Zentyal Forum, Linux Small Business Server

Zentyal Server => Email and Groupware => Topic started by: teddy on October 24, 2016, 10:45:41 pm

Title: Anti-Spam configurations
Post by: teddy on October 24, 2016, 10:45:41 pm
Hello People!

Lately I have been getting a lot of spam. Especially one kind of message with dating sites offers...

I have been trying to block it but the spam score just keeps getting -0.113 or something similar to that. Other spam gets deleted just fine.

This is one of the messages headers:

Code: [Select]

Return-Path: <lily_petersen@bodegaselosegi.com>
Delivered-To: ***********
Received: from localhost (localhost [])
by *********** (Postfix) with ESMTP id ***********
for <***********>; Mon, 24 Oct 2016 16:49:13 +0200 (CEST)
X-Virus-Scanned: by amavisd-new-2.10.1 (20141025) (Debian) at ***********
X-Spam-Flag: NO
X-Spam-Score: -0.496
X-Spam-Status: No, score=-0.496 required=0.8 tests=[BAYES_00=-1.9,
T_KHOP_FOREIGN_CLICK=0.01] autolearn=no autolearn_force=no
Received: from *********** ([])
by localhost (*********** []) (amavisd-new, port 10024)
with ESMTP id Nqy4gE8N31nz for <***********>;
Mon, 24 Oct 2016 16:49:07 +0200 (CEST)
Received: from localhost.localdomain (malaga.smassa.eu [])
by *********** (Postfix) with ESMTPS id 7FADA68048E
for <**********>; Mon, 24 Oct 2016 16:49:07 +0200 (CEST)
Received: by localhost.localdomain (Postfix, from userid 10012)
id EB9FE26BFE; Mon, 24 Oct 2016 16:49:05 +0200 (CEST)
To: ***********
Subject: Alle far sig et knald, hvad med dig?
X-PHP-Originating-Script: 10012:options_lucid.php(1) : eval()'d code(1) : eval()'d code
Date: Mon, 24 Oct 2016 16:49:05 +0200
From: Lily Petersen <lily_petersen@bodegaselosegi.com>
Message-ID: <0ab0d735c5bf6a4c6f9b1920a62f53fb@bodegaselosegi.com>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
Content-Transfer-Encoding: 8bit

As you can see it scores - instead of +. The only check that gives a plus is the PYZOR_CHECK.

Is there any way to improve antispam config, so spam like this would get caught in the spam filter?

Title: Re: Anti-Spam configurations
Post by: uacnix on December 08, 2016, 10:31:57 pm
You gotta check the BAYES_00 rule somewhere in the /etc/spamassasin/local.cf
At least that's what I'd do, and it would normally work. The thing is that even if I edit the local.cf file manually it won't start working, cause my zentyal seems to be ignoring it.