[SOLVED] Increase Score Spam

T

thiagotgc

Active Member
Dec 17, 2019
152
22
38
37
Every message received, I see it appears:

SA Score x / 5

I want to change the Spam rating score to 6.

I changed the Spam Level Object (5) to 6.

But the messages continue to be classified as before, x / 5

Jan 1 21:42:48 Server pmg-smtp-filter[23061]: 403C75E0D3C8626110: SA score=1/5 time=2.256 bayes=undefined autolearn=no autolearn_force=no hits=AWL(-0.000),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),DKIM_VALID_AU(-0.1),DKIM_VALID_EF(-0.1),FREEMAIL_FROM(0.001),HTML_FONT_LOW_CONTRAST(0.001),HTML_IMAGE_RATIO_06(0.001),HTML_MESSAGE(0.001),KAM_LOTSOFHASH(0.25),KAM_SHORT(0.001),SPF_HELO_PASS(-0.001),SPF_SOFTFAIL(0.972),T_REMOTE_IMAGE(0.01),URIBL_BLOCKED(0.001),URI_NOVOWEL(0.5)
Click to expand...


Am I doing something wrong?
 
Last edited:
When I disable Spam Level (X), the message quoted SA Score X / 5 no longer appears

When I test sending GTUBE, it detects and blocks with 10/5.

What I want is to increase the minimum score for spam.

I want to be able to raise it to 6 or 7.

But it doesn't seem to be working
 
If spamassassin able to block gtube mean it is working.
Spamassassin detect spam mail by rules and accumilate the score until it reach your mail filter spam level rules.
If you want to block spam level 6 mail, setup a spam filter for spam level 6 in your mail filter and wait for any spam level 6 email to reach your mail server.
If you want to increase spamassassin rules, set custom scores under Configuration -> Spam Detector.
 
Yes, AntiSpam is working correctly.

But I get the impression he's fixing spam messages up to Score 5, not 6.

A.PNG
B.PNG

What is the correct parameter to increase the overall spam score?
 
thiagotgc said:
SA Score x / 5
Click to expand...

This '/5' is a message from SpamAssassin, which has nothing to do with the rule-system - PMG uses SpamAssassin in a more flexible way - you can define different rules with different spam-levels, whereas SpamAssassin by itself has the one level where it decides if a message is spam or not (which defaults to 5).

You can ignore the '/5' - the rule-system takes the actual score a message has for it's decision

I hope this explains it
 
  • Like
Reactions: thiagotgc
Stoiko Ivanov said:
This '/5' is a message from SpamAssassin, which has nothing to do with the rule-system - PMG uses SpamAssassin in a more flexible way - you can define different rules with different spam-levels, whereas SpamAssassin by itself has the one level where it decides if a message is spam or not (which defaults to 5).

You can ignore the '/5' - the rule-system takes the actual score a message has for it's decision

I hope this explains it
Click to expand...

Understand.

This gets in the way of reading LOGs a bit, because you get the idea that it is set to / 5

But if I must ignore, OK!

Thank you and Happy New Year!
 
Stoiko Ivanov said:
Glad that this explained it!

Please mark the thread as 'SOLVED' as it might help others


Happy new year to you as well! :)
Click to expand...

Thanks for adding some clarification to this. Just so I'm clear on my end, if I have the following for emails that are coming through:
Code: 
pmg-smtp-filter[1348]: 14285D60016BF0EFFD8: SA score=2/5
Then the following rule would be correct to block that level of SPAM and higher? Thank you! :)

1610728171309.png
 
Last edited:
osgit said:
Then the following rule would be correct to block that level of SPAM and higher? Thank you!
Click to expand...
yes - but in my experience a level of 2 is really low - meaning I would expect quite a few false positives (good mails, which get tagged as spam)

I would check which rules hit (should be printed in the same logline as the part you pasted here), and what else is special about the spam-mails - and
 
  • Like
Reactions: osgit
Stoiko Ivanov said:
yes - but in my experience a level of 2 is really low - meaning I would expect quite a few false positives (good mails, which get tagged as spam)

I would check which rules hit (should be printed in the same logline as the part you pasted here), and what else is special about the spam-mails - and
Click to expand...

