Re: Strict/Relaxed DKIM alignment possible with SA?

> On 6 May 2017, at 14:49, Thore Boedecker wrote: > > Hello folks, > > over the last couple of months I have received some nasty spam, > delivered by the Yahoo mail servers. > > After looking at the headers it became clear what the issue was: > > It seems that Yahoo (at least yahoo.co.jp) is

Re: Matching To and Received addresses

> On 28 Mar 2017, at 19:04, Markus wrote: > > Hello Alex, > > To my knowledge, you can't compare equality without a SpamAssassin plugin. > > So you can't compare the "for " with "To: > doro...@example.com". > > With a plugin, you could definitely do that, but that would cause a bit more > o

Re: TTL on DNS records (was Re: understanding HELO_DYNAMIC_IPADDR)

On 16/05/16 12:10, Dianne Skoll wrote: > On Mon, 16 May 2016 09:12:54 +0200 > Matus UHLAR - fantomas wrote: > >> short ttl's are more likely on abusers' DNS. good for refusing >> delisting. > I would love to see data on the correlation. I think it's pretty > mild. A few random tests on consumer

Fwd: Dealing with a bad network device affecting DNS lookups

(Accidentally off list, sorry) Begin forwarded message: > From: Dominic Benson > Date: 15 July 2014 22:59:14 BST > To: Quanah Gibson-Mount > Subject: Re: Dealing with a bad network device affecting DNS lookups > > >> On 15 Jul 2014, at 22:46, Quanah Gibson-Mount wr

Re: Confused about Mail::SPF::Query

On 31 Dec 2013, at 16:19, Walter Hurry wrote: > I'm following (and adapting where appropriate) the instructions at: > http://wiki.apache.org/spamassassin/SingleUserUnixInstall > to get SpamAssassin up and running on Fedora 20. > [snip] > > all tests passed except the Mail::SPF::Query one. > >

Re: Where the spams are stored

On 13/04/12 16:09, Kevin A. McGrail wrote: On 4/13/2012 10:58 AM, Ysahel wrote: I use Ubuntu 11.10, and I need to know 1/ where are the spams taggued by spamassassin are stored ?? 2/ what is the type of file of spam stored ( textual or binary ) thank you very much in advance !! Ysahel, SpamAs

Re: Self addressed spam

On 10/08/11 11:14, J4K wrote: On 08/10/2011 12:08 PM, Marcin Mirosław wrote: W dniu 10.08.2011 12:00, akrohnke pisze: Hello, Currently one of our clients are getting spam that looks like it comes from the sender itself. Spamassassin only occasionally catches it. Hello! It should be done at sm

Re: High Performance Bayes Database Configuration?

On 21 Jun 2011, at 19:19, David F. Skoll wrote: > On Tue, 21 Jun 2011 21:12:58 +0300 > Jari Fredriksson wrote: > >> Are you sure you are not using MyISAM tables? > > I don't use MySQL at all. (Our CRM system requires it, but apart from > that, I stay away from it.) To be fair to MySQL, these

Re: sa-learn in an Exchange 2010 environment

On 19 May 2011, at 07:46, Lars Jørgensen wrote: > Hi, > > I have searched thoroughly for any information on the above constellation, > but have not found anything useful. > > We have spamassassin running on a gateway server delivering mail to users on > an exchange 2010 server. Sometimes sp

Re: Bad Helo Host impersonating

On 23 Mar 2011, at 08:09, Dave Funk wrote: > On Tue, 22 Mar 2011, jon1234 wrote: > >> >> >>> From where do they get that bounce message? From a host internal to your >>> network or from hosts out on the Internet? >> >> The bounce message is only when they send certain domains that are externa

Re: Points for missing MX Records

On 24 Feb 2011, at 20:01, Michelle Konzack wrote: > Hello Mahmoud Khonji, > > Am 2011-02-23 23:03:46, hacktest Du folgendes herunter: >> A sending mail server should accept ab...@example.com, and number of > > This is wrong because, only public ISP offering MAILSERVICES must have > an addres

Re: Points for missing MX Records

On 23/02/11 18:48, RW wrote: On Wed, 23 Feb 2011 19:30:20 +0100 Mark Martinec wrote: David F. Skoll writes: Well... any domain that sends mail must be prepared to receive it also, if only to receive DSNs. It is routine to block mail from a sending domain if it lacks MX, A and r

Re: Training Bayes on outbound mail

On 28 Jan 2011, at 18:39, Lawrence @ Rogers wrote: > On 28/01/2011 2:53 PM, David F. Skoll wrote: >> On Fri, 28 Jan 2011 18:10:08 + >> Dominic Benson wrote: >> >>> Recently, in order to balance the ham/spam ratio given to sa-learn, I >>> have started

Training Bayes on outbound mail

Hi - Recently, in order to balance the ham/spam ratio given to sa-learn, I have started to pass mail submitted by authenticated users to sa-learn --ham. The thinking here is that users would generally want to receive mail that they send, and many messages will either be replies or replied to,

Re: sa-learn --force-expire hangs [SOLVED]

On 28/01/11 15:13, John Adams wrote: Am 28.01.2011 16:07, schrieb Dominic Benson: On 28/01/11 14:56, John Adams wrote: I would suspect that over the life of the DB your tables got quite fragmented. That would explain why the expire worked fine when you restored to a clean DB. I've add

Re: Bayes timeouts and database handle being DESTROY'd without explicit disconnect

On 26/10/10 15:38, Micah Anderson wrote: The databsae size is 2.74gig. top - 07:26:39 up 10 days, 20:37, 1 user, load average: 9.24, 6.80, 6.15 Tasks: 24 total, 2 running, 22 sleeping, 0 stopped, 0 zombie Cpu(s): 83.3%us, 16.2%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.5%si, 0.0%st M

Re: Mails received with same message id every 15 - 20 seconds

Hi, On 26/10/10 12:40, Sharma, Ashish wrote: Hi, I have SpamAssassin integrated on my postfix mail server via 'Amavisd-new'. The problem that I am facing is that I am receiving same email every 15 second from same sender with same message-ID on my production mail servers, following are my po

Re: Bayes timeouts and database handle being DESTROY'd without explicit disconnect

On 19 Oct 2010, at 17:05, Micah Anderson wrote: > > Hello, > > I'm running a busy mail server. We've got a bayes database on its own > server, with InnoDB tables. What is your total DB size / server RAM? Could you include a snapshot of the output of top from the DB server? I would guess that

Re: Spam tagging not happening

Surely I'm missing something here and when I do a "grep sa-exim /var/lib/exim4/config.autogenerated", the output is null. Does this mean I don't have sa-exim configured properly? It means that it isn't being used by exim. We're veering away from SA-Users topics, but: if you dpkg-reconfigure

Re: Spam tagging not happening

On 18/10/10 16:11, Jeremy Van Rooyen wrote: Thanks for the quick reply Dominic, I just checked and the SApermreject is set sensible for now. The latter part of your email refers to SA-Flagged messages, how do I make sure this is working, as I have enabled rewrite_header in /etc/spamassassin/

Re: Spam tagging not happening

On 18/10/10 15:22, Jeremy Van Rooyen wrote: When I look at the rejected emails in the rejected logs for Exim it looks like this: F From: > Received-SPF: none X-SPF-Guess: neutral X-Spam-Score: 23.9 (+++) X-Spam-Report: Spam det

Re: Blacklist for spam-words

On 17/09/10 11:21, franc wrote: In that case, uninstalling Spamassassin from Apt (and then doing an apt-get --autoremove to clear out Perl libs installed through apt/dpkg) and re-installing with CPAN should be fine, and you'll be able to keep it up to date. I use aptitude, is this the

Re: Blacklist for spam-words

On 17/09/10 10:42, franc wrote: I doubt if this is possible on a VPS. At least the kernel is not changeable because coming from the host and is old enough (2.6.9). I guess an update to Lucid Lynx (10.04) will be if not unpossible but problematic. So if i use CPAN and keep my Hardy Heron, there w

Re: Blacklist for spam-words

This is just what i noticed: there is no Ubuntu package update after the 3.2.4-ubu1 related to: http://packages.ubuntu.com/de/hardy/spamassassin But how then to update? Can i use a package for Ubuntu Maverick (10.10) or is this the absolute wrong way? If you add hardy-backports to your a

Re: Apparent FP with URI_HEX

Hi, On 14 Sep 2010, at 21:46, Glendon Solsberry wrote: > I have messages that are being flagged via URI_HEX, without having > *any* 'http' in them. Any help would be greatly appreciated. > > Full text of the message: Buried in the (vast) body of that are loads of IP addresses and hostnames.

Re: Problem scanning mails with Spam Assassin on Postfix

On 25/08/10 12:22, Cimoni Enwis Ogwujiakwu wrote: Hello I have a spam assassin server setup on postfix and I can scan mails from mail clients configured with the server as the /smtp outgoing settings /but when I change the settings to smtp.mail.yahoo.com the

Re: Help installing spamassassin on ubuntu

Hi On 25/08/10 11:30, Sabiha Fathima wrote: Hi All, Am trying to install spamassassin on unbuntu without a smtp running on it. Is it mandatory to have a smtp server to run spam assassin. No - on Ubuntu you can just apt-get install spamassassin spamc. I want to install these modules and ca

Re: Local rules trigger bug

On 06/08/10 17:18, Randy Ramsdell wrote: Yeah that is the fastest way. :) I used a little diff formula and found the issue. My I think this may not be the rule we were going for but ... body__RCR_MEGADK/.*(M.*E.*G.*A.*D.*K).*/ There are a few things that strike

Re: List of "banned" words/bounce to sender

On 5 Aug 2010, at 20:13, Matthew Kitchin (public/usenet) wrote: > On 8/5/2010 2:10 PM, Noel Jones wrote: >> >> Use your database to generate rules for clamav. You could even remove >> the stock clamav rules if you want. Matching the body for 70,000 >> names would probably take less than 0.1 se