View Full Version : SpamAssassin Filtering
tboorman
14/01/2007, 19:40
Has anyone managed to get SpamAssassin filtering working for their Adsl24 email? I've enabled it in cPanel, but looking at the headers of my incoming emails, it does not appear to be processing them. Any help that anyone can give would be appreciated.
Are you sure you are receiving spam:confused:
tboorman
15/01/2007, 10:35
Yes, I am quite positive about that - you would not believe how much Spam I get.
You should see my email acounts then. I get around 200 plus emails per day thats all spam and its increasing everyday.
The last bit of info I read about spam emails was that 78% of all emails are spam so now we know what we are up against.
Should make it illegal to send such crap in my opinion.
Regards,
tboorman
15/01/2007, 12:33
You should see my email acounts then. I get around 200 plus emails per day thats all spam and its increasing everyday.
The last bit of info I read about spam emails was that 78% of all emails are spam so now we know what we are up against.
Should make it illegal to send such crap in my opinion.
Regards,
It is illegal in some countries - the trouble is the volume of Spam coming from countries that do not seem willing to legislate against it.
The question by tboorman?.... is SpamAssassin filtering working:confused:
I guess mines OK. I havent received any yet.
tboorman
15/01/2007, 15:36
The question by tboorman?.... is SpamAssassin filtering working:confused:
I guess mines OK. I havent received any yet.
Cliff,
Could you please have a look at the message headers for one of your incoming emails to see if there's anything to indicate that SpamAssassin has processed it?
Tim wrote:
Cliff,
Could you please have a look at the message headers for one of your incoming emails to see if there's anything to indicate that SpamAssassin has processed it?
__________________
I do not see any indication to indicate that spamassassin has processed my mail. I would not expect it to mark the mail header. Although i would expect it to divert the mail to another folder, which i assume you could set to delete automatically.(unless you want to double check mail before you delete all).
You can set rules to increase the level of filtering, but this is not straight forward and could delete legitimate mail if not done properly.
At present i have set my mail to receive it by IMAP and not POP. This way i can leave the body of the email on the server and view it from any PC i set the account on. The mail is automatically deleted if i action it from the PC.
Cliff:)
tboorman
15/01/2007, 19:00
Cliff,
Could you try the Generic Test for Unsolicited Bulk Email (http://spamassassin.apache.org/gtube/) please?
My technicians have sorted SpamAssassin out. Please now check your headers.
Mine says:
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on pluto.adsl24.co.uk
X-Spam-Level:
X-Spam-Status: No, score=-0.0 required=5.0 tests=NO_RELAYS autolearn=ham
version=3.1.7
Regards,
tboorman
15/01/2007, 19:14
I think Brian has fixed something, as my incoming email is now being processed by SpamAssassin. BTW Cliff, you should see lines like the following in the message header:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on pluto.adsl24.co.uk
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=1002.0 required=5.0 tests=GTUBE,HTML_MESSAGE,
HTML_SHORT_LENGTH,MISSING_SUBJECT autolearn=no version=3.1.7
Thanks for sorting this out Brian :).
I will bend over backwards as you guys know to provide a 1st class service, and I hope Im doing that.
Regards all.
tboorman
15/01/2007, 19:39
I will bend over backwards as you guys know to provide a 1st class service, and I hope Im doing that.
Regards all.
You certainly are Brian. Thanks again.
tboorman
15/01/2007, 19:55
And what's even better, is that if you enable Spam Box, emails identified as spam by SpamAssassin are delivered to a seperate mail folder named "spam" :). This was a seemingly impossible thing to do for my 2 previous ISPs.
Thats another star you owe me :)
And what's even better, is that if you enable Spam Box, emails identified as spam by SpamAssassin are delivered to a seperate mail folder named "spam" :). This was a seemingly impossible thing to do for my 2 previous ISPs.
tboorman
15/01/2007, 21:35
Absolutely!
Expand header reveals details of spam filter. Should we also see a stamp to indicate virus scanner has processed mail !!
Will look into that Cliff and get back to you asap.
Regards,
Technicians are looking at it, will get back when I have anything to post.
This has been resolved. The techs says:
"clamd dosent realy tag anything on the email"
But I have run a command from root at the server and it is indeed running.
Regards,
Thanks Brian.
Nice to see you have sorted both the spam and virus. Its good having a first layer of defence... you'd be surprised how many people have put a virus checker on their PC, and never update it.
Regards the Spamassissin in the Cpanel it lists Filters, i have 2 listed. I mistakingly
deleted one. If these were placed in Cpanel have you a copy of the string so i can edit it back.
Nope sorry, once its deleted thats it.
The sites are backed up everyday, but if I recreate the site I dont know when you added the filter.
Regards,
In Spam Maintenance i have the following;
Filter Destination
$h_X-Spam-Status: begins "yes" Discard
$header_subject: contains "" Discard
$message_headers contains "spam" Discard
Regards
Cliff
tboorman
17/01/2007, 19:07
Hi Cliff,
Are you aware that you might end up having genuine email deleted with those filters, as you're relying on there being no false positives?
Hi Tim
YES...Thats the problem. the email address is only linked to this site. so iam not to bothered at present about a mistake. In reply to your posting i was messing around yesterday, i was in a rush had to go in work early and deleted a filter, so i added the latter two.
Have you any filters setup.
