- Original Message -
From: "Greg Cirino - Cirelle Enterprises" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 12, 2003 2:33 PM
Subject: Re: [SAtalk] Virginia Busts Spammers
> No noticeable decrease in spam here...
>
> did they get the right guys?
>
> g
Usually, 2-3
Bayes is working very well for me, but I am concerned about poisoning the
database with extraneous, obfuscating words that many spam messages contain.
A few postings to this list say that there is no problem, but I don't want
to spoil a good thing. Are there some rules of thumb on what to sa-lear
The attached email looks like a legitimate bounce, but I'm not sure whether
it is just a spam message masquerading as a bounce. How can one tell which
is correct?
>From root Sat Nov 29 07:30:07 2003
Return-Path: <[EMAIL PROTECTED]>
Received: from typhoon.skynet.be (typhoon.skynet.be [195.238.2.8
I run sa-learn as root using SA 2.55 and 2.6 on two redhat systems.
Both systems run spamd and call spamc from procmail with -u user1 (or
user2). Because there are only two users, each system has a common
bayes database with file access permitted to both users.
Occasionally, I have discovered tha
> Razor doesn't seem to be working. This is the output I get with
> spamassassin -D:
>
> Nov 14 08:56:05.758908 report[31327]: [ 8] Checking with Razor
Discovery Server 216.52.3.2
> Nov 14 08:56:05.758989 report[31327]: [ 6] No port specified, using
2703
> Nov 14 08:56:05.759036 report[31327]: [
I am installing 2.60-1 via RPM packages on a redhat 7.2 system, and
running into dependency problems. Putting all three packages
(spamassassin, perl-Mail-SpamAssassin and spamassassin tools) on the
same command line still gave dependency errors, so I installed those 3
packages with nodeps. Errors
I am using SA 2.55 on a redhat 7.2 machine.
I want to catch email with subjects that begin with:
=?us-ascii?
I used:
header gej_US_ASCII Subject =~ /\=\?us-ascii\?/i
describe gej_US_ASCII blah blah
score gej_US_ASCII 1.0
Checked with --lint, but there was no hit on the rule. Variations
> I filter on the received line:
>
> received: from mokes [210.58.26.191] by gwdg.de with
> MailMXPro(2195.5766);
>
> The MailMXPro seems to be unique for some spam mails. I did not
found
> this word in any other mail.
>
I tried to make a rule based on this observation, but when I
ran --lint, I r
>> received: from mokes [210.58.26.191] by gwdg.de with
>> MailMXPro(2195.5766);
>>
>> The MailMXPro seems to be unique for some spam mails. I did not
found
>> this word in any other mail.
>>
>I tried to make a rule based on this observation, but when I
>ran --lint, I received a "failed to parse l
To get a single database instead of one for each user, I added
"bayes_path /this/that/bayes" to the local.cf file. The database was
formed and is being populated by sa-learn; however, when mail is
evaluated, the error "Cannot open bayes_path /this/that/bayes R/O:
Permission denied" is generated.
Close. I whitelisted myself, and the spam's "Return-Path" points to
me.
Thanks, Bob.
> Even without seeing the missing attachment, I'm guessing the message
> matched something in the default whitelists in
> /usr/share/spamassassin/60_whitelist.cf
>
> Amazon?
>
> -- Bob
---
I run spamassassin 2.55 on a Redhat 7.2 system
The attached email is spam, but it was not filtered because of the
"USER_IN_WHITELIST" assessment. I studied my whitelist, and neither
the originator nor strings containing the originator are listed, so I
don't see how/why the message passed.
Can an
12 matches
Mail list logo