From owner-freebsd-questions@FreeBSD.ORG Mon Dec 8 08:29:43 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 54211A1F for ; Mon, 8 Dec 2014 08:29:43 +0000 (UTC) Received: from mail-pa0-x243.google.com (mail-pa0-x243.google.com [IPv6:2607:f8b0:400e:c03::243]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 23173C97 for ; Mon, 8 Dec 2014 08:29:43 +0000 (UTC) Received: by mail-pa0-f67.google.com with SMTP id lj1so2535661pab.10 for ; Mon, 08 Dec 2014 00:29:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=WUVGzgIevQEDvpr/7i1eVvCgKQAJES0YVVoxXlDeQUs=; b=pghzElbovCBDFVsLOXULRil/2JCSe+mN70G2IxgKmxahsXTUPZncAgn0MNrd6X+Urj fmoEFf4M47vCEzf+MWt+flZ6+hqSRbFMXA51iB0nrTZPyHKfcRyrlfMQvmHMm1Lgr24i iEv0yRGJqNwt2dSiQ5FAWDFrVm0RAhd9U9TLONTcg8pYffaXGcwIrwMwxUWjtRRkkNOE YTPVPYGGb+tNeIlKP3LVR+LJOrne59ozOqN386swrN+4gwY04pvTYdFkALnRll7PcACx +WsjPxgo/OCFY4EZYBhbW3MI5+Iv1L5QbmRvPAo3nh2/dzHM6bzea6q+GR9UKdkQQz+x Tm1A== X-Received: by 10.68.108.67 with SMTP id hi3mr58634256pbb.19.1418023352699; Sun, 07 Dec 2014 23:22:32 -0800 (PST) Received: from [192.168.111.116] ([120.29.118.234]) by mx.google.com with ESMTPSA id ql6sm35362528pbb.39.2014.12.07.23.22.30 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 07 Dec 2014 23:22:32 -0800 (PST) Message-ID: <548551C9.2050004@gmail.com> Date: Mon, 08 Dec 2014 15:22:49 +0800 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Daniel Staal Subject: Re: How to report a spammer so SpamAssassin can filter it out References: <548450C6.4040207@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Dec 2014 08:29:43 -0000 Daniel Staal wrote: > --As of December 7, 2014 9:06:14 PM +0800, Ernie Luzar is alleged to > have said: > >> Hello list >> >> Keep getting spam email from some guy selling bulk solar panels. >> I know SpamAssassin has built in check of different places that provide >> list of known spam email addresses. >> Where can I find a list of places to notify them of this spam email >> address? list@beawindhog.com > > --As for the rest, it is mine. > > There's several good ways to report this to Spamassassin - write a > rule that catches it, or contribute to their spam corpus so that they > can test rules against it, or use spamassassin's reporting features. > > For the first, the best place to start is the Spamassassin mailing list: >> list-help: >> list-unsubscribe: >> list-subscribe: >> List-Post: > (See also: > , as > you're asking one of them.) > > For the second, I'd still start with the mailing list, but > instructions on setup are here: > > (Note they will want you to analyze all your mail - spam and ham - not > just a few messages. Actual emails are not uploaded - just the record > of what rules your messages hit.) > > The most direct answer for your question - in the FAQ above - is to > use Spamassassin's reporting features - `man spamassassin-run` lists > them, or as I said the FAQ above. Short version: `spamassassin -r < > fullemailmessage.txt` (Fuller details in the FAQ and man page.) > > Daniel T. Staal > > --------------------------------------------------------------- My domain name, website and email is all hosted by namecheap.com. Their email is run on apache storing email in sqlite database and running spamassassin under apache. They provide a cpanel menu system for me to customize my hosted world. I do not have direct access to their servers /root. This means I have no way to perform the tasks talked about by above posts. The basic default spamassassin rules have cut the spam by 80%. But was still getting spam from china and Korea and spam in languages other then English. I had namecheap tech support enable the following options for my hosted email system. Changed* required_score* from 5 to 3. This stopped 15% of the spam that was still getting through. Then enabled the following tests, *ok_languages en **blacklist_from *.cn *to kill all email from China* **blacklist_from *.ke *to kill all email from Korea* **blacklist_from *@beawindhog.com *to kill all email from that domain name that I posted about *score CHARSET_FARAWAY_HEADER 3.1* *score UNWANTED_LANGUAGE_BODY 5.1 *both of these options kill email not in English language.* * Since this was enabled I have not had any spam get through. My thanks goes out to all who replied.