A Central 'Rules' site?

2005-06-28 Thread Dr Robert Young
Has anyone set up a database/clearing house of "rules" etc that are associated with Spamassassin? Something like Perl's CPAN?

Re: Maybe OT: SA/amavisd-new not killing

2005-06-28 Thread BQ
On 6/28/05, Jonathan Nichols <[EMAIL PROTECTED]> wrote: > The kill level is set to 12, this spam had 21.301 points, and made it > through. > > Hrm. No matter what I set the kill level to (using the squirrelmail > amavissql plugin) it doesn't kill it. > > I'm not exactly sure what to check.. > Jun

Re: special chars in subject + .procmailrc

2005-06-28 Thread Loren Wilton
> here is how I do it > then I don't have to count stars :) > > :0 H: > * ^X-Spam-Status: +(yes|no), +score=\/[^. ]* > * ? (( ${MATCH} > 14 )) > /dev/null Just curious - won't that /dev/null a ham message that scores higher than 14 also? You seem to be matching against spam-status = no there, if

Re: Anyone else getting slammed with eBay & PayPal Phising not getting tagged?

2005-06-28 Thread Loren Wilton
Usually it is the headers that catch these as obvious fakes. However, there are some SARE rules to look for some of the more obvious text tricks also. Since you didn't include the headers for that message it is a little hard to see what might have hit. That said, between SARE rules and some local

Re: error: Insecure dependency in eval while running setuid at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2119._ , continuing

2005-06-28 Thread jdow
(Top posting to preserve content and present a short additional comment.) This appears to be fixable with an upgrade of perl. I had been running perl5 5.8.5 for Mandrake 10.1. I am now running 5.8.6 per Fedora Core 4 and am not seeing this problem. It may be a perl problem rather than a SpamAssass

Re: Very few URIBL hits today. :(

2005-06-28 Thread Bruno Delbono
Chris Santerre wrote: I have definetly seen an increase in worms. Yea..same. I can't be relied upon for accurate spam stats. I've been listwashed back to the stone age. Yes, I'm actually complaining I don't get enough spam :) And no, I don't want people to send me theirs :) Me too! We ha

Re: special chars in subject + .procmailrc

2005-06-28 Thread Tim Litwiller
Chris Thielen wrote: Pál László (Sq.) wrote: I also would like to remove spams over a certain level, so I'v created the following .procmailrc entry :0 * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\* /dev/null It seems not working. What is the problem? Looks fine to me. Is that recipe in your proc

Re: RBL lists

2005-06-28 Thread wolfgang
In an older episode (Tuesday 28 June 2005 22:40), Jack Gostl wrote: > Some how my domain has gotten itself blacklisted. Can anyone suggest how I > can find out where the blacklisting occurred and how to get it undone? With many RBLs, the error message of the remote mail server should show you an

Re: RBL lists

2005-06-28 Thread Niek
On 6/28/2005 10:40 PM +0200, Jack Gostl wrote: Some how my domain has gotten itself blacklisted. Can anyone suggest how I can find out where the blacklisting occurred and how to get it undone? Thanks - Jack I suppose you mean your ip(range) got listed. enter your ip in the Spam datbase lookup

RBL lists

2005-06-28 Thread Jack Gostl
Some how my domain has gotten itself blacklisted. Can anyone suggest how I can find out where the blacklisting occurred and how to get it undone? Thanks - Jack

Re: Anyone else getting slammed with eBay & PayPal Phising not getting tagged?

2005-06-28 Thread Niek
On 6/28/2005 9:49 PM +0200, Debbie D wrote: What rules can I add or tweak to stop these?? Over here, they always almost hit bayes_99, dcc and razor. In about 50% of the cases, they hit some SARE (FRAUD i suppose) rule. The SARE rules don't come in stock SA (http://www.rulesemporium.com) Niek B

Re: special chars in subject + .procmailrc

2005-06-28 Thread Chris Thielen
Pál László (Sq.) wrote: It looks this entry has been skipped somehow. Other rule moving spam police messages to /dev/nul works fine. I'm not seeing where SA is called. It appears that SA is being invoked from outside procmail. Can you give more info about your system's processing chain?

