Re: Russian spam

2010-01-25 Thread Dan Schaefer
quot; to 10. I also increased the "CHARSET_FARAWAY" and "CHARSET_FARAWAY_HEADER" scores. However, the email addresses on the server I manage are all English speaking people, so be careful with the changes you make. Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Geocities closed

2009-10-27 Thread Dan Schaefer
he users and admins, even though they will be broken links. SA is going to have to re-instate the rules at some point. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Is this list working?

2009-10-26 Thread Dan Schaefer
Lars Ebeling wrote: Or am I blacklisted? I got it. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: OT: Thunderbird filter

2009-10-23 Thread Dan Schaefer
Dan Schaefer wrote: The emails being sent to postfix-users-dig...@cloud9.net are messing with my head. I setup a filter to put emails sent to users@spamassassin.apache.org into a SA folder. Whenever an email gets sent to postfix-users-dig...@cloud9.net, I think there's something wrong wi

OT: Thunderbird filter

2009-10-23 Thread Dan Schaefer
ently added a filter for that address as well. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: just enabled DCC

2009-10-13 Thread Dan Schaefer
Jeff Mincy wrote: From: Dan Schaefer Date: Tue, 13 Oct 2009 10:17:43 -0400 Jeff Mincy wrote: >From: Dan Schaefer >Date: Tue, 13 Oct 2009 09:18:44 -0400 > >Jeff Mincy wrote: > >From: Dan Schaefer >>Date: T

Re: just enabled DCC

2009-10-13 Thread Dan Schaefer
Jeff Mincy wrote: From: Dan Schaefer Date: Tue, 13 Oct 2009 09:18:44 -0400 Jeff Mincy wrote: >From: Dan Schaefer >Date: Tue, 13 Oct 2009 08:54:29 -0400 > >Jason Bertoch wrote: > > Dan Schaefer wrote: >>> I jus

Re: just enabled DCC

2009-10-13 Thread Dan Schaefer
Jeff Mincy wrote: From: Dan Schaefer Date: Tue, 13 Oct 2009 08:54:29 -0400 Jason Bertoch wrote: > Dan Schaefer wrote: >> I just enabled DCC yesterday and everything appears to be working >> (DCC is registered). Just to make sure, can someone p

Re: just enabled DCC

2009-10-13 Thread Dan Schaefer
Jason Bertoch wrote: Dan Schaefer wrote: I just enabled DCC yesterday and everything appears to be working (DCC is registered). Just to make sure, can someone post an email to pastebin that has a DCC hit? Thanks. IIRC, a message with "test" in the subject and body will match, alt

just enabled DCC

2009-10-13 Thread Dan Schaefer
I just enabled DCC yesterday and everything appears to be working (DCC is registered). Just to make sure, can someone post an email to pastebin that has a DCC hit? Thanks. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: OT bad news

2009-10-06 Thread Dan Schaefer
-exactly- the same thing that I can build with FreeBSD and a whitebox clone for a quarter of the cost - but will never believe that they overpaid for what they have. Ted (Standing ovation on both emails) -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: OT bad news

2009-10-05 Thread Dan Schaefer
runs ON Exchange. What a bummer. Shane We are sorry to see you leave. :-( -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: unsubscribe

2009-09-30 Thread Dan Schaefer
what you have to say about unsubscribing or the correct place to look for the email address. I think a simple reply from one of us with the correct email address would suffice. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: unsubscribe

2009-09-29 Thread Dan Schaefer
Paul Andrews wrote: Try users-unsubscr...@spamassassin.apache.org -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Report in header of SPAM emails

2009-09-23 Thread Dan Schaefer
As configure SA to emails that have been submitted to the QUARANTINE directory containing the report SA in the header. Huh? -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Problems with high spam

2009-09-18 Thread Dan Schaefer
Karsten Bräckelmann wrote: On Fri, 2009-09-18 at 16:06 -0400, Dan Schaefer wrote: Jose Luis Marin Perez wrote: body ELLE /is this ELLE/ describe is this ELLE Publicidad score ELLE 10.0 It appears that you are missing ELLE after describe. If you have spelling/format issues in

Re: Problems with high spam

2009-09-18 Thread Dan Schaefer
u have any warnings. I'm pretty sure this is your solution... -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Custom Bayes score

2009-09-17 Thread Dan Schaefer
In a general consensus for those who have customized your BAYES scores, what are they? I have been experimenting with them, but I have not been successful with a "perfect" score. What I'm NOT looking for is a lecture on how everybody's systems are different. Thanks, Dan Sc

Re: HTML Image Spam

2009-09-01 Thread Dan Schaefer
m filtering for this user to show him just how much spam he's NOT getting. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Best way to restart SA without undelivered mail?

2009-08-31 Thread Dan Schaefer
Dan Schaefer wrote: RW wrote: On Fri, 28 Aug 2009 09:05:06 -0400 Dan Schaefer wrote: I occasionally make changes to the local.cf for custom scores and rules and I would obviously need to restart SA. A few times in the past, spam messages have sneaked through just as SA was stopped. If I

Re: Best way to restart SA without undelivered mail?

2009-08-28 Thread Dan Schaefer
RW wrote: On Fri, 28 Aug 2009 09:05:06 -0400 Dan Schaefer wrote: I occasionally make changes to the local.cf for custom scores and rules and I would obviously need to restart SA. A few times in the past, spam messages have sneaked through just as SA was stopped. If I were to prevent this

Best way to restart SA without undelivered mail?

2009-08-28 Thread Dan Schaefer
, and start my MTA again? Will this cause anyone other problems with undelivered mail, especially outgoing? Note, I usually restart during the day after adding rules/scores. Something like this? /etc/init.d/postfix stop && /etc/init.d/spamassassin restart && /etc/init.d/postfi

Re: i need your indulgence

2009-08-24 Thread Dan Schaefer
LuKreme wrote: On 21-Aug-2009, at 07:45, Dan Schaefer wrote: Scored pretty high here. DCC and JMF-BLACK account for quite a bit, but it would have scored 5.0 and been marked as spam even without them. My required_score is 7. Then you have absolutely no cause for complaint. When the score

Re: i need your indulgence

2009-08-21 Thread Dan Schaefer
Karsten Bräckelmann wrote: On Fri, 2009-08-21 at 08:06 -0400, Dan Schaefer wrote: Any ideas about this one, besides adding a score to match the subject? Probably not a smart idea, since you insist on re-using that very subject for your list post... That is incorrect. I put double

Re: i need your indulgence

2009-08-21 Thread Dan Schaefer
Scored pretty high here. DCC and JMF-BLACK account for quite a bit, but it would have scored 5.0 and been marked as spam even without them. My required_score is 7. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: i need your indulgence

2009-08-21 Thread Dan Schaefer
address is not in the freemail domain list, but the Reply-To is. Do both fields have to be in the freemail domain list in order for the Reply-To check to pass? -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

i need your indulgence

2009-08-21 Thread Dan Schaefer
Any ideas about this one, besides adding a score to match the subject? I have 4 in my inbox this morning with scores no more than 5. http://pastebin.com/m561b461b -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: your mail

2009-08-20 Thread Dan Schaefer
Res wrote: On Sun, 9 Aug 2009, Matus UHLAR - fantomas wrote: Bullshit. Bullshit to what? Didn't we have an email a couple weeks ago talking about inappropriate language on a public list and that it won't be tolerated?

Re: Image Spam

2009-08-20 Thread Dan Schaefer
On ons 19 aug 2009 14:26:31 CEST, Dan Schaefer wrote Why haven't spammers think about this approach before? I can image it is very difficult for Fuzzy OCR to tag this with a high score. you belive fuzzyocr is buggy ? http://pastebin.com/m247b74c8 already detected as spam, what mo

Re: Image Spam

2009-08-19 Thread Dan Schaefer
Dan Schaefer wrote: Why haven't spammers think about this approach before? I can image it is very difficult for Fuzzy OCR to tag this with a high score. http://pastebin.com/m247b74c8 Oops. Why haven't spammers *thought about this approach before? Spamassasin did a nice job of c

Image Spam

2009-08-19 Thread Dan Schaefer
Why haven't spammers think about this approach before? I can image it is very difficult for Fuzzy OCR to tag this with a high score. http://pastebin.com/m247b74c8 -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Mailbox for auto learning

2009-08-10 Thread Dan Schaefer
tween mailboxes. You could setup each user to have access to their own account and the two learning mailboxes. You can then have your users drag the false positives/negatives to the appropriate box. I have not testing this 100%, so I don't know if any headers get re-written or not. -- Dan Sc

