Page 1 of 2 12 LastLast
Results 1 to 10 of 16
  1. #1

    Default Tons of spam getting past SpamAssassin.

    Recently a lot of spam is getting past SA. It's coming in with negative scores, and it seems SA thinks it's legitimate. Can I use sa-learn on a Dovecot IMAP mailbox? Where would I point it? Also, I can't find where to change the point values for the rules in SA. If I could change that it might be enough to have SA mark these as spam. Thanks in advance!

  2. #2
    Moderator wildjokerdesign's Avatar
    Join Date
    Jun 2003
    Location
    Kansas City Mo
    Posts
    5,720

    Default

    On newer cPanel accounts you can configure and modify things via cPanel. http://kb.westhost.com/questions/246/SpamAssassin
    On older Site Manager accounts you access configuration a bit different. http://kb.westhost.com/questions/1003/SpamAssassin

    In order to use sa-learn you point it to either a folder that has ham email or spam email in it. So you would need some spam emails uploaded to your account and them point to them. http://spamassassin.apache.org/full/.../sa-learn.html Here is a how to: http://faisal.com/docs/salearn.html Yes it can work with IMAP.

    On older Site Manager accounts sa-learn is not installed. You have to install it yourself.
    Shawn
    Please remember your charity of choice: http://www.redcross.org

    Handy Links: wildjokerdesign.net | Plain Text Editors: EditPlus | Crimson

  3. #3
    Moderator wildjokerdesign's Avatar
    Join Date
    Jun 2003
    Location
    Kansas City Mo
    Posts
    5,720

    Default

    If you are on a Site Manager account that does not have sa-learn installed, here is an alternative. http://forums.westhost.com/showthrea...ll=1#post56285
    Shawn
    Please remember your charity of choice: http://www.redcross.org

    Handy Links: wildjokerdesign.net | Plain Text Editors: EditPlus | Crimson

  4. #4

    Default

    I think my Site Manager has looked the same for many years, so I am guessing it isn't new. Any way to upgrade?

    I have been to the faisal.com page, but it doesn't seem to work with the Dovecot setup. Dovecot doesn't have my individual folders in Site Manager, at least not that I can see, so I can't point it to ./user/Spam. Maybe that is why my email client is so slow/times out?

  5. #5
    Moderator wildjokerdesign's Avatar
    Join Date
    Jun 2003
    Location
    Kansas City Mo
    Posts
    5,720

    Default

    If you want to upgrade to a new cPanel account you need to contact WestHost direct and ask them about it. There is no real upgrade since the two systems are so different. In essence what happens is that you order a new account then you have to transfer all your data and files to the new site. It is not an easy task to do by yourself but WestHost does have added services that can do it for you. They can let you know if there is a fee for the service or not.

    Have you installed Dynamic Spam Rejection with RBLs? http://helpdocs.westserver.net/v3/si..._with_RBLs.htm It can go a long way in reducing spam. It can sometimes reject valid e-mail is the only drawback of this. Also since you are on Site Manager you can turn on Auto Learn for SA. http://helpdocs.westserver.net/v3/si...amAssassin.htm
    Shawn
    Please remember your charity of choice: http://www.redcross.org

    Handy Links: wildjokerdesign.net | Plain Text Editors: EditPlus | Crimson

  6. #6

    Default

    I am using the RBLs and auto learn. 24 of the 48 emails I work up to this morning were spam. I will try the things mentioned in the post on the spamc client. If anyone has other suggestions, I appreciate them.

  7. #7

    Default

    In a post on another thread, Ringwich said he did the following:

    sa-learn doesn't seem to be present, so I did the following, catting all IMAP mail into a single file then using spamc client:

    Spam:
    [username][~]$ ls -1 /var/spool/maildirs/username/.Junk/cur | while read file; do cat /var/spool/maildirs/username/.Junk/cur/$file >> all.spam; done
    [username][~]$ cat all.spam | formail -s spamc -L spam -u username

    Ham:
    [username][~]$ ls -1 /var/spool/maildirs/username/cur | while read file; do cat /var/spool/maildirs/username/cur/$file >> all.ham; done
    [username][~]$ cat all.ham | formail -s spamc -L ham -u username


    Not being a NIX person, where do I execute that command? From "Execute a command" in File Manager?

