Where can I get blacklists for Spam Assassin ?

mat1024 · May 16th, 2005, 4:57 AM

Hi,

Spamassassin is not working very well (spamassassin enabled, spambox disabled). I still receive spam. Do you think adding blaklists would help?
What are the best ones? Where can I find them?
Thankyou for your help!

**Bigjohn** · May 16th, 2005, 10:08 AM

I receive the spam too. What you must do is set a mail filter rule that automatically discards or re-routes spam that scores over a certain level. The filter rule will work for any email in the domain. Mine reroutes all mail that scores over 8 to a 'mailtrap' mail box. There, I manually process the messages (about 100 per day) to check for false positives... I've not had a false positive in months, however... and I feed all this spam to the spam assassin learning routine too. This improves the baysian filtering.

mat1024 · May 17th, 2005, 4:41 AM

Hi Bigjohn,

Thankyou for your answer. can you tell me how you setup this filter rule?
I am really interested in the re-route

I read you tutorial, but the cPanelx is different now, it writes:

-----------------------------
Hint: To filter all mail that SpamAssasin has marked as spam, just choose "SpamAssassin Spam Header", "begins with", and then enter "Yes" in the box.
------------------------------

So I choose "SpamAssassin Spam Header", "begin with", I enter "Yes" in the box, but I get this message:

-----------------------------------
A filter has been added that sends all mail h_X-Spam-Status: that begins Yes [an error occurred while processing this directive] Discard
----------------------------------

What is the matter?

**David** · May 17th, 2005, 8:45 AM

Bigjohn, did you perhaps invent spam assassin and just haven't told the rest of us yet?

mat1024 · May 18th, 2005, 6:28 AM

Also, is SpamAssassin using Razor, Pyzor, and Dcc automatically?

Do I have to enable them like in the tutorial from BigJohn:

Quote:

# Enable the Bayes system
use_bayes 1
# Enable or disable network checks
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1

Thankyou!

wkhai · May 19th, 2005, 3:56 PM

yea, noticed hits from predominantly German sites over the last weekend... and they all pass through SpamAssassin becos there's nothing resembling typical spam... just an url in the message body

also, it appears there are some that're sent to mail-list

domain.com, so even filtering invalid usernames doesn't do the trick

mat1024 · May 20th, 2005, 6:31 AM

That's right. We get spammed by spam in German, and it goes through spamassassin. I have setup the following e-mail filters and they quite work:

Quote:

$h_X-Spam-Status: begins "Yes" Discard
$header_subject: contains "*****SPAM*****" Discard
$message_body contains "Full Article:" Discard
$message_body contains "Lese selbst:" Discard
$message_body contains "daß" Discard
$message_body contains "sich" Discard
$message_body contains "und" Discard
$message_body contains "zu" Discard
$message_headers contains "*****SPAM*****" Discard

May 16th, 2005, 4:57 AM	#1 (permalink)
mat1024 Registered User Fresh Surpasser Joined in Jun 2004 24 posts Gave thanks: 0 Thanked 0 times	Where can I get blacklists for Spam Assassin ? Hi, Spamassassin is not working very well (spamassassin enabled, spambox disabled). I still receive spam. Do you think adding blaklists would help? What are the best ones? Where can I find them? Thankyou for your help!

May 16th, 2005, 10:08 AM	#2 (permalink)
Bigjohn minor deity Super #1 Joined in Apr 2004 Lives in Georgia Hosted on XEON 7,386 posts Gave thanks: 27 Thanked 94 times	I receive the spam too. What you must do is set a mail filter rule that automatically discards or re-routes spam that scores over a certain level. The filter rule will work for any email in the domain. Mine reroutes all mail that scores over 8 to a 'mailtrap' mail box. There, I manually process the messages (about 100 per day) to check for false positives... I've not had a false positive in months, however... and I feed all this spam to the spam assassin learning routine too. This improves the baysian filtering. __________________ Proud to be a Surmunity Mod! XEON PASS60 PASS61 Make a fundamental difference! My Sites: Curious about Brewing Beer? Join the community! >>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax Get into an Art museum Victorian London It's your brain -*ON WEB* - mybrainhost.com (under development) What SHOULD Government do? Much Less than it Does!

May 17th, 2005, 4:41 AM	#3 (permalink)
mat1024 Registered User Fresh Surpasser Joined in Jun 2004 24 posts Gave thanks: 0 Thanked 0 times	Hi Bigjohn, Thankyou for your answer. can you tell me how you setup this filter rule? I am really interested in the re-route I read you tutorial, but the cPanelx is different now, it writes: ----------------------------- Hint: To filter all mail that SpamAssasin has marked as spam, just choose "SpamAssassin Spam Header", "begins with", and then enter "Yes" in the box. ------------------------------ So I choose "SpamAssassin Spam Header", "begin with", I enter "Yes" in the box, but I get this message: ----------------------------------- A filter has been added that sends all mail h_X-Spam-Status: that begins Yes [an error occurred while processing this directive] Discard ---------------------------------- What is the matter? Last edited by mat1024; May 17th, 2005 at 4:48 AM..

May 17th, 2005, 8:45 AM	#4 (permalink)
David is surrounded by retards. Resident. Joined in Mar 2004 Lives in fear of Obama. Hosted on Pass 7 13,082 posts Gave thanks: 8 Thanked 33 times	Bigjohn, did you perhaps invent spam assassin and just haven't told the rest of us yet? __________________

May 19th, 2005, 3:56 PM	#6 (permalink)
wkhai Registered User Fresh Surpasser Joined in May 2005 Lives in KL, Malaysia Hosted on Pass31 8 posts Gave thanks: 0 Thanked 0 times	yea, noticed hits from predominantly German sites over the last weekend... and they all pass through SpamAssassin becos there's nothing resembling typical spam... just an url in the message body also, it appears there are some that're sent to mail-listdomain.com, so even filtering invalid usernames doesn't do the trick

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread: