On Wed, Jul 10, 2002 at 07:46:13PM -0400, Brian Kendig wrote:
> I'm using spamd/spamc via fetchmail and procmail. When
> SpamAssassin flags an email as spam, is there any way for me to
> 'bounce' that mail back to the sender as if I never received it?
Yes, but you need to do it at SMTP time. O
On Wed, Jul 03, 2002 at 10:18:59AM -0400, Theo Van Dinter wrote:
> On Wed, Jul 03, 2002 at 03:20:31AM -0700, Kenneth Porter wrote:
> > Can you add a Requires: for package perl-Time-HiRes? (This is available
> > in RH7.3 and Rawhide, but for earlier RH it's in Power Tools.). I just
>
> It should a
On Tue, Jul 02, 2002 at 09:52:01AM +0100, Matt Sergeant wrote:
> Meino Christian Cramer wrote:
> >Hi,
> >
> > is it possible (and how) to configure spamd/sa-exim that way, that
> > the spammer gets a return code, which says, that my email address is
> > permanently not reachable (was it return cod
On Sun, Jun 30, 2002 at 06:27:01PM +0200, Meino Christian Cramer wrote:
> One think I hadn't find out until now is how I can make
> this combo make _bouncing_ spam instead of sending back
> and explanation, why and who has detected a certain mail
> as spam.
My code for exim does that, see SAp
On Thu, Jun 27, 2002 at 10:23:53PM -0700, Harry Putnam wrote:
> I still see no evidence of a message-id being inserted into debug
> logs to allow tracking. Or any evidence of time stamping.
>
> This bug was supposed to have been subsumed and corrected by another
> one, but these two factors have
On Wed, Jun 26, 2002 at 01:29:24PM -0400, Miles Fidelman wrote:
> On Wed, 26 Jun 2002, tang wrote:
>
> > Just installed SpamAssassin on our Sun's Ultra10 running Solaris 7,
> > but it doesn't work:
> >
> > tang@bionmr3:~/bin/SpamAssassin 124>./spamassassin < sample-nonspam.txt
> > Can't locate Ti
On Sun, Jun 16, 2002 at 05:30:52PM -0400, Theo Van Dinter wrote:
> To remove the extra debugging output one needs to comment out line 164
> in Signature/Ephemeral.pm
>
> --- lib/Razor2/Signature/Ephemeral.pm,origSun Jun 16 13:22:22 2002
> +++ lib/Razor2/Signature/Ephemeral.pm Sun Jun 16 13:18
On Fri, Jun 21, 2002 at 11:11:20PM -0500, Derrick 'dman' Hudson wrote:
> Your setup must be odd. Your message got -1.4 on my site, but I have
> a SALIST rule scoring -10. If you hadn't sent it to the list it would
You should put -100, some messages I've received here have scored as much
as 50+
On Fri, Jun 21, 2002 at 12:07:36PM -0500, Smart, Dan wrote:
> header RCVD_IN_FIVETEN eval:check_rbl('relay', 'blackholes.five-ten-sg.com')
Note that you should starting using
> header RCVD_IN_FIVETEN rbleval:check_rbl('relay',
>'blackholes.five-ten-sg.com')
RBLs are run in a d
On Sat, Jun 15, 2002 at 08:33:15PM -0700, Michael Bell wrote:
> These are all new:
>
> 1. Time::Hires required (or at least reported to be required when I
> run Perl makefile.pl)
Yeah, we're still trying to make it optional.
The code is designed to work without it, just remove "use Time::Hires"
On Sat, Jun 15, 2002 at 12:23:35AM -0700, Jim Scott wrote:
> Just upgraded my test box and while running in debug mode I am seeing these
> messages. Does this indicate that it is not looking up these lists? I looked
> in 50_scores.cf and they are not set to 0. Is there some setting now that
> you
On Tue, Jun 11, 2002 at 10:17:52PM -0700, Bart Schaefer wrote:
> In SpamAssassin.pm I see:
>
> # Let's not make this required -- Marc
> #eval { require Time::HiRes };
> #Time::HiRes->import( qw(time) ) unless $@;
> # Unfortunately, the above doesn't work, please FIXME
> use Time::HiRes qw ( time
On Tue, Jun 11, 2002 at 04:36:06PM -0400, Weidong Wang wrote:
> Hi, I just installed spamassassin, as it looks very promising.
>
> One thing I noticed is that checking a mail (the sample-spam.txt one, 4K)
> one takes over 1 minute. At first I thought it is razor, as I noticed during
> "make test"
On Fri, Jun 14, 2002 at 01:18:52PM -0500, matthew ward wrote:
> i'm using the spamass milter.
Is the milter actually called "spamass" ?
Would someone ask the author if he/she'd consider using SA or SpamAssassin.
Spam_ASS_ just doesn't sound like a great abbreviation...
Marc
--
"A mouse is a d
On Tue, Jun 11, 2002 at 08:31:17AM -0500, Saul Guttman wrote:
> Hi,
>
> I have Exim with SA running at SMTP time. I am testing this to see if I
Since there's lots of mail here already, you're probably better off using
the sa-exim list
http://lists.merlins.org/lists/listinfo/sa-exim
so that we
On Tue, Jun 11, 2002 at 12:14:54PM -0500, Derrick 'dman' Hudson wrote:
> | >Subject: ??
> ^^
> It's not a valid message. No RFC allows 8bit characters in message
> headers. Recent postfix snapshots have a strict_7bit_headers option
> to
On Thu, Jun 06, 2002 at 11:15:58PM -0700, Marc MERLIN wrote:
> On Thu, Jun 06, 2002 at 10:03:54PM -0700, Jeremy Zawodny wrote:
> > On Thu, Jun 06, 2002 at 09:40:17PM -0700, Marc MERLIN wrote:
> >
> > > I think I'm also going to add an option to just stall the SM
On Thu, Jun 13, 2002 at 01:59:52PM -0700, Jim Scott wrote:
> How come this list does not have the reply to: set to the spamassassin list?
> Every time I want to reply to the list I have to type in the email address.
http://sourceforge.net/docman/display_doc.php?docid=6693&group_id=1
Marc
--
"A
On Thu, Jun 06, 2002 at 10:03:54PM -0700, Jeremy Zawodny wrote:
> On Thu, Jun 06, 2002 at 09:40:17PM -0700, Marc MERLIN wrote:
>
> > I think I'm also going to add an option to just stall the SMTP
> > connection and never return ok (I don't plan to use that feature
On Wed, May 29, 2002 at 04:42:28PM +0100, Keith Whyte wrote:
> I thought that the milter was going to actually tell the sendmail and thus
> the sender that the spam was detected and drop the SMTP session, but it
> just accepts it and sends it on.
You can do that with my sa-exim patch for exim:
Silly me, I screwed up, my previous mail was sent with a completely invalid
Email, I do not work for mail-abuse.org
Please answer to this one or your copy to the bad address will bounce
[Sent to Talk & Devel lists, please trim Cc when you answer]
First, I need to apologize for sending all this
[Sent to Talk & Devel lists, please trim Cc when you answer]
First, I need to apologize for sending all this mixed in one patch:
- I did send two of these separately earlier here
- The patches are somewhat interleaved, so splitting them would have meant
writing multiple versions
- I didn't have
On Wed, May 29, 2002 at 05:31:59PM -0700, Craig R Hughes wrote:
> Marc, looks very interesting -- I'd like to take a bit of a better look at
> it, and probably commit it. Could you attach the patchfile to a bugzilla
> report so I don't have to:
Don't worry, I had planned to submit a patch (al
On Tue, May 28, 2002 at 05:21:39PM -0500, Eric Six wrote:
>
> Is there a way to dump all "spam" email to a file or redirect it to another
> user account? I am using the latest spamass-milter for spamassassin. Before
> I can implement this company wide, we want to be able to see how much real
> ma
So, why did I have to write this patch?
1) I use MAPS DUL and relays.osirusoft.com, which also has a DUL section.
The problem is that I had machines that were being penalized twice for
being on more than one DUL.
This actually let to some non SPAM being reported as spam more than once
Ok, so SA 2.21 sorts the rules by score in an attempt to stop scanning the
message if the user specified a scan threshold
Unfortunately, this completely breaks rule dependencies. Granted, those are mostly
(only?) RBL rules for now, but rule dependency is needed somewhere.
Let me quote 20_head_
On Mon, May 27, 2002 at 08:22:32PM -0700, Bart Schaefer wrote:
> On Mon, 27 May 2002, Marc MERLIN wrote:
>
> > This rule was apparently missing the trailing ')'
>
> The missing paren doesn't belong at the end, unfortunately.
