On Thu, 4 Dec 2003, Matt Kettler wrote:
> header RCVD_IN_MY_BNBLeval:check_rbl ('blue','bl.blueshore.net.')
> describe RCVD_IN_MY_BNBL Listed by bl.blueshore.net
> tflags RCVD_IN_MY_BNBLnet
> score RCVD_IN_MY_BNBL 5.0
>
> Technicaly I don't think the tf
Thanks
-Original Message-
From: Jennifer Wheeler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 7:40 PM
To: [EMAIL PROTECTED]; 'Spamassassin-Talk'
Cc: Idan Lerer
Subject: RE: [SAtalk] Spammer with dot in the mail from header
HI there
> -Original Message-
> From:
Oh no! Hmmm, so that's probably why no matter what header I add doesn't get reflected.
Cheers,
fritz
---
+ Basta Ikaw Lord
-Original Message-
From: Ryan Moore [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 04, 2003 2:41 PM
To: Fritz Mesedilla; Spamassassin-Talk
Subject: Re: [SA
To my knowledge amavisd-new is limited to using those headers, it
ignores the verbose ones added by SpamAssassin.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Fritz Mesedilla wrote:
How does spamassassin include the spam report in the head
On Thu, 4 Dec 2003, Richard Bewley wrote:
> Hi,
>
> Now, I have the following:
> header RCVD_IN_MY_BNBLeval:check_rbl('bl', 'bl.blueshore.net.',
> '2')
> describe RCVD_IN_MY_BNBL Listed by bl.blueshore.net
> tflags RCVD_IN_MY_BNBLnet
> score RCVD_IN_MY_BNBL
I have added:
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on _HOSTNAME_
add_header all Report _REPORT_
on
1) /etc/mail/spamassassin/local.cf
2) /var/amavis/.spamassassin/local.cf
3) /var/amavis/.spamassassin/user_prefs
just to make sure.
Restarted amavisd-new. And I sti
My local.cf is as follows:
required_hits 4.0
rewrite_subject 1
subject_tag [SPAM]
report_safe 1
use_terse_report 0
use_bayes 0
bayes_auto_learn_threshold_nonspam 0.5
bayes_auto_learn_threshold_spam 7.5
bayes_auto_learn
Hi,
Actually, I meant just the first part (the bl), or course the server name
has to be there ;)
Anyway, I tried exactly what you suggested, and that doesn't work either.
I'm pretty sure whatever syntax I had (before it broke) worked also, one day
it just stopped working, and I'm really not sure
Thanks Matt!
That relaxed me! I thought we were infected already.
Cheers,
fritz
---
+ Basta Ikaw Lord
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 04, 2003 1:52 PM
To: Fritz Mesedilla; Spamassassin Mailing List (E-mail)
Subject: Re: [SAta
At 12:30 AM 12/4/03 -0500, Richard Bewley wrote:
So, do I still need the 'bl', 'bl.blueshore.net'.'? Or, can I just leave
that out?
Well, you DEFINITELY need the bl.blueshore.net.. otherwise how would SA
know what blacklist to query?
The 'bl' part can be more-or-less any unique string. It's used
Hi,
Now, I have the following:
header RCVD_IN_MY_BNBLeval:check_rbl('bl', 'bl.blueshore.net.',
'2')
describe RCVD_IN_MY_BNBL Listed by bl.blueshore.net
tflags RCVD_IN_MY_BNBLnet
score RCVD_IN_MY_BNBL 5.0
And it still doesn't work. I also tried it with
At 12:51 PM 12/4/03 +0800, Fritz Mesedilla wrote:
How does spamassassin include the spam report in the headers?
I only get these headers:
You can reconfigure the headers added by SA.. see the "add_header" config
option and the "TAGS" section for a list of different items you can insert.
http://a
I was getting quite "envious" of you people seeing the bigevil list working.
Now I got my first bigevil catch:
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
-- --
1.1 HTML_
Hi,
So, do I still need the 'bl', 'bl.blueshore.net'.'? Or, can I just leave
that out?
Thanks,
Richard
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 10:47 PM
To: Richard Bewley; [EMAIL PROTECTED]
Subject: Re: [SAtalk] Adding another
How does spamassassin include the spam report in the headers?
