Re: FIlter

2017-12-11 Thread Junk
> On 12/11/2017 01:19 PM, Junk wrote: >> I wonder in addition to what recomened i could add to increase the >> score. >> I am browsing through the archives to learn more but if you think of >> something quick i could try. >> Switching to postfix is my next goal b

RE: FIlter

2017-12-11 Thread Junk
S Dept. > 155 South Seward Street > Juneau, Alaska 99801 > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: > 307357 > > > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 1:36 PM > To: Kevin Mille

Re: FIlter

2017-12-04 Thread Junk
postscreen? If i understand it correctly this feature allows to stop email from being delivered before it gets through MTA. So spam assassin does same filtering but it requires more processing? thx > On Dec 4, 2017, at 4:30 PM, Reindl Harald wrote: > > > > Am 04.12.2017 um 23:17 schrie

Re: FIlter

2017-12-04 Thread Junk
So I wonder if postscreen_dnsbl is enabled is it possible that mail get lost by mistake? Somehow some false positive? How do you maintain the list? > On 12/02/2017 09:09 PM, Junk wrote: >> Is there any list that can be trusted and is publicly available or >> unless you pay not

Re: FIlter

2017-12-03 Thread Junk
Thx I willl look at it. I started with send mail and for used to it so i would have to read more about postfix etc. > On Dec 3, 2017, at 7:42 AM, David Jones wrote: > >> On 12/02/2017 09:03 PM, Junk wrote: >> I am using sendmail. > > It's pretty easy to switch

Re: FIlter

2017-12-02 Thread Junk
Is there any list that can be trusted and is publicly available or unless you pay nothing is trusted? > On Dec 2, 2017, at 7:44 PM, Bill Cole > wrote: > >> On 2 Dec 2017, at 13:33 (-0500), David Jones wrote: >> >> Then you can start experimenting with RBLs at >> http://multirbl.valli.org/lo

Re: FIlter

2017-12-02 Thread Junk
> On Dec 2, 2017, at 12:53 PM, John Hardin wrote: > > On Sat, 2 Dec 2017, Junk wrote: > >>> If you trust your Bayes you might consider implementing a BAYES_999 rule >>> that adds another point. >> >> I might look into it >> >>>

Re: FIlter

2017-12-02 Thread Junk
I am using sendmail. > On Dec 2, 2017, at 12:33 PM, David Jones wrote: > >> On 12/02/2017 10:39 AM, Junk wrote: >> i implemented all of the filters yo mentioned and the score went up from >> 3.5. to 3.9 on an example spam email i was testing. >> I will look furth

Re: FIlter

2017-12-02 Thread Junk
y.net > > To mention just a few... > > > ...Kevin > -- > Kevin Miller > Network/email Administrator, CBJ MIS Dept. > 155 South Seward Street > Juneau, Alaska 99801 > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > > > -Ori

Re: FIlter

2017-12-02 Thread Junk
> On Dec 1, 2017, at 7:07 PM, John Hardin wrote: > > On Fri, 1 Dec 2017, Junk wrote: > >> Thx for the tips. >> I will look at theses and try to implement. >> I definitely need more ways to get more scores so those that score 3.4-4.9 >> finally go over 5 an

Re: FIlter

2017-12-01 Thread Junk
Thx for the tips. I will look at theses and try to implement. I definitely need more ways to get more scores so those that score 3.4-4.9 finally go over 5 and are marked spam. > On Dec 1, 2017, at 5:05 PM, Kevin Miller wrote: > > HashBL

RE: FIlter

2017-12-01 Thread Junk
; Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: > 307357 > > > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 12:19 PM > To: Kevin Miller > Cc: users@spamassassin.apache.org > Subject: RE: FIlter > > I

RE: FIlter

2017-12-01 Thread Junk
hing. Tailor the scores as > necessary to tune your system if the defaults aren't a good match for your > corpus of messages. > > ...Kevin > -- > Kevin Miller > Network/email Administrator, CBJ MIS Dept. > 155 South Seward Street > Juneau, Alaska 99801 > Phone: (907)

RE: FIlter

2017-12-01 Thread Junk
South Seward Street > Juneau, Alaska 99801 > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 6:31 AM > To: Benny Pedersen > Cc: Junk; users@spam

Re: FIlter

2017-12-01 Thread Junk
right, did not read it correctly. > > > Am 01.12.2017 um 17:00 schrieb Junk: >> You calling me an idiot based on what? > > learn to read emails! > i repsonded to Benny's clueless "apt-get install bind9" > >> According to URIBL: >> >&g

Re: FIlter

2017-12-01 Thread Junk
let me try if i can change the port to something else and then configure firewall to forward from that port to the dns server on my network. > > > Am 01.12.2017 um 01:22 schrieb Junk: >> I am aware of uridb blocked. >> My server is in amazon cloud and uridb is blocked. >

Re: FIlter

2017-12-01 Thread Junk
> Am 01.12.2017 um 09:50 schrieb Benny Pedersen: >> Junk skrev den 2017-12-01 05:35: >>> I understand your concern and I agree but like I said at this point I >>> cannot get over the dns issue unless you give me a dns server ip that >>> will respond to m

Re: FIlter

2017-12-01 Thread Junk
> Junk skrev den 2017-12-01 05:35: >> I understand your concern and I agree but like I said at this point I >> cannot get over the dns issue unless you give me a dns server ip that >> will respond to my queries for the uribl. > > apt-get install bind9 > you did not

Re: FIlter

2017-11-30 Thread Junk
I understand your concern and I agree but like I said at this point I cannot get over the dns issue unless you give me a dns server ip that will respond to my queries for the uribl. My original question was about specific filter. > On Nov 30, 2017, at 6:59 PM, Benny Pedersen wrote: >

Re: FIlter

2017-11-30 Thread Junk
at 5:00 PM, Benny Pedersen wrote: > > Junk skrev den 2017-11-30 23:46: > >> Nov 30 16:45:22.663 [11935] dbg: uridnsbl: nt.ee . multi.uribl.com -> >> 127.0.0.1, URIBL_BLOCKED, subtest:1 > > fix this problem first > > https://wiki.apache.org/spamassassin/DnsB

Unsubscribe

2017-04-04 Thread junk
> On Apr 4, 2017, at 6:06 PM, Jim McLachlan wrote: > > Sorry, I did a direct reply instead of a reply to the list. I hope this > corrects that. > > Hi KAM, > >You're confused Not as much as me. I'm completely baffled > >I've posted my master.cf to http://pasted.co/ba783cac just

Re: How to get rid of this spam? Spam assassin does not catch it

2015-11-02 Thread junk
After retraining and setting spam assassin for wide site all looks good. Spam gets bayes99 and non spam is bayes00. So far i did not get any spam. Thank you all for your help. >> >> >> Am 31.10.2015 um 16:06 schrieb j...@lexoncom.com: >>> So after initial learning it looks better now. (BAYES_50) >

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-31 Thread junk
> > > Am 31.10.2015 um 16:06 schrieb j...@lexoncom.com: >> So after initial learning it looks better now. (BAYES_50) > > BAYES_50 is not really good for clear spam > yep i though that bayes was used but it seems like it was all useless >> When sendmail sends email to procmail and procmail passes i

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-31 Thread junk
So after initial learning it looks better now. (BAYES_50) When sendmail sends email to procmail and procmail passes it to spam assassin, does spam assassin runs as root user or as the user the email is destined to? I run the sa-learn as root user and it seems like this is the data based that is be

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-30 Thread junk
thx, that explains the issue. I setup a dns server outside the amazon server. Now, i can finally do the lookup: root@aws:~# host -tTXT 2.0.0.127.multi.uribl.com 2.0.0.127.multi.uribl.com descriptive text "permanent testpoint" X-Spam-Flag: YES X-Spam-Level: *** X-Spam-Status: Yes, score=7.0 req

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-30 Thread junk
Further testing shows that both smazon and my public ips are blocked. I never used my public ip for dns so why is it blocked? Is it just my bad luck and the ip is just blocked on URBL? root@aws:/home/user# root@aws:/home/user# host -tTXT 2.0.0.127.multi.uribl.com 2.0.0.127.multi.uribl.com descrip

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-30 Thread junk
> On Fri, 30 Oct 2015, j...@lexoncom.com wrote: > >> I already cleaned the db to make sure I dont have it broken. >> Would it be better to turn off the autolearn. >> Teach sa ham and spam from over 200 messages and then turn back the >> autolearn? > > How big is your userbase and ham email volume?

