RE: FW: Tons of spam getting through

2014-08-22 Thread Greg Ledford
>Changed and Amavis has been restarted. I’ll check the headers on the next >piece of spam to come through. Thanks I’m still trying to figure out how illegitimate stuff like this is getting through. It’s obviously a virus (which was caught) but then why did the email get through? I see the flag

Re: FW: Tons of spam getting through

2014-08-20 Thread Matus UHLAR - fantomas
On Tue, 19 Aug 2014, Greg Ledford wrote: What exactly are SA headers supposed to look like? On 19.08.14 13:05, John Hardin wrote: SA headers look like this: X-Spam-Status: No, score=0.138 tagged_above=-100 required=5 tests=[MISSING_MID=0.14, SPF_HELO_PASS=-0.001, SPF_PASS=-0.0

RE: FW: Tons of spam getting through

2014-08-19 Thread John Hardin
On Tue, 19 Aug 2014, Greg Ledford wrote: What exactly are SA headers supposed to look like? SA headers look like this: X-Spam-Flag: NO X-Spam-Score: 0.138 X-Spam-Level: X-Spam-Status: No, score=0.138 tagged_above=-100 required=5 tests=[MISSING_MID=0.14, SPF_HELO_PASS=-0.001, S

RE: FW: Tons of spam getting through

2014-08-19 Thread Greg Ledford
What exactly are SA headers supposed to look like? I’m still getting quite a bit of spam coming through. It’s blocking quite a bit but I’m not so sure SA is even doing its job. Is there maybe a way to just block everything from anything .us? Stuff like this is being missed (what’s really amusin

RE: FW: Tons of spam getting through

2014-08-12 Thread Greg Ledford
>Use sa_tag_level_deflt = -100; >All your emails will have the SpamAssassin headers. Changed and Amavis has been restarted. I’ll check the headers on the next piece of spam to come through. Thanks for the great help!

Re: FW: Tons of spam getting through

2014-08-12 Thread Karl Johnson
On Tue, Aug 12, 2014 at 2:50 PM, Greg Ledford wrote: >>Take a look at the "sa_tag_level_deflt" in your amavisd configuration > file. > > $sa_tag_level_deflt = 5.5; > > $sa_tag2_level_deflt= 6.0; > > $sa_spam_subject_tag= '***POSSIBLE SPAM***'; > > $sa_kill_level_deflt= 7.0; >

FW: Tons of spam getting through

2014-08-12 Thread Greg Ledford
>Take a look at the "sa_tag_level_deflt" in your amavisd configuration file. $sa_tag_level_deflt = 5.5; $sa_tag2_level_deflt= 6.0; $sa_spam_subject_tag= '***POSSIBLE SPAM***'; $sa_kill_level_deflt= 7.0; I did. I bumped the levels a bit because they were catching some legitimate e