Can you provide us the X-Spam-Status that went with each, or at least #1?
<>
Did you install Net::DNS?
<>
What version of SA are you using?
<<3>>
--
View this message in context:
http://www.nabble.com/How-to-stop-this-kind-of-spam--tf2873534.html#a8031967
Sent from the SpamAssassin - Users
Spammers are starting to put "speckles" in their images to defeat
OCR-scanning plugins such as FuzzyOCR.
I thought ImageMagick's -despeckle option would help, but it doesn't
seem to, not even when applied multiple times, not even in conjunction
with -monochrome.
I want a filter that does this fo
decoder wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
pinoyskull wrote:
decoder wrote:
pinoyskull wrote:
I've been using fuzzyocr plugin for some time now and I think
I noticed is its high cpu/memory usage resulting on delayed
delivery of mails. The server is serving 2000+ clients.
T
I am having trouble scoring by country.
I have set up local.cf like so:
header __RCVD_IN_NERDS eval:check_rbl('nerds','zz.countries.nerd.dk.')
describe __RCVD_IN_NERDSReceived from a spam country
tflags __RCVD_IN_NERDS net
header RCVD_IN_NERDS_CN eval:check_rbl_sub('nerds','127.
On Friday 22 December 2006 9:45 pm, Theo Van Dinter wrote:
> On Fri, Dec 22, 2006 at 07:47:47PM -0600, Chris wrote:
> > Is that enough to change the order in which the X-Spam headers are
> > displayed?
>
> Yes. There is no guaranteed order to the headers being added. From run
> to run, the order
andysutton123 wrote:
> Hi All
> I have configured my spamassasin but still I get these kind of spams
> http://www.nabble.com/file/5093/spam1.txt spam1.txt
> http://www.nabble.com/file/5094/spam2.txt spam2.txt
> http://www.nabble.com/file/5095/spam3.txt spam3.txt
>
> Can someone tell me what I ca
Hi All
I have configured my spamassasin but still I get these kind of spams
http://www.nabble.com/file/5093/spam1.txt spam1.txt
http://www.nabble.com/file/5094/spam2.txt spam2.txt
http://www.nabble.com/file/5095/spam3.txt spam3.txt
Can someone tell me what I can do to stop such spams?
--
View
On Fri, Dec 22, 2006 at 07:47:47PM -0600, Chris wrote:
> Is that enough to change the order in which the X-Spam headers are displayed?
Yes. There is no guaranteed order to the headers being added. From run
to run, the order is probably going to be the same, but adding in another
header can comp
On Fri, Dec 22, 2006 at 09:12:43PM -0500, Debbie D wrote:
> what is the best way for me to post here a mail that is not scoring as high
> as I feel it should be? I just posted the entire mail including headers and
> it bounced as spam :) hahaha
http://wiki.apache.org/spamassassin/DoYouWantMySpam
what is the best way for me to post here a mail that is not scoring as high
as I feel it should be? I just posted the entire mail including headers and
it bounced as spam :) hahaha
thanks
Prior to installing Matthias's ASN plugin headers looked like this:
X-Spam-Virus:
X-Spam-Seen:
X-Spam-New:
X-Spam-Remote:
X-Spam-Flag:
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on
cpollock.localdomain
X-Spam-Hammy:
X-Spam-Status:
X-Spam-Spammy:
X-Spam-Pyzor:
X-Spam
On Fri, Dec 22, 2006 at 10:00:29PM +, Paul Hurley wrote:
> What I can't work out at the moment is to do anything usefull with the
> rules that were hit. I suppose I could create a list of the top ten
> rules for Spam and Ham...
The idea behind having the log entries like that is that it could
So, what I am looking for is a test that looks up the HELO address in
DNS and compares it to the IP that it was sourced from.
I have some spam with the following received characteristics which would
have been a great demo for this possible test:
Received: from cpe-76-190-23-240.woh.res.rr.com (
Hello
I can't find much info out there as to what people do in terms of
analysing logfiles etc to tune their SA setup's, so I'll start with what
I'm doing at the moment.
I'm using the Win32 Pop3 proxy version of Spamassassin V3.1.5.1 (from
(http://sourceforge.net/projects/sawin32/) It currentl
We're suddenly having a very weird problem.
We run SA under procmail from Postfix on Mac OS X.
Things were working well. Now, today, I note a lot
of mail with expected SA headers missing, e.g.
Return-Path: <[EMAIL PROTECTED]>
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on mini.cfcl
John,
Thanks for the hard work on Botnet. I just installed 0.7, and I'm quite
pleased with the results so far.
Thanks for the BOTNET_SOHO rule. As a "SOHO" with a recalcitrant ISP that
won't give me a reverse lookup, I appreciate the rule very much.
I am getting a warning in my log files howe
I have a Qmail Toaster setup. I have everything working except the
fuzzyocr. Should it have information in the header about being scanned?
Here is a header but I don't see the fuzzyocr plugin working
X-Spam-Status: Yes, score=10.5 required=1.0 tests=EXTRA_MPART_TYPE,
HTML_IMAGE_ONLY_16,H
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ronnie Tartar wrote:
> I have a Qmail Toaster setup. I have everything working except the
> fuzzyocr. Should it have information in the header about being
> scanned?
>
> Here is a header but I don't see the fuzzyocr plugin working
>
> *X-Spam-Statu
I have a Qmail Toaster setup. I have everything working except the fuzzyocr.
Should it have information in the header about being scanned?
Here is a header but I don't see the fuzzyocr plugin working
X-Spam-Status: Yes, score=10.5 required=1.0 tests=EXTRA_MPART_TYPE,
HTML_IMAGE_ONLY_16,HT
John -- try uploading the content of the mail somewhere and posting
a link. a score of 19.6 sounds pretty spammy, perhaps it includes
the text of a spam?
--j.
John W Mickevich writes:
> Hello,
>
>
>
> I hope I am sending this to the proper email address. If not, just let me
> know.
>
>
On Fri, Dec 22, 2006 at 10:16:13AM +, Justin Mason wrote:
> Actually, if you run with -D, like:
> spamassassin -D -Lt < spam.txt
> part of the debug output is
> 1. the Relays-Trusted etc lines
> 2. the parts of the message text that caused any body rules
> to fire:
Right, so true, one thin
On Thu, December 21, 2006 11:20 pm, menashe wrote:
>
> Until recently, I had the spamassassin launched for every email received via
> a VB program that did a CreateProcess to which I passed the a command like
> spamassassin.bat < infile > outfile.
> Since several days, the CreateProcess is execute
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'm looking for a list of Anti-Spam headers and their output. On a
rare occasion, I find that a previous MX has marked a message as spam,
but my own SpamAssassin installation hasn't. So I'm thinking of
putting in some header checks in maildrop which m
On Fri, 22 Dec 2006, John Rudd wrote:
> >>> 8) The file Botnet.variations.txt exists now with different suggested
> >>> alternative ways to do Botnet rules.
> >
> > Thanks for this. We have to use the meta method to have BOTNET not trigger
> > when other rules hit to avoid collateral damage on c
Rob Mangiafico wrote:
On Thu, 21 Dec 2006, John Rudd wrote:
1) BOTNET_SOHO -- If the sender's (chosen from Envelope-From,
Return-Path, or From, in that order) mail domain (the part after the @
sign) resolves back to the relay's IP address, or has an MX host which
resolves back to the IP addres
Theo Van Dinter writes:
> On Thu, Dec 21, 2006 at 06:09:23PM -0700, Kelly Jones wrote:
> > Many people write test rules w/ small negative scores like this:
> > header SUBJ_FOO_BAR_TEST Subject =~ /foo.*bar/
>
> Really? Why would you write a rule like that?
>
> > header SUBJ_FOO_BAR_TEST Subject
26 matches
Mail list logo
