Re: Training sa-learn from Outlook.

2006-09-20 Thread Loren Wilton
This sort of question gets asked a lot and there are various answers.   The most common solution is to set up some public folders that are really IMAP folders, probably on your main mail machine, but that doesn't really matter much.  Then as you suggest, run a cron job to pull the mail from th

Re: R: Integrating SpamAssasin 3.x with BlackList

2006-09-20 Thread Matt Kettler
Lists wrote: > Hi Matt! > > Thank you for your kind interest! > > I am studying your good answer... Just a question if you can... > > -- > >From there, Spamhaus is already in spamassassin, there are rules for > both SBL and XBL. > > CBL's data is aggregated into XBL, so that

Training sa-learn from Outlook.

2006-09-20 Thread Andrew van Tilburg
I imagine the following questions have been asked a lot, but I haven’t seen the exact answers I’m after yet so here goes.   We are running qmail, vpopmail, spamassassin, smb shares using samba, among other things, on freebsd. I want to set up public ham and spam folders such that our user

Re: POPAuth plugin

2006-09-20 Thread Daryl C. W. O'Shea
On 9/21/2006 12:46 AM, Olivier Nicole wrote: Hi, I just found POPAuth plugin, it sound very nice and is exactelly what I was looking for. I'm looking for Rescue Me season 1 and 2 on DVD! :) http://www.amazon.com/o/registry/2UUNX1ZJ2Y6S4 My only question is, when running spamd, whis is the

compile error at x86_64

2006-09-20 Thread Monty Ree
Hello, I have used spamassassin well other systems(intel based) But I can't install x86_64 based system because of compile problem.. linux kernel 2.6.x (centos 3.x or 4.x) CPU : AMD opteron perl : v5.8.5 or v5.8.0 All required perl modules installed I guess. spamassassin 3.1.4 or 3.1.5 spamas

POPAuth plugin

2006-09-20 Thread Olivier Nicole
Hi, I just found POPAuth plugin, it sound very nice and is exactelly what I was looking for. My only question is, when running spamd, whis is the 'POPAuth' or 'POP-before-SMTP' access database hash file being read? Unsually IP addresses are cominga nd going into the DB, so it should be re-read a

Re: Problem with user_white_list

2006-09-20 Thread jdow
From: "Salatiel Filho" <[EMAIL PROTECTED]> To: "John D. Hardin" <[EMAIL PROTECTED]> The comment still applies. It's trivially easy to forge mail such that it appears to come from [EMAIL PROTECTED] Take that out of the whitelist and SA will stop whitelisting forgeries. Well , i think i found w

Re: Problem with user_white_list

2006-09-20 Thread Salatiel Filho
On 9/20/06, John D. Hardin <[EMAIL PROTECTED]> wrote: On Wed, 20 Sep 2006, Salatiel Filho wrote:> On 9/20/06, Daryl C. W. O'Shea <[EMAIL PROTECTED]> wrote:> >> > On 9/20/2006 8:00 PM, Salatiel Filho wrote: > > > I'm having  troubles with spamassassin ,> > >> > > Here it is the spam header:> >> > >

Re: Problem with user_white_list

2006-09-20 Thread John D. Hardin
On Wed, 20 Sep 2006, Salatiel Filho wrote: > On 9/20/06, Daryl C. W. O'Shea <[EMAIL PROTECTED]> wrote: > > > > On 9/20/2006 8:00 PM, Salatiel Filho wrote: > > > I'm having troubles with spamassassin , > > > > > > Here it is the spam header: > > > > > Return-Path: <[EMAIL PROTECTED]> > > > > > > W

Re: Problem with user_white_list

2006-09-20 Thread Salatiel Filho
On 9/20/06, Daryl C. W. O'Shea <[EMAIL PROTECTED]> wrote: On 9/20/2006 8:00 PM, Salatiel Filho wrote:> I'm having  troubles with spamassassin ,>> Here it is the spam header:> Return-Path: <[EMAIL PROTECTED] >> Probably  USER_IN_WHITELIST>>  is adding -100 to the total sum. But i have no idea why.>

Re: Problem with user_white_list

2006-09-20 Thread Daryl C. W. O'Shea
On 9/20/2006 8:00 PM, Salatiel Filho wrote: I'm having troubles with spamassassin , Here it is the spam header: Return-Path: <[EMAIL PROTECTED]> Probably USER_IN_WHITELIST is adding -100 to the total sum. But i have no idea why. There's no "griffield.biz " on my W

Problem with user_white_list

2006-09-20 Thread Salatiel Filho
I'm having  troubles with spamassassin , Here it is the spam header:X-Gmail-Received: 87a9632ff8cfd8d16e3be47ba14d5467a678c68aDelivered-To: [EMAIL PROTECTED]Received: by 10.90.68.10 with SMTP id q10cs201301aga;Wed, 20 Sep 2006 14:55:10 -0700 (PDT)Received: by 10.90.100.2 with SMTP id x2mr

