Re: spam score question

2015-04-22 Thread Thom Miller
On Wed, 22 Apr 2015 21:23:22 -0400 "Kevin A. McGrail" wrote: > Are you starting spamd before your networking and local dns are > started? Regards, > KAM No. spamd is started after the network is up and running. According to https://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.h

Re: spam score question

2015-04-22 Thread Kevin A. McGrail
Are you starting spamd before your networking and local dns are started? Regards, KAM On April 22, 2015 8:44:59 PM EDT, Thom Miller wrote: >On Sat, 18 Apr 2015 08:16:40 -0700 >Michael Williamson wrote: > >> Hi, >> >> I have another question. >> >> It appears to me that spamassassin can produc

Re: spam score question

2015-04-22 Thread Thom Miller
On Sat, 18 Apr 2015 08:16:40 -0700 Michael Williamson wrote: > Hi, > > I have another question. > > It appears to me that spamassassin can produce different spam scores > for the same email. > In particular, I have noticed that points are omitted for > RCVD_IN_SBL_CSS (Spamhaus blacklist) somet

RE: SUBJ_ALL_CAPS

2015-04-22 Thread David B Funk
That sounds like a capital idea! But, but, but, when did those spaces become a building? (runs for cover... ;) On Wed, 22 Apr 2015, Kevin Miller wrote: Quite clearly they're capitol spaces! ;-) ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Junea

RE: SUBJ_ALL_CAPS

2015-04-22 Thread Kevin Miller
Quite clearly they're capitol spaces! ;-) ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357 > -Original Message- > From: Niamh Holding [mailto:ni...@

Re: Awl on Redis

2015-04-22 Thread Marco Felettigh
Ok Thanks for the answer :) Marco On Fri, 17 Apr 2015 07:58:15 -0400 "Kevin A. McGrail" wrote: > On 4/17/2015 6:46 AM, ma...@nucleus.it wrote: > > Hi to all, > > a saw that from spamassassin 3.4 Bayes can be stored on a Redis > > database. > > > > Is it possible also for Awl (auto_whitelist) ?

Re: score=19.9 points, tflags=autolearn_force; => autolearn=no autolearn_force=no; WTF?

2015-04-22 Thread RW
On Tue, 21 Apr 2015 22:48:46 -0500 (CDT) David B Funk wrote: > is the autolearn_force being ignored because of the initial BAYES_00 > score? Yes, a Bayes point in the opposite direction prevents auto-training. All the force flag does is override the 3+3 rule. > Is there a 'autolearn_force_ye

Re: score=19.9 points, tflags=autolearn_force; => autolearn=no autolearn_force=no; WTF?

2015-04-22 Thread Kevin A. McGrail
On 4/21/2015 11:48 PM, David B Funk wrote: I've got some home-grown rules that I trust to which have added tflags autolearn_force Recently I've seen some spam that hit those rules and racked up enough points that they should have auto-learned. But the scoring analysis explicitly says "autolearn=

Re: effectiveness of DCC checks?

2015-04-22 Thread Matus UHLAR - fantomas
On 21.04.15 18:49, Quanah Gibson-Mount wrote: I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. Am 22.04.2015 um 12:47 schrieb Matus UHLAR - fantomas: I recommend you putting

Re: apache.org fail on spf ?

2015-04-22 Thread Benny Pedersen
Martin Gregorie skrev den 2015-04-22 12:48: The Kitterman SPF testing tool at http://www.kitterman.com/spf/validate.html says the junc.eu SPF record is fine, but has lists of IPV4 and IPV6 IPs and no 'mx' in it. Has the record changed? yes i just have changed it now, but i see apache.org fails

Re: effectiveness of DCC checks?

2015-04-22 Thread Reindl Harald
Am 22.04.2015 um 12:47 schrieb Matus UHLAR - fantomas: On 21.04.15 18:49, Quanah Gibson-Mount wrote: I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. I recommend you putting

Re: apache.org fail on spf ?

