Re: ALL TRUSTED - not natted - getting negative scored spam

Terry wrote: > I am not on a natted machine but it is firewalled. So, I set > trusted_networks to my local machine IP because that's really the only > one I trust. I am still, after setting this, getting spams with > negative scores. What am I missing? > > Are the negative scoring messages st

ALL TRUSTED - not natted - getting negative scored spam

I am not on a natted machine but it is firewalled. So, I set trusted_networks to my local machine IP because that's really the only one I trust. I am still, after setting this, getting spams with negative scores. What am I missing?

Re: 3.1.1 Upgrade Problems

On Fri, Mar 17, 2006 at 09:30:47PM -0800, Dan Kohn wrote: > OK, but it would be really nice if sa-update failing didn't kill the > spamassassin installation. Feel free to open a BZ ticket about it. I'm not sure what/if things can be changed (the directory is created for temp usage during proces

Re: 3.1.1 Upgrade Problems

OK, but it would be really nice if sa-update failing didn't kill the spamassassin installation. - dan -- Dan Kohn On Mar 17, 2006, at 9:26 PM, Theo Van Dinter wrote: On Fri, Mar 17, 2006 at 08:18:35PM -0800, Dan Kohn wrote:

Re: 3.1.1 Upgrade Problems

On Fri, Mar 17, 2006 at 08:18:35PM -0800, Dan Kohn wrote: > Anything else to try? Nothing comes to mind. It looks like a bug in IO::Zlib or perl on your platform. Anyone else on FreeBSD having simliar problems? > [65993] dbg: channel: populating temp content file > [65993] dbg: gpg: populating

Re: 3.1.1 Upgrade Problems

[emlis:~/src/Mail-SpamAssassin-3.1.0]$ perl -MIO::Zlib -e 'print $IO::Zlib::VERSION,"\n"' 1.01 I then installed 1.04 off of $HOME and got the following output from sa-update. This also broke SpamAssassin again until I deleted $HOME/ var/spamassassin. I definitely think you're going to need

Re: This isn't being tagged

Payal Rathod wrote: On Fri, Mar 17, 2006 at 02:21:56PM -0500, Dimitri Yioulos wrote: All, I'm happy to say that with your help, and some very minor tweaking, the "Pharama" mail is now tagged in my system as high scoring spam, and dealt with accordingly ("bad pharma spam, bad!"). Still lo

Re: 3.1.1 Upgrade Problems

On Fri, Mar 17, 2006 at 05:57:48PM -0800, Dan Kohn wrote: > [92376] dbg: channel: file verification passed, installing update > [92376] dbg: channel: cleaning out update directory > Not a GLOB reference at /usr/local/lib/perl5/site_perl/5.8.0/IO/ > Zlib.pm line 317. Hrm. What version of IO::Zlib

Re: 3.1.1 Upgrade Problems

Thanks, Theo. Here's 3.1.1 reinstalled and then a bug from sa- update. However, I got 3.1.1 working again with 'rm -rf var' (which only had spamassassin stuff in it). I would consider, for SA 3.2, not creating the var directories until after the sa-update has succeeded, as I suspect I won

Re: This isn't being tagged

On Fri, Mar 17, 2006 at 02:21:56PM -0500, Dimitri Yioulos wrote: > All, > > I'm happy to say that with your help, and some very minor tweaking, the > "Pharama" mail is now tagged in my system as high scoring spam, and dealt > with accordingly ("bad pharma spam, bad!"). Still looking forward

Re: 3.1.1 Upgrade Problems

On Fri, Mar 17, 2006 at 05:34:02PM -0800, Dan Kohn wrote: > Guys, I'm seeing similar problems with my non-root install on a > FreeBSD hosting account, where prefix=$HOME. With SpamAssassin > 3.1.1, I only get this header added: Jason's problem, as far as I can tell, was related to permission

Re: 3.1.1 Upgrade Problems

[Frustrating. I had to resend this message after removing all GTUBE strings. - dan *] Guys, I'm seeing similar problems with my non-root install on a FreeBSD hosting account, where prefix=$HOME. With SpamAssassin 3.1.1, I only get this header added: X-Spam-Checker-Version: SpamAssassin

Re: razor-whitelist never works

On Fri, 2006-03-17 at 11:34, Matt Rossiter wrote: > Does anyone have some suggestions for me to try? You'll probably have better luck on the razor-users list: https://lists.sourceforge.net/lists/listinfo/razor-users -Roger

Re: sa-update and channels

On Fri, Mar 17, 2006 at 11:15:44AM -0600, Chris Thielen wrote: > That said, my opinion is that YES indeed this is a replacement for RDJ > in at least the SARE. I'm sorta waiting for the sa-update framework to > gel a bit more before we tackle getting the SARE rules published as > channels. FWI

razor-whitelist never works

Hi All,   Hopefully this question isn’t too “off topic”.   I have a mail server running FreeBSD 6.0 with SpamAssassin 3.1.0, MIMEDefang 2.54, razor-agents-2.77.   I did ‘razor-admin -d -create -home=/etc/razor’ ‘razor-admin -register -home=/etc/razor’   Created razor-whitelist in

RE: Scan only if SA is available on a high-load MTA server

Pablo Alsina wrote: > On 3/17/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: > > Pablo Alsina wrote: > > > I wish to have all local mail scanned, but if there is a problem > > > with SA, or SA is taking too long, have the message delivered > > > locally without being scanned. I do not want maildrop to

Re: This isn't being tagged

All, I'm happy to say that with your help, and some very minor tweaking, the "Pharama" mail is now tagged in my system as high scoring spam, and dealt with accordingly ("bad pharma spam, bad!"). Still looking forward to new rules that Loren spoke earlier, though. Thanks so much. Dimitri

Re: on the value of SPF records

Mathias Homann wrote: One day, spamassassin seems to think that this newsletter, send to my private email, is spam. This leads to me running it through spamassassin in debug mode... and what do I see... The guy at $SOMEOTHERCOMPANY has set up SPF records for their systems as well... and has NOT

RE: Scan only if SA is available on a high-load MTA server

Pablo Alsina wrote: > Hi > > I'm having some troubles on a high-traffic MTA. The mailserver runs > sendmail and maildrop, configured to scan messages during the local > delivery, using spamc, against a different server running spamd. > > I wish to have all local mail scanned, but if there is a pr

RE: X-Spam-Relay-Country header always empty

M>-Original Message- M>From: Scott Russell [mailto:[EMAIL PROTECTED] M>Sent: 13 March 2006 18:41 M>To: users@spamassassin.apache.org M>Subject: X-Spam-Relay-Country header always empty M> M>Greets. M> M>I've seen this under both SA 3.1.0 and 3.1.1 and I have M>IP::Country 2.20 installed.

Scan only if SA is available on a high-load MTA server

Hi I'm having some troubles on a high-traffic MTA. The mailserver runs sendmail and maildrop, configured to scan messages during the local delivery, using spamc, against a different server running spamd. I wish to have all local mail scanned, but if there is a problem with SA, or SA is taking too

Re: sa-update and channels

Michael Monnerie wrote: On Mittwoch, 15. März 2006 19:32 Theo Van Dinter wrote: A channel is essentially a set of rules published by some organization, which is accessed and downloaded via dns/http. ie: Would that be a possible replacement for RulesDuJour? I love that script, but not

Re: blacklist not working

[EMAIL PROTECTED] wrote: > It's in the configuration screens. It's the second screen under cpanel. > Do you mean to say that I cannot enter an IP address into the > "blacklist_from" boxes? > No, because blacklist_from will blacklist email with matching text in the From: header. The IP address w

Re: This isn't being tagged

On 03/17/2006 08:57 PM, Bowie Bailey wrote: > Warren Howard wrote: >> Same problem for me (using Spamassassin 3.1.0). I keep feeding >> sa-learn the "Re: PharamaCFcy news", always the same style of message >> but each time slightly different, the drugs and prices are on the >> left and rubbish like

Re: This isn't being tagged

These things are being properly detected for me. Here's the headers from one I received this morning: -- Return-path: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on titan.sthomas.net X-Spam-Level: *** X-Spam-Statu

Re: This isn't being tagged

Thank you! On Friday March 17 2006 10:47 am, Randal, Phil wrote: > http://www.uribl.com/usage.shtml > > > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -Original Message- > > From: Dimitri Yioulos [mailto:[EMAIL PROTECTED] > > Sent: 17 March 2006 15:38 >

RE: This isn't being tagged

http://www.uribl.com/usage.shtml Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: Dimitri Yioulos [mailto:[EMAIL PROTECTED] > Sent: 17 March 2006 15:38 > To: users@spamassassin.apache.org > Subject: Re: This isn't being tagged > > I wan

Re: This isn't being tagged

I want to bottom-post, but ... Martin, Forgive my ignorance, but what is URI_BLACK? Where can I get info on it? How do I implement it. Thanks. Dimitri On Friday March 17 2006 10:25 am, Martin Hepworth wrote: > And once again the URI_BLACK shows how useful it can be by being ahead of > the o

RE: This isn't being tagged

I've just checked and whilst that score might seem high, it's causing no false positives here. Of the last 98,932 emails to flow through our gateway, 5,265 hit HC_NEWS, of which 1,328 were ham (25.2%) and 3,937 (74.8%) spam. header HC_NEWS Subject =~ /\bnews/i describe HC_NEWSNew

RE: This isn't being tagged

Warren Howard wrote: > > Same problem for me (using Spamassassin 3.1.0). I keep feeding > sa-learn the "Re: PharamaCFcy news", always the same style of message > but each time slightly different, the drugs and prices are on the > left and rubbish like this dacgvishJybzjjt is on the right. The spa

RE: This isn't being tagged

And once again the URI_BLACK shows how useful it can be by being ahead of the other URI-RBLS. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Randal, Phil [mailto:[EMAIL PROTECTED] > Sent: 17 March 2006 15:04 > To: user

Re: This isn't being tagged

Continuation posted at bottom On Friday March 17 2006 10:03 am, Randal, Phil wrote: > Hmm, > > We're blocking loads of these: > > 2.91 DCC_CHECK Listed in DCC > (http://rhyolite.com/anti-spam/dcc/) > 2.00 HC_NEWS News of new spam > 0.10 HTML_70_80 Message is 70% to 80% HTML > 0.10 H

RE: This isn't being tagged

Hmm, We're blocking loads of these: 2.91DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/) 2.00HC_NEWS News of new spam 0.10HTML_70_80 Message is 70% to 80% HTML 0.10HTML_FONTCOLOR_RED HTML font color is red 0.10HTML_FONTCOLOR_UNSAFE HTML font color

Re: This isn't being tagged

On Friday March 17 2006 9:49 am, Loren Wilton wrote: > Don't know why you are getting bayes_00, but we are working on some rules > for these things that are looking pretty good. Should be available fairly > soon. > > Loren Thanks, Lauren. Dimitri -- This message has been scanned for vi

Re: This isn't being tagged

Don't know why you are getting bayes_00, but we are working on some rules for these things that are looking pretty good. Should be available fairly soon. Loren

Re: This isn't being tagged

On 03/17/2006 06:59 PM, Dimitri Yioulos wrote: > Hello to all. > > I apologize for earlier posts on this subject; they were tagged by the list > because I included the body of the spam which is being delivered to my users! > > So, there's hope that I can quash this. I searched the archive, bu

This isn't being tagged

Hello to all. I apologize for earlier posts on this subject; they were tagged by the list because I included the body of the spam which is being delivered to my users! So, there's hope that I can quash this. I searched the archive, but didn't find anything (my search criteria may have been wr

Re: on the value of SPF records (was: Re: Importance of SMTP gateway reverse lookup domain?)

On Freitag, 17. März 2006 00:25 Mathias Homann wrote: > One day, i get a ticket in our ticket system, which sums up as "we > need to have spf records, and we need them now, because that guy at > $SOMEOTHERCOMPANY says so, so that our newsletter is less likely to > get flagged as spam." > > When you

Re: SA 3.11 - What's New?

From: "Philip Prindeville" <[EMAIL PROTECTED]> # spamassassin --lint -t -x -Drulesrun=255,enabled=255 < paypal3.eml ^ for one thing you missed a space here. [5382] warn: config: warning: score set for non-existent rule UNWANTED_LANGUAGE_BODY [5382] warn: lint: 1

Re: on the value of SPF records (was: Re: Importance of SMTP gateway reverse lookup domain?)

From: "Mathias Homann" <[EMAIL PROTECTED]> ... bye, MH yes, i DO know that this list is NOT the scary evil monastery. but it fits into the discussion... sort of... Um, er, , , aren't monasteries for "boys"? I better get outa here FAST before someone notices. >{

Re: blacklist not working

It may be that the best shot is a custom rule for the particular header item you want to catch, a "Received:" header I suspect. header BAD_IP1Received =~ /ip1\.ip2\.ip3\.ip4/ describe BAD_IP1 Another bad IP. score BAD_IP1 20 That sort of a rule should do it. The describe line is entirel