Results 1 to 5 of 5

Thread: [SOLVED] SpamAssassin triggering incorrectly? (ZCS 4.5.7_GS_1319 Network Edition)

  1. #1
    Join Date
    Oct 2006
    Posts
    45
    Rep Power
    9

    Default [SOLVED] SpamAssassin triggering incorrectly? (ZCS 4.5.7_GS_1319 Network Edition)

    All,

    I have a very bizarre issue here - we get a lot of Japanese emails in, so I have configured

    ok_languages en jp
    ok_locales en jp

    in conf/salocal.cf.in which then appears in conf/salocal.cf as well as conf/spamassassin/local.cf (just in case). I have edited conf/spamassassin/v310pre.in to enable TextCat. Zimbra has then been restarted.

    However, our Japanese emails are still being triggered with UNWANTED_MESSAGE_BODY and CHARSET_FARAWAY_HEADER. Here is an example which given the tagging of iso-2022-jp should not be triggering these rules:

    Received: from localhost (localhost.localdomain [127.0.0.1])
    by mail.onegrp.com (Postfix) with ESMTP id 831EF1289AF7
    for <user@domain>; Tue, 22 Jan 2008 16:45:44 +1000 (EST)
    X-Virus-Scanned: amavisd-new at
    X-Spam-Flag: YES
    X-Spam-Score: 5.832
    X-Spam-Level: *****
    X-Spam-Status: Yes, score=5.832 tagged_above=-10 required=3 tests=[AWL=-1.189,
    BAYES_50=0.001, CHARSET_FARAWAY_HEADER=3.2, GAPPY_SUBJECT=1.02,
    HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNWANTED_LANGUAGE_BODY=2.8]
    Received: (qmail 34635 invoked by uid 60001); 22 Jan 2008 06:59:45 -0000
    DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
    s=yj20050223; d=yahoo.co.jp;
    h=Message-ID:Receivedate:From:Subject:To:MIME-Version:Content-Type;
    b=ig41AiIB0bZcGPlzggDID3xDLYQ5eYgSqF3yieHoP8SrApfr AbdWM4zGTNhNHMSmuAyuluzrKiLBpDH/hFfTsfZiTvMPgTDP6wg7iQq+5lNjn1eWjR93CAR8DLFp+hbf ;
    Message-ID: <blah blah blah>
    Tue, 22 Jan 2008 15:59:45 JST
    Date: Tue, 22 Jan 2008 15:59:45 +0900 (JST)
    From: =?ISO-2022-JP?B?GyRCQHVMbhsoQiAbJEIkIiRmO1IbKEI=?= <user@sourcedomain>
    Subject: [*** SPAM ***]=?ISO-2022-JP?B?GyRCJTUlcyVXJWslUSVDJS8kTjdvGyhC?=
    To: user@domain
    MIME-Version: 1.0
    Content-Type: multipart/alternative; boundary="0-2144660122-1200985185=:33655"

    --0-2144660122-1200985185=:33655
    Content-Type: text/plain; charset=iso-2022-jp

    あゆみさま

    。。。





    ---------------------------------
    Easy + Joy + Powerful = Yahoo! Bookmarks x Toolbar

    --0-2144660122-1200985185=:33655
    Content-Type: text/html; charset=iso-2022-jp

    <div>あゆみさま</div>


    --0-2144660122-1200985185=:33655--

    I assume I have stuffed something up, can anyone point me in the right direction please.

    Cheers,
    David

  2. #2
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    This is not a fix so much as a workaround, but you could knock down the values of those two spam scoring elements in /opt/zimbra/conf/spamassassin/local.cf:

    Code:
    score CHARSET_FARAWAY_HEADER=0.2
    score UNWANTED_LANGUAGE_BODY=0.2
    Forcing a lower score on those two indicators will still show them in your spam filters but with a low enough score that they should let these messages through. Unless you ALSO get a lot of spam that only these indicators apply to it should probably not adversely affect your overall filtering performance.

  3. #3
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    You probably already know this, but be sure to keep a backup of your local.cf file as it'll get overwritten any time you upgrade Zimbra.

  4. #4
    Join Date
    Oct 2006
    Posts
    45
    Rep Power
    9

    Default

    Finally solved this thanks to the Spamassassin list. The country code needs to be ja, not jp. Once I had that sorted, it all started working again.

    Cheers,
    David

  5. #5
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    Quote Originally Posted by davidh View Post
    Finally solved this thanks to the Spamassassin list. The country code needs to be ja, not jp. Once I had that sorted, it all started working again.

    Cheers,
    David
    Good to know. Thanks for posting back; I'll mark this thread "solved."

Similar Threads

  1. Trouble Sending mail - All Messages deferred!
    By SiteDiscovery in forum Administrators
    Replies: 7
    Last Post: 09-03-2009, 05:52 AM
  2. upgrading to network edition
    By zzzzsg in forum Installation
    Replies: 11
    Last Post: 03-06-2008, 10:58 PM
  3. ZCS Network Edition 4.5.x in SUSE ES 10.3
    By crowley in forum Installation
    Replies: 1
    Last Post: 10-26-2007, 10:36 AM
  4. Replies: 2
    Last Post: 03-02-2007, 09:29 AM
  5. ZCS 3.2 Beta Available
    By KevinH in forum Announcements
    Replies: 31
    Last Post: 07-07-2006, 04:46 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •