Re: Fwd: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Robert Kudyba
> > :0: > * ? formail -x"From:" -x"From" -x"Sender:" | egrep -is -f $HOME/.whitelist > $ORGMAIL > >>>I assume you checked his explicit whitelisted senders file Indeed only 2 addresses: redac...@comcast.net redac...@pegasus.rutgers.edu >>> > :0fw: > | /usr/bin/spamc > ... :0fw: spamassas

Re: Fwd: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread John Hardin
On Sat, 23 Jul 2016, Robert Kudyba wrote: :0: * ? formail -x"From:" -x"From" -x"Sender:" | egrep -is -f $HOME/.whitelist $ORGMAIL I assume you checked his explicit whitelisted senders file? :0fw: | /usr/bin/spamc ... :0fw: spamassassin.lock * < 256000 | spamassassin You pass it throug

Re: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Robert Kudyba
Forgot to include the hook to procmailrc: cat /etc/procmailrc DROPPRIVS=yes PATH=/bin:/usr/bin:/usr/local/bin SHELL=/bin/sh # Spamassassin INCLUDERC=/etc/mail/spamassassin/spamassassin-spamc.rc :0fw * <300 000 |/usr/bin/spamassassin [root@dsm ~]# cat /etc/mail/spamassassin/spamassassin-s

Re: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Robert Kudyba
Sorry forgot to reply all. Sendmail has a .mc file which creates a .cf file here's ours: include(`/usr/share/sendmail-cf/m4/cf.m4')dnl VERSIONID(`setup for linux')dnl OSTYPE(`linux')dnl dnl # dnl # Do not advertize sendmail version. dnl # dnl define(`confSMTP_LOGIN_MSG', `$j Sendmail; $b')d

Re: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Reindl Harald
Am 24.07.2016 um 02:55 schrieb Reindl Harald: STAY ON LIST Am 24.07.2016 um 02:50 schrieb Robert Kudyba: OK then the next question is why would some messages not be getting scanned whilst others are? What else can I check? Could another config file be bypassing? There's nothing in the whiteli

Re: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Reindl Harald
STAY ON LIST Am 24.07.2016 um 02:50 schrieb Robert Kudyba: OK then the next question is why would some messages not be getting scanned whilst others are? What else can I check? Could another config file be bypassing? There's nothing in the whitelist unless I'm not checking all the possible paths

Re: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Reindl Harald
Am 24.07.2016 um 02:14 schrieb Robert Kudyba: sample header of a missed spam/false negative: http://txt.do/5em14 there are no spamassassin headers - so what is your evidence that this message ever went through spamassassin? signature.asc Description: OpenPGP digital signature

Fwd: too many missed spams/false negatives w/ SA 3.4.1 on sendmail, help w config?

2016-07-23 Thread Robert Kudyba
We have a user who has about a 50% missed rate on spam detection. I'm wondering if his user prefs or something is preventing scanning of all messages? SpamAssassin version 3.4.1, running on Perl version 5.20.3, sendmail Version 8.15.2 The contents of the user_prefs file: # How many points befo