Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Spamassassin help
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Spamassassin help

RazzaRazza Member
edited November 2016 in Help

Am currently using Spamassassin on my mail server, recently I've been getting spammy email in my inbox where it normally goes to junk.

Spamassassin score

X-Spam-Status: No, score=0.6 required=5.0 
X-Spam-Report: 
    * 3.0 SUBJ_YOUR_FAMILY Subject contains "Your Family"
    * 0.3 SPF_PASS SPF: sender matches SPF record
    * -2.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
    * 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
    * 1.5 HTML_MESSAGE BODY: HTML included in message
    * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
    * domain
    * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
    * valid
    * -3.0 DKIM_VALID Message has at least one valid DKIM or DK signature

But if i run it via Spamassassin with spamassassin -t -D < email-file-on-disk

Content analysis details:   (5.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.0 SUBJ_YOUR_FAMILY       Subject contains "Your Family"
-2.5 RP_MATCHES_RCVD        Envelope sender domain matches handover relay domain
 0.3 SPF_PASS               SPF: sender matches SPF record
 1.5 HTML_MESSAGE           BODY: HTML included in message
 1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
 1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
-3.0 DKIM_VALID             Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                            domain
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]

This time razor2 seem to worked fine but for some reason it dose not seem to work when it's checking incoming mail.

The mail server was installed using Mailcow which has use_razor2 1 in Spamassassin local.cf so it should work.

I do have a few custom config in local.cf but it shouldn't stop razor from working
http://paste.ee/p/soYgB#RSTOa7Ol0JfNT8xrocI1l3WlNfhvLTo7

Any one got any idea's why razor is not working when its SA is checking incoming mail.

Comments

  • jarjar Patron Provider, Top Host, Veteran

    Not sure about that exact issue but in my opinion that's not the most effective way to handle this spam. Dropping 2.5 points for RP_MATCHES_RCVD is overkill. I'd zero that score out. Additionally, I'd consider raising HTML_IMAGE_ONLY_24 to maybe as high as 2.

  • @jarland said:
    Not sure about that exact issue but in my opinion that's not the most effective way to handle this spam. Dropping 2.5 points for RP_MATCHES_RCVD is overkill. I'd zero that score out. Additionally, I'd consider raising HTML_IMAGE_ONLY_24 to maybe as high as 2.

    I need to fine tune it a bit most of the custom scores come from a config you posted a month or two back

Sign In or Register to comment.