Re: SpamAssassin identifying spam, yet being flagged as Clear messages

Do you use an SPF in your domain? ( http://www.openspf.org ). Its
possible that someone is just sending email representing your domain.
As for why SA isn't identifying SPAM, it would be helpful to post the
full headers on an email message. Also, I'm assuming you have open
relay turned off which comes by default with the latest versions of
qmail.

Graham Weldon wrote:

Fluid Lino [web design + development]

Hi all.

Been watching the
list via websites a lot, my first post here.

I'm running Qmail,
Qmail Scanner and SpamAssassin, and have the rules going how I want
them now, and even a nice little log parser that feeds off
mailstats.csv.

However, I am getting complaints from some users about the level of
spam.

Some entries in
the mailstats.csv file indicate that SpamAssassin has scored over the
threshold for spam, yet it still considers it clean, and the message is
delivered.

Below is an example with modified email addresses:

------

Clear:RC:0(aaa.bbb.ccc.ddd):SA:1(6.3/3.5)

------

Lots of these
messages (not all) appear to originate from [email protected] (with my real
server name in there). And a deliveyr address of <> (ie: blank)

Does
this present a potential compromise of security?

Or is this some misconfiguration issue that I have?

Any assistance appreciated.

Cheers,

Graham Weldon

Fluid Lino

(02) 4927 5337

(0407) 017 293

[email protected]

www.fluidlino.com.au

----------

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

----------

_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

--
Bret Clark
Chief Technical Officer
Spectra Access
25 Lowell Street
Manchester, NH 03101
603-296-0760
http://www.spectraaccess.com

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general