How to check if content is spam or not?

hi Users on a site submit content [resumes, classifieds etc]. The data needs to be checked for Spam. Data is stored in mysql. When the user submits the data, how can I route it thru Spamassassin and accept the data only if it is clean? This has nothing to do with email. regards, -- B.G. Mah

Re: Spamd dies after tcp timeout

Sander Holthaus - Orange XL wrote: Next to that, I get quite a few Pyzor / Alarm erros (for about 5% of all mail). Never had any of such problems with SpamAssassin 3.0.x or 2.xx The error has actually always been present. We just didn't report it before. If you were to call Pyzor independe

Re: trusted_networks use

NFN Smith wrote: Thanks for the ongoing feedback Bowie Bailey wrote: Now that you've made those changes, post the headers from another example email so we can see if anything changed. See below. Also, you may want to save your email into a file and manually run it through SA to see

Re: trusted_networks use

Thanks for the ongoing feedback Bowie Bailey wrote: Now that you've made those changes, post the headers from another example email so we can see if anything changed. See below. Also, you may want to save your email into a file and manually run it through SA to see what happens. Just

Re: trusted_networks use

Alan Premselaar wrote: NFN Smith wrote: Following up on my own post. I'm still thrashing, and not getting any difference in results. ...snip... Sorry, I just have to ask. Since you're using MIMEDefang... you are remembering to restart (or reload) mimedefang after making your changes, r

Re: RDJ newbie prob

- Original Message - From: "Chris Thielen" <[EMAIL PROTECTED]> To: "John Fleming" <[EMAIL PROTECTED]> Cc: "Spamassassin" Sent: Tuesday, September 27, 2005 11:23 AM Subject: Re: RDJ newbie prob John Fleming wrote: Thanks, Chris. I'm sure this is something trivial - I've had it worki

Re: Suspected-Spam URL

From: "Matthew Yette" <[EMAIL PROTECTED]> The URL (or email address) that you input right when you start to install SA (perl Makefile.PL): What email address or URL should be used in the suspected-spam report text for users who want more information on your filter installation? (In particular,

Why is this point 2 getting blocked

Hi everyone, Trying to figure out why this is getting rejected, I had to whitelist the from address Subject: [Fwd: account] Date: Tue, 27 Sep 2005 16:39:41 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO8859-1 Content-Transfer-Encoding: 7bit X-Spam-Score: 0.2 (/) X-Spam-Report: Spa

RE: 50_scores.cf warnings (was: Whitelisted, but marked as spam)

Thanks for all the help. I got it working again with a 3.0.3 package 50_scores.cf, which was the latest 3.0 version I could find on apache.org's archives. It lints without problems, so I guess this one is okay? Cheers, Thijs -Oorspronkelijk bericht- Van: Rosenbaum, Larry M. [mailto:[EMA

Re: Suspected-Spam URL

On Tue, Sep 27, 2005 at 03:34:41PM -0400, Matthew Yette wrote: > What email address or URL should be used in the suspected-spam report > text for users who want more information on your filter installation? > (In particular, ISPs should change this to a local Postmaster contact) > default text: [th

RE: 50_scores.cf warnings (was: Whitelisted, but marked as spam)

> > From: Thijs Koetsier | Exception IT > [mailto:[EMAIL PROTECTED] > > > > As a matter of fact I _really_ deleted the file a few days ago, so I > just > > downloaded the spamassassin .zip again and uploaded the extracted > > 50_scores.cf to my server. > > > ... > > X-Spam-Checker-Version: SpamAss

Suspected-Spam URL

The URL (or email address) that you input right when you start to install SA (perl Makefile.PL): What email address or URL should be used in the suspected-spam report text for users who want more information on your filter installation? (In particular, ISPs should change this to a local Postmaster

RE: 50_scores.cf warnings (was: Whitelisted, but marked as spam)

> From: Thijs Koetsier | Exception IT [mailto:[EMAIL PROTECTED] > > As a matter of fact I _really_ deleted the file a few days ago, so I just > downloaded the spamassassin .zip again and uploaded the extracted > 50_scores.cf to my server. > ... > X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-0

Spamd dies after tcp timeout

Since a few days, I been having more serious problems with SpamAssassin 3.10. It just dies after the following two messages in the error-log:   Sep 27 15:16:32 OrangeXL4 spamd[63730]: prefork: child states: IISep 27 15:18:12 OrangeXL4 spamd[63730]: tcp timeout at /usr/local/lib/perl5/site_p

RE: 50_scores.cf warnings (was: Whitelisted, but marked as spam)

As a matter of fact I _really_ deleted the file a few days ago, so I just downloaded the spamassassin .zip again and uploaded the extracted 50_scores.cf to my server. -Oorspronkelijk bericht- Van: Fred [mailto:[EMAIL PROTECTED] Verzonden: dinsdag 27 september 2005 21:12 Aan: [EMAIL PROTE

Re: 50_scores.cf warnings (was: Whitelisted, but marked as spam)

Thijs Koetsier | Exception IT wrote: > So, now that I've replaced by 50_scores.cf (thanks Fred), I'm getting > the 150 warnings back. They're all of the type: Redownload the spamassassin package and extract that file again. It sounds like you have an older version of that file.

50_scores.cf warnings (was: Whitelisted, but marked as spam)

So, now that I've replaced by 50_scores.cf (thanks Fred), I'm getting the 150 warnings back. They're all of the type: warning: score set for non-existent rule ADVANCE_FEE_4 and correlate to the scoring rules in the 50_scores.cf file, such as score ADVANCE_FEE_4 3.024 3.040 3.515 3.727 Should I

Re: Whitelisted, but marked as spam

Bret Miller wrote: > You would think that whitelist should be given a lower number than > -1.0. Otherwise, how does it counteract the many other rule additons. > > How about adding: > score USER_IN_WHITELIST -20 > score USER_IN_WHITELIST_TO -20 > to your local.cf so that it does actually "whitelist

RE: Whitelisted, but marked as spam

You would think that whitelist should be given a lower number than -1.0. Otherwise, how does it counteract the many other rule additons. How about adding: score USER_IN_WHITELIST -20 score USER_IN_WHITELIST_TO -20 to your local.cf so that it does actually "whitelist". Bret > -Original Messa

RE: Whitelisted, but marked as spam

Ehrm, yeah... Do you remember my thread some days earlier where Bob mentioned to remove any old .cf files who gave troubles linting? I guess you found the solution for my problem... Thanks! Sorry; I'm kinda new to this... Cheers, Thijs -Oorspronkelijk bericht- Van: Fred [mailto:[EMAIL P

RE: Whitelisted, but marked as spam

In addition to my mail just send; This is the e-mail recieved by the user. Shouldn't "user_in_whitelist" to score -100 and "user_in_all_spam_to" be also at least more than -1.0? Spam detection software, running on the system "zoltar.exception.nl", has identified this incoming email as possible sp

Re: Whitelisted, but marked as spam

Thijs Koetsier | Exception IT wrote: > X-Spam-Status: Yes, score=5.4 required=5.0 > tests=AWL,BAYES_00,HTML_60_70, > HTML_BADTAG_00_10,HTML_MESSAGE,HTML_NONELEMENT_00_10, > HTML_TAG_EXIST_MARQUEE,HTML_TAG_EXIST_TBODY,MIME_BOUND_NEXTPART, > MIME_BOUND_RKFINDY,MIME_HTML_MOSTLY,MPART_ALT_DIFF, > USER_

Whitelisted, but marked as spam

Hi all, I'm having messages marked as spam, for users who are in my whitelist. In /etc/mail/spamassasin/whitelist.cf are these lines (among others): all_spam_to [EMAIL PROTECTED] whitelist_to[EMAIL PROTECTED] whitelist_to[EMAIL PROTECTED] Whitelist_from

