On Sat, Mar 22, 2008 at 10:23:09AM +0800, Sn!per wrote:
> Question: Why is it that on the header of the ham, autolearn=no ?
http://wiki.apache.org/spamassassin/AutolearningNotWorking
--
Randomly Selected Tagline:
There was a young lady named Bright
Who could travel much faster than light.
On Sat, 2008-03-22 at 10:23 +0800, Sn!per wrote:
> I am comparing the headers on two of my mails. The first mail is NOT a
> spam, and X-Spam-Status is like so:
>
> No, score=2.7 required=10.0 tests=RCVD_NUMERIC_HELO,RDNS_NONE autolearn=no
> version=3.2.4
^^^
> The second email is a s
Hi all,
Am using SA version 3.2.4 . So far working great.
I am comparing the headers on two of my mails. The first mail is NOT a spam,
and X-Spam-Status is like so:
No, score=2.7 required=10.0 tests=RCVD_NUMERIC_HELO,RDNS_NONE autolearn=no
version=3.2.4
The second email is a spam, and its X-S
Henrik K wrote:
Hello,
I updated my FreeMail plugin with a big list of domains
(http://www.rhyolite.com/anti-spam/freemail.html).
Try it out:
http://sa.hege.li/FreeMail.pm
http://sa.hege.li/FreeMail.cf
Pretty good hit ratio here, especially when you add some extra scores like
FREEMAIL_FROM
Zach Jones wrote:
Hi,
Am attempting to update using sa-update, but no matter what command I
try (checkonly, gpgno) I get the following error: [path]..gpg
required but not found
I found 2 text files in the directory with gpg keys, attempted to
import them with the sa-update import [path
> On torsdagen den 20 mars 2008, Matus UHLAR - fantomas wrote:
> > you probably do not understand the internal_networks meaning.
> > internal networks are only those (fully) under your control, trusted may
> > not be under your control but you have to trust them
On 21.03.08 19:01, Magnus Holmgren
Jean-Paul Natola wrote:
I just started getting a rush of these,
Coincidentally after adding the 50_blogspot and the 30_software rules and
running sa-update
ftp://ftp.fcimail.org/samples/russian.txt
the second one is in its original Unicode
ftp://ftp.fcimail.org/samples/russ.txt
I just started getting a rush of these,
Coincidentally after adding the 50_blogspot and the 30_software rules and
running sa-update
ftp://ftp.fcimail.org/samples/russian.txt
the second one is in its original Unicode
ftp://ftp.fcimail.org/samples/russ.txt
J
On Fri, 2008-03-21 at 18:46, Theo Van Dinter wrote:
> Look at the MIMEHeader plugin.
>
Thanks. That's what I needed to know.
Martin
On Fri, 21 Mar 2008, Skip wrote:
If I did go this route, how would I make sure that my spamc talks to my
spamd and not the other one that is already running on the box?
Don't use the default network port number.
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
[EMAIL
On Fri, Mar 21, 2008 at 09:56:17AM -0700, John Hardin wrote:
> >header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/
>
> I sincerely doubt SA treats MIME body part headers as message headers,
> though I would be pleasantly surprised to hear otherwise.
>
> Try a rawbody rule.
MIME head
Justin Mason wrote:
Skip writes:
My email is hosted on a shared hosting site where I don't have much
access to the good stuff, like syslog and /var/*anything*. For that
reason, I believe spamc/spamd is out for me. They do in fact have spamd
running. Here's the ps -aux outpu
On torsdagen den 20 mars 2008, Matus UHLAR - fantomas wrote:
> you probably do not understand the internal_networks meaning.
> internal networks are only those (fully) under your control, trusted may
> not be under your control but you have to trust them
I'd say that internal_networks contain host
On Fri, 2008-03-21 at 16:56, John Hardin wrote:
> On Fri, 21 Mar 2008, Martin Gregorie wrote:
>
> > header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/
>
> I sincerely doubt SA treats MIME body part headers as message headers,
> though I would be pleasantly surprised to hear otherwise
I believe if I make a rule that adds scores for when the Envelope Sender
and To addresses are different and it is coming from a free e-mail
address. I was hoping to reference the free email by existing rules and
see lots of possibilities, see below. Is there are way to match any rule
with SARE_FREE
On Friday 21 March 2008 17:47:36 Patrick Ben Koetter wrote:
> You probably also don't want the following 1st line to be part of
> 30_blogspot.cf:
> [EMAIL PROTECTED]:/etc/spamassassin/myrules# cat 30_blogspot.cf
> [EMAIL PROTECTED]
hehe, thank you.
--
best regards/Mit freundlichen Grüße
On Fri, 21 Mar 2008, Martin Gregorie wrote:
header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/
I sincerely doubt SA treats MIME body part headers as message headers,
though I would be pleasantly surprised to hear otherwise.
Try a rawbody rule.
--
John Hardin KA7OHZ
* Arvid Ephraim Picciani <[EMAIL PROTECTED]>:
> On Friday 21 March 2008 14:11:09 Richard.Hall wrote:
> > meta SOFT_AND_URIGREY (URIBL_GREY || BLOGPSOT_URI) && SOFTWARE_AD
> > should be
> > meta SOFT_AND_URIGREY (URIBL_GREY || BLOGSPOT_URI) && SOFTWARE_AD
> indeed. thanks Richard.
> adde
I want to write a rule that can match file names for attachments that
always have one or two lower case characters and a lower case .zip
extension, i.e. the file name in this line:
Content-Disposition: attachment; filename="as.zip"
I've tried using the following regex in "body" and "rawbody" rul
At 01:08 21-03-2008, peter pilsl wrote:
For more than a week now I'm flooded by software-spam
[snip]
spamscore is <0 on each mail (the above mentioned mails all have -2.6)
The IP address of the sending host is listed in Spamhaus XBL. The
Received headers were not evaluated. Verify whethe
On Fri, Mar 21, 2008 at 6:25 AM, Henrik K <[EMAIL PROTECTED]> wrote:
> On Wed, Feb 27, 2008 at 07:17:07AM -0800, Marc Perkel wrote:
>
> > Hello Everyone,
> >
> > My hostkarma black/white/yellow lists were too complex to be accessed by
> > Postfix. So I have created a Postfix compatible blacklist
> Hello,
>
> I updated my FreeMail plugin with a big list of domains
> (http://www.rhyolite.com/anti-spam/freemail.html).
>
> Try it out:
>
> http://sa.hege.li/FreeMail.pm
> http://sa.hege.li/FreeMail.cf
>
> Pretty good hit ratio here, especially when you add some
> extra scores like FREEMAIL_F
On Friday 21 March 2008 14:11:09 Richard.Hall wrote:
> meta SOFT_AND_URIGREY (URIBL_GREY || BLOGPSOT_URI) && SOFTWARE_AD
> should be
> meta SOFT_AND_URIGREY (URIBL_GREY || BLOGSPOT_URI) && SOFTWARE_AD
indeed. thanks Richard.
added blogpsot to the meta 1 minute ago :D
its updated
--
Arvid,
On Fri, 21 Mar 2008, Arvid Ephraim Picciani wrote:
> On Friday 21 March 2008 09:08:51 peter pilsl wrote:
> > For more than a week now I'm flooded by software-spam
> >
> > "leicht zu installierende software"
> > "sie werden kein besseres softwareshop finden"
> > "software fuer die guenstigs
Loren Wilton <[EMAIL PROTECTED]> wrote:
In some versions of Outlook you can recall a message, and if it hasn't
been read already, it will be deleted from the recipient's inbox.
That's a Microsoft Exchange feature, and it's not really email, since
it's not transported or accessed by email pro
On Friday 21 March 2008 09:08:51 peter pilsl wrote:
> For more than a week now I'm flooded by software-spam
>
> "leicht zu installierende software"
> "sie werden kein besseres softwareshop finden"
> "software fuer die guenstigste preise"
> "sichere und voellig funktionale software"
> usw. usf.
>
3
On Friday 21 March 2008 04:27:05 Loren Wilton wrote:
> body SOFTWARE_AD
> /(?:|\bbezahlen.*runterladen|Windows\bund\bmit\bMacintosh|\bOriginalversion
>en\b.*\blegal\b)/i
>
> You probably want to adjust this a little bit. There are a few things here
> that make me think you aren't getting quite
Skip writes:
> My email is hosted on a shared hosting site where I don't have much
> access to the good stuff, like syslog and /var/*anything*. For that
> reason, I believe spamc/spamd is out for me. They do in fact have spamd
> running. Here's the ps -aux output
> root 9532 0.0 0.6 6
28 matches
Mail list logo
