Re: drop of score after update tonight

On Tue, Aug 26, 2014 at 12:08 AM, Reindl Harald wrote: > Aug 26 00:01:32 mail-gw spamd[6836]: spamd: result: Y 5 - > ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,ALL_TRUSTED,BAYES_99,BAYES_999,DEAR_SOMETHING,DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,LOTS_OF_MONEY,T

Re: drop of score after update tonight

On 25.08.14 19:06, Reindl Harald wrote: you misunderstood me - whatever i did before and how the config looks like is not the problem - i was alerted by the dramatic change after sa-update last night wwith no other changes Scores usually drop when many FPs appear. When some scores lower, other

Re: drop of score after update tonight

Ian> http://pastebin.com/dsqaVA9Z On Mon, 25 Aug 2014 19:50:20 +, David Jones wrote: David> This hit DCC_CHECK, BAYES_50, CRM114, BOGOFILTER and KAM_EU rules David> and would have been blocked on my SA 3.4.0 servers. On 25.08.14 15:02, Ian Zimmerman wrote: Isn't it a bit odd that SA has

Re: drop of score after update tonight

On Tue, 2014-08-26 at 00:08 +0200, Reindl Harald wrote: > the "bayes=1.00" below makes me wonder because around 1000 careful > selected ham/spam messages for training - IMHO that should be more in > such clear cases Please do read the docs or at least the rule's description (hint, see the BAYE

Re: Spam relayed through trendmicro?

Hi, On Mon, Aug 25, 2014 at 4:34 AM, Tom Hendrikx wrote: > On 08/25/2014 04:51 AM, Alex wrote: > > Hi all, > > > > I'm having difficulty understanding this one: > > > > http://pastebin.com/LYJVas5e > > > > It looks like a host in Japan relayed this message through a few systems > > within trendm

RE: Upgrading to SA 3.4.0 on Ubuntu Precise (12.04)

Had a similar question on another list (MailWatch for MailScanner). I received the following reply: "Centos 5.x and 6.x Source installs the binary in /usr/local/bin/ so you might need a symlink for /usr/bin/spamassassin if you are using Mailwatch or you might need to edit your Mai

Re: drop of score after update tonight

Am 26.08.2014 um 00:02 schrieb Ian Zimmerman: > On Mon, 25 Aug 2014 19:50:20 +, > David Jones wrote: > > Ian> I definitely have FNs today (about 10 by now today, normally 0). > > Ian> Looks like some/all RBLs tests are not working. I have not changed > Ian> my configuration at all. > > I

Re: drop of score after update tonight

On Mon, 25 Aug 2014 19:50:20 +, David Jones wrote: Ian> I definitely have FNs today (about 10 by now today, normally 0). Ian> Looks like some/all RBLs tests are not working. I have not changed Ian> my configuration at all. Ian> Sample here: Ian> http://pastebin.com/dsqaVA9Z David> This h

Upgrading to SA 3.4.0 on Ubuntu Precise (12.04)

Hi, On my server, I'm running SpamAssassin 3.3.2 as provided as a package on Ubuntu Precise (12.04 LTS). I'd like to upgrade to SpamAssassin 3.4.0, but there is no upgrade available for Precise (12.04). I could upgrade to Ubuntu Trusty (14.04), but I'm afraid to... Alternatively, I could inst

Re: drop of score after update tonight

first - thank you for your feedback SA is a new beat to me Am 25.08.2014 um 22:00 schrieb Daniel Staal: > --As of August 25, 2014 7:49:39 PM +0200, Reindl Harald is alleged to have > said: >> Am 25.08.2014 um 19:35 schrieb Daniel Staal: >>> --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald

Re: drop of score after update tonight

--As of August 25, 2014 7:49:39 PM +0200, Reindl Harald is alleged to have said: Am 25.08.2014 um 19:35 schrieb Daniel Staal: --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond tha

RE: drop of score after update tonight

> > From: Ian Zimmerman > Sent: Monday, August 25, 2014 2:28 PM > To: users@spamassassin.apache.org > Subject: Re: drop of score after update tonight > I definitely have FNs today (about 10 by now today, normally 0). > Looks like some/all RBLs tests are n

Re: drop of score after update tonight

I definitely have FNs today (about 10 by now today, normally 0). Looks like some/all RBLs tests are not working. I have not changed my configuration at all. Sample here: http://pastebin.com/dsqaVA9Z -- Please *no* private copies of mailing list or newsgroup messages. Local Variables: mode:cla

