Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spamassassin]

SpamAssassin is a computer program released under the Apache License 2.0 used for e-mail spam filtering based on content-matching rules.

0
votes
0answers
10 views

ClamAV Anti-Virus not Classifying Virus Emails as Virus

I have installed Sendmail as my SMTP mail server, SpamAssassin as Spam Classifier and ClamAV Anti-Virus. I tested out sending my server a virus email eicar.txt Now I am receiving the virus email in ...
0
votes
0answers
9 views

Filtering emails to mailman owner addresses with spamassassin

I'm hoping for a bit of input on how best to protect the automatically generated list owner addresses on mailman. It's recently come to my attention that spammers are sending messages to addresses ...
0
votes
0answers
31 views

SpamAssassin rule to detect matching To and From headers?

I use a Proxmox mail gateway for my small business's emails (and also for several clients), but we have noticed an interesting uptick in emails which have a matching "To" and "From" address, always a '...
1
vote
1answer
290 views

Valid DKIM but “body hash did not verify” error on Outlook / Hotmail / Live?

Why do I get dkim=fail (body hash did not verify) on Outlook / Hotmail / Live when I have a valid DKIM setup in place? I've made sure that my SPF, DKIM, DMARC records are set up correctly and the ...
0
votes
0answers
21 views

How do I figure out the path to Perl module that spamassassin uses? module not installed 'require' failed ubuntu

After running spamassassin -D --lint I have warnings "module not installed: Digest::SHA1 ('require' failed) So i read about how to install these perl modules using cpan, but that process was killed ...
0
votes
0answers
75 views

Dovecot are not delivering spam emails to Junk folder - Debian 9, postfix, spamassassin

I followed this answer but the spam emails aren't being delivered to Junk folder My files: /etc/postfix/master.cf # # Postfix master process configuration file. For details on the format # of the ...
1
vote
2answers
108 views

SpamAssassin, Postfix, and Multiple Addresses in From Header

I'm working on a problem that I'm seeing with an email scanning server (MailScanner, Spamassassin, Postfix, etc.), and From header spoofing. Unfortunately, some of the versions of these components ...
0
votes
1answer
52 views

RoundCube sauserprefs plugin shows empty page

CentOS 7. Just installed the sauserprefs (version 1.17.1) plugin for Roundcube (version 1.3.8). The "Spam" tab is added OK. When I click on "Spam" tab, a page opens, where I can see the menu on the ...
0
votes
0answers
63 views

spamassassin ignores local.cf when run by mailscanner

I have problem with SpamAssassin ignoring /etc/mail/spamassassin/local.cf when run through MailScanner. I'm using local.cf to manually add some blacklisted domains to spamassassin using blacklist_from ...
1
vote
0answers
55 views

Block dangerous word and excel docs?

The newest craze, apparently, is to add garbage into Office '97 formatted *.doc and *.xls files so that when a user opens them, and ignores warnings from Defender or anything else, they get infected ...
1
vote
0answers
17 views

Rescan Spamassasin Emails marked as Spam

So, due to issues with an upstream mail server, all incoming emails triggered two rules and got a little over +5 on their spamassassin scores. Nice. I'm in touch with the upstream provider about ...
0
votes
0answers
13 views

How to setup a email sink that authenticated users could forward to, to mark senders as trusted whitelist?

When an incoming email is marked as spam by SA, but the user wants this sender to be marked as trusted, and or whitelisted, how could I setup an email account that the user could forward the email to, ...
0
votes
0answers
680 views

SpamAssassin failed to parse line

When I perform an apt-get update -y && apt-get upgrade -y I get the following error: Running sa-compile (may take a long time) Nov 15 22:39:42.458 [32041] info: config: score: requires a ...
0
votes
0answers
85 views

How do I teach spam and ham to spamassassin running in a docker container?

I'm running SpamAssassin as a milter in a Docker container separate from Postfix and Dovecot. Postfix and SA work together nicely, Postfix connects to spamass-milter, SA does its thing, mail gets ...
0
votes
1answer
40 views

spamassassin fails to remove bayes.lock file

I have a problem with the /.spamassassin/bayes.lock This is the error I'm seeing : Oct 23 15:12:14 server spamd[18073]: bayes: cannot open bayes databases /.spamassassin/bayes_* R/W: lock failed: ...
0
votes
1answer
42 views

How to interpret the debug output from Amavis->Spamassassin?

