Local mode with some URI checks. Possible??

2016-09-02 Thread Pedro David Marco
Hi!  I am using "Local tests only" mode of SA to prevent any network checks, but there is one URIBL i would like to use (as an exception).. is it possible to do this??? I have added this rule lo local.cf:  urirhssub     URIBL_BLACK  multi.uribl.com.        A   2  body            URIBL_BLACK  e

Re: How to use sa rules?

2016-09-02 Thread RW
On Fri, 2 Sep 2016 08:27:16 -0700 (PDT) John Hardin wrote: > On Thu, 1 Sep 2016, David Niklas wrote: > > > I run sa-update but I want to know if any additional configuration > > is needed to tell sa that I want it to use the rules. > > You need to check the return status of sa-update to see wh

block attachments via plugin

2016-09-02 Thread Robert Boyl
Hi, guys Recently I saw this. http://jrs-s.net/2013/06/14/block-common-trojans-in-spamassassin/ My idea was to create a rule in the way mentioned in this site, such as, for example, certain attachment file type (such as HTML or ZIP) and a certain subject, score the message. The rule works. But

Re: How to use sa rules?

2016-09-02 Thread John Hardin
On Thu, 1 Sep 2016, David Niklas wrote: I run sa-update but I want to know if any additional configuration is needed to tell sa that I want it to use the rules. You need to check the return status of sa-update to see whether the rules were successfully updated, and if so, restart spamd or ama

Re: Image spam - FuzzyOCR?

2016-09-02 Thread RW
On Fri, 02 Sep 2016 10:19:22 +0700 Olivier wrote: > > Not really, he just said it matches against a word list. My point is > > that out of the several SA OCR plugins that have been written, > > FuzzyOCR is the one that's specifically designed for doing fuzzy > > matching on a finite word list. If

Re: Relaycountry problem

2016-09-02 Thread RW
On Fri, 2 Sep 2016 09:31:41 + Nicola Piazzi wrote: > header RELAYCOUNTRY_ITX-Relay-Countries =~ /IT/ > header RELAYCOUNTRY_BAD X-Relay-Countries > =~ /^(US|CN|RU|UA|JP|HK|UK|DE|BR|IN)/ > > in some cases I have both results in the spam report, I suppose that > is

Relaycountry problem

2016-09-02 Thread Nicola Piazzi
header RELAYCOUNTRY_ITX-Relay-Countries =~ /IT/ header RELAYCOUNTRY_BAD X-Relay-Countries =~ /^(US|CN|RU|UA|JP|HK|UK|DE|BR|IN)/ in some cases I have both results in the spam report, I suppose that is because plugin evals all ip address end not lastexterlal, is it co