Re: Spam info headers

Hi, > In the case of report_safe 0, the clear_report_template option actually > has no effective impact at all. That "report" will just not be added > anyway. Thanks for that clarification. Regarding report_safe, the docs say it can only be applied to spam. Is that correct? > That'd be an Amavi

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Fri, 2014-08-29 at 02:15 +0200, Reindl Harald wrote: > look at the attached zp-archive [...] Since I already had a closer look at the contents including your local cf, and I am here to offer help and didn't mean no harm, some comments regarding the SA config. > # resolves a bug with milter al

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Fri, 2014-08-29 at 02:15 +0200, Reindl Harald wrote: > look at the attached zp-archive and both messages > produced with the same content before you pretend > others lying damned - to make it easier i even > added a config-diff But no message diff. ;) > and now what? > > maybe you should acce

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Fri, 29 Aug 2014, Reindl Harald wrote: Am 25.08.2014 um 11:37 schrieb Reindl Harald: header contains "X-Spam-Status: Yes, score=7.5 required=5.0" but the subject does not get [SPAM] tagging with the config below - not sure what i am missing spamassassin-3.4.0-7.fc20.x86_64 spamass-milter-0

Re: writing own rbl rules

Am 29.08.2014 um 02:29 schrieb Karsten Bräckelmann: > On Fri, 2014-08-29 at 01:59 +0200, Reindl Harald wrote: > You can easily run RBL tests against IPs from within the local network > and treat them like any other sending SMTP client, by (a) excluding > them from the appropriate *_networks setti

Re: writing own rbl rules

On Fri, 2014-08-29 at 01:59 +0200, Reindl Harald wrote: > Am 29.08.2014 um 01:51 schrieb Karsten Bräckelmann: > > On Fri, 2014-08-29 at 01:06 +0200, Reindl Harald wrote: > > > the question was just "how can i enforce RBL tests inside the own LAN" > > > > RBL tests cannot be enforced. Internal and

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 29.08.2014 um 02:15 schrieb Reindl Harald: > Am 29.08.2014 um 02:01 schrieb Karsten Bräckelmann: >> On Fri, 2014-08-29 at 01:23 +0200, Reindl Harald wrote: Besides, your own reply to my first post to this thread on Mon also shows this claim to be false. The output of the command I as

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Fri, 2014-08-29 at 01:23 +0200, Reindl Harald wrote: > Am 29.08.2014 um 01:20 schrieb Karsten Bräckelmann: > > On Fri, 2014-08-29 at 00:30 +0200, Reindl Harald wrote: > > > besides the permissions problem after the nightly "sa-update" the reason > > > was simply "clear_headers" without "add_head

Re: writing own rbl rules

Am 29.08.2014 um 01:51 schrieb Karsten Bräckelmann: > On Fri, 2014-08-29 at 01:06 +0200, Reindl Harald wrote: >> the question was just "how can i enforce RBL tests inside the own LAN" > >> the question was just "how can i enforce RBL tests inside the own LAN" > >> the question was just "how can

Re: writing own rbl rules

On Fri, 2014-08-29 at 01:06 +0200, Reindl Harald wrote: > the question was just "how can i enforce RBL tests inside the own LAN" > the question was just "how can i enforce RBL tests inside the own LAN" > the question was just "how can i enforce RBL tests inside the own LAN" RBL tests cannot be e

Re: Certain types of spam seem to get through SA

On Thu, 2014-08-28 at 17:42 -0500, Robert A. Ober wrote: > If you find a solution without my having to write more rules I would > appreciate you letting the list know. > This may not be what you want to know, but. Some time back I was subscribed to a mailing list that was linked to a web for

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 29.08.2014 um 01:20 schrieb Karsten Bräckelmann: > On Fri, 2014-08-29 at 00:30 +0200, Reindl Harald wrote: >> besides the permissions problem after the nightly "sa-update" the reason >> was simply "clear_headers" without "add_header spam Flag _YESNO" which >> is entirely unexpected behavior >

Re: no subject tagging in case of "X-Spam-Status: Yes"

On Fri, 2014-08-29 at 00:30 +0200, Reindl Harald wrote: > besides the permissions problem after the nightly "sa-update" the reason > was simply "clear_headers" without "add_header spam Flag _YESNO" which > is entirely unexpected behavior No, that is not the cause. $ echo -e "Subject: Foo\n" | ./s

Re: writing own rbl rules

Am 29.08.2014 um 00:57 schrieb Karsten Bräckelmann: >> the simple answer to my question would have been "no, in no case SA does >> any RBL check if the client is from the same network range and there is >> no way to change that temporary even for development" [...] > > That would have been simpler

Re: writing own rbl rules

On Fri, 2014-08-29 at 00:22 +0200, Reindl Harald wrote: > the simple answer to my question would have been "no, in no case SA does > any RBL check if the client is from the same network range and there is > no way to change that temporary even for development" [...] That would have been simpler in

Re: Certain types of spam seem to get through SA

On 8/28/14, 3:17 PM, LuKreme wrote: On Aug 28, 2014, at 12:00, Martin Gregorie wrote: The only obvious oddity, compared with my local main stream is its direct one-hop delivery. I'd regard this as UCE rather than spam per se. I only take measures against this type of mail if I see it more frequ

Re: Reporting to SpamCop

On Thu, 2014-08-28 at 23:49 +0200, Karsten Bräckelmann wrote: > On Thu, 2014-08-28 at 16:14 -0500, Chris wrote: > > I'm having an issue with getting SA 3.4.0 when run as spamassassin -D -r > > to report spam to SpamCop. The errors I'm seeing are: > > Ignoring the Perl warnings for now. > > > In m

Re: no subject tagging in case of "X-Spam-Status: Yes"

Am 25.08.2014 um 11:37 schrieb Reindl Harald: > header contains "X-Spam-Status: Yes, score=7.5 required=5.0" > but the subject does not get [SPAM] tagging with the config > below - not sure what i am missing > > spamassassin-3.4.0-7.fc20.x86_64 > spamass-milter-0.3.2-11.fc20.x86_64 > > spamass-m

Re: writing own rbl rules

besides that the setup is now in production Am 27.08.2014 um 03:48 schrieb Karsten Bräckelmann: > Again: Craft your samples to match real-life (production) environment. > Do not configure or try to fake an environment that will not match > production later. It won't work. > > You want to configur

Re: Reporting to SpamCop

On Thu, 2014-08-28 at 23:49 +0200, Karsten Bräckelmann wrote: > On Thu, 2014-08-28 at 16:14 -0500, Chris wrote: > > I'm having an issue with getting SA 3.4.0 when run as spamassassin -D -r > > to report spam to SpamCop. The errors I'm seeing are: > > Ignoring the Perl warnings for now. > > > In m

Re: Reporting to SpamCop

On Thu, 2014-08-28 at 16:14 -0500, Chris wrote: > I'm having an issue with getting SA 3.4.0 when run as spamassassin -D -r > to report spam to SpamCop. The errors I'm seeing are: Ignoring the Perl warnings for now. > In my v310.pre file I have: > > loadplugin Mail::SpamAssassin::Plugin::SpamCop

Reporting to SpamCop

I'm having an issue with getting SA 3.4.0 when run as spamassassin -D -r to report spam to SpamCop. The errors I'm seeing are: warn: Use of uninitialized value $v in concatenation (.) or string at /usr/local/share/perl/5.18.2/Mail/SpamAssassin/Plugin/SpamCop.pm line 255. Line 255 of the SpamCop.p

Re: formatting of report headers

Am 28.08.2014 um 22:29 schrieb Karsten Bräckelmann: > On Thu, 2014-08-28 at 21:43 +0200, Reindl Harald wrote: >> Am 28.08.2014 um 19:11 schrieb Karsten Bräckelmann: > >>> FWIW, SA even generates the Report header by default with your setting >>> of report_safe 0. Not in your case, because you cho

Re: formatting of report headers

Am 28.08.2014 um 22:18 schrieb Karsten Bräckelmann: > On Thu, 2014-08-28 at 21:43 +0200, Reindl Harald wrote: >> Am 28.08.2014 um 19:11 schrieb Karsten Bräckelmann: > >>> FWIW, SA even generates the Report header by default with your setting >>> of report_safe 0. Not in your case, because you cho

Re: formatting of report headers

On Thu, 2014-08-28 at 21:43 +0200, Reindl Harald wrote: > Am 28.08.2014 um 19:11 schrieb Karsten Bräckelmann: > > FWIW, SA even generates the Report header by default with your setting > > of report_safe 0. Not in your case, because you chose to clear_headers > > and manually define almost identic

Re: formatting of report headers

On Thu, 2014-08-28 at 21:43 +0200, Reindl Harald wrote: > Am 28.08.2014 um 19:11 schrieb Karsten Bräckelmann: > > FWIW, SA even generates the Report header by default with your setting > > of report_safe 0. Not in your case, because you chose to clear_headers > > and manually define almost identic

Re: Certain types of spam seem to get through SA

> On Aug 28, 2014, at 12:00, Martin Gregorie wrote: > > The only obvious oddity, compared with my local main stream is its > direct one-hop delivery. I'd regard this as UCE rather than spam per se. > I only take measures against this type of mail if I see it more > frequently than every 6 months

Re: formatting of report headers

Am 28.08.2014 um 19:11 schrieb Karsten Bräckelmann: > That long _TESTS_ string without line-breaks is due to the very long > _REPORT_ in that header. If you add a dedicated Report header, the > Status header and its list of tests will be wrapped appropriately, too. > > FWIW, SA even generates the

Re: Certain types of spam seem to get through SA

On Thu, 2014-08-28 at 09:31 -0600, LuKreme wrote: > On 28 Aug 2014, at 09:21 , Antony Stone > wrote: > > Please post pastebin samples of the actual email content (as well as > > minimally-anonymised headers) so that others can check on known-working > > configurations. > > The only thing I cha

