RE: Don't tag selected recipients

2008-08-06 Thread Brent Kennedy
Couple of things: SA: Closest thing I have found to this has been a plugin/ruleset called shortcircuit which causes spamassassin to stop scanning an email if a particular rule is hit. The rules are configured in the .cf file of short circuit. http://wiki.apache.org/spamassassin/ShortcircuitingRu

Spam for multiple domains

2008-08-06 Thread John Maag
I am currently using spamassassin successfully for my primary domain. But spam appears to not be caught when it comes into the same server through sendmail as a different domain. For instance, when mail is sent to [EMAIL PROTECTED] spamassassin works good but when mail comes in as [EMAIL PROTECTED]

Re: Lottery spam in my inbox

2008-08-06 Thread Karsten Bräckelmann
On Wed, 2008-08-06 at 20:50 -0400, Sahil Tandon wrote: > Thanks for the advice, and I know perfectly well what BAYES_50 is > *supposed* to mean for *most* people. This may not be a smart move for > you, but it works remarkably well for us. False positives (which, to be > clear, are seldom) ca

Re: Lottery spam in my inbox

2008-08-06 Thread Sahil Tandon
Karsten Br?ckelmann <[EMAIL PROTECTED]> wrote: > That is not a smart move, IMHO. A Bayes score of 0.5 does NOT mean, > Bayes is 50% certain it's spam. It DOES mean, that Bayes does know > nothing. Absolutely nothing. > > Between BAYES_00 (aka ~100% sure it is ham) and BAYES_99 (aka ~100% sure > i

Re: Lottery spam in my inbox

2008-08-06 Thread Karsten Bräckelmann
On Wed, 2008-08-06 at 20:25 -0400, Sahil Tandon wrote: > Karsten Br?ckelmann <[EMAIL PROTECTED]> wrote: > > > Hmm... Sahil, Nitin -- guys, you are seriously confusing me. > > I am perplexed by your confusion, but I will try to help you. My confusion stems from different, almost random results al

Re: Lottery spam in my inbox

2008-08-06 Thread Sahil Tandon
Karsten Br?ckelmann <[EMAIL PROTECTED]> wrote: > Hmm... Sahil, Nitin -- guys, you are seriously confusing me. I am perplexed by your confusion, but I will try to help you. > Sahil, this is just odd. The examples *do* have the HB_SEP blank line. I > guess your download broke or something, but the

Re: Don't tag selected recipients

2008-08-06 Thread Evan Platt
No, you'd use procmail. See either http://www.procmail.org/ or a procmail mailing list. I have very little knowledge about procmail, but I know it can do what you're looking for, I just don't know the commands and configuration on how to make it work for your intended use. Nicolas Letellier wr

Re: Sa-update

2008-08-06 Thread Matt Kettler
Eduardo Júnior wrote: Continuing with the sa-update When run sa-update -D, my output has the following excerpt: [14661] dbg: diag: module not installed: IP:: Country:: Fast ( 'require' failed) [14661] dbg: diag: module not installed: Razor2:: Client:: Agent ( 'require' failed) [14661] dbg:

Re: sa-update configuration pre rules

2008-08-06 Thread Matt Kettler
Skip wrote: I'm trying to use sa-update for the first time, but I am getting some errors. I hope you gurus can help. I believe the root of my problem is that sa-update is looking for my *.pre rules in /etc/mail/spamassassin. But my rules are not there. And I don't see a command line option

Re: Don't tag selected recipients

2008-08-06 Thread Nicolas Letellier
Hello Evan, I use Postfix, directly with spamassassin. So, I must write a script, called in my master.cf for example? Regards, Nicolas Le Wed, 06 Aug 2008 16:25:48 -0700, Evan Platt <[EMAIL PROTECTED]> a écrit : > In short, not in spamassassin. Anything sent to spamassassin is > scanned. You c

Re: auto-whitelist woes

2008-08-06 Thread Matt Kettler
Brent Clark wrote: Hi I recently installed spamassasin on my freebsd test machine. For the likes of me, I keep getting this message, and I dont know how to fix it. Aug 6 17:06:43 spamassasin spamd[63534]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create t

Re: Don't tag selected recipients

2008-08-06 Thread Evan Platt
In short, not in spamassassin. Anything sent to spamassassin is scanned. You could use a procmail filter to bypass spamassassin, but anything sent to spamassassin is scored. Yes, you can whitelist to give it 100 points or more, but it's still scanned and scored. Nicolas Letellier wrote: Hello

Don't tag selected recipients

2008-08-06 Thread Nicolas Letellier
Hello. I would like to know if an option is available in spamassassin. I use 3.2.5 with FreeBSD and Postfix. By default, spamassassin filers ALL emails. Is it possible to do not scan certain mails? Or to have a list (txt, sql) or an option (like whitelist_from) for don't scan (or tag headers).

