Re: New plugin: DecodeShortURLs

2010-10-04 Thread Martin Gregorie
On Mon, 2010-10-04 at 22:55 +0100, John Horne wrote: > I grabbed a copy of the [DecodeShortURLs] plugin and tried it this afternoon > (on a > CentOS 5.5 system). We log all our spamd messages to /var/log/maillog > via syslog. For the plugin I disabled all the options except > 'url_shortener_syslog

Re: New plugin: DecodeShortURLs

2010-10-04 Thread John Horne
On Thu, 2010-09-23 at 11:30 +0100, Steve Freegard wrote: > > > > Hopefully it will be useful to others; you can grab it from: > > > > http://www.fsl.com/support/DecodeShortURLs.pm > > http://www.fsl.com/support/DecodeShortURLs.cf > > > ... > > - Added option to allow logging to syslog (mail.info)

Re: FORGED_HOTMAIL_RCVD2 contributing to FP

2010-10-04 Thread Kris Deugau
John Wilcock wrote: Le 04/10/2010 17:02, Kris Deugau a écrit : Not sure exactly what this test actually checks (since it's an eval rule I gave up on tracing after the third layer of "$self->callanotherfunction"), but it should not be triggering at all on this set of Received: headers IMO: ...

Re: Chickenpox

2010-10-04 Thread Bowie Bailey
On 10/4/2010 9:30 AM, Hans-Werner Friedemann wrote: > Is somebody using the chickenpox-rules in his actual SA-Config and can tell me > something about the SPAM-Hits? > > Do you think it´s advisable for us to use it? I used it for a long time and then removed it because it was generating a few f

Re: FORGED_HOTMAIL_RCVD2 contributing to FP

2010-10-04 Thread John Wilcock
Le 04/10/2010 17:02, Kris Deugau a écrit : Not sure exactly what this test actually checks (since it's an eval rule I gave up on tracing after the third layer of "$self->callanotherfunction"), but it should not be triggering at all on this set of Received: headers IMO: ... The entire /16 is ass

FORGED_HOTMAIL_RCVD2 contributing to FP

2010-10-04 Thread Kris Deugau
Not sure exactly what this test actually checks (since it's an eval rule I gave up on tracing after the third layer of "$self->callanotherfunction"), but it should not be triggering at all on this set of Received: headers IMO: Return-Path: Received: from n1.bullet.mail.ac4.yahoo.com (n1.bull

Re: Question about link submission

2010-10-04 Thread Michael Scheidell
On 10/4/10 10:50 AM, co...@jarys.be I Advanced Digital Workflow wrote: Hello, I'm using the filter for 1week. It's working great but there are a few large spam systems who still get in the inbox. I work for about 2 years with http://www.spamcop.net to report spam. SA can send to spamcop i

Question about link submission

2010-10-04 Thread co...@jarys.be I Advanced Digital Workflow
Hello, I'm using the filter for 1week. It's working great but there are a few large spam systems who still get in the inbox. I work for about 2 years with http://www.spamcop.net to report spam. Is there a place or website for spamassassin where I can punt the Email headers of real spam? So

Re: AW: Own Rule

2010-10-04 Thread John Hardin
On Mon, 4 Oct 2010, Hans-Werner Friedemann wrote: Sorry, but is it possible to combine __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule? Can somebody help me to build this rule? Please look at the reply to "Own Rule" I posted in the last two days. -- John Hardin KA7OHZh

Chickenpox

2010-10-04 Thread Hans-Werner Friedemann
Is somebody using the chickenpox-rules in his actual SA-Config and can tell me something about the SPAM-Hits? Do you think it´s advisable for us to use it?

Re: Need God/Christian rule sets

2010-10-04 Thread Marc Perkel
On 10/3/2010 8:10 PM, John Hardin wrote: On Sun, 3 Oct 2010, Marc Perkel wrote: As I said in my original message. The rule itself would have no points. It would be combined with other rules like large sums of money and transfer and I'm someone you don't know. You mean, like the ADVANCE_FEE

Re: AW: Own Rule

2010-10-04 Thread Ned Slider
On 04/10/10 07:00, Hans-Werner Friedemann wrote: Sorry, but is it possible to combine __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule? Can somebody help me to build this rule? Thanks in advance metaTO_EQ_FROM_IN_SUBJECT(__TO_EQ_FROM && __FROM_IN_SUBJECT) describeTO_

AW: Need God/Christian rule sets

2010-10-04 Thread Hans-Werner Friedemann
That´s not complicated! Only use the RelayCountry-Plugin. >> I'd like to just block all Arabic. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400

Re: AW: Own Rule

2010-10-04 Thread Benny Pedersen
On man 04 okt 2010 08:00:59 CEST, Hans-Werner Friedemann wrote Sorry, but is it possible to combine __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule? Can somebody help me to build this rule? meta foo (__TO_EQ_FROM && __FROM_IN_SUBJECT) -- xpoint http://www.unicom.com/pw/reply-to-harmful.htm

Re: AW: Need God/Christian rule sets

2010-10-04 Thread Jason Haar
On 10/04/2010 06:51 PM, Hans-Werner Friedemann wrote: > That´s not complicated! > Only use the RelayCountry-Plugin. Huh? You are suggesting Arabic spam exclusively comes from Arabic countries? The same way English spam only comes from England? ;-) What you want is a properly working textcat

Re: AW: Own Rule

2010-10-04 Thread John Hardin
On Mon, 4 Oct 2010, Benny Pedersen wrote: On man 04 okt 2010 08:00:59 CEST, Hans-Werner Friedemann wrote Sorry, but is it possible to combine __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule? Can somebody help me to build this rule? meta foo (__TO_EQ_FROM && __FROM_IN_SUBJECT) Or just wa

AW: Own Rule

2010-10-04 Thread Hans-Werner Friedemann
Sorry, but is it possible to combine __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule? Can somebody help me to build this rule? Thanks in advance -Ursprüngliche Nachricht- Von: John Hardin [mailto:jhar...@impsec.org] Gesendet: Sonntag, 3. Oktober 2010 04:00 An: users@spamassassin.

After changing bayes from file-mode to mysql....

2010-10-04 Thread Hans-Werner Friedemann
Hi @ all last week I´ve changed the bayes store method from file-mode to mysql. With sa-learn --dump magic I can see, that bayes is furthermore learning ham and spam! In my spamd.log I only get the bayes result BAYES_00 and no other bayes scores!? After spamassassin --lint everything seems t