SPAM scores too high

[kreops]

Hi all,

We have recently installed and configure dMail Gateway 7.3-8 as email gateway to filter our the potential SPAMs we received for our customers.
The problem we are facing at the moment is that the SPAM filter currently catch too many false positives emails, in fact there are more flase positives kept in qurantine than real SPAMs.

We have analysed the results and these rules increase the SAPM scare to high:
KAM_INFOUSMEBIZ
FREEMAIL_ENVFROM_END_DIGIT
GB_FREEMAIL_NUM
GB_FREEMAIL_TEXTCOLOR
INVALID_MSGID
KAM_LAZY_DOMAIN_SECURITY
RCVD_IN_HOSTKARMA_BL


My question is, how could I change the behaviour of SpamAssassin to prevent this to be taken into account, or to reduce the weigth to 0?

Thank you four your support!
Best regards,
Den.

 

[shanreich]

You should be able to set custom scores for this rules via our Web UI. You can read more about this in the PMG docs [1].

[1] https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_spamdetector_customscores

 

[kreops]

Hi Stefan,
Thank you very much for you answer!

I found this yesterday and already changed the weight to 0.
But this morning I still get some legit emails with rule KAM_LAZY_DOMAIN_SECURITY weight = 1 while I was expecting to have 0 (see screenshot).

Maybe the custom scores is not applied?..
In the second screenshot, you'll see the custom scores that I have set.
I also have clicked on "Apply Custom Scores" and restarted pmg-smtp-filter, but the message Pending changes (Please restart pmg-smtp-filter to activate changes) is still present, is that normal?

Best,
Den.

 

[shanreich]

Maybe the custom scores is not applied?..

It certainly seems like it, otherwise it shouldn't show the diff below the settings and the option should be greyed out. You could maybe find an indicator for why this is via journalctl.

 

[kreops]

Thank you,
Finally I have reverted this as we finally decided to not apply these custom scores
Instead I have deactivated the Mail filter rule "Quarantine/Mark SPAM (level 3)", as we noticed that most false positives were scored between 3 and 5.
Since then we have much less false positives.

Best
Den.