On 2/10/2010 3:06 PM, Voytek Eymont wrote: > several of my users had recently quite a few 'inter-office' emails wrongly > diverted to 'spam user' mailbox: > > us...@thisdom us...@thisdom > 'thisdom' is hosted on the server, but, the users are remote to the > server, mail sent via several diferent isps > > I've looked at the spam headers, quite a few had several common issues > amongst them with spam scores 6 to 10 > > the first common tag I looked was: > > FH_DATE_PAST_20XX > > according to sa pages, that is a known false pos with previous version of sa > > http://wiki.apache.org/spamassassin/Rules/FH_DATE_PAST_20XX > > it says to run 'sa-update' > > as far as I can tell, I've updated actual spamassasin (from cpan prompt), > then did sa-update > > but, this morning, user's header still has date tag > --------------------------------------- > X-Spam-Flag: NO > X-Spam-Score: 1.855 > X-Spam-Level: * > X-Spam-Status: No, score=1.855 tagged_above=0.5 required=5.2 > tests=[AWL=-4.148, BAYES_00=-2.599, FH_DATE_PAST_20XX=3.188, > MISSING_SUBJECT=1.762, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033] > autolearn=no > ======================================= > > until I can figure this, what's the best way to exclude all users at > 'thisdom' from spam checking: >
add to your spamassassin/local.cf score FH_DATE_PAST_20XX 0 Wild guess is the new SA version installed to a different location, and amavisd is still using the old version of SA. -- Noel Jones ------------------------------------------------------------------------------ SOLARIS 10 is the OS for Data Centers - provides features such as DTrace, Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW http://p.sf.net/sfu/solaris-dev2dev _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/