Re: drop of score after update tonight

Am 25.08.2014 um 20:41 schrieb Matus UHLAR - fantomas: Given (a) you disabled RBL checks in SA > > On 25.08.14 19:06, Reindl Harald wrote: >> the reason for that is that postfix in front already does a damned >> good job with RBL's > > since SA uses deep header scanning in many times, which

Re: drop of score after update tonight

Given (a) you disabled RBL checks in SA On 25.08.14 19:06, Reindl Harald wrote: the reason for that is that postfix in front already does a damned good job with RBL's since SA uses deep header scanning in many times, which postfix does not (afaik), it's always better to NOT disable RBL's as S

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 20:03 schrieb Karsten Bräckelmann: > On Mon, 2014-08-25 at 19:43 +0200, Reindl Harald wrote: >> Am 25.08.2014 um 19:13 schrieb Karsten Bräckelmann: > >>> No tests at all. I doubt the milter generated all those missing headers >>> including From and Date, instead of a Received one

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Mon, 2014-08-25 at 19:43 +0200, Reindl Harald wrote: > Am 25.08.2014 um 19:13 schrieb Karsten Bräckelmann: > > No tests at all. I doubt the milter generated all those missing headers > > including From and Date, instead of a Received one only. So it seems the > > restricted sa-milt user has no

Re: drop of score after update tonight

Am 25.08.2014 um 19:35 schrieb Daniel Staal: > --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have > said: > >>> masscheck ties to ensure spams score at least 5 points, but doesn't >>> care beyond that >> >> yes, but given that the intention is to flag message above >> 5

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 19:13 schrieb Karsten Bräckelmann: > On Mon, 2014-08-25 at 18:55 +0200, Reindl Harald wrote: >> Am 25.08.2014 um 18:00 schrieb Karsten Bräckelmann: >> X-Spam-Status: Yes, score=3.7 required=1.0 tests=MISSING_DATE,MISSING_FROM, >> MISSING_HEADERS,MISSING_MID,NO_HEADERS_MESS

Re: drop of score after update tonight

--As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond that yes, but given that the intention is to flag message above 5 with [SPAM] and reject messages above 7 which is the intention run

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Mon, 2014-08-25 at 18:55 +0200, Reindl Harald wrote: > Am 25.08.2014 um 18:00 schrieb Karsten Bräckelmann: > > What does this command return? > > > > echo -e "Subject: Foo\n" | spamassassin --cf="required_score 1" > > as root as expected the modified subject > as the milter user the unmodif

Re: drop of score after update tonight

Am 25.08.2014 um 18:28 schrieb John Hardin: > On Mon, 25 Aug 2014, Reindl Harald wrote: > >> the plain content i attached as ZIP (what made it to the listg) is used for >> testing by just copy the content to a >> formmailer or in a new plaintext message in TB point directly to the test MX > >

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 18:00 schrieb Karsten Bräckelmann: > On Mon, 2014-08-25 at 11:37 +0200, Reindl Harald wrote: >> header contains "X-Spam-Status: Yes, score=7.5 required=5.0" >> but the subject does not get [SPAM] tagging with the config >> below - not sure what i am missing > > What does this co

Re: drop of score after update tonight

On Mon, 25 Aug 2014, Reindl Harald wrote: the plain content i attached as ZIP (what made it to the listg) is used for testing by just copy the content to a formmailer or in a new plaintext message in TB point directly to the test MX The massage body by itself usually isn't enough to tell much

Re: drop of score after update tonight

On Mon, 2014-08-25 at 17:47 +0200, Reindl Harald wrote: > yes and that is one which the currently existing > Barracuda Spamfirewall scored with around 20 and > grabbed from the backend there for testings > the plain content i attached as ZIP (what made it to the listg) > is used for testing by ju

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Mon, 2014-08-25 at 11:37 +0200, Reindl Harald wrote: > header contains "X-Spam-Status: Yes, score=7.5 required=5.0" > but the subject does not get [SPAM] tagging with the config > below - not sure what i am missing What does this command return? echo -e "Subject: Foo\n" | spamassassin --cf="

Re: drop of score after update tonight

Am 25.08.2014 um 17:43 schrieb John Hardin: > On Mon, 25 Aug 2014, Reindl Harald wrote: >> Am 25.08.2014 um 16:06 schrieb John Hardin: >>> On Mon, 25 Aug 2014, Reindl Harald wrote: >>> i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which >>>

Re: drop of score after update tonight

On Mon, 25 Aug 2014, Reindl Harald wrote: Am 25.08.2014 um 16:06 schrieb John Hardin: On Mon, 25 Aug 2014, Reindl Harald wrote: i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well - but after the update tonight my testmessage g

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 17:29 schrieb Antony Stone: >> Post follow-ups on an appropriate support forum. This is not it. > > I think you're being unfairly rude to the original poster here. > > His problem is not specific to spamass-milter (if it were, I would agree with > pointing him politely in the d

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Monday 25 August 2014 at 17:21:51 (EU time), Kevin A. McGrail wrote: > On 8/25/2014 11:17 AM, Reindl Harald wrote: > > Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: > >> On 8/25/2014 11:08 AM, Reindl Harald wrote: > >>> Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: > On 8/25/2014 5:3

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 17:21 schrieb Kevin A. McGrail: > On 8/25/2014 11:17 AM, Reindl Harald wrote: >> Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: >>> On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: > On 8/25/2014 5:37 AM, Reindl Harald wrote:

Re: Give a penalty to messages with non latin UTF-8 characters?

On 08/25/2014 05:17 PM, Michael Opdenacker wrote: > Hi, > > I'm using SpamAssassin 4.0. Oops, I meant 3.4 :) > > Is there a simple way to give a penalty to messages containing non latin > UTF-8 characters? > > I'm asking because we are receiving quite a lot of Chinese junk mail > with subjects

Re: no subject tagging in case of "X-Spam-Status: Yes"

On 8/25/2014 11:17 AM, Reindl Harald wrote: Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains "X-Spam-Status: Yes, score=7.5 required=5.0" bu

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: > On 8/25/2014 11:08 AM, Reindl Harald wrote: >> Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: >>> On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains "X-Spam-Status: Yes, score=7.5 required=5.0" but the subject does not get [SP

Give a penalty to messages with non latin UTF-8 characters?

Hi, I'm using SpamAssassin 4.0. Is there a simple way to give a penalty to messages containing non latin UTF-8 characters? I'm asking because we are receiving quite a lot of Chinese junk mail with subjects in Chinese (or more generally non-latin) characters, but: - The body is too short for 'ok

Re: no subject tagging in case of "X-Spam-Status: Yes"

On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains "X-Spam-Status: Yes, score=7.5 required=5.0" but the subject does not get [SPAM] tagging with the config below - not sure what i am missing Se

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: > On 8/25/2014 5:37 AM, Reindl Harald wrote: >> header contains "X-Spam-Status: Yes, score=7.5 required=5.0" >> but the subject does not get [SPAM] tagging with the config >> below - not sure what i am missing > > See > http://www.jigsawboys.com/2

Re: no subject tagging in case of "X-Spam-Status: Yes"

On 8/25/2014 5:37 AM, Reindl Harald wrote: Hi header contains "X-Spam-Status: Yes, score=7.5 required=5.0" but the subject does not get [SPAM] tagging with the config below - not sure what i am missing See http://www.jigsawboys.com/2006/06/28/spamassassin-rewrite-subject-not-working/ Regard

Re: drop of score after update tonight

On Mon, 25 Aug 2014, Reindl Harald wrote: Hi i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well - but after the update tonight my testmessage goes down from 7.5 to 5.3 5.0 is still the score for "spam". Rather than focusing on t

no subject tagging in case of "X-Spam-Status: Yes"

Hi header contains "X-Spam-Status: Yes, score=7.5 required=5.0" but the subject does not get [SPAM] tagging with the config below - not sure what i am missing spamassassin-3.4.0-7.fc20.x86_64 spamass-milter-0.3.2-11.fc20.x86_64 spamass-milter -p /run/spamass-milter/spamass-milter.sock -g sa-milt

drop of score after update tonight

Hi i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well - but after the update tonight my testmessage goes down from 7.5 to 5.3 that's one of the very high rated on a Barracuda appliance downloaded to a folder and only posting the pla

Re: Spam relayed through trendmicro?

On 08/25/2014 04:51 AM, Alex wrote: > Hi all, > > I'm having difficulty understanding this one: > > http://pastebin.com/LYJVas5e > > It looks like a host in Japan relayed this message through a few systems > within trendmicro.com , then on to our system > before being tagg