Re: Beginner - Spamassassins 3.4.4 - Deb 10

2020-05-11 Thread Larry Starr
Oh ya, you'll see the same in the Roles, under "Permissions". Larry On 5/9/20 1:22 PM, Matus UHLAR - fantomas wrote: > On 09.05.20 01:52, mau...@gmx.ch wrote: >> Subject: Beginner - Spamassassins 3.4.4 - Deb 10 >> >> Hello today i have installed SpamAssassin 3.4.4, iam new to this >> application.

Re: sa-update failing

2016-11-22 Thread Larry Starr
On Tuesday, November 22, 2016 18:34:05 bOnK wrote: > On 22-11-2016 18:22, Larry Starr wrote: > > Has there been a mirror change that I've missed? > > > For the past few days my daily "sa-update" job has been failing: > I don't know if this has anything

sa-update failing

2016-11-22 Thread Larry Starr
mirrors.bogus-virus-warnings.cf.sare.sa-update.dostech.net' record found, channel failed channel: no 'mirrors.random.current.cf.sare.sa-update.dostech.net' record found, channel failed Update failed, exiting with code 4 I'm seeing this on both of my mail servers. This ha

Re: Spoofed Domain

2016-08-10 Thread Larry Starr
n't think of a legitimate reason to use the old extension on the new file format. On 8/10/2016 9:28 AM, Larry Starr wrote: On Tuesday, August 09, 2016 18:01:57 RobMcEwen wrote: > On 8/9/2016 5:56 PM, Anthony Hoppewrote:

Re: Spoofed Domain

2016-08-10 Thread Larry Starr
cm that is renamed to .docx, it will open a .docm renamed to .doc. I found this the hard way! It is necessary, if you wish to be safe from macro enabled documents to verify that the file is what the attachment's extension claims to be. -- Larry Starr Software Engineer Full Compass

Fwd: Check out these *Costa rica* luxury resorts

2014-02-19 Thread Larry Starr
`However,' said Mrs Joe. `I should have since you went to get to her, avoiding her do it.' AJNIYSYAUWRNWOTKTO oJLNVPDJOUDDUMIPNDPr torches we went across and I resolved to me.' PAOJPMYLYUCIHQGWTP ----- -- Larry Starr Software Engineer F

Re: Advice

2012-07-03 Thread Larry Starr
mmon and seems to be > the problem. > > I have also noticed that every time one of these mailings is sent with > several AOL users, our servers will be temporarily blocked. Are there > some precautions I should take to possible get their mails trusted? Any > other advice? > > -

Re: UPS Delivery Problems

2010-03-03 Thread Larry Starr
The ones that I have seen are about 200k (size=194761) they tend to carry an "invoice.zip" attachment, containing an "invoice.exe" file. My Mimedefang filter is quarantining the attachement at the gateway, byt the messages are coming through. Mimedefang, in my case, sets a 48K maximum on the

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now! (custom sa-update script from howtoforge)

2010-01-05 Thread Larry Starr
On Tuesday 05 January 2010, Thomas Harold wrote: > On 1/5/2010 1:50 PM, Larry Starr wrote: > > On Tuesday 05 January 2010, Thomas Harold wrote: > >> You mean something more then: > >> > >> "An update was available, and was downloaded and installed success

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

2010-01-05 Thread Larry Starr
On Tuesday 05 January 2010, Thomas Harold wrote: > On 1/4/2010 1:55 PM, Larry Starr wrote: > > On Monday 04 January 2010, Michael Scheidell wrote: > >> On 1/4/10 1:36 PM, Larry Starr wrote: > >>> On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: > >&g

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

2010-01-04 Thread Larry Starr
On Monday 04 January 2010, Michael Scheidell wrote: > On 1/4/10 1:36 PM, Larry Starr wrote: > > On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: > > > > My question, short of running with "-D", which is a bit noisy, is there a > > way to get sa-

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

2010-01-04 Thread Larry Starr
On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: > > 1) If your system is configured to use sa-update [3] run sa-update now. > An update is available that will correct the rule. No further action > is necessary (other than restarting spamd or any service that uses > SpamAssassin directly).

