jdow at earthlink
Jul 26, 2012, 10:45 AM
Post #5 of 10
(503 views)
Permalink
|
|
Re: ****SPAM**** (10.1 / 5.0) RE: Trouble shooting an installation of Spam Assassin for WindowsDate: Thu, 26 Jul 2012 06:50:01 -0700
[In reply to]
|
|
Amber, as a long time user of SpamAssassin might I ever so strongly
suggest you do NOT throw away spam marked email if there is ANY
possibility that something critical is present in your received
emails, like signup replies for mailing lists.
Use a markup header such as this one in your local.cf file or your own
user_prefs:
rewrite_header Subject *****SPAM***** _SCORE(00)_ **
That gives headers that look like:
*****SPAM***** 009.6 ** FROM MINISTER .....
You can use the *****SPAM***** as a flag to stick the mail in a spam
folder. The 009.6 can be used to sort the spam by score. Over a short
period of time you'll discover what values it might pay to check as
you ignore and trash the others.
This is a very fast and efficient way to check your spam for mismarked
ham. It happens, however rarely, and Murphy suggests it will be that
real letter from the doctor saying your medical test results require
an immediate consultation.
{^_^} Joanne
On 2012/07/26 08:49, Amber Clark wrote:
> Thanks for replying, Daniel.
>
> Ultimately, once I feel comfortable with SpamAssassin and I’m confident that
> it’s all working properly, I want to throw the switch so my mail server so the
> server rejects spam identified e-mail.
>
> The mail server is ArgoSoft Mail Server.Net which has built in support for
> SpamAssassin.
>
> Love,
>
> amber
>
> /blog.stopped-motion.com <http://blog.stopped-motion.com/>/
>
> *From:*Daniel Lemke [mailto:lemke [at] jam-software]
> *Sent:* Thursday, July 26, 2012 8:05 AM
> *To:* 'Amber Clark'; users [at] spamassassin
> *Subject:* RE: ****SPAM**** (10.1 / 5.0) RE: Trouble shooting an installation of
> Spam Assassin for WindowsDate: Thu, 26 Jul 2012 06:50:01 -0700
>
> SpamAssassin doesn’t complain, you could actually feed him anything you want.
>
> It will just not give you any reasonable results.
>
> As you can see from the header analysis there several rules that point to an
> invalid message format:
>
> MISSING_DATE
>
> MISSING_FROM
>
> MISSING_HEADERS
>
> MISSING_MID
>
> MISSING_SUBJECT
>
> NO_HEADERS_MESSAGE
>
> NO_RECEIVED
>
> NO_RELAYS
>
> NULL_IN_BODY
>
> What are you using the spam filter for?
>
> Regards,
>
> Daniel
>
> *From:*Amber Clark [mailto:amber [at] clarkzoo] <mailto:[mailto:amber [at] clarkzoo]>
> *Sent:* Thursday, July 26, 2012 4:49 PM
> *To:* Daniel Lemke; users [at] spamassassin
> <mailto:users [at] spamassassin>
> *Cc:* Support SpamAssassin
> *Subject:* RE: ****SPAM**** (10.1 / 5.0) RE: Trouble shooting an installation of
> Spam Assassin for WindowsDate: Thu, 26 Jul 2012 06:50:01 -0700
>
> My previous attempt to reply was rejected by your mail server as spam. I had
> attached two samples files, one flagged as spam correctly and one not flagged.
>
> Humorously, you can tell my installation of SpamAssassin is working because it
> was flagged.
>
> Love,
>
> amber
>
> /blog.stopped-motion.com <http://blog.stopped-motion.com/>/
>
> *From:*Amber Clark [mailto:amber [at] clarkzoo] <mailto:[mailto:amber [at] clarkzoo]>
> *Sent:* None
> *To:* 'Daniel Lemke'; users [at] spamassassin
> <mailto:users [at] spamassassin>
> *Cc:* 'Support SpamAssassin'
> *Subject:* ****SPAM**** (10.1 / 5.0) RE: Trouble shooting an installation of
> Spam Assassin for WindowsDate: Thu, 26 Jul 2012 06:50:01 -0700
>
> Good morning, Daniel.
>
> First thank you, for responding, but I fail to see the relevance of your
> response. The included output from spamassassin.exe show it’s processing the
> files without complaint, save for one warning, and properly tagging the message
> as spam whereas the service (spamd.exe) is failing to do so.
>
> I’ve attached two sample files to this message, one that has been correctly
> tagged as spam and one that was improperly not tagged as spam.
>
> Could you elaborate, please?
>
> Love,
>
> amber
>
> /blog.stopped-motion.com <http://blog.stopped-motion.com/>/
>
> *From:*Daniel Lemke [mailto:lemke [at] jam-software]
> <mailto:[mailto:lemke [at] jam-software]>
> *Sent:* Thursday, July 26, 2012 1:01 AM
> *To:* 'Amber Clark'; users [at] spamassassin
> <mailto:users [at] spamassassin>
> *Cc:* Support SpamAssassin
> *Subject:* RE: Trouble shooting an installation of Spam Assassin for Windows
>
> Hi Amber,
>
> The problems are related to the same cause: You are trying to scan a *.msg file
> which is a proprietary message format of MS Outlook.
>
> SpamAssassin only accepts raw text formats which should be conform to the RFC822
> standard.
>
> Regards,
>
> Daniel
>
> *From:*Amber Clark [mailto:amber [at] clarkzoo] <mailto:[mailto:amber [at] clarkzoo]>
> *Sent:* Wednesday, July 25, 2012 6:25 PM
> *To:* users [at] spamassassin <mailto:users [at] spamassassin>
> *Subject:* Trouble shooting an installation of Spam Assassin for Windows
>
> Good morning!
>
> I’m running into some problems I need some help in trouble shooting.
>
> /The Problems:/
>
> *Problem A* – Scoring information does not show up in HAM e-mails.
>
> *Problem B* – Custom rules don’t see to be applied.
>
> *Problem C *– SpamAssassin.exe and spamd.exe appear to score spam differently.
>
> /The Platform:/
>
> Here is specific information about the installation.
>
> Windows Server 2003
>
> SpamAssassin 3.3.2
>
> Perl 5.8.9
>
> spamd.exe is running as a service
>
> Please let me know if you need any additional information on the installation.
>
> /Specifics about The Problems:/
>
> *Problem A*
>
> In the etc\spamassassin\local.cf I’ve made the following line:
>
> add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_
> autolearn=_AUTOLEARN_ version=_VERSION_
>
> *Problem B*
>
> In the etc\spamassassin\local.cf I’ve made the following lines:
>
> body LOCAL_FREESCORE360 /FreeScore360/
>
> score LOCAL_FREESCORE360 5.0
>
> describe LOCAL_FREESCORE360 Push e-mails that contain FreeScore360 to the top
>
> I believe I’ve created that custom rule correctly, but I’m not sure.
>
> *Problem C*
>
> There are some spam e-mails I get that do not get flagged by spamd.exe but
> spamassassin.exe does flag it. Here is the header output from spamassassin.exe
> on one sample e-mail.
>
> C:\Program Files\JAM Software\SpamAssassin for Windows>spamassassin.exe
> "e:Notification# Your Report Has Changed.0.msg"
>
> Jul 25 09:18:52.743 [4220] warn: razor2: razor2 check failed: Bad file
> descriptor Insecure dependency in open while running with -T switch at
> /<C:\Program Files\JAM Software\SpamAssassin for
> Windows\sawin.dll>Razor2/Client/Config.pm line 51
>
> 2, <GEN4> line 1. at /<C:\Program Files\JAM Software\SpamAssassin for
> Windows\sawin.dll>Mail/SpamAssassin/Plugin/Razor2.pm line 325.
>
> Received: from localhost by vmzoomail
>
> with SpamAssassin (version 3.3.2);
>
> Wed, 25 Jul 2012 09:18:52 -0700
>
> X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on vmzoomail
>
> X-Spam-Flag: YES
>
> X-Spam-Level: *******
>
> X-Spam-Status: Yes, score=7.4 required=5.0 tests=FUZZY_CREDIT,MISSING_DATE,
>
> MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NORMAL_HTTP_TO_IP,
>
> NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS,NULL_IN_BODY autolearn=no
>
> version=3.3.2
>
> MIME-Version: 1.0
>
> Content-Type: multipart/mixed; boundary="----------=_50101C6C.16BA0000"
>
> This is a multi-part message in MIME format.
>
> (truncated)
>
> As a note, this e-mail should’ve tripped the LOCAL_FREESCORE360 rule.
>
> Any help would be greatly appreciated.
>
> Thanks!
>
> Love,
>
> amber
>
> /blog.stopped-motion.com <http://blog.stopped-motion.com/>/
>
> --------------------------------------------------------------------------------
>
>
>
>
> --------------------------------------------------------
> JAM Software GmbH
> Managing Director: Joachim Marder
> Am Wissenschaftspark 26 * 54296 Trier * Germany
> Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29
> Commercial register number HRB 4920 (AG Wittlich) http://www.jam-software.com
>
|
message-rfc822.eml
