Spam sneaking in.

[Matus UHLAR - fantomas]

On 31.07.19 11:47, Bob D wrote:
>I have an Ubuntu 18.04 server running Postfix, Clamav, Spamassassin, 
>Dovecot with virtual hosts/emails.
>I have spam sneaking in here and it is annoying. They all mostly come 
>from the same IP. When I ban the IP, after a few hours, it just comes 
>from another IP.
>This garbage is obviously spam, no doubt. When I test any of the mails 
>via the command-line, it always scores high.
>The last one I checked scored 23.8 as spam using either:
>$ su spamassassin -c "spamassassin -D < testmail"
>$ su amavis -c " spamassassin -D < testmail"
>This one showed .6 in the X-Header as it came in as shown here:
>--------------------------------------------------------------------------------------------------------------------------------
>X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
>        MyServer1-2.mydomain.com
>X-Spam-Level:
>X-Spam-Status: No, score=0.6 required=4.0 
>tests=BAYES_99,BAYES_999,DKIM_SIGNED,
>        DKIM_VALID,DKIM_VALID_AU,DKIM_VERIFIED,HTML_MESSAGE,
>        T_KAM_HTML_FONT_INVALID,T_REMOTE_IMAGE autolearn=no 
>autolearn_force=no
>        version=3.4.2

strange, BAYES_99+BAYES_999 scores 3.7
DKIM_VALID,DKIM_VALID_AU and DKIM_VERIFIED substract only 0.3 points

try setting sa_tag_level_deflt to 'undef' and you can see scores of those
rules...

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fighting for peace is like fucking for virginity...