Re: Negative score, yet marked as spam.

2010-11-23 Thread Benny Pedersen

On tir 23 nov 2010 08:42:16 CET, Ger Apeldoorn wrote


disable rbl tests in mailscanner

Wouldn't that pass through much more spam?


not if same rbl is used in spamassassin


Is this a known bug?


define bug ?


Do you perhaps have a link to more information?


nope, if you use a rbl in mailscanner that is not used in spamassassin  
then it could be added to spamassassin, but most of the time it does  
not help



Google didn't turn up anything relevant.


might be that you did not show a sample that spamassassin find as ham  
where you liked to get it detected as spam



Thank you very much,


no problem


PS: I'm mailing this from another address to prevent the mail-banner
to be appended. Sorry if this breaks the thread.


it does not break anything here as long you just reply to maillist

--
xpoint http://www.unicom.com/pw/reply-to-harmful.html




Re: Negative score, yet marked as spam.

2010-11-23 Thread RW
On Tue, 23 Nov 2010 08:42:16 +0100
Ger Apeldoorn i...@gerapeldoorn.nl wrote:

  disable rbl tests in mailscanner
 
 Wouldn't that pass through much more spam? Is this a known bug?

It appears from the log message that mailscanner is checking SORBS
independently of Spamassassin. This doesn't appear to be a Spamassassin
problem. Spamassassin simply classifies mail - it doesn't do anything
with it. 

I think you should review your mailscanner configuration - simply
disabling all blocklists might cause you a big rise in spam if
mailscanner is currently handling spamhaus checks.

I don't know much about mailscanner, but it seems odd that it's running
Spamassassin on a message that's going to be rejected by a blocklist.
Possibly mailscanner has it's own internal scoring system, which is
being misused. Normally you reject on very reliable blocklists and
pass-on the rest to SA which can score-in the other, less-reliable,
lists.




Re: Negative score, yet marked as spam.

2010-11-23 Thread Ger Apeldoorn
On Tue, Nov 23, 2010 at 2:09 PM, RW rwmailli...@googlemail.com wrote:
 On Tue, 23 Nov 2010 08:42:16 +0100
 Ger Apeldoorn i...@gerapeldoorn.nl wrote:

  disable rbl tests in mailscanner

 Wouldn't that pass through much more spam? Is this a known bug?

 It appears from the log message that mailscanner is checking SORBS
 independently of Spamassassin. This doesn't appear to be a Spamassassin
 problem. Spamassassin simply classifies mail - it doesn't do anything
 with it.

 I think you should review your mailscanner configuration - simply
 disabling all blocklists might cause you a big rise in spam if
 mailscanner is currently handling spamhaus checks.

 I don't know much about mailscanner, but it seems odd that it's running
 Spamassassin on a message that's going to be rejected by a blocklist.
 Possibly mailscanner has it's own internal scoring system, which is
 being misused. Normally you reject on very reliable blocklists and
 pass-on the rest to SA which can score-in the other, less-reliable,
 lists.

You are absolutely right! I have disabled this blocklist in the
Mailscanner config. (I was under the impression that Mailscanner left
all checking to Spamassassin... :(  )

Anyway, thank you very much!

Regards,
Ger.


Re: Negative score, yet marked as spam.

2010-11-23 Thread John Hardin

On Tue, 23 Nov 2010, Ger Apeldoorn wrote:


disable rbl tests in mailscanner


Wouldn't that pass through much more spam? Is this a known bug?

Do you perhaps have a link to more information? Google didn't turn up
anything relevant.


I suggest you ask about this on the Mailscanner list. SA is returning a 
negative score (primarily due to Bayes) and Mailscanner is adjusting that 
score - apparently incorrectly - due to a RBL it is using in addition to 
the ones SA is checking.


If the glue is ignoring the score SA provides, a misclassification is not 
SA's fault.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Homeland Security: Specializing in Tactical Band-aids for Strategic
  Problems.   -- Eric K. in Bruce Schneier's blog
---
 24 days until TRON Legacy


Re: Negative score, yet marked as spam.

2010-11-23 Thread John Wilcock

Le 23/11/2010 15:36, Ger Apeldoorn a écrit :

You are absolutely right! I have disabled this blocklist in the
Mailscanner config. (I was under the impression that Mailscanner left
all checking to Spamassassin...:(   )


While MailScanner *can* check RBLs itself, doing so is only recommended 
in cases where SpamAssassin is *not* used.


And even then it is best to either let your MTA do the check, if you're 
sure that the RBL is reliable enough, or to set MailScanner so that at 
least two RBLs must concur before a message is considered as spam.


If any more details are needed we should take this discussion to the 
MailScanner list.


John.

--
-- Over 4000 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages- www.tradoc.fr


Re: Negative score, yet marked as spam.

2010-11-22 Thread Benny Pedersen

On man 22 nov 2010 14:05:46 CET, Ger Apeldoorn wrote


Is this a known bug and if so, is there a workaround available?


disable rbl tests in mailscanner

--
xpoint http://www.unicom.com/pw/reply-to-harmful.html




Re: Negative score, yet marked as spam.

2010-11-22 Thread Ger Apeldoorn
 disable rbl tests in mailscanner

Wouldn't that pass through much more spam? Is this a known bug?

Do you perhaps have a link to more information? Google didn't turn up
anything relevant.

Thank you very much,
Ger.

PS: I'm mailing this from another address to prevent the mail-banner
to be appended. Sorry if this breaks the thread.