[SAtalk] routing only non-local mail to spamassassin

2003-09-10 Thread Test, James
I currently have the following router statement (using exim 4.22): spamcheck_router: driver = accept transport = spamcheck local_parts = lsearch;/etc/mail/spamusers no_verify condition = "${if and { {!def:h_X-Spam-Flag:} \ {!eq {$received_protocol}{spam-scanned}

RE: [SAtalk] Logfile of Spam-detected mails

2003-09-10 Thread Test, James
Yes. In your exim config, make sure you have a line in your main section: system_filter = /etc/mail/system-filter (or whatever /path/filename you want to use) Then in the system_filter file: logfile /var/log/spamlog(or whatever /path/filename you want to use) #

[SAtalk] SA 2.6 + KAV 4.5 + Exim 4.22

2003-09-09 Thread Test, James
Has anyone had any luck integrating the latest Kaspersky smtpscanner 4.5 into a working SA + Exim config? The new KAV uses two instances of Exim - a listener and your regular config. --- This sf.net email is sponsored by:ThinkGeek Welcome to

[SAtalk] exim 4.22 - spamassassin router question

2003-08-29 Thread Test, James
Is there a way to only send mail to spamassassin if a user is in a certain list? Though this doesn't work, this is what I'm trying to accomplish: spamcheck_router: no_verify condition = "${if and { {!def:h_X-Spam-Flag:} \ {!eq {$received_protocol}{spam-scanned}}} {1

[SAtalk] help with spam report

2003-08-22 Thread Test, James
I'm trying to create a script that periodically emails a report to a user with the sender and subjects of the emails that got flagged as spam. The snippet below is from my spamlog. Does anyone know how to extract just the "From: somesender <[EMAIL PROTECTED]>" and "Subject: details of transact

[SAtalk] rule to reference list

2003-08-14 Thread Test, James
Is there a way to have a rule reference a list in another file? For example instead of having: rawbody spammer_site/(?:site1\.com|site2\.com)/i have it access a list that contains: site1.com site2.com --- This SF.Net email spons

[SAtalk] whitelist_to alternatives

2003-08-12 Thread Test, James
Hello, My setup is internet --> exim 4.20 (linux) --> spamassassin 2.60 (linux) --> exchange 2000. Emails flagged as spam go to a spambox on the exchange server (so I can retrieve false positives if necessary). I currently have a group of about 200 or so involved in testing the spam filtering

[SAtalk] Exim 4 w/ Remote SPAMD help

2003-07-29 Thread Test, James
Does anyone have a working Exim 4 config that uses a remote spamd server? Having problems setting this up. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available n

RE: [SAtalk] Easy to use logfile analyser

2003-07-17 Thread Test, James
There's a perl script that analyzes spam statistics from your log files: http://www.gryzor.com/tools/#spamstats -Original Message- From: Daniel Siegers [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2003 10:00 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Easy to use logfile analyser

RE: [SAtalk] hits equals required hits but slips through

2003-07-15 Thread Test, James
That was it. I now check for at least 5 stars or hits=5.0. Thanks guys! -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 11:00 AM To: Test, James Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] hits equals required hits but slips through On

[SAtalk] hits equals required hits but slips through

2003-07-15 Thread Test, James
I'm using 2.60 (though I would get the same problem with 2.55), and once in a while spam that scores a 5.0 (my required_hits is 5.0) slips through because it shows the X-Spam_Level as 4 stars instead of 5 (my check to flag as spam is to look for at least 5 stars).. Any ideas? Should I be using a

RE: [SAtalk] tricky spam

2003-07-10 Thread Test, James
I like to make lots of custom rules (I gratifying watching how effective they can be). I have several that I update with porn words that spammers try to be clever with. In your case: body CLEVER_P0RN/(?:sexua1|0rgies|ph0t0s|sch00l)/i Notice that they use one's for the letter L, zero's

RE: [SAtalk] Missed Spam samples

2003-07-09 Thread Test, James
I've seen this too. My guess is the spammers screw something up (forgot to paste the body of the email, etc). It doesn't seem beneficial for them to send something on purpose with no link or ad. -Original Message- From: David Watson [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 09, 2

[SAtalk] need help running spamd on remote system

2003-07-09 Thread Test, James
I have exim 4.20 running as my MTA with multiple virus checkers, and would like to do the spam filtering on another system, can anyone who has done this successfully give some guidance. Preferably using SSL between the machines. --- This SF.N

[SAtalk] rules not working

2003-06-22 Thread Test, James
Using spamassassin 2.54 + red hat 8.0 + exim 4.20. I have made some custom rules, and sometimes incoming mail seems to totally bypass my custom rules. I had a piece of spam come in that did not seem to be analyzed by my local.cf file. I can then take that same mail and forward it to go throug