Spamfilter spamassassin

X-Trancer · Jan 23, 2007

Moins

Wer kann mir ein how to Schreiben für diesen Spamfilter zu Konfigurieren ich blick da irgendwie net durch bekomme lauter Spammails z.b über Viagra Software füe so und so US Dollar

System is Debian Sarge und Confixx Pro habe auch Webmin drauf

Roger Wilco · Jan 23, 2007

http://svn.apache.org/repos/asf/spamassassin/branches/3.1/INSTALL

X-Trancer · Jan 28, 2007

Nun bekomme ich viele fehler von den Rules du Jour die in etwo so aussehn

Code:

warning: description for WE_HONOR_ALL is over 50 chars
warning: description for DATE_IN_PAST_48_96 is over 50 chars
warning: description for HTML_MISSING_CTYPE is over 50 chars
warning: description for RCVD_IN_NJABL_CGI is over 50 chars
warning: description for MIME_BOUND_DIGITS_7 is over 50 chars
warning: description for INVALID_TZ_GMT is over 50 chars
warning: description for SPF_HELO_SOFTFAIL is over 50 chars
warning: description for PORN_URL_SLUT is over 50 chars
warning: description for PREST_NON_ACCREDITED is over 50 chars
warning: description for HTML_SHOUTING6 is over 50 chars
warning: description for FORGED_GW05_RCVD is over 50 chars
warning: description for RCVD_NUMERIC_HELO is over 50 chars
warning: description for EXCUSE_7 is over 50 chars
warning: score set for non-existent rule MSGID_GOOD_EXCHANGE
warning: score set for non-existent rule X_LIST_UNSUBSCRIBE
warning: score set for non-existent rule MICROSOFT_EXECUTABLE
warning: score set for non-existent rule RCVD_IN_SORBS
warning: score set for non-existent rule IN_REP_TO
warning: score set for non-existent rule HTML_IMAGE_ONLY_10
warning: score set for non-existent rule BAYES_44
warning: score set for non-existent rule RCVD_IN_RFCI
warning: score set for non-existent rule RCVD_IN_UNCONFIRMED_DSBL
warning: score set for non-existent rule HTML_IMAGE_ONLY_06
warning: score set for non-existent rule X_NJABL_OPEN_PROXY
warning: score set for non-existent rule QUOTED_EMAIL_TEXT
warning: score set for non-existent rule RAZOR2_CF_RANGE_11_50
Failed to compile URI SpamAssassin tests, skipping:
        (syntax error at /etc/spamassassin/local.cf, rule SPAMCOP_URI_RBL, line 1, near "eval:"
syntax error at /usr/share/spamassassin/20_uri_tests.cf, rule URI_OFFERS, line 125, near ";
}"
)
lint: 229 issues detected.  please rerun with debug enabled for more information.

Die Spammails sind somit immer noch da

kwalke · Jan 28, 2007

Du musst das auch noch konfigurieren (am besten mit Webmin).

X-Trancer · Jan 28, 2007

kwalke said:
Du musst das auch noch konfigurieren (am besten mit Webmin).

wund wie hab da kein plan

Habs mittels postfix howto gemacht dann von soner seite die rules du jour geladen

fraser · Jan 28, 2007

Deine local.cf scheint sich nicht mit den installierten Modulen zu vertragen.
Mach Dir hier 'ne neue.

Anschließend lädst Du Dir Rules Du Jour runter und speicherst es im selben Verzeichnis wie local.cf (z.B. /var/mail/spamassassin), machst es ausführbar (chmod +x /etc/mail/spamassassin/rules_du_jour), änderst darin den Pfad zu spamd (z.B. /usr/bin/spamd) und führst es (gelegentlich) aus (./rules_du_jour), um Deinen SA aktuell zu halten.

Empfehlenswert ist auch die Installation von FuzzyOCR - wie hier beschrieben. Damit werden auch Bilder in Mails auf Schalgworte gescannt.

Viel Erfolg!

X-Trancer · Jan 28, 2007

geht immer noch net

Code:

eco3033:~# rules_du_jour
exec: curl -w %{http_code} --compressed -O -R -s -S -z /etc/spamassassin/RulesDu                                                                              Jour/rules_du_jour [url]http://sandgnat.com/rdj/rules_du_jour[/url] 2>&1
curl_output: 304
Performing preliminary lint (sanity check; does the CURRENT config lint?).
No files updated; No restart required.





