3.4.1. cpan build fails

2016-09-03 Thread Jari Fredriksson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Trying to compile SA 3.4.1 to a new Debian box. I get this: t/sa_compile.t 1/? # Failed test 1 in t/sa_compile.t at line 149 Not found: FOO = check: tests=FOO at t/sa_compile.t line 150. # Failed test 2 in t/SATest.pm at line 755

Re: How to use sa rules?

2016-09-03 Thread Kim Roar Foldøy Hauge
I added a cron job on my system to handle some of the process of updating sa rules. It runs every night, looks roughly like this: sa-update --channel updates.spamassassin.org --channel sought.rules.yerp.org && /etc/init.d/spamd restart Additionally I have another cron job for a simple statist

Re: spample of "data" URL in well-crafted Phish

2016-09-03 Thread John Hardin
On Wed, 31 Aug 2016, Chip M. wrote: Freshly caught Spample: http://puffin.net/software/spam/samples/0042_data_embedded_phish.txt The only munging was inserting ".EXAMPLE" between "wellsfargo" and ".com". ** Mitigation: The easiest way to catch these is with a simple body word match. Her

Re: Local mode with some URI checks. Possible??

2016-09-03 Thread Matus UHLAR - fantomas
On 03.09.16 09:32, Pedro David Marco wrote: Thans Axb, I already did it, but i could not found any reasonable way to disable all networks checks but one...(not to go one by one, i mean)  there's also no reasonable way to disable "all but one" without going one by one. do you have real reason

Re: block attachments via plugin

2016-09-03 Thread Axb
On 09/02/2016 10:59 PM, Robert Boyl wrote: Hi, guys Recently I saw this. http://jrs-s.net/2013/06/14/block-common-trojans-in-spamassassin/ My idea was to create a rule in the way mentioned in this site, such as, for example, certain attachment file type (such as HTML or ZIP) and a certain subj

Re: Local mode with some URI checks. Possible??

2016-09-03 Thread Pedro David Marco
Thans Axb, I already did it, but i could not found any reasonable way to disable all networks checks but one...(not to go one by one, i mean)  there is a Flag to indicate when a rule is net related or not, so my understanding was thatas my rule did not have that flag, it could work in local only

Re: Local mode with some URI checks. Possible??

2016-09-03 Thread Axb
On 09/03/2016 08:45 AM, Pedro David Marco wrote: Hi! I am using "Local tests only" mode of SA to prevent any network checks, but there is one URIBL i would like to use (as an exception).. is it possible to do this??? I have added this rule lo local.cf: urirhssub URIBL_BLACK multi.uribl.co