I've been using Spam Assissin for a long time now with great success. I love that it filters all the junk out of my inbox. But a couple times now it has just quit working. It quit on me in September and I submitted a trouble ticket. No one ever seemed to figure out why it quit, but it eventually started working again in a couple weeks. Now it has quit again today and all the junk is flooding our email boxes. Anyone else experiencing this? My domain is easycall.net

Spamassassin will do that from time to time. Spamd will die, or there will be a config error due to a cpanel upgrade and it will stop filtering. I would check and make sure that the user_prefs file in .spamassassin dir is OK. Look for entries that are from the old config files etc... I noticed the other day that lots more spam was filtering past spamassassin, and had to tweak my user_prefs file. My guess is there was an upgrade with either spamassassin(spamd) or cpanel...

Jason

Could you check it again in a few hours?

JasonJones is right. SpamAssasin 100% doesn't work. But you can open a trouble ticket on FineDesk and our supports will check it for sure.

Yes, it is working again now. Thanks!

i'm getting some virus thru
X-Spam-Status: No, score=3.8 required=5.0 tests=BAYES_50,FORGED_YAHOO_RCVD,
MIME_BOUND_NEXTPART,MISSING_MIMEOLE,NO_REAL_NAME,PRIORITY_NO_NAME
autolearn=no version=3.0.2

How can I set things like FORGED_YAHOO_RCVD to be a higher score?
I have many ppl mail me with NO_REAL_NAME from mobiles, so theres nothing else to set.

I hope this link will be useful:
http://wiki.apache.org/spamassassin/FrequentlyAskedQuestions

yes and no.
there doesn't seem to be a web interface for most options? just white/black lists. Im afraid Im not good at doing unix stuff.

You can add scores to the user_prefs file via your Cpanel...

Open Cpanel > Mail > Spam Assassin > Configure Button...


You'll see some text fields with "score" in them..

Put in the Symbolic_Test_name <score>

So if you wanted to add "FORGED_YAHOO_RCVD" with a score of 9 you would put :

FORGED_YAHOO_RCVD 9.0

You Can also Assign Negative scores... So if you needed to LOWER a score from a certain test like "NO_REAL_NAME" instead of it scoring something like 2 you could have it score 1 or even -20 etc... if it was scored -10 it would score like so...

NO_REAL_NAME -10.0
FORGED_YAHOO_RCVD 9.0
SOME_OTHER_TESTS 4.0

If you add them all together you get 3.0 because of the negative 10... If all else fails you can download the "user_prefs" file located in your ~/.spamassassin folder, edit it and re-upload it.


Jason

thanks. Now want to ask the stupid question, where is the list of headers like FORGED_YAHOO_RCVD ? and how much they are worth by default. I'm not sure how much to assign to them
and if I want to assign for forged from everywhere instead of just from Yahoo what isshould I do

also, do you have a good configuration file, maybe you could post it ere for everyone to use

These are the more common ones you'll find in spam. You can always goto apache.org and check the wiki for spamassassin to get a full list...

ALL_TRUSTED
BIZ_TLD
BLANK_LINES_70_80
DATE_IN_FUTURE_03_06
DEAR_SOMETHING
DISGUISE_PORN
DNS_FROM_AHBL_RHSBL
DRUGS_ERECTILE
DRUG_DOSAGE
DRUG_ED_SILD
ENGLISH_UCE_SUBJECT
FIN_FREE
FORGED_OUTLOOK_HTML
FORGED_OUTLOOK_TAGS
FORGED_YAHOO_RCVD
FROM_ENDS_IN_NUMS
GAPPY_SUBJECT
HELO_DYNAMIC_YAHOOBB
HTML_20_30
HTML_30_40
HTML_40_50
HTML_50_60
HTML_60_70
HTML_70_80
HTML_80_90
HTML_90_100
HTML_FONT_FACE_BAD
HTML_FONT_INVISIBLE
HTML_IMAGE_ONLY_04
HTML_MESSAGE
HTML_TEXT_AFTER_BODY
HTML_TEXT_AFTER_HTML
HTML_WEB_BUGS
INFO_TLD
INVALID_DATE
MISSING_DATE
MISSING_SUBJECT
NIGERIAN_BODY1
NIGERIAN_BODY2
NIGERIAN_BODY3
NIGERIAN_BODY4
NO_REAL_NAME
OFFSHORE_SCAM
RCVD_HELO_IP_MISMATCH
RCVD_IN_BL_SPAMCOP_NET
RCVD_IN_DSBL
RCVD_IN_NJABL_DUL
RCVD_IN_SBL
RCVD_IN_SORBS_DUL
RCVD_IN_XBL
RCVD_NUMERIC_HELO
REMOVE_PAGE
SUBJECT_DRUG_GAP_L
SUBJ_HAS_SPACES
SUBJ_HAS_UNIQ_ID
TO_ADDRESS_EQ_REAL
TRACKER_ID
UNDISC_RECIPS
WHY_WAIT
FORGED_RCVD_HELO
HELO_DYNAMIC_HCC
HELO_DYNAMIC_IPADDR2
ALL_NATURAL
CUM_SHOT
MONEY_BACK

what do MIME_BOUND_NEXTPART,MISSING_MIMEOLE mean?
are they good indicators for spam?

If you go to the SpamAssassin site and click on the "Tests" link it will give you the line for every test, default value, and a description of what each test looks for.