goglcount.blogg.se - Spamassassin scores

#Spamassassin scores how to#
#Spamassassin scores full#

#Spamassassin scores how to#

The following examples demonstrate how to properly use wildcards in the whitelist: Printf "\n\nResults from /var/log/exim_mainlog\n" & printf "The EXIMID variable is not set\n\n" grep $EXIMID /var/log/exim_mainlog | grep "id=" || printf "NOTHING FOUND FOR EXIM ID: %s\n\n" $EXIMID printf "\n" MID=$(grep $EXIMID /var/log/exim_mainlog | grep "id=" | sed 's/.*id=$.*$.*T=.*/\1/') RULEFILES=$(find /var/lib/spamassassin /etc/mail/spamassassin -name "*.cf") printf "Results from /var/log/maillog:\n" grep $MID /var/log/maillog || printf "NOTHING FOUND FOR MESSAGE ID OF: %s" $MID printf "\n\n" grep $MID /var/log/maillog | awk '/result/ " do (grep $RULE $RULEPATH | egrep ".When you add addresses to the whitelist, use * as a wildcard to represent multiple characters and ? to represent a single-character wildcard. It will then search for the description of each of the rules that were used to evaluate the message of interest and print the file where the description was found along with the description its self. It will then use the Message ID to locate the SpamAssassin score results in /var/log/maillog. This script will use the Exim ID of the message to locate the Message ID found within the Exim Log /var/log/exim_mainlog.

Now that the Exim id variable has been set, run the following script.

Be sure to replace YOUREXIMIDHERE with the Exim ID that you found. Create a BASH variable that contains the Exim ID that you found with the following command.Once you have obtained the Exim ID of the message that you are looking for, login to the server via SSH or Terminal as the root user.The Exim id will look very similar to the following: 1lrVgW-0002Qb-So You may also find the Exim ID in WHM at: Home ✾mail »Mail Delivery Reports This can be time consuming if you are not experienced in reading Exim logs though. The following guide explains how to do this:Īnother method would be to examine the Exim log ( /var/log/exim_mainlog ), and look for a message that matches the same date, time, sender, subject, and recipient details.

#Spamassassin scores full#

One way of doing this would be to obtain the full email headers of the message which will contain the Exim id.

First you need to identify the specific message that needs evaluation by locating the Exim ID of the message.

Use the Exim ID if you run into that issue. Also sometimes the Message ID may contain characters that make it difficult to use on the command line.

The only significant difference between the two would be how comfortable you are with identifying the Exim ID vs the Message ID. This guide shows techniques for searching by Exim ID, and Message ID. There are a two different methods for locating the results. How can I check why spam Assassin applied a particular score? These other articles provide other methods of reviewing this information: This is only one way to go about this type of investigation. If you find that SpamAssassin is marking messages as Spam when it should not be, or that SpamAssassin is not marking messages as spam when it should be, you can use the following procedure to find out what rules were applied to a message and review the description of the applied rules for additional context. It performs the evaluation of the message based on preconfigured rules that tell it what to look for, and what score to apply to the message based on the results of the tests defined in the rule. Spam Assassin evaluates a message and assigns it a score to determine whether or not to consider the message spam.