Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
thank you sir, i think this worked. On 3/17/2010 3:26 AM, John Hardin wrote: On Tue, 16 Mar 2010, John Hardin wrote: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ Watch the line wrap on that...

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Karsten Bräckelmann
> >>> How is this messing you up? This should not affect any of your other > >>> channels. The only effect is that the sought rules don't get updated. > >> > >> I'm not sure how everyone else is doing it, but my script checks for > >> updates using --channelfile, then runs sa-compile if sa-update

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, John Hardin wrote: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ Watch the line wrap on that... -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgp

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: please see attached file. Is mail.pinoyonthego.net your MTA? If so, try this: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ score POGO_CUSTOMER -1 Run in test for a while, if you only get hits on customer

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Mark Martinec
Jason, > In order to properly open a feature request, I'd like to get a better > idea where you're going with this. It seems to me that a new exit code > from sa-update would be more appropriate than running sa-compile every > time just in case. Maybe I misunderstand? Yes, that's what I had in

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Jason Bertoch
On 2010/03/16 2:44 PM, Mark Martinec wrote: On Tuesday 16 March 2010 19:37:02 Jason Bertoch wrote: On 2010/03/16 9:30 AM, Bowie Bailey wrote: How is this messing you up? This should not affect any of your other channels. The only effect is that the sought rules don't get updated. I'm not su

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Mark Martinec
On Tuesday 16 March 2010 19:37:02 Jason Bertoch wrote: > On 2010/03/16 9:30 AM, Bowie Bailey wrote: > > How is this messing you up? This should not affect any of your other > > channels. The only effect is that the sought rules don't get updated. > > I'm not sure how everyone else is doing it, b

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Jason Bertoch
On 2010/03/16 9:30 AM, Bowie Bailey wrote: How is this messing you up? This should not affect any of your other channels. The only effect is that the sought rules don't get updated. I'm not sure how everyone else is doing it, but my script checks for updates using --channelfile, then runs

Re: Timeouts

2010-03-16 Thread LuKreme
On 15-Mar-2010, at 06:45, Mark Martinec wrote: > > add 'add_header all Timing _TIMING_' > to your config file, which will insert this same timing breakdown information > into a header section of a checked mail. Ah, thanks, I think I will do that. I do not really want to go trolling through someo

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
thank you sir, please see attached file. test header set score to 15 just to be able to send out, i have setup report_safe to but x-spam-report does not show up on the header, i can't tell what's causing all the points to increase. regards Ron On 3/16/2010 11:16 PM, John Hardin wrote: On T

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: On 3/16/2010 12:51 AM, John Hardin wrote: Are you authenticating your users in any way? There are ways to whitelist users who have authenticated against your MTA. Please check the list archives and the Wiki. yes i am using vchkpw to auth users. are you talki

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
hi sir, yes i am using vchkpw to auth users. are you talking about using whitelist_auth? i have tried using that coz i have spf defined on my domain, but i am not sure if whitelist_auth is for that. dig -t TXT pinoyonthego.net ;; QUESTION SECTION: ;pinoyonthego.net. IN TXT

Re: Whitelist isn't working

2010-03-16 Thread Lee Dilkie
Curious that SPF_FAIL is reported... X-Spam-Report: * 1.9 TVD_RCVD_IP TVD_RCVD_IP * 3.2 FH_DATE_PAST_20XX The date is grossly in the future. * 1.5 FROM_STARTS_WITH_NUMS From: starts with many numbers * 1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date *

Re: Hijacked thread :) (was: ruleset for German...)

2010-03-16 Thread Charles Gregory
On Mon, 15 Mar 2010, Karsten Bräckelmann wrote: The TextCat plugin. Even part of stock SA, though not enabled by default. Supports per-user settings. (nod) For reasons specific to my MTA, I can't run SA 'per user', but I can choose the most common languages (en fr) in our system's mail and fla

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Bowie Bailey
j wrote: >> I've been having the same problem from several locations/ISPs, since >> mid-Saturday. >> "500 Can't connect to yerp.org:80 (connect: timeout)" >> >> Dave >> > > Anyone figure this out? I have received the same yerp.org down errors and > it's > screwing up my SA royally. I guess t

