What changed with e-mail?


#1

Has there been a change with e-mail in the past two weeks?

I’m getting a lot more spam and it’s getting past my custom SpamAssasin setup (I.e. I’m not using the default junkmail settings and have my own procmail/SpamAssassin rules).

I hadn’t changed anything so I can only speculate that there has been some external change on the server which is letting a lot more spam slip through.

What gives?

Jacob


#2

Are you still getting the spam headers? That should give you some hint.

-Scott


#3

Yes, I have the spam headers.

Here’s one:

Spam-Level:
X-Spam-Status: No, score=-2.3 required=3.0 tests=BAYES_00,DNS_FROM_RFC_WHOIS, HTML_MESSAGE,SPF_HELO_PASS,SPF_PASS autolearn=no version=3.0.3

Right this minute I’m installing a custom install of SpamAssassin to upgrade to 3.25 so I’m going to hold off judgement until that install is done and new e-mail starts to trickle in.

What is a concern is the negative score that some of these e-mails are receiving. This one has a -2.3, another had a -4.

I have the following custom scoring:

score RCVD_IN_MAPS_RBL 2.0
score RCVD_IN_MAPS_DUL 1.0
score RCVD_IN_MAPS_RSS 2.0
score RCVD_IN_MAPS_NML 2.0

Anyway, I’ll take another look when the custom install is done and report back on the results…

Jacob


#4

The BAYES_00 helped kicked it into negative territory. I’m sure you’ve seen this, but it may be time to update some scores:
http://spamassassin.apache.org/tests_3_0_x.html

-Scott