Re: Obfuscation Question

2009-08-27 Thread Matt Kettler
Irish Online Help Desk wrote: > > When I send a test message for my broadcast email I am receiving “0.6 > HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation” in > the spam score. It is a pretty basic email message with a few > hyperlinks and a numbered list. Can you explain what may

RE: Your message to the Irish Online Help Desk Re: ObfuscationQuestion

2009-08-27 Thread Michael Hutchinson
> -Original Message- > From: Karsten Bräckelmann [mailto:guent...@rudersport.de] > Sent: Friday, 28 August 2009 1:34 p.m. > To: Irish Online Help Desk > Cc: users@spamassassin.apache.org > Subject: Re: Your message to the Irish Online Help Desk Re: > ObfuscationQuestion > > See, this is on

Re: Your message to the Irish Online Help Desk Re: Obfuscation Question

2009-08-27 Thread Karsten Bräckelmann
See, this is one of the reasons why I prefer NOT to moderate through posts by non-subscribers. I am *seriously* trying hard not to use any words that are inappropriate for a public list. Funnily enough, I can't even begin to explain how I feel about trying to help you and getting that bloody reply

Re: Obfuscation Question

2009-08-27 Thread Karsten Bräckelmann
Not subscribed. You are missing the on-list replies. Well, if any useful, given that post... On Wed, 2009-08-26 at 11:30 -0400, Irish Online Help Desk wrote: > When I send a test message for my broadcast email I am receiving “0.6 > HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation”

RE: Writing spamassassin rules

2009-08-27 Thread Kevin Miller
Evan Platt wrote: > At 12:46 PM 8/27/2009, you wrote: >> I'm sure I'm missing the obvious, but I can't seem to find a guide to >> writing spamassassin rules on the spamassassin web page. I'd like to >> write some custom rules, and some documentation would be really >> handy. Anybody got that URL h

Re: Writing spamassassin rules

2009-08-27 Thread Rick Macdougall
Kevin Miller wrote: I'm sure I'm missing the obvious, but I can't seem to find a guide to writing spamassassin rules on the spamassassin web page. I'd like to write some custom rules, and some documentation would be really handy. Anybody got that URL handy? http://wiki.apache.org/spamassa

Re: Writing spamassassin rules

2009-08-27 Thread Evan Platt
At 12:46 PM 8/27/2009, you wrote: I'm sure I'm missing the obvious, but I can't seem to find a guide to writing spamassassin rules on the spamassassin web page. I'd like to write some custom rules, and some documentation would be really handy. Anybody got that URL handy? I'm guessing this i

Writing spamassassin rules

2009-08-27 Thread Kevin Miller
I'm sure I'm missing the obvious, but I can't seem to find a guide to writing spamassassin rules on the spamassassin web page. I'd like to write some custom rules, and some documentation would be really handy. Anybody got that URL handy? Thanks much... ...Kevin -- Kevin Miller

Re: Converting spam to email message

2009-08-27 Thread Mike Cappella
Mr. Student, On 8/27/2009 11:54 AM, MySQL Student wrote: Hi, I thought I understood, but I'm still having trouble converting a message in the quarantine back into a normal email message that I can forward on to a recipient. Does anyone know how to do this? Probably best answered on amavis us

razor/spamcop report question

2009-08-27 Thread Patrick Proniewski
Hello, I'm using the amavisd-new/spamassassin 3.2.5/clamav combo on some servers (Freebsd, Mac OS X Server). I would like spamassassin to report spam using razor and spamcop services. in /usr/local/etc/mail/spamassassin/v310.pre (freebsd), I have this: loadplugin Mail::SpamAssassin

Re: Converting spam to email message

2009-08-27 Thread Kevin Parris
SpamAssassin does not "handle" mail. SpamAssassin analyzes a message and returns a score/report to whatever asked for the analysis. That is all. Other products "do things" with mail - store/reject/accept/deliver, etc. - and some of those products use a SpamAssassin score as part of the basis f

Re: forwarding emails will sa learn?

2009-08-27 Thread LuKreme
On 27-Aug-2009, at 10:22, Dave wrote: I got an email that was not tagged high enough as spam, it was a 3.063 when needed was 3.5, so it got through, it is rare. I notice that spam messages go to username+s...@domain.com can i teach SA that the message is spam by forwarding the message

Re: Converting spam to email message

2009-08-27 Thread MySQL Student
Hi, >> I thought I understood, but I'm still having trouble converting a >> message in the quarantine back into a normal email message that I can >> forward on to a recipient. Does anyone know how to do this? > > Maybe I missed something, but SpamAssassin doesn't have a quarantine. > > http://wiki

Re: Google/Yahoo Spam

2009-08-27 Thread Martin Gregorie
On Thu, 2009-08-27 at 12:38 -0400, MySQL Student wrote: > > I'm seeing an increase in Google Reader and yahoo > groups/personals/profile spam. > > Any ideas on how to catch this one? For the Yahoo spam (with links to > yahoo sites ending in '/1', I've created these: > Thus should catch your set

Re: Converting spam to email message

2009-08-27 Thread Evan Platt
At 10:39 AM 8/27/2009, you wrote: Hi all, I thought I understood, but I'm still having trouble converting a message in the quarantine back into a normal email message that I can forward on to a recipient. Does anyone know how to do this? Maybe I missed something, but SpamAssassin doesn't have

Converting spam to email message

2009-08-27 Thread MySQL Student
Hi all, I thought I understood, but I'm still having trouble converting a message in the quarantine back into a normal email message that I can forward on to a recipient. Does anyone know how to do this? Thanks so much. Best regards, Alex

RE: AWL q?

2009-08-27 Thread Gary Smith
> memcache is nice, but how do you use memcache data in postfix ? There is a patch for memcached and postfix. The problem is, which is what I'm working on, is how to populate it. They only give you the mechanism for using memcached. (http://www.aurore.net/projects/postfix_memcached/) So,

Google/Yahoo Spam

2009-08-27 Thread MySQL Student
Hi all, I'm seeing an increase in Google Reader and yahoo groups/personals/profile spam. Here's an example of the Google Reader spam: http://pastebin.com/m1021fc5f Any ideas on how to catch this one? For the Yahoo spam (with links to yahoo sites ending in '/1', I've created these: uriLO

forwarding emails will sa learn?

2009-08-27 Thread Dave
Hello, I got an email that was not tagged high enough as spam, it was a 3.063 when needed was 3.5, so it got through, it is rare. I notice that spam messages go to username+s...@domain.com can i teach SA that the message is spam by forwarding the message to that email will it learn for the

Re: corpus ham/spam balance

2009-08-27 Thread Kris Deugau
LuKreme wrote: On 26-Aug-2009, at 10:53, Kris Deugau wrote: If you're running a sitewide AWL on any kind of scale beyond a few tens of domains, and a couple hundred accounts, you should probably look at putting it in SQL - it's a *lot* easier to maintain there. Is there a good writeup on doin

Re: Date parsing

2009-08-27 Thread LuKreme
On 27-Aug-2009, at 06:59, Mike Cardwell wrote: Date: 27 Aug 09 13:50:20 0100 Although the date header was badly formatted, it wasn't actually incorrect as far as when the message was sent. I don't think the DATE_IN_PAST rules should fire if the date isn't valid in the first place… I dun

RE: corpus ham/spam balance

2009-08-27 Thread Karsten Bräckelmann
On Thu, 2009-08-27 at 11:25 +0200, Benny Pedersen wrote: > On Thu 27 Aug 2009 02:34:16 AM CEST, Karsten Bräckelmann wrote > > Also, I do agree with the post by RW. By lowering the auto-learn ham > > threshold you managed to get the ratio more sane. However, continuing to > > do so you won't really

Date parsing

2009-08-27 Thread Mike Cardwell
Hi, I received an email with a date header like this: Date: 27 Aug 09 13:50:20 0100 That header triggered the following rule: 1.7 INVALID_DATE Invalid Date: header (not RFC 2822) That's fair enough, but then a second rule was incorrectly triggered: 2.3 DATE_IN_PAST_96_XX Date:

Re: Obfuscation Question

2009-08-27 Thread Benny Pedersen
On Wed 26 Aug 2009 05:30:31 PM CEST, Irish Online Help Desk wrote When I send a test message for my broadcast email I am receiving "0.6 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation" in the spam score. It is a pretty basic email message with a few hyperlinks and a numbered li

Re: Training spam as ham and forwarding

2009-08-27 Thread RW
On Wed, 26 Aug 2009 22:44:50 -0400 MySQL Student wrote: > Hi SA users, > > I have a few messages found in the quarantine that I need to train as > ham because they were marked as spam incorrectly. To do this, I added > the following to the top of the file so it becomes a normal email: > > From

Re: SA: lottery message scored hammy by bayes

2009-08-27 Thread Dennis German
Apparently I am not sure if bayes is "autolearning" I am on a shared host service (midphase) which uses cPanel and has exim do the spamassassin stuff. They use my "scores" but ignore other commands. When I get a message I think I shouldn't have I save it and run spamc < m > .out inorder

Obfuscation Question

2009-08-27 Thread Irish Online Help Desk
When I send a test message for my broadcast email I am receiving "0.6 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation" in the spam score. It is a pretty basic email message with a few hyperlinks and a numbered list. Can you explain what may be causing this spam score. ===

RE: AWL q?

2009-08-27 Thread Len Conrad
>>>postmap -q "weekendhotdeals.info" mysql:/usr/local/etc/postfix/mysql- >>>from_senders_rhsbl.cf >>>554 RHSBL_DOMAIN > >post the mysql map it's a two-field table, just like a postfix .map file, index + data 1. rhsbl_domain 2. 554 RHSBL_DOMAIN >, without password of course if you want to shar

RE: corpus ham/spam balance

2009-08-27 Thread Benny Pedersen
On Thu 27 Aug 2009 02:34:16 AM CEST, Karsten Bräckelmann wrote Also, I do agree with the post by RW. By lowering the auto-learn ham threshold you managed to get the ratio more sane. However, continuing to do so you won't really learn any ham, but spam only. not if nham is bigger then nspam, thi

RE: AWL q?

2009-08-27 Thread Benny Pedersen
On Thu 27 Aug 2009 12:08:47 AM CEST, Gary Smith wrote I don't let that junk get past envelope stage: postmap -q "weekendhotdeals.info" mysql:/usr/local/etc/postfix/mysql- from_senders_rhsbl.cf 554 RHSBL_DOMAIN post the mysql map, without password of course if you want to share it, but i bel