Re: I have some bad news

2016-09-05 Thread Dave Warren
On Sun, Sep 4, 2016, at 18:11, @lbutlr wrote: > On Sep 1, 2016, at 7:41 PM, David Niklas wrote: >> >> Would you like to go out to lunch? > > Other than your message, that phrase does not appear in 7 years of > my mail. And? Replace the string with an example that does appear frequently in ham. Or

Re: What are the T_ rules ?

2016-09-05 Thread Ian Zimmerman
On 2016-09-05 16:14, @lbutlr wrote: > > but -1.653 is just a bad joke because it means every homeuser which > > manages to get some DNS records fine (as well as every spammer which > > registers a ton of domains and cheap hosts) get a large benefit > > compared to any professional mainatained serv

Re: I have some bad news

2016-09-05 Thread Bill Cole
On 4 Sep 2016, at 21:11, @lbutlr wrote: On Sep 1, 2016, at 7:41 PM, David Niklas <[do...@mail.com]()> wrote: Would you like to go out to lunch? Other than your message, that phrase does not appear in 7 years of my mail. It's in hash-buster/bayes-buster parts

Re: I have some bad news

2016-09-05 Thread @lbutlr
On Sep 1, 2016, at 7:41 PM, David Niklas wrote:Would you like to go out to lunch?Other than your message, that phrase does not appear in 7 years of my mail.

Re: What are the T_ rules ?

2016-09-05 Thread @lbutlr
On 05 Sep 2016, at 13:36, li...@rhsoft.net wrote: > but -1.653 is just a bad joke because it means every homeuser which manages > to get some DNS records fine (as well as every spammer which registers a ton > of domains and cheap hosts) get a large benefit compared to any professional > mainatai

Re: What are the T_ rules ?

2016-09-05 Thread RW
On Mon, 5 Sep 2016 13:00:14 -0700 Ian Zimmerman wrote: > On 2016-09-05 12:21, John Hardin wrote: > > > header __RP_MATCHES_RCVD > > eval:check_mailfrom_matches_rcvd() > > > > ...which means you'd need to go digging around in the perl code to > > find out what it's doing. > > > > Basica

Re: What are the T_ rules ?

2016-09-05 Thread li...@rhsoft.net
Am 05.09.2016 um 22:03 schrieb Ian Zimmerman: On 2016-09-05 21:31, Axb wrote: In what file do you see T_RP_MATCHES_RCVD ? [1+0]~$ cd /usr/share/spamassassin/ [2+0]spamassassin$ fgrep T_RP_MATCHES_RCVD * 72_active.cf:##{ T_RP_MATCHES_RCVD if version >= 3.003000 ifplugin Mail::SpamAssa

Re: What are the T_ rules ?

2016-09-05 Thread li...@rhsoft.net
Am 05.09.2016 um 22:00 schrieb Ian Zimmerman: On 2016-09-05 12:21, John Hardin wrote: header __RP_MATCHES_RCVD eval:check_mailfrom_matches_rcvd() ...which means you'd need to go digging around in the perl code to find out what it's doing. Basically, it's a check that the retur

Re: What are the T_ rules ?

2016-09-05 Thread Ian Zimmerman
On 2016-09-05 21:31, Axb wrote: > In what file do you see T_RP_MATCHES_RCVD ? [1+0]~$ cd /usr/share/spamassassin/ [2+0]spamassassin$ fgrep T_RP_MATCHES_RCVD * 72_active.cf:##{ T_RP_MATCHES_RCVD if version >= 3.003000 ifplugin Mail::SpamAssassin::Plugin::WLBLEval 72_active.cf:header T_R

Re: What are the T_ rules ?

2016-09-05 Thread Ian Zimmerman
On 2016-09-05 12:21, John Hardin wrote: > header __RP_MATCHES_RCVD eval:check_mailfrom_matches_rcvd() > > ...which means you'd need to go digging around in the perl code to find > out what it's doing. > > Basically, it's a check that the return-path (the SMTP "MAIL FROM" > envelo

Re: What are the T_ rules ?

2016-09-05 Thread li...@rhsoft.net
Am 05.09.2016 um 21:31 schrieb Axb: 72_scores.cf published by sa-update sets a score: score RP_MATCHES_RCVD -1.152 -1.653 -1.152 -1.653 Ian, In what file do you see T_RP_MATCHES_RCVD? *currently* nowhere but -1.653 is just a bad joke because it means every homeuser whi

Re: What are the T_ rules ?

2016-09-05 Thread Axb
On 09/05/2016 09:21 PM, John Hardin wrote: On Mon, 5 Sep 2016, Ian Zimmerman wrote: I want to use RP_MATCHES_RCVD in a meta rule. I thought I'd check its definition before I plunged in and wrote any code, so I grepped in /usr/share/spamassassin where all the original rules seem to live on my s

Re: What are the T_ rules ?

2016-09-05 Thread John Hardin
On Mon, 5 Sep 2016, Ian Zimmerman wrote: I want to use RP_MATCHES_RCVD in a meta rule. I thought I'd check its definition before I plunged in and wrote any code, so I grepped in /usr/share/spamassassin where all the original rules seem to live on my system (debian jessie). But all the hits are

Re: What are the T_ rules ?

2016-09-05 Thread Ian Zimmerman
On 2016-09-05 20:38, li...@rhsoft.net wrote: > > Since I have seen other rules in results with the T_ prefix (for example > > T_DKIM_INVALID) I think it must be some kind of convention with an > > accepted meaning. What is this conventional meaning, and how do these > > rules relate to the ones w

Re: What are the T_ rules ?

2016-09-05 Thread Bill Cole
On 5 Sep 2016, at 14:30, Ian Zimmerman wrote: I want to use RP_MATCHES_RCVD in a meta rule. I thought I'd check its definition before I plunged in and wrote any code, so I grepped in /usr/share/spamassassin where all the original rules seem to live on my system (debian jessie). But all the h

Re: What are the T_ rules ?

2016-09-05 Thread li...@rhsoft.net
Am 05.09.2016 um 20:30 schrieb Ian Zimmerman: Since I have seen other rules in results with the T_ prefix (for example T_DKIM_INVALID) I think it must be some kind of convention with an accepted meaning. What is this conventional meaning, and how do these rules relate to the ones without the T

What are the T_ rules ?

2016-09-05 Thread Ian Zimmerman
I want to use RP_MATCHES_RCVD in a meta rule. I thought I'd check its definition before I plunged in and wrote any code, so I grepped in /usr/share/spamassassin where all the original rules seem to live on my system (debian jessie). But all the hits are either for __RP_MATCHES_RCVD (which I assum

Re: Local mode with some URI checks. Possible??

2016-09-05 Thread Benny Pedersen
On 2016-09-05 19:04, li...@rhsoft.net wrote: so the answer si just: NO that's it tflags without net option is not a net test simple ? YES but depending on how to use its not so simple if score set have had inbound and outbound score set aswell it would have being no ned to make the tflags

Re: Local mode with some URI checks. Possible??

2016-09-05 Thread li...@rhsoft.net
Am 05.09.2016 um 19:01 schrieb Benny Pedersen: On 2016-09-05 07:29, Pedro David Marco wrote: My understanding was that "if there is no net flag, then it could work in local mode", but i was wrong.. score rule sets supports no net tests, simply score 0 on net test, and non zero on local test

Re: Local mode with some URI checks. Possible??

2016-09-05 Thread Benny Pedersen
On 2016-09-05 07:29, Pedro David Marco wrote: My understanding was that "if there is no net flag, then it could work in local mode", but i was wrong.. score rule sets supports no net tests, simply score 0 on net test, and non zero on local tests rule set score

Re: How to use sa rules?

2016-09-05 Thread John Hardin
On Mon, 5 Sep 2016, RW wrote: On Sun, 4 Sep 2016 17:52:48 -0700 (PDT) John Hardin wrote: On Sun, 4 Sep 2016, RW wrote: if you skip running sa-compile, the shared library is unaltered. ...thus the rules update has no effect? If you've ever tested updates to local body rules without runni

Re: How to use sa rules?

2016-09-05 Thread Benny Pedersen
On 2016-09-05 17:13, RW wrote: On Sun, 4 Sep 2016 17:52:48 -0700 (PDT) John Hardin wrote: On Sun, 4 Sep 2016, RW wrote: > if you skip running sa-compile, the shared library is unaltered. ...thus the rules update has no effect? If you've ever tested updates to local body rules without runni

Re: How to use sa rules?

2016-09-05 Thread RW
On Sun, 4 Sep 2016 17:52:48 -0700 (PDT) John Hardin wrote: > On Sun, 4 Sep 2016, RW wrote: > > > if you skip running sa-compile, the shared library is unaltered. > > ...thus the rules update has no effect? If you've ever tested updates to local body rules without running sa-compile, you know