Empty_Message always triggers ?

2007-05-29 Thread Paul Hurley
I'm running SAProxy 3.1.7.0 (http://sawin32.sourceforge.net/) with standard rules plus some SARE ones, all updated via SAUpdate, along with Bayes and network testing on Windows XP SP2 and Mozilla 1.7.13. I've started receiving some obvious spam recently that didn't get picked up. Examples are

Broken perl module?

2007-05-29 Thread Simon Avery
Sometime yesterday, without me knowingly changing anything (maybe an apt-get upgrade), SA started throwing the following warnings on nearly every message. It still seems to be working okay and spam is being correctly ID'd, but the logfile's now full of these. I've tried copying a fresh copy of

Re: German Spam

2007-05-29 Thread Anders Norrbring
Daryl C. W. O'Shea skrev: For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf # SpamAssassin Channel: 70_zmi_german.

Re: How To Kill Spam Dead?

2007-05-29 Thread SM
At 18:12 29-05-2007, Eric Lemings wrote: How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book, and the closest thing to an ans

Re: check_main error in 3.20

2007-05-29 Thread Theo Van Dinter
On Tue, May 29, 2007 at 12:36:32PM -0300, Wilson A. Galafassi Jr. wrote: > I having this error at my spamassassin. > > check: no loaded plugin implements 'check_main': cannot scan! at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line 164 > > how i can fix this? Make sure th

Re: How To Kill Spam Dead?

2007-05-29 Thread jdow
From: "Michele Neylon :: Blacknight" <[EMAIL PROTECTED]> Eric Lemings wrote: How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after bo

Re: How To Kill Spam Dead?

2007-05-29 Thread Michele Neylon :: Blacknight
Eric Lemings wrote: How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book, and the closest thing to an answer that I've found i

How To Kill Spam Dead?

2007-05-29 Thread Eric Lemings
How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book, and the closest thing to an answer that I've found is the chapter in O'Reill

Re: "Malformed UTF-8 character" errors>

2007-05-29 Thread Henry Kwan
Doc Schneider wrote: > > > Not sure how you're using SA but I commented out every reference to > CIALIS2 and just committed 1.00.11 so should be available within the hour. > > Also running CentOS 4.4 you know you can upgrade to perl 5.8.8 by doing > a 'yum --enablerepo=centosplus update perl'

Re: What score do you get on this Nigerian Scam?

2007-05-29 Thread Richard Frovarp
Michael Scheidell wrote: I wish you people would stop that crap. You are phucking up the AWL scored for users@spamassassin.apache.org If your SA doesn't pick that up, and you want to post a spam, post it to a web site and post a link. If you have a problem with yahoo, fwd that copy to yahoo.

Re: AutoWhitelist

2007-05-29 Thread Matt Kettler
Sujit Acharyya-Choudhury wrote: > How about in local.cf setting > use_auto_whitelist 1 > Redundant, as it defaults to 1. It won't hurt anything, but it is not needed. > -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: 29 May 2007 13:22 > To: Sujit Acharyya-Ch

Re: problems with sa-update returning NXDOMAIN

2007-05-29 Thread Daryl C. W. O'Shea
bjquinn wrote: Hi, I'm trying to get sa-update working with the default channel. It seems that no matter what I try I always get something like the following if I do a debug output on sa-update [30900] dbg: dns: query failed: 8.1.3.updates.spamassassin.org => NXDOMAIN This applies to SA versio

Re: Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Mark Martinec
Martin, > > You got the syntax wrong, remove the commas, the qw Perl operator > > splits on whitespace and commas remain part of a filename. > Removing the commas has one effect: > Starting virus-scanner (amavisd-new):Subroutine > is_charset_ok_for_locales redefined at > /usr/lib/perl5/site_perl/

RE: What score do you get on this Nigerian Scam?

2007-05-29 Thread Michael Scheidell
I wish you people would stop that crap. You are phucking up the AWL scored for users@spamassassin.apache.org If your SA doesn't pick that up, and you want to post a spam, post it to a web site and post a link. If you have a problem with yahoo, fwd that copy to yahoo. Or blacklist them. -- Mic

What score do you get on this Nigerian Scam?

2007-05-29 Thread Ben Wylie
Can people scan the attached spam for me and let me know what scores they get? I got the following hits: ADVANCE_FEE_1, BAYES_00, HTML_MESSAGE Thanks Ben Received: from hood.systems.pipex.net (hood.systems.pipex.net [62.241.163.20]) by twilight.systems.pipex.net (Postfix) with ESMTP id

problems with sa-update returning NXDOMAIN

2007-05-29 Thread bjquinn
Hi, I'm trying to get sa-update working with the default channel. It seems that no matter what I try I always get something like the following if I do a debug output on sa-update [30900] dbg: dns: query failed: 8.1.3.updates.spamassassin.org => NXDOMAIN This applies to SA version 3.1.8 and 3.2.

Re: German Spam

2007-05-29 Thread Alex Woick
For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf Interesting, it contains a collection of stock spam rules amazi

Re: German Spam

2007-05-29 Thread Alex Woick
Well, perhaps that is a more generic spam indicator: german text but not a single Umlaut. I must think about that. You'd want a length qualifier on that test. An email of simply "Danke" would contain a very small number of umlauts. Perhaps, such a rule should look for frequently used german w

Re: German Spam

2007-05-29 Thread Daryl C. W. O'Shea
For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf # SpamAssassin Channel: 70_zmi_german.cf.zmi.sa-update.dostech.ne

Re: German Spam

2007-05-29 Thread hamann . w
Hi Alex, thank you for this nice collection ... I had started to add a few of them. I agree with you that this spammer probably is not german, but I would guess that the person uses a dictionary / translator and is composing the message on a keyboard without umlauts. As for the imageshack: soo

RE: German Spam

2007-05-29 Thread Dan Barker
Interesting is the spelling. It seems to me the author of the spam messages isn't german or of very low education, since his spelling and style is really awful - like a child of 15 years. And the spam sending software doesn't seem to be able to handle german Umlauts (äöüßÄÖÜ). Well, perhaps that

Re: German Spam

2007-05-29 Thread Alex Woick
Apart from the imageshack stuff just seem to generally have a lot of spam in the german langauge getting through the filters, has anyone else experienced the same. Certainly. It's getting through, because there are almost no german language specific rules in the default rules of SpamAssassin, an

Re: "Malformed UTF-8 character" errors>

2007-05-29 Thread Doc Schneider
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Henry Kwan wrote: > > Doc Schneider wrote: >> I just now committed more fixes for 70_sare_obfu.cf, obfu0 and obfu1. >> These should be available within the hour. >> >> Please folks if you have a problem with a rule set from SARE please let >> us know

Re: "Malformed UTF-8 character" errors>

2007-05-29 Thread Henry Kwan
Doc Schneider wrote: > > I just now committed more fixes for 70_sare_obfu.cf, obfu0 and obfu1. > These should be available within the hour. > > Please folks if you have a problem with a rule set from SARE please let > us know what rule it is and what rule set it is in. > Hi Doc, I just updat

AWL file permissions

2007-05-29 Thread Alex Howansky
Hello, I'm running SA 3.2.0 on FC6 via spamd. I'm using AWL with per-user configuration. I invoke spamd with: --virtual-config-dir=/whatever/%d/%l Thus, when a message arrives for [EMAIL PROTECTED], SA creates: /whatever/domain.com/ /whatever/domain.com/joe/ /whatever/domain.com/joe/auto-wh

blocklist

2007-05-29 Thread Euroka
Hi, I just received a reply telling me my mail was recognised as spam. As I can tell from the header in the reply he is using an old version of SA and the following: URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist * [URIs: sovoxxx.be] Does this mean I'm blacklisted some

RE: sa-update - max children

2007-05-29 Thread Duane Hill
On Tue, 29 May 2007, Jean-Paul Natola wrote: I just ran sa-supdate Now I see my perl going through the roof and my maillog now says prefork: child states: BB May 29 11:11:03 milter spamd[20122]: prefork: server reached --max-children setting, consider raising it This was not happenin

RE: what scores do you get on this

2007-05-29 Thread Koopmann, Jan-Peter
On Tuesday, May 29, 2007 5:15 PM ram wrote: > bayes_99 = 7.0. Oops dont you get FPs on that. Maybe once or twice a month. Other negative rules usually get the mails below 6 which is my spam threashold. Using MailScanner those mails are still delivered to my Junk Mail Folder in Outlook. Everythi

check_main error in 3.20

2007-05-29 Thread Wilson A. Galafassi Jr.
Hello. I having this error at my spamassassin. check: no loaded plugin implements 'check_main': cannot scan! at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line 164 how i can fix this? Thanks Wilson Galafassi

RE: sa-update - max children

2007-05-29 Thread Jean-Paul Natola
I just ran sa-supdate Now I see my perl going through the roof and my maillog now says prefork: child states: BB May 29 11:11:03 milter spamd[20122]: prefork: server reached --max-children setting, consider raising it This was not happening prior to sa-update I ran this morning Thes

Re: AutoWhitelist

2007-05-29 Thread Kris Deugau
AbbaComm.Net wrote: > are any ISP's out there using AWL and finding it "extremely" effective to > the zillionth power? I saw no reason to disable it when I first set up a spamfilter server for the small ISP I started working for originally. This was ~SA2.4, so there were no DNS-based URI tests an

RE: what scores do you get on this

2007-05-29 Thread ram
On Tue, 2007-05-29 at 17:09 +0200, Koopmann, Jan-Peter wrote: > On Tuesday, May 29, 2007 4:53 PM ram wrote: > > > This is a very intelligently written scam mail > > > > http://ecm.netcore.co.in/tmp/missed.txt > > > > I set my servers to pretty aggressive custom rules , but I am not > > able to c

sa-update - max children

2007-05-29 Thread Jean-Paul Natola
I just ran sa-supdate Now I see my perl going through the roof and my maillog now says prefork: child states: BB May 29 11:11:03 milter spamd[20122]: prefork: server reached --max-children setting, consider raising it This was not happening prior to sa-update I ran this morning These s

RE: what scores do you get on this

2007-05-29 Thread Koopmann, Jan-Peter
On Tuesday, May 29, 2007 4:53 PM ram wrote: > This is a very intelligently written scam mail > > http://ecm.netcore.co.in/tmp/missed.txt > > I set my servers to pretty aggressive custom rules , but I am not > able to catch this spam > > Bayes has messed up agreed but even not counting bayes al

RE: AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
I was interested in the following plugin and hence AutoWhitelist: SAGrey SAGrey is two-phased, in that it first looks to see if the current score of the current message exceeds the user-defined threshold value (as set in one of the cf files), and then looks to see if the message sender's email and

what scores do you get on this

2007-05-29 Thread ram
This is a very intelligently written scam mail http://ecm.netcore.co.in/tmp/missed.txt I set my servers to pretty aggressive custom rules , but I am not able to catch this spam Bayes has messed up agreed but even not counting bayes almost no other rules hit. Notwithstanding using custom spamsc

RE: AutoWhitelist

2007-05-29 Thread Duane Hill
On Tue, 29 May 2007, AbbaComm.Net wrote: I purposely set use_auto_whitelist 0 are any ISP's out there using AWL and finding it "extremely" effective to the zillionth power? I have it shut off as well at the server level (local.cf). However, I do provide the option to be turned on at the pe

RE: AutoWhitelist

2007-05-29 Thread AbbaComm.Net
I purposely set use_auto_whitelist 0 are any ISP's out there using AWL and finding it "extremely" effective to the zillionth power? - rh -- Abba Communications Spokane, WA www.abbacomm.net

RE: [3.2] BlackBerry Emails Being Tagged as Spam

2007-05-29 Thread AbbaComm.Net
> > whitelist_from_rcvd *blackberry.com blackberry.com > > > Dan > Dan, Is this valid and does it truly take care of "ALL" blackberry cases? - rh -- Abba Communications Spokane, WA www.abbacomm.net

RE: [3.2] BlackBerry Emails Being Tagged as Spam

2007-05-29 Thread Dan Barker
whitelist_from_rcvd *blackberry.com blackberry.com Dan -Original Message- From: sumnicexNY [mailto:[EMAIL PROTECTED] Sent: Monday, May 28, 2007 8:49 PM To: users@spamassassin.apache.org Subject: [3.2] BlackBerry Emails Being Tagged as Spam Hello, My hosting provider recently upgrad

RE: AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
Sorry, my mistake. I have to set use_auto_whitelist 1. Thanks -Original Message- From: Sujit Acharyya-Choudhury [mailto:[EMAIL PROTECTED] Sent: 29 May 2007 13:37 To: Matt Kettler Cc: users@spamassassin.apache.org Subject: RE: AutoWhitelist How about in local.cf setting use_auto_white

Re: SpamAssassin 3.2 compatiblity

2007-05-29 Thread Matthias Keller
decoder wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 after I saw that there are incompatiblities with SA 3.2 and FuzzyOcr, I decided to try to fix them although I'm still very busy (preparing for Bachelor thesis). There is still another problem though, the formatting of the rule descri

RE: AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
How about in local.cf setting use_auto_whitelist 1 -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: 29 May 2007 13:22 To: Sujit Acharyya-Choudhury Cc: users@spamassassin.apache.org Subject: Re: AutoWhitelist Sujit Acharyya-Choudhury wrote: > I am using spamassassin 3

Re: AutoWhitelist

2007-05-29 Thread Matt Kettler
Sujit Acharyya-Choudhury wrote: > I am using spamassassin 3.1.7 (even now) on SLES 9 (64-bit). I am > having configuring the AutoWhitelist to work properly. Any help will > be appreciated. > What are you trying to configure about it? It should be enabled by default, if not, uncomment this li

AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
I am using spamassassin 3.1.7 (even now) on SLES 9 (64-bit). I am having configuring the AutoWhitelist to work properly. Any help will be appreciated. Many thanks -- Sujit Choudhury ISLS University of Westminster Ext 3851 / 1779

Re: Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Martin Hochreiter
>> @additional_perl_modules = qw( >> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Locales.pm, >> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Bayes.pm, >> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/BodyEval.pm, >> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/

Re: Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Mark Martinec
Martin, > Since I upgraded to Spamassassin 3.20 I get this (amavis) messages in my > logfiles (for each incoming mail) Amavis New 2.4.3 > May 29 08:21:05 linux1.rk /usr/sbin/amavisd[4365]: (04365-01) extra > modules loaded: Mail/SpamAssassin/Locales.pm, > Mail/SpamAssassin/Plugin/Bayes.pm, Mail