Thanks for the reminder . . .
joe a.
>>> On 2/5/2013 at 1:03 PM, wrote:
> I feel like this comes up often enough, people not having trusted_networks
> or internal_networks set.
>
> Probably for most people it's unnecessary. But if you have some server
> relaying / forwarding mail to your se
>>> On 12/18/2012 at 12:26 AM, Sean Tout wrote:
> Hello,
>
> I installed SA 3.3.3 on Debian. I'm looking to view and/or log (to file or
> db) individual tests scores in addition to the overall score. Could you let
> me know how I can configure SA to show or log individual tests scores?
>
>
> Yo
>>> On 12/12/2012 at 11:39 AM, Joseph Acquisto wrote:
>>
>>
>>Without seeing the messages, there's not much we can say about the
>>scores. Put the full messages in pastebin and give us the link so we
>>can look at it.
>>
>>The autolearn
>I send 5-10 messages daily. Spam only, tho, little ham seems to get by, mostly
>missed spam.
>
>joe a.
I meant, that number of forwarded messages for bayes to learn. Should be well
over 200 spam by now.
Will it accept unmarked mail as ham, if sent as such, or would that mess things
up?
joe
>
>
>Without seeing the messages, there's not much we can say about the
>scores. Put the full messages in pastebin and give us the link so we
>can look at it.
>
>The autolearn looks normal to me.
>
>autolearn=unavailable -- This means that something was locking the
>bayes database when this me
Suddenly a lot of garbage is getting thru. Stuff with nonsense text, etc.
This is what I see:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on open-122
X-Spam-Level:
X-Spam-Status: No, score=0.1 required=5.0 tests=DECEASED_NO_ML,HTML_MESSAGE
autolearn=unavailable version=3.3.
A message slipped through untouced. Obvious spam from "Minister of Finance"
with many attachments.
/var/log/mail shows a message skipped "spamc[7262]: skipped message, greater
than max message
size (512000 bytes)" at the time this came thru.
I'd guess that was it. Unusual, but any way to prev
>>> On 11/11/2012 at 1:52 PM, Martin Gregorie wrote:
> On Sun, 2012-11-11 at 10:38 -0500, Joseph Acquisto wrote:
>
>> RBL checks were seen, after I removed the -L from /etc/sysconfig/spamd.cf,
> but have
>> since stopped. I don't know when it stopped.
>&
>>> On 11/11/2012 at 3:53 PM, RW wrote:
> On Sun, 11 Nov 2012 10:38:08 -0500
> Joseph Acquisto wrote:
>
>> One thing I don't understand is why I no longer see RBL's showing as
>> being checked. I'd think these folks should show up on at least one.
>>> On 11/10/2012 at 4:48 PM, "Joseph Acquisto" wrote:
>>>> On 11/10/2012 at 11:35 AM, John Hardin wrote:
>> On Sat, 10 Nov 2012, Joseph Acquisto wrote:
>>
>>> Should it not have been caught, anyway, they being a known spammer?
>>
>
>>> On 11/10/2012 at 11:35 AM, John Hardin wrote:
> On Sat, 10 Nov 2012, Joseph Acquisto wrote:
>
>> Should it not have been caught, anyway, they being a known spammer?
>
> A "known spammer" that has sent you similar messages in the past?
>
> I wond
>>> On 11/10/2012 at 8:51 AM, Martin Gregorie wrote:
> On Sat, 2012-11-10 at 07:50 -0500, Joseph Acquisto wrote:
>> >>> On 11/10/2012 at 7:12 AM, Martin Gregorie wrote:
>> >> After I posted, I went to put them on my local blacklist and saw that
>>
>>> On 11/10/2012 at 7:12 AM, Martin Gregorie wrote:
>> After I posted, I went to put them on my local blacklist and saw that
>> I had done this previously. I wonder why it was not caught. A
>> Cron job does sa-update twice a day, so it is unlikely not to have
>> been read.
>>
> Don't forge
>>> On 11/9/2012 at 8:13 PM, Martin Gregorie wrote:
> On Fri, 2012-11-09 at 18:48 -0500, Joseph Acquisto wrote:
>> http://pastebin.com/H8NrruE1
>>
>> An outfit that apparently not only does not honor unsubscribe
>> requests, but may simply count hits.
>&
http://pastebin.com/H8NrruE1
An outfit that apparently not only does not honor unsubscribe requests, but may
simply count hits.
I could be wrong.
joe a.
>>> On 11/5/2012 at 6:44 PM, "Joseph Acquisto" wrote:
>>>> On 11/5/2012 at 10:34 AM, Bowie Bailey wrote:
>> On 11/4/2012 10:10 PM, Joseph Acquisto wrote:
>>>>>> On 11/4/2012 at 4:09 PM, Jari Fredriksson wrote:
>>>> 04.11.2
>>> On 11/5/2012 at 10:34 AM, Bowie Bailey wrote:
> On 11/4/2012 10:10 PM, Joseph Acquisto wrote:
>>>>> On 11/4/2012 at 4:09 PM, Jari Fredriksson wrote:
>>> 04.11.2012 22:33, Joseph Acquisto kirjoitti:
>>>> I'd love to use RBL but understand I
>>> On 11/4/2012 at 7:10 PM, Martin Gregorie wrote:
> On Sun, 2012-11-04 at 15:33 -0500, Joseph Acquisto wrote:
>> >>> On 11/4/2012 at 8:34 AM, Martin Gregorie wrote:
>> > On Sun, 2012-11-04 at 07:55 -0500, Joseph Acquisto wrote:
>> >&g
>>> On 11/4/2012 at 4:09 PM, Jari Fredriksson wrote:
> 04.11.2012 22:33, Joseph Acquisto kirjoitti:
>> I'd love to use RBL but understand I can't, as the "last IP" is always the
> same, as I fetch all mail
>> from a single POP.Perhaps I am mis
>>> On 11/4/2012 at 8:34 AM, Martin Gregorie wrote:
> On Sun, 2012-11-04 at 07:55 -0500, Joseph Acquisto wrote:
>> >>> On 11/3/2012 at 9:15 PM, "Joseph Acquisto" wrote:
>> > Why do these score 0 ?
>> >
>> > http://pastebin.com/U4z
>>> On 11/3/2012 at 9:15 PM, "Joseph Acquisto" wrote:
> Why do these score 0 ?
>
> http://pastebin.com/U4zFu8wk
> http://pastebin.com/MV9KbnbU
Two more this AM. I did not bother posting these, they're virtually identical.
Pastebin will expire the eve
>>>> Bowie Bailey 10/29/12 9:57 AM >>>
>On 10/29/2012 9:50 AM, Joseph Acquisto wrote:
>> I get this error running sa-update via cron
>>
>> "service: no such service /etc/init.d/spamd"
>>
>> This appears to happen only when sa-up
I get this error running sa-update via cron
"service: no such service /etc/init.d/spamd"
This appears to happen only when sa-update actually does an update. I was
running it twice a day, once at 00:30 and again at 06:00 (or so) and only the
00:30 would report this error. The error show up i
>>> On 10/24/2012 at 8:07 PM, John Hardin wrote:
> On Wed, 24 Oct 2012, Joseph Acquisto wrote:
>
>>>>> On 10/24/2012 at 11:54 AM, "Kevin A. McGrail" wrote:
>>> On 10/24/2012 11:25 AM, Joseph Acquisto wrote:
>>>>>>>> &qu
>>> On 10/24/2012 at 11:54 AM, "Kevin A. McGrail" wrote:
> On 10/24/2012 11:25 AM, Joseph Acquisto wrote:
>>>>>> "Kevin A. McGrail" 10/24/12 9:52 AM >>>
>>> On 10/24/2012 6:09 AM, Joseph Acquisto wrote:
>>>> OBTW
tee ?? That's a new one on me.
That's *two* things I've learned today!
whew! Time for a nap.
joe a.
>>> Martin Gregorie 10/24/12 1:11 PM >>>
On Wed, 2012-10-24 at 12:48 -0400, Joseph Acquisto wrote:
> >>>> "Kevin A. McGrail"
>>
>> How can I trap/redirect the -D output? In entirety? I use putty to access
>> the box and cannot sroll back all the way to
>> the beginning of output. Perhaps there is a secret to that, as well.
