Re: Check $HOME for an ever growing razor-agent.log

2007-10-18 Thread Bill Landry
[EMAIL PROTECTED] wrote the following on 10/18/2007 11:01 PM -0800: > Check your $HOME for an ever growing ~/razor-agent.log apparently > brought in by sa-update two days ago, which will one day fill your > disk, according to a web search. > > How to tell it that just like the other 99% of spamassa

Re: Check $HOME for an ever growing razor-agent.log

2007-10-18 Thread Theo Van Dinter
On Fri, Oct 19, 2007 at 02:01:25PM +0800, [EMAIL PROTECTED] wrote: > Check your $HOME for an ever growing ~/razor-agent.log apparently > brought in by sa-update two days ago, which will one day fill your > disk, according to a web search. sa-update doesn't impact the razor config at all. If you'r

Check $HOME for an ever growing razor-agent.log

2007-10-18 Thread jidanni
Check your $HOME for an ever growing ~/razor-agent.log apparently brought in by sa-update two days ago, which will one day fill your disk, according to a web search. How to tell it that just like the other 99% of spamassassin, logging should be off by default? Docs not clear. Or must one rm razor

RE: coming to your inbox: mp3 stock spams

2007-10-18 Thread Rob Sterenborg
Luis Hernán Otegui wrote: > Anyway, the Faculty I work for tries to keep the e-mail system only > for research purposes, and mostly students and (sadly) technicians > tend to goof around with mail. Bandwidth isn't cheap here, so they > decided to straightly cut those extensions. Remember, the custo

Re: loadplugin TextCat from user_prefs

2007-10-18 Thread Matt Kettler
[EMAIL PROTECTED] wrote: > loadplugin Mail::SpamAssassin::Plugin::TextCat > #I hate ru: > ok_languages af am ar be bg ca cs da de el en es fa fi fr he hi hr hu hy id > it ja ka ko mr ms ne nl no pl pt qu ro sk sq sr sv sw ta th tl tr uk vi zh > add_header all languages _LANGUAGES_ > #score UNWANTE

loadplugin TextCat from user_prefs

2007-10-18 Thread jidanni
b> http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5675 >> > Don't put loadplugin statements into your .cf files >> .cf files? I put it in user_prefs! -- my best guess as to how to >> use this jazz. b> *DEFINITELY* not in your user_prefs. b> The Mail::SpamAssassin::Conf document is quite c

RE: upgrade question

2007-10-18 Thread Michael Scheidell
> -Original Message- > From: Luis Hernán Otegui [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 18, 2007 11:49 AM > To: [EMAIL PROTECTED] > Cc: users@spamassassin.apache.org > Subject: Re: upgrade question > > > Hi, Chuck > > > Well, it all depends on how do you have installed SA, a

Re: upgrade question

2007-10-18 Thread Matt Kettler
Chuck Campbell wrote: > I'm sure this is a FAQ, but I didn't find it on the web page FAQ section. > > Is there a "how to" for upgrading from 2.63 to present release (3.2.3)? > If not, please, some pointers on what to read to make this as painless as > possible. > Well, there's no true HOWTO, but

Re: MP3 Spam

2007-10-18 Thread Justin Mason
UxBoD writes: > Does anybody have one of these, or different one, that you could upload > somewhere so can do some analysis ? sure: http://taint.org/x/2007/mp3spam.txt anyway, these rules catch them as far as I can tell: ifplugin Mail::SpamAssassin::Plugin::MIMEHeader mimeheader __CTYPE_STO

Re: coming to your inbox: mp3 stock spams

2007-10-18 Thread Luis Hernán Otegui
Hi, Per 2007/10/18, Per Jessen <[EMAIL PROTECTED]>: > Luis Hernán Otegui wrote: > > > We block .avi, .mp3, .mpg, etc. here, because we think it's a waste of > > bandwith to share those extensions via email, > > Voicemail (from a mobile for instance) is quite often sent in .wav > or .mp3 format, so

Re: Trusted relays and SPF usable envelope sender

2007-10-18 Thread Daryl C. W. O'Shea
ram wrote: Hi, I have been using spamassassin on my MX server ( postfix + MailScanner + SA ) Now I want to run the MX on a different server and relay to the SA server, but my SPF checks have stopped working In the SA debug mode I can see - spf: relayed through one or more truste

MP3 Spam

2007-10-18 Thread UxBoD
Does anybody have one of these, or different one, that you could upload somewhere so can do some analysis ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserve

Re: coming to your inbox: mp3 stock spams

2007-10-18 Thread Per Jessen
Luis Hernán Otegui wrote: > We block .avi, .mp3, .mpg, etc. here, because we think it's a waste of > bandwith to share those extensions via email, Voicemail (from a mobile for instance) is quite often sent in .wav or .mp3 format, so we don't just plainly block those. /Per Jessen, Zürich

Re: upgrade question

2007-10-18 Thread Luis Hernán Otegui
Hi, Chuck 2007/10/18, Chuck Campbell <[EMAIL PROTECTED]>: > I'm sure this is a FAQ, but I didn't find it on the web page FAQ section. > > Is there a "how to" for upgrading from 2.63 to present release (3.2.3)? > If not, please, some pointers on what to read to make this as painless as > possible.

upgrade question

2007-10-18 Thread Chuck Campbell
I'm sure this is a FAQ, but I didn't find it on the web page FAQ section. Is there a "how to" for upgrading from 2.63 to present release (3.2.3)? If not, please, some pointers on what to read to make this as painless as possible. As usual, thing have been working (reasonably), so I haven't consid

Trusted relays and SPF usable envelope sender

2007-10-18 Thread ram
Hi, I have been using spamassassin on my MX server ( postfix + MailScanner + SA ) Now I want to run the MX on a different server and relay to the SA server, but my SPF checks have stopped working In the SA debug mode I can see - spf: relayed through one or more trusted relays, canno

RE: Bit OT but it's about SPAM

2007-10-18 Thread Randal, Phil
Well, in our case, if they are false positives being blocked at the MTA level, then: 1: the host is listed in a very reliable blacklist which is easy to delist from (CBL) and would thus be blocked by a great number of other's mail servers. I'd trawled our logs and already made exceptions to cover

Re: Bit OT but it's about SPAM

2007-10-18 Thread DAve
Bart Schaefer wrote: > On 10/17/07, Randal, Phil <[EMAIL PROTECTED]> wrote: >> Hyperbole? >> >> Well, let's take a look at the figures on my mail relay boxes > > Not to single out Phil, but so far everyone is quoting (among other > things) the percentage of mail that they reject out of hand. You'

Re: Bouncing or just *deleting* emails from certain countries

2007-10-18 Thread John D. Hardin
On Wed, 17 Oct 2007, Chris wrote: > >> Does anyone know of a way, that whenever someone > >> emails > >> from say, for example, Nigeria, Korea, Russia and > >> China, the email either gets deleted by Spamassassin > > >-Original Message- > >From: John D. Hardin [mailto:[EMAIL PROTECTED] >

Re: Bit OT but it's about SPAM

2007-10-18 Thread Bart Schaefer
On 10/17/07, Randal, Phil <[EMAIL PROTECTED]> wrote: > Hyperbole? > > Well, let's take a look at the figures on my mail relay boxes Not to single out Phil, but so far everyone is quoting (among other things) the percentage of mail that they reject out of hand. You're all 100% confident that none

Re: coming to your inbox: mp3 stock spams

2007-10-18 Thread Luis Hernán Otegui
Well, 2007/10/18, ram <[EMAIL PROTECTED]>: > On Thu, 2007-10-18 at 09:51 +0200, Yet Another Ninja wrote: > > coming to your inbox: mp3 stock spams > > Atleast 70% of email users dont have their speakers on, the spammer has > got his basics wrong > > We block .avi, .mp3, .mpg, etc. here, because we

RE: unsubscribed

2007-10-18 Thread Steve Ingraham
> -Original Message- > From: Nigel Frankcom [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 17, 2007 8:54 PM > To: users@spamassassin.apache.org > Subject: Re: unsubscribed > > > On Thu, 18 Oct 2007 00:16:06 +0200, mouss <[EMAIL PROTECTED]> wrote: > > >Rob Sterenborg wrote: > >>

Re: We need help with error messages

2007-10-18 Thread Jeff Chan
Quoting Alan Morgan <[EMAIL PROTECTED]>: > Hi, > > We use SPAM Assassin in Silverpop. We have been having a tough time with > the messages and results after running SPAM A. Can someone help? We want a > guide of definitions. > > The latest we got is >> 2.2 REMOVE_BEFORE_LINK BODY: Removal

We need help with error messages

2007-10-18 Thread Alan Morgan
Hi, We use SPAM Assassin in Silverpop. We have been having a tough time with the messages and results after running SPAM A. Can someone help? We want a guide of definitions. The latest we got is >> 2.2 REMOVE_BEFORE_LINK BODY: Removal phrase right before a link Thanks, Alan D Morgan MTD

spam scores for reverse DNS

2007-10-18 Thread YMGT
Hi Guys, I am sending two emails from the same system. One of these emails is giving me extra spam penalty scores for failed reverse DNS tests. The header of that email is: === Return-Path: <[EMAIL PROTECTED]> Received: from gate9.gate.sat.mlsrvr.com (gate9.gate.sat.mlsrvr