Cliff
tboorman
17/01/2007, 19:26
No, I just enabled Spam Box, which means that anything that SpamAssassin thinks is Spam goes to a separate folder - I can then check that there are no false positives in that folder.
tboorman wrote:
No, I just enabled Spam Box, which means that anything that SpamAssassin thinks is Spam goes to a separate folder - I can then check that there are no false positives in that folder.
How have you configured your folder for spam box to deliver to Horde or your own PC.
tboorman
17/01/2007, 20:01
The folder named "spam" is accessible from my PC (I'm using IMAP), Horde and SquirrelMail.
In horde did you just add a folder and name it spam.
tboorman
17/01/2007, 20:24
No, it gets created automatically as soon as a Spam email is moved to it by Spam Box.
Well i think i will delete that spam folder and wait...:D Ive got my bottle of red ready
tboorman
17/01/2007, 20:33
If you've got an email account elsewhere, you can send a message to your Adsl24 email address with the following line in it:
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
Note that this should be reproduced in one line, without whitespace or line breaks.
This is the Generic Test for Unsolicited Bulk Email.
Your tempting me...I can smell that rich full bodied red sliding down my throat
Cliff http://langkawi.dk/smileys/h12.gif
tboorman
21/01/2007, 21:27
Hi Brian,
I've noticed that SpamAssassin has today started marking messages it identifies as Spam with "*****SPAM*****" in the subject line, even though I haven't configured it to rewrite the subject line. Is there any way to turn this off for individual accounts please?
Its been configured server wide to say that, but you can setup your own filters.
Regards,
I have not seen any spam email for a week now and missed a few as well.
tboorman
21/01/2007, 21:44
Its been configured server wide to say that, but you can setup your own filters.
I don't see how I can use a filter to stop the subject line from being rewritten.
Instead of it being configured server wide, is there a way that everyone's modifiable SpamAssassin configuration could be set to rewrite the subject line by default, and then individual users could remove this if they wanted to?
tboorman
21/01/2007, 22:09
Never mind, I've found a way around it, although it's a bit of a kludge.
tboorman wrote:
Never mind, I've found a way around it, although it's a bit of a kludge.
If you don't mind me asking "what is the kludge workaround" :eek:
Cliff:)
tboorman
22/01/2007, 11:43
I put the following line in the file .spamassassin/user_prefs:
rewrite_header Subject
(I hope Brian doesn't tell me off for doing this!)
Thats what the file is there for so you can modify it yourself.
Regards,
tboorman
22/01/2007, 16:15
Thats what the file is there for so you can modify it yourself.
Thanks Brian, I just thought that you might not like people changing their configuration outside of cPanel. I'm glad this is not the case though :).
whiskerp
19/10/2007, 15:06
I have just signed up and am on the saturn.adsl24.co.uk server. I have enabled spamassassin, but it does not seem to be working.
Here is the full headers of the test message I sent to my account - there is no trace of the scanner in the headers and the message was delivered:
Return-path: <whisker@whisker.adsl24.co.uk>
Envelope-to: peter@whisker.adsl24.co.uk
Delivery-date: Fri, 19 Oct 2007 15:02:27 +0100
Received: from whisker by saturn.adsl24.co.uk with local (Exim 4.68)
(envelope-from <whisker@whisker.adsl24.co.uk>)
id 1IisQl-0006Ec-Ge
for peter@whisker.adsl24.co.uk; Fri, 19 Oct 2007 15:02:27 +0100
Received: from 158.234.10.144 ([158.234.10.144])
(SquirrelMail authenticated user whisker)
by saturn.adsl24.co.uk with HTTP;
Fri, 19 Oct 2007 15:02:27 +0100 (BST)
Message-ID: <41883.158.234.10.144.1192802547.squirrel@saturn.ad sl24.co.uk>
Date: Fri, 19 Oct 2007 15:02:27 +0100 (BST)
Subject: testw2
From: whisker@whisker.adsl24.co.uk
To: peter@whisker.adsl24.co.uk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
whiskerp
19/10/2007, 15:32
I sent the SA test e-mail to myself and there is no trace of Spamassassin headers in it. I read a similar thread of this being a problem early in the year on the pluto server and it was then fixed. I do not think that spamassassin is working judging from the delivered e-mail below.
Thanks
Peter
Return-path: <whisker@whisker.adsl24.co.uk>
Envelope-to: peter@whisker.adsl24.co.uk
Delivery-date: Fri, 19 Oct 2007 15:02:27 +0100
Received: from whisker by saturn.adsl24.co.uk with local (Exim 4.68)
(envelope-from <whisker@whisker.adsl24.co.uk>)
id 1IisQl-0006Ec-Ge
for peter@whisker.adsl24.co.uk; Fri, 19 Oct 2007 15:02:27 +0100
Received: from 158.234.10.144 ([158.234.10.144])
(SquirrelMail authenticated user whisker)
by saturn.adsl24.co.uk with HTTP;
Fri, 19 Oct 2007 15:02:27 +0100 (BST)
Message-ID: <41883.158.234.10.144.1192802547.squirrel@saturn.ad sl24.co.uk>
Date: Fri, 19 Oct 2007 15:02:27 +0100 (BST)
Subject: testw2
From: whisker@whisker.adsl24.co.uk
To: peter@whisker.adsl24.co.uk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
XJS*C4JDBQADN1.NSBN3*2IDNEN*GT<I have added this bit to the forum post so it doesn't get killed>UBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
vBulletin® v3.8.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.