Spamassassin tuning

[Raybdbomb]

Spamassassin is not working as it should...

I ran toaster_setup -s filter
because toaster_setup -s spamassassin is not in yet (documentation ahead of the code, says the developer )

I have spamassassin enabled in the toaster-watcher.conf

I immediately updated spamassassin as seen on this page
http://www.tnpi.biz/internet/mail/toaster/filtering/content/spamassassin.shtml" target="_blank"> http://www.tnpi.biz/internet/mail/toaster/filtering/content/ spamassassin.shtml

When I do
toaster_setup -s filtertest i get the following

qmail-scanner disabled, skipping test.testing simscan...sending a clean message.Sending eicar test virus attachment - should be caught.simscan: (null) pid 5586: invalid attachment: eicar.com from:  to: postmaster@{mydomain}.us time: 0.0038sqmail-inject: fatal: Your email was rejected because it contains a bad attachment: eicar.comSending a real virus laden message.sending a sample spam messageFor more (and better) ways to test your Virus scanner, go here:          http://www.testvirus.org//usr/local/sbin/toaster_setup.pl script execution complete.

then my maillog has this

-su-2.05b# grep spam /var/log/maillog        May  3 11:22:08 sam spamd[644]: connection from localhost [127.0.0.1] at port 60858 May  3 11:22:08 sam spamd[644]: processing message <20050503112207.5579.qmail@{mydomain}.us> for postmaster@{mydomain}.us:0. May  3 11:22:09 sam spamd[644]: clean message (-2.8/5.0) for postmaster@{mydomain}.us:0 in 1.4 seconds, 327 bytes. May  3 11:22:09 sam spamd[644]: result: . -2 - ALL_TRUSTED,AWL scantime=1.4,size=327,mid=<20050503112207.5579.qmail@{mydomain}.us>,autolearn=ham May  3 11:22:09 sam spamd[640]: connection from localhost [127.0.0.1] at port 51035 May  3 11:22:09 sam spamd[640]: processing message <20050503112209.5590.qmail@sam.{mydomain}.us> for postmaster@{mydomain}.us:0. May  3 11:22:10 sam spamd[640]: clean message (-2.8/5.0) for postmaster@{mydomain}.us:0 in 1.2 seconds, 1034 bytes. May  3 11:22:10 sam spamd[640]: result: . -2 - ALL_TRUSTED scantime=1.2,size=1034,mid=<20050503112209.5590.qmail@{mydomain}.us>,autolearn=ham May  3 11:22:10 sam spamd[642]: connection from localhost [127.0.0.1] at port 63085 May  3 11:22:10 sam spamd[642]: processing message <20050503112210.5600.qmail@{mydomain}.us> for postmaster@{mydomain}.us:0. May  3 11:22:14 sam spamd[642]: identified spam (11.6/5.0) for postmaster@{mydomain}.us:0 in 3.8 seconds, 1661 bytes. May  3 11:22:14 sam spamd[642]: result: Y 11 - AWL,DATE_IN_FUTURE_96_XX,EXCUSE_4,FORGED_RCVD_HELO,FORGED_YAHOO_RCVD,FROM_ENDS_IN_NUMS,FROM_HAS_MIXED_NUMS,MISSING_SUBJECT,MSGID_FROM_MTA_HEADER,NORMAL_HTTP_TO_IP,NO_REAL_NAME,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,SELECTED_YOU scantime=3.8,size=1661,mid=<20050503112210.5600.qmail@{mydomain}.us>,autolearn=no 

So it finds spam in the test, or so it appears.

But all of my personal e-mails aren't getting spam filtered.  None of the e-mails I receive or send have the X-Spam-Status header displaying that e-mails score.  

[Raybdbomb]

or if you have no help to offer, please point me in the right direction

[LogicX]

are you using simscan or qmail-scanner?
tcp or smtp filtering?

[Raybdbomb]

thanks for the reply.

i started out with simscan but all the documentation said qmail-scanner, so right now i have qmail scanner enabled.

and in my toaster-watcher.conf i have
filtering_method                   = tcpserver

[Raybdbomb]

To further answer your question, it really doesn't matter to me what I use as long as it works.  I'm very willing to change what I have to get a working configuration.

Reading the spamassassin docs they always refer to procmailrc (instead of maildrop?), so I'm really working on something that has very limited documentation...

[Raybdbomb]

erm... bump?

[Raybdbomb]

i installed the latest version which has support for toaster_setup -s spamassasin...

I'm trying to figure out why I don't get the headers written on any of my e-mails.  I did lots of edits to
/usr/local/etc/mail/spamassassin/local.cf (as seen in documentation and spamassassin.org) but it seems like none are read or utilized.  

Where are the settings read from, just the toaster-watcher.conf file?

[matt]

Ray,,

It's not that nobody wants to help you, you've just made it far too difficult for anyone to help you. To understand, read this:

http://www.catb.org/~esr/faqs/smart-questions.html" target="_blank">http://www.catb.org/~esr/faqs/smart-questions.html

Then come back and ask your question(s) again and you'll most likely get a helpful response.

[LogicX]

Raybdbomb wrote on Tue, 31 May 2005 19:46

i installed the latest version which has support for toaster_setup -s spamassasin... I'm trying to figure out why I don't get the headers written on any of my e-mails.  I did lots of edits to /usr/local/etc/mail/spamassassin/local.cf (as seen in documentation and spamassassin.org) but it seems like none are read or utilized.   Where are the settings read from, just the toaster-watcher.conf file?

a very easily identifiable test would be to add
rewrite_header Subject *****SPAM*****
to /usr/local/etc/mail/spamassassin/local.cf

you can't miss when it renames subjects like that -- verifying that this file and its configs are being read.

Lately I've been trying to drop all my foreign spam with:

ok_languages en
ok_locales en
score UNWANTED_LANGUAGE_BODY 5.0
score CHARSET_FARAWAY 5.0
score CHARSET_FARAWAY_BODY 5.0
score CHARSET_FARAWAY_HEADERS 5.0


Sadly, I guess spamassassin has poor abilities to identify foreign mail, because I'm still getting spam thats clearly foreign but not being tagged as such.