Spamassassin behaving strangely

[Mauriat Miranda]

On Thu, Jan 13, 2011 at 10:41 AM, Timothy Murphy <gayleard at eircom.net> wrote:
> Spamassassin has recently started assigning SPAM qualification
> to perfectly respectable email.
> What can I do about it?
>

This is what end up needing to do every 1-1.5 yrs on my mail server.
Take all of your incorrectly flagged email and put it into its own
folder/directory in your email system.

You have some options:

1. Review the score distribution among these emails and determine
which RULE(s) is offending/incorrect.  Then reduce either the global
or local setting for that RULE(s). Or change your SPAM required_score
threshold to a higher number.

Example:
    3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
    2.8 RCVD_HELO_IP_MISMATCH  Received: HELO and IP do not match, but should

I think RCVD_IN_XBL should be only 1.0 instead of 3.0, so I modify:
~/.spamassassin/user_prefs

score RCVD_IN_XBL 1.00

You can also add whitelists.

2. Or you can re-sort your spam into 2 folders IS_SPAM (for actual
spam) and IS_HAM (for non spam, actual email) and rebuild the
journals/tokens for them:

# sa-learn --spam ~/mail/IS_SPAM
# sa-learn --ham ~/mail/IS_HAM

Hopefully this will make SpamAssassin relearn the correct matching.


I hope this helps.  Read the spamassassin wiki for more ideas.
http://wiki.apache.org/spamassassin/

-- 
Mauriat Miranda
http://www.mjmwired.net/linux