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-30 Thread junk
I already cleaned the db to make sure I dont have it broken. Would it be better to turn off the autolearn. Teach sa ham and spam from over 200 messages and then turn back the autolearn? thx > On Thu, 29 Oct 2015, Martin Gregorie wrote: > >> On Tue, 2015-10-27 at 14:19 -0500, j...@lexoncom.com wro

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-30 Thread junk
If auto learn is enabled and header shows: autolearn=ham what happens when i classify that email later as spam? thx > On Tue, 2015-10-27 at 14:19 -0500, j...@lexoncom.com wrote: >> I dont use any ham training.Should I scan all my folders with this >> command: >> sa-learn --ham --mbox /home/user

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-30 Thread junk
> On Tue, 2015-10-27 at 14:19 -0500, j...@lexoncom.com wrote: >> I dont use any ham training.Should I scan all my folders with this >> command: >> sa-learn --ham --mbox /home/username/mail/foldername >> > YES - if Bayes never gets trained on ham, how do you expect it to > recognise the difference b

Re: Warning while running spamassassin on the message

2015-10-30 Thread junk
> On Thursday 29 October 2015 at 18:29:27, j...@lexoncom.com wrote: > >> I use procmail >> >> :0fw: spamassassin.lock >> * < 256000 >> | spamassassin >> >> I run >> sudo spamassassin -t -d --mbox /home/user/mail/INBOX.spamtest >> >> sudo spamassassin --mbox /home/user/mail/INBOX.spamtest >> >> ther

Warning while running spam assasin on the message

2015-10-29 Thread junk
I get this warning while running spam assassin from the command line: Oct 29 11:54:38.803 [26126] warn: plugin: eval failed: Insecure dependency in require while running with -T switch at /usr/lib/perl5/Net/DNS/RR/OPT.pm line 6. Oct 29 11:54:38.803 [26126] warn: BEGIN failed--compilation aborted a

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
Is there a way to learn what bayes learned so far? > On Oct 27, 2015, at 4:35 PM, John Hardin wrote: > >> On Tue, 27 Oct 2015, j...@lexoncom.com wrote: >> >> example mail sa headers: > > Is this from a spam? > >> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on >> ip-10-254-37

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
yes there might be few emails there that were legitimate i cleaned it but i did not have time to do it property are not net/RBL/DNSBL tests enabled by default? i need to review the documentation and see why it does not work > On Tue, 27 Oct 2015, j...@lexoncom.com wrote: > >> try this >> https:

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
try this https://www.dropbox.com/s/ngmaryggdelecjq/INBOX.spam?dl=0 it is mbox file with like 1000 spam messages that are not recognized as spam > On 28/10/2015 07:38, j...@lexoncom.com wrote: >> i uploaded my inbox with all spam that does not get filtered >> >> https://mega.nz/#!IRhlyQLL >> > > 1

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
thx, yes i did that but found old doc and that option was not available: https://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html > > Am 27.10.2015 um 21:02 schrieb j...@lexoncom.com: >> SO i setup the dns server. >> Can i force spam assassin to use localhost for dns or I must re

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
SO i setup the dns server. Can i force spam assassin to use localhost for dns or I must reconfigure the host? > On Tue, 27 Oct 2015, j...@lexoncom.com wrote: > >> X-Spam-Status: No, score=3.1 required=5.0 tests=BAYES_00,HTML_MESSAGE, >> >> RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZ

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
RMA-BROWN > tflags RCVD_IN_HOSTKARMA_BR net > score RCVD_IN_HOSTKARMA_BR 1.0 > > > Also - add a highest numbers MX record tarbaby.junkemailfilter.com > > This will help tune our list to your spam and also get rid of a lot od it. > > On 10/27/15 10:50, j...@lexoncom.com

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
I understand now. sa-learn --ham --no-rebuild ham_directory sa-learn --spam --no-rebuild spam_directory sa-learn --rebuild so would the best practice to be move spam to spam folder and learn as spam and learn all other folders as ham and then rebuild. The inbox would never be scanned as it might h

Re: How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
different mbox. (This one is optional.) :0: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\* /var/spool/mail/junk # All mail tagged as spam (eg. with a score higher than the set threshold) # is moved to "probably-spam". :0: * ^X-Spam-Status: Yes /var/spool/mail/junk > > > Am 27

How to get rid of this spam? Spam assassin does not catch it

2015-10-27 Thread junk
I use spam assassin with razors on ubuntu server. In recent months i started to get tons of spam. Spam assassin does not catch it and scores are very low. Are those emails fabricated so well that they look like legitimate? Can i do something to catch those as spam? I moved them all to one folder