help with filters in kmail for S P @ M
I am getting a little frustrated, maybe it is just me. I seem to be
getting the same junk email over... and over... and over... and
over...
I have kmail setup with both bogofilter and spamassassin. They are
catching a few, but not nearly all.
for instance. One I just got this morning in my inbox had these
headers:
--Bogosity: Ham, tests=bogofilter, spamicity=0.002719, version=0.95.2
Version: SpamAssassin 3.0.1 (2004-10-22) on paulspc
-Spam-Level: ****
Spam-Status: No, score=4.8 required=5.0
tests=AWL,BAYES_99,FORGED_RCVD_HELO,
MISSING_HEADERS,NO_REAL_NAME,US_DOLLARS_3 autolearn=no
version=3.0.1
I took out the "X" from the headers so it hopefully won't setoff
anyones filters..
notice it says autolearn=no, how can I change that to yes? and how do I
change the scoring to a lower level, say 4.5 ??
On Fri, 16 Dec 2005 08:27:29 -0500, you wrote:
I am getting a little frustrated, maybe it is just me. I seem to be getting the same junk email over... and over... and over... and over... I have kmail setup with both bogofilter and spamassassin. They are catching a few, but not nearly all. for instance. One I just got this morning in my inbox had these headers: --Bogosity: Ham, tests=bogofilter, spamicity=0.002719, version=0.95.2
Version: SpamAssassin 3.0.1 (2004-10-22) on paulspc -Spam-Level: **** Spam-Status: No, score=4.8 required=5.0 tests=AWL,BAYES_99,FORGED_RCVD_HELO, MISSING_HEADERS,NO_REAL_NAME,US_DOLLARS_3 autolearn=no version=3.0.1
I took out the "X" from the headers so it hopefully won't setoff anyones filters..
notice it says autolearn=no, how can I change that to yes? and how do I change the scoring to a lower level, say 4.5 ??
anything else I can do to make this better???
Paul, you don't go into any detail as to how you have spamassassin configured - additional rulesets, RBLs, etc. Spend some time at spamassassin.apache.org, paying particular attention to the sections where they talk about the above. My SA setup is on the elaborate side, but if we see a dozen spams a week sitewide it's quite unusual... Probably you just need to get into it. Mike- -- Mornings: Evolution in action. Only the grumpy will survive. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments.
On Fri December 16 2005 8:57 am, Michael W Cocke wrote:
Paul, you don't go into any detail as to how you have spamassassin configured - additional rulesets, RBLs, etc. Spend some time at spamassassin.apache.org, paying particular attention to the sections where they talk about the above.
apache is the webserver, that's a little overkill for a home user, but I'll check it out, it probably has rulesets... thanks!
My SA setup is on the elaborate side, but if we see a dozen spams a week sitewide it's quite unusual... Probably you just need to get into it. I get a few a day, so does my wife.
as for configuration, I did the "wizard" for s p a m that is setup from the kmail tools-anti-S P A M filters. it sets up 2 rules, one for finding it, the other for what to do with it. I ASSuMEd it would setup everything I need.... nuff said. -- Paul Cartwright Registered Linux user # 367800
On Fri, 16 Dec 2005 09:07:20 -0500, you wrote:
On Fri December 16 2005 8:57 am, Michael W Cocke wrote:
Paul, you don't go into any detail as to how you have spamassassin configured - additional rulesets, RBLs, etc. Spend some time at spamassassin.apache.org, paying particular attention to the sections where they talk about the above.
apache is the webserver, that's a little overkill for a home user, but I'll check it out, it probably has rulesets... thanks!
My SA setup is on the elaborate side, but if we see a dozen spams a week sitewide it's quite unusual... Probably you just need to get into it. I get a few a day, so does my wife.
as for configuration, I did the "wizard" for s p a m that is setup from the kmail tools-anti-S P A M filters. it sets up 2 rules, one for finding it, the other for what to do with it. I ASSuMEd it would setup everything I need.... nuff said.
Er, the spamassassin project is hosted at spamassassin.apache.com, as are over a dozen other projects... The wizard is more like the village idiot. Configuring spamassassin and amavisd-new (which is also in there and should be enabled and configured by you) will take a day or three from a standing start, but you won't regret it. If you want to mail me direct, my email address is unmunged - which shows how well my SA and amavisd-new setup works. I'll be happy to send you my settings if you think it will help. Mike- -- Mornings: Evolution in action. Only the grumpy will survive. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments.
On Friday 16 December 2005 05:27, Paul Cartwright wrote:
I am getting a little frustrated, maybe it is just me. I seem to be getting the same junk email over... and over... and over... and over... I have kmail setup with both bogofilter and spamassassin. They are catching a few, but not nearly all. for instance. One I just got this morning in my inbox had these headers: --Bogosity: Ham, tests=bogofilter, spamicity=0.002719, version=0.95.2
Version: SpamAssassin 3.0.1 (2004-10-22) on paulspc -Spam-Level: **** Spam-Status: No, score=4.8 required=5.0 tests=AWL,BAYES_99,FORGED_RCVD_HELO, MISSING_HEADERS,NO_REAL_NAME,US_DOLLARS_3 autolearn=no version=3.0.1
I took out the "X" from the headers so it hopefully won't setoff anyones filters..
notice it says autolearn=no, how can I change that to yes? and how do I change the scoring to a lower level, say 4.5 ??
anything else I can do to make this better??? -- Paul Cartwright Registered Linux user # 367800 X-Request-PGP: http://home.bellsouth.net/p/PWP-pcartwright/key.asc
I have kmail filters together with spamassassin getting about 99% of the spam, with 0% false positives. spamassassin alone was missing about 60% of it. My strategy is thus: 1. Every mail gets virus-checked, viruses moved to virus folder. 2. I assert that certain emails are _not_ spam (white list). If in address book, or from a mailing list I subscribe to, then not spam, and I set the X-Spam-Flag to No. 3/4. I have _many_ email accounts. Two of which I should not get catch-all mail, like for postmaster. For these I have a rule for each one like so: If the To: header contains @domain.com, then it must contain user@domain.com. These prevents spam where domain is correct, but they made up a fake spoofed username. If this rule is false, it it marked as spam, moved to spam folder. 5. I assert what is definitely spam, companies who won't take no for a answer, etc. Those get the X-Spam-Flag set to Yes. Marked as read, marked as spam, moved to spam folder. 6. Now series of rules to file emails into nice subfolders. 7. Now spamassassin gets called. It is set so spam score is 3.0. Now, in #5 is where the magic is. If <any header> contains "mail.opentransfer.com", then it is spam. In my case, this is true with every email over the last year (and accounts for about 48% of all spam over the past year). Also a rule that if Subject contains "=?iso-8859-1", then it is spam. This is used to make the Subject appear gobbledy-gook in the header, yet still display in the mail reader properly. By the time an e-mail gets to spamassassin, it is _very_ likely to be spam, so it works for me to have the score set low. HTH Mark
participants (3)
-
Mark A. Taff
-
Michael W Cocke
-
Paul Cartwright