Hi Tom,
Thanks for your explanation, I hadn't appreciated that there was higher
precision being hidden.
Thanks,
Geoff
> On 25 Apr 2017, at 09:39, Tom Hendrikx wrote:
>
> Hoi Geoff,
>
> The scores actually have a precision of 3 numerals after the dot. The
> actual scor
X-Spam-Status: No, Score=2.9
X-Spam-Report:
* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
* 3.0 GS_NO_RLYS_PHP No description available.
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
server.alphaworks.co.uk
Can anyone explain why this isn't scoring 3.0?
:)
is:
X-PHP-Originating-Script: 20039:Api.php
Thanks,
Geoff
eir support keep the server
updated etc. I think they installed SpamAssassin on my request so I'll
have a word with them about the training. To be honest, apart from this
UNPARSEABLE_RELAY issue, SpamAssassin is behaving near flawlessly...
Many thanks,
Geoff
first question is no...
Thinking about it, I don't have access to my emails on the command line
(I don't have root access as it's a maintained VPS) so I'm not sure I'd
be able to if training requires me pointing SA at folders of mail?
Many thanks,
Geoff
On 24/11/2016 13:09, RW wrote:
On Thu, 24 Nov 2016 11:33:19 +0100
Axb wrote:
On 11/24/2016 11:23 AM, Geoff Soper wrote:
For a few weeks I've been suffering spam messages with attachments
getting through with a suspicious score of 0.0. Upon inspection,
they all had the following lines i
On 03/12/2016 19:23, RW wrote:
On Sat, 3 Dec 2016 14:18:38 +
geoff.sa_users_161...@alphaworks.co.uk wrote:
Ah, I think I've been making an invalid assumption here...
Because every one of these messages had a UNPARSEABLE_RELAY and
nothing else, I thought that this issue was stopping any oth
On 03/12/2016 13:57, Matus UHLAR - fantomas wrote:
On 25/11/2016 11:22, Matus UHLAR - fantomas wrote:
This says that the mail was received from webpage on your server,
and the
local mailer "nullmailer" seems have delivered it directly to you.
in fact, you don't know anything about this mail -
On 28/11/2016 22:10, geoff.sa_users_161...@alphaworks.co.uk wrote:
On 25/11/2016 11:22, Matus UHLAR - fantomas wrote:
On 24.11.16 10:23, Geoff Soper wrote:
Subject: Spam with attachments and UNPARSEABLE_RELAY
For a few weeks I've been suffering spam messages with attachments
getting th
On 25/11/2016 11:22, Matus UHLAR - fantomas wrote:
On 24.11.16 10:23, Geoff Soper wrote:
Subject: Spam with attachments and UNPARSEABLE_RELAY
For a few weeks I've been suffering spam messages with attachments
getting through with a suspicious score of 0.0. Upon inspection,
they all ha
On 25/11/2016 11:22, Matus UHLAR - fantomas wrote:
On 24.11.16 10:23, Geoff Soper wrote:
Subject: Spam with attachments and UNPARSEABLE_RELAY
For a few weeks I've been suffering spam messages with attachments
getting through with a suspicious score of 0.0. Upon inspection,
they all ha
On 25/11/2016 10:26, Paul Stead wrote:
On 25/11/16 10:18, geoff.sa_users_161...@alphaworks.co.uk wrote:
X-Antivirus: avast! (VPS 161124-7, 24/11/2016), Inbound message
X-Antivirus-Status: Infected
X-Attachment: INVOICE_.zip#1783656308|>HQ2s9y6f.js Virus:
JS:LockyDownloader [Trj] Deleted
You
On 24/11/2016 13:15, Matus UHLAR - fantomas wrote:
On 24.11.16 10:23, Geoff Soper wrote:
Subject: Spam with attachments and UNPARSEABLE_RELAY
For a few weeks I've been suffering spam messages with attachments
getting through with a suspicious score of 0.0. Upon inspection, they
all ha
8) on
server.alphaworks.co.uk
X-Spam-Score: 0.0
i.e. missing X-Spam-Level: and X-Spam-Status:
Can anyone suggest what is going on here?
Thanks,
Geoff
On 23/10/2014 23:00, Kevin A. McGrail wrote:
On 10/23/2014 5:47 PM, geoff.spamassassin140...@alphaworks.co.uk wrote:
On 04/09/2014 11:29, Kevin A. McGrail wrote:
Using procmail without MTA glue is OK for many uses. I am wondering
how many spamd connections you allow and if you have checked you
On 04/09/2014 15:56, John Hardin wrote:
On Thu, 4 Sep 2014, Geoff Soper wrote:
I've got an issue whereby spam messages seem to be somehow bypassing
SA and getting into my inbox.
:0fw: spamassassin.lock
* < 40
| spamc -x
Are the messages that bypass SA always rather larg
not a server I administer but
support are very helpful...
Many thanks,
Geoff
state.
Can anyone suggest what the issue may be?
Thanks,
Geoff
Hi,
I've got an issue whereby spam messages seem to be somehow bypassing SA and
getting into my inbox. I call SA via procmail as per
https://wiki.apache.org/spamassassin/UsedViaProcmail
The exact procmail file that calls SA is as follows:
#
#Standard SA call to be included from .procmailrc fil
long with
series of numbers and cut up with symbols) but I don't see how I can
write a REGEXP to get them. Are other people also suffering from these?
Thanks,
Geoff
After a couple of years without being greatly troubled by spam (a few a
week), about a fortnight ago I started seeing 10-20 a day. They have a
similar look and tone but I can't see any obvious ways to get them with
rules.
My trouble is that while all has been well, I've forgotten how SA works!
anything I can do to stop this happening?
Thanks,
Geoff
:0fw: spamassassin.lock
* < 256000
| spamc
# Work around procmail bug: any output on stderr will cause the "F" in
"From"
# to be dropped. This will re-add it.
:0
* ^^rom[ ]
{
LOG="*** Dropped F
On 13/01/2010 15:03, Benny Pedersen wrote:
On Wed 13 Jan 2010 02:53:13 PM CET, Geoff Soper wrote
saupdates.openprotect.com channel which contains recommended SAREs
rules and all is working!
outdated sare rules is not recommended, and openprotect do care ? :)
if you update sare rules via sa
Thanks for that, can you point me in the direction of some info on the
90_2tld.cf.sare.sa-update.dostech.net channel? I found
http://taint.org/2007/08/15/004348a.html in relation to
sought.rules.yerp.org
Thanks,
Geoff
On 13/01/2010 14:35, Jason Bertoch wrote:
Jason Bertoch wrote
On 13/01/2010 14:02, Shaun T. Erickson wrote:
On Wed, Jan 13, 2010 at 8:53 AM, Geoff Soper
wrote:
I've now added the saupdates.openprotect.com
channel which contains recommended SAREs rules and all is working!
I thought I read that no one should be using openprotect as
tes_spamassassin_org directory
without realising how it all worked. I've now added the
saupdates.openprotect.com channel which contains recommended SAREs rules
and all is working!
Thanks,
Geoff
tes_spamassassin_org directory
without realising how it all worked. I've now added the
saupdates.openprotect.com channel which contains recommended SAREs rules
and all is working!
Thanks,
Geoff
10K Jun 2 2005 99_sare_fraud_post25x.cf
-rw-r--r-- 1 root root 187 Jan 2 04:40 MIRRORED.BY
-bash-3.2$
Can anyone advise what the problem might be and what diagnosis I can
perform?
Thanks,
Geoff
dated, is there anyway to get new
versions of these rulesets?
I'm finding all this rather confusing as things seem to have moved on
somewhat since I last changed anything!
Many thanks,
Geoff
dated, is there anyway to get new
versions of these rulesets?
I'm finding all this rather confusing as things seem to have moved on
somewhat since I last changed anything!
Many thanks,
Geoff
Theo Van Dinter wrote:
On Sun, Nov 23, 2008 at 09:23:51PM +, Geoff Soper wrote:
Is this the right way of bringing in extra rules? I want these rules to
be in addition to the ones in /etc/mail/spamassassin/local.cf and not
instead of.
No, spamc has no impact on rules. You could
s this the right way of bringing in extra rules? I want these rules to
be in addition to the ones in /etc/mail/spamassassin/local.cf and not
instead of.
Thanks,
Geoff
On 12/05/2008 22:04, Benny Pedersen wrote:
On Sat, May 10, 2008 20:37, Geoff Soper wrote:
Can you suggest what I might do next? I'm not at all experienced in this
so I'm very grateful for your advice and patience!
need to knwo os distro, and why rpm updates not working :/
;m not at all experienced in this
so I'm very grateful for your advice and patience!
Thanks,
Geoff
: make_test NO
cpan[2]>
Can anyone suggest what I should do next?
Thanks,
Geoff
can do by way of further diagnosis?
Thanks,
Geoff
[7164] dbg: logger: adding facilities: all
[7164] dbg: logger: logging level is DBG
[7164] dbg: generic: SpamAssassin version 3.1.1
[7164] dbg: config: score set 0 chosen.
[7164] dbg: util: running in taint mode? yes
[7164] dbg: util: taint mode: de
fied the "a" option
(the former file overriding the latter file).
What would the "a" option be and why did the two files specify it when
spamd doesn't accept it?
Thanks,
Geoff
I'm moving from calling SA on a per message basis to using spamc. This
means I need to specify a value for SA_RESTART. Should I being using
/usr/bin/spamassassin or /etc/rc.d/init.d/spamassassin and reload or
restart? What's the difference between the two different files?
Thanks,
Geoff
Hi,
Solution here.
http://www.linuxquestions.org/questions/showthread.php?t=499812
Cheers,
Geoff.
no .procmailrc file in the mailbox's home
directory.
Cheers,
Geoff
-Original Message-
From: Chris Santerre [mailto:[EMAIL PROTECTED]
Sent: Monday, November 06, 2006 11:46 AM
To: '[EMAIL PROTECTED]'; users@spamassassin.apache.org
Subject: RE: Completely disable sp
easily upgraded
sadly :( ).
Thanks,
Geoff
s a lock then does the next mail come along just skip the
SA recipe or does it wait for the lock to become available? Can anyone
suggest what I can do to resolve this problem ?It's frustrating to get
spam which has apparently skipped the SA recipe.
Many thanks,
Geoff
Richard Collyer wrote:
Andreas Walter wrote:
unsubscribe
end
Send mail to: [EMAIL PROTECTED] to unsubscribe.
Good luck, I'm still here a week after first trying to unsubscribe!
;-)
Surely it shouldn't be this difficult to unsubscribe?
Thanks,
Geoff
Geoff
> Or just block the lists mail servers in your firewall.
>
> You'll be automatically removed after a week or so
>
> -Sietse
>
>
>
> From: Magnus Holmgren [ma
replied to Justin to this effect but have
receieved nothing since.
Can anyone else offer any suggestions as to what is going on here and what
I might try next?
Apologies for a silly mail,
Geoff
--
Hi! This is the ezmlm program. I'm managing
jdow wrote:
From: "Geoff Soper" <[EMAIL PROTECTED]>
Bart Schaefer wrote:
On 7/8/06, Geoff Soper <[EMAIL PROTECTED]> wrote:
.qmail contains the lines: | true ./Maildir/
Caveat: I don't use qmail, and don't even particularly like qmail,
so what I'm abo
Bart Schaefer wrote:
On 7/8/06, Geoff Soper <[EMAIL PROTECTED]> wrote:
Bart Schaefer wrote:
I think I need to specify the .procmailrc as the .procmailrc file is per
e-mail address, not per user or even system-wide
I think we've just uncovered a crucial bit of missing informati
Bart Schaefer wrote:
On 7/8/06, Geoff Soper <[EMAIL PROTECTED]> wrote:
.qmail contains the lines: | true ./Maildir/
Caveat: I don't use qmail, and don't even particularly like qmail,
so what I'm about to say are really educated guesses rather than
definitive answers.
jdow wrote:
From: "Geoff Soper" <[EMAIL PROTECTED]>
Hi,
I'm getting the following three warning in my procmail log (machine
name removed, just in case!), I assume I'm missing some configuration
somewhere but don't know where! Can someone advise?
Thanks,
Geo
Hi,
I'm getting the following three warning in my procmail log (machine name
removed, just in case!), I assume I'm missing some configuration
somewhere but don't know where! Can someone advise?
Thanks,
Geoff
[8162] warn: config: cannot write to //.spamassassin/user_prefs: N
t would cause communication problems.
Thanks,
Geoff
hbinc.com> writes:
>
> Geoff Varney wrote:
> > I start spamd with a -u spamd user.
> ...
> > bayes_path /root/.spamassassin
>
> The short answer is, you can tell if bayes is being used because (almost)
every message will hit a BAYES_XX
> rule for some val
kip_rbl_checks 0
use_razor2 0
use_dcc 0
use_pyzor 0
ok_languagesall
ok_locales all
Thanks for any suggestions.
Geoff
jdow earthlink.net> writes:
>
> From: "Geoff Varney" ridge.k12.wa.us>
>
> > Hi,
> > I am trying to set up SpamAssassin on my Redhat FC3 box in order to call
> > spamd
> > from an IMail email server using a spamc client. I have verfied that
t up SA to work with an external spamc client, and how would I
set up a "global" configuration for learning, etc.? Would I pass a username
with spamc and set up that user on the spamd box, etc.?
I'm still fairly new at Linux so maybe I'm totally missing something simple.
Thanks,
Geoff
ems like too much overhead just to *manage* the data set
IP by IP. If the original OP's ISP had properly differentiated between the
static and dynamic pools of IP's then all of this would be unnecessary (and
overkill).
Geoff
> Baby steps ;)
Agreed!
> Check out the interesting idea at www.rulesemporium.com/forums/
>
> entitled: Image attachment MD5 footprint RBL
My only comment on a system like this is that it could be easily subverted.
