Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread John Hardin
On Thu, 22 Sep 2016, Thomas Barth wrote: Am 21.09.2016 um 16:13 schrieb li...@rhsoft.net: URIBL_BLOCKED shows you are using still a dns-forwarder and so won't get results from a lot of blacklists fix that - use a local caching resolver with *no forwarding* and if you are using dnsmasq just

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread li...@rhsoft.net
Am 22.09.2016 um 21:40 schrieb Thomas Barth: URIBL_BLOCKED shows you are using still a dns-forwarder and so won't get results from a lot of blacklists http://uribl.com/refused.shtml fix that - use a local caching resolver with *no forwarding* and if you are using dnsmasq just don't do that fo

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Bowie Bailey
On 9/22/2016 3:40 PM, Thomas Barth wrote: Am 21.09.2016 um 16:13 schrieb li...@rhsoft.net: Am 21.09.2016 um 15:48 schrieb Thomas Barth: X-Spam-Status: No, score=3.004 tagged_above=2 required=6.31 tests=[MESSAGEID_LOCAL=3, RELAYCOUNTRY_BAD=3.1, RP_MATCHES_RCVD=-3.096, SPF_PASS=-0.001

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Thomas Barth
Am 21.09.2016 um 16:13 schrieb li...@rhsoft.net: Am 21.09.2016 um 15:48 schrieb Thomas Barth: X-Spam-Status: No, score=3.004 tagged_above=2 required=6.31 tests=[MESSAGEID_LOCAL=3, RELAYCOUNTRY_BAD=3.1, RP_MATCHES_RCVD=-3.096, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no aut

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Dave Funk
On Thu, 22 Sep 2016, Thomas Barth wrote: And what about filter poisening? In the last 10 hours my company address got 43 mails classified as spam (even a virus mail detected today). And there was one mail classified as spam due to my rule (bad country, message-id. X-Spam-Status: Yes, score=7.

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Dave Funk
On Thu, 22 Sep 2016, Thomas Barth wrote: Hi ho, a virus was found: Sanesecurity.Malware.26327.JsHeur.UNOFFICIAL Scanner detecting a virus: ClamAV-clamd Content type: Virus Internal reference code for the message is 35123-18/WRf_y9XIIOFq First upstream SMTP client IP address: [103.230.105.6]

AW: AW: X-Spam Tagging - Spam Status YESNO Flags - Sometimes not appended...

2016-09-22 Thread Maik Linnemann
Thank you very much. That works. Von: Matus UHLAR - fantomas [uh...@fantomas.sk] Gesendet: Montag, 19. September 2016 12:26 An: users@spamassassin.apache.org Betreff: Re: AW: X-Spam Tagging - Spam Status YESNO Flags - Sometimes not appended... >On Fri, 16

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Benny Pedersen
On 2016-09-22 12:32, Thomas Barth wrote: I ve installed clamav-unofficial-sigs by debian package. If this is not working good enough I will try the installation I found here: https://github.com/extremeshok/clamav-unofficial-sigs/blob/master/INSTALL you have to configure it aswell here i have

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Thomas Barth
Am 22.09.2016 um 12:41 schrieb li...@rhsoft.net: I ve installed clamav-unofficial-sigs by debian package. If this is not working good enough I will try the installation I found here: https://github.com/extremeshok/clamav-unofficial-sigs/blob/master/INSTALL dunno - and it's off-topic here - we

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread li...@rhsoft.net
Am 22.09.2016 um 12:59 schrieb Thomas Barth: Am 22.09.2016 um 12:41 schrieb li...@rhsoft.net: I ve installed clamav-unofficial-sigs by debian package. If this is not working good enough I will try the installation I found here: https://github.com/extremeshok/clamav-unofficial-sigs/blob/master

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Thomas Barth
Am 22.09.2016 um 12:41 schrieb li...@rhsoft.net: I ve installed clamav-unofficial-sigs by debian package. If this is not working good enough I will try the installation I found here: https://github.com/extremeshok/clamav-unofficial-sigs/blob/master/INSTALL dunno - and it's off-topic here - we

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread li...@rhsoft.net
Am 22.09.2016 um 12:32 schrieb Thomas Barth: Am 22.09.2016 um 11:50 schrieb li...@rhsoft.net: Am 22.09.2016 um 11:36 schrieb Benny Pedersen: On 2016-09-22 10:16, Thomas Barth wrote: The content of the mail is: --boundary_af9c8db46eb73fca8b315aafef01 Content-Type: application/x-zi

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Thomas Barth
Am 22.09.2016 um 11:50 schrieb li...@rhsoft.net: Am 22.09.2016 um 11:36 schrieb Benny Pedersen: On 2016-09-22 10:16, Thomas Barth wrote: The content of the mail is: --boundary_af9c8db46eb73fca8b315aafef01 Content-Type: application/x-zip-compressed; name="e6dfa16bdb.zip" Content-Tran

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Matus UHLAR - fantomas
Am 21.09.2016 um 18:47 schrieb Bowie Bailey: That is ridiculous. The more training bayes gets the better it works. And manual training is better than autolearning because autolearning can automatically learn false positives and false negatives and cause problems for the database. correct accor

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread li...@rhsoft.net
Am 22.09.2016 um 11:36 schrieb Benny Pedersen: On 2016-09-22 10:16, Thomas Barth wrote: The content of the mail is: --boundary_af9c8db46eb73fca8b315aafef01 Content-Type: application/x-zip-compressed; name="e6dfa16bdb.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachmen

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Benny Pedersen
On 2016-09-22 10:16, Thomas Barth wrote: The content of the mail is: --boundary_af9c8db46eb73fca8b315aafef01 Content-Type: application/x-zip-compressed; name="e6dfa16bdb.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="e6dfa16bdb.zip" whats in this zip f

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Paul Stead
On 22/09/16 09:16, Thomas Barth wrote: --boundary_af9c8db46eb73fca8b315aafef01 Content-Type: application/x-zip-compressed; name="e6dfa16bdb.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="e6dfa16bdb.zip" Th

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread li...@rhsoft.net
Am 22.09.2016 um 10:16 schrieb Thomas Barth: Am 21.09.2016 um 18:47 schrieb Bowie Bailey: That is ridiculous. The more training bayes gets the better it works. And manual training is better than autolearning because autolearning can automatically learn false positives and false negatives and

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-22 Thread Thomas Barth
Am 21.09.2016 um 18:47 schrieb Bowie Bailey: That is ridiculous. The more training bayes gets the better it works. And manual training is better than autolearning because autolearning can automatically learn false positives and false negatives and cause problems for the database. And what a