info,
Ryan
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/lis
I know Razor2 needed patching to work with SA 2.6x, I'm not sure about
Pyzor or DCC though. You could simply disable those within your SA
config for the time being.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Marc G. Fournier
ay to verify that we are actually using procmail? etc.
-Ryan
_
Send and receive Hotmail on your mobile device: http://mobile.msn.com
___
Spamassassin-talk mailing list
[EM
I just found it very amusing to see "CAUSE NEWS" in my spam folder. :)
You might consider using this to try to further refine your filters so
as not to block such a message, although I understand why it would be
difficult.
Ryan
--- Begin Message ---
SPAM:
We use Amavisd-new (which works great) that calls SpamAssassin, and it
then forwards it (via SMTP) to our real POP server. We also have a
sendmail machine in front of Amavisd that calls DNSRBL's and Milter-Sender.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849
Oh the Irony!
- Original Message -
From: "Justin Mason" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 11, 2003 7:14 PM
Subject: [SAtalk] spam filtering friendly fire
Theo dropped us a line last night to note that sourceforge.net's spam
filters are blocking his mail fo
event spam like this?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forum
which can
fetch
it and squirt it to the Linux server.
Tony
No luck with OutlookSpy. The PR_INTERNET_CONTENT propery doesn't appear
on any of the messages that have been dragged to the public folders.
Interesting tool though...
that DNSRBL and define another rbl test in your local.cf file that
checks that zone and give any hits from that test a negative score, like
the BONDED_SENDERS test.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Greg Webster wrote:
Thanks,
Covington, Chris wrote:
Ryan,
I've found that if mail is sent directly to a mail-enabled Public
Folder's email address, IE from amavisd-new or Postfix, its headers will
make it through with IMAP. However, if an email is moved to or from a
Public Folder with Outlook (regardless of whet
oesn't even give you the option to save
the full message source (you just get the View/Options peek at the headers).
Ryan
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and F
score
greater than 15 by default) will have precedence and older entries will
be expired from the database. This how I understand that it works at
least, could be wrong though.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Ricardo Kleemann
guess that their rbl
server is down.
Is there any way to run off individual rbl tests in spamassassin? I have
never came across this topic before...
Thanks in advance!
Ryan Summers
_
The new MSN 8: advanced junk mail protection
Appears to be working here doing a manual test. I think setting the
score to 0 disables the test, which you can do in your local.cf.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
~$ dig 2.0.0.127.relays.osirusoft.com
; <<>&g
starting with $.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
swapna ghosh wrote:
Hi
i have sent one email asking for - that i am unable to connect mysql
database
from my server. The database is under a different host but is
*spamassassin
that is a valid thing to do
or not. In any case, is this a bug of some sort with SpamAssassin?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.net email is sponsored by: VM
perl module).
Hopefully the mime parser in 2.60 is able to dig into the nested parts.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Bart Schaefer wrote:
On Mon, 25 Aug 2003, Ryan Moore wrote:
I got an email that made it by spamassassin
half a dozen of these on one account. Guess I'll give 2.60 a try
and see how it handles these.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Fuzzy Fox wrote:
Ryan Moore <[EMAIL PROTECTED]> wrote:
I got an email that made it by s
four lines in total (MUA wrapped it I think). The
variables starting with $ should be edited for whatever zone you want to
use.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Fred I-IS.COM wrote:
Is it possible to use the dsn listing from RF
As an addendum, it appears as if SA 2.60-rc2 is able to parse the
message. Hooray!
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Ryan Moore wrote:
There is alot there for SA to trigger on, as noticed in the headers for
the fixedmime.txt
Did anyone ever figure out a fix for this on Exchange 2000? It will be a
while before I can migrate to 2003.
To recap: the problem involves retrieving intact headers from messages
moved to Public Folders on Exchange 2000.
Thanks,
Ryan
-Original Message-
From: Covington, Chris [mailto
Did anyone ever figure out a fix for this on Exchange 2000? It will be
a while before I can migrate to 2003.
Thanks,
Ryan
-Original Message-
From: Covington, Chris [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 13, 2003 12:39 PM
To: Bingham, Ryan; Tom Meunier; Martin Bene
Cc
MailScanner has built-in filetype and file extension filters. It also
supports multiple anti-virus engines and uses SpamAssassin for spam
protection
Best of all, it's easy to set up!
www.mailscanner.info
Ryan
Bob Apthorpe wrote:
Hi,
On Mon, 01 Sep 2003 14:19:32 +0530 "BG Mahes
Going forward, would it be possible to have a configuration option that
allows you to take Bayes scores into account when autolearning?
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Friday, September 12, 2003 12:49 AM
To: Larry Rosenman; [EMAIL PROTECTED]
Subject:
do it either way, don't remember exactly how to offhand
though.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Jon Gabrielson wrote:
Nope, it returns them all on my box.
i.e. when i type "nslookup www.yahoo.com" i get about
is checking for localhost, but I wouldn't think
that SA wouldn't query for 127.0.0.1 since that will hit a few rbl zones
that include it for some reason (when they should be including 127.0.0.2
or something).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-80
's, so you could parse through that and do what you will, we do some
parsing of the file and stick data into a database for our users. That
is assuming you are logging to syslog, which I think is the default for
amavis and I'm pretty sure that is configurable within amavisd.
Ryan Moore
--
By default SA will check the 9 previous hosts listed in the RECEIVED
headers. You could lower that by using "num_check_received" directive in
your usr_prefs/local.cf, I currently use a setting of four.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-
Doh, I remember looking in the perldoc and thinking "ok it isn't in the
deprecated section", obviously I was wrong since it actually is. Is
there another config option that would perform the same behavior or has
that functionality been lost in 2.60?
Ryan Moore
---
Is there a size limit that SA implements to avoid scanning huge messages
whose content is primarily binary? I know amavisd has a limit such as
that, but I'm not sure if spamassassin has one as well or not.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017
he thread on
the machine I'm writing this from so hopefully I understood what was
going on ;]
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Terry Milnes wrote:
But you are missing the point, mail is being identified as
RCVD_IN_DYNA
y case, as Gerry mentioned your daughter will want to use her isp's
smtp server instead of sending directly into your system, as it sounds
like that is what is happening. Or you can use the trusted_networks option
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704
If your server is taking an abnormal amount of time to display the SMTP
banner (the first 220 line), then the remote end might close the
connection before issuing any commands.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Matt Chapman
recommend it.
Ryan
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge
Highest I've got is a 75.8, but that was with SA 2.55 and with a few RBL
scores set to 2.5 or 3.0 in local.cf (still would have been right around
70 with defaults though)
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Scott Roth
Looks like YAHOO_REDIR looks for "http://rd.yahoo.com";, adding the "s"
into the hostname threw it off ;\
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
Colin A. Bartlett wrote:
Can anyone hazard a guess as to why a message with an ima
seem to recall other people reporting the
same problem on this list. Has anyone else seen this?
Thanks,
Ryan
> -Original Message-
> From: Louis Bohm [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 28, 2003 3:48 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] sa-le
Didn't this (and all the subsequent flames) just happen? Like several times
already in the recent past??
Anyone ever see Groundhog Day? I'm startin to get wigged out...
Ryan
- Original Message -
From: Marge Golomb
To: [EMAIL PROTECTED]
Sent: Tuesday, June 03, 2003 9:17
Open-source strikes back:
http://www.eweek.com/article2/0,3959,1123172,00.asp
Let's hope there's some merit to this.
Ryan
-Original Message-
From: Kristian Koehntopp [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 11, 2003 12:10 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] LD
Haha. I love how these threads evolve. SCO dropped out of this
conversation like after the first post.
Now, QED, SCO violated GNU!
Excellent.
Ryan
- Original Message -
From: "Stuart Gall" <[EMAIL PROTECTED]>
To: "Greg A" <[EMAIL PROTECTED]>;
<[EMA
could just pipe directly to /usr/local/bin/spamassassin )
later on in my .procmailrc, i have:
:0 ^X-Spam-Status: Yes
/home/me/mail/spam
:0
* ^From:
{
:0 c
! [EMAIL PROTECTED]
:0
/home/me/mail/local-copy-of-cleanmailbox
host will
try again a short time later while a spamming host will not.
Here's a link to a fuller treatment:
http://projects.puremagic.com/greylisting/
Ryan
Mark,
This sounds great; thanks for posting the script. One question: does
this method preserve the message headers? I've had a lot of problems
keeping the headers intact with Exchange 2000/Public Folders/IMAP.
Ryan
-Original Message-
From: Mark Motley [mailto:[EMAIL PROTECTED]
ly with its own fake DNS entry for amazon.com)
which allowed the original host to pretend to be amazon.com.
Does this look correct?
Ryan
-Original Message-
From: Simon Byrnand [mailto:[EMAIL PROTECTED]
Sent: Sunday, June 22, 2003 8:16 PM
To: Bernd Kuhls; [EMAIL PROTECTED]
Subject: Re: [S
I can't believe we're even debating this!
As my old boss would say, anyone who has enough free time on their hands
to worry about this kind of stuff needs a project!
I for one don't care what it's called. I'm more focused on keeping it
out of my users' mailboxes.
install and operate and has an excellent mailing
list for support (the developer -- Julian Field -- usually answers questions
within a few hours of posting).
