Mailing List Archive

Sunday, January 27, 2019, 5:45:13 AM, you wrote:

> I've searched and searched - and cant find an answer!

> can I add the _SCORE_ to all message subjects not JUST spam?
> I have SA set to add X-Spam headers to all (and thats working), but i'd like
> to see the score in all the subjects.

Check out https://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html#basic_message_tagging_options

--
Best regards,
Duane Hill

yeah - i already went through that - I was under the impression that the
subject rewrite only works for spam, not ham.

i can twork out how to add a _SCORE_ to the subject line of ham as well

Im asking this as some spam appears to be getting through unchecked - im
trouble shooting and wanted a quick way to see when a message was unchecked
without having to open the message, and view the headers.

my line of thought was, if ALL filtered messages show the _SCORE_ in the
subject, then anythign without a _SCORE_ must by default have not been
scanned - and i could delve further.

as a workround, for troubleshooting on one spammy account, Ive currently got
spam lvl set at 0.01 and all my 'spam' has [ _SCORE_ ] in the subject. which
is great - if anything doesnt have a score, then i know it is (a) under 0.01
or (b) hasnt been checked - at which point i can look in the headers as i've
got X-Spam headers for all. - if there are no X-Spam headers then the
message has got through unchecked.




--
Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Users-f3.html

On Sun, 27 Jan 2019 06:04:09 -0700 (MST)
LegendGamesMaster wrote:

i can twork out how to add a _SCORE_ to the subject line of ham as
> well
>
> Im asking this as some spam appears to be getting through unchecked -
> im trouble shooting and wanted a quick way to see when a message was
> unchecked without having to open the message, and view the headers.

They may be above the maximum size for checking:

man spamc
...
-s max_size, --max-size=max_size
Set the maximum message size which will be sent to spamd --
any bigger than this threshold and the message will be
returned unprocessed (default: 500 KB). If spamc gets
handed a message bigger than this, it won't be passed to
spamd. The maximum message size is 256 MB.

The size is specified in bytes, as a positive integer
greater than 0. For example, -s 500000.

Yep - i've just finished examining the logs and the size was over our default
(256k on our system for some reason). Limit increased, and it appears to
have solved the issue. Will keep checking.
Also added zen.spamhaus.org as a blacklist checker, as this wasnt enabled.
Need to check that SA is using DBL next.
Thanks all for your valued input. Much appreciated.



--
Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Users-f3.html

On Sun, 27 Jan 2019, LegendGamesMaster wrote:

> Yep - i've just finished examining the logs and the size was over our default
> (256k on our system for some reason). Limit increased, and it appears to
> have solved the issue. Will keep checking.

> Also added zen.spamhaus.org as a blacklist checker, as this wasnt enabled.

Zen is widely considered reliable enough to use as an SMTP-time DNSBL at
the MTA level (i.e., block during the SMTP conversation, don't even accept
and scan the message at all).

> Need to check that SA is using DBL next.
> Thanks all for your valued input. Much appreciated.

--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...every time I sit down in front of a Windows machine I feel as
if the computer is just a place for the manufacturers to put their
advertising. -- fwadling on Y! SCOX
-----------------------------------------------------------------------
Today: Wolfgang Amadeus Mozart's 263rd Birthday

> On 27 Jan 2019, at 12:34, John Hardin <jhardin@impsec.org> wrote:
>
> On Sun, 27 Jan 2019, LegendGamesMaster wrote:
>
>> Yep - i've just finished examining the logs and the size was over our default
>> (256k on our system for some reason). Limit increased, and it appears to
>> have solved the issue. Will keep checking.
>
>> Also added zen.spamhaus.org as a blacklist checker, as this wasnt enabled.
>
> Zen is widely considered reliable enough to use as an SMTP-time DNSBL at the MTA level (i.e., block during the SMTP conversation, don't even accept and scan the message at all).

Yep, this is the only sensible way to use zen.



--
NOBODY LIKES SUNBURN SLAPPERS Bart chalkboard Ep. 7F23