Running the latest ispconfig3 on Debian with all its updates. What is the best way to check the SPAM system? We get a ton of spam through our servers so I am thinking we have serious spam configuration issues. I read in a thread on the ispconfig2 forum where you can check the header and see the spam score but I am not seeing that in my message headers. What can I look for to insure that our spam system is up and doing the best it can do? I have it set to normal policy and I have even changed it to... SPAM tag level 1 SPAM tag2 level 1 SPAM kill level 1 SPAM dsn cutoff level 0 SPAM quarantine cutoff level 0 SPAM modifies subject YES SPAM subject tag SPAM subject tag2 ***SPAM*** and still a ton of spam gets through.
Here is a couple of example email headers from my host This one passed even though I have my policy set to kill at level 1 Return-Path: <[email protected]> Delivered-To: [email protected] Received: from localhost (localhost [127.0.0.1]) by somehost.somedomain.net (Postfix) with ESMTP id 5B7D230BA4 for <[email protected]>; Mon, 19 Dec 2011 13:57:39 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at somehost.somedomain.net X-Spam-Flag: NO X-Spam-Score: 1.895 X-Spam-Level: * X-Spam-Status: No, score=1.895 tagged_above=1 required=4.5 tests=[AWL=-0.160, BAYES_50=0.001, HTML_MESSAGE=0.001, RDNS_NONE=0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLACK=1.955] Received: from somehost.somedomain.net ([127.0.0.1]) by localhost (somehost.somedomain.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tHx1bICMLfdb for <[email protected]>; Mon, 19 Dec 2011 13:57:36 -0800 (PST) Received: from mx1.ymimedia.com (unknown [91.227.127.3]) by somehost.somedomain.net (Postfix) with SMTP id 72231872556 for <[email protected]>; Mon, 19 Dec 2011 13:10:03 -0800 (PST) To: "whhj" <[email protected]> From: "Worldwide Who's Who" <[email protected]> Reply-To: <[email protected]> Subject: FINAL REMINDER: You've Been Selected for the Worldwide Who's Who Among Executives and Professionals Date: Mon, 19 Dec 2011 15:33:21 -0600 MIME-Version: 1.0 List-Unsubscribe: <mailto:[email protected]> Precedence: bulk Content-type: multipart/alternative; boundary="----------------NPart_25.4F0_9F.0_89U7Q_D62.X356UI5"; Message-Id: <[email protected]> Here is another one that came through without the X- headers at all??? Return-Path: <[email protected]> Delivered-To: [email protected] Received: from localhost (localhost [127.0.0.1]) by somehost.somedomain.net (Postfix) with ESMTP id 01ED987264B for <[email protected]>; Mon, 19 Dec 2011 12:54:26 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at somehost.somedomain.net Received: from somehost.somedomain.net ([127.0.0.1]) by localhost (somehost.somedomain.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bUZsw4AoPKc5 for <[email protected]>; Mon, 19 Dec 2011 12:54:23 -0800 (PST) Received: from vz.eau.taxprofessionalsresource.net (vz.eau.taxprofessionalsresource.net [63.84.2.24]) by somehost.somedomain.net (Postfix) with SMTP id 9A89F3133A for <[email protected]>; Mon, 19 Dec 2011 12:12:40 -0800 (PST) Received: (qmail 26066 invoked by uid 0); 19 Dec 2011 20:12:39 -0000 Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=taxprofessionalsresource.net; b=XyidC8hLjPSaOSqC6OvudnBJ4ythvR3vF16uibvBxRYtpES7Zv1SRqzj+xuTZDkdsYDxsIfUmfHVF0LTeZmBRcFMqFKt26e86i0Qn9Jkmh42mwTo2uzDuV80LdhrEghJFz1RSFkcOwTxFEoA92suegVgxN6LJEljpVTVuGmvhoQ= ; Date: 19 Dec 2011 20:12:39 -0000 From: Tax Professionals' Resource <[email protected]> To: [email protected] Subject: Economic Nexus Standards in State Taxation Message-ID: <[email protected]> X-DestAddr: [email protected] MIME-Version: 1.0 Content-type: multipart/alternative; boundary="mime-separator"