Rules Du Jour Run Summary:RulesDuJour Run Summary on eco3033:

***NOTICE***: spamassassin --lint failed.  This means that you have an error som                                                                              where in your SpamAssassin configuration.  To determine what the problem is, ple                                                                              ase run 'spamassassin --lint' from a shell and notice the error messages it prin                                                                              ts.  For more (debug) information, add the -D switch to the command.  Usually th                                                                              e problem will be found in local.cf, user_prefs, or some custom rulelset found i                                                                              n /etc/spamassassin.  Here are the errors that 'spamassassin --lint' reported:

warning: description for HTML_SHOUTING4 is over 50 chars
warning: description for CLICK_TO_REMOVE_1 is over 50 chars
warning: description for RCVD_IN_SORBS_SMTP is over 50 chars
warning: description for OFFSHORE_SCAM is over 50 chars
warning: description for FROM_WEBMAIL_END_NUMS6 is over 50 chars
warning: description for DIGEST_MULTIPLE is over 50 chars
warning: description for MIME_BOUND_DIGITS_15 is over 50 chars
warning: description exists for non-existent rule T_RCVD_IN_IADB_LIST_T
warning: description for MAILTO_SUBJ_REMOVE is over 50 chars
warning: description for DRUG_ED_SILD is over 50 chars
warning: description for HDR_ORDER_MTSRIX is over 50 chars
warning: description for NORMAL_HTTP_TO_IP is over 50 chars
warning: description for RCVD_IN_XBL is over 50 chars
warning: description for EXCUSE_4 is over 50 chars
warning: description for RCVD_IN_MAPS_DUL is over 50 chars
warning: description exists for non-existent rule T_RCVD_IN_IADB_LIST
warning: description for HTML_SHOUTING5 is over 50 chars
warning: description for MAILTO_TO_SPAM_ADDR is over 50 chars
warning: description for RCVD_IN_RSL is over 50 chars
warning: description for MIME_QP_LONG_LINE is over 50 chars
warning: description for HASHCASH_HIGH is over 50 chars
warning: description for DATE_IN_FUTURE_96_XX is over 50 chars
warning: description for DCC_CHECK is over 50 chars
warning: description for X_MSMAIL_PRIORITY_HIGH is over 50 chars
warning: description for DATE_IN_FUTURE_48_96 is over 50 chars
warning: description for MSGID_OUTLOOK_INVALID is over 50 chars
warning: description for DRUGS_ERECTILE_OBFU is over 50 chars
warning: description for FORGED_RCVD_HELO is over 50 chars
warning: description for MSGID_SPAM_99X9XX99 is over 50 chars
warning: description for RATWARE_EGROUPS is over 50 chars
warning: description for UPPERCASE_75_100 is over 50 chars
warning: description for FORGED_QUALCOMM_TAGS is over 50 chars
warning: description for MICRO_CAP_WARNING is over 50 chars
warning: description for INVALID_TZ_EST is over 50 chars
warning: description for SUBJ_HAS_UNIQ_ID is over 50 chars
warning: description for UPPERCASE_25_50 is over 50 chars
warning: description for RCVD_HELO_IP_MISMATCH is over 50 chars
warning: description for DATE_IN_FUTURE_06_12 is over 50 chars
warning: description for HDR_ORDER_TRIMRS is over 50 chars
warning: description for RATWARE_OE_MALFORMED is over 50 chars
warning: description for EXCUSE_3 is over 50 chars
warning: description for RCVD_IN_MAPS_RBL is over 50 chars
warning: description for BILL_1618 is over 50 chars
warning: description for ALL_TRUSTED is over 50 chars
warning: description for HTML_NONELEMENT_30_40 is over 50 chars
warning: description for FORGED_THEBAT_HTML is over 50 chars
warning: description for RCVD_IN_SORBS_SOCKS is over 50 chars
warning: description for MSGID_SPAM_ALPHA_NUM is over 50 chars
warning: description for RCVD_IN_SBL is over 50 chars
warning: description for RATWARE_HASH_2_V2 is over 50 chars
warning: description for ROUND_THE_WORLD is over 50 chars
warning: description exists for non-existent rule T_RCVD_IN_CSMA_BL
warning: description for RATWARE_GECKO_BUILD is over 50 chars
warning: description for MSGID_YAHOO_CAPS is over 50 chars
warning: description for MIME_HEADER_CTYPE_ONLY is over 50 chars
warning: description for REMOVE_POSTAL is over 50 chars
warning: description for RATWARE_RCVD_LC_ESMTP is over 50 chars
warning: description for NO_RDNS_DOTCOM_HELO is over 50 chars