2015-04-22 Thread Martin Gregorie
On Wed, 2015-04-22 at 10:32 +0200, Benny Pedersen wrote: > Received-SPF: error (athena.apache.org: encountered temporary error > during SPF processing of domain of m...@junc.eu) > > my fault ? > > v=spf1 mx -all > > is imho valid record > The Kitterman SPF testing tool at http://www.kitterman.

Re: effectiveness of DCC checks?

2015-04-22 Thread Matus UHLAR - fantomas
On 21.04.15 18:49, Quanah Gibson-Mount wrote: I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. I recommend you putting mass senders to whitelist. It's perfect scoring item for

Re: spamass-milter processing brunette.com messages as if from localhost

2015-04-22 Thread Matus UHLAR - fantomas
nOn 20.04.15 09:08, @lbutlr wrote: Bronto.com is a remailer service for various companies (like Fractureme.com and others) and I’ve been noting that it hits some odd triggers in spamass-milter: Apr 19 15:00:40 mail spamd[87225]: spamd: result: Y 5 - BAYES_50,DKIM_SIGNED,DKIM_VALID,FSL_HELO_NON_F

Re: Re: effectiveness of DCC checks?

2015-04-22 Thread Steve Freegard
Hi Quanah, On 22/04/15 02:52, [*] Quanah Gibson-Mount wrote: --On Tuesday, April 14, 2015 11:05 PM +0100 Steve Freegard wrote: Just because *you* can't find any sense in it; others might be able to. For example: meta __FSL_ANY_BULK ((DCC_CHECK || RAZOR2_CHECK || PYZOR_CHECK) && !

Re: apache.org fail on spf ?

2015-04-22 Thread Reindl Harald
Am 22.04.2015 um 10:32 schrieb Benny Pedersen: Received-SPF: error (athena.apache.org: encountered temporary error during SPF processing of domain of m...@junc.eu) my fault ? v=spf1 mx -all is imho valid record what did you not understand in "temporary error"? it just could not be resolved

apache.org fail on spf ?

2015-04-22 Thread Benny Pedersen
Received-SPF: error (athena.apache.org: encountered temporary error during SPF processing of domain of m...@junc.eu) my fault ? v=spf1 mx -all is imho valid record

Re: FPs on RCVD_ILLEGAL_IP

2015-04-22 Thread Benny Pedersen
Mark Martinec skrev den 2015-04-22 02:17: ... although there's a funny twist there. Some of these illegal IP addresses are not really a claimed-to-be IP address of a mailer, but come from an embedded e-mail address in a comment: Received: from unknown (HELO localhost) (jennifer_pr...@sbcgloba

Re: SUBJ_ALL_CAPS

2015-04-22 Thread Reindl Harald
Am 22.04.2015 um 10:14 schrieb Niamh Holding: Hello Adam, Wednesday, April 22, 2015, 8:47:48 AM, you wrote: AM> Prefix: Re:, Fwd: etc. are striped before test. Quite right too, mind the next complain will be that it isn't all caps because of the spaces... don't confuse questions with compl

Re: SUBJ_ALL_CAPS

2015-04-22 Thread Niamh Holding
Hello Adam, Wednesday, April 22, 2015, 8:47:48 AM, you wrote: AM> Prefix: Re:, Fwd: etc. are striped before test. Quite right too, mind the next complain will be that it isn't all caps because of the spaces... -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgp

Re: SUBJ_ALL_CAPS

2015-04-22 Thread Adam Major
Hello > uhm why - there is at least one lowercase char > > > Subject: Re: HOTEL RESERVATION. > > * 1.5 SUBJ_ALL_CAPS Subject is all capitals http://wiki.apache.org/spamassassin/Rules/SUBJ_ALL_CAPS Prefix: Re:, Fwd: etc. are striped before test. Look

SUBJ_ALL_CAPS

2015-04-22 Thread Reindl Harald
uhm why - there is at least one lowercase char Subject: Re: HOTEL RESERVATION. * 1.5 SUBJ_ALL_CAPS Subject is all capitals signature.asc Description: OpenPGP digital signature