martin smith wrote:
M>
M>Could you please forward a few complete messages that
M>incorrectly get an SPF fail with the patch applied.
M>
M>The patch has no effect on SPF_HELO tests.
M>
M>
M>Daryl
M>
Looks like I have to put mail.apache.org as a trusted server for this list
to pass the spf test, the
Nigel Frankcom wrote:
>Point accepted, but - why do they market it as such?
>
>Nigel
>
I don't see them (yahoo) marketing it as an anti-spam solution. They
market it as a tool to solve problems that anti-spam efforts face
(spoofing).
http://antispam.yahoo.com/domainkeys/
Of course, the fact that
I have a requirement for a rule that will identify emails using either
traditional or simplified Chinese character sets.
I was able to create a rule that finds these codes in the Internet
headers but I have noticed that some emails have the char set identified
in the mime header and not the Inte
Johan Segernäs wrote:
I'd like to use razor-check as well on my servers, is it possible to have a
server on one of my own boxes or am I forced to use public servers? Haven't
found any docs around this.
Vipul made a post a few months ago about the idea of setting up a Razor
caching plugin for SpamA
Point accepted, but - why do they market it as such?
Nigel
On Tue, 12 Apr 2005 17:45:01 -0400, Matt Kettler
<[EMAIL PROTECTED]> wrote:
>Nigel Frankcom wrote:
>
>>Admittedly not much,
>>
>>My biggest issue was yahoo sporting anti spam options in a spam mail.
>>
>>
>
>My biggest issue would be t
Nigel Frankcom wrote:
>Admittedly not much,
>
>My biggest issue was yahoo sporting anti spam options in a spam mail.
>
>
My biggest issue would be the assumption that domainkeys is an anti-spam
option. It's not. Period. No matter what some people at slashdot might
think, it is NOT an anti-spam
> "MK" == Matt Kettler <[EMAIL PROTECTED]> writes:
MK> Yes, that's exactly what he wants you to look at. You can match up all
MK> those tests names with scores by greping in 50_scores.cf. Since you have
MK> bayes and network checks in use, it will be using the last score in each
MK
Admittedly not much,
My biggest issue was yahoo sporting anti spam options in a spam mail.
I probably shoulda thought a tad more about the post and a tad less
about my beer :-D
It struck me as amusing and a solid example of how the best plans can
bite one in the ass :-D
Apols if any annoyance c
Nigel Frankcom wrote:
>Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
>DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
>s=s1024; d=yahoo.com;
>b=FU1UmmgKvRlCBEUg1CKomcMMxShgfcM6WKgaJSOKD9D0tUHOxKzy603V5zIMC3MtpLdfh9CN/aRG7HzHYI2nIPlWHYJyO8PxAAl3qroxRQY3KDINcs+qaZSygSnd/nXp+5Yk1fezl
Jake Colman wrote:
>Forgive my ignorance...
>
>I assume that "negatively-scored" means that it is less likely to be spam,
>correct?
>
>Here is an example of a message that should have been flagged:
>
>X-Spam-Status: No, score=4.7 required=5.0 tests=BAYES_50,HTML_10_20,
>HTML_MESSAGE,MIME_HTML_ONLY
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
b=FU1UmmgKvRlCBEUg1CKomcMMxShgfcM6WKgaJSOKD9D0tUHOxKzy603V5zIMC3MtpLdfh9CN/aRG7HzHYI2nIPlWHYJyO8PxAAl3qroxRQY3KDINcs+qaZSygSnd/nXp+5Yk1fezlUnFxDtEdUcy5YEQ676bu/ksh4+
Heh.
I'm a She-Hulk fan myself. Talk about your powerful woman icon!
> -Original Message-
> From: Chris Santerre [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, April 12, 2005 07:27
> To: Kurt Buff; users@spamassassin.apache.org
> Subject: RE: OT: Do spammers have a sense of humor?
>
>
> Wel
>-Original Message-
>From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
>Sent: Tuesday, April 12, 2005 3:14 PM
>To: SA Users List
>Subject: Re: Arithmetic score for replaced O's and I's?
>
>
>On Tue, Apr 12, 2005 at 03:10:19PM -0400, Jim Maul wrote:
>> Sort of. You wanted to count them, wh
Forgive my ignorance...
I assume that "negatively-scored" means that it is less likely to be spam,
correct?
Here is an example of a message that should have been flagged:
X-Spam-Status: No, score=4.7 required=5.0 tests=BAYES_50,HTML_10_20,
HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZO
Paul, Fred and others who might wonder:
Since SA is only running on my primary relay, and the secondary is located on
an internal network (though physically distant), I simply look for mail that
includes the internal IP of the secondary in the last "hop".
header FROM_M2 Received =~ /1
On Tuesday, April 12, 2005 @ 12:14:02 PM [-0700], Theo Van Dinter wrote:
> On Tue, Apr 12, 2005 at 03:10:19PM -0400, Jim Maul wrote:
>> Sort of. You wanted to count them, while it sounds as if this poster
>> just wants to detect them. There is a big difference there.
