Thank you,
Yes, DCC Razor and Pyzor are installed and running.
I will look into your other suggestions and let you know.
On 1/30/18 1:37 PM, David Jones wrote:
On 01/30/2018 11:47 AM, Computer Bob wrote:
Also:
I modified the following SA local.cf items:
---------------------------------------------------------------------------------------------------
# Add *****SPAM***** to the Subject header of spam e-mails
#
rewrite_header Subject *****SPAM***** <---- Uncommented
# Use Bayesian classifier (default: 1)
#
use_bayes 1 <---- Uncommented
# Bayesian classifier auto-learning (default: 1)
#
bayes_auto_learn 1 <---- Uncommented
# Set headers which may provide inappropriate cues to the Bayesian
# classifier
#
# bayes_ignore_header X-Bogosity
# bayes_ignore_header X-Spam-Flag
# bayes_ignore_header X-Spam-Status
---------------------------------------------------------------------------------------------------
I added the following:
---------------------------------------------------------------------------------------------------
#dcc
use_dcc 1
dcc_path /usr/local/bin/dccproc
#pyzor
use_pyzor 1
pyzor_path /usr/bin/pyzor
#razor
use_razor2 1
razor_config /etc/razor/razor-agent.conf
--------------------------------------------------------------------------------------------------
I also copied the current KAM.cf to the /etc/spamassassin folder.
Any further suggestions ?
Did you actually install DCC, Razor, and Pyzor? Are you seeing any
DCC, RAZOR, and PYZOR rule hits in your mail logs?
Train your Bayes properly so you see BAYES_XX hits in your mail logs
and bump up your BAYES_XX scores a little on both ends.
Search the SA archives for recent tuning suggestions:
- Add senderscore.org RBL
- Add Lashback RBL
Adjust MailSpike scores on the whitelist (negative) side:
http://mailspike.org/usage.html
If you are running Postfix as your MTA definitely enable postscreen
with RBL weighting: https://lists.gt.net/spamassassin/users/199347
Enable greylisting in your MTA like SQLgrey.