Re: Question on add-to-blacklist

2009-06-08 Thread Larry Starr
Just wanted to pass along a thank you to those who helped out here and provide a few notes, on my experience, that may help anyone else that is looking at this. By the way, converting to MySQL did alleviate the problems that I was seeing when attempting to apply updates to AWL ... processes tha

Re: Question on add-to-blacklist

2009-06-05 Thread Larry Starr
On Wednesday 03 June 2009, Jari Fredriksson wrote: > > On Tuesday 02 June 2009, Michael Scheidell wrote: > > What "optional" fields are you refering to? > > > > I have seen this, on the spamassassin WIKI: > > > > CREATE TABLE awl ( > > username varchar(100) NOT NULL default '', > > email varchar(

Re: Question on add-to-blacklist

2009-06-03 Thread Larry Starr
On Tuesday 02 June 2009, Michael Scheidell wrote: > > I have been using the AWL ( --add-addr-to-blacklist ) for some time, to > > bump new spam senders above the "Bayes-99" score. > > > > My problem is that this feature seems, extreemly slow. > > > > I'm now trying to use the "( --add-to-blacklist

Re: Question on add-to-blacklist

2009-06-03 Thread Larry Starr
On Tuesday 02 June 2009, Adam Katz wrote: > Larry Starr wrote: > >> I have been using the AWL ( --add-addr-to-blacklist ) for some > >> time, to bump new spam senders above the "Bayes-99" score. > > Theo Van Dinter responded: > > Well, the first pro

Question on add-to-blacklist

2009-06-02 Thread Larry Starr
I have been using the AWL ( --add-addr-to-blacklist ) for some time, to bump new spam senders above the "Bayes-99" score. My problem is that this feature seems, extreemly slow. I'm now trying to use the "( --add-to-blacklist )" option and am finding that this is, equally, slow. I'm running it

Re: Our secret is out

2008-08-15 Thread Larry Starr
Perhaps "Spambuster MX" :-) Targets the originator and destroys the target! On Friday 15 August 2008, Luis HernĂ¡n Otegui wrote: > 2008/8/15 John Hardin <[EMAIL PROTECTED]>: > > From a Slashdot thread about somebody suddenly seeing no spam on their > > mail feed and wondering why: > > > > A group

Re: Applications file for Last Week

2008-03-31 Thread Larry Starr
Yup, 37 years of experience does not make one immune to Monday morning stupidity! I'm answering, off list, in the hope that I won't fan the flames any further! Have a good day. On Monday 31 March 2008 09:54, Arthur Dent wrote: > On Mon, Mar 31, 2008 at 09:42:35AM -0500, Larr

Re: Applications file for Last Week

2008-03-31 Thread Larry Starr
I must appoligize. I sent the earlier message to our contacts at GE. Unfortunately I seem to have suffered an address-book malfunction whichh resulted an a list of recipients that, should NOT have been sent this message. If you are on that list, and have no idea what I was talking about, plea

Applications file for Last Week

2008-03-31 Thread Larry Starr
I'm not sure who, at GE, this should be addressed to, however: We normally download an Activations file each Monday morning at 10:00. Occasionally, for whatever reason, the file isn't available when my automatic download runs and I have downloaded it as late as Tuesday afternoon. Last week, Mon

Re: FW: Mail delivery failed: returning message to sender

2007-06-29 Thread Larry Starr
, we don't have an external firewall, so that couldn't be it. Could it > possibly be something further upstream, or maybe even just a timeout value > that needs to be extended? > > -Original Message- > From: Larry Starr [mailto:[EMAIL PROTECTED] > Se

Re: FW: Mail delivery failed: returning message to sender

2007-06-29 Thread Larry Starr
On Friday 29 June 2007 12:41, Don O'Neil wrote: > I've been getting these messages fairly regularly lately. We're running SA > 3.1.8 and Exim 4.6.6 on FreeBSD 6.1. I've changed the exim->SA config to go > through a pipe rather than the traditional way, set it to only scan > messages <100K, turned o

Re: Patch for rules_du_jour

2007-06-28 Thread Larry Starr
On Thursday 28 June 2007 16:39, Theo Van Dinter wrote: > On Thu, Jun 28, 2007 at 04:33:43PM -0500, Larry Starr wrote: > > Do I need to remove the rules, in /etc/mail/spamassassin, to prevent the > > older rules from overriding any updates that may come in? > > Yes. I suspecte