warning: description for DATE_IN_PAST_12_24 is over 50 chars
warning: description for MIME_BOUND_RKFINDY is over 50 chars
warning: description for HTTP_CTRL_CHARS_HOST is over 50 chars
warning: description for RCVD_IN_SORBS_DUL is over 50 chars
warning: description for DATE_IN_FUTURE_12_24 is over 50 chars
warning: description for MSGID_SPAM_ZEROES is over 50 chars
warning: description for HTML_SHOUTING3 is over 50 chars
warning: description for EXCUSE_6 is over 50 chars
warning: description for X_ORIG_IP_NOT_IPV4 is over 50 chars
warning: description for DRUGS_SLEEP_EREC is over 50 chars
warning: description for FORGED_JUNO_RCVD is over 50 chars
warning: description for PRIORITY_NO_NAME is over 50 chars
warning: description for FROM_HAS_MIXED_NUMS3 is over 50 chars
warning: description for MSGID_SPAM_LETTERS is over 50 chars
warning: description for RCVD_FAKE_HELO_DOTCOM is over 50 chars
warning: description for RCVD_AM_PM is over 50 chars
warning: description for TO_NO_USER is over 50 chars
warning: description for FAKE_OUTBLAZE_RCVD is over 50 chars
warning: description for T_DNS_FROM_SECURITYSAGE is over 50 chars
warning: description exists for non-existent rule T_DNS_FROM_SECURITYSAGE
warning: description for RCVD_IN_NJABL_MULTI is over 50 chars
warning: description for EXCUSE_19 is over 50 chars
warning: description for __RCVD_IN_SBL_XBL is over 50 chars
warning: description for DNS_FROM_RFC_POST is over 50 chars
warning: description for RCVD_IN_SORBS_ZOMBIE is over 50 chars
warning: description for FROM_NUM_AT_WEBMAIL is over 50 chars
warning: description for WEIRD_QUOTING is over 50 chars
warning: description for HTML_NONELEMENT_20_30 is over 50 chars
warning: description for X_AUTH_WARN_FAKED is over 50 chars
warning: description for FORGED_HOTMAIL_RCVD is over 50 chars
warning: description for MPART_ALT_DIFF is over 50 chars
warning: description for MISSING_MIMEOLE is over 50 chars
warning: description for HTML_NONELEMENT_60_70 is over 50 chars
warning: description for TRACKER_ID is over 50 chars
warning: description for DATE_IN_PAST_24_48 is over 50 chars
warning: description for CHARSET_FARAWAY_HEADER is over 50 chars
warning: description for EXCUSE_REMOVE is over 50 chars
warning: description for HTML_NONELEMENT_00_10 is over 50 chars
warning: description for RCVD_IN_DSBL is over 50 chars
warning: description for RATWARE_HASH_2 is over 50 chars
warning: description for RCVD_IN_BSP_TRUSTED is over 50 chars
warning: description for ADDR_NUMS_AT_BIGSITE is over 50 chars
warning: description for MSGID_SPAM_CAPS is over 50 chars
warning: description for FORGED_AOL_TAGS is over 50 chars
warning: description for RATWARE_MOZ_MALFORMED is over 50 chars
warning: description for RATWARE_STORM_URI is over 50 chars
warning: description for FORGED_TELESP_RCVD is over 50 chars
warning: description for SENT_IN_COMPLIANCE is over 50 chars
warning: description for NUMERIC_HTTP_ADDR is over 50 chars
warning: description for PORN_URL_SEX is over 50 chars
warning: description for HTML_MIME_NO_HTML_TAG is over 50 chars
warning: description for SPF_SOFTFAIL is over 50 chars
warning: description for NO_DNS_FOR_FROM is over 50 chars
warning: description for MIME_BOUND_DD_DIGITS is over 50 chars
warning: description for HELO_DYNAMIC_HEXIP is over 50 chars
warning: description for HTML_NONELEMENT_50_60 is over 50 chars
warning: description for DATE_IN_PAST_03_06 is over 50 chars
warning: description for HTML_NONELEMENT_10_20 is over 50 chars
warning: description for RCVD_IN_SORBS_WEB is over 50 chars
warning: description for FORGED_AOL_RCVD is over 50 chars
warning: description for FORGED_HOTMAIL_RCVD2 is over 50 chars
warning: description for USERPASS is over 50 chars
warning: description for TO_ADDRESS_EQ_REAL is over 50 chars
warning: description for MIME_BOUND_NEXTPART is over 50 chars
warning: description for SPF_FAIL is over 50 chars
warning: description for DRUGS_ANXIETY_EREC is over 50 chars
warning: description for RCVD_DOUBLE_IP_SPAM is over 50 chars
warning: description for HTML_FONT_FACE_CAPS is over 50 chars
warning: description for FROM_HAS_ULINE_NUMS is over 50 chars
warning: description for WE_HONOR_ALL is over 50 chars
warning: description for DATE_IN_PAST_48_96 is over 50 chars
warning: description for HTML_MISSING_CTYPE is over 50 chars
warning: description for RCVD_IN_NJABL_CGI is over 50 chars
warning: description for MIME_BOUND_DIGITS_7 is over 50 chars