> BTW: detecting them accu
On Tue, Apr 12, 2005 at 03:10:19PM -0400, Jim Maul wrote:
> Sort of. You wanted to count them, while it sounds as if this poster
> just wants to detect them. There is a big difference there.
BTW: detecting them accurately is actually pretty difficult depending
on what kind of mails you get.
F
Chris Conn wrote:
Matt Thoene wrote:
Does anyone have a good custom arithmetic score for spam that has a
whole bunch of o's and l's replaced with zeros and "|"? Example of
part of an l replacement spam body below...
Yap International, Inc.(YPIL)
VoIP techno|ogy requires no computer or high speed I
>...
>
>okay, this all makes sense. Thanks.
>
>I see manlove .com has been listed already. Do rfc-ignorant take action
>on the bogus whois information with the registrar or is that another step?
>
>Regards,
>
>Rob
>
Yes, I nominated it this morning, and it was accepted a few minutes
late
On Tuesday, April 12, 2005 @ 11:42:37 AM [-0700], Chris Conn wrote:
> Hello,
> I believe I asked for this a few days ago and was told that I would need
> to write a plugin to do this =)
Hmmm...shouldn't have to. I know the basic layout of what it should
look like, I just suck at regex. It should
You can begin by looking at the headers of false negatives and see what
rules they are hitting. Are they hitting any negatively-scored rules?
Jake Colman wrote:
I upgraded from SA 2.x to 3.x a few weeks ago. I also installed the Rules Du
Jour script for maintaining SARE files. After doing a
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc G. Fournier writes:
> it used to be in contrib, but 3.x doesn't appear to have it anymore ...
> has it moved? just trashed altogether? is there a better way of doing
> lmtp-level scanning between postfix and cyrus-imapd?
I'm not *sure* but I
I upgraded from SA 2.x to 3.x a few weeks ago. I also installed the Rules Du
Jour script for maintaining SARE files. After doing all this the amount of
spam caught by SA increased dramatically. All was well.
A few days ago I suddenly started having spam get through just like the bad
days prior
it used to be in contrib, but 3.x doesn't appear to have it anymore ...
has it moved? just trashed altogether? is there a better way of doing
lmtp-level scanning between postfix and cyrus-imapd?
thanks ...
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email:
Matt Thoene wrote:
Does anyone have a good custom arithmetic score for spam that has a
whole bunch of o's and l's replaced with zeros and "|"? Example of
part of an l replacement spam body below...
Yap International, Inc.(YPIL)
VoIP techno|ogy requires no computer or high speed Internet connection
Does anyone have a good custom arithmetic score for spam that has a
whole bunch of o's and l's replaced with zeros and "|"? Example of
part of an l replacement spam body below...
Yap International, Inc.(YPIL)
VoIP techno|ogy requires no computer or high speed Internet connection
for its dia|-up p
> Pierre Thomson wrote:
>
> Fortunately SA (2.64)
> saw through it and nailed this using Bayes, DCC, and a custom
> rule that penalizes mail coming through the secondary relay
> when the primary is up.
>
Would you be willing to post that custom rule? I get a number of those kind
of spams and
Mike Jackson wrote:
>
> As written, the rule would try to lock the spamassassin program, which
> might cause weird issues, and since it doesn't include the 'c' option
> it would simply throw away the message after removing the headers.
>
Thanks for the catch Mike. It's the details of what :0: vs :
Title: SQL install with mSQL driver
Hello,
I’m using 3.0.x on RHEL 3 right now in our production environment and was looking at setting up a new test environment. We use MySQL for the common bayes DB which is working well for us in production.
Today I tried installing the same packages fo
Something like this inserted after your main call to SA:
:0:
* ^X-Spam-Status: No
| spamassassin -d
Change the first line from:
:0:
to:
:0fc
As written, the rule would try to lock the spamassassin program, which might
cause weird issues, and since it doesn't include the 'c' option it would
simply
.rp wrote:
>SA 2.64
>sendmail 8.13
>procmail
>
>SA is being called in the system wide procmail and not as a milter.
>I would like to strip the SA X- headers for those emails that are not
>considered spam. Is formail the only way to do this?
>
>
>
No, you can use a procmail rule to funnel the
".rp" <[EMAIL PROTECTED]> wrote
on 04/12/2005 12:28:29 PM:
> SA 2.64
> sendmail 8.13
> procmail
>
> SA is being called in the system wide procmail and not as a milter.
