Hi,I need help to figure out what is going wrong with pyzor.The problem:-I saw many line like this in the log:"Oct 20 18:45:11 localhost spamd[30610]: pyzor: check failed: internal error"
What I know:-Pyzor work because I have 397 email tagged by pyzor today.My setup:-Linux debian unstable-SA from
Hi all,
I'm a long time SA user - my system runs Mac OSX 10.4.x,
running Postfix, Maia Mailguard, ClamAV, Amavisd-new & now
SpamAssassin 3.1.7 since upgrading 4 days ag, the SA installation
intercepts all inbound mail for scanning prior to delivery.
Recently, I've discovered the URIDNSBL plug
Hello,am using CGPro as mail server, and i need some help and adviceI am planning to implement CGPSA on our ingate servers and am not quitesure if it is a good ideawe recieve almost 7000 email per hour and i don't know if spamassassin
is going to miss anythinganother questionfor the amount of emai
On Wed, 18 Oct 2006 13:17:04 -0400, you wrote:
>> I was hoping for a simple way to
>> detect if the image property frames > 1
>>
>> Will the updated SARE ruleset be able to do this?
>
>It won't need to. It just useses other flags to determine whats going on. I
>went about it as the gif didn't mat
On Thu, 19 Oct 2006, Chris Purves wrote:
I'm running sa-update from a bash script in /etc/cron.hourly but I keep
getting the following every time the script runs:
run-parts: /etc/cron.hourly/sa-update exited with return code 1
I believe this is because sa-update only returns error code 0 when s
>
> If you are having problems with memory after downloading the rules,
> you just need to be careful that you use the right ones. Read the
> descriptions of the rules carefully and only use the ones that you
> think would be useful. Any time you add more rules, the spamd
> children will take up
Steve Ingraham wrote:
Could you explain how I can train Bayes? What specifically do I need to
do to accomplish this?
http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html
R Lists06 wrote:
> > I am sorry if I am asking this question and it is answered in the
> > archives. I will try to go back and read those past posts but is
> > there a site where I can download the SARE stock rules and the
> > plugins? I am aware of Rules Du Jour but whenever I have attempted
> >
>www.rulesemporium.com
Thanks Robert,
I have been so distracted with solving several problems at the same time
it totally slipped my mind that I have been to this site for rules in
the past. It makes a guy feel really stupid when he cannot see the
forest for the trees.
Steve
>
> I am sorry if I am asking this question and it is answered in the
> archives. I will try to go back and read those past posts but is there
> a site where I can download the SARE stock rules and the plugins? I am
> aware of Rules Du Jour but whenever I have attempted to download rules
> from
Peter Lemioux wrote:
>You can modify the scoring of any rule by adding a file to
>/etc/mail/spamassassin that changes the score for specific rules. I
>named mine ZZscores.cf so it will be read after the other files in this
>directory. For instance,
>score HTML_MESSAGE_BODY1.0
On Friday 20 October 2006 10:37, Jim Maul wrote:
> Others may suggest you lower your threshold but I feel this is the wrong
> way to deal with this type of situation. Generally, you want to
> increase the gap between spam scores and ham scores, not lower the
> threshold. The way to do this is add
Steve Ingraham wrote:
I was trying to see if there was anything I could change in the rules in
spamassassin to raise the spam score up enough to reach the spam_hits=10
limit set up in my qmail controls so that qmail will not deliver the
message. Once the spam score reaches 10 delivery is stopped
Bret Miller wrote:
> > Theo Van Dinter wrote:
> > > FWIW, it happens to be the "official" tool since no one ever
> > > submitted RDJ to be the official tool, so we had to write our own.
> > >
> > I would have offered, had I known there was any interest.
> >
> > Chris T.
>
>
> I'm glad it isn't
Exactly. I guessed there would be a few other people out there still
trying to figure this one out.
Bowie
Chris Thielen wrote:
> Thank you for posting this.
>
> Unfortunately after RDJ downloaded all those parking pages, their
> timestamps were then LATER THAN the timestamps on the real rules
>
Peter Lemieux wrote:
>You don't need to "bump up" the score; this one received an 8.3 which
>exceeds your 5.0 ceiling. This result is that it's tagged as spam. SA
>itself doesn't do anything other than tag likely spams. It's up to you
>to decide what to do with these messages.
>
> [...]
I wa
On Fri, Oct 20, 2006 at 02:42:09PM -0400, Brian S. Meehan wrote:
> When you say blow them away, are there folders besides the below ones that
> should be removed?
>
> /etc/mail/spamassassin
I'd save these files, since they're your local configs. Copy them back
appropriately after the install.
>
>...
>> RFC 2821 Section 4.1.4 Order of Commands
>> ...