>
> See bugzilla.spamassa
This rule was apparently missing the trailing ')' in the version I just
downloaded.
body PORN_10
/\b(?:lolita|slut|whore|(?:[^x]|\b)xxx(?:[^x]|\b)|porn|(?:Asian|Japanese|oriental)\s+(?:girls|schoolgirls)\b|babes\b|gang[
-]?bang|skank|tits\b|titties\b|pussy\b|pussies\b|bi
On Fri, May 24, 2002 at 09:06:43AM -0700, Marc MERLIN wrote:
> > Its lame, I no longer use it much myself (theres a couple of places its
> > not been removed from) even though I wrote the thing, but its cheap
> > (money and MTA resources) and suprisingly effective against things
On Fri, May 24, 2002 at 10:01:15AM +0100, Nigel Metheringham wrote:
> > You'd have thought the least a header regexp would do is bind to the
> > start of the line!
>
> The problem with the exim filter stuff is it was never designed to be
> able to do this and it *can't* bind to start of line (th
On Mon, May 20, 2002 at 09:59:55AM +0100, Matt Sergeant wrote:
> Ugh, looks like SourceForge installed a lame text filter that attempts
> to do virus protection (incorrectly, brokenly)... So my email didn't get
> through.
Just in case you are curious, it's the "standard" exim mime filter, and
On Sun, May 19, 2002 at 10:41:56AM -0700, Craig R Hughes wrote:
> Marc,
>
> I think properly you should check there's no dialup IP *except* for the first
> one in the chain. ie not just the last hop before you, but any hop along the
> way, other than the very first.
That's a very good point, th
On Fri, May 17, 2002 at 02:42:00PM +0100, Mark Lowes wrote:
> On Fri, 2002-05-17 at 14:30, Rick Macdougall wrote:
> >> From: "Mark Lowes" <[EMAIL PROTECTED]>
> >> I'm trying to get SA working here and want to try and get configuration
> >> on a per domain rather than a per-user basis. Has anyone
On Thu, May 16, 2002 at 09:51:48AM -0500, dman wrote:
> | the easiest to setup/manage with SpamAssassin as a relay box - Exim,
> | Postfix, Sendmail, Qmail, ...?
>
> Exim with Marc's sa-exim patch would be the easiest way to implement
> this. You would just configure exim as usual (for a rel
On Fri, May 10, 2002 at 01:42:01AM -0700, Marc MERLIN wrote:
> I believe I've asked this before, but it's biting me too often and I haven't
> yet found an answer to this:
Ok, so I'll take the lack of answer as "yes this is known, no, no fix yet"
I'm wi
On Mon, May 13, 2002 at 08:32:48AM -0300, Derek Broughton wrote:
> The one available from the sourceforge.net/projects/spamassassin page? It
> asks me for a userid & password. I don't mind helping you out with a
> survey, but I'm not going through the rigmarole of creating yet another
> login ID
On Mon, May 13, 2002 at 07:21:05PM +1000, Daniel Pittman wrote:
> > Yep. Running spamproxyd is really not an option for most of us.
> > You lose (if I'm not mistaken)
> > - SMTP AUTH
>
> Nope, at least not with my model. Admittedly this /is/ vaporware
> because I don't need it, but it would work
On Mon, May 13, 2002 at 11:35:40AM +0200, Jesus Climent wrote:
> Having a strict configuration in my MTA (not allowing the use of our
> domain for mail not coming from localhost), I do not want to check mail
> in MTA level (using spamd/c) originated in my own system.
SA-Exim lets you do that and
On Sun, May 12, 2002 at 08:57:21PM -0700, Marc MERLIN wrote:
> Yep. Running spamproxyd is really not an option for most of us.
> You lose (if I'm not mistaken)
> - SMTP AUTH
> - STARTTLS/SSL
> - The IP of the real sender
Sorry, I meant: the ability to block senders by IP f
On Sun, May 12, 2002 at 08:48:41PM -0700, Marc MERLIN wrote:
> > What about using the bgsend/bgisready functionality in Net::DNS? That
> > should allow multiple queries in the background in parallel.
>
> Sounds like a great idea, I wasn't aware of the functionality.
&
On Mon, May 13, 2002 at 11:52:23AM +1200, Jason Haar wrote:
> I'd suggest the opposite is better: have the real MTA relay it to
> spamproxyd. If you do it your way, you've just lost all anti-relaying
> protection...
