RE: Little custom rule

2006-02-05 Thread Ruben Cardenal
Yes, the "To" also has the username of the account. I'll give a try to your proposal shortly at work. Thanks Ruben > -Mensaje original- > De: Loren Wilton [mailto:[EMAIL PROTECTED] > Enviado el: lunes, 06 de febrero de 2006 0:40 > Para: users@spamassassin.apache.org > Asunto: Re: Little c

RE: Little custom rule

2006-02-05 Thread Ruben Cardenal
Yeah, all of them match the HTML_IMAGE_ONLY_12 rule, but not the rest of them. As an initial measure I raised the score for that rule, but I understand that's not the solution. Ruben > These are caught quite easily on my home system: > > Content analysis details:   (42.1 points, 5.0 required) >

Re: spam still isn't being caught much.

2006-02-05 Thread Brian S. Meehan
Dirk, I adjusted the rights as follows in /etc/mail/spamassassin: drw-rw-rw- 3 root root 352 Feb 5 17:04 . drwxr-xr-x 3 root root80 Jul 13 2005 .. drw-rw-rw- 2 root users 48 Nov 29 15:15 bayes -rw--- 1 root root60 Feb 5 07:54 bayes.lock -rw-rw-rw- 1 root users 1.2M Feb 4 17

Re: Couple of newbie questions... (repost)

2006-02-05 Thread Philip Prindeville
Matt Kettler wrote: Philip Prindeville wrote: Philip will get no further help from me until he modifies his ACLs. Final-Recipient: rfc822; <[EMAIL PROTECTED]> Action: failed Status: 5.1.0 MAIL FROM: <[EMAIL PROTECTED]> 550 REPLY: 550_5.0.0_This_provider_is_blacklisted Sorry, I don't help p

Re: Little custom rule

2006-02-05 Thread Loren Wilton
> header __LW_BLAH1ALL =~ /\nTo:[^<\n]+<[EMAIL > PROTECTED])[^\n]+.*\nSubject:\s*Fw: > \1\b/i > header __LW_BLAH2ALL =~ /\nSubject:\s*Fw: > (\w+)[^\n]*.*\nTo:[^<\n]+<\1\@/i > metaLW_BLAH__LW_BLAH1 || __LW_BLAH2 > scoreLW_BLAH1 I see those lines wrapped. The first 4 lines

Re: Pump and Dump SARE rules

2006-02-05 Thread Doc Schneider
Chris Santerre wrote: > -Original Message- > From: Doc Schneider [mailto:[EMAIL PROTECTED] > Sent: Friday, January 27, 2006 5:14 PM > To: users@spamassassin.apache.org > Subject: Pump and Dump SARE rules > > > http://rulesemporium.com/rules/70_sare_stocks.cf > > Is the latest

Re: Little custom rule

2006-02-05 Thread Loren Wilton
> mainly composed by an image and its subject is always "FW: blah" where > "blah" is the destination account. This is, if the mail is sent to > [EMAIL PROTECTED] the subject is always "Fw: john" > > Can that be matched by a rule? Depends. Does the "to" also have the username of the account? If

Re: spam still isn't being caught much.

2006-02-05 Thread Loren Wilton
Well, the autolearn=no is pretty obvious from the lines you posted. You seem to have the defualt autolearn scores, which is something like 0.5 for ham and 10 for spam. Most of those messages hit between the .5 and 10, so they won't be autolearned either way. One I saw got 0, and should have been

Re: Little custom rule

2006-02-05 Thread Chris
On Sunday 05 February 2006 2:25 pm, Ruben Cardenal wrote: > Hi, > > In one of my servers (7200 accounts) I'm receiving tons of a spam that > is mainly composed by an image and its subject is always "FW: blah" where > "blah" is the destination account. This is, if the mail is sent to > [EMAIL PROT

Re: spam still isn't being caught much.

2006-02-05 Thread dirk
Brian, what strikes me is that bayes is that - you don't have any network tests - do you run spamd/spamassassin with the '-L'-Option? - bayes doesn't show up either in the results but there seem to be tries to autolearn. My guess would be to check permissions in /etc/mail/ - does the user running

yet another URI_EQUALS FP (Was: false positive on SARE_URI_EQUALS)

2006-02-05 Thread mouss
mouss a écrit : > The SARE_URI_EQUALS triggers on text like this > > ip(foo.example.com) REMOVESPACE =$ip > > with spaces around the '=' sign removed. > > Seems like a bug to me, no? > > The above was posted on 04-01-2006. found another bug/whateveryouprefertonameit: The following 3 l

Little custom rule

2006-02-05 Thread Ruben Cardenal
Hi, In one of my servers (7200 accounts) I'm receiving tons of a spam that is mainly composed by an image and its subject is always "FW: blah" where "blah" is the destination account. This is, if the mail is sent to [EMAIL PROTECTED] the subject is always "Fw: john" Can that be matched by a r

Re: webuserprefs

2006-02-05 Thread jdow
From: "Jonn R Taylor" <[EMAIL PROTECTED]> Hi all, Is some one maintaining the user prefs still??? The last version at sourceforge.net is not usable for 3.1. I rewrote part of it, but was just wondering. It's probably meant as a model. As such it should have comments about what works for var

Re: spam still isn't being caught much.

2006-02-05 Thread Brian S. Meehan
If I use spamassassin -D --lint then it reveals that I'm at 3.0.2 I have posted the x-spam-status from 15 messages at http://www.meehanontheweb.com/xspamstatus.txt (the "software_spam_rule", which looks for 'software' in the subject, is one I wrote in local.cf) Autolearn sometimes says "failed" b

RE: webuserprefs

2006-02-05 Thread Ben Story
John, I took it over to get it to 3.0. I haven't had time to work on it due to work constrains. I'll be more than happy to let you and any others take it over. -- Benjamin Story, CCNA CCDA Network Administrator Dot Foods, Inc www.dotfoods.com IT Helpdesk x2312 or [EMAIL PROTECTED] -Orig

Re: McDonalds

2006-02-05 Thread Gene Heskett
On Sunday 05 February 2006 06:28, jdow wrote: [...] > >> I take it you don't ever eat at Mac's then? > >Actually not. I thought there was a possibility the had a "customer >loyalty" thing with birthdays and all that which you could register >for and get discounts. As it turns out I guess they don't

webuserprefs

2006-02-05 Thread Jonn R Taylor
Hi all, Is some one maintaining the user prefs still??? The last version at sourceforge.net is not usable for 3.1. I rewrote part of it, but was just wondering. Jonn

Re: McDonalds

2006-02-05 Thread jdow
From: "Gene Heskett" <[EMAIL PROTECTED]> On Saturday 04 February 2006 19:53, jdow wrote: From: "Gene Heskett" <[EMAIL PROTECTED]> Has anyone noticed that the SA scores for the "McDONALDS Customer #" spam are getting lower and lower? Another .4 reduction and they'll pass SA here! Out of cur

Re: spamassissin filter very broken

2006-02-05 Thread Chris Purves
On Saturday 04 February 2006 01:10, Jeff Portwine wrote: > Hello... I am a complete newbie with Spamassassin, so I hope you will all > bear with me. The job of fixing our spam filter has fallen on me, as the > person who used to handle everything relating to our mail server recently > left my co

Re: Post your top 10 from sa-stats

2006-02-05 Thread Chris Purves
On Friday 03 February 2006 21:58, John Fleming wrote: > > > > Using the latest file from rules emporium, I made the file execuatable, > > then: > > > > ./sa-stats-1.0.txt -l /var/log/spamassassin/ -f spamd.log > > > > For help: > > ./sa-stats-1.0.txt -h > > Thanks for your response! I am running 3