Apache SpamAssassin configure from start
I've already been here and thought I configured correctly but it is not marking any spam at all.
I'm looking to stop a particular spammer email. Its always similar but because of the way it is written, I can not stop it with account level filtering. I have posted the headers as a screen shot maybe someone can help me config it correctly
-
Hello :) Could you provide the headers of the SPAM message that makes it through, and it's entry in /var/log/exim_mainlog? For instance, what's the SPAM score? Thank you. 0 -
(Sorry i did not get an alert you had answered) Hmm i do not see a spam score. the earlier pics shows my config. does that mean I'm not installed correctly? i edited my email address in the headers i include a new pic with a bug/error (ript>) showing just above to the left of words SpamAssassin Configuration could this be why? 0 -
my host says there is nothing wrong with SpamAssassin it is working perfectly. i asked him why does it not add its scan info to the header such as status, score, version... he said he would ask help from cpanel forum lol maybe he posted here. Anyway the spamassassin is the latest version and acts like it is working, as in the configure pages look ok. says enabled, no auto delete what is going on when it is is not writing its scan in the headers? 0 -
Yes, finally here is the full header. I replaced my domain with to protect my email. Return-path: .us@greatnames.eu> Envelope-to: temp1@.us Delivery-date: Wed, 23 Jul 2014 12:05:36 -0500 Received: from shop.greatnames.eu ([216.231.136.13]:52524) by host113.kvchosting.com with esmtp (Exim 4.80.1) (envelope-from .us@greatnames.eu>) id 1X9zym-002E7d-23 for temp1@.us; Wed, 23 Jul 2014 12:05:35 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=greatnames.eu; h=Mime-Version:Content-Type:Message-Id:Date:From:To:Subject; i=WhosWho@greatnames.eu; bh=ixCpLkDwjBWHeFm0OPDHYw74yZY=; b=UcOugcwTgXHfI+LGOL+IGN9HfScwmJYGlLT180dKUTLtHSGNSyObJrt9NUqs6Kx4rYAhTIBRvkBY NSDUwgiZH1ETvQT3gRclEvGphn3u5eDqN+hJCONxSgzD1ccBKfYqbMRvB3VNJD6RVTzzpHRow8IB 63DKoQjJzRzQSBjKLlE= Received: by shop.greatnames.eu id hpvlku0001gp for .us>; Wed, 23 Jul 2014 17:02:42 +0000 (envelope-from .us@greatnames.eu>) Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="b18c-72bd-7de2-4ae9-6fa8-3ae9-3c8a-a0db" Message-Id: Date: Wed, 23 Jul 2014 17:02:42 +0000 From: Whos Who To: temp1@.us Subject: =?utf-8?B?RldEOiBZb3UncmUgYSAyMDE0IENhbmRpZGF0ZSBmb3IgV2hvJ3MgV2hv?= X-Spam-Status: No, score=-2.0 X-Spam-Score: -19 X-Spam-Bar: -- X-Ham-Report: Spam detection software, running on the system "host113.kvchosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see root\@localhost for details. Content analysis details: (-2.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid X-Spam-Flag: NO0 -
I suggest implementing a new account level filter that targets contents of the message body to help stop these emails. Thank you. 0 -
Nothin I do with the spam score catches this email see pic Match expanded arguments: Subject = -19 Pattern = ^\d+$ Match expanded arguments: Subject = No, score=-2.0 Pattern = ^\d+$ Return-path taken from "Return-path:" header line Return-path = nuforia-temp1=me123.us@infodos.net Sender = blackshe@host113.kvchosting.com Recipient = blackshe@host113.kvchosting.com Testing Exim filter file "/etc/vfilters/me123.us" Filtering did not set up a significant delivery. Normal delivery wil0 -
You may need to contact your web hosting provider for assistance if you feel that SpamAssassin is not behaving as it should. It's not something that you can investigate without root access to the system. Thank you. 0
Please sign in to leave a comment.
Comments
7 comments