Upgrade for spamassassin?

[nateb0t]

I am currently using spamassassin - which as been great for me so far - but after cranking the rating down to 5.0 some of my co-workers emails are getting marked as spam by spamassassin.

Here is a sample analysis:
(5.70 points, 5 required)
WORK_AT_HOME (0.4 points) BODY: Information on how to work at home (1)
HTML_MESSAGE (0.1 points) BODY: HTML included in message
HTML_40_50 (0.7 points) BODY: Message is 40% to 50% HTML
MSG_ID_ADDED_BY_MTA_3 (0.3 points) 'Message-Id' was added by a relay (3)
FORGED_MUA_OUTLOOK (3.3 points) Forged mail pretending to be from MS Outlook
MISSING_OUTLOOK_NAME (0.9 points) Message looks like Outlook, but isn't

The orange part is what I am concerned about. He is using the most recent version of MS Outlook - and spamassassin 2.5 is not recognizing it. I am guessing this is a issue with 2.5 vs newer outlook, and is cleared up in spamassassin 2.6 or 3.0?

I've had to raise my required hits to 6.0 but wanted to know if I can install a higher version on my server?

[Chris]

Hi nateb0t,

You will not be able to upgrade the SpamAssassin ValueApp. However, you can install your own version, if you understand how it works and how to configure everything. It's not too hard to do. SA 3.0 requires a greater version of Perl than we have available, so you will need to go with 2.6 version.

In addition, you can change the scores for your SA install. You can either edit:

/ftp/pub/USERNAME/.spamassassin/user_prefs
or
/etc/mail/spamassassin/local.cf
score FORGED_MUA_OUTLOOK 2.0
score MISSING_OUTLOOK_NAME 1.0
Hope this helps...

[nateb0t]

I found this resource pretty useful:

http://www.intuitive.com/spam-assassin-rule-help.html

i can manage to make some rules in particular for our buisness that gives negative scores, hopefully reducing the number of false positives.

I am worried that SA will mark outgoing email as spam. I'm still looking for a decent way to let all privateerpress.com email go untouched, or lightly so.

[Chris]

I am worried that SA will mark outgoing email as spam. I'm still looking for a decent way to let all privateerpress.com email go untouched, or lightly so.SpamAssassin should not touch outgoing mail, so need to worry about that.

You can whitelist all of your domain's addresses like this.# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
# whitelist_from someone@somewhere.com
whitelist_from *@privateerpress.comYou should be able to add this to your "/etc/mail/spamassassin/local.cf" file. Test to confirm. Hope this helps...

[nateb0t]

ah, i just discovered:
whitelist_from_rcvd joe@example.com example.com

[Chris]

FYI...here are the DOCS for version 2.6.x:

http://spamassassin.apache.org/full/2.6x/dist/doc/Mail_SpamAssassin_Conf.html

Even though our SA is version 2.5.2, the docs should be accurate.

[dave]

More time has passed.... In another post I've seen you mention that newer versions of Perl are available...

What's the newest Spamassassin we can have now?

Loving the program, desiring the updates,

Dave

[Chris]

dave,

Our newest VDS servers are equipped with SpamAssassin version 3.0. It is being ran as a server-wide application and you cannot edit/add/remove any of the Rules/Scores, etc. Personally, I prefer 2.6.4, where I at least have some control over the Rules.