Forums & Blog

A SmarterTools-sponsored community.
Welcome to Forums & Blog Sign in | Join | Help
in Search

Increased False positives on Internal SpamAssassin

Last post 03-11-2010 9:56 AM by jatubio. 14 replies.
Page 1 of 1 (15 items)
Sort Posts: Previous Next
  • 01-27-2010 7:31 AM

    Increased False positives on Internal SpamAssassin

    Hi There,

    We have noticed ove r the past 8-10 days a significant increase in false positives by the internal spamassassin.  Has anyone else experienced this?  Any suggestions would be appriciated

    Dave

  • 01-27-2010 9:40 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    What are the failing tests? These should be in the X-SmarterMail-Spam header.

    Matt Kellogg
    Senior Developer / Analyst
    SmarterTools Inc.
    (877) 357-6278
    www.smartertools.com

    SmarterMail - Windows Mail Server and Microsoft Exchange Alternative
    SmarterTrack - Help Desk, Ticket Tracking, Live Chat, WhosOn, and Knowledge Base Software
    SmarterStats - Web Log Analytics and SEO Software
  • 01-27-2010 10:03 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    I have included 3 seperate headers from emails below.  The emails themselves are about meetings etc text only
    between people that are emailing each other constantly.

    We are currently using SmarterMail Enterprise Edition 6.1.3518

    Dave


    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.5843
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
    X-Opwv-CommTouchExtSvcRefID: str=0001.0A020205.4B6042D6.01F2,ss=1,fgs=0
    X-SmarterMail-Spam: SPF_Pass, ISpamAssassin 15 [raw: 6], DK_None, DKIM_None
    X-SmarterMail-TotalSpamWeight: 15

    X-SmarterMail-Spam: SPF_None, ISpamAssassin 13 [raw: 8], DK_None, DKIM_None
    X-SmarterMail-TotalSpamWeight: 13

    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.5843
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
    X-SmarterMail-Spam: SPF_None, ISpamAssassin 19 [raw: 12], DK_None, DKIM_None
    X-SmarterMail-TotalSpamWeight: 19

  • 01-27-2010 10:07 AM In reply to

    • c1tech
    • Not Ranked
    • Joined on 02-02-2009
    • Posts 8

    Re: Increased False positives on Internal SpamAssassin

    We have noticed the same issues on SmarterMail Enterprise Edition 6.6.3636.
    Here are the SM Spam headers:
    X-SmarterMail-Spam: Commtouch 0 [value: Unknown], ISpamAssassin 14 [raw: 9], SPF_Pass, DK_None, DKIM_None
    X-CTCH-RefId: str=0001.0A020202.4B606302.0246,ss=1,fgs=0
    X-SmarterMail-TotalSpamWeight: 14

    How do we find ISpamAssassin logs that show the specific ISpamAssassin tests that failed?

    Are we able to update the ISpamAssassin version or can it only be done by SM upgrades?

    We notice most of the high ISpamAssassin issues to be from AOL.com senders.  The are legit emails with very simple text most of the time so clearly a false positive.

    Commtouch put out a related posting located at:
    SpamAssassin Y2K10 Bug Causes False Positives Worldwide
    http://blog.commtouch.com/cafe/data-and-research/spamassassin-y2k10-bug/?utm_source=0110&utm_medium=E&utm_campaign=Y2K-Title
    Has this posted issue been dealt wtih on the SmarterMail side?

  • 01-27-2010 10:41 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    Go into the settings for the spam check and turn up the header log level.

    Matt Kellogg
    Senior Developer / Analyst
    SmarterTools Inc.
    (877) 357-6278
    www.smartertools.com

    SmarterMail - Windows Mail Server and Microsoft Exchange Alternative
    SmarterTrack - Help Desk, Ticket Tracking, Live Chat, WhosOn, and Knowledge Base Software
    SmarterStats - Web Log Analytics and SEO Software
  • 01-27-2010 10:42 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    c1tech:
    Has this posted issue been dealt wtih on the SmarterMail side?

