[SAtalk] SpamAssassin strips out headers added by Communigate (was re: Help Spamassassin for Communigate Pro)

I saw that in my own testing.   Here's the work flow:   - Communigate calls a "spamprep" program that adds the proper envelope-to and from headers to the message file itself and deletes the original   - SpamAssassin scans that temp file with the added headers.   - The Communigate script wi

RE: [SAtalk] Why is this lists Reply-To: Header set to the wrong address?

That's weird... I don't even see a reply-to: header in emails from this list. When I reply, it goes to the "from" address, which is the person who sent it. I have to type in the list address by hand (I know... How sad is that?) I use Outlook 2003 beta, but still, viewing the raw message at the s

RE: [SAtalk] SpamAssassin strips out headers added by Communigate (was re: Help Spamassassin for Communigate Pro)

2 it doesn't include those, so I'm assuming this is normal. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Simon ByrnandSent: Monday, June 09, 2003 7:32 PMTo: Aaron; [EMAIL PROTECTED] At 11:14 9/06/03 -0700, Aaron wrote: I saw tha

RE: [SAtalk] SpamAssassin strips out headers added by Communigate (was re: Help Spamassassin for Communigate Pro)

> The problem is that the script that you're using with > Communigate *assumes* that the X-Envelope headers will remain > intact, most likely because that script was written before SA > 2.50 when report_safe was introduced. > > Most mailserver configurations don't rely on message headers > t

RE: [SAtalk] Really OT: Microsoft buys out RAV

> Not to start a flame war, but have 2 NT Servers Pentium 233 > that have been running for years, 24/7. There was a stretch > from 96 to mid 99 that they ran without being touched. I second that sentiment. I've had Win servers that ran and ran and ran for ages it seemed. > I don't get this ar

RE: [SAtalk] SpamAssassin strips out headers added by Communigate (was re: Help Spamassassin for Communigate Pro)

The only reason I don't use CGPSA is because the volume of email our server handles would overwhelm the email server itself if it had to run SA as well. I continue to use the spamprep.exe program (which all it does is add those envelope headers) and then use my custom script to run spamassassin an

RE: [SAtalk] Really OT: Microsoft buys out RAV

You'd be amazed at what you can install without rebooting. True, most MS software tries to reboot the machine for you because heck, that's just easier than doing it the right way. After installing something, if I really don't want to reboot, I just look in the reg at the pendingfilerename ops and

RE: [SAtalk] Really OT: Microsoft buys out RAV

> They are more of an annoyance and can easily be thwarted with > a compotent admin that keeps up with his security updates. > It's the inside jobs that are the kickers. Those are the > serious threat. It's all fun. :) I think that's the long and short of it right there. Any OS can be secur

[SAtalk] Re: Auto-whitelist improvement ideas

itelists (and especially auto whitelists) should have points set by the GA... Certainly leaving them at -100 will let that kind of spam thru. -- "Aaron Swartz" | The Plex Project <mailto:[EMAIL PROTECTED]> |<http://plexnow.com/> <http:/

[SAtalk] qmail and spamassassin

ssage to spamassasin. The file is attached below, I hope it's useful. I am of course interested in better ways to do this. All the best, - [ "Aaron Swartz" ; <mailto:[EMAIL PROTECTED]> ; <http://www.aaronsw.com/> ] #!/usr/bin/python2.2 """ qmail-spamc -

[SAtalk] newbie question: procmail's eating my headers

ED]; Fri, 7 Jun 2002 00:12:23 -0700 Date: Fri, 7 Jun 2002 00:12:23 -0700 From: Aaron Falk <[EMAIL PROTECTED]> To: Aaron Falk <[EMAIL PROTECTED]> Subject: test message SDFLKSDLFJLSJFD Message-ID: <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/plain; charset=

Re: [SAtalk] newbie question: procmail's eating my headers

On Fri, Jun 07, 2002 at 12:22:47AM -0700, Bart Schaefer wrote: > On Fri, 7 Jun 2002, Aaron Falk wrote: > > > Fetchmail can't get the messages from the IMAP server because now it > > see's a corrupt mailbox. The messages look like this: > > > > rom [EM

Re: [SAtalk] newbie question: procmail's eating my headers

vate correspondance I've been led to believe that there is a bug in procmail (even the newest snapshot) which is causing the problem. A line of sed in my .procmailrc to replace the "F" and makes for a crufty fix. --aaron ___

[SAtalk] obfuscation and ratware tags

Please have a look at the attached message. Some interesting features: "X-Mailer: PHP" "X-VXMX-Bounce: 00045176001-21-6159742-13" ".marquee{ color: #fff }" " Senior Systems Engineer and Toolsmith "It's the sound of a satellite saying, 'get me down!'" -Shriekback --- Begin Message ---

Re: [SAtalk] New kind of spam?

sts are true. It would be interesting to see what kind of score that test would be assigned -- Aaron Sherman <[EMAIL PROTECTED]> This message granted to the Public Domain in 2023. Fight the DMCA and copyright extension! --- This SF.

Re: [SAtalk] Received: from bowser (bowser.slooff.net[192.168.0.3])

t? For reference, I set auto_learn to 1 for testing purposes. -- Aaron Sherman <[EMAIL PROTECTED]> This message granted to the Public Domain in 2023. Fight the DMCA and copyright extension! http://eldred.cc/ --- This SF.NET emai

Re: [SAtalk] Interesting suggestion for an anti-spam solution

On Sat, 2003-03-15 at 04:45, Robert Fleming wrote: > I replied to him. He's neither original nor correct on this point. His scheme can be reduced to "create a barrier to entry for sending mail". His particular scheme involves micro-payment

Re: [SAtalk] Of authentication, encryption and headers

On Thu, 2003-03-27 at 11:37, Matt Kettler wrote: > This is true.. however it also assumes the spammer knows that you are > checking for this.. It's very hard to spoof something when you don't know > what the checks are.. Security through obscurity doesn't work very well when I'm considering cont

Re: [SAtalk] no more headers?

On Mon, 2003-03-31 at 18:47, Matt Kettler wrote: > As a bit more in-depth response, the first part of the README file covers > this in detail This is one of the largest problems with any package-management system (even one as loose as CPAN). Most of the people out there don't even have to read th

Re: [SAtalk] SA rpm install dependency problems

On Wed, 2003-04-02 at 14:23, Mike Vanecek wrote: > > su -c "perl -MCPAN -e shell" [...] > > install CPAN > > [it does its thing] > > install Term::ReadLine::Gnu > > [no time to get coffee, but a short wait] > > reload cpan > > [optionally update "install LWP::UserAgent"

Re: [SAtalk] question about mailscanner spamcheck rules

On Thu, 2003-04-03 at 08:21, Madacs Panni wrote: > Hi Spamassassin Users! > > We use Mailscanner(v4.13) with Spamassassin(v2.44) for a few weeks. > I haven't read all of messages on the list, sorry if these questions > were answered earlier. > > 1. > A simple question first. :) > What does SPAM

Re: [SAtalk] help? SA is working, but SCORES in user_prefs arebeing ignored :-(

On Sat, 2003-04-05 at 13:14, R Blake wrote: > debug: razor2 check timed out after 10 secs. > debug: Razor2 results: spam? 0 highest cf score: 0 > tests=DATE_MISSING,MISSING_HEADERS,NO_REAL_NAME Yep, looks right. SA was unable to contact R2, so it scored the mail without using it. The question

[SAtalk] [Fwd: New release Cheboman is wildy entertaining]

as a comment, followed by the HTML version of the message. This way, the text/plain section is empty, but non-MIME mailers will still see the text while spam filters will mostly ignore the comment. Heh, sneaky. -- Aaron Sherman <[EMAIL PROTECTED]> Senior Systems Engineer and Toolsmith &quo

[SAtalk] newbie: how does sa detect razor?

at sa has found razor? Thanks, --aaron --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.

[SAtalk] local user_prefs

the site wide cf files. How do I get spamd to look at other user's user_prefs? I have already looked through the mailing lists as well as all the docs numerous times and I can't see what I am missing. Any help in the right direction would be greatly appreciated. -Aaron -- /"\ \ /

Re: [SAtalk] local user_prefs

On Thu, 17 Oct 2002, Theo Van Dinter was rumored to have said: > On Thu, Oct 17, 2002 at 01:50:35PM -0700, Aaron Levitt wrote: > > users local ~/.spamassassin/user_prefs file. I have spamd running as > > spamd -d -u filter. I just need some users to be able to change the &g

Re: [SAtalk] local user_prefs (fwd)

t; direction would be greatly appreciated. > $ ls -ld user/ > drwxr-xr-x 4 user sysadm 4096 Oct 17 13:07 user > > $ ls -ld user/.spamassassin > drwxr-xr-x 4 user filter 4096 Oct 17 13:07 user/.spamassassin > > $ls -la user/.spamassassin/user_prefs > -rw-r--r-- 1 use

[SAtalk] Bcc filtering?

