From: Gary V (mr88talenthotmail.com)
Date: Sun Nov 04 2007 - 19:37:42 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> Not all mail. Just email from one sender address (aka. mine). I get an email
> sent to me accusing my message of being UCE.
> It has obviously learned my address as spam and I'm stuck trying to find where
> the files are that hold this information.
>
> I've tried emptying the MySQL databases for Amavis and /var/amavis/*.*
> directories with no success. It is obviously somewhere else, maybe connected
> to Spam Assassin.

You are blindy throwing handfulls of mud at the wrong wall in the room. If you are getting notifications from amavisd-new, it is definitely related to SpamAssassin and your amavisd-new settings, and therefore you should join either the SpamAssassin list or the Amavis users list and continue the conversation there.

>
> Does anyone know how it's spam/ham state is stored?
>

Reprased,
Does anyone know how a message's spam/ham state is stored?

It's not stored, and yet it is. SpamAssassin does not exactly decide what is ham and what is spam, it simply scores messages. High scores indicate spamminess and low scores indicate non-spamminess. _You_ actually decide what is spam and what is ham by setting certain parameters in amavisd-new, parameters like tag2_level and kill_level. The SA score is calulated for each message by hundreds of SpamAssassin rules and a number of sub-routines that gather information about the message from various databases on the Internet (like RBLs for example), and most messages are also dissected into 'tokens' (a sender address is an example of a token) and these tokens are placed in a database called the Bayes database (you can use sa-learn to manually feed some of your messages to the Bayes database - and have the tokens in these messages learned as ham). The scores from all these sources are combined into one score. You then configure amavisd-new to perform some action when a high score is reached.

It would be good if you could find one or two of the messages you sent (maybe the message has been quarantined) and look at the X-Spam headers to see exactly what SpamAssassin rules hit. Examining the entire header of a couple samples would give some clues.

Are you sending mail from your server, or from somewhere else - like from home? It's common that home users are on dynamic IP addresses and many dynamically addressed networks will score high regardless of the sender's address. There are ways to fix this if this is the case.

If you are the administrator of the mail server in question, you need to spend some time learning more about how SpamAssassin and amavisd-new work in general. I would probably start by reading amavisd.conf-sample supplied with the amavisd-new source code, then the documentation and FAQ sections on the amavisd-new website.
http://www.ijs.si/software/amavisd/

This may also help you get started:
http://www200.pair.com/mecham/spam/amavisd-settings.html

Gary V

_________________________________________________________________
Peek-a-boo FREE Tricks & Treats for You!
http://www.reallivemoms.com?ocid=TXT_TAGHM&loc=us

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]