does anyone have a website, or information about installing spamassasin
(daemon version) with postfix?
thanks in advance.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_
On Thursday 04 September 2003 03:41 CET Jason Lieurance wrote:
> The trouble is I don't have a local.cf file and I have 100+ virtual users
> so $home/.spamassassin/user_prefs is out of the question. I have some
> spamassassin directories here:
>
> /usr/local/share/spamassassin
> /usr/local/etc/mail
i have been getting many of these
and even after doing sa-learn the score is super low,
these emails are really pissing me of
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Subject: Change password.
Date: Wed, 03 Sep 2003 21:35:21
Hi Alan,
> -Original Message-
> From: Alan Fullmer
> does anyone have a website, or information about installing
> spamassasin (daemon version) with postfix?
Here are a few of links:
http://www.securitysage.com/guides/postfix_uce.html
http://www.advosys.ca/papers/postfix-filtering.h
http://useast.spamassassin.org/tests.html
You've got negative scores all over that thing. Add them up.
> -Original Message-
> From: landy [mailto:[EMAIL PROTECTED]
> Sent: Thursday, September 04, 2003 5:31 AM
> To: SA
> Cc: [EMAIL PROTECTED]
> Subject: [SAtalk] why so low
>
> i have
On Thu, Sep 04, 2003 at 06:31:09AM -0400, landy wrote:
> i have been getting many of these
> and even after doing sa-learn the score is super low,
> these emails are really pissing me of
>
>
>
> To: [EMAIL PROTECTED]
> From: [EMAIL PROTECTED]
> MIME-Version: 1.0
> Content-Type: text/plain; cha
Hi,
I often receive Spam with a link includes "cid:pic.gif";.
I tested a simple rule:
body CIDPIC
/cid:pic1.gif|cid:pic.gif|cid:picture.gif/
describe CIDPIC Catch them all
score CIDPIC 2.5
When I copy the sourcecode from the html mail and
test it, it works. But when the m
Try upgrading to 2.60, it's much better at parsing these messages. That
spam is using a trick which makes the message body invisible to SA, it's
fixed in 2.60.
Frederic Tarasevicius
Internet Information Services, Inc.
Muenz, Michael wrote:
> Hi,
>
> I often receive Spam with a link includes
Kandji Développeur <[EMAIL PROTECTED]> wrote:
> The story :
> linux RedHat 7.3 - kernel 2.4.18#3 on smp system (2xPII)
> perl 5.6.1
> spamassassin version 2.55
> postfix 1.1.12-0.7
>
> 1) The system had been running for 90 days.
> 2) I installed spamassassin AND pop-before-smtp the same day
> 3) Th
Hi,
> Try upgrading to 2.60, it's much better at parsing these messages. That
> spam is using a trick which makes the message body invisible to SA, it's
> fixed in 2.60.
hmpf ... isn't 2.60 only a RC ? I'm a little bit afraid of
upgrading on my production server.
- Michael
--
RC3 is working great! I have noticed a huge improvement on my production
server. I'm the same as you are, normally I would not do this in
production, but the benefit from using 2.6 over 2.55 was enough for me to
take the plunge.
I used to receive 1 to 2 FPs a day with SA 2.55 and a 6.6 threshold
On Wed, 2003-09-03 at 03:57, Cornelius Bolten wrote:
> this is my current tcp.smtp-content:
>
> #
> 127.:allow,RBLSMTPD="",RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/qmail-queue
> "
> #:allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
>
> there is no content-scanning at all :-(
>
> af
Hi
> RC3 is working great! I have noticed a huge improvement on my production
> server. I'm the same as you are, normally I would not do this in
> production, but the benefit from using 2.6 over 2.55 was enough for me to
> take the plunge.
hmmm .. the SA page only links to RC2 .. is RC3 the curr
i found the problems' answer..
after restarting qmail (the XXnd time) i persecuted what happend in
/var/log/qmail/smtpd/current
# Unable to bind to adress... already in use.
an old qmail-smtpd was still running and blocked the new smtp-job to bind to
port 25 -> old smtp-deamon worked with old
Thanks for the info, I've just upgraded my development server to 2.4.22.. It seems to
work like a charm...
Any further advice about this kernel too ??
Thanks
On 4 Sep 2003 at 14:18, Nick Leverton wrote:
> Kandji Développeur <[EMAIL PROTECTED]> wrote:
> > The story :
> > linux RedHat 7.3 - kerne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bart Schaefer wrote:
>> The mechanism I use to determine in which folder the mail will be stored
>> is simple: maildrop (a tool similar to procmail) looks for the
>> X-Spam-Level header and sorts the mail according to that header into the
>> IMAP folde
Does this look correct to y'all?
#Adjusted a few scores because of issues with osirusoft/etc
score SUBJECT_MONTH 0.00
score RCVD_IN_ORBS 0.00
score RCVD_IN_OSIRUSOFT_COM 0
score X_OSIRU_DUL 0
score X_OSIRU_DUL_FH 0
score X_OSIRU_OPEN_RELAY 0
score X_OSIRU_SPAMWARE_SITE 0
score X_OSIRU_SPAM_SRC 0
All -
I have a client with a Red hat 9 + SA 2.55 + spamass-milter server in
front of a Lotus Notes server. The client has hired a Notes developer
to give their users an extra button in Notes to forward false negatives
to a spam account the Linux server so I can run sa-learn --spam on the
messages
On Wed, 3 Sep 2003 09:58:40 -0700 (PDT), Regis Wilson wrote:
>I have a rule for HTML comments much like:
>
>rawbody HTML_COMMENTS //
>score HTML_COMMENTS 0.05
>
>But I want them to add up. Five matches is .25, ten matches is .5, etc. Is
>there a special way to make each match count separately?
OFT_COM, RISK_FREE, X_OSIRU_OPEN_RELAY, quarantine spam-
8e8e1554711b2241ecab992a4f6a1552-20030904-121726-09485-04
(spam-quarantine)
I have restarted both postfix and amavisd. What am I missing?
Thanks,
Jimmy
---
This sf.net email is sponsored by:Th
Spamassassin-Talk <[EMAIL PROTECTED]> wrote:
> Anyhow, one could do:
>
> rawbody HTML_COMMENTS_1 /{1,4}/
> rawbody HTML_COMMENTS_5 /{5,9}/
> rawbody HTML_COMMENTS_10 /{10,}/
I imagine this could take a very long time on complex HTML messages -- like
spams that have hundreds of differing comments.
At 12:35 PM 9/4/2003 -0400, Jim Porter wrote:
I have added the following lines to my etc/mail/spamassassin/local.cf
file.
>From what I understood, this would disable rbl checking of
osirusoft.com, but I am still seeing lines like this in my log file.
Do you use spamd? if so, did you restart it?
Hello, All
How do I get following message added to the end of the email main body on the
MailScanner server running on 550 Cobalt with spamassasin?
"This message has been scanned for viruses and dangerous content by MailScanner
and spamassasin, and is believed to be clean."
Best Regards,
O
At 06:31 AM 9/4/2003 -0400, landy wrote:
i have been getting many of these
and even after doing sa-learn the score is super low,
these emails are really pissing me of
Are you *SURE* those aren't a GENUINE email related to your real ebay account?
The fact that the message matches GENUINE_EBAY_RCVD
Hello,
I have spamassassin set up and working with maildrop and qmail. The global
maildroprc file calls spamd like this:
xfilter "/usr/bin/spamc -u $LOGNAME"
and spamd prefs are set up like this:
OPTIONS="-d -m 100 -c -u speakeasy -x
--virtual-config-dir=/home/speakeasy/spamrules/%u/"
This a
At 09:41 PM 9/3/2003 -0400, Jason Lieurance wrote:
I have a freebsd 4.7 mail server with qmail, courier-imap, and
spamassassin 2.56
installed from the ports collection. The default of 'required_hits 5' I
need to
change to 7 or so. The trouble is I don't have a local.cf file and I have 100+
virtua
On Thu, 4 Sep 2003 09:05:49 -0400, you wrote:
>Try upgrading to 2.60, it's much better at parsing these messages. That
>spam is using a trick which makes the message body invisible to SA, it's
>fixed in 2.60.
>
>
I was offline for a couple of days - has 2.60 gone gold?
Mike-
Mornings: Evolution
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello out there,
If I do a 'sa-learn --forget' on a message never learned into the db,
would it have an effect on the data? Does it hurt to do a "dumb forget"?
The essence of my question is:
If I have a mail where I can't be sure whether it already
I think I have a general understanding of how the auto-whitelist process
works, and please correct me if I'm wrong. As you get "acceptable"
emails from addresses (and/or ip addresses?), that address improves its
"score". Then, if that address sends a message that gets some bad SA
scoring, the aut
At 10:59 AM 9/4/2003 -0500, Thomas Cameron wrote:
All -
I have a client with a Red hat 9 + SA 2.55 + spamass-milter server in
front of a Lotus Notes server. The client has hired a Notes developer
to give their users an extra button in Notes to forward false negatives
to a spam account the Linux s
Hello all...
I dont know if this has been asked before, but I was unable to find anything
in the archives.
Is there a way I can set SA to use a RBL other than Osirusoft? I would like
to use SpamCop or NJABL. Any help is greatly apreciated. Thanks!
--
Open WebMail Project (http://openwebmail.or
On Thu, Sep 04, 2003 at 05:44:08PM +0200, Dave Kliczbor wrote:
> If I do a 'sa-learn --forget' on a message never learned into the db,
> would it have an effect on the data? Does it hurt to do a "dumb forget"?
No, sa-learn looks at the Message-ID. It only learns
a message once and only forgets it
There are already tests for SpamCop and NJABL:
RCVD_IN_BL_SPAMCOP_NET
RCVD_IN_NJABL
X_NJABL_OPEN_PROXY
X_NJABL_DIALUP
You can see what blacklists are tested by default, and their assigned scores, at
http://www.spamassassin.org/tests.html
For examples of rules for alternative blacklists, see
When using mailscanner, all of the message modifications are done by
mailscanner itself and SA is only used to generate a score. Ask on the
mailscanner list and someone there should be able to help you if nobody
here knows the answer.
I use mailscanner, but I'm running an older version so I'm n
To enable bl.spamcop.net, put into your /etc/mail/local.cf (or wherever):
score RCVD_IN_BL_SPAMCOP_NET 0.0 5.0 0 5.0
To enable an arbitrary RBL, e.g. korea.services.net, put in:
header RCVD_IN_KOREA_SERVICES_NET rbleval:check_rbl('korea',
'korea.services.net.')
describe RCVD_IN_KOREA_SERVI
At 01:21 PM 9/4/2003 -0400, Pat Traynor wrote:
I think I have a general understanding of how the auto-whitelist process
works, and please correct me if I'm wrong. As you get "acceptable"
emails from addresses (and/or ip addresses?), that address improves its
"score". Then, if that address sends a
On Thu, 2003-09-04 at 13:47, Matt Kettler wrote:
> At 10:59 AM 9/4/2003 -0500, Thomas Cameron wrote:
> >All -
> >
> >I have a client with a Red hat 9 + SA 2.55 + spamass-milter server in
> >front of a Lotus Notes server. The client has hired a Notes developer
> >to give their users an extra button
On Fri, 5 Sep 2003 01:08:12 +0700, gregj wrote:
>Hello all...
>
>I dont know if this has been asked before, but I was unable to find anything
>in the archives.
>
>Is there a way I can set SA to use a RBL other than Osirusoft? I would like
>to use SpamCop or NJABL. Any help is greatly apreciated.
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 04, 2003 2:38 PM
To: Jim Porter; [EMAIL PROTECTED]
Subject: Re: [SAtalk] osirusoft still working?
At 12:35 PM 9/4/2003 -0400, Jim Porter wrote:
>I have added the following lines to my etc/mail/spam
I have an odd question.
Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
SPAM? Or get on some lists?
I am going to test my spam filter, and this is the best way I can think of
:-)
regards.
---
This sf.net email is
Hello again. Thanks for the help on my last question...but it seems I have
another problem. I created a file called avieg_white_list.cf, and placed it
in /etc/mail/spamassassin. This file contains 952 lines like the following:
whitelist_from [EMAIL PROTECTED]
whitelist_from [EMAIL PROTECTED]
I
I've been looking into the same situation actually. I haven't gotten far enough to try
yet because of different things I've seen. Domino changes the headers around somewhat,
especially the X-headers - converting them to X_ headers. I'm not sure if it even
keeps
them on a forwarded message (sin
--On Thursday, September 04, 2003 15:22:59 -0600 Alan Fullmer
<[EMAIL PROTECTED]> wrote:
I have an odd question.
Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
SPAM? Or get on some lists?
I am going to test my spam filter, and this is the best way I can think of
:-
I figured this out, for the sake of the archives I will post the solution.
The answer was to hack spamd itself, since its perl, this was not too
difficult. Maybe this change will be of interest to developers.
In these lines, starting at line 798 in spamd
if ($safename =~ /^(.*)\@(.*)$/) { $local
Hi,
I can CC you on my spam, about 600 a day, if you want :)
Regards,
Rick
Alan Fullmer wrote:
I have an odd question.
Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
SPAM? Or get on some lists?
I am going to test my spam filter, and this is the best way I can thin
On Thu, Sep 04, 2003 at 03:22:59PM -0600, Alan Fullmer is rumored to have said:
>
> Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
> SPAM? Or get on some lists?
First, I'd use a throw-away address (I'm guessing you were going to do this already).
Then, just post a fe
--On Thursday, September 04, 2003 3:22 PM -0600 Alan Fullmer
<[EMAIL PROTECTED]> wrote:
> I have an odd question.
>
> Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
> SPAM? Or get on some lists?
>
> I am going to test my spam filter, and this is the best way I can
- Original Message -
From: "Matt Tencati" <[EMAIL PROTECTED]>
To: "Thomas Cameron" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 04, 2003 4:40 PM
Subject: Re: [SAtalk] Can base64 encoded messages learnable by sa-learn?
>
> I've been looking into the same situatio
At 20:43 4/09/2003 +0200, Ralf G. R. Bergs wrote:
Jim Porter wrote:
score RCVD_IN_OSIRUSOFT_COM 0
score X_OSIRU_DUL 0
score X_OSIRU_DUL_FH0
score X_OSIRU_OPEN_RELAY0
score X_OSIRU_SPAMWARE_SITE 0
score X_OSIRU_SPAM_SRC 0
From what I understood, th
Jim Porter wrote:
score RCVD_IN_OSIRUSOFT_COM 0
score X_OSIRU_DUL 0
score X_OSIRU_DUL_FH0
score X_OSIRU_OPEN_RELAY0
score X_OSIRU_SPAMWARE_SITE 0
score X_OSIRU_SPAM_SRC 0
From what I understood, this would disable rbl checking of
osirusoft.com, bu
Hi Alan,
You can download an archive at Spam Archive.
http://www.spamarchive.org/
--Larry
> -Original Message-
> From: Alan Fullmer
> I have an odd question.
>
> Does anyone know of a website, or some sort of thing to SIGN
> MYSELF UP FOR SPAM? Or get on some lists?
>
> I am go
In the last episode (Sep 04), Thomas Cameron said:
> I have a client with a Red hat 9 + SA 2.55 + spamass-milter server in
> front of a Lotus Notes server. The client has hired a Notes
> developer to give their users an extra button in Notes to forward
> false negatives to a spam account the Linux
Hi folks,
Sorry for bothering the list. We’re building up some
load balanced SA boxes and in the process used RH 9.0 vs. our older box which
is using 8.1.
In trying to install SA we’re running in to some
issues installing Net::DNS
Here’s the error:
Bad arg length for Socket:
I do. Send yourself one of those 'free' electronic postcards. it should
start up in no time.
Rick Erlandson
- Original Message -
From: "Alan Fullmer" <[EMAIL PROTECTED]>
To: "Postfix users" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Thursday, September 04, 2003 2:22 PM
Subject: odd
i found the problems' answer..
after restarting qmail (the XXnd time) i persecuted what happend in
/var/log/qmail/smtpd/current
# Unable to bind to adress... already in use.
an old qmail-smtpd was still running and blocked the new smtp-job to bind to
port 25 -> old smtp-deamon worked with old
Alan Fullmer wrote:
I have an odd question.
Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
SPAM? Or get on some lists?
I am going to test my spam filter, and this is the best way I can think of
:-)
Post to alt.test, rec.test, comp.test (and any other *.test you can
f
What happens if mail is scanned by different SA's in a row? I use SA 2.55 at
home for all my mail, but already two of my emailproviders use SA too. So they
scan it, add the X-Spam-Status header and when it arrives on my machine it gets
scanned again. But because they use different configs (not to m
I've been looking for a milter to do the caching of messages - do you know of one?
Thanks,
Matt
Dan Nelson
58 matches
Mail list logo