>>An SMTP server MAY verify that the domain name parameter in the EHLO
>>command actually corresponds to the IP address of the client.
>>However, the server MUST NOT refuse to accept a message for this
>>reason if the veri
When you say blow them away, are there folders besides the below ones that
should be removed?
/etc/mail/spamassassin
/usr/share/spamassassin
Thank you,
Brian
On Fri, October 20, 2006 14:35, Theo Van Dinter wrote:
> On Fri, Oct 20, 2006 at 02:30:14PM -0400, Brian S. Meehan wrote:
>> Oct 20 14:10
Michael Beckmann wrote:
Greetings!
In the past few weeks, I have noticed significant amounts of spam
passing through my filter. It is reaching a level that annoys me. I use
Spamassassin 3.1.7.
I used to get maybe one or two spam messages a day earlier this year
with 200+ spams filtered. Now
On Fri, Oct 20, 2006 at 02:30:14PM -0400, Brian S. Meehan wrote:
> Oct 20 14:10:20 mail spamd[5776]: configuration file
> "/usr/share/spamassassin/20_net_tests.cf" requires version 3.001007 of
> SpamAssassin, but this is code ve
> rsion 3.04. Maybe you need to use the -C switch, or remove the o
I had a working setup of Courier-MTA, spamassassin 3.0.4, and maildrop,
but I upgraded spamassassin to 3.1.7 and now I have errors and mail
doesn't get delivered unless I remove the tie-in to spamassassin in the
courierd file.
Here are some of the errors:
Oct 20 14:10:20 mail spamd[5776]: configur
Greetings!
In the past few weeks, I have noticed significant amounts of spam passing
through my filter. It is reaching a level that annoys me. I use
Spamassassin 3.1.7.
I used to get maybe one or two spam messages a day earlier this year with
200+ spams filtered. Now I get 10 to 20 spams per
> Theo Van Dinter wrote:
> > FWIW, it happens to be the "official" tool since no one
> ever submitted
> > RDJ to be the official tool, so we had to write our own.
> >
> I would have offered, had I known there was any interest.
>
> Chris T.
I'm glad it isn't the official tool since it doesn't run
Theo Van Dinter wrote:
FWIW, it happens to be the "official" tool since no one ever submitted
RDJ to be the official tool, so we had to write our own.
I would have offered, had I known there was any interest.
Chris T.
Jo Rhett wrote:
Is there any difference here that I'm overlooking? Any advantage to RDJ?
And leading to my next point, given that sa-update is working fine --
isn't rdj going to be slimmed down to just the part that restarts the
process after running sa-update?
Hi Jo,
I'm the author of RDJ
Bowie Bailey:Yes, it is doing DNS tests correctly now. I was not sure that URIDNSBL or RBL was working after I installed Net::DNS. I can see now with "spamassassin -D dns < test.msg" that it is working correctly. Thank you so much!
DavidOn 10/20/06, Bowie Bailey <[EMAIL PROTECTED]> wrote:
Thank you for posting this.
Unfortunately after RDJ downloaded all those parking pages, their
timestamps were then LATER THAN the timestamps on the real rules files.
Because of this, the if-modified-since checks all returned false and the
real rulesets didn't clobber the broken ones.
Chris
Steve Ingraham wrote:
I am trying to figure out how I can get scores to this type of spam
bumped up so they do not get delivered to my user mailboxes. Can
anyone give me some suggestions on what I should do to stop this type
of spam from being delivered?
[...]
X-Spam-Flag: YES
X-Spam-Status:
Based on how far their mailing lists go back, Razor and DCC have been
around since the 2000/2001 time period, and as far as I can tell were
independent projects.
In fact, they're based on different goals/models, which is why it's
useful to use both of them. Razor is interested in specifically
id
Our mail server processes about 75k-100k messages a day, and runs a
force-expire once a day at 2am or so. Currently the bayes db (in sql) had a
expiry_max_db_size set to 500k, and when the expiration runs normally the db
is cut in half pretty much:
[7435] dbg: bayes: expiry check keep size, 0
I am trying to understand scoring for spam messages in the
rules. I hope you guys can help me understand this better. I have
an email header below that is from a spam email. I think I follow that
the score for the various rules is in the X-Spam-Report section of the
header. I am running
hey friends,
I know this is not the right list to post the queries regarding
imap-spamassassin file , I thought may be somebody had tried this
script before. I am trying to configure imap-spamassassin.pl on my
system and I have edited the file but I am getting the below error
when I tried to run
On 10/20/2006 10:43 AM, Giampaolo Tomassoni wrote:
>> RFC 2821 Section 4.1.4 Order of Commands ...
>> An SMTP server MAY verify that the domain name parameter in the EHLO
>> command actually corresponds to the IP address of the client.