  8. #8
    Moderator wildjokerdesign's Avatar
    Join Date
    Jun 2003
    Location
    Kansas City Mo
    Posts
    5,720

    Default

    Yes you can execute commands that way, or at least some. The better way is to log in to your account via Putty and execute them in the shell. The thing is if you don't really understand what you are doing then just copying and pasting commands may not get you what you expect. Again I have to repeat in order for this to work you must have all your junk mail in one folder. I think maybe what he did is create a file called Junk where he collected the mail that he read that he saw as spam. The directories look right to me but double check they are there on your account. Also if you are going through the Site Manager - File Manager interface you might not be seeing all the files. I use a combination of WinSCP and Putty to manage my accounts. WinSCP allows you to log in and view and move files to and from your site and local computer. Putty is the one used for working with your account via command line.
    http://winscp.net/eng/index.php
    http://www.chiark.greenend.org.uk/~sgtatham/putty/
    Shawn
    Please remember your charity of choice: http://www.redcross.org

    Handy Links: wildjokerdesign.net | Plain Text Editors: EditPlus | Crimson

  9. #9

    Default

    I used PuTTY to connect to my account, but it drops me in a nested folder that I can't get to the SpamAssassin directory from. I called support and they said:

    1: There is no way to update the old version of SpamAssassin
    2: I needed to move to the new cPanel to get the new SpamAssassin
    3: That would take at least 3 weeks
    4: They were seeing a lot of spam even there.

    I refuse to accept that there is no way to stop the now 460+ spam mails I have gotten in the last two weeks. I am using RBLs, I am using SpamAssassin, but I am getting tons of spam being scored at -2.5 or better. Do I just need to find a different webhost? I've been here for over a decade, but I am not willing to put up with this level of spam. I can't believe every customer is dealing with this, are they?

  10. #10
    Moderator wildjokerdesign's Avatar
    Join Date
    Jun 2003
    Location
    Kansas City Mo
    Posts
    5,720

    Default

    I really don't think moving to a new host would fix your spam issue. Most are more likely using the same system that WestHost currently uses which is cPanel. It would be better to work out why you are getting so much spam. How protective are you of your email addresses? Do you have the catch all activated for your account?

    First lets address the catch all issue. If you have this activated then it means that spammers can send email to any email address at your domain rather you have created an email user or not. I never activate this on an account.

    The second issue would be how protective you are of your email addresses. For example I never post my email address on a website for everyone to see. That is just asking for the spammers to hit that email address. Second I have a special account I use to sign up for things I feel may sell off my address to other companies or use in marketing for their other companies. That way I can place stronger filters on that account.

    I use Thunder bird and Avast on my local computer to help filter out spam email. Spammers are so clever that no matter how hard you try thwart them they always seem to find ways around it. By implementing both server side controls like SA and RBL's along with filters on my local computer I increase the chance that spam is caught.

    Spam does seem to run in cycles. I can go for weeks without seeing any spam show up to my local computer (I have spam dumped into a certian folder) then all of a sudden I get a flood of spam for a wee or two. Just something I've learned to live with. Having the majority of it dump into a spam folder makes it easy to simply empty out that folder.

    Lastly to address the fact that you get dumped into your home directory when you log in via Putty. It is actually pretty easy to navigate in the Shell. Check out these basic shell commands. http://www.nexsupport.com/index.php?...kbarticleid=19 cd and ls are great commands. When I log in I issue the command:
    Code:
    cd /
    That command takes me to the root of my account. Let's say you want to go to where your mail is stored you could issue this command:
    Code:
    cd /var/spool/maildirs
    Then if you issued:
    Code:
    ls -al
    you would see a list of directories that should correspond with the users you have created.

    Have you logged into SA yet to see if you have autolearn turned on? That could help also down the line but realize it needs to be activated for some time since it is "learning" from the mail that comes in.

    This might give you some more insight on the email system on older accounts. http://codeworks.gnomedia.com/westho...-and-updating/
    Shawn
    Please remember your charity of choice: http://www.redcross.org

    Handy Links: wildjokerdesign.net | Plain Text Editors: EditPlus | Crimson

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •