Sorry, I replied to you directly before, Jamie. I ran amavisd debug and amavisd debug sa and got no errors. Still, porn and obvious spam is getting thru. There is nothing in my quarrintine mailbox and nothing gets tagged. it's the same as if SA wasn't running. i'm just using the default rulesets that came with SA, but i thought those would catch something.
what should I do?- add custom rulesets? is there any place in the amavisd.conf file i can edit to thighten up spam filtering? i edited my $sa_tag_level_deflt = -999 and still not one message gets tagged. what am i screwing up here? thanks -----Original Message----- From: Jamie L. Penman-Smithson [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 31, 2004 5:49 AM To: Kern, Tom Subject: RE: newbie On Wed, 2004-03-31 at 03:41, Kern, Tom wrote: > #1. how would SA know its spam. I have only 3 lines in my local.cf file by > default. It'll use the rulesets that come with SA by default to determine what is, and what is not, spam. You can add other custom rulesets, if after using bayes and network testing, you still see spam getting through. If you can't use bayes and/or network tests for whatever reason, I'd advise you to install some of the custom rulesets. > #2. here's a question that will throw me off this list- what is the point and > function of amavisd-new? why not just run SA alone? what does amavisd do that > SA doesn't? why use it? yes, i know i sound stoopid :) AMaViS is a high-performance content-filter - it uses SA to tag messages based on what it thinks is spam, and it can also call a virus scanner such as Clam AV. It also does a whole lot of other stuff, take a look at: http://www.ijs.si/software/amavisd/#features I doubt you'd get thrown off mailing lists for that reason.. > #4, i just left everything at the defaults. i had amavisd forward all spam to > an exchange 2000 mailbox. and the only thing in there is stuff that had no > recipent in our domain. obvivous spam is getting thru. what logs can i check > to see whats going on? amavisd-new debug and amavisd-new debug-sa should tell you what's happening/not happening. As long as you can afford it, performance wise, it may be an idea to enable network checks, and bayes. > postfix has no anti spam settings set. it's just relaying to my exchange 2000 > servers. > > thanks for your previous response and alny help you may ofer. HTH -- -jamie <[EMAIL PROTECTED]> | spamtrap: [EMAIL PROTECTED] w: http://www.silverdream.org | p: [EMAIL PROTECTED] pgp key @ http://silverdream.org/~jps/pub.key 11:30:01 up 9:10, 3 users, load average: 0.13, 0.41, 0.34
