>>
>> Hello list,
>>
>> For your consideration:
>>
>> header __MULTIPART_RELATED Content-Type =~ /multipart\/related/
>>
>> meta OE_MULTIPART_RELATED (__OE_MUA && __MULTIPART_RELATED)
>> describe OE_MULTIPART_RELATED Possible image spam forged as from MS Outlook
>>
>> The false Positive rate o
Jo Rhett wrote:
> Rene, you can score the rule to be lower. For instance, a score of
> "-10" will probably do what you need.
I know that, I saw your post and I have been changing scores to fine tune my
installation (for instance I give -2.5 points to any SPF validated server).
> It doesn't prev
> add the rest of you --dump magic command to that.
Right. Duh me. Heh. The following was captured via -D:
[20507] dbg: bayes: using username: [EMAIL PROTECTED]
[20507] dbg: bayes: database connection established
[20507] dbg: bayes: found bayes db version 3
[20507] dbg: bayes: unable to initi
C. Bensend wrote:
>> Ahh but you didn't run the command I asked you to run. You are passing
>> the user: [EMAIL PROTECTED] to SpamAssassin so it will use that as
>> the key for the database, running the command from the command like that
>> way is going to use your unix id as the key. I'm guessin
> Ahh but you didn't run the command I asked you to run. You are passing
> the user: [EMAIL PROTECTED] to SpamAssassin so it will use that as
> the key for the database, running the command from the command like that
> way is going to use your unix id as the key. I'm guessing you changed
> somet
C. Bensend wrote:
>> I think its just a slightly confusing message. If you run:
>> sa-learn -u [EMAIL PROTECTED]
>>
>> Does it show that you have 200 ham and 200 spam in the database? If so
>> then there is a problem, if not you just need to train it some more.
>>
>> What the WARNING is telling y
> I think its just a slightly confusing message. If you run:
> sa-learn -u [EMAIL PROTECTED]
>
> Does it show that you have 200 ham and 200 spam in the database? If so
> then there is a problem, if not you just need to train it some more.
>
> What the WARNING is telling you is that hey this data
Rene, you can score the rule to be lower. For instance, a score of
"-10" will probably do what you need.
It doesn't prevent the utilization, but does solve the problem of having
your local users get +1 points for authenticating.
The long-term problem needs a real fix.
René Berber wrote:
Hi
C. Bensend wrote:
> Hey folks,
>
>I'm finishing up a mailserver upgrade this weekend, and I notice
> that my new SQL-based install isn't picking up on user-based Bayes
> data. This is on a new, squeaky-clean OpenBSD 4.0-STABLE machine
> running on AMD64, using SpamAssassin 3.1.7 with perl 5.8
Hey folks,
I'm finishing up a mailserver upgrade this weekend, and I notice
that my new SQL-based install isn't picking up on user-based Bayes
data. This is on a new, squeaky-clean OpenBSD 4.0-STABLE machine
running on AMD64, using SpamAssassin 3.1.7 with perl 5.8.8.
As per spamd -D info:
2
Hi,
I have a similar problem as the one recently reported by J. Rhett in thread
"skipping SPF checks for authenticated users". I'm trying to use Botnet plugin
and make it not score for authenticated users; having the same for SPF and RBL
would be even better.
So the problem is that SA doesn't re
Hello list,
For your consideration:
header __MULTIPART_RELATED Content-Type =~ /multipart\/related/
meta OE_MULTIPART_RELATED (__OE_MUA && __MULTIPART_RELATED)
describe OE_MULTIPART_RELATED Possible image spam forged as from MS Outlook
The false Positive rate on my corpus is 0.1%. I can't tell
On Sun, Dec 03, 2006 at 05:09:11PM -0600, Dave Richardson wrote:
> intended effect? I have ZERO (none, nil) instances where header shows
> "autolearn=" as any other value than "autolearn=no". This leads me
> conclude that my sa-learn data is not being utilized by spamd?!
Define "utilized". sc
On Sunday 03 December 2006 8:33 pm, Mike Pepe wrote:
> Hi all,
>
> just a curiosity question: I seem to be getting an average of about 30
> spams a week that all contain URLs that point to sites that look just
> like this (sample image, with several tabs with different URLs that
> point to identica
Hi all,
just a curiosity question: I seem to be getting an average of about 30
spams a week that all contain URLs that point to sites that look just
like this (sample image, with several tabs with different URLs that
point to identical copies of the same thing)
http://www.doki-doki.net/~lamu
I'm full of questions tonight. Looks like the joe-job against me is running
full force again, thanks to the VBounce rule set they're not going into my
spam folder as to be run against my reporting script. However, would it
cause any harm if these were run against my other script which reports to
Is this a p&d stock advertisement or what? I've seen about 3 or 4 of these
so far today and can't decide whether it is or not.
--
Chris
pgp5jYMQzXwI2.pgp
Description: PGP signature
I use 4 in a load-balanced arrangement- They all share the same Mysql
db. It is on another server.
It works great and they all use the same bayes, awl and other mail
settings used by policyd.
Dave
On Sat, 2006-12-02 at 19:24 +, Nigel Frankcom wrote:
> On Sat, 02 Dec 2006 18:31:47 +0100, N
On Sun, 3 Dec 2006, Jaysen Johnson wrote:
> I have been asked by my boss to setup SpamAssassin on the
> corporate email server with the following rules.
> Date in the mail header more than 10 minutes out of sync - 1 point
> Date in the mail header more than 30 mintues out of sync - 2 points
You
Received: from bigfootinteractive.com ([216.35.62.79])
by mx-bracke.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP
My first guess would be fake just from the headers. However, if it looks
like legit opt-in stuff, then maybe it is.