Is there a way to whitelist based on Bcc? If there is a user that is whitelisted based on whitelist_to it works for To: and Cc: but not Bcc. This is my alternative to user_prefs not working. Thanks again in advance! -Aaron -- /"\ \ /ASCII ribbon campaign X against HTML e-mai

[SAtalk] Skipping tests

Does SpamAssassin actually bother to run a check if it's score is set to zero? I'm wondering if I can disable one or more individual RBL checks if I set their score to zero. Anybody? Thanks in advance! --Aaron --- This sf

Re: [SAtalk] Postfix - Don't Scan Outbound

filtering internal user 1's message to internal user 2, but you can fix that with a more_spam rule. -- Aaron Sherman <[EMAIL PROTECTED]> This message granted to the Public Domain in 2023. Fight the DMCA and copyright extension! http://eldred.cc/ --

[SAtalk] [Fwd: Information DecoFinder]

e and you could have something like the YELLING tests where you detect 2, 4, 8 and 16 of the same URL-prefix separately. Again, not sure of the overhead. -- Aaron Sherman <[EMAIL PROTECTED]> This message (c) 2003 by Aaron Sherman, and granted to the Public Domain in 2023. Fight the DMCA an

[SAtalk] updating filters?

updating spamassassin entirely? Thanks in advance! -=Aaron

[SAtalk] Bayesian 100% on all my mail

ow and I'm attempting to retrain but I'm wondering if I'm going to encounter the same problem again in six months. Aaron --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more prod

Re: [SAtalk] DCC incidence

On Sat, 29 Nov 2003, Bryan Hoover wrote: > Can anyone please tell me generally how frenquently they're DCC is > hitting with SA? DCC is working fine for me. I have three spams out of eight that arrived in the last 30 minutes that have a DCC match. --

Re: [SAtalk] spamassassin -r failed to remove SA markup

On Sat, 29 Nov 2003, Pedro Sam wrote: > Can anyone else confirm that "spamassassin -r" fails to remove SA markup when > it invokes bayes learning? How are you passing the message to spamassassin -r? --- This SF.net email is sponsored by: SF.

[SAtalk] Penalty for small emails

Has anyone experimented with applying a penalty for small emails? With bayes or without I always seem to get a mail or two in my inbox. They're all pretty small, under 1k for the message body. SA finds spammy stuff in them but it's never enough to go above 5.0. They're anywhere from 3.8 to

Re: [SAtalk] Bayes Poison

On Sat, 29 Nov 2003, Gorm Jensen wrote: > Bayes is working very well for me, but I am concerned about poisoning the > database with extraneous, obfuscating words that many spam messages contain. > > A few postings to this list say that there is no problem, but I don't want > to spoil a good thing

Re: [SAtalk] spamassassin -r failed to remove SA markup

On Mon, 1 Dec 2003, Pedro Sam wrote: > My messages are in mbox format, so I report/learn spam by: > > "formail -s spamassassin -r < SPAM_MBOX" > > But when I dump the contents of the bayes database, I found many tokens unique > to SA headers and markup. I found some header stuff but no other m

Re: [SAtalk] empty e-mails

At 04:59 AM 12/1/2003, Korchmenuk Nickolay wrote: > I want mark e-mails with empty body as spam. > Ho can I do this? In .procmailrc: :0B: * ! ^[^ ] spam That's a caret, a space, and a tab between the square brackets. --- This SF.ne

RE: [SAtalk] empty e-mails

On Tue, 2 Dec 2003, Gary Funck wrote: > As it stands, this recipe only checks that the there is a line whose > first charcater is not a space or a tab. And if this sort of mesage is > found, it is deposited in the spam folder. Likely not what was intended. Oops, you are right. This is probably w

[SAtalk] Spamassassin lint errors

Status.pm line 1980. ) I got the same for a few other methods such as check_for_content_type_just_html and check_for_bad_dialup_ips. I verified that the PerMsgStatus was loaded, but I'm not sure where to go from here. This is running SA 2.5x. Any suggestions would be greatly appreciated! -=Aaron -

RE: [SAtalk] Spamassassin lint errors

Yep, I found it in the source of 2.31 in the 20_head_tests.cf. I somehow still had the older cf after I upgraded to 2.52. I copied the head_tests.cf from the 2.52 source in place of the old one and everything seems to be groovy now. Thanks for the quick response! -=Aaron -Original

[SAtalk] importing spam from exchange users for sa-learn?

the emails. The main reason I'm now interested in doing this is because of the increasing number of BAYES_00 spams we are receiving/going un-tagged. Has anyone set something like this up? Tips/tricks/advise? Thanks!! Aaron Everett --- Th

RE: [SAtalk] importing spam from exchange users for sa-learn?

m Outlook I do get the full headers, but it's > impossible to get those > outside Outlook (I think it has a backlink to the original message). > Through IMAP they're completely > broken. > > Presumably there's some magic 'preserve headers' setting that mak

RE: [SAtalk] Ruleset for RND UC CHAR spam

nfirm the syntax? I'm new at rule writing. Aaron Everett Network Administrator Forte Design Systems 425-869-4227 ext 125 425-869-4229 FAX [EMAIL PROTECTED] http://www.forteds.com http://support.forteds.com I've stopped 10,957 spam messages. You can too! One month FREE spam pro

[SAtalk] problem with procmail

am-Status: Yes spam Perl is 5.6.1 and OS is DEC alpha OSF1 V4.0 Thanks for any help or suggestions. -Aaron ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon