Re: training bayes database

2018-05-08 Thread Matthew Broadhead
(1) [root@ns1 ~]# sudo -H -u amavis bash -c '/usr/bin/sa-learn --dump magic' 0.000  0  3  0  non-token data: bayes db version 0.000  0  32225  0  non-token data: nspam 0.000  0 440420  0  non-token data: nham 0.000  0 159

Re: Invoice phish

2018-05-08 Thread David Jones
On 05/08/2018 03:47 PM, David Jones wrote: On 05/08/2018 03:02 PM, Alex wrote: Hi, Does anyone have any special techniques for catching these invoice phish emails? https://pastebin.com/raw/TfvhUu0X I've added a few body rules, and even despite training previous similar messages as spam, they

Re: Invoice phish

2018-05-08 Thread David Jones
On 05/08/2018 03:02 PM, Alex wrote: Hi, Does anyone have any special techniques for catching these invoice phish emails? https://pastebin.com/raw/TfvhUu0X I've added a few body rules, and even despite training previous similar messages as spam, they continue. These emails very closely resemble

Re: Invoice phish

2018-05-08 Thread David Jones
On 05/08/2018 03:02 PM, Alex wrote: Hi, Does anyone have any special techniques for catching these invoice phish emails? https://pastebin.com/raw/TfvhUu0X I've added a few body rules, and even despite training previous similar messages as spam, they continue. These emails very closely resemble

Re: Invoice phish

2018-05-08 Thread John Hardin
On Tue, 8 May 2018, Alex wrote: Hi, Does anyone have any special techniques for catching these invoice phish emails? https://pastebin.com/raw/TfvhUu0X I've added a few body rules, and even despite training previous similar messages as spam, they continue. These emails very closely resemble leg

Invoice phish

2018-05-08 Thread Alex
Hi, Does anyone have any special techniques for catching these invoice phish emails? https://pastebin.com/raw/TfvhUu0X I've added a few body rules, and even despite training previous similar messages as spam, they continue. These emails very closely resemble legitimate email regarding invoices th

Re: training bayes database

2018-05-08 Thread John Hardin
On Tue, 8 May 2018, Reio Remma wrote: On 08.05.2018 22:08, John Hardin wrote: On Tue, 8 May 2018, Matthew Broadhead wrote: system setup centos-release-7-4.1708.el7.centos.x86_64, spamassassin-3.4.0-2.el7.x86_64, amavisd-new-2.11.0-3.el7.noarch /etc/mail/spamassassin/local.cf: required_hits

Re: training bayes database

2018-05-08 Thread Reio Remma
On 08.05.2018 22:08, John Hardin wrote: On Tue, 8 May 2018, Matthew Broadhead wrote: system setup centos-release-7-4.1708.el7.centos.x86_64, spamassassin-3.4.0-2.el7.x86_64, amavisd-new-2.11.0-3.el7.noarch /etc/mail/spamassassin/local.cf: required_hits 5 report_safe 0 rewrite_header Subject [

Re: training bayes database

2018-05-08 Thread John Hardin
On Tue, 8 May 2018, Matthew Broadhead wrote: system setup centos-release-7-4.1708.el7.centos.x86_64, spamassassin-3.4.0-2.el7.x86_64, amavisd-new-2.11.0-3.el7.noarch /etc/mail/spamassassin/local.cf: required_hits 5 report_safe 0 rewrite_header Subject [SPAM] use_bayes  1 bayes_auto_le

training bayes database

2018-05-08 Thread Matthew Broadhead
system setup centos-release-7-4.1708.el7.centos.x86_64, spamassassin-3.4.0-2.el7.x86_64, amavisd-new-2.11.0-3.el7.noarch /etc/mail/spamassassin/local.cf: required_hits 5 report_safe 0 rewrite_header Subject [SPAM] use_bayes  1 bayes_auto_learn   1 bayes_auto_expire  1 # Store bayesian

Re: score senders without abuse RR

2018-05-08 Thread Benny Pedersen
Rupert Gallagher skrev den 2018-05-08 11:24: While reading from RIPE below, I recollected numerous cases of spam from domains without own abuse RR. I then remembered making a mental note about writing a SA rule for it, and now realise I just forgot about it. Is anybody using one such rule alread

Re: score senders without abuse RR

2018-05-08 Thread Rupert Gallagher
Ok there is a deprecated rule, which did not do much, as it just queried a dnsbl. https://wiki.apache.org/spamassassin/Rules/DNS_FROM_RFC_ABUSE On Tue, May 8, 2018 at 11:24, Rupert Gallagher wrote: > While reading from RIPE below, I recollected numerous cases of spam from > domains without ow

score senders without abuse RR

2018-05-08 Thread Rupert Gallagher
While reading from RIPE below, I recollected numerous cases of spam from domains without own abuse RR. I then remembered making a mental note about writing a SA rule for it, and now realise I just forgot about it. Is anybody using one such rule already? https://www.ripe.net/support/abuse