perl -T -w whereas 2.55 uses just #!/usr/bin/perl.
Is this something to be concerned about? If so, how can it be fixed?
Other than the warning, spamassassin 2.60 backport seems to be working
correctly.
Thanks for any help!
Please reply directly, I'm not subscribed to the l
I have been seeing 'byte count boosting' where spammers fill type emails with large sets of meaningless
garbage (e.g 'asdlfkjl lksdjf lkajsdf') to up the byte count of their
messages. This enrages me because I drop all messages with '
I am wanting to write a framework with the features below for my corporation
as an upgrade to our current spam blocking solution. I would suggest them
as ideas for SpamAssassin v3.
Create a framework where the message comes into the daemon and is translated
to 'feeds' by 'feed modules' aka prepro
. It can be
handled by procmail.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
This sf.net email is sponsored by:Think
t; > q=
> > r=A
> > s==
> > t=3
> > u=n
> > v=N
> > w=?
> > x=
x=*
> > y=R
> > z=
> > 0=
> > 1=
> > 2=
> > 3=
> > 4=
> > 5=
> > 6=
> > 7=
> > 8=
> > 9
me corroborating evidence
in the headers.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
This SF.net email is sponsored by: VM
imply
ignore most of the time, and only check once a day, week, month,
whatever time frame suits you. Just to make sure some mail wasn't lost
or miscategorized.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
s
boot when
testing newly-implemented init scripts. That way, one can be certain
that not only will the software continue to run until the next reboot,
but it will also start up correctly next time the system boots. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experien
ably want this:
my $timeString = sprintf("%02d%02d", $hour, $min);
This is some really great work, by the way. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
--
match everything that ends in 'umd.edu' but does not
# begin with '[EMAIL PROTECTED]'. Any ideas on how I would say this?
:0
* ^From:.*umd\.edu
* !^From: [EMAIL PROTECTED]
$DEFAULT
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment c
pam?
This would become a separate score (positive or negative) in SA's normal
scoring process. And Bayesian word-tokens would be a different,
separate score as well.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone ||
Gary Funck <[EMAIL PROTECTED]> wrote:
>
> Is this an intentional choice by the developers to enable Bayes auto
> learning by defualt?
My recollection is that it has always been that way.
What is the problem?
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment c
e" rules have been severely cut back in later
versions, so you won't need to do that yourself.
It's also possible that you are not using DNS tests. These tests can
improve SA's ability to detect spam.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes fr
s directions
depending on the presence of text in the headers, either paying
attention or not to SA's decision on the mail.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David
o you will still see the occasional spam
slip through. Folks are always working on new ideas for rules to detect
these things, but it is a case of continuous improvement. At the
moment, confronted with these types of spams, I'm not sure what SA could
do to try and detect them. But someone will
] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Po
the AWL?
SA doesn't really know who the envelope sender was.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
This SF.N
I use version 2.55. Adding these three lines did the trick for me. Of
course 999-99 will be whatever number you were assigned when you
registered.
header RCVD_IN_TRUSTIC eval:check_rbl('isp',
'999-99.query.trustic.com')
describe RCVD_IN_TRUSTIC
score RCVD_IN_TRUSTIC 2.0
-
s
classifier may help weight spammy messages more, irrespective of who it
appears to be from.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
is
looking for "X-Spam-Status: Yes^M", and this fails to match, because the
next character after "Yes" is "," and not "^M".
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
somet
fferent read/write programming model, where you use
"select" to read and write both of your pipes in tandem (which is a lot
of programming work for probably little gain).
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment com
forge his way past this. And I do not have to
implement any whitelisting or blacklisting for my domain.
In order for you to implement this, you should examine Received headers
for your own site, and see if you can also determine a set of headers
that only appear on externally-origin
bayes filter.
I suspect that maybe autolearn would work well if you had a sizable, modern
and accurate corpus to start with and then autolearned from there.
Fox
- Original Message -
From: "Simon Byrnand" <[EMAIL PROTECTED]>
To: "Barry McLarnon" <[EMAIL PROTEC
:0fw
* < 256000
* ^Received: .*(my-external-gateway.fimble.com)
spamc
If you have multiple gateways through which mail can travel, simply
include them all:
:0fw
* < 256000
* ^Received: .*((gateway1|gateway2|gateway3).fimble.com)
spamc
--
[EMAIL PROTECTED] (Fuzzy
fw
* < 256000
* ! ^X-Spam-Status: Yes
| spamc
If the message is already tagged as spam, then there is no need to
process it again.
Spammers who pre-tag their messages as spam are doing us all a favor.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment com
had to re-write mine
several times to give it enterprise features. It still takes about twenty
fours for my 1.13 gigahertz server to crunch the 150,000 messages.
Fox
- Original Message -
From: "Pierre Beck" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursda
e
have not been problems. Although I had stopped using my ISP years ago,
for some reason. But now I can send mail to my brother who uses
RoadRunner.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as
ount. If it gets to my account, then my
> SWO> .procmailrc will end up putting it into my spam folder (which is
> SWO> what I want).
>
> SWO> Any takers?
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone ||
ne.
What can be done to combat that? Of course, duplicate Message-ID's are
a violation of RFC's, but spammers don't care. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad j
Personally, I am in favor of a new list devoted to the discussion of rules.
I don't and can't keep up with the volume of this list, but I am very
interested in rule ideas and have a few I would like to discuss.
Fox
- Original Message -
From: "Robert Menschel" &l
I have a rule to find any 'a href' followed by an 'img src' later in the
message, but I am getting nothing, which baffles me (and I am not a regex
newbie).
rawbody HTML_CLICKABLE_IMAGE /a href.*?img src/i
score HTML_CLICKABLE_IMAGE 1.00
I am using SA 2.55 and have run the --lint check, and verifi
t this from happening, though replies won't be received to such a
message. This has nothing to do with spamassassin, though...
> I'm here to say thanks to all those people out there that gave me very
> good helpnone what so ever...so thanks very much..
Please find enclosed,
Bayesian filtering and the cruft words they add
at the bottom now. The more flexible and intelligent SA is though, the more
difficult we can make it for spammers to construct spam.
Fox Flanders
---
This SF.Net email sponsored by: Free pre-bu
Declaration of
Independence for a text/plain mime part to fool the Bayes filter. It is
very effective at maiming my Bayes filter. Of course I could start dropping
text/plain mime parts when there is a text/html part present.
Fox
- Original Message -
From: "Daniel Quinlan" <[EM
We need a prounouncability test of the sender addresses. If it has a bunch
of ixf38jk3 crud in it, it is more likely to be spam.
---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partn
rs
ever examine bounces, or do any sort of management on their lists
whatsoever. It would simply add to their costs.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
trange to me that you'd be in a hurry to get ahold of some. A few
weeks is all you need to get yourself a couple hundred spams. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone
t you start one.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
This SF.Net email is sponsored by: INetU
Attention Web Develo
2.55 today, 2.54 yesterday.
Fox
- Original Message -
From: "Tony Earnshaw" <[EMAIL PROTECTED]>
To: "Fox Flanders" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, June 16, 2003 1:34 PM
Subject: Re: [SAtalk] Help needed blocking HTML_IM
, for instance HTML_IMAGE_ONLY, and REALLY_OBVIOUS_SPAM_ID_STRING.
I will see what I can do to write said rules, but having never written SA
rules, it may take me a while. Anybody already done this? Let me know.
Thanks,
Fox Flanders
SpamAssassin Results:
This mail is probably spam. The ori
tch this case, simply not call spam
assassin for internal-only mails (which sounds like what you want).
Speeds things up, too.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experien
s
are seeing the same or similar (or different) behavior.
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
---
This SF.ne
sages, but sends a spam, its
count goes back down to zero and it has to start all over
again.
This works if you basically have two
whitelists, one autogenerated and maintained by SpamAssassin, and a hand
crafted one that is always whitelisted no matter what, for addresses you need to
do this
If I am getting spam with "Undisclosed recipients" in the header, how would
the mail server (qmail) have known who to deliver it to had it not been
spam? Or does the server (qmail) just choose to log messages with bcc's as
undisclosed recipients even though it knows who the message is to?
Are al
44 matches
Mail list logo