Could please someone explain how Spamassassin build the following strings: Oct 17 14:00:30 server amavis[29497]: (29497-02) SA dbg: uridnsbl: domain amazonaws.com in skip list, host sns.eu-central-1....
1
vote
1answer
48 views

CentOS7 - cannot change spamassassin required_score

I have a CentOS7 server running an yum-based install of Spamassassin (spamassassin-3.3.2-4.el6.rfx.x86_64). For some reason, I cannot change the required score setting to a custom value. When mail ...
1
vote
1answer
439 views

Postfix & Spamassassin - custom rule for return-path and from address not in same domain

Having a little trouble with Spamassasin identfying spam emails coming from a domain of mine. The spam email is coming in from a return-path of someone@spammer.com, but the from field in the header ...
0
votes
1answer
96 views

Spamassassin regex - is matching almost everything

I wrote a regex rule for spamassassin, which should match some words or phrases in both Subject and Body of emails. The rule is the following: header __SUBJECT_CHUJ Subject =~ /(powi.ksz.(0,5} penis....
-2
votes
1answer
69 views

Whitelist Server in SpamAssassin

Iss possible add a server with various subdomains in SpamAssassin Whitelist, like *.example.com? This is the host instance with subdomains: email@example-2.com.br hm1480-p-60.example.com [IP-ADDRES-...
0
votes
1answer
76 views

Postfix/Amavis not filtering spam for entries in second domain

My postfix installation is working correctly (delivery via dovecot, spam filtering via amavis - spamassasin). I have some aliases in virtual, eg: info@mydomain2.com johnDoe However, for the ...
0
votes
1answer
137 views

whitelist_from_rcvd in Spamassassin not working - not whitelisting

I want to use whitelist_from_rcvd and exclude my own email addresses at the same time avoiding for them to be forgered by spammers. But it seems that it's not working and my own messages are still ...
1
vote
1answer
229 views

Spamassassin - how to get a better score

I am testing a contact form, but I am getting a too high score for the emails sent from the contact/booking form. Here is the header: Return-Path: <yyy@host49-253-177-94.static.arubacloud.com> ...
0
votes
0answers
128 views

Postfix check_recipient_mx_access not working

My postfix install relays for quite a few different domains but I would like it to just shove all messages from one domain, destined for any Google MX's through the Google G-Suite relay service. In ...
1
vote
1answer
41 views

Postfix content filter (spamassassin) get's bypassed

Lately we're receiving a lot of Japanese spam messages, containing weird headers. At least, it looks like a mail is remotely offered, but the mail is handled as if it was sent internally, which ...
3
votes
1answer
158 views

Why does spampd fail with socket connection failure on openbsd?

I'm having some trouble getting spampd to work in OpenBSD. First off, if I try to specify the daemon flags in my /etc/rc.conf.local like so: spampd_flags="--port=10025 --relayhost=127.0.0.1:10027 --...
0
votes
1answer
450 views

Configure Amavis with custom spamassassin rules

How can I configure Amavis to apply specific rules from SpamAssassin, like score MISSING_SUBJECT 30 from Blocking empty subject line emails from being sent or received? I run Amavisd-new 2....
0
votes
1answer
30 views

access SpamAssassin SpamBox from command line

I am trying to create a CRONjob to delete spam older than x days. I can do this from the command line with non-spam emails by using the following script: find "/home/account/mail/example.com/username/...
0
votes
2answers
418 views

Postfix + opendkim + spamassin: messages are signed twice

I've got Postfix + spamassassin working already and I'm introducing opendkim. I'm almost there except outgoing messages are DKIM signed twice, which is not only useless but even makes them DKIM ...
0
votes
0answers
84 views

Dovecot SpamAssassin results different than standalone

I'm trying to filter spam with smtpd, spampd, dovecot, and SpamAssassin, and I'm finding different results of a spam email between the X-Spam-Report added by spampd/dovecot (which scores low) versus a ...
0
votes
1answer
502 views

filtering spam emails with Chinese subject

A client have ton of Chinese spam. All look similar to this one: Return-Path: <15308409199@189.cn> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on hotel492.dedicatedpanel.com X-...
2
votes
0answers
23 views

Spamassasin user - disable shell

I recently discovered that spamassasin added the following line to my passwd file: debian-spamd:x:115:122::/var/lib/spamassassin:/bin/sh. Why does spamassasin need shell access? Is it safe to disable ...
0
votes
1answer
235 views

DCC plugin to SpamAssassin does not get loaded on Debian 9

In spite of having this in spamassassin -D output the plugin does not seem loaded: Feb 1 21:05:53.653 [7880] dbg: config: read file /usr/share/spamassassin/25_dcc.cf I get this: Feb 1 21:05:54....
0
votes
1answer
153 views

Cyrus on ClearOs 7 - how to teach it about spam and ham

I have recently set up a Cyrus IMAP email system on ClearOs 7 - it is configured as it comes out of the box, to deliver mail locally, and to receive mail for my users from elsewhere. A lot of spam ...
1
vote
1answer
106 views

How do I apply score changes in SpamAssassin?

