i run also
> zmprov gcf zimbraSpamIsSpamAccount
spam@myzimbra.com
i use the admin site to check spam@myzimbra.com and find all my junk mail there so i run
> zmtrainsa
and also no change
Printable View
i run also
> zmprov gcf zimbraSpamIsSpamAccount
spam@myzimbra.com
i use the admin site to check spam@myzimbra.com and find all my junk mail there so i run
> zmtrainsa
and also no change
Have you changed the tag/kill settings? That affects whether spam is seen or removed, you'll also need to check the headers and see what's happening with the email.
Spam will stay in the 'spam account' until the overnight training jobs are run.
last thing :-)
msg comes with below rate
X-OriginalArrivalTime: 28 Jun 2006 16:08:13.0687 (UTC) FILETIME=[0EF9E870:01C69ACD]
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Wed Jun 28 23:16:15 2006
X-DSPAM-Confidence: 0.8445
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 44a2e38f309561813820934
X-DSPAM-Factors: 27,
X-Virus-Scanned: amavisd-new at
X-Spam-Status: No, score=-3.587 tagged_above=-10 required=5 autolearn=ham
tests=[ALL_TRUSTED=-1.8, AWL=0.798, BAYES_00=-2.599, DSPAM_HAM=-0.1,
HTML_90_100=0.113, HTML_MESSAGE=0.001]
X-Spam-Score: -3.587
X-Spam-Level:
i try also to tail -f /var/log/zimbra.log
Jun 28 23:42:26 myzimbra.com amavis[18785]: (18785-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060628T220806-18785: <y@hotmail.com> -> <y@myzimbra.com > Received: SIZE=3081 from myzimbra.com ([127.0.0.1]) by localhost (myzimbra.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18785-02 for <y@myzimbra.com >; Wed, 28 Jun 2006 23:42:25 +0300 (EEST)
Jun 28 23:42:27 myzimbra.com amavis[18785]: (18785-02) Checking: A6qVZ-r-L4Qh [213.131.64.12] <y@hotmail.com> -> <y@myzimbra.com >
Jun 28 23:42:29 myzimbra.com clamd[12369]: SelfCheck: Database status OK.
Jun 28 23:42:50 myzimbra.com postfix/smtpd[7958]: initializing the server-side TLS engine
Jun 28 23:42:50 myzimbra.com postfix/smtpd[7958]: connect from localhost.localdomain[127.0.0.1]
Jun 28 23:42:50 myzimbra.com postfix/trivial-rewrite[7633]: warning: do not list domain myzimbra.com in BOTH mydestination and virtual_mailbox_domains
Jun 28 23:42:50 myzimbra.com postfix/smtpd[7958]: 2621828019: client=localhost.localdomain[127.0.0.1]
Jun 28 23:42:50 myzimbra.com postfix/cleanup[7634]: 2621828019: message-id=<C3F8903C13911A45B4BA3B16F4CB79B40885A6D0@empe2 k.linkmail.local>
Jun 28 23:42:50 myzimbra.com postfix/smtpd[7958]: disconnect from localhost.localdomain[127.0.0.1]
Jun 28 23:42:50 myzimbra.com postfix/qmgr[18782]: 2621828019: from=<y@hotmail.com>, size=3938, nrcpt=1 (queue active)
Jun 28 23:42:50 myzimbra.com postfix/trivial-rewrite[7633]: warning: do not list domain myzimbra.com in BOTH mydestination and virtual_mailbox_domains
Jun 28 23:42:50 myzimbra.com amavis[18785]: (18785-02) FWD via SMTP: <y@hotmail.com> -> <y@myzimbra.com >, 250 2.6.0 Ok, id=18785-02, from MTA([127.0.0.1]:10025): 250 Ok: queued as 2621828019
Jun 28 23:42:51 myzimbra.com amavis[18785]: (18785-02) Passed CLEAN, [213.131.64.12] [213.131.64.12] <y@hotmail.com> -> <y@myzimbra.com >, Message-ID: <C3F8903C13911A45B4BA3B16F4CB79B40885A6D0@empe2k.l inkmail.local>, mail_id: A6qVZ-r-L4Qh, Hits: -3.621, 29284 ms
Jun 28 23:42:51 myzimbra.com postfix/lmtp[7961]: 2621828019: to=<y@myzimbra.com >, relay=myzimbra.com [213.131.64.56], delay=1, status=sent (250 2.1.5 OK)
Jun 28 23:42:51 myzimbra.com postfix/qmgr[18782]: 2621828019: removed
Jun 28 23:42:51 myzimbra.com postfix/smtp[7635]: EE5DA27FED: to=<y@myzimbra.com >, relay=127.0.0.1[127.0.0.1], delay=33, status=sent (250 2.6.0 Ok, id=18785-02, from MTA([127.0.0.1]:10025): 250 Ok: queued as 2621828019)
Jun 28 23:42:51 myzimbra.com postfix/qmgr[18782]: EE5DA27FED: removed
Jun 28 23:42:51 myzimbra.com amavis[18785]: (18785-02) extra modules loaded: Net/LDAP/Bind.pm
Well, that's why it still goes to your inbox - it's not spam. ;)
each time i move it to junk to stop it and it comes to my inbox, and run zmtrainsa on my junk folder :-(
i think as you said that becz msg X-Spam-Score is -3.621, but how can i change that, for example how can i change the rate given by BAYES_00 (-2.599) to +ve value for example
But the point is, it's not spam. Sending it to your inbox doesn't make it spam unless the tests determine that it's spam. If you want to change the tests have a look in the /opt/zimbra directory (I can't remember the exact location) for the spamassassin .cf files - you can change them in there.
I've also mentioned the tag/kill percentages in the admin UI, you need to set them to a level that catches spam and also doesn't catch too many false positives - that's a judgement you must make.
sorry for all my question, but please take last one
when i mark one message as junk, when i receive same message again, is it pass through normal tests or the spamassissan directly tag it as junk without testing
2nd all rules in /opt/zimbra/conf/spamsession/***.cf run by default all i have to choice which rules will be run
That's OK, I don't mind answering your questions - that's what we're all here for. :DQuote:
Originally Posted by last1ghost
AFAIK, it goes through the '.cf' tests again and is also checked whether it's been seen before as spam, that's what the training does. Don't forget the tag/kill settings, they are what determine whether you see the spam in your inbox or it gets removed. When you make changes to your rules you need to have the tag/kill settings set so that your spam gets tagged rather than deleted just to make sure you don't delete legitimate email. Once you're happy you then change the settings so that it gets deleted.Quote:
Originally Posted by last1ghost
:eek: That's two questions, I thought you said one? :D All the files in that directory are run by default, if you want to change the ones used you need to add or remove them. I don't think there's any way to run specific rule other than that.Quote:
Originally Posted by last1ghost
I keep saying this but it's worth repeating, there is no definitive method that will remove all spam and leave all legitimate email - it's a judgement each user will have to make for themselves. Using spamassassin and DSPAM can get rid of most of the rubbish but you are likely to still see small amounts of spam once you've tuned your settings.
i find some solution
i remove mv 23_bayes.cf /tmp/
then it start give reasonable spam score, before i remove this rule i try to send email that hotmail consider it as junk but zimbra put it in my inbox (X-Spam-Score: -2.556)
X-Spam-Status: No, score=-2.556 tagged_above=-10 required=5 autolearn=no
tests=[ALL_TRUSTED=-1.8, AWL=-0.365, BAYES_00=-2.599,
DNS_FROM_RFC_POST=1.708, DSPAM_SPAM=0.5]
X-Spam-Score: -2.556
after i remove this rule and resend again it goes to junk
X-Spam-Status: Yes, score=6.135 tagged_above=-10 required=5 autolearn=no
tests=[ALL_TRUSTED=-1.8, AWL=-9.028, BAYES_00=-2.599,
DATE_IN_PAST_03_06=0.478, DSPAM_HAM=-0.1, URIBL_AB_SURBL=3.812,
URIBL_JP_SURBL=4.087, URIBL_OB_SURBL=3.008, URIBL_SBL=1.639,
URIBL_SC_SURBL=4.498, URIBL_WS_SURBL=2.14]
X-Spam-Score: 6.135
:-)
also you can see, it run more tests ???!!!!!
do you think i can work with this solution
can i configre my own blacklist ?