Re: Overriding Scores
Content-Type: text/plain; charset="iso-8859-1"
The email attached has been identified by one of our team as legitimate but unfortunately was incorrectly tagged as SPAM.
The email address has been whitelisted to ensure this will not happen again and we are currently looking into the reasons why this happened.
No mail has been lost as the quarantined mail folder is continuously checked by members of Team Genesis, but please accept our apologies for any inconvenience caused.
Your SPAM scanning system; Ullyses is continually being upgraded and refined so we anticipate a steadily decreasing number of incidents like this as the system learns your personal profile.
If you feel that you are receiving an inappropriate amount of SPAM then can we ask you to contact us either by email to: [email]firstname.lastname@example.org[/email] or call your Genesis representative who will be happy to assist.
Please do not reply to this email address as it has been automatically generated, but email any queries to: [email]email@example.com[/email]
Thank you and take care
Content-Type: message/rfc822; name="originalmessage.msg"
Content-Disposition: attachment; filename="originalmessage.msg"
Received: from hermes.apache.org (HELO mail.apache.org) (18.104.22.168)
by [url]www.genesisgroupuk.com[/url] with SMTP; 11 Jun 2007 14:27:54 +0100
Received: (qmail 41678 invoked by uid 500); 11 Jun 2007 13:27:52 -0000
Mailing-List: contact [email]firstname.lastname@example.org[/email]; run by ezmlm
Delivered-To: mailing list [email]email@example.com[/email]
Received: (qmail 41669 invoked by uid 99); 11 Jun 2007 13:27:52 -0000
Received: from herse.apache.org (HELO herse.apache.org) (22.214.171.124)
by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 11 Jun 2007 06:27:52 -0700
X-ASF-Spam-Status: No, hits=0.0 required=10.0
Received-SPF: pass (herse.apache.org: local policy)
Received: from [126.96.36.199] (HELO mail1.sendit.NoDak.edu) (188.8.131.52)
by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 11 Jun 2007 06:27:47 -0700
Received: from [184.108.40.206] (wings.cc.ndsu.NoDak.edu [220.127.116.11])
by mail1.sendit.NoDak.edu (8.13.1/8.13.1) with ESMTP id l5BDRQRK007797
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
for <firstname.lastname@example.org>; Mon, 11 Jun 2007 08:27:26 -0500
Date: Mon, 11 Jun 2007 08:27:26 -0500
From: Richard Frovarp <Richard.Frovarp@sendit.nodak.edu>
User-Agent: Thunderbird 18.104.22.168 (X11/20070529)
To: spamassasin_list <email@example.com>
Subject: Re: Overriding Scores
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
X-Virus-Checked: Checked by ClamAV on apache.org
Susan Barnes wrote:[color=blue]
> We have upgraded to SA 3.2 and yesterday I needed to quickly adjust
> scores, because of messages being flagged as spam which should not.
> However I was at a loss where to put these adjustments.
> We use mimedefang and sa-update. So if I am right the main
> configuration file is /etc/mail/sa-mimedefang.cf.
> The site rules should be in /etc/mail/spamassassin/
> with a file updates_spamassassin_org.cf including the sets in
> Now obviously I do not want to mess with either the original rules nor
> the automatically updated ones.
> The sa-mimedefang.cf has a comment in it, that extra rules and scores
> can be put in there. There is also a local.cf in the site rules dir.
> However both seem to be read in before the updated rulesets are
> loaded, so in effect the scores will not be changed by either file.
> I have so far settled to put a file zzz_extra_rulesets.cf into the
> site config directory and it works since it is read after the updated
> rulesets. However this seems a bit silly. Am I overlooking something?
> Is there a better place or could someone quickly explain in what order
> SA reads in the various .cf data.
/etc/mail/spamassassin/local.cf is the standard place to make updates.
Changes there will override the base rules.
*** Qmail-Scanner Quarantine Envelope Details Begin ***
X-Antivirus-GenesisGroup-Mail-From: "firstname.lastname@example.org" via ssdd
X-Antivirus-GenesisGroup: 1.25st (perlscan: 1.25st. clamdscan: 0.90.2/3398. spamassassin: 3.1.8. problem Found. Processed in 4.190474 secs) process 29177
Quarantine-Description: SPAM exceeds "quarantine" threshold - hits=3.9/3.2
SA_REPORT hits = 3.9/3.2
-0.0 SPF_PASS SPF: sender matches SPF record
2.1 namecheck_bad BODY: Invalid username for sender
1.4 GENESIS_USERCHECK HEADER: Recipient not recognised (destcheck)
1.1 GENESIS_REMOTESMTP BODY: 25/TCP not listening on remote host
-0.6 AWL AWL: From: address is in the auto white-list
*** Qmail-Scanner Envelope Details End ***