This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Poor spam detection.

Appears our 7.006 is not picking up much spam these days.

I have fairly tight spam rules but a LOT is still getting through. I am thinking of re-implementing Greylisting but leery of losing mails and delayed mails due to this. I have heard a spam engine update is in the works, any news on release of this?

This thread was automatically locked due to age.

Parents

0 drees over 18 years ago

IMO, unless Astaro can figure out how to take advantage of SpamAssassin's bayes learning (they should be able to integrate this into the quarantine somehow) there will always be a significant amount of spam getting through the filters.

I have setup DSPAM on one of our mail servers and it is catching over 97% of spam after some training. SpamAssassin should be able to reach similar levels with the proper setup, but it's difficult to do without catching legitimate email unless you give the end user some ability to train the filter.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 18 years ago in reply to drees

I understand there are significant improvements on the way... Don't know if I can say much more than that!

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrucekConvergent over 18 years ago in reply to drees

I understand there are significant improvements on the way... Don't know if I can say much more than that!

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Simon Shaw over 18 years ago in reply to BrucekConvergent

Problem is, a lot of the spam coming in is empty, with just a PDF or GIF attachment, nothing for Bayes to chew on...
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 18 years ago in reply to Simon Shaw

Problem is, a lot of the spam coming in is empty, with just a PDF or GIF attachment, nothing for Bayes to chew on...

That's the new thing. bayes can't chew on something that's not inside the e-mail. Having the system now analyze every single attachment for spam is going to be a huuuuuuuge resource tax in both cpu and ram. It will be interesting to see if they can come up with a effective and resource effective solution.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 drees over 18 years ago in reply to Simon Shaw

Problem is, a lot of the spam coming in is empty, with just a PDF or GIF attachment, nothing for Bayes to chew on...

DSPAM (a bayes filter) has no problem catching those spams. Looking through my spam box it looks like a third of the spam is of that nature.

I don't see why a properly configured spamassassin would do that much worse, especially if using SA's bayes learning features properly as well.

I used to run SA instead of DSPAM and it also worked fairly well, but not quite as well as DSPAM, even at catching image spam.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 18 years ago in reply to drees

Interesting.
Cancel
Vote Up 0 Vote Down

Cancel
0 Gert Hansen over 18 years ago in reply to Simon Shaw

hi there,
Astaro will upgrade the V7 Spam engine in next 6-8 weeks to a new one, that catches nearly everything. It does not use bayes filter, but a fingerprinting and reputation approach asking central servers. This makes it very fast with low resource usage.
so please stay tuned

regards
Gert
Cancel
Vote Up 0 Vote Down

Cancel
0 SveN_01 over 18 years ago in reply to Gert Hansen

Hi Gert,
this sounds good... I hope with this version I can directly block
emails which contain SPAM. It is not much fun to delete 4600
Spam viruses over the weekend with the quarantine manager!

cu SveN
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 18 years ago in reply to SveN_01

Thanks Gert!
Cancel
Vote Up 0 Vote Down

Cancel
0 drees over 18 years ago in reply to Simon Shaw

Yep, Thanks Gert! Looking forward to the new spam filter if it's that good, it would be nice to not have to maintain our own!
Cancel
Vote Up 0 Vote Down

Cancel
0 MarkVerbeek over 18 years ago in reply to drees

I also hope it will bring back "X-Spam-Flag: YES"
This would make junk mail handling with GroupWise easier.

Thanks,
Mark
Cancel
Vote Up 0 Vote Down

Cancel
0 SveN_01 over 18 years ago in reply to MarkVerbeek

...and the ALL_TRUSTED with Score -1.4 should be fixed [:)]
Cancel
Vote Up 0 Vote Down

Cancel