Re: [AMaViS-user] User complaints of spam

On Mon, 2005-08-15 at 11:56 -0600, Gary V wrote:
> Matt wrote:
>
> > Hi all,

> Make sure you set:
> $sa_local_tests_only = 0; in amavisd.conf. Otherwise SpamAssassin will
> not perform network tests (Razor included). I think you are using
> FreeBSD, so there should be a /usr/local/etc/mail/spamassassin/init.pre
> file. This file normally will contain:
> loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
> loadplugin Mail::SpamAssassin::Plugin::Hashcash
> loadplugin Mail::SpamAssassin::Plugin::SPF
[...]
> If you don't have $sa_local_tests_only = 0; set, then this would be
> the main problem. An email like this should hit on a couple of the
> networks tests, with URIDNSBL the most likely to help. There is not
> much for SpamAssassin to key on if network test are not performed.

It won't be listed in uribl's since it is a legitimate domain. Most of
mine are being hit by normal spamassassin tests, like:
X-Spam-Status: No, hits=2.868 tagged_above=-1 required=4.5
tests=DATE_IN_FUTURE_06_12, SARE_RECV_IP_061172
or
X-Spam-Status: Yes, hits=4.84 tagged_above=-1 required=4.5
tests=DATE_IN_FUTURE_12_24, RCVD_IN_XBL
or even:
X-Spam-Status: No, hits=2.757 tagged_above=-1 required=4.5
tests=DATE_IN_FUTURE_96_XX, SUBJ_HAS_UNIQ_ID, UPPERCASE_25_50

I should probably hit them with 3 points or so...

--
Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281
Austin Energy

dan.mcdonald@austinenergy.com



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/