Re: Certain types of spam seem to get through SA

On Thu, 2014-08-28 at 09:15 -0600, LuKreme wrote: > X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail.covisp.net > X-Spam-Level: * > X-Spam-Status: No, score=1.7 required=5.0 tests=URIBL_BLACK autolearn=no > version=3.3.2 > X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_H

Re: formatting of report headers

On Thu, 2014-08-28 at 11:08 +0200, Reindl Harald wrote: > is it somehow possible to get line-breaks in the > report headers to have them better readable? SA inserts line-breaks by default, to keep headers below 80 chars wide. > report_safe 0 > clear_headers > add_header spam Flag _YESNO_ > add_h

Re: Bayes Problem

From: Julian Brown Date: Thu, 28 Aug 2014 10:46:55 -0500 I work for a company that has lots of mail users. We use Exim with Spamassassin. My job is to track down this problem. We are getting complaints of too much spam and have tracked it down, using Google, to our bay

Bayes Problem

I work for a company that has lots of mail users. We use Exim with Spamassassin. My job is to track down this problem. We are getting complaints of too much spam and have tracked it down, using Google, to our bayes files not working correctly. I do not know if they are poisoned or just not wor

Re: Certain types of spam seem to get through SA

On 28 Aug 2014, at 09:21 , Antony Stone wrote: > Please post pastebin samples of the actual email content (as well as > minimally-anonymised headers) so that others can check on known-working > configurations. The only thing I changed was the mail address it was sent to.

Re: Certain types of spam seem to get through SA

On Thursday 28 August 2014 at 17:15:43 (EU time), LuKreme wrote: > I’ve been getting a lot of auto sales, windows install, and pharma spam > recently that is getting through SA. Here are headers for one from this > morning: Please post pastebin samples of the actual email content (as well as min

Certain types of spam seem to get through SA

I’ve been getting a lot of auto sales, windows install, and pharma spam recently that is getting through SA. Here are headers for one from this morning: Return-Path: X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail.covisp.net X-Spam-Level: * X-Spam-Status: No, score=1.7 required=5

Re: Outlook, we do love to hate you....

On 27.08.14 18:32, Matteo Dessalvi wrote: Is anybody else got in trouble due to this 'fantastic' auto responder feature? Especially when these email are generated by an Exchange server. Just curious, since the last week one of our mail server (for outbound traffic) got listed in one black list d

Re: formatting of report headers (spamassassin)

Am 28.08.2014 um 16:55 schrieb Matus UHLAR - fantomas: > On 28.08.14 11:08, Reindl Harald wrote: >> is it somehow possible to get line-breaks in the >> report headers to have them better readable? > >> X-Spam-Status: No, score=-101.7/5.0, >> tests=BAYES_50,CUST_DNSWL_5,HEADER_FROM_DIFFERENT_DOMAI

Re: formatting of report headers

On 28.08.14 11:08, Reindl Harald wrote: is it somehow possible to get line-breaks in the report headers to have them better readable? X-Spam-Status: No, score=-101.7/5.0, tests=BAYES_50,CUST_DNSWL_5,HEADER_FROM_DIFFERENT_DOMAINS,USER_IN_WHITELIST , report= * -2.5 CUST_DNSWL_5 RBL: list.dnswl.o

Re: A simple rule

On 8/28/2014 10:05 AM, Axb wrote: On 08/28/2014 03:45 PM, Rejaine Monteiro wrote: body MYRULE /deputado|presidente/i body MYRULE /(?:deputado|presidente)/i Technically, Alex's rule is faster but not technically different. The ?: tells the regexp not to store any matches in $1, $2, et

Re: A simple rule

On 08/28/2014 03:45 PM, Rejaine Monteiro wrote: body MYRULE /deputado|presidente/i body MYRULE /(?:deputado|presidente)/i

A simple rule

In this example, I need to catch emails containing the word 'deputado' or 'presidente' in the message body. So.. body MYRULE /deputado|presidente/i score MYRULE5.0 I did a test with a saved email that does _NOT_ contain any of the above expressions and he got the message. spamc -R

Re: How to report spam to mailspike

Am 28.08.2014 um 11:11 schrieb Marcin Mirosław: > I've noticed growing volume of emails listed by mailspike. Usually it's > spam listed as "good reputation". On his webpage I can see only page > http://mailspike.org/contact.html , they want to fill many personal > information, I don't want to send

How to report spam to mailspike

Hi! I've noticed growing volume of emails listed by mailspike. Usually it's spam listed as "good reputation". On his webpage I can see only page http://mailspike.org/contact.html , they want to fill many personal information, I don't want to send it to them and I don't want to lie. abuse@ doesn't w

formatting of report headers

Hi is it somehow possible to get line-breaks in the report headers to have them better readable? given that "Received" and "DKIM" are coming with more than one line and the additional ones with a intention it should be technically possible report_safe 0 clear_headers add_header spam Flag _YESNO_