Re: cumulating dyn dns rules

2012-03-28 Thread Benny Pedersen
Den 2012-03-28 17:36, Kevin A. McGrail skrev: I believe FH_HELO_EQ_D_D_D_D is already being removed https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6778 smtp_helo_name=google.example.org in postfix main.cf did not help on stupid defaults from dynamic reverse ?

Re: cumulating dyn dns rules

2012-03-28 Thread Benny Pedersen
Den 2012-03-27 17:08, Stephane Chazelas skrev: AFAICT, "vps" stands for "virtual private server" at the webfusion hosting company, the IP address is not dynamic. so why does the hostname contains ip addr ?, okay stop fighting :) http://www.dnswl.org/ you can ask to get your own ip in the virt

Re: My Mad Plan's Achillies heel?

2012-03-28 Thread Michael Scheidell
On 3/28/12 5:55 PM, j...@j4computers.com wrote: Continuing my learning curve with spamassassin, I find a fly in the ointment. Some SPAM continues to slip thru. I thought, oh well, I'll just block by IP. Hmm, I use fetchmail to grab mail from various accounts. add the ip address (last received

My Mad Plan's Achillies heel?

2012-03-28 Thread j...@j4computers.com
Continuing my learning curve with spamassassin, I find a fly in the ointment. Some SPAM continues to slip thru. I thought, oh well, I'll just block by IP. Hmm, I use fetchmail to grab mail from various accounts. S . . . the actual source or "IP of interest" will not be the connection

Re: No spam, but get quarantined.

2012-03-28 Thread Martin Hepworth
No idea who sim scan calls spamassin but 4 seems a little low to be quarantining Also simacan could be adding it own config somehow such a common bayes db or other rules the running SA independently night not be licking up Martin On Wednesday, 28 March 2012, FC Mario Patty wrote: > Well.. it wa

Re: cumulating dyn dns rules

2012-03-28 Thread Stephane Chazelas
2012-03-28 17:37:25 +0200, Axb: [...] > >But even if it were, wouldn't that score be a bit excessive? > >Aren't FH_HELO_EQ_D_D_D_D and HELO_DYNAMIC_IPADDR > >redundant/overlapping? > > FH_HELO_EQ_D_D_D_D will be removed with next sa-update > > meanwhile > > score FH_HELO_EQ_D_D_D_D 0 [...] OK.

Re: cumulating dyn dns rules

2012-03-28 Thread Axb
On 03/27/2012 05:08 PM, Stephane Chazelas wrote: Hello, we've had a false positive reported for those headers: Return-Path:<...@northernnetworking.co.uk> X-Spam-Flag: YES X-Spam-Score: 3.679 X-Spam-Level: *** X-Spam-Status: Yes, score=3.679 tagged_above=0 required=3.1 tests=[BAYES_00=-3

Re: cumulating dyn dns rules

2012-03-28 Thread Kevin A. McGrail
I believe FH_HELO_EQ_D_D_D_D is already being removed https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6778 Regards, KAM On 3/27/2012 11:08 AM, Stephane Chazelas wrote: Hello, we've had a false positive reported for those headers: Return-Path: <...@n

cumulating dyn dns rules

2012-03-28 Thread Stephane Chazelas
Hello, we've had a false positive reported for those headers: Return-Path: <...@northernnetworking.co.uk> X-Spam-Flag: YES X-Spam-Score: 3.679 X-Spam-Level: *** X-Spam-Status: Yes, score=3.679 tagged_above=0 required=3.1 tests=[BAYES_00=-3.599, DYN_RDNS_AND_INLINE_IMAGE=1.168, FH_H

Re: WhiteList an IP address?

2012-03-28 Thread Benny Pedersen
Den 2012-03-28 15:07, Bowie Bailey skrev: $ man Mail::SpamAssassin::Conf man vs perldoc If you really want to simply let through all mail from a specific IP, the simplest way is probably at the MTA. Don't send those messages to SA in the first place...problem solved. but create another

Re: WhiteList an IP address?

2012-03-28 Thread Bowie Bailey
On 3/28/2012 3:17 AM, FC Mario Patty wrote: > On Wed, Mar 28, 2012 at 11:55 AM, ddodell > wrote: > > > I've tried researching this question without much luck. > > Is there a way to whitelist a specific IP address in spamassassin. > > Be gentle ... I'm new at thi

Re: Rule to catch similar localparts in "To:" recipients?

2012-03-28 Thread Kevin A. McGrail
I don't know that such a rule would be an indication of spam. I have seen dictionary patterns on ham and spam. Regards, KAM Dave Pooser wrote: One thing I've noticed more of recently is spam sent to multiple recipients at multiple domains with the same or similar local parts; one message might

Re: WhiteList an IP address?

2012-03-28 Thread FC Mario Patty
I put * trusted_networks 172.1.* in /etc/mail/spamassassin/local.cf (replace 172.1. with your real network id). I think it should work with your configuration too. Another place I'd like to check is simcontrol (since I use simscan to coordinate clamd and spamassassin and I configured simscan