-----Original Message-----
From: Eric Shubert [mailto:e...@shubes.net]
Sent: Tuesday, March 15, 2011 3:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Increasing SPAM catch rate
On 03/15/2011 01:46 PM, Scott Hughes wrote:
> Currently I use the following items / settings in order to stop the spam
> coming into my QMT system.
>
> Spamassassin required score 3.5
>
> Pyzor
>
> Razor2
>
> Spamdyke
>
> Spambox option with the clean-spam script turned on and set to five days
>
> Using SURBL and blacklists
>
> I believe that is all of them (at least all I can think of right now).
>
> My question is this: How can I fine-tune my system to better catch the
> spam. I have one user that gets about 30 spam emails a day and doesn't
> ever seem to trip spamassassin (in order to get the Spam folder to show
> up in her mailbox folders). They either are rejected outright or are let
> in as legit. email.
>
> Thanks,
>
> Scott
>
It's a little hard to help you tune things, when we don't know what your
settings are. Spamdyke and spamassassin configs would be helpful.
Are you using sa-learn at all?
Also, the headers from an example of spam that made it though would be
helpful.
--
-Eric 'shubes'
----------------------------------------------------------------------------
-----
Here are a few of the headers you requested. Please let me know if you need
more:
First one:
----------
Content-Filter: maildrop-toaster
Return-Path: <ca...@zuzafowk.info>
Delivered-To: patriotchevy.com-wendycr...@patriotchevy.com
Received: (qmail 24287 invoked by uid 89); 15 Mar 2011 20:27:56 -0000
Received: by simscan 1.4.0 ppid: 24208, pid: 24251, t: 3.7819s
scanners: attach: 1.4.0 clamav: 0.97
/m:53/d:12841 spam: 3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
mail.renshawauto.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.3 required=3.5 tests=HTML_MESSAGE,PYZOR_CHECK,
RDNS_NONE autolearn=no version=3.3.1
Received: from unknown (HELO rxqa61.zuzafowk.info) (173.192.152.61)
by mail.renshawauto.net with SMTP; 15 Mar 2011 20:27:52 -0000
Received-SPF: pass (mail.renshawauto.net: SPF record at zuzafowk.info
designates 173.192.152.61 as permitted sender)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default;
d=zuzafowk.info;
h=Message-ID:Date:Subject:From:Mime-Version:To:Content-type;
i=ca...@zuzafowk.info;
bh=uK8iNYBmvep7eyd+ULUqjjFXG6g=;
b=jTaw6rShPkLApwzP9hDGjPAAJuWndYe7pi0ZmZLfDFcKrym7JImVLihyGBs4h7cZAJxxu8skrV
ox
JvHOMtpAsss8tVh//VVpzWtKdIOTLDKoSP9CG813jfRMjkFVOg2t6PgzvZnkQwtNO74HRM06UPNH
89OTBfmSshm2qBohMRQ=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=zuzafowk.info;
b=phVYAPuP+a5BxGPsT10pYjC81jeMuW4JCFHjO2k1OHvil8o1mQ8VNCzpnktLf8x6UHcdKBt8jZ
je
SYvPmm04qnEJcTMkLfujSAhaJ6a4Tift1eGJbzilqHKOfK84CB2iMjNK6lqd0qauSVU9BpVE6iit
Ji67jYkWklyQFMdLSH0=;
Message-ID: <1450655...@rxqa61.zuzafowk.info>
Date: Tue, 15 Mar 2011 16:06:09 -0400
Subject: Get up to 4 pints of pick your own Blueberries in your own yard
now!
From: "Carol" <ca...@zuzafowk.info>
Mime-Version: 1.0
To: <wendycr...@patriotchevy.com>
Content-type: multipart/alternative;
boundary="_NextPart_MzU0OGI1NjczYjQ3OTU1Mzc4NjI1MzlkODBkNGEwNDY_"
Second one:
-----------
Content-Filter: maildrop-toaster
Return-Path: <miche...@fernber.info>
Delivered-To: patriotchevy.com-wendycr...@patriotchevy.com
Received: (qmail 21813 invoked by uid 89); 15 Mar 2011 20:03:12 -0000
Received: by simscan 1.4.0 ppid: 21804, pid: 21806, t: 2.4836s
scanners: attach: 1.4.0 clamav: 0.97
/m:53/d:12841 spam: 3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
mail.renshawauto.net
X-Spam-Level: **
X-Spam-Status: No, score=3.0 required=3.5 tests=HTML_MESSAGE,RDNS_NONE,
URIBL_DBL_SPAM autolearn=no version=3.3.1
Received: from unknown (HELO amke115.fernber.info) (209.190.34.115)
by mail.renshawauto.net with SMTP; 15 Mar 2011 20:03:10 -0000
Received-SPF: pass (mail.renshawauto.net: SPF record at fernber.info
designates 209.190.34.115 as permitted sender)
Date: Tue, 15 Mar 2011 16:00:33 -0400
From: "Michelle" <miche...@fernber.info>
Message-ID: <824.1267483445....@amke115.fernber.info>
To: <wendycr...@patriotchevy.com>
Mime-Version: 1.0
Subject: iPad pricing anyone can afford...
Content-type: multipart/alternative;
boundary="_NextPart_MjQzN2EzYWI5ODc0NWI3NjY4NDJkNzFkYzU0ZWYzYTA_"
Third one:
----------
Content-Filter: maildrop-toaster
Return-Path: <edw...@fernber.info>
Delivered-To: patriotchevy.com-wendycr...@patriotchevy.com
Received: (qmail 21374 invoked by uid 89); 15 Mar 2011 19:58:20 -0000
Received: by simscan 1.4.0 ppid: 21366, pid: 21368, t: 2.6098s
scanners: attach: 1.4.0 clamav: 0.97
/m:53/d:12841 spam: 3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
mail.renshawauto.net
X-Spam-Level: *
X-Spam-Status: No, score=2.0 required=3.5 tests=HTML_MESSAGE,RDNS_NONE,
SARE_MONEYTERMS,T_REMOTE_IMAGE autolearn=no version=3.3.1
Received: from unknown (HELO amke115.fernber.info) (209.190.34.115)
by mail.renshawauto.net with SMTP; 15 Mar 2011 19:58:18 -0000
Received-SPF: pass (mail.renshawauto.net: SPF record at fernber.info
designates 209.190.34.115 as permitted sender)
Date: Tue, 15 Mar 2011 15:55:28 -0400
From: "One Hundred Day Loans" <edw...@fernber.info>
Message-ID: <824.569145082....@amke115.fernber.info>
To: <wendycr...@patriotchevy.com>
Mime-Version: 1.0
Subject: Disappointed in your refund?
Content-type: multipart/alternative;
boundary="_NextPart_MjQzN2EzYWI5ODc0NWI3NjY1NjkxZWUyMzE0YjhlMDU_"
Thanks,
Scott
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
