spamassassin和spamc的不同结果

我已经安装和configuration和训练我的spamassassin,似乎都工作得很好。 然后当我试图通过spamc部署它,我得到了部分结果。

为什么发生这种情况?

我喜欢spamc的事实,我可以得到它只输出报告,但它似乎缺less检查:SPF,DKIM,贝。

我还没有设法弄清楚或在网上find类似的报告。 这已经持续了好几天了,我也没有想法。

spamassassin的作品:

# spamassassin -t < /path/to/spam.eml Content analysis details: (3.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1 0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] 0.5 MISSING_MID Missing Message-Id: header 0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly 1.4 MISSING_DATE Missing Date: header 

垃圾邮件只是部分:

 # spamc -R < /path/to/spam.eml Content analysis details: (1.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1 0.1 MISSING_MID Missing Message-Id: header 0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly 1.4 MISSING_DATE Missing Date: header 

我想到了同样的问题。

  • 这里是你的问题的答案: http : //spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html#filename

bayes数据库保存在运行spamassassin的用户的主目录中:

 bayes_path /path/filename (default: ~/.spamassassin/bayes) This is the directory and filename for Bayes databases. Several databases will be created, with this as the base directory and filename, with _toks, _seen, etc. appended to the base. The default setting results in files called ~/.spamassassin/bayes_seen, ~/.spamassassin/bayes_toks, etc. By default, each user has their own in their ~/.spamassassin directory with mode 0700/0600. For system-wide SpamAssassin use, you may want to reduce disk space usage by sharing this across all users. However, Bayes appears to be more effective with individual user databases. 
  • 这是为我工作的解决方案:

根据这个wiki: http : //wiki.apache.org/spamassassin/SiteWideBayesSetup ,我在/etc/mail/spamassassin/local.cf中添加了以下两行:

 bayes_path /var/spamassassin/bayes_db/bayes bayes_file_mode 0777 

我创建了所需的目录: / var / spamassassin / bayes_db /

请注意,路径中的最后一个“bayes”是数据库文件的前缀(bayes_journal,bayes_seen等)

好吧,我修好spamassassin后,什么都没有发生。 没有贝叶斯测试呢。 嗯…

所以,我将已经创建的数据库从/root/.spamassassin/*复制到/ var / spamassassin / bayes_db

更新:似乎我必须将这4个bayes_ *文件的权限更改为0666.否则autolearner将不会保存新的数据。 我不同意0666的许可,但我希望能尽快找到另一种解决方案。

我运行另一个垃圾邮件的测试,我得到了贝叶斯! 🙂

结果spamassassin

 # spamassassin -t -D spf,dkim < /path/to/spam.eml Content analysis details: (8.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100% [score: 1.0000] 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?141.146.5.61>] 1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 1.3 TRACKER_ID BODY: Incorporates a tracking ID number 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000] 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS 

垃圾邮件的结果:

 # spamc -R < /path/to/spam.eml Content analysis details: (8.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?141.146.5.61>] 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100% [score: 1.0000] 1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 1.3 TRACKER_ID BODY: Incorporates a tracking ID number 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000] 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS Content analysis details: (8.2 points, 5.0 required) 

如果spamd在专用用户帐户下运行,它将使用该用户找到的首选项,并且还可能存在一些访问权限问题(例如,用户不允许读取站点范围的Bayes数据库)。

你也可以选择给垃圾邮件影响其他行为的选项(例如,禁用DNS和网络测试的-L)。

你如何运行垃圾邮件? 你也可以用-D运行spamd,看看是否有什么有趣的东西弹出来。