Re: Spam slipping through

2008-12-06 Thread Theo Van Dinter
On Sat, Dec 06, 2008 at 08:00:10PM -0800, John Hardin wrote: > mechanism for. Devs: there've been wishes for this before; how hard > would it be to add the ability to match on the substring match captured > by another rule? Add a flag to say "capture the match for this rule" and > a syntax for subs

Re: Spam slipping through

2008-12-06 Thread John Hardin
On Sat, 2008-12-06 at 20:13 +, support wrote: > Surely, by now, someone has come up with a simple regex rule or > something that matches if the to & from are the same? Is this too > obvious? Unfortunately it's actually not that easy. It involves remembering a matched substring across *two* ru

Re: Single URI spam not checked against URIBLs

2008-12-06 Thread Theo Van Dinter
On Sat, Dec 06, 2008 at 11:16:03PM +0100, Wolfgang Zeikat wrote: > Could you describe more elaborately how you did that? You may wish to take a look at cpan2rpm, fwiw. -- Randomly Selected Tagline: "... Either this man is suffering from serious brain damage, or the new vacuum cleaner's arrived

Re: Single URI spam not checked against URIBLs

2008-12-06 Thread Ned Slider
Wolfgang Zeikat wrote: Ned Slider wrote: Thanks for the heads up. it indeed works (HTML::Parser 3.59). For those using RHEL5/CentOS5 and wanting to update, We use Scientific Linux 5 which is a re-compiled RHEL 5 - with Dag's 3.56 rpm installed. I installed HTML::Parser 3.59 there from CPA

Re: Single URI spam not checked against URIBLs

2008-12-06 Thread Wolfgang Zeikat
Ned Slider wrote: Thanks for the heads up. it indeed works (HTML::Parser 3.59). For those using RHEL5/CentOS5 and wanting to update, We use Scientific Linux 5 which is a re-compiled RHEL 5 - with Dag's 3.56 rpm installed. I installed HTML::Parser 3.59 there from CPAN (with local make) wit

Re: Single URI spam not checked against URIBLs

2008-12-06 Thread Ned Slider
mouss wrote: Bill Landry a écrit : This issue has been resolved. Thanks to Justin Mason and Gisle Aas (HTML::Parser guy) for finding the fix. The resolution is to update HTML::Parser to the latest version and then restart SA. Thanks for the heads up. it indeed works (HTML::Parser 3.59).

Re: Spam slipping through

2008-12-06 Thread support
On Sat, 2008-12-06 at 11:48 -0800, John Hardin wrote: > On Sat, 6 Dec 2008, Mike Cisar wrote: > > > - the "from" always matches the "to" (so it always looks like its coming > > from yourself) > > Silly, basic question: have you whitelist_from'd yourself? Baaad idea. > > SPF checks would catch

Re: Spam slipping through

2008-12-06 Thread John Hardin
On Sat, 6 Dec 2008, Mike Cisar wrote: - the "from" always matches the "to" (so it always looks like its coming from yourself) Silly, basic question: have you whitelist_from'd yourself? Baaad idea. SPF checks would catch that if you published SPF records for your domain. If you know that ma

Re: Single URI spam not checked against URIBLs

2008-12-06 Thread mouss
Bill Landry a écrit : > This issue has been resolved. Thanks to Justin Mason and Gisle Aas > (HTML::Parser guy) for finding the fix. The resolution is to update > HTML::Parser to the latest version and then restart SA. > Thanks for the heads up. it indeed works (HTML::Parser 3.59).

Re: Spam slipping through

2008-12-06 Thread mouss
Mike Cisar a écrit : > Have recently been having 1000's of spam slipping past Spamassassin... they > all seem to be pretty much identical in format but Spamassassin isn't > scoring them even high enough to be tagged. > > - they are all flagged as important > - a single line having so far have one

Re: Spam slipping through

2008-12-06 Thread support
On Sat, 2008-12-06 at 10:17 -0700, Mike Cisar wrote: > Have recently been having 1000's of spam slipping past Spamassassin... they > all seem to be pretty much identical in format but Spamassassin isn't > scoring them even high enough to be tagged. > > - they are all flagged as important > - a si

Spam slipping through

2008-12-06 Thread Mike Cisar
Have recently been having 1000's of spam slipping past Spamassassin... they all seem to be pretty much identical in format but Spamassassin isn't scoring them even high enough to be tagged. - they are all flagged as important - a single line having so far have one of two common phrases followed by

Re: Tagging the mail which already has X-Spam headers

2008-12-06 Thread Bob Proulx
Nikita Kipriyanov wrote: > SpamAssassin tags mail with headers X-Spam- But, what if there were > some headers like these, as with mail that already passed someones > SpamAssassin and has X-Spam-Score, before being recieved by my server? Those won't matter. > Will it remove them, replace t

Re: Log

2008-12-06 Thread Theo Van Dinter
On Sat, Dec 06, 2008 at 01:50:20PM +0100, Jon Essen-Moller wrote: > So you look in the /var/log/maillog (maybe with grep) and find messages > and their id you are interested in. I get you that far. :) > Are there a log somewhere where one can find information like the last > log entry you paste

Re: Sa-update exit codes

2008-12-06 Thread mouss
Arthur Dent a écrit : > Hello All, > > I have the following command running daily in my crontab on my Fedora 9 > box: (excuse the linewrap) > > sa-update --channelfile > /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A > --gpgkey 6C6191E3 && /sbin/service spamassassin restart

Re: Log

2008-12-06 Thread Jon Essen-Moller
Hi, Thanks again for your answer and sorry for the HTML ;-| So you look in the /var/log/maillog (maybe with grep) and find messages and their id you are interested in. I get you that far. Are there a log somewhere where one can find information like the last log entry you pasted below? Bes

Re: Sa-update exit codes

2008-12-06 Thread Karsten Bräckelmann
On Sat, 2008-12-06 at 10:17 +, Arthur Dent wrote: > On Sat, Dec 06, 2008 at 09:38:06AM +, Arthur Dent wrote: > > Is this an error code? > > Does this explain why the "&& /sbin/service spamassassin restart" fails > > to run now? Yes, it is. Yes, it does. As documented by 'man sa-update'. A

Re: Sa-update exit codes

2008-12-06 Thread Arthur Dent
On Sat, Dec 06, 2008 at 09:38:06AM +, Arthur Dent wrote: > Is this an error code? > Does this explain why the "&& /sbin/service spamassassin restart" fails > to run now? Sigh... OK - I've had my morning cup of tea now. I have now actually turned on my brain. I realise of course that the ques

Sa-update exit codes

2008-12-06 Thread Arthur Dent
Hello All, I have the following command running daily in my crontab on my Fedora 9 box: (excuse the linewrap) sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A --gpgkey 6C6191E3 && /sbin/service spamassassin restart and every day I get a reassuring emai