Re: Anyone else getting slammed with eBay & PayPal Phising not getting tagged?

2005-06-28 Thread Michele Neylon:: Blacknight
Have a look at MailScanner (http://www.mailscanner.info). It has builtin phishing checks

Anyone else getting slammed with eBay & PayPal Phising not getting tagged?

2005-06-28 Thread Debbie D
What rules can I add or tweak to stop these?? Your credit/debit card information must be updated Dear eBay Member, We recently noticed one or more attempts to log in to your eBay account from a foreign IP address and we have reasons to believe that your account was used by a third party without

encoding as spam sign

2005-06-28 Thread hamann . w
In my corner of the world, mails are usually written with 8859 (or perhaps utf8) character sets and a low percentage of non ascii codes. Real MUAs seem to prefer qp encoding for themessage text as well as any headers requiring non ascii (display names in From and To, as well as Subject) With qp t

Re: special chars in subject + .procmailrc

2005-06-28 Thread Chris Thielen
Pál László (Sq.) wrote: I also would like to remove spams over a certain level, so I'v created the following .procmailrc entry :0 * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\* /dev/null It seems not working. What is the problem? Looks fine to me. Is that recipe in your procmailrc AFTER spamassas

Re: special chars in subject + .procmailrc

2005-06-28 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Anyone knows a way to tell spamassassin to handle some special > characters (HU, iso and utf) as normal characters in message subject? > Currently spa. gives 2.9 points for single ó á or é. I would like to > override this setting but only for a spec

Re: special chars in subject + .procmailrc

2005-06-28 Thread Evan Platt
At 11:52 AM 6/28/2005, you wrote: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\* I believe that it should be * ^X-Spam-Level:.\*

special chars in subject + .procmailrc

2005-06-28 Thread Pál László (Sq.)
Hi, Anyone knows a way to tell spamassassin to handle some special characters (HU, iso and utf) as normal characters in message subject? Currently spa. gives 2.9 points for single ó á or é. I would like to override this setting but only for a specific language. I have the following settings in ef

Re: Spamassassin and external forwarding from /etc/aliases

2005-06-28 Thread Matt Kettler
Evgeni Vachkov wrote: > Hi, > > I am using Spamassassin with Sendmail and procmail; > The /etc/procmailrc is: > > > DROPPRIVS=yes > > :0fw > * < 256000 > | /usr/bin/spamc -f > > :0 > * ^X-Spam-Status: Yes > $HOME/spam > --

Re: User Blacklist Spamassassin Behavior

2005-06-28 Thread Matt Kettler
Paul R. Ganci wrote: > This is somewhat a philosophical question, but I will ask it anyways. > Recent discussions have occurred on this list regarding what > Spamassassin should do with Spam. The recent consensus seems to be that > it is only Spamassassin's job to tag Spam and that some other progr

RE: Very few URIBL hits today. :(

2005-06-28 Thread Chris Santerre
>-Original Message- >From: Bruno Delbono [mailto:[EMAIL PROTECTED] >Sent: Tuesday, June 28, 2005 11:45 AM >To: Chris Santerre; users@spamassassin.apache.org >Subject: Re: Very few URIBL hits today. :( > > >Chris Santerre wrote: >> So for now, we require everyone to add the multi.uribl.com

URIBL love once again!

