The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

question about spam

Discussion in 'General Discussion' started by ljwhite, Jun 30, 2006.

  1. ljwhite

    ljwhite Well-Known Member

    Joined:
    Jun 20, 2005
    Messages:
    363
    Likes Received:
    0
    Trophy Points:
    16
    I have an email box which is getting bombarded with spam. What shall i do? Many thanks in advance!
     
  2. swdlh

    swdlh Member

    Joined:
    Jul 3, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    turn on spam assassin, config to "rewrite headers", then set filter "s a headers" +begins+yes+discard.

    setting of "5" works great for me. 90% deleted.

    -larry / dallas
     
  3. ljwhite

    ljwhite Well-Known Member

    Joined:
    Jun 20, 2005
    Messages:
    363
    Likes Received:
    0
    Trophy Points:
    16
    When i go to cpanel->SpamAssassin, i see this:Configure SpamAssassin (required to rewrite subjects), How could i change it to rewrite headers?
     
  4. ljwhite

    ljwhite Well-Known Member

    Joined:
    Jun 20, 2005
    Messages:
    363
    Likes Received:
    0
    Trophy Points:
    16
    Is there any way that server can delete spam directly, and avoid those spam getting into my mail box. The box I am having issue with is our most published email: info@abccares.com. She has over 3,000 messages it is trying to receive. Managing this (99% spam) is a HUGE waste of time. Any suggestion about this issue?
     
  5. swdlh

    swdlh Member

    Joined:
    Jul 3, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    yes! 2 steps
    ----------------------------
    In spamassassin I add this-

    rewrite_header subject **SPAM _HITS_ **

    most folks use ***SPAM*** but I add the "_HITS_" - this makes the marked up spam subject- (I can sort by rating (sort "subject" in mailclient)

    **SPAM 4.3 ** 10k Schola
    **SPAM 7.1 ** EBay Worke
    **SPAM 7.3 ** STOP PAY

    spamassassin only scans the email, and adds some headers like X-Spam-Status reporting a score. It does not delete or route the email
    ---------------------------------
    To dump the spam (or reroute it), you have to use exim (the mail transport agent) and set a simple filter.

    Add Filter

    h_X-Spam-Status: <-you select
    begins <-you select
    yes <-you select
    Discard <-you select

    "A filter has been added that sends all mail h_X-Spam-Status: that begins yes to Discard"
    -----------------------------------

    It's very easy, and works very well. It dumps about 300 spams a day for me.

    Try the default setting of 5, but you can run at 10 if you think real mail is being dumped.

    -----------------------------------
    you can ignore the following, the two steps above is all you need.

    you can turn on spamassassin, but turn off the filter. Then look at your mailbox after a day and look at the ** SPAM xx.x ** in the subject. set your number so no "real" mail gets discarded.

    You can also leave the exim filter off, and set filters in your email client to delete "** SPAM 10" (anything over 9.9) set another for "** SPAM 4." (anything over 3.9) to sort to a "maybespam" box, you check for possible good mails.

    I also have about 80 filters that catch the score=2 stuff that SA doesn't know about YET ;-)

    SA is amazing, the tests (and spam lists) it uses learn real fast! Within 2 days, the filters I add become obsolete, SA begins marking them as spam, once a month I check the discards and remove my filters than SA is now catching.

    -larry / dallas
     
  6. ljwhite

    ljwhite Well-Known Member

    Joined:
    Jun 20, 2005
    Messages:
    363
    Likes Received:
    0
    Trophy Points:
    16
    Thanks for your help!
    How/where could i set the filter using exim?
     
  7. swdlh

    swdlh Member

    Joined:
    Jul 3, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Mail Manager Main Menu

    Web Mail
    Email Domain Forwarding
    Manage/Add/Remove Accounts
    Default Address
    Auto-responders
    E-mail Filtering <-- maybe this one ;-)
    Forwarders
    Mailing Lists
    SpamAssassin <-- the other one you will need.
    BoxTrapper Spam Trap
    Trace an E-mail Address
    Modify Mail Exchanger (MX Entry)


    [ Go Back ]
    -------------------------------------

    most of these functions are part of Exim

    Since you are on the cpanel forum, I assume you or your host are running cPanel ;-)

    -larry / dallas
     
  8. ljwhite

    ljwhite Well-Known Member

    Joined:
    Jun 20, 2005
    Messages:
    363
    Likes Received:
    0
    Trophy Points:
    16
    Thanks for your help! My current configuration is:

    SpamAssassin
    SpamAssassin is currently: enabled
    Spam Box is currently: disabled
    Configure SpamAssassin (required to rewrite subjects)->required_score:4 rewrite_header subject:**SPAM**_HITS_

    E-mail Filtering
    Filter Destination
    $header_subject: contains "**SPAM**_HITS_" Discard


    From the configuration, it seems that server will discard the spam directly, but actually it dose not, it just marks these spam.
     
  9. Ashley-P

    Ashley-P Member

    Joined:
    Jun 4, 2006
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
  10. swdlh

    swdlh Member

    Joined:
    Jul 3, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    your SA is working but you need to clean up your filter-

    Add Filter (select these in order for the four boxes)
    [h_X-Spam-Status:] <-you select
    [begins with] <-you select
    [yes] <-you type in this
    [Discard] <-should already be in the box

    that should do it

    -larry
     
  11. swdlh

    swdlh Member

    Joined:
    Jul 3, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    don't forget to delete your older filter, it will still be there.

    - it would have worked too if you only had "** spam" as the filter, because that's part of what SA adds to the "subject" of the spam.
    by using "yes", it will discard what SA marked as spam status: Yes which is based on the number you set in SA (was 5)

    -l
     
    #11 swdlh, Jul 7, 2006
    Last edited: Jul 7, 2006
  12. ljwhite

    ljwhite Well-Known Member

    Joined:
    Jun 20, 2005
    Messages:
    363
    Likes Received:
    0
    Trophy Points:
    16
    Thanks, I got it!
     
Loading...

Share This Page