> X-Spam-Score: 0.9 (/)
> X-Spam-Report: Spam Filtering performed by sourceforge.net.
> See http://spamassassin.org/tag/ for more details.
> Report problems to https://sf.net/tracker/?func=add&group_id=1&atid=21
>
As long as we're suggesting edits to Chris's bigevil.cf
/s/rawbody/uri/
Unless there's some reason I'm not aware of that causes uri rules to not
work properly.
---
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape OSDN's s
At 09:13 PM 12/3/03 -0500, Richard Bewley wrote:
header RCVD_IN_MY_BNBLeval:check_rbl_txt('bl',
'bl.blueshore.net.')
describe RCVD_IN_MY_BNBL Listed by bl.blueshore.net
tflags RCVD_IN_MY_BNBLnet
score RCVD_IN_MY_BNBL 5.0
From looking bl.blueshores.net, t
Thanks guys!
fast_spamassassin is what qmail-scanner auto-detected.. I compared it to our existing
production SpamAssassin server which is using fast_spamassassin too, but I forgot, I
think my boss made some modifications to spamc to force it to use verbose mode when we
built it... It will be a
On Wed, Dec 03, 2003 at 05:07:25PM -0800, Justin Mason wrote:
> I think the implementation of "each" in DB_File must be inefficient,
> creating an in-memory list. It might be a good idea to check out
> DB_File's built-in iterator methods, now that we only support that
> db module. Haven't check
Hi,
I had this in my /etc/mail/spamassassin/local.cf file:
header RCVD_IN_MY_BNBLeval:check_rbl_txt('bl',
'bl.blueshore.net.')
describe RCVD_IN_MY_BNBL Listed by bl.blueshore.net
tflags RCVD_IN_MY_BNBLnet
score RCVD_IN_MY_BNBL 5.0
For some reason, how
On Wed, Dec 03, 2003 at 07:17:28PM -0500, Rick Macdougall wrote:
> Peter P. Benac wrote:
>
> > I have been using Emacs for almost 20 years. Is there any other editor :)
> >
> > :s/old stuff/newstuff/g only works if you only have one instance of "old
> > stuff" per line!!
>
> H?
>
> What
On Wed, 3 Dec 2003, Scott Harris wrote:
> Ahh, the great editor debate :-)
"Why are we hiding from the police, daddy?"
"Because we use vi, son, and they use emacs."
Disclaimer: The above is not my creation. I pilfered it from
somewhere. I forget where. I wasn't even there. You
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theo Van Dinter writes:
>The expiry should, theoretically, not take a lot of memory since it
>really only needs to have 1 token in memory at a time while it copies
>between database files. An expiry forces a journal sync though, so an
>expiry run wil
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Rick Macdougall
> Sent: Wednesday, December 03, 2003 4:17 PM
> To: 'SA List'
> Subject: Re: [SAtalk] BIG HUGE EVIL RULE NEWS
>
> Peter P. Benac wrote:
>
> > I have been using Emacs for almos
At 06:54 PM 12/3/2003, gentian wrote:
As i am having a lot of troubles with spam, in my network I want to use
spamassassin with sendmail (i will use Fedora) as a gateway for the
internet incoming mail.
But i have never used spamassassin before.
I took a look on documentation of the spamassassin a
Peter P. Benac wrote:
I have been using Emacs for almost 20 years. Is there any other editor :)
:s/old stuff/newstuff/g only works if you only have one instance of "old
stuff" per line!!
H?
What you talking about Willis?
:s/old stuff/newstuff/g will replace ALL instances of old stuff wi
I have been using Emacs for almost 20 years. Is there any other editor :)
:s/old stuff/newstuff/g only works if you only have one instance of "old
stuff" per line!!
M-% :)
Regards,
Pete
Peter P. Benac, CCNA
Emacolet Networking Services, Inc
Providing Systems and Network Consulting, Tra
Hi list,
As i am having a lot of troubles with spam, in my
network I want to use spamassassin with sendmail (i will use Fedora) as a
gateway for the internet incoming mail.
But i have never used spamassassin
before.