warning: description for INVALID_TZ_GMT is over 50 chars
warning: description for SPF_HELO_SOFTFAIL is over 50 chars
warning: description for PORN_URL_SLUT is over 50 chars
warning: description for PREST_NON_ACCREDITED is over 50 chars
warning: description for HTML_SHOUTING6 is over 50 chars
warning: description for FORGED_GW05_RCVD is over 50 chars
warning: description for RCVD_NUMERIC_HELO is over 50 chars
warning: description for EXCUSE_7 is over 50 chars
warning: description for HTML_NONELEMENT_70_80 is over 50 chars
warning: description for SUBJ_2_NUM_PARENS is over 50 chars
warning: description for DATE_IN_FUTURE_24_48 is over 50 chars
warning: description for RATWARE_HASH_DASH is over 50 chars
warning: description for BODY_8BITS is over 50 chars
warning: description for FROM_STARTS_WITH_NUMS is over 50 chars
warning: description for HASHCASH_2SPEND is over 50 chars
warning: description for HOT_NASTY is over 50 chars
warning: description for RCVD_IN_BSP_OTHER is over 50 chars
warning: description for __RCVD_IN_NJABL is over 50 chars
warning: description for FROM_HAS_MIXED_NUMS is over 50 chars
warning: description for DATE_IN_PAST_96_XX is over 50 chars
warning: description for HTML_NONELEMENT_80_90 is over 50 chars
warning: description for FORGED_EUDORAMAIL_RCVD is over 50 chars
warning: description for HTML_NONELEMENT_40_50 is over 50 chars
warning: description for MSGID_FROM_MTA_HOTMAIL is over 50 chars
warning: description for DATE_IN_PAST_06_12 is over 50 chars
warning: description for MIME_BOUND_MANY_HEX is over 50 chars
warning: description for ROUND_THE_WORLD_LOCAL is over 50 chars
warning: description for MSGID_FROM_MTA_HEADER is over 50 chars
warning: description for UPPERCASE_50_75 is over 50 chars
warning: description for PORN_URL_MISC is over 50 chars
warning: description for MARKETING_PARTNERS is over 50 chars
warning: description for DATE_IN_FUTURE_03_06 is over 50 chars
warning: description for HABEAS_USER is over 50 chars
warning: description for EXTRA_MPART_TYPE is over 50 chars
warning: description for RCVD_IN_MAPS_NML is over 50 chars
warning: description for NA_DOLLARS is over 50 chars
warning: description for HTML_SHOUTING7 is over 50 chars
warning: description for FORGED_YAHOO_RCVD is over 50 chars
warning: description for URIBL_SBL is over 50 chars
warning: description for SB_NSP_VOLUME_SPIKE is over 50 chars
warning: description for RCVD_DOUBLE_IP_LOOSE is over 50 chars
warning: description for EXCUSE_10 is over 50 chars
warning: description for FREE_QUOTE_INSTANT is over 50 chars
warning: description for RCVD_IN_NJABL_DUL is over 50 chars
warning: description for RCVD_IN_BL_SPAMCOP_NET is over 50 chars
warning: description for SB_NEW_BULK is over 50 chars
warning: description for SOMETHING_FOR_ADULTS is over 50 chars
warning: description for HTML_NONELEMENT_90_100 is over 50 chars
warning: description for FORGED_MUA_MOZILLA is over 50 chars
warning: description for RATWARE_JPFREE is over 50 chars
warning: description for INVALID_TZ_CST is over 50 chars
warning: description for NOT_ADVISOR is over 50 chars
warning: description for RCVD_IN_MAPS_RSS is over 50 chars
warning: description for RCVD_ILLEGAL_IP is over 50 chars
warning: description for HTML_EVENT_UNSAFE is over 50 chars
lint: 187 issues detected.  please rerun with debug enabled for more information                                                                              .

eco3033:~#

Weniger meldungen als vorher

Irgendwie sind die rules für version 2.6 und net 3.0 da gibts somit probleme hat jemand ne aktuellere?

fraser · Jan 28, 2007

schau dir mal an was vielleicht noch an Perl-Modulen fehlt

Code:

spamassassin --lint --debug

Die Module (not installed) kannst Du dann nachinstallieren.

Code:

perl -MCPAN -e shell
install modulname (z.B. install Mail::SpamAssassin::Plugin::Razor2)

X-Trancer · Jan 29, 2007

Es lag nun an der Version von dem Spamserver

Nun bekomme ich immer noch Spam wie tief kann ich mit den Hits gehen damit die Mails noch ankommen die ankommen sollten?

Sinepp · Jan 29, 2007

So in Richtung 5.0 geht bei mir echt gut.

Grüße
Sinepp

Spamfilter spamassassin

X-Trancer

Guest

Roger Wilco

Active Member

X-Trancer

Guest

kwalke

New Member

X-Trancer

Guest

fraser

Registered User

X-Trancer

Guest

fraser

Registered User

X-Trancer

Guest

Sinepp

Registered User

We value your privacy