Re: FP: URI_NOVOWEL

2006-09-20 Thread John D. Hardin
On Thu, 21 Sep 2006, mouss wrote: > Theo Van Dinter wrote: > > On Tue, Sep 19, 2006 at 10:58:46PM +0200, mouss wrote: > > > >> URI_NOVOWEL fires with things like href="#id" where id is a string that > >> starts with 7 "no-vowel" chars. > >> > >> uri URI_NOVOWEL m%^https?://[^/?]*[

Re: rbl checks from 20_dnsbl_tests.cf won't work after upgrading to 3.1.5

2006-09-20 Thread mouss
[EMAIL PROTECTED] wrote: Hi, We have fully reinstalled one of our 2 mailrelays to solaris 10 / mimedefang / spamassassin 3.1.5 / clamav. since the upgrade, i've noticed that the checks from 20_dnsbl_tests.cf don't work anymore. the file used is the one from version 3.1.5 (it has this line i

Re: FP: URI_NOVOWEL

2006-09-20 Thread mouss
Theo Van Dinter wrote: On Tue, Sep 19, 2006 at 10:58:46PM +0200, mouss wrote: URI_NOVOWEL fires with things like href="#id" where id is a string that starts with 7 "no-vowel" chars. uri URI_NOVOWEL m%^https?://[^/?]*[bcdfghjklmnpqrstvwxz]{7}%i uri URI_NOVOWEL m%^htt

Job spams

2006-09-20 Thread Igor Chudov
Just as a side note, I recently changed the way SA runs for me. It runs sitewide for all users except me, and I run it locally as myself. That is beside the point but I want to thank others for suggestions. I run rules_du_jour every night and get SARE rules. Despite that, I receive a lot of "ge

OT: Outlook brokenness

2006-09-20 Thread John D. Hardin
On Wed, 20 Sep 2006, Thomas Meier wrote: > X-Mailer: Microsoft Office Outlook 12.0 ... > C:\Mail-SpamAssassin-3.1.5>path > > PATH=C:\Perl\bin\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C: > \Pro > > gram Files\Microsoft SQL Server\80\Tools\BINN Can anybody enlighten me as to *WH

Re: forwarding email using /etc/aliases and keeping spamassassin headers intact

2006-09-20 Thread ajmcello
  I do have procmail setup on mail1. I didn't think of that, but thought my SMTP server would forward the message before looking at my own personal rules (the forward is in /etc/aliases).   I renamed my .procmailrc to something else so maybe that will fix it.   Also, SA does see and flag the messa

Re: forwarding email using /etc/aliases and keeping spamassassin headers intact

2006-09-20 Thread Chr. v. Stuckrad
On Wed, 20 Sep 2006, Larry Starr wrote: > Are you certain that SA even sees the message before it's forwarded? > > My first guess, without seeing config files, etc. Would be that your SMTP > daemon (sendmail?) is forwarding the message as it's received. This sounds like 'filtering with procmai

Re: forwarding email using /etc/aliases and keeping spamassassin headers intact

2006-09-20 Thread Larry Starr
Are you certain that SA even sees the message before it's forwarded? My first guess, without seeing config files, etc. Would be that your SMTP daemon (sendmail?) is forwarding the message as it's received. On Wednesday 20 September 2006 12:24, ajmcello wrote: > I'm having an issue with SA usin

forwarding email using /etc/aliases and keeping spamassassin headers intact

2006-09-20 Thread ajmcello
  I'm having an issue with SA using two mail servers and forwarding using /etc/aliases (although .forward should produce the same result). Lets say an E-mail comes into mail1 for bob, and is flagged as spam. This part works fine.   Now, bob has a forward set up in /etc/aliases on mail1 to go to [E

Re: Mime part boundary changingin Image Spam

2006-09-20 Thread Jonas Eckerman
Ben Wylie wrote: I have noticed that a lot of spam messages change their mime boundary during the message. That's not really what happens. The example you included is of nested MIME entities: the top MIME entity is a multipart entity containg another multipart entity. Does this happen in l

rbl checks from 20_dnsbl_tests.cf won't work after upgrading to 3.1.5

2006-09-20 Thread tomvo
Hi, We have fully reinstalled one of our 2 mailrelays to solaris 10 / mimedefang / spamassassin 3.1.5 / clamav. since the upgrade, i've noticed that the checks from 20_dnsbl_tests.cf don't work anymore. the file used is the one from version 3.1.5 (it has this line in it: require_version 3.001

R: Integrating SpamAssasin 3.x with BlackList

2006-09-20 Thread Lists
Hi Matt! Thank you for your kind interest! I am studying your good answer... Just a question if you can... -- >From there, Spamhaus is already in spamassassin, there are rules for both SBL and XBL. CBL's data is aggregated into XBL, so that's in there too, although not r

