Maybe block osudl.org?

It seems apache.osudl.org is looping. It might be time to have Apache folks block the site until their folks can clear up the problem. I sent them an email about it a few hours ago; but it's still looping, badly. {^_^} Joanne

Re: First Received Header only

John D. Hardin wrote: On Sun, 8 Oct 2006, Clifton Royston wrote: This is closely related to the question I was asking a few days ago, and Justin Mason pointed me to the answer: I've now gotten five copies of this message. Is anybody els

Re: First Received Header only

On Sun, 8 Oct 2006, Clifton Royston wrote: > This is closely related to the question I was asking a few days > ago, and Justin Mason pointed me to the answer: > > I've now gotten five copies of this message. Is anybody else getting dupes to

Careful with that regex!

The English language is a complex and varied piece of work, and sometimes the unforeseen can happen! For example, if you have gotten tired of having to clear out the most common spams from your quarantine folder you may consider using milter-regex in addition to Spam Assassin and your Virus ap

Re: First Received Header only

Loren Wilton wrote: Here's an odd perl question: can you reference $1 and its siblings within the regex itself? such as: /^\[ ip=(\d+)\.(\d+)\.(\d+)\.(\d+) rdns=\S*(0*($1|$2|$3|$4)\S){2,4}\S* [^\]]* auth= / You can do it, but it slows down the whole regex system as soon as you have a captu

Re: First Received Header only

Here's an odd perl question: can you reference $1 and its siblings within the regex itself? such as: /^\[ ip=(\d+)\.(\d+)\.(\d+)\.(\d+) rdns=\S*(0*($1|$2|$3|$4)\S){2,4}\S* [^\]]* auth= / You can do it, but it slows down the whole regex system as soon as you have a capturing regex. Or so I'

Re: First Received Header only

On Sun, Oct 08, 2006 at 02:53:47PM -0700, John Rudd wrote: > Clifton Royston wrote: > > Also, IIRC there's already a set of rules closely related to what > >you're asking, so you can base it off those. Try looking for the > >definition of HELO_DYNAMIC_IPADDR and related rules. > > Yeah, HELO_DYN

Re: First Received Header only

On Sun, 8 Oct 2006, John Rudd wrote: > Right, but if it came from a machine in my network, I don't want > the dynamic IP addr checks to increase the score. Thus, I need to > look at both. If there's anyone in the Trusted pseudo-header, > then don't bother with the checks, basically. Set up a lo

Re: First Received Header only

Clifton Royston wrote: On Sun, Oct 08, 2006 at 02:53:47PM -0700, John Rudd wrote: Clifton Royston wrote: Also, IIRC there's already a set of rules closely related to what you're asking, so you can base it off those. Try looking for the definition of HELO_DYNAMIC_IPADDR and related rules. Yeah

Re: First Received Header only

Clifton Royston wrote: On Sun, Oct 08, 2006 at 02:13:19AM -0700, John Rudd wrote: Is there a way to have spam assassin look at the first received header only? I want to check certain characteristics of the first received header (for the current relay), like whether or not it looks like a dynam

Re: First Received Header only

On Sun, 8 Oct 2006, John Rudd wrote: > > I assume you have a clear idea of what you mean by "first"? The > > Received header that *your* MTA is adding? The Received header that > > the outermost MTA you trust is adding? > > I mean the topmost header that my MTA is adding. That's the simplest cas

Re: First Received Header only

On Sun, Oct 08, 2006 at 02:13:19AM -0700, John Rudd wrote: > > Is there a way to have spam assassin look at the first received header only? > > I want to check certain characteristics of the first received header > (for the current relay), like whether or not it looks like a dynamic > hostname,

Re: First Received Header only

John D. Hardin wrote: On Sun, 8 Oct 2006, John Rudd wrote: Is there a way to have spam assassin look at the first received header only? I assume you have a clear idea of what you mean by "first"? The Received header that *your* MTA is adding? The Received header that the outermost MTA you tru

Re: ok_languages and ok_locales not considered!? [solved]

solved: in v310.pre the language guesser plugin was disabled: # TextCat - language guesser #loadplugin Mail::SpamAssassin::Plugin::TextCat should be: loadplugin Mail::SpamAssassin::Plugin::TextCat Regards Volker

Re: sometimes no bayesian filtering?

On Sun, 8 Oct 2006, Paul29 wrote: > Training the mails does not help too much: it is the type with > random text and an embedded picture. I have no idea how to fight > them except lowering the SPAM score. Check out "fuzzyocr" in the list archives and the SA wiki. -- John Hardin KA7OHZICQ#15

Re: First Received Header only

On Sun, 8 Oct 2006, John Rudd wrote: > Is there a way to have spam assassin look at the first received > header only? I assume you have a clear idea of what you mean by "first"? The Received header that *your* MTA is adding? The Received header that the outermost MTA you trust is adding? > I wan

ok_languages and ok_locales not considered!?

Hello, I am running spamassassing 3.1.5_1 with spamd. In the systemwide local.cf I inserted following lines: ok_languagesde ok_locales de score UNWANTED_LANGUAGE_BODY1 score CHARSET_FARAWAY 1 score CHARSET_FARAWAY_BODY 1 But having a look into spamassassins Conten

Re: "Re: Hi" spam

Daryl C. W. O'Shea wrote: > Kenneth Porter wrote: >> I noticed today an unusually high incidence of spam subject lines of >> "Re: Hi", and I don't see a rule for this in the distribution. Do >> others see this much in legitimate mail? Or could it make a good rule? > > I see enough legit mail with

Re: sometimes no bayesian filtering?

Loren, Andreas, thanks for such a fast reply. I always urge people to give complete information when asking or reporting bugs but don't do it myself :( I am sorry! I use the copfilter (http://www.copfilter.org/) plugin 0.83 beta3a to ipcop firewall which contains SpamAssassin 3.1.4. Loren seems

Re: sometimes no bayesian filtering?

Paul29 wrote: Hi all, in the last days there were more and more SPAM mails where I found no bayesian scoring in the header. This lets me guess it did not take place at all. Is that conclusion right? I have not been able to find a common property in these mails to tell which mails are scanned an

Re: sometimes no bayesian filtering?

in the last days there were more and more SPAM mails where I found no bayesian scoring in the header. This lets me guess it did not take place at all. Is that conclusion right? They may not have been scanned, but then you should see no SA score at all. A better chance is that they scored bayes

sometimes no bayesian filtering?

Hi all, in the last days there were more and more SPAM mails where I found no bayesian scoring in the header. This lets me guess it did not take place at all. Is that conclusion right? I have not been able to find a common property in these mails to tell which mails are scanned and which not. Wha

First Received Header only

Is there a way to have spam assassin look at the first received header only? I want to check certain characteristics of the first received header (for the current relay), like whether or not it looks like a dynamic hostname, etc., and boost the score based on that. Can I do that with regular

Re: spf: no suitable relay for spf use found

Daryl C. W. O'Shea wrote: Email Lists wrote this to me instead of the list: -> -> This is normal behaviour when running --lint. -> -> Daryl Side note, when running spamassassin -D --lint How do we get that to log to a file in a bash shell. Everything I have tried so far has failed. Angle