Re: Spamassassin scoring bad after years of service......

Lorin G. Tremblay wrote: > Hi! > > Was wondering if anyone had any clue to why spamassassin would start to > score spam badly and let almost any spam throught. > > Tehy was no change in the hardware of software, it just started to score > spam really badly, but had workes for atleast a full year

Spamassassin scoring bad after years of service......

Hi! Was wondering if anyone had any clue to why spamassassin would start to score spam badly and let almost any spam throught. Tehy was no change in the hardware of software, it just started to score spam really badly, but had workes for atleast a full year without any glitch! Any pointer would

Re: Basic Question: RE syntax? (was Re: V3.0.2 vs. 2.63 detection rate decrease (?))

Linda A. Walsh wrote: > Have a different question -- and I feel a bit embarrassed to ask this but > it isn't obvious from the manpage. > > What type of Regular Expressions go into the the white/black list entries? > filename type RE's (what I thought more people would be familiar with, but > on fu

Basic Question: RE syntax? (was Re: V3.0.2 vs. 2.63 detection rate decrease (?))

Have a different question -- and I feel a bit embarrassed to ask this but it isn't obvious from the manpage. What type of Regular Expressions go into the the white/black list entries? filename type RE's (what I thought more people would be familiar with, but on further thought, didn't really make

RE: How to discard spam (a return)

Sounds like something I just ran into. Procmail only works if an actual mailbox lives on the server from what I can tell. So, one of the SA list users recommended I try header_checks in Postfix. That worked for me. You need to have a newer version of Postfix that supports header_checks then do so

SpamAssassin perceptron curiousity

I got a bit of curiousity in my brain about neural networks, and someone suggested I take a look at how SpamAssassin trains itself. I have been looking into .../masses and come across some things which set off warning bells. I don't think I have actually found any bugs, but it isn't clear to me w

Messages not being scanned

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 For some reason, some messages are not being scanned. I watch my logs and I can see SA working on a messages, then another comes in and it just get delivered directly. I suspect that it as something to do with a timeout on one of the third-party sc

Re: Too many recipients

Irina wrote: Yes, my opinion they should use a maillist that does the job of sending messages with 20 recipients. "MC" asked if I am sure it is SA and not perl. It could be, especially since we get perl.core. But I am not sure what to check, don't really know how to debug core files :-(((. Ou

Re: FP on forged_hotmail_rcvd with 3.1.0rc2

It may be a problem with that BAY0 in uppercase in the received line. I have the vague and possibly incorrect impression that the bayN boxes are new in hotmail, or at least that the code checking for these changed in the last release or so. Loren - Original Message - From: "Rick

Re: FP on forged_hotmail_rcvd with 3.1.0rc2

jdow wrote: > > > Um, yes, a bug in QMail, I'd say. Intentionally losing information is > not a good thing. It's not loosing anything J. It only does that when the helo and RDNS are an exact match. Otherwise it inserts a "HELO=something.else.com" before the IP inside the (). There's no inform

Re: spamassassin makes a bad rewrite of recipient address

Thomas Manson a écrit : Hi, I'm trying to run spamassassin + postfix on a server that host several domain. When i send a mail to a user (here [EMAIL PROTECTED] ), i can see in the logs that 1/Error : *User unknown in virtual alias table* 2/Mail address is recogni

Re: FP on forged_hotmail_rcvd with 3.1.0rc2

From: "Matt Kettler" <[EMAIL PROTECTED]> Rick Macdougall wrote: Hi, As mentioned in the subject I'm getting an FP hit on forged_hotmail_rcvd with 3.1.0 rc1 and rc2 It looks a bit like FORGED_HOTMAIL_RCVD doesn't like your Received: header format. It seems to be looking for a more sendmail-li

Re: Too many recipients

From: "Fred" <[EMAIL PROTECTED]> I am also attaching the actual message which it fails on. File failingmessage.txt. Does anyone else think it's kind of bad that Symantec is sending a newsletter with it's entire subscribed base in the CC field? I wonder if they have heard of BCC or mailing li

Re: FP on forged_hotmail_rcvd with 3.1.0rc2

Matt Kettler wrote: Rick Macdougall wrote: Hi, As mentioned in the subject I'm getting an FP hit on forged_hotmail_rcvd with 3.1.0 rc1 and rc2 It looks a bit like FORGED_HOTMAIL_RCVD doesn't like your Received: header format. It seems to be looking for a more sendmail-like header. T

How to discard spam (a return)

I was looking through the posts titled "How to discard spam" but I didn't see a solution to something I would like to do as well. Note, I am using Spamassassin on a postfix/courier-imap (debian) server that is in the DMZ. So there are no users on this machine. Looking at Alistair McDonald's

Amavis-new question

Any Amavis-new expert here ? Thanks. Juan Machado Manager, Technology Solutions Division ITOS - Carl Vinson Institute of Government The University of Georgia

RE: Amavis-new question

From: Juan Machado [mailto:[EMAIL PROTECTED] > > Any Amavis-new expert here ? There may be, but you'd be better off asking on the Amavis list. http://lists.sourceforge.net/lists/listinfo/amavis-user Bowie

RE: Too many recipients

Hmmm. I didn't catch the original message, but what version of SA are you running? We run on Windows here and used to have SA crash 2 or 3 times per week on a message with too manu recipients. While I can't be sure that we still get such messages, I haven't had a crash since we upgraded to perl 5.8

Re: FP on forged_hotmail_rcvd with 3.1.0rc2

Rick Macdougall wrote: > Hi, > > As mentioned in the subject I'm getting an FP hit on forged_hotmail_rcvd > with 3.1.0 rc1 and rc2 It looks a bit like FORGED_HOTMAIL_RCVD doesn't like your Received: header format. It seems to be looking for a more sendmail-like header. That smells like a bug to

Re: Exclude address from AWL processing?

David Gibbs wrote: > Folks: > > Does anyone know if there is a way to cause specific email addresses to > be excluded from AWL processing? > > I run a number of mailing lists using mailman ... and I get a lot of > notification messages from the mailman-owner address. I also get a > rather signif

Exclude address from AWL processing?

Folks: Does anyone know if there is a way to cause specific email addresses to be excluded from AWL processing? I run a number of mailing lists using mailman ... and I get a lot of notification messages from the mailman-owner address. I also get a rather significant amount of spam addressed to t

FP on forged_hotmail_rcvd with 3.1.0rc2

Hi, As mentioned in the subject I'm getting an FP hit on forged_hotmail_rcvd with 3.1.0 rc1 and rc2 Munged message below. eceived: from bay0-smtp04.bay0.hotmail.com (65.54.234.157) by mta001.aei.ca with SMTP; 1 Sep 2005 17:00:09 - Message-ID: <[EMAIL PROTECTED]> X-Originating-IP: [66.36.

Re: Too many recipients

Yes, my opinion they should use a maillist that does the job of sending messages with 20 recipients. "MC" asked if I am sure it is SA and not perl. It could be, especially since we get perl.core. But I am not sure what to check, don't really know how to debug core files :-(((. Our perl version

RE: Too many recipients

Fred wrote: >> I am also attaching the actual message which it fails on. File >> failingmessage.txt. > > Does anyone else think it's kind of bad that Symantec is sending a > newsletter with it's entire subscribed base in the CC field? I > wonder if they have heard of BCC or mailing list software

Re: Too many recipients

> I am also attaching the actual message which it fails on. File > failingmessage.txt. Does anyone else think it's kind of bad that Symantec is sending a newsletter with it's entire subscribed base in the CC field? I wonder if they have heard of BCC or mailing list software?

Re: Empty/trusted href's in spam

On Thu, Sep 01, 2005 at 01:56:02PM +0200, Sander Holthaus - Orange XL wrote: > Today, I noticed a spam-mail in my backlog which had about 10 empty href="<>"> scattered across it. Is SpamAssassin > protected against this sort of abuse? I guess it depends what you mean by "protected"? There is cod

Re: detection rate decrease (?)

Sure, send it to me as an attachment. Loren - Original Message - From: "Juan Machado" <[EMAIL PROTECTED]> To: Sent: Thursday, September 01, 2005 5:56 AM Subject: detection rate decrease (?) I have no idea what is happening to my SA installation. I even installed on another ser

detection rate decrease (?)

I have no idea what is happening to my SA installation. I even installed on another server and I'm getting the same results. Can I send somebody a piece of mail that is getting only 4.458 hits (it should get more than that! ) Please help me ! Thanks. Juan Machado Manager, Technology Solutio

Empty/trusted href's in spam

Today, I noticed a spam-mail in my backlog which had about 10 empty scattered across it. Is SpamAssassin protected against this sort of abuse? (I take those href are either to fool SpamAssassin, do unnecessary DNS/Blacklist lookups or DoS installations with have ClamAV installed with the op

Re: AWL / BAYES_SEEN MySQL

can someone tell me a nice way to prune the bayes_seen database (in MySQL)or even point me to a place where i can read more about it. Ronan

Re: Delete an address from the AWL?

Sounds like something that should be adjusted in the documentation Duncan posted to the wiki! Loren - Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> To: "Bowie Bailey" <[EMAIL PROTECTED]> Cc: "Spamassassin List (E-mail)" Sent: Wednesday, August 31, 2005 12:11 PM Sub

spamassassin makes a bad rewrite of recipient address

Hi,   I'm trying to run spamassassin + postfix on a server that host several domain.   When i send a mail to a user (here [EMAIL PROTECTED]), i can see in the logs that 1/Error : User unknown in virtual alias table 2/Mail address is recognised :maps_find: virtual_alias_maps: hash:/etc/postfix/virt

Re: misfire of FORGED_YAHOO_RCVD

Matt Kettler wrote: Matt Kettler wrote: Ryan Castellucci wrote: I'm running spamassassin 3.0.2 on debian sarge, and this message getts flagged with FORGED_YAHOO_RCVD and it's a legit message from yahoo. http://ryanc.org/junk/yahoo_fp.msg.gz Perhaps you should consider running 3.0.4, whi