Results 1 to 6 of 6

Thread: Spam system doesn't seem to learn

  1. #1
    Join Date
    Mar 2008
    Location
    Canada
    Posts
    148
    Rep Power
    7

    Default Spam system doesn't seem to learn

    Hello,

    I'm having problems with this spam filtering in Zimbra (6.0.7).
    I've repeatedly marked the same email sender as "not spam" but the system doesn't learn. They are still getting dropped into my junk folder. Plus I have the reverse. I mark identical spam message as junk dozens of times yet they always make it through the filter.

    Any suggestions?

  2. #2
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    We would need to see the headers from one of the emails to ascertain why it is being marked as SPAM. One thing to bear in mind though is that marking an email as non-SPAM just updates the SpamAssassin Bayes database and the other rules will still be applied.

  3. #3
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    And vice-versa: marking as SPAM doesn't turn off the non-Bayes rules which might apply a negative score.

    In addition to showing us some headers, you should also indicate what values you have in the Admin GUI, under configuration > global settings > AS/AV > Kill Percent and Tag Percent.

  4. #4
    Join Date
    Mar 2008
    Location
    Canada
    Posts
    148
    Rep Power
    7

    Default

    Oh, this is bad.

    I'm getting complaints of all sorts of legit mail dropping into spam folders since upgrading to 6.0.7

    X-Spam-Flag: YES
    X-Spam-Score: 7.406
    X-Spam-Level: *******
    X-Spam-Status: Yes, score=7.406 tagged_above=-10 required=6.6
    tests=[BAYES_50=0.8, HELO_NO_DOMAIN=0.001, HTML_MESSAGE=0.001,
    RCVD_IN_PBL=3.335, RCVD_IN_SORBS_DUL=0.001, RDNS_NONE=0.793,
    URI_OBFU_WWW=2.475] autolearn=no
    This is due to the new rules apparently. Someone went and increased RCVD_IN_PBL from under 1 to 3.335

    I'm searching high and low to find out why this is even scoring. I have clients that are sending mail to users under their own domain and some get flagged spam while others do not. I can't find any of the IP's in the headers listed on any DNS blacklists so it's a mystery to be sure.

  5. #5
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    Bug 44384 - Bypass SA for emails sent from internal ZWC users (or provide a way to score them)

    Quick workaround in comment #1. EDIT: would only apply to senders who are on your ZCS and using ZWC or ZCO.

    You'd have to look at the body of the email to see why URI_OBFU_WWW was hit.
    Last edited by ewilen; 07-30-2010 at 03:03 PM.

  6. #6
    Join Date
    Mar 2008
    Location
    Canada
    Posts
    148
    Rep Power
    7

    Default

    Thanks. I'll try that and see if it helps.

    In the meantime I've asked for the emails from the local senders that are having problems sending locally so I can see first hand if their signatures etc. are spammy.

Similar Threads

  1. mysql not starting, sort of.
    By lhutton in forum Installation
    Replies: 6
    Last Post: 06-19-2009, 10:45 AM
  2. Replies: 4
    Last Post: 10-08-2008, 06:55 AM
  3. [SOLVED] Does user filter override system spam filter?
    By raynix in forum Administrators
    Replies: 7
    Last Post: 07-18-2008, 01:23 PM
  4. Zimbra spam system
    By rajahd in forum Administrators
    Replies: 9
    Last Post: 04-16-2008, 07:25 PM
  5. [SOLVED] Mailserver down when send file attach of 50Mb
    By ZMilton in forum Administrators
    Replies: 20
    Last Post: 04-10-2008, 11:44 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •