block emails with fake FROM

::FromNameSpoof 2 - /etc/spamassassin/local.cf header LOCAL_FROMNAME_SPOOF eval:check_fromname_spoof() score LOCAL_FROMNAME_SPOOF 5.0 My question is about how to configure this plugin and also which score i should give on the new rules ? Thanks, Best regards, -- Assinatura Eduardo Ma

Re: Create a rule to block MAX recipients

2011/4/6 John Hardin > On Wed, 6 Apr 2011, David Touzeau wrote: > > I would like to create a rune in order to block messages that contains >> more than X recipients in Spamassassin from these fields >> >> To: >> CC: >> Bcc: >> >> This without any MTA help >> >> How can i do this >> > > Dang, I t

Re: Create a rule to block MAX recipients

2011/4/6 David Touzeau > Dear All > > I would like to create a rune in order to block messages that contains > more than X recipients in Spamassassin from these fields > > To: > CC: > Bcc: > > This without any MTA help > > How can i do this > > Best regards ? > > In 2009 i wrote this email to the

Re: New plugin: DecodeShortURLs

2010/9/17 Steve Freegard > Hi All, > > Recently I've been getting a bit of filter-bleed from a bunch of spams > injected via Hotmail/Yahoo that contain shortened URLs e.g. bit.ly/foothat > upon closer inspection would have been rejected with a high score if > the real URL had been used. > > To t

Re: TMPDIR as a tmpfs

2010/6/22 Henrique Fernandes > It is safe to use spamassassin tmpdir on a tmpfs mounted system ? > > And if its safe it would have a better performance ? > > Here where i work we have big problems with the hard drives, because we > basically are sharing virtual machines disk over nfs. and spamass

Re: DCCPROC and / or DCCIFD

2009/10/14 Rick Knight > With the help of people here, I have gotten DCCIFD working. Now I have > another question. Should I use DCCIFD with DCCPROC or instead of DCCPROC? > Can they work together or does one take precedence? > > Thanks, > Rick > you have to add a dccifd_home or something like t

Separate rule per Domain

Hi, Is it possible create custom rules to are checked only to specific domains? If yes, where I can find documentation and references about that? Thanks, []'s -- Eduardo Júnior GNU/Linux user #423272 :wq

Merge of bases bayesians

Hi, I have an e-mail server 1, which has spamassassin with a basic Bayesian. And I also have another e-mail server 2, which is another basic Bayesian. Can I make a merge of the two bases without an overwrite? Thus, my new basis would be a union of two *new_base*(*A* U *B*) []´s -- Eduardo

Re: Sa-update

rify that the recognition of spam in fact improved? On Sat, Jul 26, 2008 at 10:42 AM, Eduardo Júnior <[EMAIL PROTECTED]>wrote: > > > On Fri, Jul 25, 2008 at 8:39 PM, Matt Kettler <[EMAIL PROTECTED]>wrote: > >> Eduardo Júnior wrote: >> >>> >>&

Re: Sa-update

On Fri, Jul 25, 2008 at 8:39 PM, Matt Kettler <[EMAIL PROTECTED]>wrote: > Eduardo Júnior wrote: > >> >> Hi, >> >> >> I have just done an update in the rules of my spamassassin with sa-update >> >> He dropped everything to /var/lib/spamassass

Re: Sa-update

after restarted? I must compile the rules updated with sa-compile so they can be used? any reference []´s On Fri, Jul 25, 2008 at 11:17 AM, Richard Frovarp < [EMAIL PROTECTED]> wrote: > Kai Schaetzl wrote: > >> Eduardo Júnior wrote on Fri, 25 Jul 2008 08:58:25 -0300: >> >

Re: Sa-update

that the configuration file, you have several rules that relate to spamassassin. []´s On Fri, Jul 25, 2008 at 8:58 AM, Eduardo Júnior <[EMAIL PROTECTED]> wrote: > > Hi, > > > I have just done an update in the rules of my spamassassin with sa-update > > H

Sa-update

are working properly? I´m using: # spamassassin --version SpamAssassin version 3.1.7 running on Perl version 5.8.8 []´s -- Eduardo Júnior GNU/Linux user #423272 :wq

Spamc

erify for virus instead of the amavis (in my case). And that question of delivery; also by what did I read, the spamc analyzes and marks the message and it goes over again for the MTA. Any idea for what I'm doing wrong? []'s -- Eduardo Júnior GNU/Linux user #423272 :wq

From+To Rule

Hi, Usually when you create a rule to match a text or pattern on a message, you create one rule for each field. In example: If you´d like to filter every message that contains "Medicine" in the From: field, and "Users" in the To: field, you´d need to create two rules, one to match each field. Now

Rules for that mutating subject drug mails

Hi, I´d like to know if it´s possible to filter efficiently all those emails about Viagra and friends with a subject that always changes and has different letters inserted between the letters of the drug name. I guess you know which ones I´m talking about (Re: test VhtAGGRA / CItAlLIS). Currently

What to do on a case like this?

Hi, I´m getting some "MAILER-DAEMON failure" messages that show that there could be someone sending e-mails using my e-mail in the "From:" field. Here's a header of a message like that. I only changed my email with [EMAIL PROTECTED], the rest (IP's, domains) are not mine and are the ones included

Re: Several problems with SA 3.1

ITCODE? Is 67 right? Is #67 causing all the outgoing (and deferred) mail? Should I change it to $? as seen on other examples? Thanks! Eduardo Gimeno Chris Purves dijo: > Eduardo Gimeno wrote: >> >> 2.-SA was classifying mail properly, attending to "^X-Spam-Status: >>

Several problems with SA 3.1

og. I have read about hardware failures (memory/swap/cache...) related to error 11, but I didn't alter any hardware configuration, just compiled some cpan perl modules... Any help? Thanks for your time! Regards. Eduardo Gimeno.

Re: [exim] Exim+SA=Server Overloaded!

George R. Kasica wrote: On Tue, 24 Jan 2006 14:01:55 -0200, you wrote: Hello! Sorry to send another email about the same subject. But my mail server crashed so i couldn't see the answers. I am calling my spamassassin service in SMTP time with some ACL rules in my exim4 configuratio

Exim+SA=Server Overloaded!

Hello! Sorry to send another email about the same subject. But my mail server crashed so i couldn't see the answers. I am calling my spamassassin service in SMTP time with some ACL rules in my exim4 configuration file. I start the SA service, start exim4 service and i wait only some minutes a

Re: Message meaning

Oops! My mistake, wrong list indeed... Too much caffeine for today. Thank you "Eduardo Bejar" <[EMAIL PROTECTED]> wrote on 10/01/2004 10:20:07 AM: > Hi, > > What does this message means? On maillog: > > Oct 1 10:13:24 mail mailscanner[22924]: Either you'

Message meaning

Hi, What does this message means? On maillog: Oct 1 10:13:24 mail mailscanner[22924]: Either you've found a bug in MailScanner's F-Prot output parser, or F-Prot's output format has changed! F-Prot said this "/var/spool/MailScanner/incoming/i91FD3623161/Joke.cpl W32/[EMAIL PROTECTED]". Please mai

Message meaning

Hi, What does this message means? On maillog: Oct 1 10:13:24 mail mailscanner[22924]: Either you've found a bug in MailScanner's F-Prot output parser, or F-Prot's output format has changed! F-Prot said this "/var/spool/MailScanner/incoming/i91FD3623161/Joke.cpl W32/[EMAIL PROTECTED]". Please mai