Spam Filter

[drdre]

hi hi all..

As of late i have been getting TONS of ****** spam mails to some of my inboxs...

How can i configure the spam filter on the server to block this ?

I am using the FOSS 6.x

[uxbod]

It would help if you let us know the type of spam and posted the headers from one of the emails. Are you using any RBLs as well ?

[drdre]

RBLs ??

Here is the header from one of the emails:

Return-path: <andreb@capp.ch>
Envelope-to: andreb@chapmans.co.tt
Delivery-date: Tue, 02 Mar 2010 05:12:31 -0600
Received: from [95.79.27.87] (helo=mailin-02.mx.aol.com)
by vesta.site5.com with smtp (Exim 4.69)
(envelope-from <andreb@capp.ch>)
id 1NmQ1e-0002gB-T5
for andreb@chapmans.co.tt; Tue, 02 Mar 2010 05:12:31 -0600
From: ****** � Official Site <andreb@capp.ch>
To: "andreb" <andreb@chapmans.co.tt>
Reply-To: andreb@capp.ch
Subject: For andreb@capp.ch Discount #85033
Date: Tue, 02 Mar 2010 11:12:42 -0180
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

Sadly enough its coming from different email addresses..

[uxbod]

Improving Anti-spam system - Zimbra :: Wiki

Would you also please post from the headers what SPAM score that email achieved.

[phoenix]

Originally Posted by drdre

RBLs ??

DNSBL - Wikipedia, the free encyclopedia
rbl spam wikipedia - Yahoo! Search Results

[drdre]

hi all,

I have read Improving Anti-spam system - Zimbra :: Wiki

and adding some blacklist to my /opt/zimbra/conf/salocal.cf.in .. but i am still getting mail from capp.ch ..

Any one can tell me where i when wrong ? I have placed my salocal.cf.in below



# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
################################################## #########################
#
# rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock

header DSPAM_SPAM X-DSPAM-Result =~ /^Spam$/
describe DSPAM_SPAM DSPAM claims it is spam
score DSPAM_SPAM 1.5

header DSPAM_HAM X-DSPAM-Result =~ /^Innocent$/
describe DSPAM_HAM DSPAM claims it is ham
score DSPAM_HAM -0.5

%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%%
%%uncomment VAR:zimbraMtaAntiSpamLockMethod%%lock_method %%zimbraMtaAntiSpamLockMethod%%

rewrite_header Subject *SPAM* _STARS(*)_
bayes_auto_learn 1
bayes_min_spam_num 60
bayes_min_ham_num 60
clear_headers
add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
add_header all Level _STARS(*)_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on _HOSTNAME
blacklist_from *@capp.ch
blacklist_from *@the-machine.net
blacklist_from *@accedoconsulting.com
blacklist_from *@veloxzone.com.br
blacklist_from *@allaboutfaces.com

[uxbod]

Did you perform the following after making those changes ?

su - zimbra
zmmtactl stop ; zmmtactl start

[drdre]

hrm.. true forgot to run that.. when i did i got

[zimbra@zimbra conf]$ zmmtactl start
Rewriting configuration files...done.
Starting zmmtaconfig...done.
postfix/postfix-script: warning: not owned by root: /opt/zimbra/data/postfix/spool
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/main.cf
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/master.cf
postfix/postfix-script: warning: not owned by root: /opt/zimbra/postfix-2.6.5.2z/conf/master.cf.in
postfix/postfix-script: starting the Postfix mail system
Starting saslauthd...done.

i am a little worried about the warning not owned by root messages..
Am i to be worried about those ?

[uxbod]

Nope; that is fine.

[drdre]

thanks... let see if it works