Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spam Log little bug?
  •  
benjic

Messages: 4
Karma: 0
Send a private message to this user
The Spam log reports the same threshold whether it is detected or rejected...
I have detection set at level5 and rejection at 9.0
yet I get

[12/Feb/2009 02:53:07] Message detected as spam with score: 5.92, threshold 5.00, From: centurial<_a.t_>notariate.at, To: xx<_a.t_>xxxx.com.au, Sender IP: 78.115.225.88, Subject: Message Alert - You Have 1 Important Unreadd Message, Message size: 2065

[12/Feb/2009 04:06:52] Message rejected as spam with score: 10.00, threshold 5.00, From: jamesi5521ok<_a.t_>yahoo.com
  •  
freakinvibe

Messages: 1529
Karma: 60
Send a private message to this user
I have the same behaviour (on 6.5.1). It only indicates the tagging threshold.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
This bug is gone in 6.6.1.
  •  
Levan

Messages: 9
Karma: 0
Send a private message to this user
Well amazingly it's back in 6.6.2 build 6175....
Spam rejection set at 9 detection set at 5

Thats what I am running and here is my log from today.
Quote:


[16/Feb/2009 03:27:40] Message rejected as spam with score: 10.00, threshold 5.00, From: centrallyosh488<_a.t_>senior-admirer.com, To: xx<_a.t_>xx, Sender IP: 124.120.3.45, Subject: 100mg x 10 pills US $ 7.00 Per Pill price, Message size: 788
[16/Feb/2009 10:53:39] Message rejected as spam with score: 10.00, threshold 5.00, From: basilndenkalagnkf<_a.t_>yahoo.com, To: xx<_a.t_>xx, Sender IP: 124.236.241.64, Subject: Quit Your Day Job Within 30 Days, Message size: 3258
[16/Feb/2009 19:33:21] Message rejected as spam with score: 10.00, threshold 5.00, From: osarosekibo1<_a.t_>o2.pl, To: xx<_a.t_>xx, Sender IP: 220.110.216.70, Subject: Greetings, Message size: 4338
[17/Feb/2009 02:43:03] Message rejected as spam with score: 10.00, threshold 5.00, From: martynseniorunlac<_a.t_>mail.com, To: xx<_a.t_>xx, Sender IP: 124.236.241.65, Subject: No website or experience needed!, Message size: 5840
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
Sorry, my bad. Reject threshold isn't reported in 6.6.1 either Embarassed

In any case, spam score logging is quite confusing if one want to make something out of it, like custom reports and analysis. If a spam scores 24 points in SpamAssassin, it's reported as such in the debug log (if you enable it). In the spam.log, neither the message id nor the actual spam score is reported, just the artificial "roof" score of 10, then the sender, the receiver and that some message was rejected.

Since it's not possible to find out what the reject threshold is from the logs, you can't easily find out if a certain mail was rejected and why. Try finding out where (IP wise) your rejected mail is sent from and if you need to whitelist something. Can't be done without jumping through hoops.

On a side note: have anyone noticed that the SpamAssassin rules in Kerio is so old that they trigger the FORGED_HOTMAIL_RCVD and FORGED_HOTMAIL_RCVD2 rules when mails arrive from live.com? Combined, these rules adds around 4 points in the default setup to a spam score. Not good.

The Apache guys updates the SA rules a couple of times a month, but Kerio ships with static rules from what appears to be 2006 (SpamAssassin 3.0.x). Does anyone know whether the built-in SA rule set can be updated without breaking anything?

Sorry to rant forever on SpamAssassin in KMS, and I would certainly file a ticket to support if I thought it would do me any good Crying or Very Sad

[Updated on: Tue, 17 February 2009 01:07]

Previous Topic: outlook filters
Next Topic: Issues conneting G1 Android based phone
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Sep 22 06:37:44 CEST 2017

Total time taken to generate the page: 0.00415 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.