomispam.net*1<BR>
bl.blocklist.de*2<BR>
ix.dnsbl.manitu.net*2<BR>
dnsbl-1.uceprotect.net*1<BR>
dnsbl-2.uceprotect.net*1<BR>
dnsbl.justspam.org=127.0.0.2*2<BR>
blackholes.tepucom.nl=127.0.0.2*2<BR>
dnsbl.beetjevreemd.nl=127.0.0.2*2<BR>
multi.surbl.org*2<BR>
all.s5h.net=127.0.0.2*1<BR>
hostkarma.junkemailfilter.com=127.0.0.[2;4]*2<BR>
rbl.abuse.ro=127.0.0.[2;4]*2<BR>
gl.suomispam.net=127.0.0.2*1<BR>
truncate.gbudb.net=127.0.0.2*1<BR>
dnsbl.zapbl.net=127.0.0.2*1<BR>
netblockbl.spamgrouper.to=127.0.0.2*1<BR>
dnsbl.spfbl.net=127.0.0.[2;4]*2<BR>
dnsrbl.org*1<BR> # No
RDNS<BR>
dnsbl.spfbl.net=127.0.0.3*1<BR>
hostkarma.junkemailfilter.com=127.0.0.3*1<BR>
# whitelists<BR>
swl.spamhaus.org*-6<BR>
dnswl.spfbl.net=127.0.0.[2;3;4]*-3<BR>
list.dnswl.org=127.0.[0..254].[0..3]*-4<BR>
rep.mailspike.net=127.0.0.[17;18]*-1<BR>
rep.mailspike.net=127.0.0.[19;20]*-2<BR>
hostkarma.junkemailfilter.com=127.0.0.1*-4<BR>
nobl.junkemailfilter.com=127.0.0.5*-4<BR>#<BR></SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>and a pretty simple fail2ban setup.
</SPAN></FONT></DIV>
<DIV dir=ltr align=left><SPAN class=978300813-01112019> </DIV>
<DIV></SPAN><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=978300813-01112019>#
</SPAN>/etc/fail2ban/filter.d/postfix-postscreen.conf<BR>#<BR># Fail2Ban filter
for Postfix's Postscreen blocks.<BR>#<BR># <SPAN
class=978300813-01112019>Y</SPAN>ou need to adjust the Rank number to what you
please.<BR># make sure you match the first number [7-9] so the 7 with
postfix/postscreen_dnsbl_threshold value=<BR># For now we have set rank 7 and up
are getting blocked and put in the firewall</FONT></FONT></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial>[INCLUDES]</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial># Read common prefixes. If any
customizations available -- read them from<BR># common.local<BR>before =
common.conf</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial>[Definition]</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial>_daemon =
postfix(-\w+)?/postscreen</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial>failregex = DNSBL rank
([7-9]|[1-9][0-9]) for \[<HOST>\]</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial>ignoreregex =</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2># Author: Louis van
Belle<BR><SPAN
class=978300813-01112019>#######################################################
</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=978300813-01112019></SPAN></FONT></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=978300813-01112019>in Jail.local </SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=978300813-01112019>[postfix-postscreen]</SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=978300813-01112019>port = smtp<BR>logpath =
/var/log/mail.log<BR>maxretry = 1<BR>bantime = 86400<BR>findtime =
3600<BR>banaction = ufw<BR></SPAN></FONT></FONT></FONT></DIV>
<DIV><SPAN class=978300813-01112019><FONT color=#0000ff size=2 face=Arial>Works
great (for me) :-) </FONT></SPAN></DIV>
<DIV><SPAN class=978300813-01112019></SPAN><FONT color=#0000ff size=2
face=Arial><SPAN class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Greetz, </SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019>Louis</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial><SPAN
class=978300813-01112019></SPAN></FONT> </DIV><FONT color=#0000ff size=2
face=Arial></FONT><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV lang=nl class=OutlookMessageHeader dir=ltr align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>Van:</B> MailScanner
[mailto:mailscanner-bounces+belle=bazuin.nl@lists.mailscanner.info] <B>Namens
</B>Shawn Iverson via MailScanner<BR><B>Verzonden:</B> vrijdag 1 november 2019
14:06<BR><B>Aan:</B> MailScanner Discussion<BR><B>CC:</B> Shawn
Iverson<BR><B>Onderwerp:</B> Re: MailScanner and Zimbra<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr>
<DIV>+1<BR></DIV>
<DIV><BR></DIV>We need to put this on the MailScanner website as "Things you
can do to enhance your MailScanner" :)
<DIV><BR></DIV>
<DIV><BR></DIV></DIV><BR>
