The BOGUS_VIRUS_WARNINGS ruleset will filter out a huge amount of this junk.
I think Justin has some new sandbox rules that also work well, but I don't
know which versions of SA they will work on.
Loren
Luis Hernán Otegui wrote:
Hi, List, my users are getting increasing amounts of "Mail Delivery
Subsystem" mails, and I suspect spammers are using their addresses as
senders. I have my servers registered with SPF, but now I wonder how
could I stop this mails from getting to their accounts?
I've
regarding the problem where mail from horde gets hit with
HELO_DYNAMIC_DHCP rule due to sender's IP address.
see below...
do you mean SA 3.1?
On Apr 14, 2005, at 3:08 PM, Justin Mason wrote:
check the bugzilla -- I'm pretty sure this is fixed for 3.1.0.
- --j.
This is the IP from th
Mark Martinec wrote:
> Theo Van Dinter writes:
>
>> body rules aren't run on lines, they're run on paragraphs,
>> so that text is in the middle of a string.
>>
>
> Matt Kettler writes:
>
>> Use rawbody for this. Body rules have CR/LF stripped out.
>>
>
> Giving whole paragraphs to r
I have just installed FOCR 3.5.1 with the hashdb option. I have been
receiving image spams about China Fruits Corporation which are
cleverly designed not to contain words in the words list. How do I
insert the hash into the database and label this image as spam?
I have tried - unsuccessfully:
Theo Van Dinter writes:
> body rules aren't run on lines, they're run on paragraphs,
> so that text is in the middle of a string.
Matt Kettler writes:
> Use rawbody for this. Body rules have CR/LF stripped out.
Giving whole paragraphs to regexp is fine, but why are newlines
stripped out in 'body'
or possibly a bug :( Worth opening a bug on bugzilla. You could try
strace'ing the process to see exactly what it's seeing...
i'll open a bug, but i'm useless -- without a little guidance -- as to
what to do re: strace-ing, as i'm on a mac.
thanks.
snowcrash+spamassassin writes:
> hi,
>
> > that's to be expected until you actually run "sa-compile" to compile
> > the ruleset...
>
> ah. i'd misunderstood (ok, presumed ...) that that was automatically
> done ... thanks!
>
> now,
>
> % /usr/local/spamassassin/bin/sa-compile --sudo -D
>
hi,
that's to be expected until you actually run "sa-compile" to compile
the ruleset...
ah. i'd misunderstood (ok, presumed ...) that that was automatically
done ... thanks!
now,
% /usr/local/spamassassin/bin/sa-compile --sudo -D
[21503] dbg: logger: adding facilities: all
snowcrash+spamassassin writes:
> hi,
>
> intrigued by some of the forthcoming features of v3.2, i've built up a
> test-isntance of,
>
> spamassassin --version
> SpamAssassin version 3.2.0-pre1-r499012
> running on Perl version 5.8.8
>
> currently, on launch o
hi,
intrigued by some of the forthcoming features of v3.2, i've built up a
test-isntance of,
spamassassin --version
SpamAssassin version 3.2.0-pre1-r499012
running on Perl version 5.8.8
currently, on launch of sa, i see @ console,
[21402] error
Scott Lockwood wrote:
> Is that per user? So, if I nuke the whitelist, this should go away?
>
> On Tue, 2007-02-20 at 17:37 +0100, Raymond Dijkxhoorn wrote:
> >
> > USER_IN_WHITELIST !
Keep in mind that this is not referring to the auto whitelist. This is
a hit from one of the whitelist_from or
Hi!
Is that per user? So, if I nuke the whitelist, this should go away?
Anyone have any ideas???
USER_IN_WHITELIST !
Thats a bit depending on your setup. But trashing it would be a nice idea,
most people dont use the whitelist anyway. I dont...
Bye,
Raymond.
Is that per user? So, if I nuke the whitelist, this should go away?
On Tue, 2007-02-20 at 17:37 +0100, Raymond Dijkxhoorn wrote:
> Hi!
>
> > X-Spam-Status: No, score=-79.4 required=5.0
> > tests=BAYES_99,HELO_DYNAMIC_HCC,
> > HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET,
On Tuesday 20 February 2007 17:35, Scott Lockwood wrote:
> X-Spam-Status: No, score=-79.4 required=5.0
> tests=BAYES_99,HELO_DYNAMIC_HCC,
> HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET,
> RCVD_IN_XBL,SPF_SOFTFAIL,UPPERCASE_25_50,USER_IN_WHITELIST autolearn=no
> version=3.1
Display the scores too!
Put tests=_TESTSSCORES(,)_ in your local.cf and you won't scratch your head
so hard next time.
It puts in lines like:
X-Spam-Status: No, score=-100.0 required=5.0
tests=AWL=0.009,BAYES_50=0.001,SPF_PASS=-0.001,USER_IN_WHITELIST=-100
autolearn=no version=3.1.7
when coded
Hi!
X-Spam-Status: No, score=-79.4 required=5.0
tests=BAYES_99,HELO_DYNAMIC_HCC,
HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_XBL,SPF_SOFTFAIL,UPPERCASE_25_50,USER_IN_WHITELIST autolearn=no
version=3.1.1
I keep getting these messages with really low scores t
X-Spam-Status: No, score=-79.4 required=5.0
tests=BAYES_99,HELO_DYNAMIC_HCC,
HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_XBL,SPF_SOFTFAIL,UPPERCASE_25_50,USER_IN_WHITELIST autolearn=no
version=3.1.1
I keep getting these messages with really low scores that sho
Thanks for the quick reply & bonus suggestion, Matt.
I'll continue modeling this now that I know !~ should function as
expected, i.e. "return true if the pattern is not matched".
> John Minnihan wrote:
>> SA Team,
>>
>> I have a fully functional SA installation that is serving me very
>> well.
OK, I'll give it a try. Thanks a lot
Luis
2007/2/20, Justin Mason <[EMAIL PROTECTED]>:
Jeff Chan writes:
> On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote:
> > Hi, List, my users are getting increasing amounts of "Mail Delivery
> > Subsystem" mails, and I suspect spammers are usi
Jeff Chan writes:
> On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote:
> > Hi, List, my users are getting increasing amounts of "Mail Delivery
> > Subsystem" mails, and I suspect spammers are using their addresses as
> > senders. I have my servers registered with SPF, but now I wonder ho
Jeff Chan wrote:
On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote:
Hi, List, my users are getting increasing amounts of "Mail Delivery
Subsystem" mails, and I suspect spammers are using their addresses as
senders. I have my servers registered with SPF, but now I wonder how
could I
On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote:
> Hi, List, my users are getting increasing amounts of "Mail Delivery
> Subsystem" mails, and I suspect spammers are using their addresses as
> senders. I have my servers registered with SPF, but now I wonder how
> could I stop this mails
Hi, List, my users are getting increasing amounts of "Mail Delivery
Subsystem" mails, and I suspect spammers are using their addresses as
senders. I have my servers registered with SPF, but now I wonder how could I
stop this mails from getting to their accounts?
I've tried to explain to them that
John Minnihan wrote:
> SA Team,
>
> I have a fully functional SA installation that is serving me very
> well. I use Mailscanner and a few custom rules, and am generally
> very pleased with the results.
>
> There’s one more rule that I’d like to run, but haven’t figured out
> how to implement it.
SA Team,
I have a fully functional SA installation that is serving me very
well. I use Mailscanner and a few custom rules, and am generally very
pleased with the results.
There?s one more rule that I?d like to run, but haven?t figured out how
to implement it. I want to use a header rule that wi
You might be able to make something work with !~, but the easy way is to use a
meta rule to reverse the sense.
header __TO_TESTTo =~ /my name/i
metaTO_TEST!__TO_TEST
score TO_TEST 5
I'm going to assume you know the FP consequences of something like this, and
not bother with the stan
SA Team,
I have a fully functional SA installation that is serving me very
well. I use Mailscanner and a few custom rules, and am generally very
pleased with the results.
There’s one more rule that I’d like to run, but haven’t figured out how
to implement it. I want to use a header rule that wi
On Monday 19 February 2007 10:44 pm, Theo Van Dinter wrote:
> On Mon, Feb 19, 2007 at 10:32:18PM -0600, Chris wrote:
> > > bayes_auto_learn 0
> >
> > Maybe I should be a bit more clear, I had the above in my local.cf and
> > whenever a message whether it ham or spam came in it was tagged
> > autol
29 matches
Mail list logo