I'm trying to change a score of MIME_HEADER_CTYPE_ONLY, but whenever I change and restart spamassassin the score will not change. I want to set the score to 0, like: score MIME_HEADER_CTYPE_ONLY 0....
1
vote
1answer
92 views

spamassassin/auto-whitelist, can I delete it?

I found a huge file, .spamassassin/auto-whitelist, in my user directory, with my permissions, taking up a large percentage of my quota. Can I safely delete it, or otherwise shrink it down?
-1
votes
1answer
452 views

How can I update spamassassin rules?

I'm running currently SpamAssassin version 3.4.1, so I'm wondering if there are any updates for rules, which are stored in /usr/share/spamassassin? If there are update, how can I update them?
2
votes
1answer
347 views

Why would Spamhaus continue to add an IP to the CSS when that IP hasn't sent email recently?

For the last six months I have been locked in battle with the Spamhaus CSS SBL, having to regularly check if the IPv6 address of my Exim4 server has been listed and, if it has, manually delisting it. ...
0
votes
1answer
302 views

Zimbra with multiple domains - SPAM

I have a zimbra installed and working fine. The main domain is mbox.dominiocorp.com.br (fictitious).. I have SPF, DKIM, _dmarc, reverse configured and tested. The emails of the domain mbox.dominiocorp....
0
votes
0answers
193 views

Spamassasin / Mailscanner - “learn better”

Specs: debian 8 spamassassin 3.4.1 MailScanner 5.0.3 We have some mailservers which (auto and manually) learn via sa-learn from different hosting-servers. Spam will mostly get tagged and moved to ...
1
vote
1answer
103 views

SA bayes training with multiple domains

On a linux box running postfix+amavis+spamassassin, we are thinking of implementing bayes filtering. This system already does spam filtering (without bayes) at the moment for multiple customer domains....
0
votes
1answer
153 views

Mimedefang to log spamassassin scores to mail log

I use mimedefang with spamassassin and sendmail I can see the scores and tests in to the mail log if the mail does not get rejected as spam by adding it to the header of the mail. I would like to ...
0
votes
1answer
58 views

Postfix: Recieving mails that are not for my domains

we are using postfix/dovecot/amavis/spamassassin configuration with custom SA rules, etc. But some weird mails are delivered to us, even without spam test headers and dkim tests Example header: ...
2
votes
1answer
342 views

Blacklist recipient email addresses

I have a mail server on Ubuntu using Postfix and Dovecot and SpamAssassin. In Postfix I am using "plus addressing" via the recipient_delimiter option. So, for example foo_junker@me.com and foo_stupid@...
1
vote
1answer
310 views

Arch Linux: Dovecot Sieve Script Won’t Compile

Arch Linux Linux kernel 4.9.36 (64-bit) Dovecot 2.2.31 (65cde28) SpamAssassin version 3.4.1 running on Perl version 5.26.0 Pigeonhole 0.4.19-1 Trying to set up a mail server for the firs by following ...
-1
votes
1answer
460 views

Why do I get different SpamAssassin results via spamd vs command line

My SpamAssassin daemon is not flagging as much spam as I would like (but it is flagging some), so I took a sample message which had not been flagged, and ran it thru SpamAssassin at the command line. ...
0
votes
1answer
142 views

spamd with postfix: check spam from webmail/localhost [duplicate]

I didn't find any way to set postfix with spamd to check outgoing email from webmail/localhost for attempt to ward off possible spam.
2
votes
0answers
164 views

spamassassin + postfix doesn't work without log files

ps aux|grep spamd root 12207 0.0 1.0 159920 83460 ? Ss 17:38 0:01 /usr/sbin/spamd -d --pidfile=/var/run/spamassassin.pid --create-prefs --max-children 5 --helper-home-dir root ...
0
votes
1answer
153 views

SA tagging logwatch email as spam

Centos7 Posftfix 3.2.2 Amavisd 2.11.0 spamassassin-3.4.0 I have a logwatch output that gets mailed to me daily. Spamassassin is scoring it high enough as exceed my threshold for whacking it as spam. ...
0
votes
1answer
417 views

Spamassassin - add every header

I am using spamassassin via Amavisd-new. I have amavisd set to include headers on spam and ham messages via "$sa_tag_level_deflt = -9999.0;" 2 questions... a) I want to be sure I am configured to ...