Topic: Double [SPAM *] [SPAM *] - Single [SPAM *] goes to inbox

[rexgaylord]

Double [SPAM *] [SPAM *] in subject line and Single [SPAM *] shows up at inbox
I’ve been following Jesper's SA package scripts on 6.01 and Custom ISO and consistently have the same problem.  There seems to be more than one version of proc mail on the server and some spam is marked as [SPAM *] but delivered to the inbox.  When it is delivered to the junkmail folder it has a double [SPAM *] [SPAM *] in the subject line.  Some have point’s values higher than 15 so didn’t automatically get deleted.  I have run these scripts before on fresh installs and they are still working; only lately have my installs been going south like this.  Here is an example of the subject lines:
[SPAM 08.08] We're giving away Ipods for free!
SPAM 08.96] [SPAM 24.57] Windows XP Professional+Microsoft Office XP Professional = only $80

[patrickthickey]

I see the same behavior on the same configuration. It is clear there are two processes of some type whacking the mail but they are elusive to my less than developer eye.

Recently I have been testing this scenario and the results are frankly very close to optimum...

* install Ray's mailfront RBL option and use spamhaus.org as the list since it is a conservative one.

* kill SpamAssassin and utilize my client's Bayes filters (Thunderbird).

The RBL swats 75% of the spam at the SMTP level and the Thunderbird client Bayes filters are far more predictable and result in almost zero SPAM in my INBOX.

regards,

patrick

[rexgaylord]

Patrick, it took longer to find the howto than it did to enable the features in mailfront RBL.  Seems to be the solution for me and the reason I started using SME in the first place.  Thank you Ray Mitchell, Greg Zartman, Charlie Brady, and Gordon Rowell.

I’m not real clear on what you mean by utilize my client's Bayes filters (Thunderbird).  Are you talking about Mozilla e-mail client called Thunderbird?  Thanks.

[patrickthickey]

Which is very cross platform. It happens to have a very solid implementation of Bayes filters. You can train it to remove whatever SPAM is left after the mailfront contrib and leave the uncertainty of configuration and CPU overhead of SpamAssassin alone.

regards,

patrick

[duko]

Saw that this morning. I've said it before....for all you want to talk about United and their international profile http://freedevelopment.250free.com, they really seem to do business the right way. I'm interested to see just how much Kenyon had to do with these results, so next year will be interesting.

[SteveW]

Greetings,

I didn't feel this topic was adequately addressed so far in this thread.

I'm still having problems with some spam being processed twice, resulting in double spam indications in the subject line as mentioned previously in the thread. Also, some spam with a score over 15 is not being deleted.

The last thing I believe I did was install Jesper's all in one SpamAssassin script to the version that included automatic SA updates. I installed this over my existing SA install, which also came from a previous Jesper script. Currently then, I'm running 2.6.3-1.

Obviously, there are two different processes happening here, but I'm wondering if someone can guide me to a solution. I'm not sure where to begin. Thanks! Sme 6.0-1.
-
Steve

[sgt-spam]

Greetings,

I didn't feel this topic was adequately addressed so far in this thread.

I'm still having problems with some spam being processed twice, resulting in double spam indications in the subject line as mentioned previously in the thread. Also, some spam with a score over 15 is not being deleted.

The last thing I believe I did was install Jesper's all in one SpamAssassin script to the version that included automatic SA updates. I installed this over my existing SA install, which also came from a previous Jesper script. Currently then, I'm running 2.6.3-1.

Obviously, there are two different processes happening here, but I'm wondering if someone can guide me to a solution. I'm not sure where to begin. Thanks! Sme 6.0-1.
-
Steve

I agree, and am also having the same trouble.

Clean install of 6.01-01 (custom).  Loaded pagefault.org's antivirus and the smtpfront RBL lists front, then used Jesper's SpamAssassin scripts.

Mail double-marked as spam hits the junkmail folder, but the rest sits in the Inbox (even items marked higher than 15).  Also, when I 'tail /var/log/maillog', I see the following:

Code: [Select]

Aug 15 21:11:58 atf-guardian spamd[2554]: clean message (2.6/5.0) for qmaild:401 in 2.0 seconds, 9982 bytes.
Aug 15 21:11:58 atf-guardian spamd[2563]: clean message (0.3/5.0) for qmails:406 in 1.9 seconds, 7990 bytes.
Aug 15 21:11:58 atf-guardian spamd[24653]: connection from localhost [127.0.0.1] at port 47014
Aug 15 21:11:58 atf-guardian spamd[2580]: info: setuid to qmails succeeded
Aug 15 21:11:58 atf-guardian spamd[2580]: Creating default_prefs [/var/qmail/.spamassassin/user_prefs]
Aug 15 21:11:58 atf-guardian spamd[2580]: Cannot write to /var/qmail/.spamassassin/user_prefs: Permission denied
Aug 15 21:11:58 atf-guardian spamd[2580]: Couldn't create readable default_prefs for [/var/qmail/.spamassassin/user_prefs]
Aug 15 21:11:58 atf-guardian spamd[2580]: processing message (unknown) for qmails:406.
I'm a little concerned about the permission denied.  Nothing has been tweaked, and I've got the same results on my server at home and the one at the office.

