View Single Post
  #3  
Old 28th June 2007, 10:27
pehpehang pehpehang is offline
Junior Member
 
Join Date: Jun 2007
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hi AlArenal,

Thanks for your reply.

1) Here is my file setup. Please let me know if you need any others files.
a) /etc/mail/spamassassin/local.cf

required_score 2
#rewrite_header Subject [SPAM]
#report_safe 0
#use_pyzor 0
#use_razor2 1
#use_razor2 0
use_dcc 0
dcc_home /var/dcc
skip_rbl_checks 0
rbl_timeout 3
score RCVD_IN_BL_SPAMCOP_NET 2
#trusted_networks 123.123.123.
use_bayes 1
bayes_auto_learn 1
bayes_path /home/spamd/.spamassassin/bayes
required_hits 5
add_header all Level _STARS(X)_
rewrite_subject 1
report_safe 1
subject_tag *SPAM* [_HITS_]

b) /home/pehpehang/.spamassassin/user_prefs

# SpamAssassin user preferences file. See 'perldoc Mail::SpamAssassin::Conf'
# for details of what can be tweaked.
################################################## #########################

# How many hits before a mail is considered spam.

# required_hits 4

# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
# whitelist_from someone@somewhere.com

# Add your own customised scores for some tests below. The default scores are
# read from the installed spamassassin rules files, but you can override them
# here. To see the list of tests and their default scores, go to
# http://spamassassin.org/tests.html .
#
# score SYMBOLIC_TEST_NAME n.nn

# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost
# definitely want to uncomment the following lines. They will switch off some
# rules that detect 8-bit characters, which commonly trigger on mails using CJK
# character sets, or that assume a western-style charset is in use.
#
# score HEADER_8BITS 0
# score HTML_COMMENT_8BITS 0
# score SUBJ_FULL_OF_8BITS 0
# score UPPERCASE_25_50 0
# score UPPERCASE_50_75 0
# score UPPERCASE_75_100 0

c) /usr/share/spamassassin/50_scores.cf ( Default )
Please see attached file.


d) /home/pehpehang/.procmailrc

LOGFILE=procmaillog
VERBOSE=on # turn this on for debugging
DROPPRIVS=yes

:0fw
| /usr/bin/spamassassin


2) The following are my some question.

a) What is the different btw "required_hits" in /etc/mail/spamassassin/local.cf and /home/pehpehang/.spamassassin/user_prefs? Am i write to say that if i set "required_hits 4 " in /home/pehpehang/.spamassassin/user_prefs, pehpehang email account will follow "required_hits 4" instead of "required_hits 5" in /etc/mail/spamassassin/local.cf ?

b) I do not know why i receive a lot of email like "failure notice", "Undelivery mail return" and etc.... It is very funny because that email account we do not use it yet i receive a lot of this kind of email. The following is sample of "failure notice" email. I think someone is use our email illegally. Pls advice how to solve this problem.


**** ------- ******
From: <MAILER-DAEMON@b004mail7.cracantu.it>
To: <cheryllam@jpcomputers.com.sg>
Subject: failure notice
Date: Tuesday, June 26, 2007 7:16 PM

Hi. This is the qmail-send program at b004mail7.cracantu.it.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<fbf2d@cracantu.it>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <cheryllam@jpcomputers.com.sg>
Received: (qmail 29533 invoked from network); 26 Jun 2007 10:58:35 -0000
Received: from unknown (HELO b005mail.cracantu.it) ([192.168.22.189])
(envelope-sender <cheryllam@jpcomputers.com.sg>)
by 192.168.22.60 (qmail-ldap-1.03) with SMTP
for <fbf2d@cracantu.it>; 26 Jun 2007 10:58:35 -0000
Received: (qmail 26068 invoked by uid 210); 26 Jun 2007 12:58:34 +0200
Received: from 79.8.26.151 by b004mail5.cracantu.it (envelope-from <cheryllam@jpcomputers.com.sg>, uid 201) with qmail-scanner-1.25st
(clamdscan: 0.90.3/3523. spamassassin: 3.2.1. perlscan: 1.25st.
Clear:RC:0(79.8.26.151):SA:1(10.9/4.0):.
Processed in 1.826129 secs); 26 Jun 2007 10:58:34 -0000
X-Spam-Status: Yes, hits=10.9 required=4.0
X-Spam-Level: ++++++++++
Received: from host151-26-dynamic.8-79-r.retail.telecomitalia.it (79.8.26.151)
by 192.168.22.189 with SMTP; 26 Jun 2007 12:58:33 +0200
X-Originating-IP: 195.104.26.220 by smtp.79.8.26.151; Tue, 26 Jun 2007 06:58:15 -0500
Message-ID: <bbuhqykTIZQCLMelenabn@cracantu.it>
From: "Merle Nichols" <elenabn@cracantu.it>
Reply-To: "Merle Nichols" <elenabn@cracantu.it>
To: elenabn@cracantu.it
Subject: [SPAM] - Stylish repl1ca w4tches from famous brands
Date: Tue, 26 Jun 2007 06:58:15 -0500
Content-Type: text/plain;
Content-Transfer-Encoding: 7Bit
X-Qmail-Scanner-1.25st: added fake MIME-Version header
MIME-Version: 1.0



Please help as i am new in SpamAssassin. Thanks in advance...

regards
Sarah.
Attached Files
File Type: txt 50_scores.txt (38.4 KB, 217 views)

Last edited by Hans; 28th June 2007 at 12:23.
Reply With Quote