[BlueOnyx:14182] Re: Email timing out for Vsite

2013-12-31 Thread Michael Stauber
Hi David, > Or is this a DNS issue from using Cnames? If the CNAME record is used during the DNS lookup for determining the recipient, then it is most likely the root cause of the problem. Regardless if the CNAME is used for the receiving domain, or if Sendmail receives the email and then needs

[BlueOnyx:14181] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Michael Stauber
Hi Colin, > Gave it a score of 120 and SA scored it at 62 Š Very well. > Is it possible to check the AWL score? It's stored in MySQL. You could check the AV-SPAM database with phpMyAdmin and could check if it makes any sense for you. The AWL score can be figured out there. The Bayes database is

[BlueOnyx:14180] Email timing out for Vsite

2013-12-31 Thread David Hahn
Hi all! Got a strange problem... On one vsite I have email timing out.. The email gets delivered but is resolving to the wrong IP address the mx records use. The MX shows aaa.aaa.aaa.aaa but shows up in the headers as bbb.bbb.bbb.bbb the reason for the time out once mail arrives. Any ideas where

[BlueOnyx:14179] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Colin Jack
Thanks Michael, > >The AWL score in this case is probably a negative, because you have >received good emails from that source before. > >That's why you get a 11.6 score instead of a 20 on that email. AWL >probably reduced the solid twenty by almost half based on the >established credibility and "n

[BlueOnyx:14178] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Colin Jack
Hi Michael, > I have another idea what it could be. Please raise the score for these three > rules to 900. > > Three rules triggered for that particular email: > > - AWL > - UNPARSEABLE_RELAY > - ZIP_ATTACHED_2 > > As far as I recall UNPARSEABLE_RELAY has a very low score or even a 0.0 > score.

[BlueOnyx:14177] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Michael Stauber
Hi Colin, > Unfortunately not: > > X-Spam-Status: Yes, score=11.6 required=6.0 > tests=AWL,UNPARSEABLE_RELAY,\n\tZIP_ATTACHED_2 autolearn=spam version=3.3.2 > > > Got a score of 20.0 on there but 11.6 total. I have another idea what it could be. Please raise the score for these three rules to

[BlueOnyx:14176] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Colin Jack
Hi Michael, >Yeah, maybe there is another rule with that name already. Could be a >rule that's among the batch of dynamically downloaded rules. > >Change the three instances of ZIP_ATTACHED in the config file to >something else. Like ZIP_ATTACHED_XXX, save the changes, restart >SpamAssassin and tr

[BlueOnyx:14175] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Colin Jack
Hi Michael, On 31/12/2013 09:47, "Michael Stauber" wrote: >Hi Colin, > >> Looks like it is tagging it but not adding the score correctly: >> >> X-Spam-Status: Yes, score=10.8 required=6.0 >> tests=AWL,UNPARSEABLE_RELAY,\n\tZIP_ATTACHED > >Yeah, maybe there is another rule with that name already

[BlueOnyx:14174] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Michael Stauber
Hi Colin, > Looks like it is tagging it but not adding the score correctly: > > X-Spam-Status: Yes, score=10.8 required=6.0 > tests=AWL,UNPARSEABLE_RELAY,\n\tZIP_ATTACHED Yeah, maybe there is another rule with that name already. Could be a rule that's among the batch of dynamically downloaded ru

[BlueOnyx:14173] Re: Solarspeed AV-SPAM V5

2013-12-31 Thread Colin Jack
Hi Michael, Bit more > >>#- >>loadplugin Mail::SpamAssassin::Plugin::MIMEHeader >> >>mimeheader ZIP_ATTACHED Content-Type =~ /zip/i >>describe ZIP_ATTACHED email contains a zip file attachment >>score ZIP_ATTACHED 7.5 >> >>mimeheader EXE_ATTACHE