Re: DB structure information

2009-08-06 Thread Dan Schaefer
Luis Daniel Lucio Quiroz wrote: Hi SAs, I wonder to know if there is a document that explains how is relation-entity database schema designed. TIA LD Is this even a SA question? -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-08-04 Thread Dan Schaefer
I'm glad to see this SPAM traffic has come to a halt. At least on my mail server... -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Parallelizing Spam Assassin

2009-08-03 Thread Dan Schaefer
This whole time I thought the subject line was "Paralyzing Spam Assassin" and the original poster was having trouble with SA locking up. Oops. ;-) -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: Low Scoring Lotto Spam

2009-07-27 Thread Dan Schaefer
% [score: 0.] 3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text patterns -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-23 Thread Dan Schaefer
mail stream. X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on pony.performanceadmin.com That is my server. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-23 Thread Dan Schaefer
Are you quite sure that an upstream copy of SA, e.g. in your ISP or at a sender site that scans for outgoing spam, hasn't already added X-* headers to the message? Martin No. Is that even possible to track down? -- Dan Schaefer Web Developer/Systems Analyst Performance Administr

Re: copy spam mail to separate mailbox

2009-07-23 Thread Dan Schaefer
I have a postfix/SA setup and I was wondering if anyone knew how to COPY an email marked as spam instead of redirecting. Not this: /^X-Spam-Flag: YES/ REDIRECT spam...@example.com This should work, right? http://onetforum.com/fourm/viewtopic.php?f=2&t=34 -- Dan Schaefer Web Devel

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-23 Thread Dan Schaefer
bpage describing the process? -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-23 Thread Dan Schaefer
ot 15 points - so, what's the problem? Relax. I don't have a problem. I was just pointing out a potential flaw. I was just trying to help out. I just misunderstood the whole blacklist thing, that's all. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

rule counter

2009-07-23 Thread Dan Schaefer
following, because the total score would be counted meta MY_RULE (RULE_ONE + RULE_TWO + RULE_THREE + RULE_FOUR + RULE_FIVE >= 3) Thanks in advance, Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-22 Thread Dan Schaefer
Benny Pedersen wrote: On Wed, July 22, 2009 21:39, Dan Schaefer wrote: For those of you that manage these rules, URI_OBFU_X9_WS, URI_OBFU_WWW, AE_MEDS38, AE_MEDS39 did not mark this email as spam http://pastebin.com/m40f7cff4 reject it with rbl testing in mta, and its found in

Re: [NEW SPAM FLOOD] www.shopXX.net

2009-07-22 Thread Dan Schaefer
For those of you that manage these rules, URI_OBFU_X9_WS, URI_OBFU_WWW, AE_MEDS38, AE_MEDS39 did not mark this email as spam http://pastebin.com/m40f7cff4 -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: auto learn threshold

2009-07-21 Thread Dan Schaefer
er, a semi-rookie System Admin and I'm still learning the tricks. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

auto learn threshold

2009-07-21 Thread Dan Schaefer
score: 12.7 autolearn=no score: 33.9 autolearn=spam score: 15.9 autolearn=no score: 19.0 autolearn=no score: 19.6 autolearn=spam score: 18.4 autolearn=spam Thanks, Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: copy spam mail to separate mailbox

2009-07-16 Thread Dan Schaefer
As that's really a postfix question, not a SpamAssassin question, if you don't get an answer here you may want to try on a postfix mailing list. I know. Since everybody here is so great at answering my questions so far, I thought I'd try this list first. -- Dan Schaefe

copy spam mail to separate mailbox

2009-07-16 Thread Dan Schaefer
I have a postfix/SA setup and I was wondering if anyone knew how to COPY an email marked as spam instead of redirecting. Not this: /^X-Spam-Flag: YES/ REDIRECT spam...@example.com -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: {Spam?} RE: The www[variations]continue....

2009-07-16 Thread Dan Schaefer
The rules should also proactively cover (dot) and {dot} as well as [dot] I agree. -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: URI-DNSBL problem with spamassassin 3.2.5

2009-07-15 Thread Dan Schaefer
Dan Schaefer wrote: Hi! Please, can someone feed http://pastebin.ca/1495707 into spamassassin 3.3.0 and see how it works ? Many thanks for your help Eddy pts rule name description -- -- 0.0

Re: URI-DNSBL problem with spamassassin 3.2.5

2009-07-15 Thread Dan Schaefer
: HTML included in message -4.0 BAYES_00 BODY: Bayesian spam probability is 0 to 1% -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.