SPAM scores too high

Aug 9, 2023
18
4
3
Hi all,

We have recently installed and configure dMail Gateway 7.3-8 as email gateway to filter our the potential SPAMs we received for our customers.
The problem we are facing at the moment is that the SPAM filter currently catch too many false positives emails, in fact there are more flase positives kept in qurantine than real SPAMs.

We have analysed the results and these rules increase the SAPM scare to high:
KAM_INFOUSMEBIZ
FREEMAIL_ENVFROM_END_DIGIT
GB_FREEMAIL_NUM
GB_FREEMAIL_TEXTCOLOR
INVALID_MSGID
KAM_LAZY_DOMAIN_SECURITY
RCVD_IN_HOSTKARMA_BL


My question is, how could I change the behaviour of SpamAssassin to prevent this to be taken into account, or to reduce the weigth to 0?

Thank you four your support!
Best regards,
Den.
 
Hi Stefan,
Thank you very much for you answer!

I found this yesterday and already changed the weight to 0.
But this morning I still get some legit emails with rule KAM_LAZY_DOMAIN_SECURITY weight = 1 while I was expecting to have 0 (see screenshot).

Maybe the custom scores is not applied?..
In the second screenshot, you'll see the custom scores that I have set.
I also have clicked on "Apply Custom Scores" and restarted pmg-smtp-filter, but the message Pending changes (Please restart pmg-smtp-filter to activate changes) is still present, is that normal?

Best,
Den.
 

Attachments

  • Screenshot 2023-08-10 at 09.32.28.png
    Screenshot 2023-08-10 at 09.32.28.png
    85.1 KB · Views: 40
  • Screenshot 2023-08-10 at 09.32.51.png
    Screenshot 2023-08-10 at 09.32.51.png
    87.2 KB · Views: 36
Last edited:
Maybe the custom scores is not applied?..
It certainly seems like it, otherwise it shouldn't show the diff below the settings and the option should be greyed out. You could maybe find an indicator for why this is via journalctl.
 
Thank you,
Finally I have reverted this as we finally decided to not apply these custom scores
Instead I have deactivated the Mail filter rule "Quarantine/Mark SPAM (level 3)", as we noticed that most false positives were scored between 3 and 5.
Since then we have much less false positives.

Best
Den.
 
  • Like
Reactions: Stoiko Ivanov

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!