Re: Any anti-spam solution against outgoing mail?

2006-12-28 Thread Monty Ree
Thanks for your kind answer. I have additional question. b) once domains are identified correctly, you might replace the /usr/sbin/sendmail by a wrapper this is a good idea.. Do you have any recommendable wrapper program about sendmail? Thanks again for your time.. From: [EMAIL PROTECTED]

any lots of CC related rule?

2006-12-28 Thread Monty Ree
Hello, all.. I have received some spam mails which have lots of mail-lists randomly at CC(carbon copy). So I would like to filter spam-mail which has over 10 e-mail address at CC or BCC like below. Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]; .. How

test

2006-12-28 Thread Jean-Paul Natola
disregard Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

Re: FuzzyOCR and 'valid' embedded Images

2006-12-28 Thread René Berber
Greg Skouby wrote: > We have some users of our mail system that are using Lotus Notes for > their MUA. In Lotus Notes they have the option of using, for lack of a > better word, some 'stationery' that effectively embeds three images into > the outgoing email. If the original recipient replies to

Re: SA not catching apostrophes in sender's addressess?

2006-12-28 Thread John Rudd
Chris wrote: On Thursday 28 December 2006 12:22 pm, Benny Pedersen wrote: if clamav knows its a virus, why then test it as spam in spamassassin ? Why not? I'm using the clamav plug-in as part of the spamassassin install. Because SpamAssassin is rather expensive, while ClamAV is rather chea

Re: SA not catching apostrophes in sender's addressess?

2006-12-28 Thread Chris
On Thursday 28 December 2006 12:22 pm, Benny Pedersen wrote: > On Wed, December 27, 2006 04:01, Chris wrote: > >> what virus is found in clamav ? > > > > X-Spam-Virus: Yes (Email.Stk.Gen124.Sanesecurity.06122204), this comes > > from one of Steve Basford's add-ons. > > if clamav knows its a virus,

Re: Any anti-spam solution against outgoing mail?

2006-12-28 Thread hamann . w
>> Hello, list. >> >> I have used well SA with procmail well against incoming mail. >> But there are lots of outgoing spam-mails using web programs or using >> sendmail at my server. >> (There are several domains are hosted at the server.) >> >> So is there any program like spamassassin which c

Re: whitelisting "from" and not "return path" addresses

2006-12-28 Thread JamesDR
Paul Andrews wrote: HI, After whitelisting my own email address, it seems that spammers will frequently put my own email address in the "return path" but not in the "from". Is it possible for Spam Assassin to make a distinction between the two so that it will block such messages? Below is an

whitelisting "from" and not "return path" addresses

2006-12-28 Thread Paul Andrews
HI, After whitelisting my own email address, it seems that spammers will frequently put my own email address in the "return path" but not in the "from". Is it possible for Spam Assassin to make a distinction between the two so that it will block such messages? Below is an example of such header

Re: Best / Easiest way to report spam?

2006-12-28 Thread Will Duff
If your users are using either Mozilla Thunderbird or Microsoft Outlook, you should look into my plugin: SpamAssassin Coach. This plug-in/extension basically automates the task of sending a TELL command to a local or remote spamd server via the spamd protocol to report/revoke spam or ham messages

Re: Best / Easiest way to report spam?

2006-12-28 Thread Micke Andersson
Andrzej Adam Filip wrote: Anders Norrbring <[EMAIL PROTECTED]> writes: Micke Andersson wrote: Anders Norrbring wrote: I have a setup with Postfix, Amavis-new and SpamAssassin on one 0) Micke suggested using *public IMAP folder* (as I understand single public fold

remove spam reports from spam email body

2006-12-28 Thread vertito
I am seeing detailted spamassassin reports when a specific spam email was tagged such as below: Content analysis details: (37.9 points, 5.0 required) pts rule name description -- -- 1.0 INVALID_TZ_GMT

