Results 1 to 3 of 3

Thread: Spamassassin: How do you "report email as Spam"

  1. #1
    Join Date
    May 2009
    Location
    Atlanta, GA
    Posts
    3

    Default Spamassassin: How do you "report email as Spam"

    Hello and thanks,
    I am trying to support a customer that uses Bluehost for their web hosting and e-mail.
    They have been geting spam so I turned on Spamassassin
    I access their e-mail accounts thru Horde

    I have enabled Spamassassin; it is working; ie for e-mail accounts that are getting Spam, it created a Spam box and is moving most of the spam into this box...but,

    It misses some, I want to flag those as spam ("report as Spam") so, going forward, they will automatically get moved to the Spam folder..

    Also, I want to flag any valid e-mails that have been moved to the Spam box so they stop going there.

    I cannot find how this is done, certainly it is an option?
    I do see how to 'Move' or 'Copy' the e-mails from one folder to another...is this all I have to do then it will remember going forward?

    I have searched the web and all I find is posting that talk about writing script...

    Help

    Brian
    Last edited by bmadams; 05-21-2009 at 06:41 AM.

  2. #2
    Join Date
    May 2009
    Location
    Atlanta, GA
    Posts
    3

    Default 104 reads and no help?????

    can't believe I am the only one looking for an answer to this problem??

  3. #3
    Join Date
    Jun 2009
    Posts
    2

    Default Fine tuning Spamassassin and filters

    Getting info on how to do this is next to impossible. I did a lot of playing with the settings to get a good rejection rate.

    I made the mistake of posting my email in a "mailto:" on my website so I had plenty of spam to experiment with. Currently only a couple slip through each day. The following links take you to web sites that generate code that you use for your email that will obscure your email to spam bots.

    http://www.codehouse.com/webmaster_t...il_obfuscator/
    http://hivelogic.com/enkoder/form

    You can customize Spamassassin (SA) from Bluehost's interface but I just took the users_prefs file and edit it directly then upload it. I looked at a lot of headers to see what SA was checking. I then tweeked the scores. I list my file at the end of this post.

    There were still spam getting by SA so I wrote a few filters to deal with them.
    FILTERS
    1) From line doesn't end with com, net, gov, org or edu then send to spam
    2) Crylic seems to sometimes louse up SA and the first filter so I wrote a regular expression that deletes the email if any of these letters are in the subject. The following is the reg exp.
    ||||||||||||||||||||||||| ||||||

    Make sure all spam is sent to the spam box so you can check for false positives. When you are happy with the results, you can then have all spam get deleted. My SA file makes for a very restrictive filter. You will probably need to whitelist some address.

    You can also write scripts for SA and train the baysian filter but I didn't want to take the time to figure out how to do this. If you create other filters with reg exp, you'll find some quirks but there is always a way to work around the issue.

    Alan

    user_prefs file
    ----------------------------
    # SpamAssassin config file for version 3.x
    # NOTE: NOT COMPATIBLE WITH VERSIONS 2.5 or 2.6

    # How many hits before a message is considered spam.
    #required_score 4.1

    # Change the subject of suspected spam
    #rewrite_header subject *****SPAM*****

    # Encapsulate spam in an attachment (0=no, 1=yes, 2=safe)
    #report_safe 0

    # Enable the Bayes system
    #use_bayes 1

    # Enable Bayes auto-learning
    #bayes_auto_learn 1
    #bayes_auto_learn_threshold_spam 6.0 (minimum score is 6.0)

    # Enable or disable network checks
    #use_bayes 1
    #use_dcc 1
    #use_pyzor 1
    #use_razor2 1

    # Mail using languages used in these country codes will not be marked
    # as being possibly spam in a foreign language.
    # - english french
    #ok_languages en

    # Mail using locales used in these country codes will not be marked
    # as being possibly spam in a foreign language.
    #ok_locales en

    bayes_auto_learn 1
    bayes_auto_learn_threshold_spam 6.0
    ok_languages en
    ok_locales en
    report_safe 0
    required_score 4.1
    rewrite_header subject *****SPAM*****
    score BAYES_00 0.2
    score BAYES_05 1.0
    score BAYES_20 2.0
    score BAYES_40 2.1
    score BAYES_50 2.1
    score DCC_CHECK 1.0
    score DNS_FROM_AHBL_RHSBL 1.0
    score DNS_FROM_RFC_BOGUSMX 1.0
    score DNS_FROM_RFC_DSN 1.0
    score DNS_FROM_SECURITYSAGE 0.1
    score FM_SCHOOLING 3.0
    score HTML_MESSAGE 0.1
    score MIME_HTML_MOSTLY 0.1
    score MISSING_DATE 0.5
    score MISSING_MID 0.1
    score PYZOR_CHECK 1.0
    score RAZOR2_CF_RANGE_51_100 0.1
    score RAZOR2_CF_RANGE_E4_51_100 0.1
    score RAZOR2_CF_RANGE_E8_51_100 0.1
    score RAZOR2_CHECK 1.0
    score RCVD_IN_PBL 2.0
    score RCVD_IN_XBL 2.0
    score RCVD_IN_SORBS_DUL 4.0
    score RCVD_IN_SORBS_HTTP 2.0
    score RCVD_IN_SORBS_MISC 2.0
    score RCVD_IN_SORBS_SOCKS 2.0
    score RCVD_IN_SORBS_WEB 4.0
    score RCVD_IN_BL_SPAMCOP_NET 2.5
    score RCVD_IN_NJABL_SPAM 2.5
    score RCVD_IN_NJABL_RELAY 0.1
    score RCVD_IN_NJABL_PROXY 0.1
    score RCVD_IN_WHOIS_HIJACKED 0.1
    score RCVD_IN_WHOIS_INVALID 0.1
    score RCVD_IN_DSBL 0.1
    score RDNS_DYNAMIC 1.5
    score RDNS_NONE 2.0
    score SPF_FAIL 2.0
    score SPF_SOFTFAIL 2.0
    score URIBL_AB_SURBL 2.0
    score URIBL_BLACK 1.0
    score URIBL_JP_SURBL 2.0
    score URIBL_OB_SURBL 2.0
    score URIBL_PH_SURBL 2.0
    score URIBL_SBL 2.0
    score URIBL_SBLXBL 2.0
    score URIBL_SC_SURBL 2.0
    score URIBL_WS_SURBL 2.0
    score URIBL_PH_SURBL 0.1
    score URIBL_OB_SURBL 0.1
    skip_rbl_checks 0
    use_bayes 1
    use_dcc 1
    use_pyzor 1
    use_razor2 1
    whitelist_from *state.ma.us
    whitelist_from *@spamoo.com

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •