custom rule no work (as expected) and log score

2009-07-14 Thread Bazooka Joe
any idea why this rule never works for domain1 or domain2 but only domain3 header whitelist_from_luser From =~ /domain1\.com/i header whitelist_from_luser From =~ /domain2\.com/i header whitelist_from_luser From =~ /domain3\.com/i score whitelist_from_luser -2.5 How do I log the score for each

Best way to invoke SA?

2009-05-06 Thread Bazooka Joe
centos w/ sendmail - 500+ users - some users want their spam or a higher spam level - most are happy w/ defaults. Would like to not scan outgoing email. 1. spamass-milter 2. procmail 3. other?

spam bots guessing mx???

2009-03-09 Thread Bazooka Joe
Last week I got a client that wanted me to spam virii filter for their in house exchange server. I changed the mx from mail.domain.tld (their exchange) to mail2.domain.tld (my sa box) which relayed to mail.domain.tld. Last week all worked as expected. The hundreds of spam droped to 0; until this

Re: Test order

2009-01-16 Thread Bazooka Joe
> > You should learn > - how to properly reply an e-mail (first remove useles crap) ahh wow! > > - that sbl-xbl is obsolete and soon may stop working (zen.spamhaus.org now > does the job) > that will be a shame because some of us don't want Policy Block List > The rest is up to you. I was just

Re: Test order

2009-01-03 Thread Bazooka Joe
On Sat, Jan 3, 2009 at 3:10 PM, Matus UHLAR - fantomas wrote: >> >> That makes sense. However, the OP was looking to do the opposite.. Run >> >> clamav *LAST* and try to shortcircuit before you get there. > >> RobertH wrote: >> > why do the opposite of the logical? > > On 03.01.09 17:42, Matt Kett

white listing sendmail authenticated users

2008-12-29 Thread Bazooka Joe
I am trying (unsuccessfully) to write a rule to pickup if the "authenticated bits=0" in the Received line of the header and give it -100 I am not sure if spamass-milter Version 0.3.1is passing the Received line to SA. Does anyone know if that works? Or a better way to do it? header LOCAL_AUTH_R

Re: FW: Suggestions to block this spam

2008-02-20 Thread Bazooka Joe
Do you think anyone has notified blogspot.com that their site is being abused by spammers? On Feb 19, 2008 7:27 PM, Karsten Bräckelmann <[EMAIL PROTECTED]> wrote: > On Wed, 2008-02-20 at 16:08 +1300, Michael Hutchinson wrote: > > From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] > > > On Wed,

Re: Suggestions to block this spam

2008-02-19 Thread Bazooka Joe
I too am getting dozens of these emails that are going right through SA + pyzor + dcc. sa-learn doesn't seem to make any difference. I just installed razor2 today to try to combat real men. Most get through w/ a score of 2 or less. Many of them seem to trigger spamcop so i bumped that up to 3.5

Re: looking into spamassassin mail proxy solution

2007-09-28 Thread Bazooka Joe
open source ipcop firewall has a pluging called copfilter that has a transparent mail proxy that scans all pop and smtp email using sa and clamav On 9/25/07, tuxbeagle <[EMAIL PROTECTED]> wrote: > > I am trying to find a mail proxy/spamassassin solution for 2 situations. > Situation 1 is > Mail

Re: Calling Spamassassin

2007-06-22 Thread Bazooka Joe
sendmail -> spamass-milter -> spamd - because I needed to be a spam/virus filter relay for other mail servers. Also, I like being able to reject mail if SA deems it spam. That way if it is a false positive then the sender is aware that the end user did not get the mail instead of going into a s

Any way to bypass authenticated users?

2007-06-19 Thread Bazooka Joe
fc4, sendmail, sa 3.0.6, spamass-milter some clients get mail rejected from my server (which they are using to send) because sa is checking all mail. I use smtp auth - Is there any way to bypass SA if they have been authenticated?

Re: Mail::SPF::Query install problem

2007-02-28 Thread Bazooka Joe
If you have a rpm based system you could try install it that way. Just today i did it on a fc4 box - yum install perl-Mail-SPF-Query Other than that looks like you might have a bad server in your cpan conf. You can rerun cpan config and choose different servers. google how to rerun cpan conf.