>> However, the server MUST NOT refuse to accept a message fo
On Fri, 20 Oct 2006 11:13:31 -0400, Chris Santerre
<[EMAIL PROTECTED]> wrote:
>
>
>> -Original Message-
>> From: Mark Johnson [mailto:[EMAIL PROTECTED]
>> Sent: Friday, October 20, 2006 10:41 AM
>> To: users@spamassassin.apache.org
>> Subject: Re: Psst!
>>
>>
>> Chris Santerre wrote:
>>
Title: RE: Psst!
> -Original Message-
> From: Mark Johnson [mailto:[EMAIL PROTECTED]]
> Sent: Friday, October 20, 2006 10:41 AM
> To: users@spamassassin.apache.org
> Subject: Re: Psst!
>
>
> Chris Santerre wrote:
> >
> >
> > Just curious, but how many people see spam being sent to
Op 20-okt-06, om 16:30 heeft Chris Santerre het volgende geschreven:ust curious, but how many people see spam being sent to usersnames with the fisrt letter dropped? I see a ton in my logs. I believe spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED]. Too bad for them...they do n
Andreas Pettersson wrote:
Same here. I've also had lots of spam to addresses with various
amounts of trailing "d" or "n" in local part. Like [EMAIL PROTECTED]
Seems to be fewer of these today though.
I meant tailing.
--
Andreas
Chris Santerre wrote:
Just curious, but how many people see spam being sent to usersnames
with the fisrt letter dropped? I see a ton in my logs. I believe
spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad
for them...they do not. :)
Same here. I've also had lots o
Debbie D wrote:
> Can someone please remind me how to create custom scores for existing
> rules?? I do not want to manually go in and change any particular
> score, any update will over ride that.. I want to manually change
> them to hit on a higher [or lower as the case might be] score.
>
> If me
"ccrowley" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
>
> All -
>
> Just a quick inquiry. I updated from 3.1.3 to 3.1.7 yesterday. I'm seeing
> substantially higher LA on the system. The system used to run at a range
> of
> 2.x - 8.x LA. With 3.1.7 I'm seeing 10.x - 50.x.
>
> RFC 2821 Section 4.1.4 Order of Commands
> ...
>An SMTP server MAY verify that the domain name parameter in the EHLO
>command actually corresponds to the IP address of the client.
>However, the server MUST NOT refuse to accept a message for this
>reason if the verification f
On Friday 20 October 2006 15:44, Nick Leverton wrote:
> HTH etc,
> Nick
> fuzzyocr-23b-hashdb-poison.patch.gz
Ignore that second patch which wasn't from decoder. I must have
accidentally dropped it into the mail somehow (have I mentioned recently I
hate GUI mailers ?)
Nick
Can someone please remind me how to create custom scores for existing
rules?? I do not want to manually go in and change any particular score, any
update will over ride that.. I want to manually change them to hit on a
higher [or lower as the case might be] score.
If memory serves, I THINK I si
* Chris Santerre wrote (20/10/06 15:30):
>
>
>> -Original Message-
>> From: David B Funk [mailto:[EMAIL PROTECTED]
>> Sent: Friday, October 20, 2006 1:20 AM
>> To: users@spamassassin.apache.org
>> Subject: Re: Psst!
>>
>>
>> On Thu, 19 Oct 2006, Matt Kettler wrote:
>>
>> > Another thing I
On Thursday 19 October 2006 16:00, George R. Kasica wrote:
> Its not a formal released version from Chris/decoder. I'm running b
> here as it seems the most stable.
>
> If you want J is at:
Decoder said some time ago that J was an early development version and
recommended people go with b. He's
Title: RE: Psst!
Just curious, but how many people see spam being sent to
usersnames with the fisrt letter dropped? I see a ton in my logs. I believe
spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad for
them...they do not. :)
Mmmh. I think that they j
Chris Santerre wrote:
Just curious, but how many people see spam being sent to usersnames
with the fisrt letter dropped? I see a ton in my logs. I believe
spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad
for them...they do not. :)
I am noticing alot of this. A
I recently installed FuzzyOCR 2.3b and am still studying it before I
install it on my larger mail servers. It seems to work pretty good but I'm
starting to notice some HAM emails being rejected simply because of the
hashing feature being enabled.
A customer this morning called me about an
RFC 2821 Section 4.1.4 Order of Commands
...
An SMTP server MAY verify that the domain name parameter in the EHLO
command actually corresponds to the IP address of the client.
However, the server MUST NOT refuse to accept a message for this
reason if the verification fails: the
Title: RE: Psst!
> -Original Message-
> From: David B Funk [mailto:[EMAIL PROTECTED]]
> Sent: Friday, October 20, 2006 1:20 AM
> To: users@spamassassin.apache.org
> Subject: Re: Psst!
>
>
> On Thu, 19 Oct 2006, Matt Kettler wrote:
>
> > Another thing I've been noticing recently..
This is exactly what I was looking for.although I did enjoy the
flame war
Robert
Peace he would say instead of goodbyepeace my brother.
-Original Message-
From: Eric A. Hall [mailto:[EMAIL PROTECTED]
Sent: Friday, October 20, 2006 1:07 AM
To: Robert Swan
Cc: SpamAssass
David Berten wrote:
> I am trying to use URIDNSBL but can not get DNS resolution
>
> SpamAssassin 3.1.7
>
> Output:::
> Net-DNS-0.59]# spamassassin -D dns --lint
> [22770] dbg: dns: is Net::DNS::Resolver available? yes
> [22770] dbg: dns: Net::DNS version: 0.59
> [22770] dbg: dns: is DNS availabl
Hi,
actually, i use SpamAssassin 3.0.4 with this config:
==
Local.cf
==
required_hits 4.9
auto_whitelist_path/var/spool/spamassassin/auto-whitelist
auto_whitelist_file_mode 0777
#rewrite_header Subje
Thanks for the advice. I've finally added SARE and chickenpox ... Wow !
great !
I would advice anyone that haven't yet setup these rules to do it now !
It rocks. Now I'll watch the load.
Thanks again !
> De : Andy Jezierski [mailto:[EMAIL PROTECTED]
> [snip]
>
> I pieced your message together
Any rules I install to use with SA/MD I install in the
/etc/mail/spamassassin/ folder where my sa-mimedefang.cf file is at. I
rarely create custom rules but the few I do have I place in the
sa-mimedefang.cf file itself - just my personal preference, again, since I
don't have many.
Bill
Chris Hastie writes:
> I have a number of spamtrap addresses that between them receive between about
> 3000 and 6000 messages a day. Until recently I have used this mail to simply
> populate a database of machines that have sent me spam in the last 48 hours,
> which is used as part of a series of
On Fri, October 20, 2006 02:14, Kelson wrote:
> I.e. they aren't trying to get your money (at least, not directly) --
> they're phishers trying to get your eBay login and password.
it makes it more fun to recieve them if thay know my first name :-)
or if i realy don't use ebay
when ebay change
Suhas (QualiSpace) wrote:
I am getting lots of mails like this. How to block it?
Subject: Good day
The message contains Unicode characters and has been sent
as a binary attachment.
body CATCHY_RULE /The message contains Unicode characters /
score CATCHY_RULE 50
Use with
As far as I can guess, the problem could be the AWL (I think that
this
user is the same that had a problem some months ago with a worm virus
sending a lot of emails), but I run:
spamassassin --remove-addr-from-whitelist=
Without knowing the exact syntax, and this option: Wouldnt it be
som
Matthias Haegele schrieb:
Angel L. Mateo schrieb:
Hello,
(Sorry for my previous email without any subject).
[...]
As far as I can guess, the problem could be the AWL (I think that
this
user is the same that had a problem some months ago with a worm virus
sending a lot of emails), b
Even it is getting slipped thru the AV
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===
For Any
Angel L. Mateo schrieb:
Hello,
(Sorry for my previous email without any subject).
[...]
As far as I can guess, the problem could be the AWL (I think that this
user is the same that had a problem some months ago with a worm virus
sending a lot of emails), but I run:
spamassas
Hello,
(Sorry for my previous email without any subject).
I am using spamassassin with postfix and amavis on a debian sarge
server. The versions I use are:
* postfix: 2.1.5
* amavisd-new
* spamassassin: 3.1.0a
The problem I have is that emails sent by one of my users is
Hello,
I am using spamassassin with postfix and amavis on a debian sarge
server. The versions I use are:
* postfix: 2.1.5
* amavisd-new
* spamassassin: 3.1.0a
The problem I have is that emails sent by one of my users is always
tagged as spam, although messages aren't spam. The sp
>>
>> I am getting lots of mails like this. How to block it?
>>
>>
>>
>> Subject: Good day
>>
>>
>>
>> The message contains Unicode characters and has been sent
>>
>> as a binary attachment.
>>
>>
>>
>> Warm Regards,
>>
>> Suhas
>>
>> System Administrator
>>
>> QualiSpace - A Quant
I am getting lots of mails like this. How to block it?
Subject: Good day
The message contains Unicode characters and has been sent
as a binary
attachment.
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
I am trying to use URIDNSBL but can not get DNS resolutionSpamAssassin 3.1.7Net-DNS-0.59]# ps auxw | grep spamroot 22477 0.1 19.8 53720 50860 ? S 02:12 0:02 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
Mandrake Linux release 10.0 (RC1) for i586
Config file setup:::dns_available
68 matches
Mail list logo
