spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Martin Gregorie <>
Subject Re: How to get rid of this spam? Spam assassin does not catch it
Date Thu, 29 Oct 2015 00:06:35 GMT
On Tue, 2015-10-27 at 14:19 -0500, wrote:
> I dont use any ham training.Should I scan all my folders with this
> command:
> sa-learn --ham --mbox /home/username/mail/foldername
YES - if Bayes never gets trained on ham, how do you expect it to
recognise the difference between ham and spam? 

Bayes won't start to work until it has seen 200 examples of ham and 200
examples of spam.

> "is the bayes-db of this user *realy* used at scan time"
> how do i check that?
When its working you'll see BAYES_nn rules firing.

> I use the procemail to pass all mail through spam assassin.
> I use default ubuntu setup with Razors enabled.
> It does catches spam but not the one i attached in original post.
> example mail sa headers:
> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
> X-Spam-Level: ***
> X-Spam-Status: No, score=3.1 required=5.0
>     	RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_C
> autolearn_force=no
>     	version=3.4.0
As others have said, URIBL-BLOCKED shows that the number of BL lookups
from all the people using whatever DNS server you're using exceeds the
free usage count for the BL server. BL servers count messages from a
particular DNS and don't know/can't find out how many people are using
a particular DNS server to do BL lookups. To get round that you need
your own DNS server, configured the do recursive lookups and NOT to
forward queries to any other DNS server.

So, set up your own recursive, non-forwarding DNS server on the host
where you're running SA. Configure that host to pass all DNS queries to
your new DNS server by configuring /etc/resolv.conf as I and others
have described.

If you don't understand how to install and configure a DNS server and
prefer printed material to online documents, get the O'Reilly book "DNS
and BIND".


View raw message