Re: Add spamassassin triggered rules in logs when email is blocked

2014-08-29 Thread Karl Johnson
On Fri, Aug 29, 2014 at 3:11 PM, Karsten Bräckelmann wrote: > On Fri, 2014-08-29 at 11:27 -0400, Karl Johnson wrote: > > I'm using amavisd-new-2.9.1 and SpamAssassin v3.3.1. I would like to > > know if it's possible to add Spamassassin triggered rules when an >

Add spamassassin triggered rules in logs when email is blocked

2014-08-29 Thread Karl Johnson
Hello, I'm using amavisd-new-2.9.1 and SpamAssassin v3.3.1. I would like to know if it's possible to add Spamassassin triggered rules when an email is blocked because I discard the email when it's spam and I want to know why it's blocked (which rules). For now I only have the score (hits) in mail

Re: FW: Tons of spam getting through

2014-08-12 Thread Karl Johnson
On Tue, Aug 12, 2014 at 2:50 PM, Greg Ledford wrote: >>Take a look at the "sa_tag_level_deflt" in your amavisd configuration > file. > > $sa_tag_level_deflt = 5.5; > > $sa_tag2_level_deflt= 6.0; > > $sa_spam_subject_tag= '***POSSIBLE SPAM***'; > > $sa_kill_level_deflt= 7.0; >

Re: Tons of spam getting through

2014-08-12 Thread Karl Johnson
On Tue, Aug 12, 2014 at 1:27 PM, Greg Ledford wrote: > > It should just be called by Amavis directly. Sometimes it scans and > sometimes it doesn't. I just found another obvious piece of email that SA > and Amavis scanned and missed. I tried to attach the headers but they are > so blatant that th

Re: Rule for single URL in body with very few text

2014-08-12 Thread Karl Johnson
On Mon, Aug 11, 2014 at 5:46 PM, Karsten Bräckelmann wrote: > On Mon, 2014-08-11 at 15:48 -0400, Karl Johnson wrote: > > Is there any rule to score an email with only 1 URL and very few text? > > It could trigger only text formatted email because they usually aren't >

Re: Running SA without the bayesian classifier

2014-08-12 Thread Karl Johnson
On Tue, Aug 12, 2014 at 6:08 AM, Matteo Dessalvi wrote: > Hi all. > > Thanks for all the answers. I am afraid I was being naive. > I was explicitly thinking of a scenario like this: filter as > much as possible 'unsolicited email' sent by some (possibly) > 'infected' account. > > I thought that t

Rule for single URL in body with very few text

2014-08-11 Thread Karl Johnson
Hello all, I've recently installed Spamassassin (v3.3.1) + Amavis on a SMTP MTA server which is only used for outgoing email. I had to install SA to deal with compromised accounts that are used to send spam. It works pretty good for now however spam with only 1 URL in the body and few text are sti