I checked my logs and have very little at level 2, but I agree it is low. Here is a snippet of the same email that got through from the tracking center:

Code: 
Jan 15 03:18:22 smtp postfix/smtpd[1332]: connect from mail.matttteeer.com[195.177.95.195]
Jan 15 03:18:23 smtp postfix/smtpd[1332]: 072FE14283F: client=mail.matttteeer.com[195.177.95.195]
Jan 15 03:18:23 smtp postfix/smtpd[1332]: C1496142847: client=mail.matttteeer.com[195.177.95.195]
Jan 15 03:18:24 smtp postfix/smtpd[1332]: 44302142858: client=mail.matttteeer.com[195.177.95.195]
Jan 15 03:18:24 smtp postfix/smtpd[1332]: C793214285C: client=mail.matttteeer.com[195.177.95.195]
Jan 15 03:18:24 smtp postfix/cleanup[1336]: C793214285C: message-id=<0.0.0.6.1D6EB271E3ACE34.72623A@mail.matttteeer.com>
Jan 15 03:18:24 smtp postfix/qmgr[8570]: C793214285C: from=<lull_bed_discount-internaluser=our-domain.com@matttteeer.com>, size=12305, nrcpt=1 (queue active)
Jan 15 03:18:25 smtp pmg-smtp-filter[1348]: 14285D60016BF0EFFD8: new mail message-id=<0.0.0.6.1D6EB271E3ACE34.72623A@mail.matttteeer.com>#012
Jan 15 03:18:25 smtp postfix/smtpd[1332]: disconnect from mail.matttteeer.com[195.177.95.195] ehlo=1 mail=4 rcpt=4 bdat=8 quit=1 commands=18
Jan 15 03:18:26 smtp pmg-smtp-filter[1348]: 14285D60016BF0EFFD8: SA score=2/5 time=1.818 bayes=0.50 autolearn=no autolearn_force=no hits=BAYES_50(0.8),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),DKIM_VALID_AU(-0.1),DKIM_VALID_EF(-0.1),HTML_MESSAGE(0.001),JMQ_SPF_NEUTRAL(0.5),MIME_QP_LONG_LINE(0.001),SPF_HELO_NONE(0.001),SPF_PASS(-0.001),URIBL_BLACK(1.7)
Jan 15 03:18:26 smtp postfix/smtpd[1357]: connect from localhost.localdomain[127.0.0.1]
Jan 15 03:18:26 smtp postfix/smtpd[1357]: DBA2E14283F: client=localhost.localdomain[127.0.0.1], orig_client=mail.matttteeer.com[195.177.95.195]
Jan 15 03:18:26 smtp postfix/cleanup[1336]: DBA2E14283F: message-id=<0.0.0.6.1D6EB271E3ACE34.72623A@mail.matttteeer.com>
Jan 15 03:18:26 smtp postfix/qmgr[8570]: DBA2E14283F: from=<lull_bed_discount-internaluser=our-domain.com@matttteeer.com>, size=13411, nrcpt=1 (queue active)
Jan 15 03:18:27 smtp postfix/smtpd[1357]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 commands=5
Jan 15 03:18:27 smtp pmg-smtp-filter[1348]: 14285D60016BF0EFFD8: accept mail to <internaluser@our-domain.com> (DBA2E14283F) (rule: default-accept)
Jan 15 03:18:27 smtp pmg-smtp-filter[1348]: 14285D60016BF0EFFD8: processing time: 2.016 seconds (1.818, 0.06, 0)
Jan 15 03:18:27 smtp postfix/lmtp[1352]: C793214285C: to=<internaluser@our-domain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.2, delays=0.14/0.03/0/2, dsn=2.5.0, status=sent (250 2.5.0 OK (14285D60016BF0EFFD8))
Jan 15 03:18:27 smtp postfix/qmgr[8570]: C793214285C: removed
Jan 15 03:18:27 smtp postfix/smtp[1360]: DBA2E14283F: to=<internaluser@our-domain.com>, relay=192.168.56.12[192.168.56.12]:25, delay=0.51, delays=0.1/0/0.14/0.27, dsn=2.6.0, status=sent (250 2.6.0 <0.0.0.6.1D6EB271E3ACE34.72623A@mail.matttteeer.com> [InternalId=4173176] Queued mail for delivery)
Jan 15 03:18:27 smtp postfix/qmgr[8570]: DBA2E14283F: removed
 
Last edited:
  • Like
Reactions: team2021 and osgit
You must log in or register to reply here.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Quick Navigation

Home Get Subscription Wiki Downloads Proxmox Customer Portal About

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!
Community platform by XenForo® © 2010-2024 XenForo Ltd.
Top Bottom