Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 19th February 2009, 11:49
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Question How to know if spamfilter is working? [SOLVED]

UPDATE: SOLVED, see: http://www.howtoforge.com/forums/sho...3&postcount=24 Thank's Till!

HI gurus!

I have a recent ISPConfig 2 on Ubuntu 8.10 from applianceforge installation and all seems works ok except the spam control...

As you can see in this capture... http://www.elsxukurs.org/Snap174.jpg in the last two hours I received 3 mail clearly spam.

In the last week I have received more than 200 mail clearly spam and 0 with the subject modified with "***SPAM***"

How can I know if spamfilter works well?

The process is working...
Code:
root@vito:~# ps aux | grep -i spam
root      4163  0.0  0.8  29864 27188 ?        Ss   00:53   0:10 /usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid
root      4514  0.0  0.8  29864 25348 ?        S    00:53   0:00 spamd child
root      4516  0.0  0.8  29864 25348 ?        S    00:53   0:00 spamd child
Of course I have checked the "MailScan", "AntiSpam" and "Antivirus" filters with the Strategy option "Accept" Score "5.0" and rewrite subject "***SPAM***"

Thank's!

Last edited by nandelbosc; 26th May 2009 at 17:29. Reason: SOLVED
Reply With Quote
Sponsored Links
  #2  
Old 19th February 2009, 12:17
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,381
Thanks: 833
Thanked 5,482 Times in 4,316 Posts
Default

The spamd daemon is not used by ispconfig 2. ISPConfig invokes the spamassassin script directly from procmail.

If your spam does not get marked, then set the score to a lower value.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 19th February 2009, 12:52
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default don't work...

I changed from 5.0 to 1.0 (via ispconfig web administration) and still no detects spam... this user spamassassin prefs...

Code:
root@vito:/var/www/www.mysite.com/user/myuser# cat .spamassassin.rc
# SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
:0fw
* < 256000
| /usr/sbin/spamc

# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
#:0:
#* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
#/dev/null

# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "/dev/null".
#:0:
#* ^X-Spam-Status: Yes
#/dev/null

# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped.  This will re-add it.
:0
* ^^rom[ ]
{
  LOG="*** Dropped F off From_ header! Fixing up. "

  :0 fhw
  | sed -e '1s/^/F/'
}
root@vito:/var/www/www.mysite.com/user/myuser# cat .spamassassin/user_prefs
# SpamAssassin user preferences file.  See 'perldoc Mail::SpamAssassin::Conf'
# for details of what can be tweaked.
#*
#* Note: this file is not read by SpamAssassin until copied into the user
#* directory. At runtime, if a user has no preferences in their home directory
#* already, it will be copied for them, allowing them to perform personalised
#* customisation.  If you want to make changes to the site-wide defaults,
#* create a file in /etc/spamassassin or /etc/mail/spamassassin instead.
###########################################################################

# How many hits before a mail is considered spam.
required_score                1.0

rewrite_header Subject ***SPAM***

# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
# whitelist_from        someone@somewhere.com
# whitelist_from

# blacklist_from

# URIBL support (see http://www.uribl.com)
# urirhssub       URIBL_BLACK  multi.uribl.com.        A   2
# body            URIBL_BLACK  eval:check_uridnsbl('URIBL_BLACK')
# describe        URIBL_BLACK  Contains an URL listed in the URIBL blacklist
# tflags          URIBL_BLACK  net
# score           URIBL_BLACK  3.0

# Add your own customised scores for some tests below.  The default scores are
# read from the installed spamassassin rules files, but you can override them
# here.  To see the list of tests and their default scores, go to
# http://spamassassin.org/tests.html .
#
# score SYMBOLIC_TEST_NAME n.nn

# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost
# definitely want to uncomment the following lines.  They will switch off some
# rules that detect 8-bit characters, which commonly trigger on mails using CJK
# character sets, or that assume a western-style charset is in use.
#
# score HTML_COMMENT_8BITS        0
# score UPPERCASE_25_50                0
# score UPPERCASE_50_75                0
# score UPPERCASE_75_100        0

score           AWL  -100.0
As you can see, the score is changed...
Reply With Quote
  #4  
Old 20th February 2009, 11:43
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

within 24 hours I received over 50 mails clearly spam... http://www.elsxukurs.org/Snap176.jpg

Anyone me can guide?