> I would like to strip the SA X- headers for those emails that are
not
> considered spam. Is formail the only way to do this?
SA 2.64
sendmail 8.13
procmail
SA is being called in the system wide procmail and not as a milter.
I would like to strip the SA X- headers for those emails that are not
considered spam. Is formail the only way to do this?
Hello All
I must configure a centralized SA to deliver mails world wide trough Lotus
Notes.
Has someone knowledge how to configure SA for different languages /
character sets
and also custom filter rules?
I know only two entries in SA
ok_languagesen de ja cn
ok_locales
Angelo Ayres Camargo wrote:
> Hello,
>
> Mail sent from horde imp are been taged as spam, this was discussed
> here before, searching the archives i found no solution. Anyone have
> any ideia of how make mail from Horde/Imp not be taged as spam?
>
> Angelo
Angelo,
First, I assume you mean th
M>
M>Could you please forward a few complete messages that
M>incorrectly get an SPF fail with the patch applied.
M>
M>The patch has no effect on SPF_HELO tests.
M>
M>
M>Daryl
M>
Looks like I have to put mail.apache.org as a trusted server for this list
to pass the spf test, the email direct from y
Hello,
Mail sent from horde imp are been taged as spam,
this was discussed here before, searching the archives i found no solution.
Anyone have any ideia of how make mail from Horde/Imp not be taged as
spam?
Angelo
List Mail User wrote:
Start with your favorite version of "whois" (I like jwhois, because
you seldom need to enter the registry). Then learn the rules about what is
required. Lookup all the contacts' email domains - if you *really* want to
get them check the email validity with telnet to
>...
>
>List Mail User wrote:
>> Did either of you try listing himlove. com (invalid telephone/fax),
>> or notice that the contacts' email is from a non-existant domain,
>> heroutside. com. Or that the name servers in carr821. com also have
>> an invalid address. Or that the contact domain f
HOLY British Military Servant Batman!
Be careful Robin, this might be spam.
To the bat-computer!
Sorry, couldn't resist! :-D
Kurt Buff <[EMAIL PROTECTED]> wrote on 04/11/2005
07:11:41 PM:
> Most people reading this list are probably not aware that batman has
a
> slightly different meaning
These spams are a personal favorite of mine, because they carry with
them the slim chance that they are in fact perfectly legitimate
messages. Imagine my girlfriend saw that I had received this, I would
have to try and explain myself without pointing out forged headers etc!
R
> -Original Mes
Well thanks for ruining another childhood fantasy of mine! I suppose next
you will tell me that wonderwoman if Swedish for "House maid"? Well I still
don't care, she can lasso me up!
--Chris
>-Original Message-
>From: Kurt Buff [mailto:[EMAIL PROTECTED]
>Sent: Monday, April 11, 2005 8:12
List Mail User wrote:
Did either of you try listing himlove. com (invalid telephone/fax),
or notice that the contacts' email is from a non-existant domain,
heroutside. com. Or that the name servers in carr821. com also have
an invalid address. Or that the contact domain from the DNS serve
Hey,
I got this book (slightly outdated) called Spamassassin (by O'Reilly).
Anyway, it says if you are going to sa-learn a bunch of directories in
Maildir format you should do the following:
sa-learn --no-rebuild --spam mail/spam
sa-learn --no-rebuild ...blah.
sa-learn --no-rebuild -
Just fished this one out of the spambox:
>Your exclusive night has been confirmed with Erika.
>
>Time: ASAP
>Location: Either Home within 1.2 miles of you
>Attire: Dress casual
>Expectation(s): To get right to it.
>Quote from Janice: "I've got a nice house open to you! I'm alone these next
>few
>...
>Robert Brooks wrote:
>> bizarre!
>>
>> > Subject: intimate encounter
>> >
>> > Heyyy it's me %ASSHOLE... %OUT
>> >
>> > %PROFILE...%PART4
>> >
>> > http://himMUNGEDlove.com/d/8.php
>>
>
>I got the same damn thing ;)
>
>Subject: me out
>From: "Mrs.Sherman" <[EMAIL PROTECTED]>
>Date: Mon
I recently got two in quick succession, one with variable names and one filled
with random data, as in:
>Heyyy it's me Jennifer... my husband is out of town for two months... etc etc
At least we can match %ASSHOLE... that's not likely to appear in ham! :)
Pierre
-Original Message-
To those using 3.0.2
and the newer features (URI blacklists etc), what SARE rules do you find
supplement your spam catching?
Thanks,
Rhett
Roy
Robert Brooks wrote:
bizarre!
