Spamassasin is rubbish

[pucky]

No wonder i never ran this crap before. It cant stop the basic of basic spam. Not to mention the really good ones.

I get scores of 70 yet in the control panel i tell it to block spam scores higher than 10. WTF?

Too many negative scores too. Why would you need to assign a score of -30 for a valid dkim? Ridiculous. Maybe -10 or -5 but -30?

This thing is absolute crap or it just fails to work properly on DA. Even the settings in the control panel are ignored!

 

[zEitEr]

Hello,

I don't know your case, in my case I use SpamAssassin and I'm happy with it, it works good for me with:

1. daily sa-update
2. constant sa-learn spam & ham

It used to work bad for me before I started to use sa-learn.

What are your options? What are headers of an email with 70 points of SPAMy?

 

[pucky]

Does not stop spam. See for yourself. All this crap is being delivered to me no matter what i have set in the control panel.

Setting 3.0 Score of 4 Yet this type of junk is getting delivered? Where is the problem?

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from da.mydomain.com
	by da.mydomain.com (Dovecot) with LMTP id AK6oDXn8HFk1fgAAmSYpYw
	for <[email protected]>; Wed, 17 May 2017 18:44:25 -0700
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Wed, 17 May 2017 18:44:25 -0700
Received: from [107.172.128.138] (helo=roofblow.com)
	by da.mydomain.com with esmtp (Exim 4.89)
	(envelope-from <[email protected]>)
	id 1dBAUF-0009Yo-Hv
	for [email protected]; Wed, 17 May 2017 18:44:25 -0700
From: "Alessandra" <[email protected]>
Date: Wed, 17 May 2017 19:54:00 -0500
MIME-Version: 1.0
To: <[email protected]>
Message-ID: <fGZzTQaNRlzpybaMfWOgrgmk04X8G5blYmGytXFJ2gA.mhylkKmyD2FDSeW6-qmlAjTvgQlcXxYXFK1dGavYTrk@roofblow.com>
Content-Type: multipart/alternative;
 boundary="------------88813954474092335082890"
X-Spam-Score: 3.5 (+++)
X-Spam-Report: Spam detection software, running on the system "da.mydomain.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  THIS one thing you do every day stabs your testosterone to
    deadly levels! <http://won.roofblow.com/hxfyc/cqsbwy20595fsbkbzr/b5oQnfZAQgQVDtlZA81SxkgjoSBNRAJyHq4s0huqLuM/uSvqNqzs7l0ORUcq0PAYsaE6f_WkuXgxzpe9T-o699fYytv1O4a7WrdDBxVsZ33SHh_VWvPKwYIVaUKouzmgsHFebRHLi5Z5Hvo2W0GCKVw>
    [...] 
 
 Content analysis details:   (3.5 points, 3.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: roofblow.com]
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  0.0 T_SPF_HELO_PERMERROR   SPF: test of HELO record failed (permerror)
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.2 DRUGS_ERECTILE         Refers to an erectile drug
X-Old-Subject:Get longer & Harder all NATURAL !!
Subject:Get longer & Harder all NATURAL !!
X-Spam-Status: Yes, score=3.5, +20 total spam score
SpamTally: Final spam score: 55
X-Antivirus-Scanner: Clean mail though you should still use an Antivirus

You can clearly see that this scored a 3.5 yet i have it set to 3.0.

SA Update and SA Learn do nothing to fix this, just update.

ANDDDDDDDDDDDDDDDD most of those scores have no score at all, 0.0?

 

[zEitEr]

And what are the SA settings for the domain?

 

[pucky]

3.0 as i mentioned and 4 for the spam score. Not many options there to set now is there?

 

[zEitEr]

So it is to treat as spam emails with score 3.0+
and remove(?) spam emails with score 4+
Email scored only 3.5 with SA. It won't be removed in such a case.


This

SpamTally: Final spam score: 55

works only for ESF. SpamAssassin does not care of it.

You can re-define scores for ESF in /etc/exim.easy_spam_fighter/variables.conf.custom, create it first or copy from /etc/exim.easy_spam_fighter/variables.conf

 

[pucky]

Well what setting should we use to kill that spam off?

 

[zEitEr]

The default is:

EASY_HIGH_SCORE_DROP = 100

- very high scoring spam is dropped at this score, and not allowed to enter.

You can re-define scores for ESF in /etc/exim.easy_spam_fighter/variables.conf.custom, create it first or copy from /etc/exim.easy_spam_fighter/variables.conf

http://files.directadmin.com/services/easy_spam_fighter/