Re: which spam databases to copy to new server

2007-02-28 Thread Bazooka Joe
27/07, Bazooka Joe <[EMAIL PROTECTED]> wrote: My SA runs as one user for the server sa-milt. I just recently built a new server and copied the .spamassassin dir for sa-milt to the new server but I am not getting near the results I was getting w/ the old server (it is catching about half of the s

which spam databases to copy to new server

2007-02-27 Thread Bazooka Joe
My SA runs as one user for the server sa-milt. I just recently built a new server and copied the .spamassassin dir for sa-milt to the new server but I am not getting near the results I was getting w/ the old server (it is catching about half of the spam it used to). Am I missing some other db's?

Re: rules_du_jour not working confusion?

2006-12-05 Thread Bazooka Joe
Thx Bowie That fixed rdj. But what about channels? Is that to replace rdj? -bazooka On 12/5/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: Bazooka Joe wrote: > rules_du_jour seems to fail on lint. I am trying to figure that out > now but I have a different question. Has chann

Re: rules_du_jour not working confusion?

2006-12-04 Thread Bazooka Joe
I think so. ran spamassassin --lint and no errors. On 12/4/06, Steven Stern <[EMAIL PROTECTED]> wrote: Bazooka Joe wrote: > rules_du_jour seems to fail on lint. I am trying to figure that out > now but I have a different question. Has channels replaced > rules_du_jour? Sh

Re: RPM -vs- CPAN install

2006-09-06 Thread Bazooka Joe
If you can get the latest version of SA for your distro in an RPM I would do that. If you can't I would use cpan. I have a FC4 server and SA isn't being updated so I switched to cpan to update to latest version and it worked perfectly. I would guess you could just install the rpm over the cpan

Re: spamass milter + clamav milter + milter greylist != working

2006-08-03 Thread Bazooka Joe
Thanks, I think I got it - i noticed you didn't have the clamav line define(`confINPUT_MAIL_FILTERS', `clmilter') so i took it out and clamav-milter seems to be working fine w/ out it. re: headers - milter-greylist writes a new header line "Sender IP whitelisted, not delayed by milter-greylist-1.

spamass milter + clamav milter + milter greylist != working

2006-08-03 Thread Bazooka Joe
Has anyone gotten the 3 fore mentioned milters working together? SA and clam work but greylist does nothing. no errors, no added headers just nothing. if i take out clamav from the mc then greylisting works and SA works but not all three together. parts of sendmail.mc in question. (in order)

Re: Should this hit more rules?

2006-07-26 Thread Bazooka Joe
I am getting a lot of the same spam makeing it throught SA.  But my SA score is much lower.  Have you adjusted any of your scoring higher?  I have been getting this email for about a week - how long does it take to get picked up in spamcop, pyzor, sbl-xbl ? rules:SARE_STOCKS TRIPWIRE SARE_E

Re: spam getting autolearn=ham problem

2006-05-10 Thread Bazooka Joe
a score of 3 or less is about 9,000 On 5/10/06, Jay Lee <[EMAIL PROTECTED]> wrote: Bazooka Joe wrote: X-Spam-Status: No, score=1.0 required=3.0 tests=BAYES_60 autolearn=ham version=3.0.4 X-Spam-Level: * X-Spam-Checker-Version

Re: spam getting autolearn=ham problem

2006-05-10 Thread Bazooka Joe
X-Spam-Status: No, score=1.0 required=3.0 tests=BAYES_60 autolearn=ham version=3.0.4 X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on agwebinc.com I have required of 3 which you can see and i have the milter rejecting email w/ score more than 7On 5/10/06, Matt Kettl

spam getting autolearn=ham problem

2006-05-10 Thread Bazooka Joe
more and more i am seeing spam marked as autolearn=hamI was wondering the best way to correct this? I was going to delete the bayes and whitelist files and start over but I thought I would see what you do when this happens. my setupusing fc4sendmailspamass-milter - one bayes file for all users on s

Re: SPF penetration

2006-03-22 Thread Bazooka Joe
with isp's blocking port 25 and requireing you to use thier mail server how are business going to enable spf of thier domain when thier employees could be sending mail from hundreds of different mail servers??On 3/22/06, [EMAIL PROTECTED] <[EMAIL PROTECTED] > wrote:Matthew.van.Eerde wrote:> pass: 4