Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: Some SPAM still getting in

  1. #1
    Join Date
    May 2009
    Posts
    6
    Rep Power
    6

    Default Some SPAM still getting in

    Hi, we are successfully running latest Zimbra on OpenSUSE 10.3.
    We have the SPAM filter learned and most spam are tagged, but daily about 2-4 obvious (I mean its basically direct wording ***ually explicit) SPAM gets through.
    Anyone know how I can solve this. Where do I begin?

  2. #2
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    Try searching the forum. There are two threads on tuning the antispam system on the front page of the Administrators forum right now.

  3. #3
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by hansvdmerwe View Post
    Hi, we are successfully running latest Zimbra on OpenSUSE 10.3.
    Just for your information, there will be no support (nor any builds provided) for any openSUSE version of Zimbra from release 6 onwards so you might want to consider changing operating systems sometime.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  4. #4
    Join Date
    Aug 2007
    Location
    Chicago Area, USA
    Posts
    189
    Rep Power
    8

    Default

    NO spam filter is going to be 100% effective. Spam is a constant cat and mouse game, and spam will always get through and good messages may get flagged as spam. I don't personally use the anti-spam features in Zimbra and use another filter in front of my Zimbra server, but if you find a filter that is 100% effective please let me know because I'd like to buy it.
    Release 6.0.2_GA_1912.UBUNTU8_64 UBUNTU8_64 NETWORK edition + Mobile Option
    Activesync with Moto Q9C, HTC Touch Pro, Palm Pro, & Palm Pre

  5. #5
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    All that is true, but the original poster is looking for help in improving anti-spam efficiency. This is a realizable goal while perfection isn't. But as I noted, there are already a few good threads to start with.

  6. #6
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    If you are getting a few through then we would need to see one of them so we can determine which rules you should look at using. Here are a few threads to get you started :-

    http://www.zimbra.com/forums/adminis...t=spamassassin
    http://www.zimbra.com/forums/adminis...t=spamassassin
    http://www.zimbra.com/forums/adminis...t=sanesecurity

  7. #7
    Join Date
    Aug 2007
    Location
    Chicago Area, USA
    Posts
    189
    Rep Power
    8

    Default

    Quote Originally Posted by ewilen View Post
    All that is true, but the original poster is looking for help in improving anti-spam efficiency. This is a realizable goal while perfection isn't. But as I noted, there are already a few good threads to start with.
    True, but the OP talks of 2-4 emails getting in per day. To me that's looking for perfection (100% catch rate).

    OP,
    The messages may contain explicit words, but the spammers carefully craft the text of their messages to subtract points and not get caught by the bayesian analysis. You could write your own SA rules with a list of explicit words that you could add 100 points to which would cause immediate flagging of the message. This could also block legit emails that contain explicit wording. I share in your frustration, but it's the world we live in. In less all spammers suddenly drop dead it's a problem we'll be dealing with for a long time.
    Release 6.0.2_GA_1912.UBUNTU8_64 UBUNTU8_64 NETWORK edition + Mobile Option
    Activesync with Moto Q9C, HTC Touch Pro, Palm Pro, & Palm Pre

  8. #8
    Join Date
    May 2009
    Posts
    6
    Rep Power
    6

    Default

    My main concern was not to be 100% effective. I have a problem of obvious spam getting though. These ones are full blown ***ual invitations to **** sites. I just found it strange that all those words got through.
    BTW can see more obscure mails being blocked?
    How can I monitor the spam tagging process? More detail that is passed in the email header?

    Thanks

  9. #9
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    Increase the logging by changing /opt/zimbra/conf/amavisd.conf.in and set log_level=2. Once that is done run zmamavisdctl restart as the zimbra user.

  10. #10
    Join Date
    May 2009
    Posts
    6
    Rep Power
    6

    Default

    Perfect, thanks, that was what I was after.

    (btw, about openSUSE is a shame, but if I have to change, to what distro do you suggest? my other machines run ArchLinux, but I guess its also not supported)

Similar Threads

  1. Weird behaviors and LOTS of spam.
    By zwvpadmin in forum Administrators
    Replies: 7
    Last Post: 01-02-2009, 10:26 AM
  2. spam - ham training
    By Viking0 in forum Administrators
    Replies: 6
    Last Post: 12-02-2008, 01:07 PM
  3. Major SPAM to one account
    By CarputerTech in forum Administrators
    Replies: 4
    Last Post: 09-04-2008, 11:54 PM
  4. Spam being scored with BAYES_00
    By flyerguybham in forum Administrators
    Replies: 6
    Last Post: 04-24-2007, 01:07 PM
  5. Training spam and ham
    By Justin in forum Developers
    Replies: 2
    Last Post: 10-31-2006, 03:39 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •