Re: Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread Reindl Harald
Am 25.02.2016 um 02:14 schrieb John Hardin: On Thu, 25 Feb 2016, Steve wrote: On 24/02/2016 22:59, John Hardin wrote: On Wed, 24 Feb 2016, Steve wrote: > I've used spamassassin for many years - on Ubuntu, using amvisd - with > great success. In recent months, I've been receiving several

Re: Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread John Hardin
On Thu, 25 Feb 2016, Reindl Harald wrote: 7.0 URIBL_BLACKContains an URL listed in the URIBL blacklist [URIs: leslie-bib***b.org] That, too. Steve, you might consider boosting your local score for URIBL_BLACK. :) -- John Hardin KA7OHZ

Re: Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread John Hardin
On Thu, 25 Feb 2016, Steve wrote: On 24/02/2016 22:59, John Hardin wrote: On Wed, 24 Feb 2016, Steve wrote: > I've used spamassassin for many years - on Ubuntu, using amvisd - with > great success. In recent months, I've been receiving several spam > messages each day that evade the fil

Re: Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread Reindl Harald
Am 25.02.2016 um 01:41 schrieb Steve: On 24/02/2016 22:59, John Hardin wrote: On Wed, 24 Feb 2016, Steve wrote: I've used spamassassin for many years - on Ubuntu, using amvisd - with great success. In recent months, I've been receiving several spam messages each day that evade the filters.

Re: Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread Steve
On 24/02/2016 22:59, John Hardin wrote: On Wed, 24 Feb 2016, Steve wrote: I've used spamassassin for many years - on Ubuntu, using amvisd - with great success. In recent months, I've been receiving several spam messages each day that evade the filters. Can you provide samples? (e.g. three o

Re: Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread John Hardin
On Wed, 24 Feb 2016, Steve wrote: I've used spamassassin for many years - on Ubuntu, using amvisd - with great success. In recent months, I've been receiving several spam messages each day that evade the filters. Can you provide samples? (e.g. three or four on Pastebin) * The false positive

Spamassassin Bayes... "why give that spam that score???"

2016-02-24 Thread Steve
I've used spamassassin for many years - on Ubuntu, using amvisd - with great success. In recent months, I've been receiving several spam messages each day that evade the filters. * These false-negatives conform to a handful of simple, formulaic, textual forms - on common subjects. * The email

Re: Parsing of address headers in spamassassin ($pms->get('From:name'))

2016-02-24 Thread John Hardin
On Wed, 24 Feb 2016, Axb wrote: On 02/24/2016 05:02 PM, Benning, Markus wrote: Hello, recently i'm recieving mails which try to fool user by sending mails with a From: like From: "John Doe " afaik the correct syntax would be From: "John Doe" That is (probably) correct syntax for

Re: Parsing of address headers in spamassassin ($pms->get('From:name'))

2016-02-24 Thread Benning, Markus
On 2016-02-24 17:20, Benning, Markus wrote: Some MTAs only show the displayname and this is an attempt to s/MTA/MUA/ -- https://markusbenning.de/

Re: Parsing of address headers in spamassassin ($pms->get('From:name'))

2016-02-24 Thread Benning, Markus
On 2016-02-24 17:06, Axb wrote: afaik the correct syntax would be From: "John Doe" so SA is doing it right and you can probably use /\>\" \ The address part is only spamu...@spamdomain.tld. It is correctly parsed when retrieving it from $pms->get('From:addr'). The displayname string is "

Parsing of address headers in spamassassin ($pms->get('From:name'))

2016-02-24 Thread Benning, Markus
Hello, recently i'm recieving mails which try to fool user by sending mails with a From: like From: "John Doe " While implementing a header check to detect such attempts i noticed that SA seems to have problems parsing such addresses correctly. When accessing the displayname with From:name th

Re: Parsing of address headers in spamassassin ($pms->get('From:name'))

2016-02-24 Thread Axb
On 02/24/2016 05:02 PM, Benning, Markus wrote: Hello, recently i'm recieving mails which try to fool user by sending mails with a From: like From: "John Doe " While implementing a header check to detect such attempts i noticed that SA seems to have problems parsing such addresses correctly.