Spam...but why

[HackerJL]

Recently I started to get a good number of emails that have troubled me why they get through any of the postfix reject controls.

An example. I get an email from "Mac Johnson" and the subject is "Mac Wrote:"

I get about 15-20 a day....here is a post of the header:

Received: from so3 (p4241-ipad42hodogaya.kanagawa.ocn.ne.jp [221.189.152.241])
	by MYSERVER (Postfix) with ESMTP id 5C6F7E8057
	for <MY@EMAILADDRE.SS>; Mon, 27 Nov 2006 20:03:51 -0600 (CST)
Received: from 212.145.147.238 (HELO pegasus.hospedando.com)
     by hjl.ca with esmtp (9O205@U: (X4K)
     id 36+YUA-31V@F1-U(
     for MY@EMAILADDRE.SS;

My question may be out of line, but shouldnt the helo verify the IP address and match their server?

This is what SA is doing:

X-Spam-Status: No, score=1.8 required=5.0 tests=BAYES_40,DATE_IN_FUTURE_03_06 
	autolearn=no version=3.1.5

[edge]

I'm having the same problem: http://www.howtoforge.com/forums/showthread.php?t=8551

Let me know when you find a fix :/

[Hans]

Edge,

I do not have the spam problems as you descibe but maybe you can find some useful info here, which might help you to configure Postfix and add some extra rules to prevent spam:

http://www.postfix.org/big-picture.html

[HackerJL]

My questions is...isnt the helo supposed to match the IP address of the server it received it by? It would stop the above email wouldnt it?

Falko?

I was told by a friend to use sa-learn. I dont have a command of sa-learn anywhere in my machine (perfect setup suse 10.0) and in the yast manager, I search for 'sa-learn' and find nothing even in the summaries....is it in a folder somewhere?

10min later....hmm...in the yast manager...spamassasin isnt even selected as being installed...normal? is this why sa-learn isnt anywhere?

[falko]

Originally Posted by HackerJL

I was told by a friend to use sa-learn. I dont have a command of sa-learn anywhere in my machine (perfect setup suse 10.0) and in the yast manager, I search for 'sa-learn' and find nothing even in the summaries....is it in a folder somewhere?

10min later....hmm...in the yast manager...spamassasin isnt even selected as being installed...normal? is this why sa-learn isnt anywhere?

Did you install ISPConfig? Because ISPConfig comes with its own SpamAssassin.

[HackerJL]

Ya I found it....

[HackerJL]

sa-learn seems to be working great, but it still isnt catching all the "Mark Wrote" and "Its me Reba" BS email. Googling finds others (a few) having the same problems, but no word of a fix for them or anything.

[falko]

You must feed at least 200 spam and also 200 ham mails before it starts to work.

[edge]

Originally Posted by HackerJL

sa-learn seems to be working great, but it still isnt catching all the "Mark Wrote" and "Its me Reba" BS email. Googling finds others (a few) having the same problems, but no word of a fix for them or anything.

HackerJL,

Could you please explain / show to me how you are using the sa-learn thing?