Re: check_rbl_txt and multiple elements

2015-05-08 Thread Marc Andre Selig
On Fri, May 08, 2015 at 01:55:47PM +0100, RW wrote: [Plugin::ASN] > The plugin generates psuedo-headers you can run tests against. X-ASN > and X-ASN-Route contain _ASN_ and _ASNCIDR_ respectively. Thank you very much! This is indeed easy to test. It would be great if this piece of informati

check_rbl_txt and multiple elements

2015-05-08 Thread Marc Andre Selig
Dear list members, upgrading to Debian Jessie has brought SpamAssassin 3.4.0 to a private server of mine. For its particular use case, I like to directly assign scores to autonomous systems whose owners provide snowshoe spamming services. (I realize this strategy may be less useful for large mai

Re: Low Score for @localhost domain

2014-07-25 Thread Andre Luiz Paiz
Quoting "Kevin A. McGrail" : On 7/25/2014 8:07 AM, Andre Luiz Paiz wrote: I tried to use the following rule (from Spamassassing guide), but it did not worked: header LOCAL_HEADER from =~ /@localhost/ [if-unset: @localhost] score LOCAL_HEADER -3.0 - Sample of the email on pa

Re: Low Score for @localhost domain

2014-07-25 Thread Andre Luiz Paiz
Quoting Adi : W dniu 2014-07-25 14:07, Andre Luiz Paiz pisze: Hi everybody, I received a SPAM that Spamassassing gave a high negative score (-86.0) to a e-mail message. I believe that is because the spammer Maybe you get -100 for whitelist ? Please check (or pastebin) mail headers (X-Spam

Low Score for @localhost domain

2014-07-25 Thread Andre Luiz Paiz
Hi everybody, I received a SPAM that Spamassassing gave a high negative score (-86.0) to a e-mail message. I believe that is because the spammer altered the "From:" header field to: querercrer@localhost. The source domain is: web3.host-services.com and the message is a SPAM. Even messages sent fr

Re: Two servers, one database. A question

2009-02-13 Thread Andre
? Which would be > most conservative of bandwidth between the boxes? 'Fastest' depends on the load on the servers. Bandwidth will depend on how large your average message is, and what you store in the database (user prefs, awl, bayes...) -andre > > -- > Lindsay Haisley | &qu

Re: Individual SURBL lists to be shut down on public nameservers February 28, 2009. Use multi.

2009-02-04 Thread Andre
Does that require changes to spamassassin or is it using multi already (3.2.5 used here)? My stats report those: URIBL_JP_SURBL URIBL_AB_SURBL URIBL_SC_SURBL URIBL_OB_SURBL URIBL_WS_SURBL No report of multi in there but lots of individuals... Thanks, -andre > > Cheers, > > Jeff C. >

Re: Secure spamd server

2009-02-04 Thread Andre
On Wed, 4 Feb 2009, Matus UHLAR - fantomas wrote: > On 03.02.09 21:39, Andre wrote: > > spamc is never called from Exim in this case, so the --ssl switch can't be > > used. At least that is my understanding (maybe mis-understanding?) of the > > situation. > > D

Re: Secure spamd server

2009-02-03 Thread Andre
> spamd end to limit who can reach it? Chances are there's a firewall > involved in this situation anyway... > spamc is never called from Exim in this case, so the --ssl switch can't be used. At least that is my understanding (maybe mis-understanding?) of the situation.

Re: Secure spamd server

2009-02-03 Thread Andre
I haven't thought about a VPN yet, but it could probably work. I only thought about a ssh tunnel so far, which may also work. Still, if anyone knows an esay off-the-shelf solution for exim I'd prefer that (if it exists). Thank you, -andre On Tue, 3 Feb 2009, Martin Gregorie wrote:

Secure spamd server

2009-02-03 Thread Andre
a similar setup? Are we just missing something? Other stories to tell... Thank you, -andre

Re: Bayes SQL Error: Unterminated Quoted String

2005-08-16 Thread Andre Nicholson
'd would much rather wait until the production release of 3.1 -- and can live without bayes for a while -- than running a RC in production. Andre Nicholson

Bayes SQL Error: Unterminated Quoted String

2005-08-16 Thread Andre Nicholson
Running PostgreSQL 8.0.3 for bayes. SpamAssassin version 3.0.4, running on Perl version 5.8.0. Thanks Andre Nicholson

Re: GeoCities Link-only spam

2005-08-05 Thread Andre Nicholson
UMPossible UK Geocities spam site score GEOCITIES_NUM5.0 This works for me and I have yet to see any FP. Also, these type of messages for me usually will land BAYES_99 and a few DNS_FROM_RFC_* rules which help bring up the score. Andre Nicholson

Re: SpamAssassin description translation tool

2005-04-11 Thread Andre Nicholson
> Daniel Quinlan wrote: >> I don't expect the translations to be usable without editing, but I >> suspect that editing will be faster than writing from scratch. Some are >> directly usable. Some are not. > > OK, I hadn't realised this was simply intended as help for human > tran

Re: sa-learn issues

2005-03-31 Thread Andre Nicholson
>> The problem is, it seems that sa-learn is ignoring the -u / --user= flag. > > Of course it's ignoring it. There is no -u flag in sa-learn. ONLY spamc > and spamd accept that flag. > > sa-learn uses the userid of the user that calls it. Period. >From TFM: -u username,

Re: Displaying rule scores in headers

2004-10-01 Thread Andre Nicholson
> I'd like to see the scores each rule is contributing in the headers in > X-Spam-Status, > and I'd like to do it site wide, so I've added a line to local.cf: > > add_header all Status_YESNO hits=_HITS_ required=_REQD_ tests=_TESTSSCORES_ > autolearn=_AUTOLEARN_ > > But all I

Re: stripping SA headers for reporting? (spamcop, etc.)

2004-09-18 Thread Andre Nicholson
John Owens wrote: I'd like to send as original a message as I can to SpamCop and other places since they don't like munged reports. Currently I'm doing this manually, which is annoying. I note that sa-learn knows how to remove all SA-specific annotations from a message (unwraps MIME, removes head

Re: sa-learn with Cyrus mail

2004-09-13 Thread Andre Nicholson
> I'd like to run > sa-learn --ham * > on a bunch of folders. But each of these folders has 3 files in them that I > believe Cyrus uses for indexing - cyrus.header, cyrus.index, cyrus.cache. > How do I exclude those files from being learned? Or don't I have to worry > about them?