Re: regex anchor for start of line in body

2009-07-06 Thread Benny Pedersen
On Tue, July 7, 2009 00:58, info-spamassassin-t...@cs.utexas.edu wrote: > body __PHISH1/^Password\b/i > body __PHISH0/^Username\b/i > metaPHISH __PHISH1 && __PHISH0 > > But the rule does not hit unless I remove the '^' from the above regex. > What am I missing? repl

Argument "2.long" isn't numeric in PerMsgStatus.pm

2009-07-06 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jul 6 22:38:08 saturn spamd[32217]: Argument "2.long" isn't \ numeric in numeric lt (<) at \ /usr/lib/perl5/vendor_perl/5.10.0/Mail/SpamAssassin/PerMsgStatus.pm line 1004. Should I be concerned? 595 > spamassassin -V SpamAssassin version 3.2

Re: regex anchor for start of line in body

2009-07-06 Thread RW
On Mon, 6 Jul 2009 17:58:59 -0500 info-spamassassin-t...@cs.utexas.edu wrote: > I seem to be having a hard time writing rules which anchor > a string to the start of the line in the body of a text message. > > e.g., suppose I get a lot of phish which contain text (not html) > like this: > > User

Re: regex anchor for start of line in body

2009-07-06 Thread John Hardin
On Mon, 6 Jul 2009, info-spamassassin-t...@cs.utexas.edu wrote: I seem to be having a hard time writing rules which anchor a string to the start of the line in the body of a text message. e.g., suppose I get a lot of phish which contain text (not html) like this: Username:.. Password:.

Re: regex anchor for start of line in body

2009-07-06 Thread Mark Martinec
Fletcher, > I seem to be having a hard time writing rules which anchor > a string to the start of the line in the body of a text message. > > e.g., suppose I get a lot of phish which contain text (not html) > like this: > > Username:.. > Password:.. > > I try what seemed intuitivel

regex anchor for start of line in body

2009-07-06 Thread info-spamassassin-talk
I seem to be having a hard time writing rules which anchor a string to the start of the line in the body of a text message. e.g., suppose I get a lot of phish which contain text (not html) like this: Username:.. Password:.. I try what seemed intuitively easy: body__PHISH1

Re: SA scores zero... sometimes

2009-07-06 Thread John Hardin
On Mon, 6 Jul 2009, MrGibbage wrote: OK, Now I also get very different results, which seems to be inline with what you two have seen. http://pelorus.org/fourth_pass_log.txt And while there are some small differences between the sub-tests that hit, the overall score is still zero for my install

Re: SA scores zero... sometimes

2009-07-06 Thread John Hardin
On Mon, 6 Jul 2009, MrGibbage wrote: BOTNET and the MEDS rule that was posted to the list recently help push it over the spam threshold: Is this the MEDS rule thread that you refer to? http://www.nabble.com/-NEW-SPAM-FLOOD--www.shopXX.net-td24139422.html That ruleset has bounced around seve

Re: SA scores zero... sometimes

2009-07-06 Thread MrGibbage
Is this the MEDS rule thread that you refer to? http://www.nabble.com/-NEW-SPAM-FLOOD--www.shopXX.net-td24139422.html Skip John Wilcock wrote: > > Le 06/07/2009 14:22, RW a écrit : >>> http://pelorus.org/spammy.txt >>> > >> >> That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS, >

Re: SA scores zero... sometimes

2009-07-06 Thread MrGibbage
OK, Now I also get very different results, which seems to be inline with what you two have seen. http://pelorus.org/fourth_pass_log.txt And while there are some small differences between the sub-tests that hit, the overall score is still zero for my installation. So perhaps I just need to tweak

Bayes expiration logic

2009-07-06 Thread Rosenbaum, Larry M.
Has anybody considered revising the Bayes expiration logic? Maybe it's just our data that's weird, but the built-in expiration logic doesn't seem to work very well for us. Here are my observations: There's no point in checking anything older than oldest_atime. For this value and older, zero

Re: good Spamassassin Summary report

2009-07-06 Thread Martin Gregorie
My logwatch add-in has now been modified to work entirely from spamd log messages, installed, tested and is now running as part of my standard logwatch setup. It is available for download from: http://www.gregorie.org/computing/spamscan/spamscan.tgz

