Re: Messages receiving High Score but still getting through

2007-04-01 Thread J.
I use qmail-scanner so my setup is a little different. I've never seen a score of "s" before. I do occasionally have a similar problem. Sometimes a message gets a score of "?" and the required score is also shown as "?". I haven't figured out what causes that, but when I run that message through sa

Re: Messages receiving High Score but still getting through

2007-04-01 Thread kiwidesign
I think you may misunderstand. We have a certain email, that is spam. Lets call it 'A'. When the email A passes through the mail system, it is grabbed by MailScanner, which in turn puts it through SpamAssassin. The mail is then delivered if the score is less than the threshhold (5), otherwise qu

Re: Messages receiving High Score but still getting through

2007-04-01 Thread Phil Barnett
On Sunday 01 April 2007 22:06, kiwidesign wrote: > I am relatively new to SpamAssassin and I am having a bit of difficulty > tracking down the reason for some spam messages getting through. When I > test the message it comes up with score of say 23 points with 5 required. > To me this indicates th

Re: Messages receiving High Score but still getting through

2007-04-01 Thread kiwidesign
When I run spamassassin -t on the messages this is what I get Content analysis details: (23.0 points, 5.0 required) pts rule name description -- -- -0.0 SPF_HELO_PASS SPF: HELO matches SPF record

Re: Messages receiving High Score but still getting through

2007-04-01 Thread Matt Kettler
kiwidesign wrote: > Hi all, > > I am relatively new to SpamAssassin and I am having a bit of difficulty > tracking down the reason for some spam messages getting through. When I test > the message it comes up with score of say 23 points with 5 required. To me > this indicates that it should have be

Messages receiving High Score but still getting through

2007-04-01 Thread kiwidesign
Hi all, I am relatively new to SpamAssassin and I am having a bit of difficulty tracking down the reason for some spam messages getting through. When I test the message it comes up with score of say 23 points with 5 required. To me this indicates that it should have been stopped as spam, however

Re: Whitelisting subject line

2007-04-01 Thread Matt Kettler
apc wrote: > > Dan Barker wrote: > >> Well, this works here. >> >> whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com >> >> Dan >> >> >> >> > > Thanks! I have added that; I am sure it will works if it works for you. > > Generally this works because SA honors the "Return-Path" header as an a

Re: Per User Settings?

2007-04-01 Thread Benny Pedersen
On Sun, April 1, 2007 21:12, Davin Flatten wrote: > Please read http://wiki.apache.org/spamassassin/UsingSQL > We have done the same thing at our site and it works great. still have to wait here for amavisd-new and spamassassin do this, problem is that recipient user is not used, but only unix us

Re: Subject Line Not changing

2007-04-01 Thread dougp23
Thanks! That and /etc/init.d/spamass-milter had the -m switch on. Now we're changing subjects!!! Theo Van Dinter-2 wrote: > > On Sun, Apr 01, 2007 at 05:49:24AM -0700, dougp23 wrote: >> #Change the subject of suspected spam >> rewrite_header_subject***SPAM*** > > It's: > > rewrite_h

Re: Subject Line Not changing

2007-04-01 Thread Theo Van Dinter
On Sun, Apr 01, 2007 at 05:49:24AM -0700, dougp23 wrote: > #Change the subject of suspected spam > rewrite_header_subject***SPAM*** It's: rewrite_header Subject ... not: rewrite_header_subject ... "perldoc Mail::SpamAssassin::Conf" :) -- Randomly Selected Tagline: "Y'know, Zap, onc

Re: Per User Settings?

2007-04-01 Thread Davin Flatten
Paul- Please read http://wiki.apache.org/spamassassin/UsingSQL We have done the same thing at our site and it works great. -Davin

RE: YA sa-learn question

2007-04-01 Thread Dan Barker
Yes, dump magic and note that the nspam and nham increase. For example: call \perl\bin\sa-learn --dbpath c:\imail\visioncomm.net --dump magic > c:\imail\magic.txt produces: 0.000 0 3 0 non-token data: bayes db version 0.000 01265946 0 non-token data: nspam 0.000 0 11742

Re: Sunday Morning Email Geek

2007-04-01 Thread dougp23
Yeah, I have restarted spamd, spamassassin-milter, and sendmail. It just seems like the new "required score" should be getting reflected in /var/log/maillog. Bob McClure Jr-2 wrote: > > On Sun, Apr 01, 2007 at 05:41:03AM -0700, dougp23 wrote: >> >> Here it is Sunday morning and I'm playing wit

YA sa-learn question

2007-04-01 Thread J.
I thought I had solved my sa-learn issues by always doing su qscand whenever I want to run sa in debug mode or run sa-learn. Today I got some false positives and some false negatives and decided to train the bayes db using them. After I ran sa-learn for both ham and spam I looked at the bayes db's

Re: spamassassin vs spamc help

2007-04-01 Thread Bill McCormick
J. wrote: I've got two gif attachment emails with score=? required=? in the header. I run them from the command line with spamassassin --debug and get scores through the roof, but when I run them from the command line with spamc -r I get silence. Please help! spamc is a client to the spamd s

Re: Newbie, Has Questions

2007-04-01 Thread Bill McCormick
dougp23 wrote: I am searching the forums, but some of this is just beyond me! Just setup a new email server, with sendmail and spamassassin and spamass-milter, etc. Because the system is new, and the bayes hasn't gotten a lot of practice yet (but it will!!) we are getting lots of spam. So my

RE: Sender Address Verification is NOT abouse and very effective

2007-04-01 Thread Rick Cooper
> -Original Message- > From: Marc Perkel [mailto:[EMAIL PROTECTED] > Sent: Friday, March 30, 2007 11:42 AM > To: users@spamassassin.apache.org > Subject: Re: Sender Address Verification is NOT abouse and > very effective > > > > John D. Hardin wrote: > > Is there a non-abusive way t

RE: Whitelisting subject line

2007-04-01 Thread apc
Dan Barker wrote: > > Well, this works here. > > whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com > > Dan > > > Thanks! I have added that; I am sure it will works if it works for you. -- View this message in context: http://www.nabble.com/Whitelisting-subject-line-tf3501030.html#a977967

RE: Whitelisting subject line

2007-04-01 Thread Dan Barker
Well, this works here. whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com Dan -Original Message- From: apc [mailto:[EMAIL PROTECTED] Sent: Sunday, April 01, 2007 10:18 AM To: users@spamassassin.apache.org Subject: RE: Whitelisting subject line Jean-Paul Natola wrote: > > > I always r

RE: New server - which rulesets?

2007-04-01 Thread frank jones
I'd check out Rules Du Jour and Rules Emporium (though they might both be the same thing). From: "Paul Hutchings" <[EMAIL PROTECTED]> To: Subject: RE: New server - which rulesets? Date: Sun, 1 Apr 2007 11:52:42 +0100 Fair point. This box is an inbound relay, so effectively our SA rules app

RE: Whitelisting subject line

2007-04-01 Thread apc
Jean-Paul Natola wrote: > > > I always run into that with yahoo groups- why not just whitelist the > yahoogroups address that you are subscribed to? > > Because the messages arrive with the address of the sender in the to address; not Yahoo groups. It would mean whitelisting every member o

RE: Whitelisting subject line

2007-04-01 Thread Jean-Paul Natola
From: apc [mailto:[EMAIL PROTECTED] Sent: Sun 4/1/2007 9:05 To: users@spamassassin.apache.org Subject: Whitelisting subject line Hi, I have been a Linux tech for many years, and now I want to get the most out of Spam Assassin. My email address has been around

Whitelisting subject line

2007-04-01 Thread apc
Hi, I have been a Linux tech for many years, and now I want to get the most out of Spam Assassin. My email address has been around for about 15 years and has found its way on to just about every spam list out there; I receive over 3000 spam messages per day currently; of which my basic Spam Assas

RE: Sunday Morning Email Geek

2007-04-01 Thread Jean-Paul Natola
Here it is Sunday morning and I'm playing with the email server!!! lol! Oh well! Anyways, here's a question: I edited my local.cf to change the spam score from 7.5 to 5.0 When I tail maillog, I still see "required score 7.5". I am using sendmail, spamd, spamass-milter. When I make a change, is t

Subject Line Not changing

2007-04-01 Thread dougp23
Yes, I know this has been asked SSS many times, but I need to just ask again. Sendmail, spamd, spamass-milter. /etc/sysconfig/spamass-milter says: ### Override for your different local config SOCKET=/var/run/spamass.sock ### Default parameter for spamass-milter is -f (work in the background

Re: Sunday Morning Email Geek

2007-04-01 Thread Bob McClure Jr
On Sun, Apr 01, 2007 at 05:41:03AM -0700, dougp23 wrote: > > Here it is Sunday morning and I'm playing with the email server!!! lol! > Oh well! > Anyways, here's a question: > I edited my local.cf to change the spam score from 7.5 to 5.0 > When I tail maillog, I still see "required score 7.5".

Sunday Morning Email Geek

2007-04-01 Thread dougp23
Here it is Sunday morning and I'm playing with the email server!!! lol! Oh well! Anyways, here's a question: I edited my local.cf to change the spam score from 7.5 to 5.0 When I tail maillog, I still see "required score 7.5". I am using sendmail, spamd, spamass-milter. When I make a change, is

.ani files

2007-04-01 Thread Mário Gamito
Hi, I know that this more a qmail-scanner issue, but i would like to hear your advice on this. Is it possible to block animated cursors files, but with their file extensions changed to something other than .ani, not knowing in advance what those extensions can be ? Any help would be appreciated.

RE: New server - which rulesets?

2007-04-01 Thread Paul Hutchings
Fair point. This box is an inbound relay, so effectively our SA rules apply to everyone's mail so as usual one persons spam is another persons "I subscribed to this". I figured spammers have trends and at any given time there is probably a "recommended" list of additional rules that fit most situ

Re: New server - which rulesets?

2007-04-01 Thread Michele Neylon :: Blacknight
Paul Hutchings wrote: What's the current thinking on the best rulesets to use to catch the most spam whilst generating fewest false positives? How long is a piece of string? Without knowing what kind of users you have and what kind of thresholds you've set it's an impossible question to answ

New server - which rulesets?

2007-04-01 Thread Paul Hutchings
What's the current thinking on the best rulesets to use to catch the most spam whilst generating fewest false positives? I'm building a new relay and so far I'm running the default rules (updated by sa-update) and the rules from the OpenProtect sa-update channel. Any suggestions what other rulese