<DIV class=gmail_quote>
<DIV class=gmail_attr dir=ltr>On Fri, Nov 1, 2019 at 8:55 AM David Jones via
MailScanner <<A
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A>>
wrote:<BR></DIV>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; BORDER-LEFT: rgb(204,204,204) 1px solid; MARGIN: 0px 0px 0px 0.8ex">
<DIV lang=EN-US>
<DIV class=gmail-m_5486152028223267171WordSection1>
<P class=MsoNormal>Great suggestions below. Here are some
more:<U></U><U></U></P>
<OL style="MARGIN-TOP: 0in" type=1>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Install greylisting (sqlgrey) and enable it
slowly by doing selective greylisting<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Enable Postfix postscreen with weighted method
and add in dozens of RBLs (see spamassassin mailing list
archives)<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Setup postwhite (search <A
href="http://github.com" target=_blank>github.com</A>) to prevent blocking
too much from #1 and #2 above.<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Install/compile DCC (<A
href="https://www.dcc-servers.net/dcc/"
target=_blank>https://www.dcc-servers.net/dcc/</A>). There are many
howto’s out there for this.<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Tune out the MTA (Postfix) settings for rejecting
based on DHS and hostname (see spamassassin mailing list
archives)<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Make sure the RelayCountry plugin is enabled and
working so you can add rules to bump up scores for certain countries that
aren’t normal for your particular mail flow.<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Advanced users can install postfwd and add
headers in the MTA that spamassassin can use in local/custom
rules.<U></U><U></U>
<LI class=gmail-m_5486152028223267171MsoListParagraph
style="MARGIN-LEFT: 0in">Install opendmarc and policyd-spf into the MTA to
add support for DMARC inside spamassassin with the addition of a few rules
that use the headers added. (see spamassassin mailing list
archives)<U></U><U></U></LI></OL>
<P class=MsoNormal><U></U><U></U> </P>
<P class=MsoNormal>A well-tuned MTA (RBLs, greylisting, and DNS/HELO checks)
should drop > 98% of the spam/junk before it has to reach
spamassassin.<U></U><U></U></P>
<P class=MsoNormal><U></U><U></U> </P>
<P class=MsoNormal>Dave<U></U><U></U></P>
<P class=MsoNormal><U></U><U></U> </P>
<DIV
style="BORDER-TOP: rgb(181,196,223) 1pt solid; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0in; PADDING-TOP: 3pt; PADDING-LEFT: 0in; BORDER-LEFT: medium none; PADDING-RIGHT: 0in">
<P class=MsoNormal><B><SPAN style="FONT-SIZE: 12pt; COLOR: black">From:
</SPAN></B><SPAN style="FONT-SIZE: 12pt; COLOR: black">MailScanner
<mailscanner-bounces+djones=<A
href="mailto:ena.com@lists.mailscanner.info"
target=_blank>ena.com@lists.mailscanner.info</A>> on behalf of Shawn
Iverson via MailScanner <<A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A>><BR><B>Reply-To:
</B>MailScanner Discussion <<A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A>><BR><B>Date:
</B>Friday, November 1, 2019 at 6:05 AM<BR><B>To: </B>MailScanner Discussion
<<A href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A>><BR><B>Cc: </B>Shawn
Iverson <<A href="mailto:iversons@rushville.k12.in.us"
target=_blank>iversons@rushville.k12.in.us</A>><BR><B>Subject: </B>Re:
MailScanner and Zimbra<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><U></U><U></U> </P></DIV>
<DIV>
<P class=MsoNormal>I don't know what Zimbra is using, but another suggestion
is augmenting MailScanner with RBLs (such as ahead of it with Postfix
Postscreen, which is very fast) is quite effective. MailScanner and
SpamAssassin are just two of many other tools in your spam fighting
arsenal.<U></U><U></U></P></DIV>
<P class=MsoNormal><U></U><U></U> </P>
<DIV>
<DIV>
<P class=MsoNormal>On Fri, Nov 1, 2019 at 5:56 AM Thomas Stephen Lee <<A
href="mailto:lee.iitb@gmail.com" target=_blank>lee.iitb@gmail.com</A>>
wrote:<U></U><U></U></P></DIV>
<BLOCKQUOTE
style="BORDER-TOP: medium none; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0in; PADDING-TOP: 0in; PADDING-LEFT: 6pt; MARGIN-LEFT: 4.8pt; BORDER-LEFT: rgb(204,204,204) 1pt solid; PADDING-RIGHT: 0in; MARGIN-RIGHT: 0in">
<DIV>
<DIV>
<DIV>
<P class=MsoNormal><SPAN style='FONT-FAMILY: "Courier New"'>Thanks for the
reply Thom.<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN
style='FONT-FAMILY: "Courier New"'><BR>We have updated SpamAssassin and
added the cron.daily script.<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN
style='FONT-FAMILY: "Courier New"'>For virus scanning we have installed
the ClamAV unofficial sigs and Sophos AV for
Linux.<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style='FONT-FAMILY: "Courier New"'>thanks<BR><BR>---<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN style='FONT-FAMILY: "Courier New"'>Thomas Stephen
Lee<U></U><U></U></SPAN></P></DIV></DIV></DIV>
<P class=MsoNormal><U></U><U></U> </P>
<DIV>
<DIV>
<P class=MsoNormal>On Fri, Nov 1, 2019 at 2:59 PM Thom van der Boon <<A
href="mailto:thom@vdb.nl" target=_blank>thom@vdb.nl</A>>
wrote:<U></U><U></U></P></DIV>
<BLOCKQUOTE
style="BORDER-TOP: medium none; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; PADDING-BOTTOM: 0in; PADDING-TOP: 0in; PADDING-LEFT: 6pt; MARGIN-LEFT: 4.8pt; BORDER-LEFT: rgb(204,204,204) 1pt solid; PADDING-RIGHT: 0in; MARGIN-RIGHT: 0in">
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">I have the
same setup.<U></U><U></U></SPAN></P></DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">check the
age of the files in
/var/spamassassin/version_number/<U></U><U></U></SPAN></P></DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">check
wether there is a spamassassin update script in /etc/cron.daily (you
will find nothing in your logs to check wether sa-update is
working)<U></U><U></U></SPAN></P></DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">If old
files quick fix run as root: sa-update --verbose ; service mailscanner
restart<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Script to
auto-update: <A href="https://dsr.vanderboon.net/DSR/contrib/"
target=_blank>https://dsr.vanderboon.net/DSR/contrib/</A>
<U></U><U></U></SPAN></P></DIV></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">In
/etc/MailScanner/MailScanner.conf check and change the following
parameters:<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Log Spam =
yes<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Log
SpamAssassin Rule Actions = yes<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Max Spam
Check Size = 20m<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">restart
MailScanner after this and check your
logs<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Tip 1: Use
KAM.cf<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">KAM.cf is
a great collection of spamassassin rules<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Rules are
here: <A
href="https://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf"
target=_blank>https://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf</A><U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Script to
auto-update: <A href="https://dsr.vanderboon.net/DSR/contrib/"
target=_blank>https://dsr.vanderboon.net/DSR/contrib/</A><U></U><U></U></SPAN></P></DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Tip 2: Use
<A href="http://securiteinfo.com" target=_blank>securiteinfo.com</A> to
improve ClamAV detection<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">It is an
paid extension to ClamAV, but it costs less than € 30/USD 35 per
year (You only need pro version to protect your mail
server)<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><A
href="https://securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml"
target=_blank>https://securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml</A><U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Thom<U></U><U></U></SPAN></P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P></DIV>
<DIV class=MsoNormal style="TEXT-ALIGN: center" align=center><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">
<HR align=center SIZE=0 width="100%">
</SPAN></DIV>
<DIV>
<P class=MsoNormal><B><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">Van:
</SPAN></B><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black">"Thomas
Stephen Lee" <<A href="mailto:lee.iitb@gmail.com"
target=_blank>lee.iitb@gmail.com</A>><BR><B>Aan: </B>"MailScanner
Discussion" <<A href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A>><BR><B>Verzonden:
</B>Vrijdag 1 november 2019 08:14:04<BR><B>Onderwerp: </B>MailScanner
and Zimbra<U></U><U></U></SPAN></P></DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P>
<DIV>
<DIV>
<DIV>
<DIV>
<P class=MsoNormal><SPAN
style='FONT-SIZE: 12pt; FONT-FAMILY: "Courier New"; COLOR: black'>Hi,<BR><BR>We
use MailScanner on our mail server.<BR><BR>MailScanner scans the
incoming mails and relays it to a VM with Zimbra 8.8.15
installed.<BR><BR>However we notice that Zimbra's spam software captures
many spam mails which are not captured by MailScanner.<BR><BR>Why is
this so ?<BR><BR>thanks<BR><BR>---<BR>Thomas Stephen
Lee<U></U><U></U></SPAN></P></DIV></DIV></DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><BR><BR><BR>--
<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><U></U><U></U></SPAN></P></DIV></DIV>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 12pt; FONT-FAMILY: Helvetica; COLOR: black"><U></U><U></U></SPAN> </P></DIV></DIV></DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><BR><BR>--
<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><U></U><U></U></P></BLOCKQUOTE></DIV>
<P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><BR><BR>-- <BR>MailScanner
mailing list<BR><A href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><U></U><U></U></P></BLOCKQUOTE></DIV>
<P class=MsoNormal><BR clear=all><U></U><U></U></P>
<DIV>
<P class=MsoNormal><U></U><U></U> </P></DIV>
<P class=MsoNormal>-- <U></U><U></U></P>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<DIV>
<P class=MsoNormal>Shawn Iverson, CETL <U></U><U></U></P>
<DIV>
<P class=MsoNormal>Rush County Schools<U></U><U></U></P></DIV>
<DIV>
<P class=MsoNormal><A href="mailto:iversons@rushville.k12.in.us"
target=_blank>iversons@rushville.k12.in.us</A><U></U><U></U></P></DIV>
<DIV>
<P class=MsoNormal><U></U><U></U> </P></DIV>
<DIV>
<P class=MsoNormal><SPAN
style="BORDER-TOP: windowtext 1pt solid; BORDER-RIGHT: windowtext 1pt solid; BORDER-BOTTOM: windowtext 1pt solid; PADDING-BOTTOM: 0in; PADDING-TOP: 0in; PADDING-LEFT: 0in; BORDER-LEFT: windowtext 1pt solid; PADDING-RIGHT: 0in"><IMG
id=gmail-m_5486152028223267171_x0000_i1027
style="HEIGHT: 1in; WIDTH: 0.927in" border=0 alt="Image removed by sender."
width=89 height=96><IMG id=gmail-m_5486152028223267171_x0000_i1026
style="HEIGHT: 0.333in; WIDTH: 0.333in" border=0
alt="Image removed by sender." width=32 height=32><IMG
id=gmail-m_5486152028223267171_x0000_i1025 style="HEIGHT: 1in; WIDTH: 1in"
border=0 alt="Image removed by sender. Cybersecurity" width=96
height=96></SPAN><U></U><U></U></P></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV><BR><BR>--
<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info"
target=_blank>mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
rel=noreferrer
target=_blank>http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR></BLOCKQUOTE></DIV><BR
clear=all>
<DIV><BR></DIV>-- <BR>
<DIV class=gmail_signature dir=ltr>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV dir=ltr>
<DIV dir=ltr>Shawn Iverson, CETL
<DIV></DIV>
<DIV>Rush County Schools</DIV>
<DIV></DIV>
<DIV><A href="mailto:iversons@rushville.k12.in.us"
target=_blank>iversons@rushville.k12.in.us</A></DIV>
<DIV><BR></DIV>
<DIV><IMG
src="https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ"
width=89 height=96 NOSEND="1"><IMG style="FONT-SIZE: 12px"
src="https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ"
NOSEND="1"><IMG alt=Cybersecurity
src="https://www.doe.in.gov/sites/default/files/cybersecurity/cybersecurity.png"
width=96 height=96
NOSEND="1"></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></BLOCKQUOTE></BODY></HTML>