Thanks for reading.

[k_graham]

Greetings,

I didn't feel this topic was adequately addressed so far in this thread.

I'm still having problems with some spam being processed twice, resulting in double spam indications in the subject line as mentioned previously in the thread. Also, some spam with a score over 15 is not being deleted.

I also found Spam Assassin frustrating and found it a great benefit to add the mail rules to minimize Spam Assassin work.

Spam assasin doesn't move the mail messages - it only adds the word SPAM.

Proc mail moves the messages so  you need to set a rule to move
SPAM header to Junk Mail folder
moving
[SPAM is illegal and will I think cause the behaviours you are mentioning. Don't include header brackets in the Proc mail rule.

The earlier Proc mail didn't mention this was illegal but the later version after 6 beta sme did  and thats when I finally got Spam Assasin to work for me, by removing the [ bracket that I had been including.

Have you gone to https://yourserverIP/server-user and set the Proc mail rule for each user?

In the case you are not including a bracket please tell us what you are including to direct the content to junk mail folder.

Ken

[sgt-spam]

Have you gone to https://yourserverIP/server-user and set the Proc mail rule for each user?

In the case you are not including a bracket please tell us what you are including to direct the content to junk mail folder.

Ken

Thanks Ken,

About a week ago this box was up and running just fine with the previously mentioned contribs - including SpamAssassin, which was successfully moving messages tagged as spam to the junkmail folder.  I had some problems with the box where mail stopped being delivered, and ended up reloading the box from scratch.

After reloading, the antivirus scanner was loaded first from pagefault.org, and then SpamAssassin.

During the initial load of that box, it was not necessary for me to touch each user's user-manager console to include a spam filter - that filter happened automatically.

I'm learning quickly, but still fairly new to SME.  Could I have missed something simple?


Thanks!

[k_graham]

I re-read Swerts-Knudsen procedure and you appear to be correct that it is not supposed to need additional proc mail rules.

I suggest trying a reboot after making changes in server-admin to spamassasin.

My install was from an upgrade and never did work for me as per how the info at Swert-Knudsen states but if you can go into user-manager as I mentioned and add a proc mail rule that finds SPAM in the header and have it sent to the junk mail box. Once I did that without the left bracket then it correctly worked for me.

I only have a few users so did each user individually.

Ken

[Knuddi]

All,

I would recommend using the new Spam Filter panel that has tried to overcome all the above issues as well as integrating configuration of RBLs.

Its still beta but running fine so far:
http://sme.swerts-knudsen.dk/howtos/howto_29.htm

See the seperate thread on this release.
http://forums.contribs.org/index.php?topic=23681.0

Rgds,
Jesper Knudsen

[k_graham]

All,

I would recommend using the new Spam Filter panel that has tried to overcome all the above issues as well as integrating configuration of RBLs.

Its still beta but running fine so far:
http://sme.swerts-knudsen.dk/howtos/howto_29.htm

See the seperate thread on this release.
http://forums.contribs.org/index.php?topic=23681.0

Rgds,
Jesper Knudsen

Looks pretty impressive - does it also purge the deleted files?

I notice users forget to purge messages for months if deleted messages are hidden in any folder, not just junk mail. It would be nice if deleted messages could have a set time to be purged from all folders as well.  Possibly 7 to 30 days after deletion.

Ken

[sgt-spam]

All,

I would recommend using the new Spam Filter panel that has tried to overcome all the above issues as well as integrating configuration of RBLs.

Its still beta but running fine so far:
http://sme.swerts-knudsen.dk/howtos/howto_29.htm

See the seperate thread on this release.
http://forums.contribs.org/index.php?topic=23681.0

Rgds,
Jesper Knudsen

Thanks for your hard work and dedication.  It's much appreciated!

[nald]

Hi,

I would like to ask regarding how spams behave.  I tried to install spam filtering by swert-knudsen.

http://sme.swerts-knudsen.dk/index.html?frame=http%3A//sme.swerts-knudsen.dk/howtos/howto_29.htm

I think it is working fine.  The only problem i have right now is that one of my client keep on receiving spams from time to time.  I was a bit confuse coz it came from his other email address which is forwarded to our mail server.

I tried also to send a spam from yahoo bulk mail and i wonder why it was received in my inbox.

Is there anything i can do?

Thanks...

Nald