    It has been, but only for future releases. You can fix this yourself by following the KB article at: 

    http://www.smartertools.com/Portal/KB/a563/troubleshooting-spamassassin-y2k10-bug-resulting-false.aspx?KBSearchID=0

    Matt Kellogg
    Senior Developer / Analyst
    SmarterTools Inc.
    (877) 357-6278
    www.smartertools.com

    SmarterMail - Windows Mail Server and Microsoft Exchange Alternative
    SmarterTrack - Help Desk, Ticket Tracking, Live Chat, WhosOn, and Knowledge Base Software
    SmarterStats - Web Log Analytics and SEO Software
  • 02-02-2010 12:08 PM In reply to

    Re: Increased False positives on Internal SpamAssassin

    I have implemented the above solution but it does not seem to be working.  I inserted the code and restarted the service on one day then moved the line and restarted the service a couple of days later. ... or am I just reading the header incorrectly

    Date: Tue,  2 Feb 2010 12:37:15 -0500 (EST)
    X-SmarterMail-Spam: SPF_Pass, HostKarma - Whitelist, ISpamAssassin 15 [raw: 5], DK_None, DKIM_None
    X-SmarterMail-SpamDetail: 2.9 TVD_SPACE_RATIO
    X-SmarterMail-SpamDetail: 2.1 FH_DATE_PAST_20XX The date is grossly in the future.
    X-SmarterMail-TotalSpamWeight: 11
  • 02-02-2010 12:18 PM In reply to

    • c1tech
    • Not Ranked
    • Joined on 02-02-2009
    • Posts 8

    Re: Increased False positives on Internal SpamAssassin

    Can anyone at SmarterTools cofirm the next release date since you mentioned future releases will have the fix?

  • 02-15-2010 7:54 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    I was wondering what people are using as weights etc for all the spam tools included in Smarter mail.  The internal spamassassin is causing us great grief and we have all but disabled it because of false positives.  Just wondering if most people are using just the default settings for the different anti spam or what they have found works for them.

  • 02-22-2010 12:36 PM In reply to

    Re: Increased False positives on Internal SpamAssassin

     Hi, where do I find the local.cf file, or do I have to create the file and add it to existing .cf files?  The knowlege base article mentions local.cf but I can't find it.  Using Enterprise 6.5.3586

    Started getting lots of future date SA falses so need to get it fixed.

    Thanks 

  • 03-01-2010 2:30 PM In reply to

    • ptix
    • Not Ranked
    • Joined on 03-01-2010
    • Posts 1

    Re: Increased False positives on Internal SpamAssassin

     Same question here.   I do not see a local.cf file anywhere.  Using enterprise 6.6.    Anyone?

  • 03-01-2010 3:39 PM In reply to

    Re: Increased False positives on Internal SpamAssassin

    You can simply create it within the SAData folder under the Service folder of the SmarterMail install.

    Matt Kellogg
    Senior Developer / Analyst
    SmarterTools Inc.
    (877) 357-6278
    www.smartertools.com

    SmarterMail - Windows Mail Server and Microsoft Exchange Alternative
    SmarterTrack - Help Desk, Ticket Tracking, Live Chat, WhosOn, and Knowledge Base Software
    SmarterStats - Web Log Analytics and SEO Software
  • 03-10-2010 1:09 PM In reply to

    Re: Increased False positives on Internal SpamAssassin

    Hello,

    How i can setup SmarterMail to have the X-SmarterMail-SpamDetail Header in my e-mails?

     

    Thank you in Advance,

    Best Regards

  • 03-11-2010 9:15 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    This header was added in version 6. I believe its added by default. If you want more detail from SpamAssassin in particular, you can change this in the settings for either internal or remote SpamAssassin.

    Matt Kellogg
    Senior Developer / Analyst
    SmarterTools Inc.
    (877) 357-6278
    www.smartertools.com

    SmarterMail - Windows Mail Server and Microsoft Exchange Alternative
    SmarterTrack - Help Desk, Ticket Tracking, Live Chat, WhosOn, and Knowledge Base Software
    SmarterStats - Web Log Analytics and SEO Software
  • 03-11-2010 9:56 AM In reply to

    Re: Increased False positives on Internal SpamAssassin

    Thank you.

    I have one internal spamd installation. But, i can't do nothing to have this or another spam header because SmarterMail v.5.5 remove all added headers from spamassassin...

Page 1 of 1 (15 items)