Re: iXhash plugin and lists - feedback wanted

2008-08-06 Thread Chris
On Wednesday 06 August 2008 8:15 am, Bowie Bailey wrote: > Chris wrote: > > On Tuesday 05 August 2008 8:57 am, Bowie Bailey wrote: > > > If you are using my sa-addon-stats.pl program, it defaults to > > > getting information from /var/log/maillog. So the period depends > > > on when you last rotat

Re: Lottery spam in my inbox

2008-08-06 Thread Karsten Bräckelmann
Hmm... Sahil, Nitin -- guys, you are seriously confusing me. On Tue, 2008-08-05 at 12:00 +0530, Nitin Bhadauria wrote: > Sahil Tandon wrote: > yes i did train the sa data by Nitin, neither of your headers shows *any* BAYES_XX hit. Whatever you trained doesn't seem to be the user SA runs as.

Re: Spammer trying to hijack more accounts

2008-08-06 Thread Matt
>> Another angle we used when we saw a similiar issue. Use rate-limit to >> limit the number of recipients an IP can send to per hour. Use a >> plugin for Squirrel Mail to limit the number of recipients per message >> and the number of messages per day. Spammers must send out thousands >> of mes

auto-whitelist woes

2008-08-06 Thread Brent Clark
Hi I recently installed spamassasin on my freebsd test machine. For the likes of me, I keep getting this message, and I dont know how to fix it. Aug 6 17:06:43 spamassasin spamd[63534]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /nonex

Re: Spammer trying to hijack more accounts

2008-08-06 Thread Richard Frovarp
Sahil Tandon wrote: Do all the emails ask users to reply to [EMAIL PROTECTED] I notice you're using Postfix, so it's worth setting up a quick access map that intercepts all messages to that address and redirects them to postmaster. You'll then have to contact those users and ask them to change

Re: Sa-update

2008-08-06 Thread Eduardo Júnior
Continuing with the sa-update When run sa-update -D, my output has the following excerpt: [14661] dbg: diag: module not installed: IP:: Country:: Fast ( 'require' failed) [14661] dbg: diag: module not installed: Razor2:: Client:: Agent ( 'require' failed) [14661] dbg: diag: module not installed:

sa-update configuration pre rules

2008-08-06 Thread Skip
I'm trying to use sa-update for the first time, but I am getting some errors. I hope you gurus can help. I believe the root of my problem is that sa-update is looking for my *.pre rules in /etc/mail/spamassassin. But my rules are not there. And I don't see a command line option to tell sa-u

RE: iXhash plugin and lists - feedback wanted

2008-08-06 Thread Bowie Bailey
Chris wrote: > On Tuesday 05 August 2008 8:57 am, Bowie Bailey wrote: > > > If you are using my sa-addon-stats.pl program, it defaults to > > getting information from /var/log/maillog. So the period depends > > on when you last rotated the log file. > > I am, and if I don't have a 'maillog' file

Re: Pyzor not working?

2008-08-06 Thread Chris
On Wednesday 06 August 2008 3:50 am, Peter Sørensen wrote: > Hi, > I have the same problem. Can't make pyzor work. > Is this a generall issue or just my server not working anymore? > > > Regards > > > Peter Sorensen/University of Southern Denmark/mail: [EMAIL PROTECTED] > Looks to be ok [EMAIL PRO

RE: Pyzor not working?

2008-08-06 Thread Peter Sørensen
Hi, I have the same problem. Can't make pyzor work. Is this a generall issue or just my server not working anymore? Regards Peter Sorensen/University of Southern Denmark/mail: [EMAIL PROTECTED] -Oprindelig meddelelse- Fra: Jake Maul [ma

Re: Lottery spam in my inbox

2008-08-06 Thread Nitin Bhadauria
Sahil Tandon wrote: On Aug 5, 2008, at 7:32, Nitin Bhadauria <[EMAIL PROTECTED]> wrote: Jens Kleikamp wrote: Nitin Bhadauria schrieb: Sahil Tandon wrote: Nitin Bhadauria <[EMAIL PROTECTED]> wrote: How is it possible that these kind of mail are not spam tagged my sapmassassin...

Re: Perl regex crash on large HTML table under SPAMD - SOLVED

2008-08-06 Thread Justin Mason
Dominic Germain writes: > replacing "*" by "{0,30}" fixed my problem! The regex works for small > tables without crashing spamd childs. Good to hear it. > IMO, upgrading to Perl 5.10 on OSX is not recommended... Apple is > tweeking a lot of stuff and there is always chances that a future OSX