Let me know if you have any questions; I'd be happy to help.
Ryan
- Original Message -
From: "Tony Earnshaw" <[EM
other useful features.
Definitely the best out there.
Just my two cents.
Ryan
Rick Macdougall wrote:
Steve Thomas wrote:
Doh! I misread the original mail. I thought he was looking for a
scanning mechanism, not the scanner itself.
Revised recommendation:
MailScanner and Sophos. :)
I
Hi
Simple quiestion, does Razor2 work with RA 2.20
R
---
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
On Friday 18 July 2003 15:46, you wrote:
Oh really, thats good to know, I am upgrading now then.
Thanks for the input
R
> At 11:32 AM 7/18/03 +0200, Ryan Lumsden wrote:
> >Hi
> >
> >Simple quiestion, does Razor2 work with RA 2.20
>
> I doubt it, but a better point
from Exchange 2000 Public
Folders. E2K basically makes a mess of them (and I've tried all manner
of methods and clients) and renders the messages meaningless for
teaching Bayes.
Any help is greatly appreciated!
Ryan
---
This SF.Net email
was pretty easy to setup.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Scott Fraser wrote:
Good Morning Folks,
Well, after fighting with it longer than I care to admit, I do
believe I now have a working Postfix/SpamAssassin/Amavisd
Dang! You upgraded to Titanium? Just like that?
- Original Message -
From: "Covington, Chris" <[EMAIL PROTECTED]>
To: "Ryan Bingham" <[EMAIL PROTECTED]>; "Tom Meunier"
<[EMAIL PROTECTED]>; "Martin Bene" <[EMAIL PROTECTED]
Q -100
Can/should this be added to the default header rules?
--
T Ryan Cleary <[EMAIL PROTECTED]>
URL: http://people.interdimensions.com/tryanc
PGP: 82 93 32 D7 3A AC C0 8D 34 56 96 CC DA DB 5E 2B
---
This sf.net email is sponsored
End of SpamAssassin results -
--
T Ryan Cleary <[EMAIL PROTECTED]>
URL: http://people.interdimensions.com/tryanc
PGP: 82 93 32 D7 3A AC C0 8D 34 56 96 CC DA DB 5E 2B
---
This sf.net email is s
for razor (which I'm not currently using), and let's say
3 for spamcop (also not using), you still beat me.
Is there any officially maintained record for the highest scoring spam?
Or does the configurability of the scoring make any such statistic
meaningless.
How about for the highest
ference at virtual address"
"ksymoops"
"CONFIG_BSD_PROCESS_ACCT"
"--BEGIN GEEK CODE BLOCK--"
-Ryan
--
T Ryan Cleary <[EMAIL PROTECTED]>
URL: http://people.interdimensions.com/tryanc
PGP: 82 93 32 D7 3A AC C0 8D 34 56 96 CC DA DB 5E 2B
-
s...
Unless you don't want to receive the spam that gets sent to the lists...
I agree that adding the Linux kernel specific rules is a bit much, but
there are already rules for diffs and pgp headers, so maybe the geek code
rule might be worthwhile as an indication that the message is
probably
w it makes sense ;)
>
> Gratuitous use of \b should fix that.
And "CONFIG_BLK_DEV_VIA82CXXX", as well.
It's bug #533.
-Ryan
--
T Ryan Cleary <[EMAIL PROTECTED]>
URL: http://people.interdimensions.com/tryanc
PGP: 82 93 32 D7 3A AC C0 8D 34 56 96 CC DA DB 5E 2B
-
File::Spec 0.8 or later, etc.
I'm using it with perl 5.005:
[tryanc@steward tryanc]$ perl --version
This is perl, version 5.005_03 built for i386-linux
There were a number of prerequisites that needed to be installed, but it
does work just fine.
-Ryan
--
T Ryan Cleary <[EMA
tch I submitted to bugzilla, and the
code that got changed in CVS.
Line 400ish in lib/Mail/SpamAssassin/Dns.pm should say:
if (system("dccproc -V >/dev/null 2>&1")) {
instead of
if (!system("dccproc -V >/dev/null 2>&1")) {
system() will re
(0). (default: add)
"ensure that this line is stripped"
-Ryan
--
T Ryan Cleary <[EMAIL PROTECTED]>
URL: http://people.interdimensions.com/tryanc
PGP: 82 93 32 D7 3A AC C0 8D 34 56 96 CC DA DB 5E 2B
---
This sf.net
1]: bad protocol: header error: (Content-length mismatch: 1929 vs.
1867)
Any ideas?
Thanks,
--
Ryan Clark
System Administrator
The Internet Marketing Center
[EMAIL PROTECTED]
604-730-2833 Ext 234
---
This SF.net email is sponsored by: Get the
ual_length != $expected_length) {
protocol_error ("(Content-length mismatch: $expected_length vs.
$actual_length)"); return 1; }
#}
Hope this helps,
- --
Ryan Clark
System Administrator
The Internet Marketing Center
[EMAIL PROTECTED]
604-730-2833 Ext 234
-BEGIN PGP SI
as Chris T. said I don't believe grep does any sorting (unless perhaps
you have a version that supports that as a parameter), at least in my
experience. Now of course you can pipe stuff to `sort -n` to sort stuff
numerically, and can even use a certain field to base the sort upon (-k).
address (this would be my user
and not the original sender), etc.? Also, what about
"[EMAIL PROTECTED]". In this case, my users would be wanting to
unlearn a particlar message to prevent it from being marked as spam in the
future.
Thanks,
Ryan
ly made sure it worked for Mozilla as that is the only browser I use.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
(the second line is 'cd /tmp', the sed line will probably get wrapped,
and there is a single wh
address (this would be my user
and not the original sender), etc.? Also, what about
"[EMAIL PROTECTED]". In this case, my users would be wanting to
unlearn a particlar message to prevent it from being marked as spam in the
future.
Thanks,
Ryan
clears the /tmp/spamtmp (or whatever you used) or use the --overwrite
option to ripmime (which I *think* should also work. Sorry about that, I
tend to add stuff interactively so I didn't notice the problem.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (t
All DSNs have them afaik, such as bounces, return receipts, etc.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Charles Gregory wrote:
Hallo!
Another spam today, with the infamous empty return path.
(Return-Path: <>)
But I didn
to amavisd for user defined rules, afaik, you might be able to
do it via some hacks in the amavisd code (since spamassassin would have
to be called as the recipient instead of the user that amavisd runs as).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-
es by looking
at: http://www.ijs.si/software/amavisd/README.lookups
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Patrick T. Tsang wrote:
Dear Ryan,
Thanks for your help.
Do u have any worked examples?
Patrick
- Original Message -
manually, if it has done it automatically the files are still
owned by the amavisd user. My first guess would be that some script is
doing something manually to the database (copying it perhaps without -a?).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
modified the bayes_* scores for all the scoresets in
user_prefs/local.cf).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Mairhtin O'Feannag wrote:
Hello,
Below are the first few lines of my local.cf file for the entire
site. I do no
s, which helped lower the
burden on the box as well.
Anyway, it probably would be useful in the end to help stop junk from
getting through, I've not done anything with it so far since SA is
running really well for us without rocking the boat too much.
Ryan Moore
--
Perigee.net Corpor
To my knowledge amavisd-new is limited to using those headers, it
ignores the verbose ones added by SpamAssassin.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Fritz Mesedilla wrote:
How does spamassassin include the spam report in the
ssage will likely score below 0 and not get any
headers added.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Jonathan Nichols wrote:
Vivek Khera wrote:
"j" == jnichols <[EMAIL PROTECTED]> writes:
2. in your spamassassi
e config (before the whitelist/blacklist area of that
subsection).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Jonathan Nichols wrote:
Ryan Moore wrote:
Your postfix isn't stripping them right? I use amavisd-new and it
works like a ch
Hi all.
how do I get spamd to log to a diffrent file besides messages and mail.log.
I am up2date with sa and I am running debian woody, any body have any ideas.
Thanks in advance.
Ryan
---
This SF.net email is sponsored by: IBM Linux
erhaps
someone else might be able to give some insight.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Chris Barnes wrote:
I got a false positive this morning, where it looks like the main
culprit was bad information in SORBS and RJABL. The se
s is not a problem.
Now where the problem lies is I have a deadline I don't have time to do any
more googling, so does anyone know how to do this or point me in the right
direction. I also understand SA might not be the right app for this task.
Thanks in
Attach a prefix to the filename, such as:
10_bigevil.cf
20_popcornonly.cf
30_weedsonly.cf
40_backhair.cf
50_local.cf
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Douglas Kirkland wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I have
.
- --
Ryan Clark
System Administrator
The Internet Marketing Center
[EMAIL PROTECTED]
604-730-2833 Ext 234
-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
iQA/AwUBPfZd+uxapVimMXbbEQLv8gCgsri0peRmTikAirqyWGQ00CVG6AcAn3Gy
gt94hvSRsPERdi8vFP
urce
relay server to preprocess the message, but would rather do it entirely
in iMS if it's possible. Any helpful suggestions about or experiences
with about either option would be greatly appriciated.
Thanks in advance!
Ryan
---
This
83 matches
Mail list logo