Spamassassin Seems To Be Not Working

[Pauldow]

I seem to be getting junk mail (I prefer not to call it spam so I don't demean the fine products of the Hormel Meat Company) that isn't being caught, or even rated, by Spamassassin.

I see a line in the headers that says: Received: from mail by www32.hostpc.com with spam-scanned (Exim 4.50)

I don't see a line that says X-Spam with a numeric rating.

In DirectAdmin / e-Mail Management / Spamassasin Setup I have:
Send the spam to it's intended recipient.
Low Threshold (5.0)
Yes, set the subject to the following: **Junk Mail**
Use attachments.

No black or white list

Any hints on getting this to find the junk? I would hate to dissapoint any of the fine Nigerians who are anxiously waiting my urgent reply with their business proposals for lottery winnings. <_<

Thanks,
Paul

[tnas]

I have seen this happen a few times before on www29. A quick message to the helpdesk ussually solves the problem. Only once did Joe say "I didn't do anything!", but it was fixed anyway, so I thanked him anyway! :)

I think SA get "STUCK" every now and then.

[Pauldow]

Hi Tom,

Thenks for the reply. I created a ticket, and Joe said SA is working. He suggested that I change the threshold. I moved it to 3.5, and I succesfully got some junk with the subject line properly changed, and the additional header lines:

X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on www32.hostpc.com
X-Spam-Level: * * * * * * * * * * *
X-Spam-Status: Yes, score=11.7 required=3.5 tests=FORGED_YAHOO_RCVD,

Not sure why, but it's working now.


BTW, from your signature block it looks like you're just a bit up the road from me. I'm about a mile over the Conn. line in W. Suffield. I went to the airshow next door to you last weekend. Bet you can't wait until the F-15's arrive :) It'll be like an airshow every day. Earplugs will need to be a new employee benefit.

[tnas]

Wow, real close.... I live in Agawam, MA.
I am literally a "stones throw" from the runway on the municipal side of Barnes airport. The F-15's will be on the long N-S runway, but I'm sure it will be a bit louder than the whistling A-10's we have now.
We enjoyed the airshow from Thurs. through Monday. Planes started flying in on Thursday and kept flying till most were cleared out by Monday.

Joe sometimes does those "tricks"! :P

It's his magic.

(with a score of 11.7 DON'T share the rest of the email!)

[Pauldow]

I'm thinking that SA started working when I changed the default threshold setting. This account was recently moved to www32. I didn't change the SA settings at that time so perhaps the settings didn't sitck until I made a change and forced it to update the information.

I'm aware of Dirats. I used to work for ABB in Windsor, CT in the Nuclear Spare Parts Dept. Some people in my group had some work done there. With reorganizations and selling the company, everyone's split up now.

[Pauldow]

Also, it looks like SA has some gatching up to do with the junk mail writers. Today I got a "Business Proposal" that had all the usual scam text. It got a SA rating of only 0.4.

Another scam letter from the domain pnetmail.co.za got a SA score of 0.0.

It is still catching about half of the ones I get, but it looks like the mailers are getting by too often.

Paul

[ozee]

SA appears to be broke again...

[starfighter]

Ozee,
If it is not working a helpdesk ticket will help you more than posting here will. The ticket will offer you a much more immediate response than waiting till one of the HostPC staff
happens to read this thread.
Originally posted by ozee@Oct 8 2005, 02:33 PM
SA appears to be broke again...
Quoted post

[ozee]

I know .. at that point, I'd had a helpdesk ticket that was about 7 hours old. Shortly after I posted here, Joe had an answer back to me.

We're waiting on a new release - there was a serious bug in the last version. It should be online soon.


I had seen nothing posted about this.