Re: tests = none

Hallo und Guten Abend Theo, Heute (am 27.09.2005 - 18:04 Uhr) schriebst Du: > On Tue, Sep 27, 2005 at 05:45:04PM +0200, Jim Knuth wrote: >> The headers shown the follow >> >> X-Spam-Status: No, score=0 tagged_above=-.9 required=4 tests=[none] >> X-Spam-Score: 0 >> >> Or should I arrange

RE: Personal Rule

From: Mike Spamassassin [mailto:[EMAIL PROTECTED] > > This is working pretty well so far. > Thanks for you help with this. > > I would like to enhance it to cater for the situations where I am > not in the "To" address (e.g. I am in CC: to Bcc: or the "mailing > list" situation. > > How would I

Re: RDJ newbie prob

John Fleming wrote: Thanks, Chris. I'm sure this is something trivial - I've had it working in the past! Here's my /etc/rulesdujour/config John, I think this is simply due to the TRUSTED_RULESETS= being on a separate line. You have: TRUSTED_RULESETS= "TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0

Re: RDJ newbie prob

Thanks, Chris. I'm sure this is something trivial - I've had it working in the past! Here's my /etc/rulesdujour/config TRUSTED_RULESETS= "TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2 BLACKLIST BLACKLIST_URI RANDOMVAL BOGUSVIRUS SARE_ADULT SARE_FRAUD SARE_BML SARE_RATW

Re: tests = none

On Tue, Sep 27, 2005 at 05:45:04PM +0200, Jim Knuth wrote: > The headers shown the follow > > X-Spam-Status: No, score=0 tagged_above=-.9 required=4 tests=[none] > X-Spam-Score: 0 > > Or should I arrange the question of the amavis list? It depends, is that every message (then yes, ask the am

tests = none

Hallo und Guten Tag spamassassin-users, I have a new server with Debian 3.1 and SA 3.1.0 and amavisd-new 2.3.3. I am surprised, why no checks is done. The headers shown the follow X-Spam-Status: No, score=0 tagged_above=-.9 required=4 tests=[none] X-Spam-Score: 0 Or should I arrange the que

Re: Spamassassin 2.63/dcc-1.3.15 issue

At 11:01 AM 9/27/2005, Shelley Waltz wrote: and it now works. I set it low for testing. DCC is not called at all if this is set to zero. Correct. *Any* rule with an explicit 0 score will not be evaluated at all by SA. This winds up being a quick and easy way to disable a DNSBL if it become

Re: Problem with autolearn after update

On Dienstag, 27. September 2005 17:00 Muenz, Michael wrote: > Will I have to backup > and restore it manually? I don't want to loose the db ... Should be no problem, but always make a backup anyway :-) db_dump -f where_to_store1 bayes_db_seen db_dump -f where_to_store2 bayes_db_toks mfg zmi --

Re: Problem with autolearn after update

> Because autolearning as spam is not as simple as 28.2 >10. > > 1) Autolearning is NOT determined by the normal message score. It's > determined by the score it would have gotten if bayes was disabled. This > includes changing the scoreset, so you have to re-add everything. The > difference c

Re: Spamassassin 2.63/dcc-1.3.15 issue

just figured it out ... I had also in local.cf ... score DCC_CHECK 0.000 I changed it to score DCC_CHECK 0.500 and it now works. I set it low for testing. DCC is not called at all if this is set to zero. Shelley Waltz said: > I have installed dcc-1.3.15 and added public servers to the map, op

Spamassassin 2.63/dcc-1.3.15 issue

I have installed dcc-1.3.15 and added public servers to the map, opened the firewall udp port and tested dccproc and it works fine, reporting back the server id, and body amd fuz scores. I added the following to /etc/mail/spamassassin/local.cf add_header all DCC _DCCB_: _DCCR_ use_dcc 1 dcc_add_h

Re: Rules on the webpage

Matt Kettler wrote: At 08:34 PM 9/26/2005, Rick Macdougall wrote: Turns out it was the completewhois.com dns lookups failing with input/output errors, timeouts, etc but a search on the tests page didn't show any whois tests (I finally tracked them down with a spamassassin -D and a grep throu

Re: Rules on the webpage

At 08:34 PM 9/26/2005, Rick Macdougall wrote: Hi, Are the rules on the webpage going to be updated ? Eventualy, yes.. However, I'd never suggest relying on the "tests" page on the SA website to mean anything. Sometimes it gets updated before a new release, sometimes after. I had a weird p

Re: Problem with autolearn after update

At 05:27 AM 9/27/2005, Muenz, Michael wrote: Dear List, I was running SA 3.0.4 with amavisd-new 2.2.1 without any problems. To use SA 3.1.0 I've updated my amavis to 2.3.3 and now (with 3.0.4) I see therse lines in my logs: Sep 27 11:14:38 sns amavis[14103]: (14103-01-11) SPAM, <[EMAIL PROTECTE

Pb with 3.1 and URIDNSBL

Hi, on a fresh 3.1.0 running under perl 5.8.7, I get -8< Argument "127.0.0.3" isn't numeric in bitwise or (|) at /usr/local/perl-5.8.7/lib/site_perl/5.8.7/Mail/SpamAssassin/Plugin/URIDNSBL.pm line 614 -8< I run my own blacklist, for that reason I have in /etc/mail/spamassassin/lo

Re: enabable x-spam-report in all emails ham or spam

From: "Keith Amling" <[EMAIL PROTECTED]> Fascinating the man page seems to indicate this is not one of the options for add_header. They mention other headers but not "Report". I guess you found a cheat. What is not one of the options? 'add_header', 'all', and '_REPORT_' are all mentioned direc

Re: Error and slowness

> > Sep 26 21:09:10 delfin spamd[21260]: Can't locate > > Sys/Hostname/Long.pm > > Maybe that module is missing? Install with > cpan -i Sys::Hostname::Long Thanks Michael! Installed the module, and until now, one hour running without this error. Thanks and saludos, jose. -- Jose Usoz /

Problem with autolearn after update

Dear List, I was running SA 3.0.4 with amavisd-new 2.2.1 without any problems. To use SA 3.1.0 I've updated my amavis to 2.3.3 and now (with 3.0.4) I see therse lines in my logs: Sep 27 11:14:38 sns amavis[14103]: (14103-01-11) SPAM, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, Yes, score=28.285 t

RE: best of RBLs without the FPs

> Sorry, your subsequent emails answered this -- SA seems to be > the other tool that pushes a message into the greylist zone. > With these two (two right? > not any more?) tools driving your greylisting, ... Some other things like SPF fail or softfail too. (Too many people try to "BLOCK" on S

Re: Personal Rule

> I would like to enhance it to cater for the situations where I am not in > the "To" address (e.g. I am in CC: to Bcc: or the "mailing list" > situation. BCC you aren't going to get, by definition. It isn't there to get. To check in both to and cc, use ToCc instead of To as the header to test.

RE: Personal Rule

This is working pretty well so far. Thanks for you help with this. I would like to enhance it to cater for the situations where I am not in the "To" address (e.g. I am in CC: to Bcc: or the "mailing list" situation. How would I do a test of the form: If To: email address contains ernstoff.net th

Re: Error and slowness

On Montag, 26. September 2005 21:18 jose usoz wrote: > Sep 26 21:09:10 delfin spamd[21260]: Can't locate > Sys/Hostname/Long.pm Maybe that module is missing? Install with cpan -i Sys::Hostname::Long mfg zmi -- // Michael Monnerie, Ing.BSc --- it-management Michael Monnerie // http://zmi.at

Re: Hotmail on sorbs?!? (and eliminating false positives)

On Dienstag, 27. September 2005 07:51 email builder wrote: > The above can probably be done in Postfix with one or two restriction > classes. > > http://www.postfix.org/postconf.5.html#smtpd_restriction_classes > http://www.postfix.org/RESTRICTION_CLASS_README.html > > I'd be curious to hear if any