roland_oc
05-15-2009, 10:25 AM
I'm new to Spamassassin and trying to figure out how to make it work. I am getting more and more junk mail with headers like this:
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on box447.bluehost.com
X-Spam-Level: **
X-Spam-Status: No, score=2.2 required=5.0 tests=BAYES_20,
DYN_RDNS_AND_INLINE_IMAGE,RCVD_IN_SORBS_DUL,RDNS_D YNAMIC,TVD_RCVD_IP
shortcircuit=no autolearn=no version=3.2.4
Received: from 83-152-52-227.rev.libertysurf.net ([83.152.52.227] helo=cgfr.libertysurf.net)
by box447.bluehost.com with smtp (Exim 4.69)
(envelope-from <climbable@mourlanne.com>)
id 1M4zjt-0005u9-HM
In the example above, the source IP is listed in Spamhaus, so technically SA should have caught this, but it still got through with low scores. SA's documentation says zen.spamhaus.org is enabled by default and that I can change its score by editing my "local.cf", but I don't see that file anywhere. I'm a little confused. Am I supposed to create this file myself? I basically want to autodelete anything coming from an IP in the ZEN database, and if I could also send an NDR in cases of false positives, that would be even nicer. Is this possible?
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on box447.bluehost.com
X-Spam-Level: **
X-Spam-Status: No, score=2.2 required=5.0 tests=BAYES_20,
DYN_RDNS_AND_INLINE_IMAGE,RCVD_IN_SORBS_DUL,RDNS_D YNAMIC,TVD_RCVD_IP
shortcircuit=no autolearn=no version=3.2.4
Received: from 83-152-52-227.rev.libertysurf.net ([83.152.52.227] helo=cgfr.libertysurf.net)
by box447.bluehost.com with smtp (Exim 4.69)
(envelope-from <climbable@mourlanne.com>)
id 1M4zjt-0005u9-HM
In the example above, the source IP is listed in Spamhaus, so technically SA should have caught this, but it still got through with low scores. SA's documentation says zen.spamhaus.org is enabled by default and that I can change its score by editing my "local.cf", but I don't see that file anywhere. I'm a little confused. Am I supposed to create this file myself? I basically want to autodelete anything coming from an IP in the ZEN database, and if I could also send an NDR in cases of false positives, that would be even nicer. Is this possible?