Re: Spamassassin and exim4

2007-10-18 Thread Mark Adams
On Wed, Oct 17, 2007 at 08:48:55AM -0700, Steven Kurylo wrote: >> >> My question is - Does spamassassin scan the mail for each recipient? or >> does it scan only once? If it is the later I would not expect >> spamassassin to fall over each time one of these mailouts is sent. >> >> Is this due to i

Re: coming to your inbox: mp3 stock spams

2007-10-18 Thread ram
On Thu, 2007-10-18 at 09:51 +0200, Yet Another Ninja wrote: > coming to your inbox: mp3 stock spams Atleast 70% of email users dont have their speakers on, the spammer has got his basics wrong

Re: trusted_networks and RCVD_IN_DNSWL_*

2007-10-18 Thread Lars Ippich
Alex, > For this, SA 3.2.* has its own rules for DNSWL, which you throw away > with your custom rule, since they are identically named. The built-in > rule for SA 3.2.* is: > > header RCVD_IN_DNSWL_LOW eval:check_rbl_sub('dnswl-firsttrusted', > '127.0.\d+.1') > describe RCVD_IN_DNSWL_LOW

Re: trusted_networks and RCVD_IN_DNSWL_*

2007-10-18 Thread Alex Woick
Lars Ippich schrieb am 18.10.2007 09:32: header RCVD_IN_DNSWL_LOWX-DNS-Whitelist =~ /^low/ scoreRCVD_IN_DNSWL_LOW-1 describe RCVD_IN_DNSWL_LOWSender listed at http://www.dnswl.org/, low trust [...] # web.de trusted_networks217.72.192. 2) Postfix adds the X-DNS-Whit

Re: How to block the bat!

2007-10-18 Thread Matthias Haegele
Robert Braver schrieb: Hello Payne, On Wednesday, October 17, 2007, 9:43:25 PM, you wrote: c> spam I am using is coming from the mail program. c> http://www.ritlabs.com/en/products/thebat/ Just to be clear, I doubt highly that the spam you are seeing is coming from an actual copy of The Bat.

Re: coming to your inbox: mp3 stock spams

2007-10-18 Thread Xueron Nee
Hi Yet Another Ninja, Yes. We found a lot of such spams these days. more and more. Any good ideas? Yet Another Ninja wrote: > coming to your inbox: mp3 stock spams > > > > > Y_A_N -- Xueron Nee <[EMAIL PROTECTED]>

coming to your inbox: mp3 stock spams

2007-10-18 Thread Yet Another Ninja
coming to your inbox: mp3 stock spams Y_A_N

Re: How to trust my "domain"?

2007-10-18 Thread Matus UHLAR - fantomas
On 17.10.07 11:45, Skip wrote: > Guess this would help: > > Using sendmail 8.13.8 with SA 3.2.3 do you use spamass-milter? Look at -i option > > From: Chris 'Xenon' Hanson [mailto:[EMAIL PROTECTED] > >Usually you do this with a combination of trusted_networks > > and exclusion in your scan

Re: Bouncing *or* just deleting emails from certain countries

2007-10-18 Thread Per Jessen
Chris wrote: > John, whereabouts *precisely* do I input the text below > please and is that all that needs to be done ? You put those lines in a file, perhaps 'local.cf', in your spamassassin config directory. I think the default is /etc/mail/spamassassin. If you're using e.g. spamd or simila

Bouncing *or* just deleting emails from certain countries

2007-10-18 Thread Chris
>On Mon, 20 Aug 2007, Chris wrote: > >> Does anyone know of a way, that whenever someone emails >> from say, for example, Nigeria, Korea, Russia and >> China, the email either gets deleted by Spamassassin *or* returned to them, saying >> something like, "Email failed, no such email address" please

Re: trusted_networks and RCVD_IN_DNSWL_*

2007-10-18 Thread Lars Ippich
Matthias, >> Now I added IPs to trusted_networks and that causes another problem: The >> trusted_network IPs are in the DNSWL and therefore get a positive bonus >> from SA. > > Hm, somehow I can't follow what you're trying to do. Can you post the > relevant parts of your configuration? Sure: >

Re: trusted_networks and RCVD_IN_DNSWL_*

2007-10-18 Thread Matthias Leisi
> Now I added IPs to trusted_networks and that causes another problem: The > trusted_network IPs are in the DNSWL and therefore get a positive bonus > from SA. Hm, somehow I can't follow what you're trying to do. Can you post the relevant parts of your configuration? > I did not find a solution