Re: Whitelist isn't working

2010-03-16 Thread Matt Kettler
On 3/16/2010 8:14 AM, Mark Martinec wrote: > Phill, > > >> def_whitelist_from_rcvd *...@posts.freecycle.org posts.freecycle.org >> > >> Received: from bulkmail2.freecycle.org ([95.172.20.170]) >> by mscip02.mailsentry.net.au with ESMTP; 16 Mar 2010 17:51:21 +1100 >> From: "frances.dejo

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Toralf
RW-15 wrote: > > On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) > If you are looking for a way determine whether sa-update needs to be > run, you don't need to; sa-update already does this through DNS. > Thx, I've already a sa-update cron job but I' was wondering whether it works - b/c the last upda

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Toralf
Matt Kettler-3 wrote: > > On 3/16/2010 8:27 AM, RW wrote: > And more to the point, you can manually look it up if you like. > dig txt 5.2.3.updates.spamassassin.org > Thx, that was what I'm looking for :-) -- View this message in context: http://old.nabble.com/Where%27s-can-I-find-the-curre

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Matt Kettler
On 3/16/2010 8:27 AM, RW wrote: > On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) > Toralf wrote: > > >> At my stable Gentoo I see this : >> >> n22 /var/lib/spamassassin/3.002005 # head -n 1 >> updates_spamassassin_org.cf # UPDATE version 895075 >> >> and now I'm wondering whether I can compare that s

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread RW
On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) Toralf wrote: > > At my stable Gentoo I see this : > > n22 /var/lib/spamassassin/3.002005 # head -n 1 > updates_spamassassin_org.cf # UPDATE version 895075 > > and now I'm wondering whether I can compare that string with sth. at > http://spamassassin.ap

Re: Whitelist isn't working

2010-03-16 Thread Mark Martinec
Phill, > def_whitelist_from_rcvd *...@posts.freecycle.org posts.freecycle.org > Received: from bulkmail2.freecycle.org ([95.172.20.170]) > by mscip02.mailsentry.net.au with ESMTP; 16 Mar 2010 17:51:21 +1100 > From: "frances.dejong" <2890...@posts.freecycle.org> > Can anyone explain why the whi

Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Toralf
At my stable Gentoo I see this : n22 /var/lib/spamassassin/3.002005 # head -n 1 updates_spamassassin_org.cf # UPDATE version 895075 and now I'm wondering whether I can compare that string with sth. at http://spamassassin.apache.org/ ? -- View this message in context: http://old.nabble.com/Wher

Re: Whitelist isn't working

2010-03-16 Thread Matus UHLAR - fantomas
On 16.03.10 22:26, Phill Edwards wrote: > I'm running Spamassassin 3.2.5. I'm getting masses and masses of false > positives. I trashed my Bayes DB the other day and rebuilt it from > scratch with sa-learn but I'm still getting false positives. One > particularly troublesome one is a Freecycle mail

Re: Whitelist isn't working

2010-03-16 Thread Yet Another Ninja
QUICK FIX! borked FH_DATE_PAST_20XX is your problem. set in local.cf score FH_DATE_PAST_20XX 0 and then read up about this rule in the list archive On 2010-03-16 12:26, Phill Edwards wrote: I'm running Spamassassin 3.2.5. I'm getting masses and masses of false positives. I trashed my Bayes

Whitelist isn't working

2010-03-16 Thread Phill Edwards
I'm running Spamassassin 3.2.5. I'm getting masses and masses of false positives. I trashed my Bayes DB the other day and rebuilt it from scratch with sa-learn but I'm still getting false positives. One particularly troublesome one is a Freecycle mailing list that I subscribe to. I have put this in

Re: [sa] Re: ruleset for German Bettchen and Schlafzimmer spam

2010-03-16 Thread Henrik K
On Mon, Mar 15, 2010 at 11:17:09PM +0100, Karsten Bräckelmann wrote: > On Mon, 2010-03-15 at 11:15 -0400, Charles Gregory wrote: > > H. I guess this goes back to my inquiry about the Brazilian spam > > > > I'm still looking for a way (hopefully) to simply identify the *language* > > of th