Re: forward mails as spam

On Wed, July 15, 2009 05:09, neroxyr wrote: > http://pastebin.ca/1495392 newer ever use blacklist_from or whitelist_from use something that have auth eg spf / dkim if unsure what sender uses use whitelist_from_auth fri...@gmal.com or something :) spammers uses random senders from freemail so

Re: forward mails as spam

On Wed, July 15, 2009 00:33, neroxyr wrote: > Here's the text in pastebin: http://pastebin.ca/1495217 Blocked by > SpamAssassin USER_IN_BLACKLIST grep blacklist_from * -- xpoint

Re: forward mails as spam

On Tue, July 14, 2009 23:07, neroxyr wrote: > the email are forward from a user account in particular. > for example, the emails i receive to b...@address.com are forwarded to gmail, > but is in this point where the SA treats the message as a spam because of > the high score points stop forwardin

Spam gets through via Envelope

No doubt this has been discussed before and apologies for any repetition, but I can't find the answer in the archive. I have set SA to reject all mail that isn't addressed to specific addresses, but quite a lot of spam gets through by using arbitrary addresses in the To field and a 'good' address

Re: forward mails as spam

On Tue, 2009-07-14 at 20:09 -0700, neroxyr wrote: > > John Hardin wrote: > > > > Would you be willing to post the output from this: > > > >egrep 'white|black' /etc/mail/spamassassin/*.cf > > here's the output: > > http://pastebin.ca/1495392 blacklist_from *...@*.* ...why are you surpris

Re: forward mails as spam

here's the output: http://pastebin.ca/1495392 John Hardin wrote: > > > Would you be willing to post the output from this: > >egrep 'white|black' /etc/mail/spamassassin/*.cf > > -- View this message in context: http://www.nabble.com/forward-mails-as-spam-tp24470970p24491203.html Sent

Re: forward mails as spam

On Tue, 14 Jul 2009, neroxyr wrote: Here's the text in pastebin: http://pastebin.ca/1495217 Blocked by SpamAssassin It looks to me like gmail is a red herring, and you're blacklisting brennero_pa...@yahoo.es somehow. Would you be willing to post the output from this: egrep 'white|black'

Re: forward mails as spam

On Tue, 14 Jul 2009, McDonald, Dan wrote: I suggest whitelist_from_spf with your specific email addresses. (gmail does SPF, right?) It might, but whitelist_from_dkim would probably be better. Or whitelist_from_auth. D'oH! -- John Hardin KA7OHZhttp://www.impsec.org/~jhar

Re: Header Layout

On Tue, 2009-07-14 at 12:33 -0500, McDonald, Dan wrote: > On Tue, 2009-07-14 at 16:13 +0100, Steve wrote: > > This is very pretty; > > > > X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.3379 > > Rule breakdown below > > pts rule name description > > -

Re: forward mails as spam

Here's the text in pastebin: http://pastebin.ca/1495217 Blocked by SpamAssassin -- View this message in context: http://www.nabble.com/forward-mails-as-spam-tp24470970p24488978.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

spamassassin bayes postgresql schema

Hello. I'd like to set up bayes storage to postgresql database, but the problem is that it is not in the 'public' schema. In fact, the database is 'hosting', schema 'spamassassin' and the tables would be created under this. Is there a possibility to specify schema for pgsql? Thanks. -- View th

Re: forward mails as spam

the email are forward from a user account in particular. for example, the emails i receive to b...@address.com are forwarded to gmail, but is in this point where the SA treats the message as a spam because of the high score points Benny Pedersen wrote: > > > add the forwarded from ip as truste

Re: How to attach spam messages as HTML instead of TXT

Did you know...? Emails like yours are what we're trying to block on a daily basis. signature.asc Description: PGP signature

Re: [NEW SPAM FLOOD] www.shopXX.net

>Which of course means we've long since passed the point where any of >these are going to do the spammers any good. That's the frustrating >part. I thought that the point was that since it cost a spammer the same to send out a million emails as to send out one, he was happy if only one of th

Re: forward mails as spam

On Tue, July 14, 2009 22:05, neroxyr wrote: > > the whitelist_from_spf doesn't seem to work in the spamassassin local.cf file > puting this line, now i don't receive the mailer-daemon in my account > > is there a way that the forward emails not to be considered as spam by SA? add the forwarded fr

Re: forward mails as spam

The milter i'm using is spamass-milter and the spamc is already running Cedric Knight, GreenNet wrote: > > > I use postfix rather than sendmail, but suspect your sendmail milter is > wrongly configured, or just plain buggy. What is the name of the > milter you are using? I understand www.mi

Re: custom rule no work (as expected) and log score

The most obvious problem is that you are re-using the rule name. While the configuration is parsed the 2nd line replaces the first then the 3rd line replaces the 2nd line. If you want three rules give them three different names, for example: whitelist_from_luser1 whitelist_from_luser2 whiteli

Re: custom rule no work (as expected) and log score

On Tue, 2009-07-14 at 12:54 -0700, Bazooka Joe wrote: > any idea why this rule never works for domain1 or domain2 but only domain3 > > header whitelist_from_luser From =~ /domain1\.com/i > header whitelist_from_luser From =~ /domain2\.com/i > header whitelist_from_luser From =~ /domain3\.com/i Be

Re: forward mails as spam

Ok, i'll try with those, i'll post you later to see how these goes Benny Pedersen wrote: > > > On Tue, July 14, 2009 21:28, neroxyr wrote: >> tks cheking the local.cf i had a blacklist_from *...@*.* >> i delete that line and put the whitelist_from *...@gmail.com > > dont use whitelist_from, s

Re: forward mails as spam

the whitelist_from_spf doesn't seem to work in the spamassassin local.cf file puting this line, now i don't receive the mailer-daemon in my account is there a way that the forward emails not to be considered as spam by SA? John Hardin wrote: > > Not if you don't want _every_ _single_ _message_

Re: custom rule no work (as expected) and log score

any idea why this rule never works for domain1 or domain2 but only domain3 header whitelist_from_luser From =~ /domain1\.com/i header whitelist_from_luser From =~ /domain2\.com/i header whitelist_from_luser From =~ /domain3\.com/i score whitelist_from_luser -2.5 How do I log the score for ea

Re: forward mails as spam

On Tue, July 14, 2009 21:28, neroxyr wrote: > tks cheking the local.cf i had a blacklist_from *...@*.* > i delete that line and put the whitelist_from *...@gmail.com dont use whitelist_from, senders can forge it very easyly, if you want to whitelist use whitelist_from_dkim whitelist_from_spf wh

custom rule no work (as expected) and log score

any idea why this rule never works for domain1 or domain2 but only domain3 header whitelist_from_luser From =~ /domain1\.com/i header whitelist_from_luser From =~ /domain2\.com/i header whitelist_from_luser From =~ /domain3\.com/i score whitelist_from_luser -2.5 How do I log the score for each

Re: trusted_networks and internal_networks

On Tue, July 14, 2009 21:26, Jari Fredriksson wrote: > Duh. Dumb. Arrgh! Hit! Damn. its rocket science :) -- xpoint

Re: forward mails as spam

On Tue, 2009-07-14 at 12:42 -0700, John Hardin wrote: > On Tue, 14 Jul 2009, neroxyr wrote: > > > tks cheking the local.cf i had a blacklist_from *...@*.* > > i delete that line and put the whitelist_from *...@gmail.com > > > > I restart spamassassin and sendmail service and it worked!!. But putti

Re: trusted_networks and internal_networks

Jari Fredriksson a écrit : >> [snip] >> when I put your lines in my config, I only seethe >> 127.0.0.1/32 warning. >> > >>> >>> It looks like SA itself configured the trusted. > > I removed both the 127.0.0.1 AND 10/8 and this is happy again. It seems to > configure the internal networks as tru

Re: forward mails as spam

On Tue, 14 Jul 2009, neroxyr wrote: tks cheking the local.cf i had a blacklist_from *...@*.* i delete that line and put the whitelist_from *...@gmail.com I restart spamassassin and sendmail service and it worked!!. But putting whitelist_from *...@gmail.com in the local.rf is not correct, is it?

Re: forward mails as spam

tks cheking the local.cf i had a blacklist_from *...@*.* i delete that line and put the whitelist_from *...@gmail.com I restart spamassassin and sendmail service and it worked!!. But putting whitelist_from *...@gmail.com in the local.rf is not correct, is it? Cedric Knight, GreenNet wrote: > >

Re: trusted_networks and internal_networks

> Jari Fredriksson a écrit : >> I tried with this: >> >> -(local.cf)--- >> >> internal_networks 10.0.0.0/8 >> trusted_networks 10.0.0.0/8 127.0.0.1 >> trusted_networks 212.16.98.0/24 212.16.100.0/24 >> 62.142.0.0/16 195.197.172.98 trusted_networks >> 195.74.0.0/16 213.192.189.2/24

Re: trusted_networks and internal_networks

> Jari Fredriksson a écrit : >> I tried with this: >> >> -(local.cf)--- >> >> internal_networks 10.0.0.0/8 >> trusted_networks 10.0.0.0/8 127.0.0.1 >> trusted_networks 212.16.98.0/24 212.16.100.0/24 >> 62.142.0.0/16 195.197.172.98 trusted_networks >> 195.74.0.0/16 213.192.189.2/24

Re: Header Layout

On Tue, 2009-07-14 at 16:13 +0100, Steve wrote: > This is very pretty; > > X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.3379 > Rule breakdown below >pts rule name description > -- >

Re: trusted_networks and internal_networks

Jari Fredriksson a écrit : > I tried with this: > > -(local.cf)--- > > internal_networks 10.0.0.0/8 > trusted_networks 10.0.0.0/8 127.0.0.1 > trusted_networks 212.16.98.0/24 212.16.100.0/24 62.142.0.0/16 195.197.172.98 > trusted_networks 195.74.0.0/16 213.192.189.2/24 217.30.188.0

Re: How to attach spam messages as HTML instead of TXT

On 13-Jul-2009, at 19:42, Fenton, Jason (interVations) wrote: Is there a way to set SpamAssassin to save and attached the original message as HTML instead of TXT which has been caught as spam in-case it is a legitimate email? HTML is text. The original untouched message is saved as a standa

Header Layout

This is very pretty; X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.3379 Rule breakdown below pts rule name description -- -- 0.00 NO_REAL_NAME From: doe

Re: URI-DNSBL problem with spamassassin 3.2.5

Message original Sujet : Re: URI-DNSBL problem with spamassassin 3.2.5 De : Michael Parker Pour : Eddy Beliveau Copie à : users@spamassassin.apache.org, Mark Martinec Date : 2009-07-09 19:37 On Jul 9, 2009, at 1:40 PM, Eddy Beliveau wrote: but Ido not find any timing.log

Re: trusted_networks and internal_networks

On Tue, July 14, 2009 14:48, Jari Fredriksson wrote: > Yeah. My LAN is using 10/8 for hysterical reasons. Is there something wrong > here? just that your source have now rfc1918 ranges hardcorded into sa, so remove your own internal/trsuted/msa for rfc1918 will solve it ps: i have not seen the

Re: trusted_networks and internal_networks

Jari Fredriksson wrote: I tried with this: -(local.cf)--- internal_networks 10.0.0.0/8 trusted_networks 10.0.0.0/8 127.0.0.1 trusted_networks 212.16.98.0/24 212.16.100.0/24 62.142.0.0/16 195.197.172.98 trusted_networks 195.74.0.0/16 213.192.189.2/24 217.30.188.0/24 65.54.0.0/16

Re: trusted_networks and internal_networks

> On Tue, July 14, 2009 13:25, Jari Fredriksson wrote: > >> [7594] warn: netset: cannot include 127.0.0.1/32 as it >> has already been included [7594] warn: netset: cannot >> include 10.0.0.0/8 as it has already been included It >> looks like SA itself configured the trusted. > > rfc1918 > Yea

Re: use save_pattern_hits to debug Mail::SpamAssassin?

So what I want is to get a list of all performed check and the score of this check. If you want to see the scores of the successful checks in all emails, put this in your cf file: add_header all Report _REPORT_ -- Dan Schaefer Application Developer Performance Administration Corp.

use save_pattern_hits to debug Mail::SpamAssassin?

I have some serious problems with my Spam-Detection. I use a milter wrapped around Mail::SpamAssassin and occassionaly a Mail slips through with a quite low spamscore despite the fact that a later check gives it a high score. So what I want is to get a list of all performed check and the score

Re: How to attach spam messages as HTML instead of TXT

On Tue, July 14, 2009 03:42, Fenton, Jason (interVations) wrote: > Did you know...? > > We are the first in the world to offer Web Development Financing. > > read more... adds > Is there a way to set SpamAssassin to save and attached the original > message as HTML instead

Re: trusted_networks and internal_networks

On Tue, July 14, 2009 13:25, Jari Fredriksson wrote: > [7594] warn: netset: cannot include 127.0.0.1/32 as it has already been > included > [7594] warn: netset: cannot include 10.0.0.0/8 as it has already been included > It looks like SA itself configured the trusted. rfc1918 sa 3.3 ? -- xpo

Re: sharing the bayes DB?

> google found me nothing authoritative on this, so I > figured asking is the way to go... > > Is it good/bad/etc to share out a MySQL Bayes DB from a > central host to multiple machines running spamd? It is good. I have shared a bayes database via nfs (w/o SQL) and mysql and those both seemed

Re: deactivate all checks except specific tests

sorry about the double-post -- original message was stuck in moderation queue. On Fri, Jul 10, 2009 at 18:20, sebast...@debianfan.de wrote: > Hello, > > i have set up a virtual server for experiments. > > I want to disable all the spamassassin tests - except one specific rbl - in > this topic-  th

deactivate all checks except specific tests

Hello, i have set up a virtual server for experiments. I want to disable all the spamassassin tests - except one specific rbl - in this topic- the manitu rbl. Is there a parameter for disabling all the tests? Thx Sebastian

How to attach spam messages as HTML instead of TXT

Did you know...? We are the first in the world to offer Web Development Financing. read more... Hi Everyone Is there a way to set SpamAssassin to save and attached the original message as HTML instead of TXT which has been caught as s

sharing the bayes DB?

google found me nothing authoritative on this, so I figured asking is the way to go... Is it good/bad/etc to share out a MySQL Bayes DB from a central host to multiple machines running spamd? -- Michael 'Moose' Dinn, Network Manager Airfire Telephone and Data Inc. (902) 420-1451 / supp...@a

Re: trusted_networks and internal_networks

> Jari Fredriksson a écrit : >>> MrGibbage a écrit : #ps11651.dreamhostps.com and pelorus.org internal_networks 75.119.219.171 trusted_networks 75.119.219.171 #I think this is wrong >>> no, it is not wrong. the documentation says: >>> >>> Every entry in "internal_networks" must appe

Re: forward mails as spam

neroxyr wrote: > I have configured our domain mail to forward messages to a gmail account. > I did a test sending an email from my gmail account to my domain mail; I > receive the message sent from my gmail account, but immediately this message > has to be sent to gmail. > Mail Delivery Subsystem

Re: trusted_networks and internal_networks

> > where did your squirrelmail go now ? I use it when I'm not sitting at home. It is up on my server, but I do not use it if I have access to my workstation. I prefer Outlook Express with OE-QuoteFix over any other IMAP client I have tested.

Re: forward mails as spam

On Tue, July 14, 2009 01:45, neroxyr wrote: > http://www.nabble.com/file/p24471425/block.jpg now we need to use gocr for helping you ? -- xpoint

Re: trusted_networks and internal_networks

On Tue, July 14, 2009 00:42, mouss wrote: > the requirement is "reasonable". an "internal" relay that wouldn't be > "trusted" is irrelevant. why would you want to skip PBL/DUL lookup for > an IP that may be forged? if thats the problem the mail wont get delivered in the first place -- xpoint

Re: trusted_networks and internal_networks

On Tue, July 14, 2009 00:08, Jari Fredriksson wrote: >> so whenever you put an internal_network line, you should >> add the same line with "trusted" instead of "internal". > If that is indeed true, it is a BUG IMO. > Brain dead requirement! at least its open source so one can make a good patch to

Re: trusted_networks and internal_networks

On Mon, July 13, 2009 23:55, mouss wrote: > so whenever you put an internal_network line, you should add the same > line with "trusted" instead of "internal". in other words, internal cant be untrusted so if you see spam with origin as internal networks ip then remove that ip as internal -- x