> Subject: intimate encounter
>
> Heyyy it's me %ASSHOLE... %OUT
>
> %PROFILE...%PART4
>
> http://himMUNGEDlove.com/d/8.php
I got the same damn thing ;)
Subject: me out
From: "Mrs.Sherman" <[EMAIL PROTECTED]>
Date: Mon, 11 Apr 2005 23:08:01 -0300
Heyz, it's me %
> From: Matt Yackley [mailto:[EMAIL PROTECTED]
> Are you using a sitewide bayes DB? This may affect your
I will at first, I need to start as soon as possible, this means I'm
postponing the issue of finding out how to have on my mail gateway box
virtual users associated with the real smtp address
Oliver Schulze L. wrote:
Hi,
I'm new in SpamAssassin, and I just installed it.
I'm running SA with Razor2 and Mimedefang. All is wokring fine.
I wonder how un-atended can I left the installation in order to SA to
continue detecting spam.
Should I run some scripts every few days in order to keep the
Hello,
my attempts of installing spamassassin 3.0.2 for personal use get
failed.
Here is a log.
[avalyn] diba:~ <88> uname -a
Linux diba 2.4.26-1um #3 Thu Jun 3 22:56:55 UTC 2004 i686 unknown
(Debian)
[avalyn] diba:~/Mail-SpamAssassin-3.0.2 <92> perl Makefile.PL
PREFIX=$HOME
What email address
John Wilcock <[EMAIL PROTECTED]> writes:
> The Wiki method seems like an excellent idea, and I'd be happy to help
> with the French translations as time permits.
Cool.
> One suggestion to make the process even quicker and easier - would it be
> possible to adapt your script to include the old
bizarre!
> Subject: intimate encounter
>
> Heyyy it's me %ASSHOLE... %OUT
>
> %PROFILE...%PART4
>
> http://himMUNGEDlove.com/d/8.php
--
Robert Brooks, Network Manager, Cable & Wireless UK
<[EMAIL PROTECTED]> http://hyperlink-interactive.co.uk/
Tel: +44 (0)20 7339 8600
Daniel Quinlan wrote:
Okay, I'm starting an experiment to see if Wiki-based editing can start
with some really bad machine-generated translations and get to the point
where they are usable relatively quickly. Anyone who reads and writes
both French and English well can help.
The Wiki method seems
martin smith wrote:
M>I had the same problem. It turns out that if the email is being
M>relayed through trusted or internal hosts, SA will skip the
M>SPF checks on the belief that it cannot trust that one of
M>those hosts hasn't
M>changed the envelope headers.I ended up opening an enhance
M>I had the same problem. It turns out that if the email is being
M>relayed through trusted or internal hosts, SA will skip the
M>SPF checks on the belief that it cannot trust that one of
M>those hosts hasn't
M>changed the envelope headers.I ended up opening an enhancement
M>request to a
Hi,
I'm new in SpamAssassin, and I just installed it.
I'm running SA with Razor2 and Mimedefang. All is wokring fine.
I wonder how un-atended can I left the installation in order to SA to
continue detecting spam.
Should I run some scripts every few days in order to keep the
"definitions" up to date
Okay, I'm starting an experiment to see if Wiki-based editing can start
with some really bad machine-generated translations and get to the point
where they are usable relatively quickly. Anyone who reads and writes
both French and English well can help.
Here it is:
http://wiki.apache.org/spama
Hi Herold,
Are you using a sitewide bayes DB? This may affect your choice of solutions,
I'm
running sitewide, so my method may not work if you are using seperate DBs for
all
your users
Herold Heiko said:
> Newbie Alert - New to Spamassassin. Pondering enhancement to my current
> basic setu
Greetings.
On Monday 11 April 2005 13:38, Niek wrote:
> On 4/11/2005 9:31 AM +0100, Tristan Miller wrote:
> > I have 256 MB of RAM plus 243 MB of swap space. Unfortunately,
> > upgrading RAM will not be a cheap fix as I am using a laptop with no
> > user-serviceable parts.
> >
> > Regards,
> > Tr
Anyone else seeing similar behavior!? I cannot find out what is wrong.
If I edit my sensitivity (require_hits) it's reflected in my logs, yet none
of these settings appear to be working:
report_safe 1
rewrite_header Subject **NEW_SPAM(_SCORE_)**
If I put the old settings back of:
rewrite_subjec
Hello Gerald,
Saturday, April 9, 2005, 5:10:02 PM, you wrote:
GVLI> I'm looking at what scores I'll be able to let my users modify directly.
If
GVLI> they can drop the bayes scores some for individual users it might not be
so
GVLI> bad. I'm trying really hard not to ostracize any specific group
Most people reading this list are probably not aware that batman has a
slightly different meaning to some people in current/former British
colonies. A batman was someone who acted something like a personal servant
to British military staff, mostly officers, I believe.
He wasn't the caped denizen
64 matches
Mail list logo
