Spam Filter

hi hi all..

As of late i have been getting TONS of ****** spam mails to some of my inboxs...

How can i configure the spam filter on the server to block this ?

I am using the FOSS 6.x

It would help if you let us know the type of spam and posted the headers from one of the emails. Are you using any RBLs as well ?

RBLs ??

Here is the header from one of the emails:

Return-path: <andreb@capp.ch>
Envelope-to: andreb@chapmans.co.tt
Delivery-date: Tue, 02 Mar 2010 05:12:31 -0600
Received: from [95.79.27.87] (helo=mailin-02.mx.aol.com)
by vesta.site5.com with smtp (Exim 4.69)
(envelope-from <andreb@capp.ch>)
id 1NmQ1e-0002gB-T5
for andreb@chapmans.co.tt; Tue, 02 Mar 2010 05:12:31 -0600
From: ****** � Official Site <andreb@capp.ch>
To: "andreb" <andreb@chapmans.co.tt>
Reply-To: andreb@capp.ch
Subject: For andreb@capp.ch Discount #85033
Date: Tue, 02 Mar 2010 11:12:42 -0180
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

Sadly enough its coming from different email addresses.. :(

Improving Anti-spam system - Zimbra :: Wiki

Would you also please post from the headers what SPAM score that email achieved.

Quote:

---

Originally Posted by drdre

RBLs ??

---

DNSBL - Wikipedia, the free encyclopedia
rbl spam wikipedia - Yahoo! Search Results

hi all,

I have read Improving Anti-spam system - Zimbra :: Wiki

and adding some blacklist to my /opt/zimbra/conf/salocal.cf.in .. but i am still getting mail from capp.ch ..

Any one can tell me where i when wrong ? I have placed my salocal.cf.in below



# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
################################################## #########################
#
# rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock

header DSPAM_SPAM X-DSPAM-Result =~ /^Spam$/
describe DSPAM_SPAM DSPAM claims it is spam
score DSPAM_SPAM 1.5

header DSPAM_HAM X-DSPAM-Result =~ /^Innocent$/
describe DSPAM_HAM DSPAM claims it is ham
score DSPAM_HAM -0.5

%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%%
%%uncomment VAR:zimbraMtaAntiSpamLockMethod%%lock_method %%zimbraMtaAntiSpamLockMethod%%

rewrite_header Subject *SPAM* _STARS(*)_
bayes_auto_learn 1
bayes_min_spam_num 60
bayes_min_ham_num 60
clear_headers
add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
add_header all Level _STARS(*)_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on _HOSTNAME
blacklist_from *@capp.ch
blacklist_from *@the-machine.net
blacklist_from *@accedoconsulting.com
blacklist_from *@veloxzone.com.br
blacklist_from *@allaboutfaces.com

Did you perform the following after making those changes ?

Code:

---

su - zimbra
zmmtactl stop ; zmmtactl start

---

hrm.. true forgot to run that.. when i did i got

[zimbra@zimbra conf]$ zmmtactl start
Rewriting configuration files...done.
Starting zmmtaconfig...done.
postfix/postfix-script: warning: not owned by root: /opt/zimbra/data/postfix/spool
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/main.cf
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/master.cf
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/master.cf.in
postfix/postfix-script: starting the Postfix mail system
Starting saslauthd...done.

i am a little worried about the warning not owned by root messages..
Am i to be worried about those ?

Nope; that is fine.

thanks... let see if it works