Re: Problem with Update

2006-12-28 Thread Theo Van Dinter
On Thu, Dec 28, 2006 at 12:48:16PM +0100, sasa wrote: > Hi, I have updated SA from spamassassin-3.0.4 to spamassassin-3.1.7 with > YUM method and all it's ok, but when I run sa-update I have this error: > > [EMAIL PROTECTED] ~]# sa-update > Can't locate IO/Zlib.pm in @INC (@INC contains: > > Wh

Re: Botnet 0.7 Plugin is available

2006-12-28 Thread John Rudd
Thomas Bolioli wrote: It seems to have an issue with mail sent through forwarders like alumni accounts and one mail type systems. I am sending you a note off line with the details. No... it doesn't look that way at all. If you read the spam report headers, it clearly states what the problem

Re: SA not catching apostrophes in sender's addressess?

2006-12-28 Thread Benny Pedersen
On Wed, December 27, 2006 04:01, Chris wrote: >> what virus is found in clamav ? > X-Spam-Virus: Yes (Email.Stk.Gen124.Sanesecurity.06122204), this comes from > one of Steve Basford's add-ons. if clamav knows its a virus, why then test it as spam in spamassassin ? it only makes sense when using

Re: Best / Easiest way to report spam?

2006-12-28 Thread John D. Hardin
On Thu, 28 Dec 2006, Anders Norrbring wrote: > >> What's the best / easiest way(s) to enable users to report spam mails > >> for training the Bayes DB? > > > > I would say that the easiest way would be to set up a public IMAP folder > > where the users should drag-n-drop their SPAM mails into, a

Re: Best / Easiest way to report spam?

2006-12-28 Thread Andrzej Adam Filip
Anders Norrbring <[EMAIL PROTECTED]> writes: > Micke Andersson wrote: >> Anders Norrbring wrote: >>> I have a setup with Postfix, Amavis-new and SpamAssassin on one >>> server, and the IMAP server on another. >>> >>> What's the best / easiest way(s) to enable users to report spam >>> mails for tra

FuzzyOCR and 'valid' embedded Images

2006-12-28 Thread Greg Skouby
Hi All, We have some users of our mail system that are using Lotus Notes for their MUA. In Lotus Notes they have the option of using, for lack of a better word, some 'stationery' that effectively embeds three images into the outgoing email. If the original recipient replies to that original mess

VBounce with SA 3.0.4

2006-12-28 Thread Larry Nedry
Hello All, I am administering a linux box that has the Plesk 8.1 control panel installed. SpamAssassin 3.0.4 comes with the Plesk package and it doesn't look like it would be easy to upgrade to the latest version of SA. I want to install VBounce which requires Mail::SpamAssassin::Logger. It app

Re: "Present" slipping through - same as "insider information"

2006-12-28 Thread maillist
Vernon Webb wrote: I have a ton of these emails getting through that have the sender's name and the word Present getting through and they are the same as the insider information from last week. I have MailScanner, SpamAssassin, SARE, Botnet, Razor2, Pyzor, ClamAv and f-prot all installed and as

Re: Precleaning SA market spam from Mbox?

2006-12-28 Thread maillist
JamesDR wrote: David Flanigan wrote: James, Thanks for the reply. I was not planing on double scanning, the BCC idea is basically the same, though I would be doing it vial the /etc/aliases mapping to make it transparent. I am running Sendmail as the MTA. The real question is how do to the spa

Re: Best / Easiest way to report spam?

2006-12-28 Thread Anders Norrbring
Micke Andersson wrote: Anders Norrbring wrote: I have a setup with Postfix, Amavis-new and SpamAssassin on one server, and the IMAP server on another. What's the best / easiest way(s) to enable users to report spam mails for training the Bayes DB? I would say that the easiest way would be to

Re: Best / Easiest way to report spam?

2006-12-28 Thread Micke Andersson
Anders Norrbring wrote: I have a setup with Postfix, Amavis-new and SpamAssassin on one server, and the IMAP server on another. What's the best / easiest way(s) to enable users to report spam mails for training the Bayes DB? I would say that the easiest way would be to set up a public IMAP fol

Re: Error in FuzzyOcr 3.5.x branch

2006-12-28 Thread Jim Knuth
Heute (28.12.2006/13:27 Uhr) schrieb decoder, >> >> spamassassin --lint Subroutine FuzzyOcr::O_NONBLOCK redefined at >> /usr/share/perl/5.8/Exporter.pm line 65. at >> /usr/lib/perl/5.8/POSIX.pm line 19 >> >> What is that still? > This is no FuzzyOcr problem but a perl core problem. Two core perl >

Best / Easiest way to report spam?

2006-12-28 Thread Anders Norrbring
I have a setup with Postfix, Amavis-new and SpamAssassin on one server, and the IMAP server on another. What's the best / easiest way(s) to enable users to report spam mails for training the Bayes DB? -- Anders Norrbring Norrbring Consulting smime.p7s Description: S/MIME Cryptographic Signa

-u spamd syntax

2006-12-28 Thread Jean-Paul Natola
Is this the correct syntax for my rc.conf spamd_enable="YES" spamd_flags="-c -u spamd -H /var/spool/spamd/spamassassin" freebsd 5.4 sa 3.1.7 Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941

Re: "Present" slipping through - same as "insider information"

2006-12-28 Thread Duane Hill
Vernon Webb wrote: I have a ton of these emails getting through that have the sender's name and the word Present getting through and they are the same as the insider information from last week. I have MailScanner, SpamAssassin, SARE, Botnet, Razor2, Pyzor, ClamAv and f-prot all installed and as

Re: "Present" slipping through - same as "insider information"

2006-12-28 Thread Chris
On Thursday 28 December 2006 8:12 am, Vernon Webb wrote: > I have a ton of these emails getting through that have the sender's name > and the word Present getting through and they are the same as the insider > information from last week. I have MailScanner, SpamAssassin, SARE, Botnet, > Razor2, Pyz

Re: dns_available

2006-12-28 Thread Duane Hill
Not a problem. Two links I always have close by: The documentation for SA http://spamassassin.apache.org/full/3.1.x/doc/ The Wiki page for SA http://wiki.apache.org/spamassassin/ Most general configurations in the local.cf are contained in: http://spamassassin.apache.org/full/3.1.x/doc/

"Present" slipping through - same as "insider information"

2006-12-28 Thread Vernon Webb
I have a ton of these emails getting through that have the sender's name and the word Present getting through and they are the same as the insider information from last week. I have MailScanner, SpamAssassin, SARE, Botnet, Razor2, Pyzor, ClamAv and f-prot all installed and as far as I know wo

RE: dns_available

2006-12-28 Thread vertito
thanks -O > > dns_available 1 > > or > > dns_available yes > > From the documentation: dns_available { yes | test[: name1 name2...] | no } (default: test) By default, SpamAssassin will query some default hosts on the internet to attempt to check if DNS is working or not. The prob

Re: false "positive" with vbounce plugin

2006-12-28 Thread Justin Mason
noted and fixed in trunk - thx! --j. Alex Woick writes: > Hello, > > I am using the VBounce.pm plugin to catch backscatter bounces, and there > is a small problem with locally auto-created mail. The mail is is > created by Cron on a Fedora Core 5 system and is attached below. It is > falsely

Re: Precleaning SA market spam from Mbox?

2006-12-28 Thread JamesDR
David Flanigan wrote: James, Thanks for the reply. I was not planing on double scanning, the BCC idea is basically the same, though I would be doing it vial the /etc/aliases mapping to make it transparent. I am running Sendmail as the MTA. The real question is how do to the spam check, eithe

Re: Error in FuzzyOcr 3.5.x branch

2006-12-28 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Knuth wrote: > Heute (28.12.2006/05:10 Uhr) schrieb Gary V, > Jim, I have been working on a doc for Debian. It is unfinished but may >>> help you through some rough spots at this point. I have no idea when I'll >>> have ti

Problem with Update

2006-12-28 Thread sasa
Hi, I have updated SA from spamassassin-3.0.4 to spamassassin-3.1.7 with YUM method and all it's ok, but when I run sa-update I have this error: [EMAIL PROTECTED] ~]# sa-update Can't locate IO/Zlib.pm in @INC (@INC contains: /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/per