Yep. Running spamproxyd is really not an option for most of us.
You lose (if I'm
On Sun, May 12, 2002 at 09:53:51AM -0500, Nathan Neulinger wrote:
>
> > However, since we're going to do up to 10 queries, and each can be blocking,
> > wouldn't it be better to fork for each DNS lookup (even optionally) and kill
> > the children if the DNS query hasn't returned in x seconds?
> >
On Sun, May 12, 2002 at 05:28:27PM +1000, Daniel Pittman wrote:
> > However, since we're going to do up to 10 queries, and each can be
> > blocking, wouldn't it be better to fork for each DNS lookup (even
> > optionally) and kill the children if the DNS query hasn't returned in
> > x seconds?
>
On Sat, May 11, 2002 at 02:26:55PM -0500, dman wrote:
> This completely depends. First you MUST *profile* to determine where
> the hotspots are. Maybe _those_ pieces of the program would be better
> in C or ASM. Remember that 90% of the execution time is spent in 10%
> of the code (generally).
On Sat, May 11, 2002 at 12:19:28PM -0700, Craig R Hughes wrote:
> Marc MERLIN wrote:
>
> MM> I wrote my sa-exim code with the understanding that all the X-Spam headers
> MM> were single line, with the exception of X-Spam-Report:
> MM> Is this correct and therefore do
I believe I've asked this before, but it's biting me too often and I haven't
yet found an answer to this:
Let's take the following (complete) Received headers:
Received: from scaup.mail.pas.earthlink.net ([207.217.120.49]:34177
helo=scaup.prod.itd.earthlink.net)
I (apparently) received this from spamc:
(not reformatted by my mail client)
- Forwarded message -
X-Spam-Status: Yes, hits=9.4 required=7.0
tests=X_EM_VER_PRESENT,NO_REAL_NAME,CTYPE_JUST_HTML,KNOWN_BAD_DIALUPS,RCVD_IN_OSIRUSOFT_COM,RCVD_IN_VADUL
version=2.20
X-Spam-Flag
I'm trying to understand if VERY_SUSP_RECIPS in SA 2.11 does that it's
supposed to do.
Consider the following headers which triggered VERY_SUSP_RECIPS:
From: "Name" <[EMAIL PROTECTED]>
To: "Name 2" <[EMAIL PROTECTED]>,
"Name 3" <[EMAIL PROTECTED]>,
"Name 4" <[EMAIL PROTECTED]>,
I was able to get my mail server to add a special header for people who
relay mail through me from dialup IPs after having done an SMTP AUTH, so
their mail doesn't get flagged by SA anymore (since I have an SA rule to add
a -100 if the auth header is present)
However, from time to time,
On Wed, Mar 27, 2002 at 01:14:40AM -0800, Craig Hughes wrote:
> Right, but you can already do that with report_header
>
> perldoc Mail::SpamAssassin::Conf
>
> if you didn't find those docs yet.
Ahah, I was looking for this after reading about thisthe main readme
---
Take a look at the "Mail_Spa
On Wed, Mar 27, 2002 at 01:12:28AM -0800, Craig Hughes wrote:
> On Tue, 2002-03-26 at 17:20, Marc MERLIN wrote:
> > Is spamassassin actually giving a combined 3.5 score to any mail that
> > originated from a dialup IP, even if it was properly relayed through an
> &
I'm confused about this
Received: from maynard.mail.mindspring.net ([207.69.200.243])
by mail.vasoftware.com with esmtp (Exim 3.31-VA-mm2 #1 (Debian))
id 16q0IX-0007Fw-00
for <[EMAIL PROTECTED]>; Tue, 26 Mar 2002 15:24:13 -0800
Received: from sdn-ar-001casfrmp092.dialsprin
On Tue, Mar 26, 2002 at 05:15:14PM -0800, Craig Hughes wrote:
> A way better solution to this is to fix bug #18/#130; then the report if
> added to the body would be a MIME part and wouldn't clobber anything.
Would be nice, but I think I still have users who want the body optionally
not to be a
Hi,
I'm currently evaluating spamassassin (which may actually end up on
sourceforge.net if the server can spare the extra resources to scan all
inbound mail), and I have a user request which makes sense:
Could we have a tri flag to control whether spamassassin adds info on why
it f
54 matches
Mail list logo