Re: Mime part boundary changingin Image Spam

2006-09-20 Thread Theo Van Dinter
On Wed, Sep 20, 2006 at 03:07:46PM +0100, Ben Wylie wrote: > MIME-Version: 1.0 > Content-Type: multipart/related; > type="multipart/alternative"; > boundary="=_NextPart_000_0005_01C6DC77.1B7CF1F0" > > But then the first mime part is empty and changes the mime boundary: > > --=

Re: Not all messages passing through SA

2006-09-20 Thread Theo Van Dinter
On Wed, Sep 20, 2006 at 10:32:56AM +0100, Nigel Frankcom wrote: > >:0fw: spamassassin.lock > >* < 256000 > >| /usr/bin/spamassassin > > There's a few things you could try; one is adding the flock key to > your local.cf; another is to switch to MySQL based rather than flat > file. > > I don't thin

Re: Integrating SpamAssasin 3.x with BlackList

2006-09-20 Thread Matt Kettler
Lists wrote: > > Hello! > > I run SpamAssassin with QmailScanner and Qmail1.03; i entered in > local.cf the configuration to use some blacklist but it is not > sufficiente to block spam. > > How can i enable the SpamHaus, CBL, RBL (as example) > blacklist-realtime check? > Well first, to do any RBL

RE: Installation Errors

2006-09-20 Thread Bret Miller
I have SA 3.1.5 installed on Windows Server 2003, but I'm running ActivePerl 5.8.8.817. Guess it's time to check for 819... May I have the "perl makefile.pl" output, please?   Bret [EMAIL PROTECTED] From: Thomas Meier [mailto:[EMAIL PROTECTED]    Having trouble installing Sp

Re: Whitelisting URIs

2006-09-20 Thread Matt Kettler
Jerry Gaiser wrote: > On Tuesday 19 September 2006 19:32, Matt Kettler wrote: > >> Jerry Gaiser wrote: >> Report the mis-listing to [EMAIL PROTECTED] >> >> It seems strange that it's listed in PH.. did you get hacked recently >> and abused by a phisher? >> >> Also, FWIW, you appear to have alrea

Mime part boundary changingin Image Spam

2006-09-20 Thread Ben Wylie
I have noticed that a lot of spam messages change their mime boundary during the message. So in the headers they specify something like: MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="=_NextPart_000_0005_01C6DC77.1B7CF1F0" But then

Re: checking local domains against spam

2006-09-20 Thread Artur Kuśmierek
It depends entirely on your MTA/MDA setup. SpamAssassin scans everything that gets thrown on it. You have to tell us more or go ask the appropriate mailing list. heh... I knew it won't be easy :) My MTA is qmail-1.05 on FreeBSD 4.8. I run clamav + qmail-scanner. These my qmail conf files

Re: checking local domains against spam

2006-09-20 Thread Magnus Holmgren
On Wednesday 20 September 2006 12:45, Artur Kuśmierek took the opportunity to say: > How can I force spamassassin to check e-mails from local domains to > local recipients against spam? Now all local messages are delivered > without even any spamassassin stamp in headers. It depends entirely on y

checking local domains against spam

2006-09-20 Thread Artur Kuśmierek
How can I force spamassassin to check e-mails from local domains to local recipients against spam? Now all local messages are delivered without even any spamassassin stamp in headers. -- Best Regards, Artur

RE: AutoWhitelistExpiry

2006-09-20 Thread Stéphane LEPREVOST
Thanks a lot Alex, I'm testing trim_whitelist.pl at this exact time. I'll have a look to your script too and will test it on another copy of the file (for the moment I've copied it on another machine and disabled use_auto_whitelist in my local.cf to see the result) I'll give you feedback on this

Re: AutoWhitelistExpiry

2006-09-20 Thread Alex Bramley
Theo Van Dinter wrote: On Mon, Sep 18, 2006 at 05:48:35PM +0200, Stéphane LEPREVOST wrote: I'm surprised that nobody seems to complain for problems with auto-whitelist file growing. Of course, it may be only a question of free time to do this (I understand SO much these problems...) but does som

Re: Not all messages passing through SA

2006-09-20 Thread Nigel Frankcom
On Wed, 20 Sep 2006 10:20:18 +0100, [EMAIL PROTECTED] wrote: >I'm using SA 3.1.1 and am calling it from a .procmailrc file as >suggested in http://wiki.apache.org/spamassassin/UsedViaProcmail, the >relevant lines are: > >:0 f >| formail -A"X-Procmail: Before SpamAssassin" > >:0fw: spamassassin.l

Not all messages passing through SA

2006-09-20 Thread geoff . spamassassin3
I'm using SA 3.1.1 and am calling it from a .procmailrc file as suggested in http://wiki.apache.org/spamassassin/UsedViaProcmail, the relevant lines are: :0 f | formail -A"X-Procmail: Before SpamAssassin" :0fw: spamassassin.lock * < 256000 | /usr/bin/spamassassin :0 f | formail -A"X-Procmail: