Yet again Spam troubles.. spamassassin minus scores and more.

soulshepard

soulshepard

Verified User
Joined
Feb 7, 2008
Messages
123
dear community

I have a couple of directadmin servers, and have had some minor issues with spam over the years. and i was always using the default spamblocker that came with the install. together with the dfault spamassasin install from scripts/spam.sh

now i have the following situation and questions

- more and more users complain about spam .. especially mail that are send with simpel text and purhaps an url they get minus spam scores

example:
X-Spam-Status: No, score=-0.6 required=3.2 tests=BAYES_00,FSL_HELO_BARE_IP_1,
HS_INDEX_PARAM,RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSWL_HI,RCVD_NUMERIC_HELO,
RDNS_NONE autolearn=no version=3.3.1

X-Spam-Status: No, score=-0.0 required=3.2 tests=BAYES_00,HS_INDEX_PARAM, RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSWL_HI,RCVD_IN_SORBS_WEB,RDNS_NONE, URIBL_DBL_SPAM,URIBL_WS_SURBL autolearn=no version=3.3.1

as i read in http://forum.spamcop.net/forums/lofiversion/index.php/t497.html it seems the BAYES_00 test give the message a -4.9 score but i have no clue if changing this would be good or bad..

also there are reports on the forum on the dns servers that you use for your server in combination with dnswl.org will also cause your messages to get an minus score because your hosts dns servers passed the 100.000 queries a day. i initially tought i had trouble with this but it does not seems like it.

so how to solve the problem in getting incorrect minus spam scores on spam messages.!!

ok i have spamblocker 2 with spamassasin as deault. i read a lot of people usings the noballoney's spamblocker 4 (2010) or the 4.1 version of (2011) would this help in my case?

also i have one question related to this.. in the direct setup guides you setup spamassasin with scripts/spam.sh but in the custombuild i read the following
spamassassin=no
and
eximconf=no

i did a quick search before posting it here , i would expect this to be related what will those options actually do vs the normal install/custombuild..

Thanks

Soul
 
Hi,

i can give you some hint that maybe will help you a lo:

1- Use SB 4, yes, it will help you A LOT.
2- Set yes to spamassassin in options.conf so custombuild will keep you spamassassin up2date
3- Make a cron that start the sa-update so your spamassassin definitions can be updated
4- Use ClamAV Antivirus (always installable and updatable from custombuild)
5- Use nice nameservers in resolv.conf (google nameserver can cause false positive)
6- Create a custom set of "bad word" that you would block automatically and apply to all your customers (and also do a script for do that automatically on new user/domain creation using user_create_post.sh and domain_create_post.sh in /usr/local/directadmin/scripts/custom)

I hope i didnt forget anything and this will be helpful for you.

Regards
 
soulshepard said:
X-Spam-Status: No, score=-0.6 required=3.2 tests=BAYES_00,FSL_HELO_BARE_IP_1,
HS_INDEX_PARAM,RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSWL_HI,RCVD_NUMERIC_HELO,
RDNS_NONE autolearn=no version=3.3.1
Click to expand...

You might need to update scores for tests. You can do it in file

/etc/mail/spamassassin/local.cf

Read this http://spamassassin.apache.org/tests_3_3_x.html to learn details about tests.

And of course enable autolearn, it can be used along side with sa-learn.

Details can be found here: http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html
 
SeLLeRoNe & zEitEr Thank you for your input. i'll start working on it.

currently reading the spamblocker 4.1 readme to understand all the edits that are required to make sure i dont break anything. still looks alot tho.

also if install spamblocker i assume eximconf=no is the correct way other wise the config file will be overwritten again with the older spamblocker?

thanks again i'll report my progress here.
 
Generally the default settings in my SpamBlocker exim.conf file for DirectAdmin, Version 4.x will work with defaults, but I don't recall all the details so I strongly suggest you read it and understand it.

Or hire me to install it for you :). Details here (nobaloney.net).

Jeff
 
You must log in or register to reply here.
Back
Top