2. The Control Panel

2.1.  How do I enable SpamAssassin on my Account?
2.2.  What is Filter Sensitivity, and how do I set it?
2.3.  What are spam reports and how can I view the reports generated by SpamAssassin?
2.4.  How do I enable and disable SpamAssassin's HTML conversion feature?
2.5.  How do I add custom rules to create my own White and Black Lists?
2.6.  How do I disable the SpamAssassin feature on my account?

3. Configuration Questions

3.1.  Does SpamAssassin ever alter the text or content of spam emails?
3.2.  Why remove HTML from suspected spam?
3.3.  Is it smart to simply delete all of the mail that SpamAssassin flags as spam?
3.4.  So what do I do with all this flagged mail?
3.5.  How Accurate is SpamAssassin?
3.6.  Does SpamAssassin also filter my outgoing email for spam?
3.7. What is the "Auto-White List" feature?

4. Advanced Topics

4.1.  What are the actual tests performed, and what are they each worth?
4.2.  Where can I find more advanced technical information on the commands and configurations of SpamAssassin?


1.1.  What is "Spam"?
Spam is the common name for unsolicited commercial email. Any email containing non-personalized or identical information, that is sent to multiple recipients who did not request to receive it is considered spam. In common terms, spam is the junk email that clutters your inbox and wastes your time and resources.

Return to Top
Return to Topic

1.2.  What is "SpamAssassin"?
SpamAssassin is an advanced filtering program that you may enable on your hosting account. It uses a wide range of tests on the headers and body of emails to determine if they are spam. SpamAssassin uses a flexible design that allows you to control its rules, filter settings, and actions.

Return to Top
Return to Topic

1.3.  How Does It Work?
SpamAssassin uses a "point" based system for determining whether a particular email is spam. Every email is scanned for specific triggers. These triggers are worth varying amounts of points depending on their severity. SpamAssassin tallies the points of each email, and if this total is above your specified limit, the email is marked with a *****SPAM***** flag in its subject.

SpamAssassin uses a rule base with hundreds of triggers. This rule base has three categories:
  • Header Analysis: spammers often forge return addresses, and add bogus entries to the headers of their emails. This is done both to fool you into thinking that the email is valid, and to make it harder to determine the actual source of the email. Spam Assassin knows what to look for in these headers, and can quickly identify false, invalid, or misleading information.

  • Text Analysis: spam emails often have characteristic styles, phrases, and disclaimers in them. SpamAssassin attempts to spot some of these clues.

  • Blacklists: SpamAssassin compares each email to the lists maintained on major Real Time Blacklist servers (RBLs). If an email is sent from a domain or server in one of these blacklists, there is a good possibility that it is spam.


Return to Top
Return to Topic

1.4.  How much software do I have to install?
SpamAssassin does not require you to install anything on your computer. It runs completely on our servers, scanning all emails that are recieved to your domain. Therefore, having SpamAssassin enabled on your account will not use your own computer's resources or effect its performance. Enabling SpamAssassin on your account is as easy as the click of a button. Once the proper SpamAssassin package has been installed on your account, you can enable and disable it from your account's Control Panel.

Return to Top
Return to Topic

1.5.  Does SpamAssassin automatically delete emails that it thinks are spam?
No. We do not intend to censor our customer's email accounts. The SpamAssassin filter is enabled only to identify possible spam emails. What happens to these flagged emails is up to you. Users often setup message rules with their email clients to delete or forward suspected spam. Even if an email is recieved from a sender on your Black List, that email will be automatically flagged as spam, but will never be automatically deleted.

Return to Top
Return to Topic

1.6.  If SpamAssassin scans all of my emails, how is my privacy maintained?
SpamAssassin is a completely automated process that acts without any human intervention. It scans the body and headers of your emails only once, looking for indications that it may be spam. SpamAssassin does not log or store any of the information it scans from your emails, and no one has access to the information as it is scanned. Therefore, your privacy is absolutely maintained, and any confidential, personal, or otherwise private information will remain unseen.

Return to Top
Return to Topic

1.7.  Will SpamAssassin filter out viruses, worms, and trojan horses?

No. SpamAssassin is designed to focus entirely on filtering spam. The task of identifying spam is very complicated and resource intensive. Adding virus detection to SpamAssassin would create an intense demand on system resources, and slow down the filtering process considerably. To avoid long delays in receiving your emails, SpamAssassin is devoted to only filtering for spam.

However, our email servers are configured to scan all incoming emails for viruses before they are allowed onto our servers. While it is not possible to filter out every virus that is recieved, we take every possible precaution to limit the amount of virus emails that enter our system.

To minimize your risk of contracting a virus, we strongly recomend all of our customers have anti-virus software installed on their computers. Be sure to keep your anti-virus software updated regularly as new viruses are encountered on a daily basis.

Return to Top
Return to Topic

1.8.  Who decides how strict the SpamAssassin filter is?
You do. In your control panel, you have access to the filter's sensitivity along with a number of other configuration options. Here, you may set the filter to be as strict or as lenient as you wish and configure other options such as the location of reports, conversion of HTML, and custom filter rules.

Return to Top
Return to Topic

2.1.  How do I enable SpamAssassin on my Account?
The SpamAssassin Standard Package comes pre-installed on your account. If you require one of the more advanced "Gold" or "Platinum" packages, contact us. Once an appropriate package has been installed on your account, go to the "Spam Assassin" section of your website's Control Panel. From here you can enable your SpamAssassin filter by selecting "on" and clicking the "Apply" button. When the configuration options appear on the screen, you know that SpamAssassin is fully enabled on your account.

Return to Top
Return to Topic

2.2.  What is Filter Sensitivity, and how do I set it?
The Filter Sensitivity determines how strict your SpamAssassin filter will be. Specifically, the sensitivity ranges from 2 to 12. Each email that passes through the filter is given a "score" based on the number of triggers it contains. When this score reaches your sensitivity value, then SpamAssassin will flag it as spam (*****SPAM*****). The lower your sensitivity value is, the stricter the filter will become.

At a setting of 2, nearly all spam emails will be caught, however, this setting will be so strict that legitimate emails could possibly be mistaken for spam.

At a setting of 12, your filter will catch only the most obvious spam emails while allowing more well-concealed ones through.

It is recommended that you select a level somewhere in the middle. Adjust your filter sensitivity up and down depending on the amount of spam you recieve.

Return to Top
Return to Topic

2.3.  What are spam reports and how can I view the reports generated by SpamAssassin?
SpamAssassin generates a spam report for each email that it filters. This report contains each rule that the email triggered, and its corresponding score. This way, you can see a breakdown of the total scoring for the email and can find out exactly why it was flagged as spam.

In the "Spam Assassin" section of your Control Panel, you can customize the filter to place its spam report in either the headers, or the body of each flagged (spam) email. By default, the reports will be placed in the headers of the email. To view these reports, you must instruct your email client to view the header information of the email. This process is different for each email client.

If you wish to view the reports in the body of the email, select this option and click the "Apply" button found below it. With this configuration, SpamAssassin will place its full spam report in the body of the email above the original text. Emails that are not flagged as spam will not have these reports placed in their bodies, and will remain unchanged.

Return to Top
Return to Topic

2.4.  How do I enable and disable SpamAssassin's HTML conversion feature?
By default, SpamAssassin automatically converts spam HTML emails into plain text. This is done to prevent your email client from unknowingly running malicious JavaScripts, or "web-bugs" that may be hidden in the HTML. This plain-text conversion may make some HTML emails unreadable. Therefore, if you are worried about having a legimate HTML email flagged as spam and made unreadable, you should diable this feature.

To disable the HTML conversion feature, from the "SpamAssassin" section of your Control Panel, select "Leave HTML emails alone", and click the "Apply" button immediately below.

To re-enable HTML conversion, select the "Remove potentialy dangerous HTML from suspected spam" option and click "Apply".

Return to Top
Return to Topic

2.5.  How do I add custom rules to create my own White and Black Lists?
From the "SpamAssassin" section of your control panel, you can create custom filter rules that specify your White and Black Lists.

Your White List is a list of the addresses and domains that you want to always recieve emails from. When you place an address or domain on your White List, SpamAssassin will not attempt to filter any emails originating from it. Emails from your White List bypass SpamAssassin and go directly to your normal mailbox.

Your Black List is a list of the addresses and domains that you do not want to recieve anything from. Place on your Black List, the email addresses and domains that you are absolutely sure are sending you spam. This way, SpamAssassin will not waste time and resources evaluating each individual email it recieves from a member of the Black List. Instead, it will automatically reject any Black List emails it recieves.


To Add a Rule, first select the Action to be performed from the "Add Rule" section. For a White List rule, select "Accept Mail From" as the action, for Black List, select "Reject Mail From". In the middle field, enter the email address, domain name, or general pattern you would like this rule to apply to.

The asterisk [*] is used as a "wild card" for greater flexibility. For example:

  • thatisp.com applies to every address at the domain "thatisp.com" as well as "abcthatisp.com"

  • *@thatisp.com applies to every address at the domain "thatisp.com"


  • *@*.thatisp.com applies to every address at any sub-domain of "thatisp.com"


Once you have finished, click the "Add Rule" button to enable your new rule.

Return to Top
Return to Topic

2.6.  How do I disable the SpamAssassin feature on my account?
To disable the SpamAssassin feature on your account, go to the "SpamAssassin" section of your Control Panel. The first option available to you on this page is to disable spam filtering. Simply select "Off" and click the "Apply" button. If you would like to permanently remove an advanced SpamAsssassin filtering package from your account, please contact us.

Return to Top
Return to Topic

3.1.  Does SpamAssassin ever alter the text or content of spam emails?
Normally, SpamAssassin will only flag an email as spam, it will not alter any information contained in the body or the message. However, there are two ways in which your configuration of SpamAssassin may alter the content of spam emails:

  • SpamAssassin can be configured to turn any HTML in a flagged spam email into plain text. This feature is useful because spam emails can sometimes use HTML that runs malicious JavaScript code, or contains "web-bugs". The choice to convert HTML to plain text is up to you and can be configured from your SpamAssassin Manager. Converting HTML to plain text will alter the layout of the email and may cause some HTML emails to become unreadable.


  • You may configure SpamAssassin to place a spam report in the body of flagged emails. This option places the report in text form above the acutal body of the email. If the email happened to be in HTML, this added text may cause it to become unreadable by you email client.

Return to Top
Return to Topic

3.2.  Why remove HTML from suspected spam?
The reason for converting HTML to plain text is that spammers often use HTML to hide and run malicious JavaScripts and "web-bugs". Malicious JavaScript contained in spam HTML could report back to the spammer a wide variety of information about you, and may also run processes that damage or compromise your system. "Web-bugs" are graphics that are included in the email that are configured to monitor who is reading it. They are usually invisible, and can collect a great deal of information about the person who accidentally activates them. Since SpamAssassin works on the server side, this malicious HTML code is converted to harmless plain-text before it is sent to your inbox. This prevents your email client from accidentally running any embedded JavaScripts or "web-bugs".

Return to Top
Return to Topic

3.3.  Is it smart to simply delete all of the mail that SpamAssassin flags as spam?
No. While the vast majority of flagged emails will be correctly labelled as spam, it is not possible for a computer to be 100% accurate every time. If you immediately delete all flagged email, you run the risk of losing legitimate emails that were mistaken for spam. This risk increases as the sensitivity of your filter increases. When you make your filter too strict, legitimate email is more likely to be mistaken for spam.

Return to Top
Return to Topic

3.4.  So what do I do with all this flagged mail?
The best solution to this is to create a special folder or mailbox for handling all of your flagged emails. This way, your regular inbox will not become cluttered with spam messages, but you will not risk losing legitimate emails. Simply scan this special mailbox on a less frequent basis to make sure that you haven't missed any legitimate emails.

Return to Top
Return to Topic

3.5.  How Accurate is SpamAssassin?
Testing with SpamAssassin has shown that it is accurate roughly 95% of the time. This means that at least 95% of the spam emails you would normally receive will be filtered. No anti-spam software conceived is ever 100% accurate, and the 5% margin is caused by very sneaky and ingenious spammers. Spam emails that slip through the filter are called "false negatives". By creating white and black lists, you can help SpamAssassin improve its accuracy and performance even further.

Return to Top
Return to Topic

3.6.  Does SpamAssassin also filter my outgoing email for spam?
No. SpamAssassin only filters email being sent to (not from) your inbox. However, this does not mean that sending spam is allowed or encouraged on our servers. According to our Terms and Conditions, spamming is an abuse of our resources and will result in the cancellation of your account.

Return to Top
Return to Topic

3.7.  What is the "Auto-White List" feature?
SpamAssassin employs an advanced Auto-White Listing feature that learns from the emails you recieve. Over time, this feature allows SpamAssassin to develop a more effective filter customized to the types of emails it sees. It works by keeping track of the addresses that send legitimate emails. If a specific address has sent you a legitimate (or low scoring) email in the past, then future emails from that address will automatically have their scores reduced. As you recieve more and more legitimate email from the address, its score will be reduced each time. Thus, over time all of the addresses you recieve legitimate emails from will have their scores reduced in this way. This will allow you to increase the sensitivity of your filter without the risk of having legitimate emails accidentally flagged as spam. Auto-White Listing allows your filter to evolve and adapt to the nature of the email that you recieve and improves its ability to target and eliminate spam.

Return to Top
Return to Topic

4.1.  What are the actual tests performed, and what are they each worth?
SpamAssassin employs literally hundreds of tests, and each one is assigned its own value depending on how severe it is. To view a complete listing of the tests included by default in SpamAssassin, a brief description of each, and their corresponding score, click here.

Return to Top
Return to Topic

4.2.  Where can I find more advanced technical information on the commands and configurations of SpamAssassin?
For a complete listing of SpamAssassin's functionality, its commands, configurations, installation information, and other specifics, click here.

Return to Top
Return to Topic