Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: jonash on September 20, 2007, 09:05:45 PM

Title: Spamassassin too good?
Post by: jonash on September 20, 2007, 09:05:45 PM

Hi,
I'm running SME 7.2 with
spamassassin-3.2.3-44.el4
smeserver-spamassassin-1.4.0-14.el4.sme
smeserver-spamassassin-features-0.0.2-0


config show spamassassin
spamassassin=service
    BayesAutoLearnThresholdNonspam=0.10
    BayesAutoLearnThresholdSpam=4.00
    DNSAvailable=yes
    MessageRetentionTime=15
    OkLanguages=all
    OkLocales=all
    RejectLevel=12
    ReportSafe=0
    Sensitivity=medium
    SkipRBLChecks=0
    SortSpam=enabled
    Subject=[SPAM]
    SubjectTag=enabled
    TagLevel=5
    UseBayes=1
    status=enabled

After I did the upgrade to 7.2, all spams seems to have dissappered....
There are almost no spam in junkmail folder, and some come to the inbox. Before the upgrade, I had about 20-30 spam in junkmail everyday, some of them false...
Im afraid im loosing some "real" mails...


Have the settings beeing changed in some way? Any help appreciated...

Jonas

Edit:
This is probably the answer; spam are deleted in smtp!
 config show qpsmtpd
qpsmtpd=service
    Bcc=disabled
    BccMode=cc
    BccUser=maillog
    DNSBL=enabled
    LogLevel=8
    MaxScannerSize=25000000
    RBLList=bl.spamcop.net:combined.njabl.org:dnsbl.ahbl.org:dnsbl-1.uceprotect.net:
              dnsbl-2.uceprotect.net:list.dsbl.org:multihop.dsbl.org:psbl.surriel.com:zen.spamhaus.org
    RHSBL=enabled
    RequireResolvableFromHost=no
    SBLList=bogusmx.rfc-ignorant.org:multi.surbl.org:black.uribl.com:rhsbl.sorbs.net:bulk.rhs.mailpolice.com:
               fraud.rhs.mailpolice.com:porn.rhs.mailpolice.com:adult.rhs.mailpolice.com:ex.dnsbl.org:
               blackhole.securitysage.com
    access=public
    status=enabled

Title: Re: Spamassassin too good?
Post by: chris burnat on September 21, 2007, 01:00:58 AM

Jonash, yes, the RBL are blocking at the front end.  However, be aware that the lists you have implemented are far from conservative, you may (and will) block genuine mail sooner or later.  Check the FAQ and other places on this subject, you will find that you may only need zen.spamhaus.org:whois.rfc-ignorant.org:dnsbl.njabl.org.

Title: Re: Spamassassin too good?
Post by: jonash on September 21, 2007, 06:44:58 AM

Thank you for the advice; I will take a look!

Jonas ( from the other side of the globe...  :smile: )

Title: Re: Spamassassin too good?
Post by: byte on September 21, 2007, 11:19:33 PM

Also check your /var/log/qpsmtpd/current for details on what list is blocking and check whether it's legitimate, basically keep your eye as always on your logs.