Page 1 of 1

Many spam passing trhough the MailScanner in the last 2 week

Posted: 25 Oct 2011, 17:54
by oxynet
Hello guys, i started to receitve many spam since last two weeks, why this, nothing was change, i got some messages marked as spam, but i canĀ“t lower the spam score because i already received many email that is not spam marked as spam.

What is the best configuration for the MailScanner?

Thanks

Re: Many spam passing trhough the MailScanner in the last 2

Posted: 02 Nov 2011, 13:47
by scloutier
My own problem was that many emails got -5 score from DNSWL_HI.

I changed my server DNS to use the local server ones.

DNS servers making too much query a day will automatically receive IN_DNSWL_HI response from them (google dns servers for example).

The best way to look at why spams are getting through is usually to look at the header and see what happened with the scoring.

getting -5 score on all spam make them a LOT more likely to get through.

I still haven't found a way to disable DNSWL verification.

Simon

Re: Many spam passing trhough the MailScanner in the last 2

Posted: 22 Nov 2011, 15:30
by Sarah
To disable a test give it a zero score in a .cf file in /etc/mail/spamassassin, such as /etc/mail/spamassassin/configserver.cf which will already exist if we installed MailScanner for you. Add a line such as this:

Code: Select all

score IN_DNSWL_HI 0
(Make sure the test name is exactly as it is shown in the spamassassin report.)

Regards,
Sarah