I suspect (assuming the person really exists) t
On Sun, 3 Dec 2006, Chris wrote:
> I got this in my inbox today, I believe it to be real, however I'll post the
> headers below. The reason I think it may be real is that there is some
> person out there named Carol Pollock who for some reason and some how is
> using the email address of [EMAIL PR
I got this in my inbox today, I believe it to be real, however I'll post the
headers below. The reason I think it may be real is that there is some
person out there named Carol Pollock who for some reason and some how is
using the email address of [EMAIL PROTECTED] How, I haven't the
faintest c
Can you please check my SA kit to assure me that sa-learn is having the
intended effect? I have ZERO (none, nil) instances where header shows
"autolearn=" as any other value than "autolearn=no". This leads me
conclude that my sa-learn data is not being utilized by spamd?!
Is there a log or o
So I saw on this list a comment about skipping SPF checks for
authenticated users, to use LOCAL_AUTH_RCVD like so:
header LOCAL_AUTH_RCVDReceived =~ /\(authenticated as [EMAIL PROTECTED]) by
host.name.dom /
Well, I got this working properly but I found that it doesn't do
anything by itse
Jaysen Johnson wrote:
Hello,
I have been asked by my boss to setup SpamAssassin on the corporate
email server with the following rules. A single header should record the
cumulative scores for the following:
SPF record not available or not accurate for the sending server- 2 points
No. Th
On Sun, Dec 03, 2006 at 01:16:40PM -0800, Jaysen Johnson wrote:
> SPF record not available or not accurate for the sending server- 2 points
Check out the current SPF rules. Not available may need some plugin changes.
> Date in the mail header more than 10 minutes out of sync - 1 point
> D
Hello,
I have been asked by my boss to setup SpamAssassin on the corporate email
server with the following rules. A single header should record the cumulative
scores for the following:
SPF record not available or not accurate for the sending server- 2 points
Date in the mail header more than
On Sunday 03 December 2006 23:33, Steven Stern wrote:
> Are you using a sql-based Bayes db? I found that the upgrade of
> perl-MailSpamAssassin failed with a MySQL bayes. When I removed the
> password for 'root'@'localhost', the upgrade succeeded. (I then put the
> password back.)
No, I'm using o
Noc Phibee wrote:
Hi
i have 6 servers running on spamassassin 3.1.7 (now after a upgrades).
Actually, all have Bayes Filering with local Db (default db, not sql)
I want know what is the best choice ? :
- Default Db or MySQL db ?
- 1 Bayes Db per server or 1 Bayes on Sql for all serv
Mark Adams wrote:
Hi All,
Spamassassin 3.1.4-1
Currently have entries like the following in the local.cf file
whitelist_from [EMAIL PROTECTED]
and
whitelist_from [EMAIL PROTECTED]
But mail is still picked up as spam for the [EMAIL PROTECTED]
Have also tried the following;
whitelist_from_rcv
Fajar Priyanto wrote:
> Hi all,
> I try to upgrade my SA in mandrake 10.1.
> I've downloaded the latest SA and build the rpm. But, when I tried to upgrade
> it, it errored:
> rpm -Uvh spamassassin-3.1.7-1.i586.rpm perl-Mail-SpamAssassin-3.1.7-1.i586.rpm
> error: Failed dependencies:
> spam
[EMAIL PROTECTED] wrote:
> I have seen this in the past but now can not find those email on how to
> do this. What i want to do is rewrite the subject line so when it is
> thought to be spam, it will appear like this:
> [SPAM]
> =the score of the email thought to be spam.
> Can some please let me k
On Sun, 2006-12-03 at 17:50 +0700, Fajar Priyanto wrote:
> Hi all,
> I try to upgrade my SA in mandrake 10.1.
> I've downloaded the latest SA and build the rpm. But, when I tried to upgrade
> it, it errored:
> rpm -Uvh spamassassin-3.1.7-1.i586.rpm perl-Mail-SpamAssassin-3.1.7-1.i586.rpm
> error:
On Sunday 03 December 2006 4:50 am, Fajar Priyanto wrote:
>
> Can someone help me how to upgrade it? Should I (forced) remove all
> previous SA?
>
> Thank you very much,
I also run Mandrake 10.1 but I've always installed via CPAN, to me its much
easier.
--
Chris
pgpGYZ8Talt3C.pgp
Descriptio
On Sun, Dec 03, 2006 at 05:50:12PM +0700, Fajar Priyanto wrote:
> I notice that my mandrake 10.1 contains several rpms regarding SA:
> spamassassin-tools-3.0.4-0.1.101mdk
> spamassassin-3.0.4-0.1.101mdk
> spamassassin-spamd-3.0.4-0.1.101mdk
> spamassassin-spamc-3.0.4-0.1.101mdk
>
> Can someone hel
Hi all,
I try to upgrade my SA in mandrake 10.1.
I've downloaded the latest SA and build the rpm. But, when I tried to upgrade
it, it errored:
rpm -Uvh spamassassin-3.1.7-1.i586.rpm perl-Mail-SpamAssassin-3.1.7-1.i586.rpm
error: Failed dependencies:
spamassassin = 3.0.4-0.1.101mdk is neede
I want to thank all for their input over the last several days while I was
getting hammered with dictionary attacks, It's still on, but appears to be
reduced on off-business hours.
Has anyone any opinions or pointers on smf-sav and smf-zombie as milters to
help reduce the onslaught passed to
37 matches
Mail list logo