2005-06-28 Thread Jonathan Nichols
X-Virus-Scanned: by amavisd-new at mailgate.pbp.net X-Spam-Status: Yes, hits=17.323 tagged_above=-999 required=6 tests=[FORGED_RCVD_HELO=0.05, HTML_90_100=0.189, HTML_MESSAGE=0.001, MSGID_FROM_MTA_ID=1.704, RAZOR2_CF_RANGE_51_100=1.485, RAZOR2_CHECK=0.15, RCVD_IN_SORBS_DUL=0.137, URIBL_AB_SURBL

Re: Very few URIBL hits today. :(

2005-06-28 Thread Bruno Delbono
Chris Santerre wrote: So for now, we require everyone to add the multi.uribl.com into their config manually. We have our reasons :) Has anyone seen an increase in Chinese spam lately? We cannot (due to some users) filter out Asian languages but interestingly, in the past 2 days, I've seen an

Re: User Blacklist Spamassassin Behavior

2005-06-28 Thread Kai Schaetzl
Paul R. Ganci wrote on Mon, 27 Jun 2005 23:34:22 -0600: > However, I don't > necessarily agree with the above because while I can add a procmail rule > to handle a specific user's blacklist I can't get back the wasted CPU > cycles which spamassassin expended But that's up to *your* setup. If y

Re: File attachment causes mail not to be tagged

2005-06-28 Thread Jim Maul
Lars E. D. Jensen wrote: Hi list I'm using spamassassin 3.0.3 and when I attach a file with a test spam mail, it get's through? Is this intentional? I'm using simscan with clamav for virus scanning at smtp level and following configure line with qmailadmin: --enable-spam-command='|preline /

File attachment causes mail not to be tagged

2005-06-28 Thread Lars E. D. Jensen
Hi list I'm using spamassassin 3.0.3 and when I attach a file with a test spam mail, it get's through? Is this intentional? I'm using simscan with clamav for virus scanning at smtp level and following configure line with qmailadmin: --enable-spam-command='|preline /usr/bin/spamc -e /usr/bin/mai

RE: Very few URIBL hits today. :(

2005-06-28 Thread Chris Santerre
>URIBL tests are still hitting good here. > >TOP SPAM RULES FIRED >FROM 2005-06-27 03:47:11 TO 2005-06-27 21:28:42 >--- >- >-- >RANKRULE NAME COUNT %OFRULES >%OFMAIL %OFSPAM >---

RE: User Blacklist Spamassassin Behavior

2005-06-28 Thread Chris Santerre
> Why is it not a good idea for Spamassassin to immediately >send to /dev/null a message flagged in somebody's blacklist ASAP ... >i.e. no further processing? Is the only way to handle this via a >procmail recipe? Similar what about a whitelist ... shouldn't >it be sent >on as Ham ASAP ... i.e

Re: WELCOME to users@spamassassin.apache.org

2005-06-28 Thread The Doctor
On Tue, Jun 28, 2005 at 06:38:10PM +0800, liyas_m m wrote: > Hi, > I have installed the lastest version of SpamAssassin. > But it doest seem to stop the spam email that coming in to my > server..please help > How do i check whether my configuration is correct. > Question, are you using a 3rd party

Re: WELCOME to users@spamassassin.apache.org

2005-06-28 Thread Duncan Hill
On Tuesday 28 June 2005 11:38, liyas_m m typed: > Hi, > I have installed the lastest version of SpamAssassin. > But it doest seem to stop the spam email that coming in to my > server..please help > How do i check whether my configuration is correct. You may have misconceptions about how SpamAssass

Re: WELCOME to users@spamassassin.apache.org

2005-06-28 Thread Martin Hepworth
Hi How have you configured SA? What is calling it: procmail, amavis, MailScanner...??? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 liyas_m m wrote: Hi, I have installed the lastest version of SpamAssassin. But it doest seem to stop the spam email t

Re: WELCOME to users@spamassassin.apache.org

2005-06-28 Thread liyas_m m
Hi, I have installed the lastest version of SpamAssassin. But it doest seem to stop the spam email that coming in to my server..please help How do i check whether my configuration is correct. Thanks you Alias

Spamassassin and external forwarding from /etc/aliases

2005-06-28 Thread Evgeni Vachkov
Hi,   I am using Spamassassin with Sendmail and procmail; The /etc/procmailrc is:   DROPPRIVS=yes   :0fw* < 256000| /usr/bin/spamc -f   :0* ^X-Spam-Status: Yes$HOME/spam   Mail delivery to system local m