Re: [exim] anti-spam pointers please

Top Pagina
Delete this message
Reply to this message
Auteur: Brent Clark
Datum:  
Aan: exim-users
Onderwerp: Re: [exim] anti-spam pointers please
Just to add

Include Kevin McGrails KAM rules to your SpamAssassin.
http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf

You just need to your Ham corpus is good, else rescore the values.

HTH
Brent


On 2019/04/02 13:15, Brent Clark wrote:
> Hi Rory
>
> Are you including Sanesecurity signatures in setup?
> If not. Just install the debian package, clamav-unofficial-sigs.
> Then ensure Exim or Spamassasin is configured to scan mail, via Clamav.
>
> HTH
> Regards
> Brent
>
> On 2019/04/01 21:01, Rory Campbell-Lange via Exim-users wrote:
>> Hi
>>
>> It's some years since I've spent time tweaking my exim setup to receive
>> spam. I've forgotten any skills I might once have had in this area.
>>
>> I've gotten sick of getting 30+ spam emails a day and need to do
>> something
>> about it! I'd be grateful for some pointers to the state-of-the-art
>> setup.
>>
>> right now relay blocks, cram_md5 rejects and spamhaus blocks account
>> for about
>> 500-1000 rejections a day (no wonder everyone has gone to Google mail!).
>>
>> I'm running Exim 4.89-2+deb9u3 under Debian, with spamassassin/spamc
>> 3.4.2.1
>>
>> Spamd is reporting along the following lines.
>>
>>     spamd: result: . 0 - BAYES_00,
>>                 DKIMWL_WL_HIGH,
>>                 DKIM_SIGNED,
>>                 DKIM_VALID,
>>                 DKIM_VALID_EF,
>>                 FORGED_MUA_MOZILLA,
>>                 HEADER_FROM_DIFFERENT_DOMAINS,
>>                 MAILING_LIST_MULTI,
>>                 SPF_PASS,
>>                 URIBL_BLOCKED scantime=0.5,
>>                 size=5448,
>>                 user=mail,
>>                 uid=8,
>>                 required_score=3.0,
>>                 rhost=127.0.0.1,
>>                 raddr=127.0.0.1,
>>                 rport=59670,
>>                 mid=<example.mail.com>,
>>                 bayes=0.000000,
>>                 autolearn=disabled
>>
>> Pointers much appreciated.
>>
>> Rory
>>
>>
>>