A spammer could use automated image editting tools to randomly change some
aspect of the file that would
others around that'll help against this torrent of mortgage
spam?
Thanks,
Geoff
tup correctly?
Thanks very much,
Geoff Sweet
> The only way to properly forward a spam is to forward it as an RFC822
> attachment and then unattach it at the receiving end. But I
> expect this
> is more hassle than you wanted...
If you are using Exchange and you set your account to receive the email for
that user. Then you should get the e
headers.
I am in an Exchange environment and I've been cutting and pasting the
headers and body into a text file. Is there a better way out there?
Thanks
-Original Message-
From: Geoff Manning [mailto:[EMAIL PROTECTED]
Sent: Monday, May 02, 2005 2:26 PM
To: Users (E-mail)
Subject: Testin
Pardon the newbish question, I am new to my position and SA in general.
We have 2 mail relay servers running SA 3.0.2 and a test server that I have
upgraded to 3.0.3.
I would like a solid testing process where I can run a test of a bunch of
Spam emails against the test server (SA 3.0.3) then t
ing it in the header from one of the servers.
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Thursday, April 28, 2005 10:00 AM
To: Geoff Manning; Users (E-mail)
Subject: Re: add_header
At 08:48 AM 4/28/2005, Geoff Manning wrote:
>The local.cf file is the s
I have gone ahead and made the change I asked about yesterday and it works
perfectly (on one machine only!).
We have two mail servers scanning the mail before passing it onto exchange
and one of them is adding the headers but the other isn't. I've checked
everything I can think of:
SpamAssassin v
ttler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 27, 2005 12:06 PM
To: Geoff Manning
Cc: users@spamassassin.apache.org
Subject: Re: --Lint parse error with always_add_headers
Geoff Manning wrote:
>When I run spamassassin --lint I receive a parse error as shown
belowhow
>do I fix i
When I run spamassassin --lint I receive a parse error as shown belowhow
do I fix it? It looks like it is the right syntax.
# spamassassin --lint
config: SpamAssassin failed to parse line, skipping: always_add_headers 1
lint: 1 issues detected. please rerun with debug enabled for more
inform
> Geoff Soper writes:
>> > Geoff Soper writes:
>> >> bash-2.05a$ perl -V
>> >> Summary of my perl5 (revision 5.0 version 6 subversion 1)
>> configuration:
>> > ..
>> >> @INC:
>> >> /home/alphaworks/perl_mo
> Geoff Soper writes:
>> bash-2.05a$ perl -V
>> Summary of my perl5 (revision 5.0 version 6 subversion 1) configuration:
> ..
>> @INC:
>> /home/alphaworks/perl_modules/lib/perl5/site_perl/5.6.1/i386-linux/
>> /usr/lib/perl5/5.6.1/i3
n/3.0.2/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin.pm
line 74.
Compilation failed in require at
/home/alphaworks/spamassassin/3.0.2/bin/spamassassin line 80.
BEGIN failed--compilation aborted at
/home/alphaworks/spamassassin/3.0.2/bin/spamassassin line 80.
Jon Drukman has been helping me with this but I thought I'd open it up a
little. Any help or suggestions will be gratefully received!
Thanks,
Geoff
> Geoff Soper wrote:
>> I run SpamAssassin on my web host's machine. I install it in my directory
>> using:
>>
>> perl Makefile.PL PREFIX=$HOME
>> make
>> make install
>>
>> My problem is that my host doesn't have the Digest::SHA1
dule.
Any suggestions appreciated!
Thanks,
Geoff
> New host?
>
> Your ISP shouldn't have any problems installing modules like that.
>
> Gary
>
> ____
>
> From: Geoff Soper [mailto:[EMAIL PROTECTED]
> Sent: Sat 1/1/2005 10:50 AM
> To:
tall the module locally and have done so. What's the best way to refer
SpamAssassin to the locally installed module?
I call SA from my .procmailrc file.
Thanks,
Geoff
Further to my previous message, are there any rulesets which will handle
all these mortgage spams which pretend to be following up previous
correspondance?
Thanks,
Geoff
SARE html0
SARE OEM
SARE Random
SARE Ratware Detection
SARE Specific
SARE Spoof
EvilNumber
Can anyone suggest what might catch these watch and pain relief spams
before I start writing some of my own?
Thanks,
Geoff
It's come through now after receiving a few messages from the list. I
should have been more patient, sorry!
Some more info on the wiki would seem to be a good idea? Especially
mentioning the digest lists which are effectively separate lists and not
an option of the normal list.
Thanks,
wiki.apache.org/spamassassin/MailingLists and the messages I've
received from the list haven't contained any such info at the bottom as
I'd expect.
Thanks,
Geoff
77 matches
Mail list logo