I took a look on documentation of the spamassassin
and it seems to me high
Title: Message
Hi
After adding and editting some files, I do a testrun
using:
fetchmail -v -v -f /root/.fetchmailrc-ham
I then see that the mail is loaded from the exchange imap
folders, but when fetchmail tries to give the mail to the mailscanner, I get
this:
fetchmail: SMTP> RCPT T
At 06:38 PM 12/3/2003, Gary Lopez wrote:
Hello,
I know this has been asked a lot of times, but is there a fix for the
error below or am I just misconfigured ? I am runnin SA2.55 with sol 5.8
and sendmail with procmail. Any suggestions are welcome.
Cannot open bayes_path /etc/mail/spamassass
Hello,
I know this has been asked a lot of times, but is there a fix for
the error below or am I just misconfigured ? I am runnin SA2.55 with sol
5.8 and sendmail with procmail. Any suggestions are welcome.
Cannot open bayes_path /etc/mail/spamassassin/bayes R/O: Permission denied\n
--
At 05:16 PM 12/3/2003, Mike wrote:
I have a false positive that I want to retrain but SA has rewritten the
body. I turned everything off that I could see that would tell SA to
re-write the body but it still does. I read that SA will still re-learn
spam that it has altered to headers but will it do
At 04:41 PM 12/3/2003, Bill wrote:
I just got this virus message that appears to have come from sourceforge.
Did anyone else get this or did my antivirus FP on me?
FP.. that exact message passed through my copy of clamscan just fine..
clamav is updated hourly here.
-
I too would like the echo my thanks from little old Adelaide, Sth Australia.
and ty as well to this script writer. excellent stuff. sadly it would be
a little expensive for me to go to a hockey game. good work. keep it
up.
-Original Message-
From: Chris Petersen [mailto:[EMAIL PROT
On Wed, Dec 03, 2003 at 04:11:48PM -0600, Smart,Dan wrote:
> So if I set the Journal to a really big number, like 10MB, then the
> once-per-day opportunistic sync rule should kick in and sync once per day.
>
> So a sync takes as much or more memory than an expiration run?
Yeah, fun question: The
there are a few locations in bigevil.cf that need edits.
There are some spaces after .com in lines
and .com in lines 52, 71, 72, 84, 137
and .net in lines 42, 56, 101, 124, 156
you can check with
grep ".com " bigevil.cf
and
grep ".net " bigevil.cf
you can solve it with the following
cat bigevil.c
I have a false positive that I want to retrain but SA has rewritten the
body. I turned everything off that I could see that would tell SA to
re-write the body but it still does. I read that SA will still re-learn
spam that it has altered to headers but will it do it for the body? It
does look like
Title: Message
Oh
yeah, at least once a day clean out the public folders or your fetches will take
FOREVER. :-)
-Original Message-From: Hamilton, Kent
[mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003
4:21 PMTo: 'Gabrie van Zanten'Cc:
[EMAIL PROTECTED]Subje
Title: Message
On
your Linux box create three mail aliases (In sendmail
syntax)
spamlearn: "|/usr/local/bin/sa-learn
--spam --norebuild"
hamlearn:
"|/usr/local/bin/sa-learn --ham --norebuild"
spamforget: "/usr/local/bin/sa-learn
--forget --norebuild"
Install a copy
So if I set the Journal to a really big number, like 10MB, then the
once-per-day opportunistic sync rule should kick in and sync once per day.
So a sync takes as much or more memory than an expiration run?
<>
| -Original Message-
| From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
| Sent
> 1) put the full URL of the canonical source into the file itself, so
>people know from where to get updates
Or, for those who like a little automation:
#!/bin/sh
wget -N http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf \
-O /etc/mail/spamassassin/bigevil.cf \
2>&1 | gr
Try this:
http://sourceforge.net/projects/ol2mbox/
-Original Message-
From: Jason Staudenmayer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 13:24
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Using outlook mail to feed sa-learn
There is a util to convert pst 2 mbox. I thi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 03/12/2003 21:21, Gabrie van Zanten wrote:
> I have about 7000 spam messages in an Outlook pst file. I tried
> exporting the pst to a text file, but after two hours processing this
> file, sa-learn told me it had seen only 1 message.
>
> What shou
Hello all -
I've scoured the mailing list, done the requisite Google search, read
the docs, but can't seem to find any info on how to get my SA
auto_whitelist updated to the latest DB version. SA isn't doing it
automatically the first time it sees the old version either. I've
successfully used sa-
I just got this virus message that appears to have come from sourceforge.
Did anyone else get this or did my antivirus FP on me?
---snip-
The virus checker has found potentially malicious code in a mail by
[EMAIL PROTECTED] Delivery has been stopped.
The recipient(s) for
Title: Message
There
is a util to convert pst 2 mbox. I think it works with outlook express 4-5 not 6
and oulook 97-xp.
If I
had the url I would post it but I seem to have mis-placed my
brian.
-Original Message-From: Gabrie van
Zanten [mailto:[EMAIL PROTECTED] Sent: Wednesda
Title: Using outlook mail to feed sa-learn
Hi
I have about 7000 spam messages in an Outlook pst file. I tried exporting the pst to a text file, but after two hours processing this file, sa-learn told me it had seen only 1 message.
What should a text file with mail in it look like?
Or do
At 03:59 PM 12/3/2003, Derek Simkowiak wrote:
This seems like a rather critical piece of information for
somebody trying to fine-tune their scoring. I read some of the POD docs,
both the spamd and spamc man pages, the top-level README, and the FAQ,
and did not see this little nugget any
Hi All
I have spent the past hour looking through the archives and I can see lots
of people having similar problems to me but not actually identical, so here
I try instead.
I have:
Dual 1.4 P3 2 gig ram 40 gig RAID
running:
qmail 1.03, qmail-scanner 1.20, spamcontrol, spamd (2.60) and sophie (3.
I'm using Michael Devogelaere's qmail-sql qmail server for several
domains. Prior to implementing spamassassin, dotqmails was working fine.
Now that spamassassin is running via the qmail
/var/qmail/bin/qmail-queue shell script:
#!/bin/sh
spamc | /var/qmail/bin/qmail-queue.orig
any mess
Vee Persaud said:
>
>> Please send the headers from both the first and the second messages.
>> Without more information all anyone can do is wildly guess.
>>
> BEFORE sa-learn
> X-Spam-Level: ***
> X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
> rocco.ncr.pwgsc.gc.ca
> X
At 03:04 PM 12/3/2003, Vee Persaud wrote:
BEFORE sa-learn
From: "Vee Persaud" <[EMAIL PROTECTED]>
X-Spam-Status: No, hits=3.3 required=5.0 tests=AWL,HTML_20_30,HTML_MESSAGE
autolearn=no version=2.60
AFTER sa-learn
From: "Vee Persaud" <[EMAIL PROTECTED]>
X-Spam-Status: No, hits=3.0 requir
At 03:28 PM 12/3/2003, Vee Persaud wrote:
I was planning on just forwarding any suspect spam emails to an email
account on my SA server and running it through sa-learn. I guess that
this isn't the correct way to do it ???
No.. that is a *VERY* bad idea to do, because it will cause sa-learn to
l
At 03:26 PM 12/3/2003, Derek Simkowiak wrote:
DEFAULT SCORES (local, net, with bayes, with bayes+net)
What do "local", "net", and "bayes" mean? I can't find that
anywhere.
These refer to "groups" of optional tests in SpamAssassin.
"net" - Tests which must send data across a network to c
On Dec 3, 2003 at 12:43, Jennifer Wheeler wrote:
>You should grab multiedit. Rockage. You can do your edits with little
>macros.
Perl! sed! Makefiles!
--
Satya. http://www.thesatya.com/>
The lab called: your brain is ready
---
This SF.net
Done and Done and Will do :)
Yes I even put the time. No need to update if you have 1.57, as these were
just info changes. I'm sure 1.58 could be lurking just around the corner.
I'm just waiting for the next "Matt" email to come in, or possibly an "RM"
email. He has been quiet.too quiet :)
I'm using Michael Devogelaere's qmail-sql qmail server for several
domains. Prior to implementing spamassassin, dotqmails was working fine.
Now that spamassassin is running via the qmail
/var/qmail/bin/qmail-queue shell script:
#!/bin/sh
spamc | /var/qmail/bin/qmail-queue.orig
any message th
--On Wednesday, December 03, 2003 15:29:05 -0500 Vivek Khera
<[EMAIL PROTECTED]> wrote:
Nice list. I have two recommendations/suggestions:
1) put the full URL of the canonical source into the file itself, so
people know from where to get updates
2) put a date into the file, so people will
Nice list. I have two recommendations/suggestions:
1) put the full URL of the canonical source into the file itself, so
people know from where to get updates
2) put a date into the file, so people will know how "fresh" the info
is.
And add "china-inflatable.com" and "cn-inflatables.com" ;
Matt Kettler wrote:
> At 02:24 PM 12/3/2003, Vee Persaud wrote:
>> It got a score of 3.3. I ran sa-learn --spam on this message and
>> now I get a score of 3.0 if I resend the message. I'm a bit
>> confused. Did I do something wrong ???
>
> How did you "resend" the message?
>
> If you "resen
Hello,
From http://www.spamassassin.org/tests.html:
--
DEFAULT SCORES (local, net, with bayes, with bayes+net)
--
What do "local", "net", and "bayes" mean? I can't find that anywhere.
First: I assume that "bayes" means I have put the options "bayes_path"
and "bayes_file_mode" in m
Shhh1.57:)
Sorry. But there are a few things. 100% spam rate is the goal. So any chance
of FP can't happen. I removed the domain with the tomshardware fp in it.
Also Matt Yackley, (What is it with Matts straightening me out!), has shown
me an error in my ways. With such wide use of this
At 02:24 PM 12/3/2003, Vee Persaud wrote:
It got a score of 3.3. I ran sa-learn --spam on this message and now I
get a score of 3.0 if I resend the message. I'm a bit confused. Did I
do something wrong ???
How did you "resend" the message?
If you "resend" the message, merely by making a new
On Wed, Dec 03, 2003 at 01:47:55PM -0600, Smart,Dan wrote:
> Is there a reason that the journal needs to be synced more than once per
> day? Why is the default set to 100KB?
The default was reasonable for most users. There's no need, really,
to sync more than once a day, but a large journal mean
> Please send the headers from both the first and the second messages.
> Without more information all anyone can do is wildly guess.
>
BEFORE sa-learn
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 18730 invoked by uid 197); 3 Dec 2003 18:59:54 -
Received: from [EMAIL PROTECTED] by rocco b
Thanks Frederic for the quick response...
When I ran what you described, it said that it was infact using the
/etc/mail/spamassassin/ path, however, it said that it did not have
enough spam entries, I am having sa-learn run again to see if it picks
up more.
Here is my local.cf file:
#This is the co
A little more help, if I may...
OK, I now understand the memory issue is when doing a --rebuild on a huge
database, memory needs to be available for load the token database. Right?!
Is there a reason that the journal needs to be synced more than once per
day? Why is the default set to 100KB?
I
Reported on the Spam-L anti-spam list..
Someone asking if this is a legit bounce or something else.
Look familiar?
- Forwarded message from [EMAIL PROTECTED] -
Return-path: <>
Received: from mx10.comingsoon.namescout.com ([199.85.4.241])
by s-rogue.tsc.com (iPlanet Messaging Server 5.
Matthew Daubenspeck said:
> I am trying to test out these new rules, but so far all of my tests have
> not showing them as being active.
>
> $ ls /etc/mail/spamassassin
> bigevil.cf local.cf
>
> And I restarted spamd... What else do I have to do to make them work?
Matthew,
I'd make sure your conf
Hello,
In cygwin I see the default rule location as:
/etc/mail/spamassassin/
Try running:
spamassassin -D --lint
and it'll tell you where it's looking to find your rules.
The subject re-write issue has been discussed a lot but I don't know
anything about it. What is the contents of your local.cf
--On Wednesday, December 03, 2003 14:31:27 -0500 Matthew Daubenspeck
<[EMAIL PROTECTED]> wrote:
I am trying to test out these new rules, but so far all of my tests have
not showing them as being active.
$ ls /etc/mail/spamassassin
bigevil.cf local.cf
And I restarted spamd... What else do I hav
Chris Santerre said:
> They do look like they are in a lot of spam. The reason I asked is it gets
> a
> FP from Tomshardware.com newsletter.
>
> SO I pose the question to the list:
>
> Highly probable spam host domain, that generates an FP on a popular
> newsletter. Leave in the bigevil or remove?
Just a minor correction,
try this:
header__BLOCKTOFFICEOUTTo =~ /[EMAIL PROTECTED]/i
header__BLOCKFOFFICEOUTFrom =~ /[EMAIL PROTECTED]/i
metaBLOCK_MY_OFFICE(__BLOCKTOFFICEOUT && !__BLOCKFOFFICEOUT)
describeBLOCK_MY_OFFICENo E-mail to alias from outside
scoreBLO
[EMAIL PROTECTED] wrote:
> I received an email on one of my systems that is not running SA and I
> decided to forward it to my SA system to see if it would get
> rejected. The subject was "Have amazing s\ex up to 20 times per day
> lugpsxw". They use the "/" in the body also to avoid spam detect
On Wed, 2003-12-03 at 14:25, Chris Thielen wrote:
> Did somebody mention editor wars? C'mon let's hear from you Emacs people ;)
emacs rocks
alt-% for search/replace or
ctrl-alt-% for regex search/replace
--
Adam Lanier
Bernard L. Madoff Investment Securities LLC
212.230.2491
signature.asc
Desc
Vee Persaud said:
> I received an email on one of my systems that is not running SA and I
> decided to forward it to my SA system to see if it would get rejected.
> The subject was "Have amazing s\ex up to 20 times per day lugpsxw".
> They use the "/" in the body also to avoid spam detection.
--On Wednesday, December 03, 2003 2:24 PM -0500 Vee Persaud
<[EMAIL PROTECTED]> wrote:
> I received an email on one of my systems that is not running SA and I
> decided to forward it to my SA system to see if it would get rejected.
> The subject was "Have amazing s\ex up to 20 times per day lu
I am trying to test out these new rules, but so far all of my tests have
not showing them as being active.
$ ls /etc/mail/spamassassin
bigevil.cf local.cf
And I restarted spamd... What else do I have to do to make them work?
Thanks for the help.
--
:wq!
Matthew Daubenspeck
http://www.odd
I sent
this to the wrong email account...
-Original Message-From: Matt Van Gordon
Sent: Wednesday, December 03, 2003 11:28 AMTo:
[EMAIL PROTECTED] Sourceforge. Net (E-mail)Subject:
312.649.0007
McAfee GroupShield for Microsoft
Exchange **
*
Scott Harris said:
> Doesn't anyone use VI anymore?!! :-)
> Sorry, couldn't resist adding to the war.
>
> :%s/old stuff/new stuff/g
Or even better:
:g/^score/s/3.0/1.0/
---
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape
alert_OA0_1070477447_INI-MAIL_1#Map.pif.txt
Description: MIDI audio
Jennifer Wheeler said:
>
>> You could always lower the score. Only 178 to change :)
>> (Hey that is nothing compared to how many times I had to hit ' | ,
> DELETE,
>> END ' because I was in a hurry to get done!)
>
> Hi Chris,
> You should grab multiedit. Rockage. You can do your edits with littl
They do look like they are in a lot of spam. The reason I asked is it gets a
FP from Tomshardware.com newsletter.
SO I pose the question to the list:
Highly probable spam host domain, that generates an FP on a popular
newsletter. Leave in the bigevil or remove?
I'm leaning towards removal.
--C
I received an email on one of my systems that is not running SA and I decided to
forward it to my SA system to see if it would get rejected. The subject was "Have
amazing s\ex up to 20 times per day lugpsxw". They use the "/" in the body also
to avoid spam detection. It got a score of 3.3
> -Original Message-
> From: Rick Macdougall [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 1:24 PM
> To: Spamassassin-Talk (E-mail)
> Subject: Re: [SAtalk] Bigevil domain hat-check help
>
>
>
>
> Chris Santerre wrote:
>
> > I've got a domain listed in Bigevil that co
And just like that, we are at ver1.56 :) All fixed.
You had told me this in the past, and it was fixed in evilrules. The problem
is that when I made Bigevil, I used the list files used to create the old
evilrules. Not the old evilrules themselves. So this was still in the list.
Thanks for the fin
Is the normal location for the local.cf in the etc\mail\spamassassin\
folder? How can I verify that SA is reading this file? (I am using
spamc) I am having problems with settings seemingly not being used.
This is on a windows 2k box. In installed it according to www.exit0.com
instructions for insta
Doesn't anyone use VI anymore?!! :-)
Sorry, couldn't resist adding to the war.
:%s/old stuff/new stuff/g
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike
Kuentz (2)
Sent: Wednesday, December 03, 2003 10:46 AM
To: Spamassassin-Talk (E-mail)
Subje
hi i am trying to setup a rule so that we wont get mail to our local
alias from an outside address, this is what i wrote but it doesnt seem
to work as i thought it would, can u give any advice
header BLOCKTTOFFICEOUT To = [EMAIL PROTECTED]
header BLOCKTTOFFICEOUT From != [EMAIL P
Thanks, Chris, for the update! One problem, though:
I see c1tracking.com is still on the list. As I mentioned before, this
shows up frequently in YahooGroups-hosted mailing lists, in some of the
text ads they attach to the message. In fact, I *only* see this one in ham.
Giving 30-50% of Yaho
Hi all,
I get the following errors from spamd (tons of them in my logfiles) and I
have no idea how to fix this. Ditching my bayes_* files isn't a good option
as it takes several hours to regenerate them (I have a spam corpus of about
2 which I collected over a period of 7 months...). Sa-learn
[EMAIL PROTECTED] wrote:
>> -Original Message-
>> From: Chris Barnes [mailto:[EMAIL PROTECTED]
>> Sent: Wednesday, December 03, 2003 12:53 PM
>> To: [EMAIL PROTECTED]
>> Subject: [SAtalk] Re: BIG HUGE EVIL RULE NEWS
>>
>>
>> Rich Puhek <[EMAIL PROTECTED]> wrote:
>>> Now to see if the
[EMAIL PROTECTED] wrote:
> Hi,
>
> I'm having an odd problem with SpamAssassin 2.60, Qmail-Scanner 1.20
> and "net"qmail 1.04 compiled from source (RedHat 9).
>
> I have ran spamd in debug mode and looked at the spamd script to
> verify my config files are located here:
>
> /usr/share/spamassass
Not to start a text editor war, but it can be done in Textpad with a
regex search and replace. Hit F8, check the Regular Expression textbox
-> Find: \t3.0$ -> Replace with: \t1.0 (or whatever you want the score
to be).
Mike
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EM
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Chris Santerre
> Sent: Wednesday, December 03, 2003 1:08 PM
> To: Spamassassin-Talk (E-mail)
> Subject: [SAtalk] Bigevil domain hat-check help
>
> I've got a domain listed in Bigevil tha
On Wed, 3 Dec 2003, Jennifer Wheeler wrote:
> > Idan Lerer said:
> > > I would like to block spammer that sends me emails with mail from
> > > [EMAIL PROTECTED]
> >
> > > header LOCAL_SAPM_FROM_WALLA ALL =~ /\abcd.\w{0,[EMAIL PROTECTED]/i
> >
> > Idan,
> >
> > quote the dot "\.":
> > heade
Chris Santerre wrote:
I've got a domain listed in Bigevil that could be legit. I need a hatcheck
on this one. It is not that obvious. Can someone give me info on:
as1.emv2.com
or the emv2.com domain in general? (not WHOIS, I can do that!)
Hi,
http://www.openrbl.org and pop in the domain. Th
At 12:40 PM 12/3/2003, Martin, Jeremy wrote:
I'm having an odd problem with SpamAssassin 2.60, Qmail-Scanner 1.20 and
"net"qmail 1.04 compiled from source (RedHat 9).
qmail-scanner does not use spamd/spamc's modification of subject lines, it
does the subject taggigng itself.
Please read the qmail
> -Original Message-
> From: Chris Barnes [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 12:53 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Re: BIG HUGE EVIL RULE NEWS
>
>
> Rich Puhek <[EMAIL PROTECTED]> wrote:
> > Now to see if the payment terms mean that I can w
I've got a domain listed in Bigevil that could be legit. I need a hatcheck
on this one. It is not that obvious. Can someone give me info on:
as1.emv2.com
or the emv2.com domain in general? (not WHOIS, I can do that!)
*sigh* 1.54 is up. This domain IS still listed in it.
Chris Santerre
Syste
1 - 100 of 152 matches
Mail list logo
