Hello and welcome to our Knowledge Base. Our experts provide answers to the most frequently asked questions of our customers. Start your information search here to find your answer quickly and easily.
Please enter your query or select one of the above categories.

Knowledge Base SpamAssassin in a Box

status_loader


To use the search function, you need JavaScript enabled.

All entries (Page 1 / 2)
I installed the tiral version of the software. I have purchased the full version.. What shall I do?

Please run the setup of the licensed full version.
Please do not uninstall the previous installed trial version.
All settings will be retained.

Does the used SpamAssassin version check SPF-records of the sending mail servers?
Can own SpamAssasin directives be inserted, e.g.: score SPF_FAIL 58.5score SPF_HELO_FAIL 58.5?
Where would a corresponding file be stored?

Yes, the SpamAssassin used checks SPF records. The default settings for SPF can be found in 25_SPF.cf or the corresponding scores in 50_scores.cf. If you are using "Exchange Server Toolbox" the best way to set your own scores is to use the built-in editor for creating custom SpamAssassin config files which you can find under Spam Options.


For more information about the options, see:
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/

Alternatively, you can manually create your own .cf file in which you define your "rules", this should only come last alphabetically, since SpamAssassin will evaluate the cf files in numerical-alphabetical order. (For example XMySettings.cf).

Translated with www.DeepL.com/Translator (free version)

Why does the "URIBL_BLOCKED ADMINISTRATOR NOTICE" SpamAssassin rule hit on any of my messages, what is it for and how can I avoid this?

URIBL (http://www.uribl.com) is a DNS-based Blackhole List which tracks IP addresses which are commonly used for sending spam mails. URIBL is enabled by default for SpamAssassin installations but allows only a certain amount of requests from the same IP every day. If this amount is exceeded, any further requests will be blocked by the URIBL servers with the info notification above.

This typically happens for SpamAssassin installations that use public DNS resolvers such as Google. As any request that is forwarded via the Google servers has the same IP when it reaches the Blackhole list, all requests will share the same limit. For usage of an alternative DNS, please follow these instructions.

For the following domains it is currently useful to set up forwarding to ensure the full functionality of SpamAssassin:
- zen.spamhouse.org
- sbl.spamhouse.org
- list.dnswl.org
- multi.uribl.com


Now determine the name server for each of the mentioned domains.
Open a command prompt and issue the following command (e.g. for "lists.dnswl.org"):

nslookup -querytype=ns list.dnswl.org.

Example output:
list.dnswl.org nameserver = b.ns.dnswl.org
list.dnswl.org name server = c.ns.dnswl.org
b.ns.dnswl.org internet address = 74.208.14.82
c.ns.dnswl.org internet address = 173.255.241.134
c.ns.dnswl.org AAAA IPv6 address = 2600:3c01::21:1000

  • Now create a "conditional forwarding" on your domain controller for each IP address.
  • Open the DNS management console on the server
     <Server Name> ' "Conditional Forwarding" ' Right click, "New Conditional Forwarding"
  • Enter the domain (in the example: "lists.dnswl.org") and then enter the IP addresses previously queried.

How can I make use of SpamAssassin plugins, that are not part of the Windows distribution?

Please see the manual, section "Components and Plugins".

When starting SpamAssassin I get the following notification. What is this for?
 info: rules: meta test __SOME_TEST_NAME has dependency 'YET_ANOTHER_TEST' with a zero score

This happens if SpamAssassin finds rules with a score of zero. Tests with such a score a generally used in third party rule sets.
They check for a specific spam or ham sign but do not actually assign a score to leave it to the SpamAssassin admin if they want to use it or not to optimize their spam detection.
The message can be avoided by assigning a score to the related test or by removing the channel which belongs the particular rule from the sa-update call.
To assign a score, open 'local.cf' in the configuration directory (<%SACONFIGPATH%>) and add the line following line:
score YET_ANOTHER_TEST 0.0001

Sa-update fails with the following message, what can I do?
config: no configuration text or files found! do you need to run 'sa-update'?
check: no loaded plugin implements 'check_main': cannot scan!
Check the necessary '.pre' files are in the config directory.

The path to rules and/or config dir is invalid. Make sure you run the executable (spamd.exe, spamassassin.exe, ...) from their main directory instead of specifying an absolute path to run.

Spamassassin.exe / spamd.exe fails with the following message:
config: no rules were found!  Do you need to run 'sa-update'?

Most likely SpamAssassin is not able to find a valid rule set. Please run sa-update.bat to download the latest rules.

Where do I fond more information about SpamAssassin configuration?
How can I add custom rules?

To add your own SpamAssassin rules, please create a plain text file that has the file extension .cf and place it into the configuration directory C:\ProgramData\JAM Software\spamdService\sa-config. You can now add your own rules using the following syntax:
header  JAM_ERECTION Subject =~ /e.?r.?e.?c.?t.?[i1|l!].?[o0].?n/i
describe  JAM_ERECTION Subject contains "erection"
score  JAM_ERECTION 1.0

This will create a rule which catches various spellings of the word "erection" in the subject of a mail. For more information on writing custom rules, please refer to the following topic in the official SpamAssassin Wiki: https://cwiki.apache.org/confluence/display/SPAMASSASSIN/WritingRules

Alternatively you can also define your rules in the "user_prefs" configuration file which is located in the user profile directory. For a regular user this is the following directory:
%userprofile%\.spamassassin
When executing SpamAssassin using the Windows system service account (which is the default when using SpamAssassin in a Box for example) the file will typically be located at the following directory (assuming a 64 bit system):
C:\Windows\SysWOW64\config\systemprofile\.spamassassin

When using the SpamAssassin daemon (spamd.exe) for spam filtering, testing rules in the "user_prefs" file has the advantage that its contents are read for each mail and not only at the start of the process. This way you won't have to stop and start the SpamAssassin daemon each time you want to check if a certain change to your custom rule has the desired effect. If the rule is working as intended you can still copy it to a .cf file in the configuration directory (<%SACONFIGPATH%>). This is a good practice as a huge "user_prefs" file would decrease performance of the SpamAssassin daemon.

How can I adjust the threshold/score at which mails are being tagged as spam?

If you use SpamAssassin in conjunction with "Exchange Server Toolbox" or "SmartPOP2Exchange", the Configured Score in "Exchange Server Toolbox" or "SmartPOP2Exchange" Rule-Condition usually determines how a scanned email should be handled.

If you use "SpamAssassin in a Box" alone, proceed as follows:
The threshold can be configured in the configuration "C:\ProgramData\JAM Software\spamdService\sa-config". Please open the text file with an appropriate text editor and search for the following line:
# required_score 5.0
Remove the comment sign (#) in front of the line and adjust the score to the desired value. Please note that any changes in the configuration files in the configuration directory will require a restart of the SpamAssassin daemon in order to take effect.

How can I manually train the SpamAssassin Bayes filter?

The SpamAssassin Bayes filter can be trained either using the sa-learn.exe or the spamc.exe. The main difference on a Windows system is that sa-learn will run under the currents user credentials while spamc will pass the mails that shall be trained to spamd (the SpamAssassin Daemon) which then trains the mail under the user credentials of spamd. This is especially important if you run SpamD for spam filtering under a separate user account, e.g. the Windows system user account (which is the default when using SpamAssassin in a Box for example). In this case you have to use spamc for training, as using sa-learn would just train the Bayes database for the local user.

For manual training we provide a batch script which can be used to train messages in a specific folder either as spam or ham. Besides the directory where the messages that shall be learned reside, the script requires you to decide whether the messages shall be learned as spam or ham. Please note that messages must be conform to the RFC822 format in order to make the Bayes filter work properly. For converting an Outlook message into a RFC822 conform message there are several tools available. The script tries learning using spamc first - if that fails because there is no local spamd instance available, it will "fallback" to sa-learn (assuming that learning shall be done using the local user account). To use the batch script, please follow these steps:

1. Open a command line prompt (run > cmd.exe).
2. Change directory (cd) to the installation directory of SpamAssassin in a Box .
3. Execute command: trainbayes.bat
4. Follow the instructions of the batch script.

I would like to use "SpamAssassin in a Box"  for the spam filtering on multiple domains (*.example.de, *.example.com), how many licenses must I buy for this?

In general, you need one license per installation. Therefore you only need one license if you administer multiple domains with a single installation.