Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #11 (permalink)  
Old 03-17-2010, 09:48 AM
y@w y@w is offline
Moderator
 
Posts: 658
Default

Quote:
Originally Posted by Samp View Post
Oh.. the rule doesn't need to be disabled, necessarily. The original link posted didn't suggest changing the score..

Nevertheless, there's really nothing that we can do to help without more info. At least some new headers of a spam message not marked would be helpful.
__________________
What a n00b!
Reply With Quote
  #12 (permalink)  
Old 03-17-2010, 11:35 AM
Advanced Member
 
Posts: 209
Default

Quote:
Originally Posted by y@w View Post
Oh.. the rule doesn't need to be disabled, necessarily. The original link posted didn't suggest changing the score..

Nevertheless, there's really nothing that we can do to help without more info. At least some new headers of a spam message not marked would be helpful.
Ok, I undo the changes in score file and make the changes in 72_active.cf as:

Code:
header   FH_DATE_PAST_20XX<---->Date =~ /20[2-9][0-9]/ [if-unset: 2006]
Then restarted Amavisd but the spam filter dosen't work anymore, see the header of this mail, a real spam, don't saw as spam:

Quote:
Return-Path: amig3833d@ms2.hinet.net
Received: from zimbra.geismar.com (LHLO zimbra.geismar.com) (88.191.228.37)
by zimbra.geismar.com with LMTP; Wed, 17 Mar 2010 18:21:41 +0000 (UTC)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zimbra.geismar.com (Postfix) with ESMTP id ACAEB9FC03D
for <samp@geismar.com>; Wed, 17 Mar 2010 19:21:41 +0100 (CET)
X-Quarantine-ID: <4RdWlvRp66nt>
X-Virus-Scanned: amavisd-new at zimbra.geismar.com
X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "Cc"
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=6.64 tagged_above=-10 required=6.6 WHITELISTED
tests=[BAYES_99=3.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1,
STOX_REPLY_TYPE=0.001, TVD_FINGER_02=2.134] autolearn=no

Received: from zimbra.geismar.com ([127.0.0.1])
by localhost (zimbra.geismar.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4RdWlvRp66nt; Wed, 17 Mar 2010 19:21:37 +0100 (CET)
Received: from postfix.geismar.com (postfix.geismar.com [88.191.228.233])
by zimbra.geismar.com (Postfix) with ESMTP id A114F9FC038;
Wed, 17 Mar 2010 19:21:37 +0100 (CET)
Received: from telesp.net.br (189-68-72-61.dsl.telesp.net.br [189.68.72.61])
by postfix.geismar.com (Postfix) with ESMTP id 420C7C88EF;
Wed, 17 Mar 2010 18:21:37 +0000 (UTC)
Received: from 189.68.72.61 by ms2a.hinet.net; Wed, 17 Mar 2010 15:21:36 -0300
Date: Wed, 17 Mar 2010 15:21:36 -0300
From: <ce-neuilly@geismar.com>,
What can i do ?

Thanks for your help.

Sam.
__________________
Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
On Debian Vserver
Reply With Quote
  #13 (permalink)  
Old 03-17-2010, 12:03 PM
Moderator
 
Posts: 7,928
Default

Tune your SA installation for a start : Improving Anti-spam system - Zimbra :: Wiki

If you have that full email please post it to Spamalyser and I will run it to see how my system scores it. Just send me the link and can then advise.
__________________
Reply With Quote
  #14 (permalink)  
Old 03-17-2010, 03:37 PM
Advanced Member
 
Posts: 209
Default

Quote:
Originally Posted by uxbod View Post
Tune your SA installation for a start : Improving Anti-spam system - Zimbra :: Wiki
Thanks for this link !

Quote:
If you have that full email please post it to Spamalyser and I will run it to see how my system scores it. Just send me the link and can then advise.
So I understand why I have a WHITELIST for that mail I had in Preferences/Mail whitelist @geismar.com but alls mail comes from @geismar.com (I think) I suppress this and now the spam are well detected

Thanks for all.

Sam.
__________________
Release 6.0.7_GA_2473.DEBIAN5 DEBIAN5 FOSS edition.
On Debian Vserver
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.