Re: Patch for rules_du_jour

2007-06-28 Thread Larry Starr
I have a question regarding this. I have set up the sa_update channel for the SARE rules and run it. Everything worked OK BUT, I notice that sa_update is installing the rules in /var/lib/spamassassin/3.001007, while rulesdujour was instaling them in "/etc/mail/spamassassin". Do I need to remove

Re: TVD_ENVFROM_APOST

2007-02-09 Thread Larry Starr
It checks the Envelope from, NOT the Header "From:". On Friday 09 February 2007 14:57, Mathieu Bouchard wrote: > Two questions about TVD_ENVFROM_APOST : > > 1. Is its execution conditional in any way? Because I have many posts that > have an apostrophe in the "From:" yet don't trigger this flag. I

Re: Senders with single quote in email address

2007-02-07 Thread Larry Starr
On Wednesday 07 February 2007 10:04, Theo Van Dinter wrote: > On Wed, Feb 07, 2007 at 09:42:14AM -0600, Larry Starr wrote: > > I am considering writing a rule to add a couple of points for these > > addresses and have 2 questions: > > 1. Is there already such a rule out th

Senders with single quote in email address

2007-02-07 Thread Larry Starr
I have seen a growing amount of spam, usually scoring in the 2.7-3.5 range, from senders with singel quotes ( ' ) in the sending email address (both the Envelope and Headers). For example: Roop Wizard Looking at my logs, admittedly somewhat short term, I find no "HAM" examples with an

Re: forwarding email using /etc/aliases and keeping spamassassin headers intact

2006-09-20 Thread Larry Starr
Are you certain that SA even sees the message before it's forwarded? My first guess, without seeing config files, etc. Would be that your SMTP daemon (sendmail?) is forwarding the message as it's received. On Wednesday 20 September 2006 12:24, ajmcello wrote: > I'm having an issue with SA usin

Re: abuse of all_spam_to

2006-07-20 Thread Larry Starr
You might want to look at "stream_by_recipient()", in mimedefang-filter(5). On Thursday 20 July 2006 05:41, Patrick Wolfe wrote: > I noticed today that an image spam email passed through my > sendmail/mimedefang/spamassassin config, because it was addressed to > multiple destinations, one of which

Re: RulesDuJour random.current.cf?

2006-06-28 Thread Larry Starr
g may have caused this incident. On Wednesday 28 June 2006 13:35, L. Mark Stone wrote: > On Wed, 2006-06-28 at 09:19 -0500, Larry Starr wrote: > > I have found the problem: "Never underestimate the power of your own > > systems to make you feel dumb!". > > > &

Re: RulesDuJour random.current.cf?

2006-06-28 Thread Larry Starr
ave since "unblocked" the site and everything is, once again, working fine. Thought I'd pass this along, in case someone else should run into a problem like this. On Monday 26 June 2006 09:43, Larry Starr wrote: > About a week ago I started seeing: > >> The following rule

Re: RulesDuJour random.current.cf?

2006-06-27 Thread Larry Starr
rg/sa-blacklist/random.current.cf. Additional Info: 403 Thanks, On Tuesday 27 June 2006 11:57, Chris Thielen wrote: > Larry Starr wrote: > > About a week ago I started seeing: > >>> The following rules had errors: > >>> William Stearn's RANDOM WORD Ruleset w

Re: Bayes db corrupt, not fixable?

2006-06-27 Thread Larry Starr
I don't believe that it is referring to the Spamassassin Version, but rather the version of "Berekly DB". Have you updated any packages lately? On Tuesday 27 June 2006 10:45, Bobby Johnson wrote: > When I run sa-learn --dump or --sync, it tells me the database is > version 2. This machine neve

RulesDuJour random.current.cf?

2006-06-26 Thread Larry Starr
About a week ago I started seeing: >> The following rules had errors: >> William Stearn's RANDOM WORD Ruleset was not retrieved because of: 403 from >> http://www.sa-blacklist.stearns.org/sa-blacklist/random.current.cf. I ignored it for awhile, because I've seen transient problems with some of th

Using whitelist_from_rcvd with multiple relay domains

2006-03-15 Thread Larry Starr
After receiving a large volume of phishing messages, in this case with a forged ebay sender, I have been looking at my whitelist entries. I have a number of wildcard entries i.e. whitelist_from [EMAIL PROTECTED] This one was an easy fix, since all of the messages, that I could identify came f

Re: Pump and Dump SARE rules

2006-02-06 Thread Larry Starr
On Sunday 05 February 2006 17:41, Doc Schneider wrote: > Chris Santerre wrote: > > > -Original Message- > > > From: Doc Schneider [mailto:[EMAIL PROTECTED] > > > Sent: Friday, January 27, 2006 5:14 PM > > > To: users@spamassassin.apache.org > > > Subject: Pump and Dump SARE rules > >

Rule to catch strange Sender Address?

2006-02-03 Thread Larry Starr
Lately I have seen a number of SPAM messages with a sender in the form of: <""@somedomain.whatever> for example: <""@ipyub.com> I'm not sure if this is intentional or simply broken ratware. The ones, that I have seen, are primarily mortgage spam. Does anyone see a problem with a rule to

Remove Address from Whitelist - question

2005-11-11 Thread Larry Starr
I am running Spamassassin version 2.60 on a Redhat 8.0 mail server. I have a couple of addresses that I would like to remove from the AWL but when I have tried: spamassassin --remove-addr-from-whitelist=addr The process appears to run forever, with no effect. Well, almost no effect, I

Re: Bayes mysql db error

2005-11-02 Thread Larry Starr
On Wednesday 02 November 2005 12:02, Rick Cooper wrote: > > -Original Message- > > From: Michael Monnerie [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, November 02, 2005 12:07 PM > > To: users@spamassassin.apache.org > > Subject: Re: Bayes mysql db error > > > > On Mittwoch, 2. November 20

Re: Rules_Du_Jour Site down?

2005-09-19 Thread Larry Starr
nday 19 September 2005 10:30, Martin Hepworth wrote: > Larry > > Just tried it now and it finds the script finenot checked my logs > though.. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > -Origi

Rules_Du_Jour Site down?

2005-09-19 Thread Larry Starr
Over the weekend my rules_du_jour started reporting connection errors with "http://sandgnat.com/rdj/rules_du_jour";. --09:53:00-- http://sandgnat.com/rdj/rules_du_jour (try:15) => `rules_du_jour' Connecting to sandgnat.com[208.42.148.125]:80... failed: Connection timed out. Retrying.

Re: Spammers Target Secondary MX hosts?

2005-03-18 Thread Larry Starr
On Friday 18 March 2005 08:17, Alexander Bochmann wrote: > ...on Fri, Mar 18, 2005 at 08:52:23AM -0500, Yang Xiao wrote: > > On Fri, 18 Mar 2005 13:48:46 +, Duncan Hill <[EMAIL PROTECTED]> wrote: > > > In a large number of cases, the secondary MX is not configured to know > > > the list of

Re: Anyone have a rule to catch Mailer Daemon bounces to Forged Sender Address

2005-02-23 Thread Larry Starr
On Wednesday 23 February 2005 00:57, Robert Menschel wrote: > Hello Larry, > > Tuesday, February 22, 2005, 3:11:00 PM, you wrote: > > LS> I have been seeing hundreds of "Postmaster" messages a day, that > LS> are bounced to bogus sender addresses, in my domain. ... > > LS> The real problem is that

Anyone have a rule to catch Mailer Daemon bounces to Forged Sender Address

2005-02-22 Thread Larry Starr
I have been seeing hundreds of "Postmaster" messages a day, that are bounced to bogus sender addresses, in my domain. There have been a trickle of them coming in for a long time, but lately, the volume has skyrocketed. I am running Mimedefang 2.37 and Spamassassin 2.63 (ya I know I should up

Re: Spamassassin 3.0 with mimedefang 2.37

2004-09-30 Thread Larry Starr
ith with SA 2.6, and hand checking about 22,000 messages, it appears to be doing a very accurate job of this. On Wednesday 29 September 2004 16:52, Larry Starr wrote: > I am working to upgrade spamassassin, from 2.60 to 3.0, on my RedHat 8 > Mailserver. > > I'm currently running mi

Spamassassin 3.0 with mimedefang 2.37

2004-09-29 Thread Larry Starr
I am working to upgrade spamassassin, from 2.60 to 3.0, on my RedHat 8 Mailserver. I'm currently running mimedefang 2.37. I have found no references to a required version of Mimedefang in the docs, and would like to avoid changing the entire world at once. Does anyone know of any problems ru