On Mon, 2007-10-22 at 11:46 -0400, Andrew Xiang wrote:
> I have many users in the whitelist_from in the local.cf.
> When I get forwarded spam email like this, how do I find which one it
> matched? Which FROM entry is it actually looking at?
See the section Whitelist and Blacklist options in the do
I have many users in the whitelist_from in the local.cf.
When I get forwarded spam email like this, how do I find which one it matched?
Which FROM entry is it actually looking at?
-Andrew
X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on xphotonics.com
X-Spam-Level:
X-Spam-Status: No,
Daryl C. W. O'Shea wrote:
Mark Martinec wrote:
An alternative workaround: to SA 3.2.3 apply a patch in:
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5589
then you can specify per-zone timeouts, e.g.:
rbl_timeout 1.5 spamhaus.org
Doesn't disable DNS, but at least limits the time
On 10/22/07, cyclops images <[EMAIL PROTECTED]> wrote:
>
> Thanks again, I have sent an email off to my provider about this.
> For this: RCVD_IN_SORBS_HTTP 2.0, please see my screen shot below. Is this
> what you mean to do?
>
> http://www.nabble.com/file/p13342256/7.jpg
>
Actually no :(
the scor
Mark Martinec wrote:
An alternative workaround: to SA 3.2.3 apply a patch in:
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5589
then you can specify per-zone timeouts, e.g.:
rbl_timeout 1.5 spamhaus.org
Doesn't disable DNS, but at least limits the time
wasted on waiting for respo
[EMAIL PROTECTED] wrote:
How are the DNS look-ups done in SpamAssassin? Are they done
sequentially, or all at once?
Both. Each query is started as soon as possible to minimize the scan
time of individual messages. Responses are harvested as they arrive.
Daryl
How are the DNS look-ups done in SpamAssassin? Are they done sequentially,
or all at once?
Gordan
On Mon, 2007-10-22 at 17:37 +0100, Randal, Phil wrote:
> You'll want
>
> score __RCVD_IN_ZEN 0.0
> score RCVD_IN_SBL 0.0
> score RCVD_IN_XBL 0.0
> score RCVD_IN_PBL 0.0
> score URIBL_SBL 0.0
Note though, that setting rules scores to 0 does *not* prevent these
test from being evaluated for SA 3.2.
John Rudd wrote:
> If you want to disable JUST spamhaus, and not the other RBLs:
> Find the rules cf files (probably in /usr/local/share/spamassassin)
> grep through the files to find the names of the various spamhaus rules.
> Go to /etc/mail/spamassassin/local.cf (or wherever your site wide
On Mon, 2007-10-22 at 17:52 +0100, [EMAIL PROTECTED] wrote:
> Ah, that was the missing links. I was tearing my hair out trying to find
> where the macros like __RCVD_IN_xxx were defined. :-)
>
> And what is the convention for what gets to be RVCD
General rules. Usually adding a point or two. ;)
Well... I upgraded to the latest stable release and everything works fine
now.
pcorreia wrote:
>
> Hello. My name is Pedro Correia and i've recently installed spamassassin
> 3.1.9 to act as the spam filter for my organizations e-mail server.
>
> I'm running spamd (v3.1.9) on fedora core 6.
> I
Ah, that was the missing links. I was tearing my hair out trying to find
where the macros like __RCVD_IN_xxx were defined. :-)
And what is the convention for what gets to be RVCD and what gets to be
__RVCD? It all seems rather arbitrary.
Gordan
On Mon, 22 Oct 2007, Stefan Jakobs wrote:
On
You'll want
score __RCVD_IN_ZEN 0.0
score RCVD_IN_SBL 0.0
score RCVD_IN_XBL 0.0
score RCVD_IN_PBL 0.0
score URIBL_SBL 0.0
Cheers,
Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent:
[EMAIL PROTECTED] wrote:
Hi,
I cannot seem to find any useful documentation on this.
Specifically, I need to disable spamhaus RBLs in all forms (DNS, URI,
etc.). The lookups are slowing down spamassassin too much, and the mail
backs up by the thousand, while the CPUs are mostly idle.
I grep
On Monday 22 October 2007 18:04, [EMAIL PROTECTED] wrote:
> Hi,
Hello Gordan,
> I cannot seem to find any useful documentation on this.
>
> Specifically, I need to disable spamhaus RBLs in all forms (DNS, URI,
> etc.). The lookups are slowing down spamassassin too much, and the mail
> backs up by
Hi,
I cannot seem to find any useful documentation on this.
Specifically, I need to disable spamhaus RBLs in all forms (DNS, URI,
etc.). The lookups are slowing down spamassassin too much, and the mail
backs up by the thousand, while the CPUs are mostly idle.
I grepped through the Mail::Spam
Am 2007-10-18 20:24:35, schrieb Justin Mason:
>
> UxBoD writes:
> > Does anybody have one of these, or different one, that you could upload
> > somewhere so can do some analysis ?
>
> sure: http://taint.org/x/2007/mp3spam.txt
> anyway, these rules catch them as far as I can tell:
>
> ifplugin
Am 2007-10-17 22:08:53, schrieb cpayne:
> Guys,
>
> I am getting a lot mail which I know is from a mail program use by
> spammers, called the bat.
>
> I like to know how can I write a rule to give lets say two or three
> points for this in the header.
>
> X-Mailer: The Bat! (v2.00.6) Educatio
Am 2007-10-17 15:01:15, schrieb Jon Trulson:
> Same here. At home about 97% (~1200 rejected a day at mta with
> scores above 15, no less. And this is at home!).
>
> At work we fluctuate between 94-96% pure (absolutely pure!) spam.
>
> I definitely love my spamassassins :)
You are not a
Am 2007-10-17 18:19:31, schrieb mizzio:
> I can confirm the 80%:
>
> Mail stats since: Mar 9 04:02:10
> Total mail scanned:11335683
> Total viruses stopped: 235807
> Total spam found: 9016304
> Spam percentage: 79.54
>
> :-)
> cheers
> maurizio
I get something similar.
650 spams against 170
On Mon, Oct 22, 2007 at 06:03:43PM +0530, Tarak Ranjan wrote:
>Oct 22 17:47:47 mail spamd[31665]: rules: failed to run
> URICOUNTRY_CN test, skipping:
> Oct 22 17:47:47 mail spamd[31665]: (Can't locate object method
> "check_uricountry" via package "Mail::SpamAssassin::PerMsgStat
On Sunday, Oct 21st 2007 at 00:27 -, quoth Igor Chudov:
=>I was looking at this article
=>
=> http://en.wikipedia.org/wiki/E-mail_spam
=>
=>It claims that "only five countries are hosting 99.68% of the global
=>spammer websites", of which the foremost is China, hosting 73.58% of
=>all web sit
Per Jessen wrote:
I've recently begun to see a number of FPs due to Windows Mobile clients
not adding an X-Mailer: (as far as I can determine):
This pretty much gives an automatic 5.4 points:
* 2.2 MSGID_DOLLARS Message-Id has pattern used in spam
* 1.9 RATWARE_OUTLOOK_NONAME Bulk email finge
Thanks again, I have sent an email off to my provider about this.
For this: RCVD_IN_SORBS_HTTP 2.0, please see my screen shot below. Is this
what you mean to do?
http://www.nabble.com/file/p13342256/7.jpg
Mr Shunz wrote:
>
> On 10/20/07, cyclops images <[EMAIL PROTECTED]> wrote:
>>
>> cyclo
hi List ,
Oct 22 17:47:47 mail spamd[31665]: rules: failed to run
URICOUNTRY_CN test, skipping:
Oct 22 17:47:47 mail spamd[31665]: (Can't locate object method
"check_uricountry" via package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/
> >
> You don't do it as a "conditional" rule.. Any "conditional" rule
> structured that way would be something like an ifplugin, which would
> inhibit it from loading the rule when the file is read, before scanning
> the message.
>
> To get the functionality you want, you'd use a meta rule in
ram wrote:
> Can I have multiple custom rules and evaluate some rules depending on
> results from others
>
> Basically I have different domains and each domain recieves different
> kind of spam. I wish to let domain administrators manage rules for
> themselves , but without increasing the load on
> ram wrote:
>> header __TO_CC_PHARMA_COMPANY ToCc =~ /[EMAIL PROTECTED]/i
>>
>> if( __TO_CC_PHARMA_COMPANY ) { How to do this
>> body ALLOW_MEDS /viagra/
>> descibe this company recieves such legal mails , so give a negative
>> score to offset the others
>> score ALLOW_MEDS -2
Hello. My name is Pedro Correia and i've recently installed spamassassin
3.1.9 to act as the spam filter for my organizations e-mail server.
I'm running spamd (v3.1.9) on fedora core 6.
I added the following line to /etc/rc.d/rc.local to have spamd run on system
startup
/usr/bin/spamd --daemoniz
ram wrote:
> Can I have multiple custom rules and evaluate some rules depending on
> results from others
>
>
> Basically I have different domains and each domain recieves different
> kind of spam. I wish to let domain administrators manage rules for
> themselves , but without increasing the load o
I've recently begun to see a number of FPs due to Windows Mobile clients
not adding an X-Mailer: (as far as I can determine):
This pretty much gives an automatic 5.4 points:
* 2.2 MSGID_DOLLARS Message-Id has pattern used in spam
* 1.9 RATWARE_OUTLOOK_NONAME Bulk email fingerprint (Outlook no n
>-Original Message-
>From: Karsten Bräckelmann
[mailto:[EMAIL PROTECTED]
>Sent: Monday, October 22, 2007 2:46 AM
>To: users@spamassassin.apache.org
>Subject: Re: Top spam hosters, how to decline email
mentioning them
>
>On Sat, 2007-10-20 at 23:27 -0500, Igor Chudov wrote:
>> I was look
On 10/20/07, cyclops images <[EMAIL PROTECTED]> wrote:
>
> cyclops images wrote:
> >
> > Thanks Mr Shunz, my SA is definitely enabled. See screen shot:
> > http://www.nabble.com/file/p13322555/5.jpg
Well, in the field wich begins with "score" you can simply
insert the test and the new score:
as
On Mon, 22 Oct 2007 00:07:17 -0700, Bill Landry <[EMAIL PROTECTED]>
wrote:
>I don't how one could determine the IP address associated with a URL in
>the body of a message at the MTA level without accepting the message
>first for further processing. The best you could do at the MTA level is
>bloc
Nigel Frankcom wrote the following on 10/21/2007 11:22 PM -0800:
> On Sat, 20 Oct 2007 23:27:41 -0500, Igor Chudov <[EMAIL PROTECTED]>
> wrote:
>
>
>> I was looking at this article
>>
>> http://en.wikipedia.org/wiki/E-mail_spam
>>
>> It claims that "only five countries are hosting 99.68% of the
35 matches
Mail list logo
