Re: spam from unresolved ip
Igor, You are looking at the document for version 3.1.x But if i look at the verion in your example mail i see X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.aaa.ru Perhaps that's the reason why? Igor wrote: When sendmail receive mail it does revers dns lookup, and write results in header Received: in brackets (): Received: from smtp.osdl.org (smtp.osdl.org [65.172.181.4]) by ... I look at http://spamassassin.apache.org/tests_3_1_x.html (Tests Performed: v3.1.x) and have not found checks on unresolved ip. How to force spamassassin for scoring unresolved ip ? I have noticed, that half of spam, which passes spamassassin on my server, goes from unresolved ip, like this letter: Return-Path: [EMAIL PROTECTED] Received: from CEMAL ([85.106.173.242]) by mail.aaa.ru (8.13.4/8.13.4) with SMTP id jAFJ0N0o023462; Tue, 15 Nov 2005 22:00:25 +0300 Message-ID: [EMAIL PROTECTED] From: =?koi8-r?B?9PLl7unu5w==?= [EMAIL PROTECTED] To: mail [EMAIL PROTECTED] Subject: =?koi8-r?B?0NLP1MnXz9PUz9HOycUgzcHOydDVzNHDydHN?= Date: Tue, 15 Nov 2005 11:58:21 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0E11_01C5EA2A.64132730 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.aaa.ru X-Spam-Status: No, score=4.2 required=5.0 tests=HTML_FONT_BIG,HTML_MESSAGE, RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK autolearn=disabled version=3.0.4 X-Spam-Level: Status: -- Met vriendelijke groet, Richard Pijnenburg PremiumXS B.V. Bouwerij 4 1185 XX Amstelveen T: 020 386 84 05 F: 020 386 84 04 G: 06 47 92 85 28 E: [EMAIL PROTECTED]
Spamassassin timeout
Dear List,
From time to time we have the problem that spamassasin is timingout.
This only happens when we recieve alot of mail at once.
Is there anything to do against it ?
I'm running Postfix+cyrus+spamassasin+clamv+amavisd
I hope someone can help me
Nov 8 10:18:43 mail.premiumxs.nl /usr/local/sbin/amavisd[3295]: (03295-14) SA TIMED OUT,
backtrace: at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/DBBasedAddrList.pm
line 109\n\teval {...} called at
/usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/DBBasedAddrList.pm line
109\n\tMail::SpamAssassin::DBBasedAddrList::finish('Mail::SpamAssassin::DBBasedAddrList=HASH(0xa389c6c)')
called at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/AutoWhitel
ist.pm line
217\n\tMail::SpamAssassin::AutoWhitelist::finish('Mail::SpamAssassin::AutoWhitelist=HASH(0xa67d7ac)')
called at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/EvalTests.pm line
931\n\teval {...} called at
/usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/EvalTests.pm line 898\n\tMail::Spa
mAssassin::PerMsgStatus::check_from_in_auto_whitelist('Mail::SpamAssassin::PerMsgStatus=HASH(0xa3ef970)')
called at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2340\n\t...
--
With kind regards,
Richard Pijnenburg
Auto whitelisting
Dear list, i'm not sure if i should put it here or on the amavisd mailing list. I'm using Amavisd-new and spamassassin (3.0.4) in one of the spam reports i saw the folowing: 4.5 AWLAWL: From: address is in the auto white-list maybe that i interperted it incorrect but shouldn't it be a negative score? If so, could anyone help me to solve this? -- With kind regards, Richard Pijnenburg PremiumXS B.V. Bouwerij 4 1185 XX Amstelveen T: 020 386 84 05 F: 020 386 84 04 D: 06 47 92 85 28 E: [EMAIL PROTECTED]
Re: Auto whitelisting
Verry much for your help boy's it's alot clearer now. Matt Kettler wrote: At 09:19 AM 8/30/2005, Richard Pijnenburg wrote: i'm not sure if i should put it here or on the amavisd mailing list. I'm using Amavisd-new and spamassassin (3.0.4) in one of the spam reports i saw the folowing: 4.5 AWLAWL: From: address is in the auto white-list maybe that i interperted it incorrect but shouldn't it be a negative score? If so, could anyone help me to solve this? As someone else pointed out. It's not a whitelist, despite it's name. Really a better name would be: Automatic History Tracking Score Averager with Black and White List Effects But AHTSABWLE is a mouthful. Also, just because the AWL assigns a positive score, it doesn't always mean it's blacklisted the user, or thinks the message is spam. It may mean it thinks that the message was too strongly negative and better deserved a score closer to 0. You'd need to look at the final message score to tell the difference: http://wiki.apache.org/spamassassin/AwlWrongWay -- Met vriendelijke groet, Richard Pijnenburg PremiumXS B.V. Bouwerij 4 1185 XX Amstelveen T: 020 386 84 05 F: 020 386 84 04 D: 06 47 92 85 28 E: [EMAIL PROTECTED]