Thank's!
Reply With Quote
  #5  
Old 20th February 2009, 18:04
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,743 Times in 2,577 Posts
Default

What's in the .procmailrc of that user?

Have you tried to update SpamAssassin's rulesets?
Code:
/home/admispconfig/ispconfig/tools/spamassassin/usr/bin/sa-update
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #6  
Old 20th February 2009, 18:45
mccharlet mccharlet is offline
Senior Member
 
Join Date: Feb 2007
Posts: 262
Thanks: 63
Thanked 13 Times in 8 Posts
Default

Hi,

You can test your spam filter to send en email with this content

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
__________________
Thanks
Cédric

Sorry for my english

Hosting : http://www.jheberge.ch
Reply With Quote
  #7  
Old 21st February 2009, 11:27
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

Sorry for the delay.

Thank's Falko, I executed /home/admispconfig/ispconfig/tools/spamassassin/usr/bin/sa-update without errors, but still not detecting spam.

In my user .procmailrc...

Code:
cat /var/www/web10/.procmailrc
MAILDIR=$HOME/Maildir/
DEFAULT=$MAILDIR
ORGMAIL=$MAILDIR

INCLUDERC=/var/www/web10/user/10info/.mailsize.rc
## INCLUDERC=/var/www/web10/user/10info/.quota.rc
INCLUDERC=/var/www/web10/user/10info/.antivirus.rc
INCLUDERC=/var/www/web10/user/10info/.local-rules.rc
INCLUDERC=/var/www/web10/user/10info/.html-trap.rc
INCLUDERC=/var/www/web10/user/10info/.spamassassin.rc
## INCLUDERC=/var/www/web10/user/10info/.autoresponder.rc
mccharlet thank's too, but yout test don't work... I have the mail my inbox withou SPAM tag.
Reply With Quote
  #8  
Old 21st February 2009, 14:23
mccharlet mccharlet is offline
Senior Member
 
Join Date: Feb 2007
Posts: 262
Thanks: 63
Thanked 13 Times in 8 Posts
Default

This test signifies which you r spamfilter not works

Show this http://en.wikipedia.org/wiki/GTUBE
__________________
Thanks
Cédric

Sorry for my english

Hosting : http://www.jheberge.ch
Reply With Quote
  #9  
Old 21st February 2009, 17:54
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,743 Times in 2,577 Posts
Default

Does
Code:
/home/admispconfig/ispconfig/tools/spamassassin/usr/bin/spamassassin --lint
show any errors?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #10  
Old 22nd February 2009, 13:44
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
 
Default

I know EICAR test, but GTUBE is new for me, interesting!

Quote:
Show any errors?
No...
Code:
root@vito# /home/admispconfig/ispconfig/tools/spamassassin/usr/bin/spamassassin --lint
root@vito#
I'm the only one who have this problem with "ISPConfig 2 on Ubuntu 8.10 from applianceforge"? This makes me think that I've done something wrong, but I have not changed anything other than through the web interface...
Reply With Quote
Reply

Bookmarks

Tags
spamassassin, spamfilter

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
fail2ban not working linuxwannabe Installation/Configuration 1 25th January 2009 06:09
SPF doesn't seems to be working roshajai Installation/Configuration 4 28th November 2008 12:39
Urgent! pop server down, website down, ispconfig working gwa7 Installation/Configuration 4 8th November 2008 18:56
DNS stop working MZH General 3 22nd February 2008 11:10
ftp not working pesja Installation/Configuration 3 17th July 2006 12:37


All times are GMT +2. The time now is 20:51.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.