Help needed with Spam Assassin

pedz

Registered
I think I must have something miss configured. I get about 25 spam messages a day. None of them are marked by spam assassin.

In the Server Admin window, I have things enabled and set up pretty normal. I take my spam messages and I run a script I wrote to teach spam assassin about them. The essence of the script is:

su - clamav -c "sa-learn --spam --showdots "${TEMP}""

where temp is a directory I have moved the new spam messages to. (I copy them from a spam mail box on the server to a directory, do the command above, and them move them to a directory to save for furture purposes.)

At this point, I have 1205 spam messages. I have also taught it a few thousand non-spam messages with a similar process. And what is frustrating is the spam I get is soooo repetitious. I just don't see how spam assassin can't learn what to look for. But, at the same time, my local Mail "junk" mail (which I assume is roughly the same technology) does not mark them as Junk either.

Can anyone help me?
 
Have you ever received any messages marked by Spam Assassin? Are the messages you do receive marked with any SA information?

Depending on how SA is configured, you should see some additional header information, e.g.,

X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on mymailserver.com
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=ham version=3.1.7

If you don't see any evidence that SA is involving itself in mail evaluation, you almost definitely have a configuration issue.
 
I see that sometimes but not all the time.

Example A: I see the virus scan but no spam scan:

Subject: firm
Content-Type: multipart/related;
boundary="------------050801030805010702020903"
X-Virus-Scanned: by amavisd-new at easesoftware.net

This is a multi-part message in MIME format.

Example B: Both virus and spam have scanned:
Subject: mountainside
Content-Type: multipart/related;
boundary="------------040403050901070000090801"
X-Virus-Scanned: by amavisd-new at easesoftware.net
X-Spam-Status: No, hits=1.705 tagged_above=-999 required=5 tests=BAYES_50,
HTML_10_20, HTML_IMAGE_RATIO_08, HTML_MESSAGE, MIME_HTML_ONLY,
RCVD_NUMERIC_HELO
X-Spam-Level: *

This is a multi-part message in MIME format.
 
I forgot that I had Mail move any messages with the title of *** Junk Mail *** directly to the trash and mark them as read. I discovered in my trash, for the past week, 220 spam messages that spam assassin has caught. So, I need to look over all this and see what is and is not working. I thought it was not doing anything which confused me.

I may be back when I have more questions.

Thank you for your help. Sorry for the wasted bandwidth.
 
Back
Top