>
>Edit your Putty settings. In the "Window" section there is an option
>for "Lines of scroll
>>>> "Kevin A. McGrail" 10/24/12 11:55 AM >>>
>On 10/24/2012 11:25 AM, Joseph Acquisto wrote:
>>>>>> "Kevin A. McGrail" 10/24/12 9:52 AM >>>
>>> On 10/24/2012 6:09 AM, Joseph Acquisto wrote:
>>>> OBT
>>>> "Kevin A. McGrail" 10/24/12 9:52 AM >>>
>On 10/24/2012 6:09 AM, Joseph Acquisto wrote:
>> OBTW . . . fixed my starved db by adding --mbox to the sa-learn command
>> line. It seems happy now. Funny, for some reason I thought that was
>&g
>>> On 10/23/2012 at 8:24 PM, John Hardin wrote:
> On Tue, 23 Oct 2012, Joseph Acquisto wrote:
>
>>>>> On 10/23/2012 at 6:33 PM, "Joseph Acquisto" wrote:
>>>>>> On 10/23/2012 at 11:18 AM, John Hardin wrote:
>>>> On Tue, 23 O
>>> On 10/23/2012 at 6:33 PM, "Joseph Acquisto" wrote:
>>>> On 10/23/2012 at 11:18 AM, John Hardin wrote:
>> On Tue, 23 Oct 2012, Joseph Acquisto wrote:
>>
>>>>>> On 10/23/2012 at 6:02 AM, "Joseph Acquisto" wrote:
>>
>>> On 10/23/2012 at 11:18 AM, John Hardin wrote:
> On Tue, 23 Oct 2012, Joseph Acquisto wrote:
>
>>>>> On 10/23/2012 at 6:02 AM, "Joseph Acquisto" wrote:
>>>>>> On 10/22/2012 at 8:30 PM, John Hardin wrote:
>>>> On Mon, 22 O
at
http://wiki.apache.org/spamassassin/SiteWideBayesFeedback
the link a cookbook to setup site wide ham/spam forwarding for postfix
"http://gtmp.org/publications/sa-postfix-en";, links to "topic does not exist
yet".
Just sayin . . .
joe a.
>>> On 10/23/2012 at 6:02 AM, "Joseph Acquisto" wrote:
>>>> On 10/22/2012 at 8:30 PM, John Hardin wrote:
>> On Mon, 22 Oct 2012, Joseph Acquisto wrote:
>>
>>> I just noticed this in /var/log/messages:
>>>
>>> Oct 22 20:2
>>> On 10/22/2012 at 8:30 PM, John Hardin wrote:
> On Mon, 22 Oct 2012, Joseph Acquisto wrote:
>
>> I just noticed this in /var/log/messages:
>>
>> Oct 22 20:20:11 mybox spamd[31966]: config: SpamAssassin failed to parse
> line, "/etc/mail/spama
> That's pretty easy. The SA man page says that the default bayes database
> path is ~/.spamassassin/bayes, which is in each user's home directory.
>
> Just set the bayes path in your local config to a path which is not based
> on the user (i.e. does not start with ~), perhaps something like th
>>> On 10/22/2012 at 8:15 PM, "Joseph Acquisto" wrote:
>> That's pretty easy. The SA man page says that the default bayes database
>> path is ~/.spamassassin/bayes, which is in each user's home directory.
>>
>> Just set the bayes path in
> That's pretty easy. The SA man page says that the default bayes database
> path is ~/.spamassassin/bayes, which is in each user's home directory.
>
> Just set the bayes path in your local config to a path which is not based
> on the user (i.e. does not start with ~), perhaps something like th
>>> On 10/22/2012 at 7:18 PM, John Hardin wrote:
> On Mon, 22 Oct 2012, Joseph Acquisto wrote:
>
>>>>> On 10/22/2012 at 12:15 AM, John Hardin wrote:
>>> On Sun, 21 Oct 2012, Joseph Acquisto wrote:
>>>
>>>> If I then try to learn ham o
>>> On 10/22/2012 at 12:15 AM, John Hardin wrote:
> On Sun, 21 Oct 2012, Joseph Acquisto wrote:
>
>>>> On 10/21/2012 at 6:39 PM, John Hardin wrote:
>>>
>>> This typically indicates that you aren't running sa-learn while logged in
>>&g
>>> On 10/21/2012 at 6:39 PM, John Hardin wrote:
> On Sun, 21 Oct 2012, Joseph Acquisto wrote:
>
>> I cleared the sa database by saying: sa-learn --clear
>>
>> Since then, I have been see this:
>>
>> my_host:~ # sa-learn --dump magic
>> 0.0
I cleared the sa database by saying: sa-learn --clear
Since then, I have been see this:
my_host:~ # sa-learn --dump magic
0.000 0 3 0 non-token data: bayes db version
0.000 0 0 0 non-token data: nspam
0.000 0 0 0
. . .
> Joe, what exactly do you mean below when you describe the message? The
> subject was only a FTP link (which the hits suggest is not the case)? Or
> the subject was empty and the body was only a FTP link?
>
> Perhaps SA should only autolearn when the body of the message is some
> minimum
>>> On 10/21/2012 at 11:02 AM, Mikael Syska wrote:
> Hi,
>
> On Sun, Oct 21, 2012 at 4:50 PM, Joseph Acquisto wrote:
>> Today I found a missed SPAM that contained this in the header:
>>
>> X-Spam-Status: No, score=0.0 required=5.0
>> tests=FREEMA
Today I found a missed SPAM that contained this in the header:
X-Spam-Status: No, score=0.0 required=5.0 tests=FREEMAIL_FROM,MISSING_SUBJECT,
T_DKIM_INVALID,UNPARSEABLE_RELAY autolearn=ham version=3.3.2
The subject was empty with a link starting with "ftp:"
I guess it's the autolearn that is mo
> It's better to just score RDNS_NONE at 0.
Seems I set that in the ./spamassassin/user_prefs file. I found one in
/root another in /home/spamfilter. So I did them both.
joe a.
>>>> RW 10/17/12 8:25 PM >>>
>On Wed, 17 Oct 2012 06:32:27 -0400
>Joseph Acquisto wrote:
>
>> > Frustrating, as I could swear I did this with them, just some
>> > months ago.
>> >
>> > joe a.
>>
>> Just wonder
> I fear this may be due to the way I get my mail. The ISP just
> informed me that I am not allowed to setup a PTR record for that
> (or any) account.
>
> At the moment, I am at a loss.
>
> Frustrating, as I could swear I did this with them, just some
> months ago.
>
> joe a.
Just wond
>>> On 10/16/2012 at 6:25 PM, Lutz Petersen wrote:
>> > Wondering about this detection:
>> >
>> > "2.4 RDNS_NONE Delivered to internal network by a host with
>> > no
> rDNS"
>
> I saw this sometimes in mails delivered from external where people
> have sent their mail within an in
Wondering about this detection:
"2.4 RDNS_NONE Delivered to internal network by a host with no
rDNS"
I see this on *all* SPAM marked email some of which are from legitimate
senders. I have set my internal boxes as trusted and internal in the config
file, but still suspect it mus
>>> On 10/15/2012 at 7:36 PM, "Joseph Acquisto" wrote:
> Getting an error running sa-learn. Probably lacking some command line info.
> Google did show a few things, but . . .
>
> saying "sa-learn -D --spam"
>
> Gets to the point shown below and
> I suggest you contact your ISP and ask whether they are doing anything
> that would discard GTUBE messages.
>
> --
> John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
> jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
Sad, but likely true.
joe a
Getting an error running sa-learn. Probably lacking some command line info.
Google did show a few things, but . . .
saying "sa-learn -D --spam"
Gets to the point shown below and waits, whereupon I do ctrl C.
Oct 15 19:30:33.089 [2452] dbg: bayes: expiry completed
Oct 15 19:30:36.278 [2452] db
>>> On 10/15/2012 at 2:36 PM, wrote:
> Try sending it from the server you're testing?
>
spamassassin -D < gtube.txt
Seems to put out a lot of text to screen.
joe a.
>>> On 10/15/2012 at 3:46 PM, Martin Gregorie wrote:
> On Mon, 2012-10-15 at 14:02 -0400, Joseph Acquisto wrote:
>> Still can't get GTUBE messages. Am I being dense? Sending messages
>> with the GTUBE "signature",
>> from external sites, don'
I can try that, this evening.
Thought that was expressly warned against. Did I mis-read?
joe a.
>>> 10/15/12 2:37 PM >>>
Try sending it from the server you're testing?
On 10/15, Joseph Acquisto wrote:
> Still can't get GTUBE messages. Am I being dense?
Still can't get GTUBE messages. Am I being dense? Sending messages with the
GTUBE "signature",
from external sites, don't seem to arrive. I don't see them trapped in my day
jobs outgoing
queue, etc.
??
joe a.
>>> "Joseph Acquisto" 1
>>> On 10/14/2012 at 6:25 PM, Jari Fredriksson wrote:
> 15.10.2012 00:48, Joseph Acquisto kirjoitti:
>> Upgrade effort abandoned. Installed OpenSuse 12.2 which, oddly enough, came
> with the new version of
>> SA. All seems to be working well. OS seems a big leis
Upgrade effort abandoned. Installed OpenSuse 12.2 which, oddly enough, came
with the new version of
SA. All seems to be working well. OS seems a big leisurely though.
However, I can't seem to test with GTUBE. Gmail seems to eat these, they
never get to me. Normal? Other gmail tests do.
>>> On 10/11/2012 at 1:45 PM, Robert Schetterer wrote:
> Am 11.10.2012 18:52, schrieb Joseph Acquisto:
>>>>>> Kevin Miller 10/11/12 12:40 PM >>>
>>> In the past, when I've asked in the SUSE forums they have put out newer
> versions of
Kevin Miller 10/11/12 12:40 PM >>>
>In the past, when I've asked in the SUSE forums they have put out newer
>versions of clamav and spamassassin. As is typical, the forums are community
>support >and not staffed by paid engineers, although several of the upper
>echelon folks there have co
>
> Not to put too fine a point to it, but SLES10 is a bit long in the tooth
> as a base OS. Maybe time to think about a whole OS upgrade?
>
> Once you start going the cpan path to install stuff you're poluting your
> package managemnet system's idea of what's installed and undermining
> your abi
>>> On 10/10/2012 at 8:06 PM, Martin Gregorie wrote:
> On Wed, 2012-10-10 at 18:54 -0400, Joseph Acquisto wrote:
>
>> perl Makefil.pl (in spamassasin extract folder) gives this:
>>
>> Checking if your kit is complete...
>> Looks good
>> Wa
>>> On 10/10/2012 at 2:34 AM, Per Jessen wrote:
> Joseph Acquisto wrote:
>
>>>>> On 10/9/2012 at 3:02 PM, Per Jessen wrote:
>>> Joseph Acquisto wrote:
>>>
>>>> Won't make, anyway. Module Net-addr::IP missing. Finding thi
>>> On 10/9/2012 at 3:02 PM, Per Jessen wrote:
> Joseph Acquisto wrote:
>
>> Won't make, anyway. Module Net-addr::IP missing. Finding this for
>> SuSe seems to be an adventure in itself.
>
> Just install from source.
>
>
>
> --
> P
>>> On 10/9/2012 at 3:18 PM, Kevin Miller wrote:
>> Try adding perl-net-id in YaST
> That should be perl-net-ip - not perl-net-id
> Sorry about that...
>
> ...Kevin
Sadly, perl-net-id is already installed.
joe a.
Won't make, anyway. Module Net-addr::IP missing. Finding this for SuSe seems
to be an
adventure in itself. (or, not unheard of in SuSe land, functions incorporated
in another
module, so hacking tool honing in store).
joe a.
>
I may have asked this already but never got around to it.
Any g
I may have asked this already but never got around to it.
Any guides to doing an update to current SA on an running 3.2.4? Using Postfix.
joe a.
>>> On 5/17/2012 at 6:16 PM, John Hardin wrote:
> On Thu, 17 May 2012, Joseph Acquisto wrote:
>
>> I attempted to adapt something from a similar regex provided by a vendor
>> of a commercial product. It was to detect country codes we do not want
>> to accept m
>>> On 5/17/2012 at 9:55 AM, John Hardin wrote:
> On Wed, 16 May 2012, Joseph Acquisto wrote:
>
>>>>> On 5/16/2012 at 8:53 PM, "Joseph Acquisto" wrote:
>>>>>> On 5/16/2012 at 5:18 PM, Brent Gardner
>>>>>> wr
>>> On 5/16/2012 at 8:53 PM, "Joseph Acquisto" wrote:
>>>> On 5/16/2012 at 5:18 PM, Brent Gardner
>>>> wrote:
>> On 05/16/2012 02:15 PM, Joseph Acquisto wrote:
>>>>>> On 5/16/2012 at 5:05 PM, "Joseph Acquisto" wrote:
>>> On 5/16/2012 at 8:28 PM, John Hardin wrote:
> On Wed, 16 May 2012, Joseph Acquisto wrote:
>
>> I have been unsuccessful creating a rule to detect and weight http links in
> message body, such as this one below:
>>
>> http://boguslink.ru
>>
>>
>>> On 5/16/2012 at 5:18 PM, Brent Gardner
>>> wrote:
> On 05/16/2012 02:15 PM, Joseph Acquisto wrote:
>>>>> On 5/16/2012 at 5:05 PM, "Joseph Acquisto" wrote:
>>> I have been unsuccessful creating a rule to detect and weight http links in
>>> On 5/16/2012 at 5:05 PM, "Joseph Acquisto" wrote:
> I have been unsuccessful creating a rule to detect and weight http links in
> message body, such as this one below:
>
> http://boguslink.ru
>
> The ones I have created get "hits" when tested
74 matches
Mail list logo