Re: FWD offlist reply CONSTANT CONTACT

2009-07-06 Thread rich...@buzzhost.co.uk
On Mon, 2009-07-06 at 20:55 +0200, Benny Pedersen wrote: > On Mon, July 6, 2009 20:25, rich...@buzzhost.co.uk wrote: > > Received-SPF: unknown (nike.apache.org: error in processing during lookup of > rich...@buzzhost.co.uk) > > priseless > That should read 'priceless' - I hate to be the pedant,

Re: FWD offlist reply CONSTANT CONTACT

2009-07-06 Thread Benny Pedersen
On Mon, July 6, 2009 20:25, rich...@buzzhost.co.uk wrote: Received-SPF: unknown (nike.apache.org: error in processing during lookup of rich...@buzzhost.co.uk) priseless -- xpoint

Re: constantcontact.com

2009-07-06 Thread SM
At 11:00 06-07-2009, rich...@buzzhost.co.uk wrote: Have you handled spam or irate customer getting spam from Constant Contact? I prefer not to comment on that. What do you think about Constant Contact having a white list score in Spamassassin despite being listed in the multi.uri? There are

Re: FWD offlist reply CONSTANT CONTACT

2009-07-06 Thread Aaron Wolfe
+1 for ending this thread On Mon, Jul 6, 2009 at 2:25 PM, rich...@buzzhost.co.uk wrote: >                              From: > Chris Owen >                                To: > rich...@buzzhost.co.uk >                                Cc: > Tara Natanson >                           Subject: > Re:

Re: constantcontact.com

2009-07-06 Thread DAve
rich...@buzzhost.co.uk wrote: On Mon, 2009-07-06 at 10:36 -0700, SM wrote: At 10:56 05-07-2009, rich...@buzzhost.co.uk wrote: Well, I can only take you at face value that you are here representing Constant Contact. If I call up the office switchboard Tara, can I speak with you there? It's just

FWD offlist reply CONSTANT CONTACT

2009-07-06 Thread rich...@buzzhost.co.uk
From: Chris Owen To: rich...@buzzhost.co.uk Cc: Tara Natanson Subject: Re: constantcontact.com Date: Mon, 6 Jul 2009 13:02:07 -0500 (19:02 BS

Re: constantcontact.com

2009-07-06 Thread rich...@buzzhost.co.uk
On Mon, 2009-07-06 at 10:36 -0700, SM wrote: > At 10:56 05-07-2009, rich...@buzzhost.co.uk wrote: > >Well, I can only take you at face value that you are here representing > >Constant Contact. If I call up the office switchboard Tara, can I speak > >with you there? It's just I've called up Constant

Re: constantcontact.com

2009-07-06 Thread SM
At 10:56 05-07-2009, rich...@buzzhost.co.uk wrote: Well, I can only take you at face value that you are here representing Constant Contact. If I call up the office switchboard Tara, can I speak with you there? It's just I've called up Constant Contact and hit #9 for the directory and your name is

Re: Spam troubleshooting

2009-07-06 Thread MySQL Student
Hi, have any of you tryed going to dnswl.org homepage ?, even tryed to lookup > the ip ?, got refused submit of new ticket ? Yes, I went to the site, but didn't try to resolve either of them because I knew they were already on the list. They now appear to no longer be on the list. Now I know to

Re: constantcontact.com

2009-07-06 Thread rich...@buzzhost.co.uk
On Mon, 2009-07-06 at 11:00 -0600, J.D. Falk wrote: > rich...@buzzhost.co.uk wrote: > > >> sorry, I am on several private lists. Lists I have been on for 10 > >> years through a few different employers. If I signed up for those > >> lists with my @constantcontact.com address my employer would own

Re: constantcontact.com

2009-07-06 Thread J.D. Falk
rich...@buzzhost.co.uk wrote: sorry, I am on several private lists. Lists I have been on for 10 years through a few different employers. If I signed up for those lists with my @constantcontact.com address my employer would own that mail. I don't really think they'd read my mail, but I'm still

Re: Spam troubleshooting

2009-07-06 Thread Benny Pedersen
On Mon, July 6, 2009 14:59, LuKreme wrote: > On 5-Jul-2009, at 18:55, MySQL Student wrote: >>* -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/ > >> What the hell is RECVD_IN_DNSWL_MED and why is it trusted in >> dnswl.org? > > Did you look at the URL? > > I put the follo

Re: Freelotto.com

2009-07-06 Thread J.D. Falk
I AM NOT DEFENDING FREELOTTO.COM, merely discussing the theory behind the "Certified" service which is queried in the BSP rules in SpamAssassin. RobertH wrote: shouldnt you folks know that your customers are spamming before we do? How can a 3rd party automatically discern whether or not you

Re: SA scores zero... sometimes

2009-07-06 Thread John Hardin
On Mon, 6 Jul 2009, John Wilcock wrote: Le 06/07/2009 14:22, RW a écrit : > http://pelorus.org/spammy.txt That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS, MISSING_MID, MISSING_SUBJECT too, even though all the headers are there. So do I until I get rid of the extraneous car

Re: constantcontact.com

2009-07-06 Thread Neil Schwartzman
On 05/07/09 1:56 PM, "rich...@buzzhost.co.uk" wrote: > I don't dispute *YOU* don't know MP. I've got a gut feel there will be a > connection there somewhere. Normally, when spammers are white listed, > Perone has an interest or a friend some place. I'm going to chalk this one up to the "Constant

Re: Freelotto.com

2009-07-06 Thread Neil Schwartzman
On 03/07/09 3:32 PM, "RobertH" wrote: > or at least charge them a lot more for abusing your services ;-) A long time ago, Bonded Sender charged per complaint. We don't operate that way; we have a declining percentage of acceptable complaint rates for each volume tier assigned to a customer (

RE: Plugin extracting text from docs

2009-07-06 Thread Rosenbaum, Larry M.
> From: Jonas Eckerman [mailto:jonas_li...@frukt.org] > > Rosenbaum, Larry M. wrote: > > > It appears that "pdftohtml" is only available as a Windows executable > (on Sourceforge). > > If you want a precompiled executable it seems Windows is the only > platform, but AFAICS the source code is als

Re: SA scores zero... sometimes

2009-07-06 Thread John Wilcock
Le 06/07/2009 14:22, RW a écrit : http://pelorus.org/spammy.txt > That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS, MISSING_MID, MISSING_SUBJECT too, even though all the headers are there. So do I until I get rid of the extraneous carriage return in the following received lin

Re: SA scores zero... sometimes

2009-07-06 Thread John Hardin
On Mon, 6 Jul 2009, RW wrote: On Sun, 5 Jul 2009 19:24:04 -0700 (PDT) MrGibbage wrote: http://pelorus.org/spammy.txt That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS, MISSING_MID, MISSING_SUBJECT too, even though all the headers are there. Ditto. Open a bug and attach the

Re: Spam troubleshooting

2009-07-06 Thread LuKreme
On 5-Jul-2009, at 18:55, MySQL Student wrote: * -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/ What the hell is RECVD_IN_DNSWL_MED and why is it trusted in dnswl.org? Did you look at the URL? I put the following in local.cf score RCVD_IN_DNSWL_LOW -1 score RCVD_

Re: SA scores zero... sometimes

2009-07-06 Thread RW
On Sun, 5 Jul 2009 19:24:04 -0700 (PDT) MrGibbage wrote: > > I thought I was careful and deleted all the headers that were > added/altered after passing through my server and onto gmail. And I > didn't see any erroneous blank lines. Perhaps I didn't do as good as > I thought. Anyway, I did tr

Re: SpamAssasin .pm & .cf file

2009-07-06 Thread Martin Gregorie
On Mon, 2009-07-06 at 03:04 -0700, chauhananshul wrote: > I'm new to linux world can some one please help in understanding .cf &.pm > files. > I've used .cf files from http://www.rulesemporium.com i used to copy in > /usr/share/spamassassin/ & it works but at some sites both .pm & .cf fiels > are a

Re: Freelotto.com

2009-07-06 Thread Matus UHLAR - fantomas
> > If you've got any proof of spam from any BSP_TRUSTED IP, > > please report it to senderscorecertified@abuse.net or via > > the web form at http://www.returnpath.net/support/ and our > > compliance team will take appropriate action. Thanks! On 03.07.09 12:32, RobertH wrote: > shouldnt y

SpamAssasin .pm & .cf file

2009-07-06 Thread chauhananshul
I'm new to linux world can some one please help in understanding .cf &.pm files. I've used .cf files from http://www.rulesemporium.com i used to copy in /usr/share/spamassassin/ & it works but at some sites both .pm & .cf fiels are available can some one please guide me wht to do with .pm files ho

SpamAssasin .pm & .cf file

2009-07-06 Thread Anshul Chauhan
I'm new to linux world can some one please help in understanding .cf &.pm files. I've used .cf files from http://www.rulesemporium.com i used to copy in /usr/share/spamassassin/ & it works but at some sites both .pm & .cf fiels are available can some one please guide me wht to do with .pm files how