Results 1 to 5 of 5

Thread: [SOLVED] SpamAssassin triggering incorrectly? (ZCS 4.5.7_GS_1319 Network Edition)

  1. #1
    davidh is offline Active Member
    Join Date
    Oct 2006
    Posts
    45
    Rep Power
    8

    Default [SOLVED] SpamAssassin triggering incorrectly? (ZCS 4.5.7_GS_1319 Network Edition)

    All,

    I have a very bizarre issue here - we get a lot of Japanese emails in, so I have configured

    ok_languages en jp
    ok_locales en jp

    in conf/salocal.cf.in which then appears in conf/salocal.cf as well as conf/spamassassin/local.cf (just in case). I have edited conf/spamassassin/v310pre.in to enable TextCat. Zimbra has then been restarted.

    However, our Japanese emails are still being triggered with UNWANTED_MESSAGE_BODY and CHARSET_FARAWAY_HEADER. Here is an example which given the tagging of iso-2022-jp should not be triggering these rules:

    Received: from localhost (localhost.localdomain [127.0.0.1])
    by mail.onegrp.com (Postfix) with ESMTP id 831EF1289AF7
    for <user@domain>; Tue, 22 Jan 2008 16:45:44 +1000 (EST)
    X-Virus-Scanned: amavisd-new at
    X-Spam-Flag: YES
    X-Spam-Score: 5.832
    X-Spam-Level: *****
    X-Spam-Status: Yes, score=5.832 tagged_above=-10 required=3 tests=[AWL=-1.189,
    BAYES_50=0.001, CHARSET_FARAWAY_HEADER=3.2, GAPPY_SUBJECT=1.02,
    HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNWANTED_LANGUAGE_BODY=2.8]
    Received: (qmail 34635 invoked by uid 60001); 22 Jan 2008 06:59:45 -0000
    DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
    s=yj20050223; d=yahoo.co.jp;
    h=Message-ID:Receivedate:From:Subject:To:MIME-Version:Content-Type;
    b=ig41AiIB0bZcGPlzggDID3xDLYQ5eYgSqF3yieHoP8SrApfr AbdWM4zGTNhNHMSmuAyuluzrKiLBpDH/hFfTsfZiTvMPgTDP6wg7iQq+5lNjn1eWjR93CAR8DLFp+hbf ;
    Message-ID: <blah blah blah>
    Tue, 22 Jan 2008 15:59:45 JST
    Date: Tue, 22 Jan 2008 15:59:45 +0900 (JST)
    From: =?ISO-2022-JP?B?GyRCQHVMbhsoQiAbJEIkIiRmO1IbKEI=?= <user@sourcedomain>
    Subject: [*** SPAM ***]=?ISO-2022-JP?B?GyRCJTUlcyVXJWslUSVDJS8kTjdvGyhC?=
    To: user@domain
    MIME-Version: 1.0
    Content-Type: multipart/alternative; boundary="0-2144660122-1200985185=:33655"

    --0-2144660122-1200985185=:33655
    Content-Type: text/plain; charset=iso-2022-jp

    あゆみさま

    。。。





    ---------------------------------
    Easy + Joy + Powerful = Yahoo! Bookmarks x Toolbar

    --0-2144660122-1200985185=:33655
    Content-Type: text/html; charset=iso-2022-jp

    <div>あゆみさま</div>


    --0-2144660122-1200985185=:33655--

    I assume I have stuffed something up, can anyone point me in the right direction please.

    Cheers,
    David

  2. #2
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    9

    Default

    This is not a fix so much as a workaround, but you could knock down the values of those two spam scoring elements in /opt/zimbra/conf/spamassassin/local.cf:

    Code:
    score CHARSET_FARAWAY_HEADER=0.2
    score UNWANTED_LANGUAGE_BODY=0.2
    Forcing a lower score on those two indicators will still show them in your spam filters but with a low enough score that they should let these messages through. Unless you ALSO get a lot of spam that only these indicators apply to it should probably not adversely affect your overall filtering performance.

  3. #3
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    9

    Default

    You probably already know this, but be sure to keep a backup of your local.cf file as it'll get overwritten any time you upgrade Zimbra.

  4. #4
    davidh is offline Active Member
    Join Date
    Oct 2006
    Posts
    45
    Rep Power
    8

    Default

    Finally solved this thanks to the Spamassassin list. The country code needs to be ja, not jp. Once I had that sorted, it all started working again.

    Cheers,
    David

  5. #5
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    9

    Default

    Quote Originally Posted by davidh View Post
    Finally solved this thanks to the Spamassassin list. The country code needs to be ja, not jp. Once I had that sorted, it all started working again.

    Cheers,
    David
    Good to know. Thanks for posting back; I'll mark this thread "solved."

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Trouble Sending mail - All Messages deferred!
    By SiteDiscovery in forum Administrators
    Replies: 7
    Last Post: 09-03-2009, 04:52 AM
  2. upgrading to network edition
    By zzzzsg in forum Installation
    Replies: 11
    Last Post: 03-06-2008, 10:58 PM
  3. ZCS Network Edition 4.5.x in SUSE ES 10.3
    By crowley in forum Installation
    Replies: 1
    Last Post: 10-26-2007, 09:36 AM
  4. Replies: 2
    Last Post: 03-02-2007, 09:29 AM
  5. ZCS 3.2 Beta Available
    By KevinH in forum Announcements
    Replies: 31
    Last Post: 07-07-2006, 03:46 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •