Hi,
seems to work.
Had to add
score __STYLE_GIBBERISH_1 0
to my SA config to make your mail pass.
Markus
Am 2019-05-28 10:31, schrieb Stoiko Ivanov:
Hello,
with a recent update to the ruleset, we're encountering certain mails,
which cause the rule-evaluation to use 100% cpu.
The e
Am 17.10.2018 21:01, schrieb Kevin A. McGrail:
[...]
I would say no. Please open a bug at issues.apache.org. I have DKIM /
DMARC improvement as something I want to work on.
It's available as
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7642
if this version or
newer is available?
Thanks
Markus
bvious and correct observations like "Oh my God, this
> place is teeming with utter morons" to incorrect conclusions like
> "there's nothing of value here".-- Al Petrofsky, in Y! SCOX
>
> ---
> Tomorrow: Albert Einstein's 139th Birthday
>
--
- Markus
match the actual Spamhaus rule that
>>> is getting hit. I just guessed it was RCVD_IN_XBL.
>>>
>>>
>> you are aware that your recommendation doesn't apply to a
>> uridnssub URIBL_SBLzen.spamhaus.org. A 127.0.0.2
>> hit ?
>>
>>
>>
>>
> I was in a hurry, sorry. My last paragraph had a disclaimer that 2 things
> would need to be adjusted. Here is 1 of them corrected so the OP will only
> have to make sure the header rule matches his MTA's format:
>
> header __RCVD_LOCAL_IP Received =~ /\[xx\.xx\.xx\.xx\]/
> meta URIBL_SBL_LOCAL_IP_OFFSET __RCVD_LOCAL_IP && URIBL_SBL
> score URIBL_SBL_LOCAL_IP_OFFSET -1.0
>
> --
> David Jones
>
--
- Markus
> The score for TO_NO_BRKTS_DYNIP is autogenerated, the two scores
> probably add up to exactly 5.000 for good reason.
>
> Maybe some special handling for amazonaws.com would be better.
>
--
- Markus
ve caused an email to be
> triggered as spam (they would have all been spam anyway).
>
> What environment are you using? It was written in 2016, so at the least,
> make sure your perl and perl modules are at least that current.
>
--
- Markus
FNs I "vote" for the omitting "s".
>
> Maybe it would be a "compromise" to add another regex with at least the
> "s" included but 6 required consonants like
>
> [bcdfgjklmnpqrstvwxz]{6}
>
> Jens
>
--
- Markus
... < dot-atom-text @ dot-atom-text > The line
> break between the header and the ID is unusual, but not invalid. That might
> potentially be a usable spam sign.
>
>
--
- Markus
ured that I need to
> "license" or subscribe-to in some way?
>
> Thanks for the troubleshooting assistance.
>
> -AJ
>
>
--
- Markus
stfix level.
Am I misunderstanding lastexternal? Is there a specific setting that
needs to be turned on for lastexternal to be used properly? Am I doing
something else wrong with how I write these?
Any help would be appreciated.
Thanks,
Markus
A score of -0.0 is actually not 0, it is something like -0.01 (or smaller).
If it had a score of actual 0, it wouldn't trigger.
As such, due to rounding, it ends up becoming 2.9, instead of 3.
On 04/25/2017 09:27 AM, Geoff Soper wrote:
X-Spam-Status: No, Score=2.9
X-Spam-Report:
* -0.0 NO_R
Hi Antony,
If you look at his Bayes Configuration, he made it so that he only
requires 100 Ham messages.
So that isn't the issue here.
- Markus
On 03/31/2017 12:56 PM, Antony Stone wrote:
On Friday 31 March 2017 at 00:07:56, David wrote:
I'm getting no bayes score on any email
On 03/28/2017 08:09 PM, Dianne Skoll wrote:
> The "for..." clause is optional and a lot of MTAs don't add it.
> Almost all MTAs will refuse to add it if it's for more than
> one local recipient.
True, but that is what OP is asking about comparing to, which is why I
had mentioned it.
even in a mailing list those would still be the same? Obviously
in this case, you can't test them compared to all Received headers, as
that would definitely cause problems.
On 28/03/17 19:27, John Hardin wrote:
On Tue, 28 Mar 2017, Dominic Benson wrote:
On 28 Mar 2017, at 19:04, Markus
nt).
How likely is it to be in legitimate mail? Highly unlikely (if ever), so
you'd be pretty safe outright rejecting mail that behaves this way, to
be honest.
- Markus
On 28/03/17 18:58, Alex wrote:
Hi,
Is there an existing rule that detects when the To address differs
from the
port.
Good luck.
I filled a bug yesterday and there are over 700 other bugs rotting
around there.
Markus
--
https://markusbenning.de/
On 2016-02-24 18:01, John Hardin wrote:
Markus, I think this is a valid issue, I think you should file a bug.
I just opened
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7300
but the tracker shows 774 bug status NEW with the oldest dating back to
2007.
If the tracker is still activly
On 2016-02-24 17:20, Benning, Markus wrote:
Some MTAs only show the displayname and this is an attempt to
s/MTA/MUA/
--
https://markusbenning.de/
nt from john@doe-company.tld
when its actual spamu...@spamdomain.tld.
Markus
--
https://markusbenning.de/
vn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/PerMsgStatus.pm?view=markup#l2056
It should be extended to something like:
if ($result =~ /^ \s* ( [^"]*? | "[^"]*" ) \s* < [^<>]* >/sx) {
Markus
--
https://markusbenning.de/
from the mainline module?
Markus
--
https://markusbenning.de/
uthor: Markus Benning
Date: Fri Feb 5 15:11:45 2016 +0100
Additional redis connection parameters
The followin configuration parameters have been added:
* auto_whitelist_redis_password
* auto_whitelist_redis_database
* auto_whitelist_redis_debug
- Markus
--
mand executed.
I hope this will reduce the overhead significant.
Feedback and test results welcome.
Markus
Am 2015-07-15 23:22, schrieb Patrick Ben Koetter:
Markus,
are you planning to add 'password' and 'database ID' support for redis
connects to RuleTimingRedis?
What&#x
gathered with the RuleTimingRedis plugin can be used in collectd
with the Collectd-Plugins-RedisClient module also available from CPAN.
Markus
--
Markus Benning, https://markusbenning.de/
d the plugin on two servers. Please test it too! You'll need
two perl modules (Net::IP::AddrRanges and Net::CIDR) from CPAN. Any
(positive :-) feedback is welcome.
And now the plugin (docs included):
#
# Copyright 2011 by Markus Reschke
#
# <@LICENSE>
# Licensed to the Apache Softw
should my collegue
avoid, so that his e-mails go through? Is spam with this footprint
still beeing sent?
Thanks in advance,
Markus
--
I would be
very happy to receive an email to:
[EMAIL PROTECTED] .
I can then provide more information, if you need. Don't worry about language,
we will translate the article to German. The ultimate deadline would be in
about 4 Weeks.
Thank you!
--
Best Regards - Mit freundlichen Gruessen
´s no harm to leave it be. All you write/read to either place ends
up in same place
try:
man ln
and read how it works, q to quit
/Markus
ne in real.
perfectly normal.
/Markus Edholm
too, and it also looks ok. Gcc can find
libgcc_s.so.1, but if it didn't, wouldn't I get an error during
compilation?
I checked mysql.so aswell using ldd and all the depending libraries
are referenced to the correct place.
Wonder how I got 3.1.1 working in the first place... ;)
ething out. But not tonight, I'll
have to postpone the upgrade for another quite evening.
Is there somehow I can check that all the other files are in place;
libgcc_s.so.1, ld.so.1 and mysql.so (well I know they are there, I
checked, but whether the linking was done to the right files etc)
TH the one that comes first wins.
And it's /usr/local/bin/perl in all cases.
I am getting somewhat frustrated since I feel that there has happened
a fair bit since 3.1.1 to 3.1.7 in SA, and would like to upgrade... :-P
I am probably overlooking something stupid...
/markus
-BEGIN PGP
ave anything to do with PATHs, or LD_PATHs for the spamd user?
Kind regards
Markus Eskola
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFoOJla7TLhj30WOQRAsGiAJ9W52ptSjPaYksU6kB9o+8vWI8yTgCcCbD5
Cck8JiK0/G0F0IzCfzZDa/k=
=qkKh
-END PGP SIGNATURE-
or similar
/Markus
nly
receive an email with [SPAM] tagged subject. if the recipient think that the
email is a false positive he/she can email the sender to re-send the email.
how can i achieve this? for your information my mail server is exim.
Best Regards,
Markus
Send instant messages to your onli
Hello,
i tried to create a cron job to add spam messages as spamemails.
The following command :
0 1 * * * vmail sa-learn --spam
/var/opt/vmail/.info/oliver/Maildir/.spam/cur *.*
But i get this retourn:
archive-iterator: readdir found no mail in 'domain1.de' directory
archive-iterator:
Hello,
when i learn with sa-learn some emails as ham i get this error message:
Parsing of undecoded UTF-8 will give garbage when decoding entities at
/usr/share/perl5/Mail/SpamAssassin/HTML.pm line 182.
Can somebody explain me what this mean?
bye marcus
>>you will get a format that's more suitable to put in the headers.
>What do you mean, whaat this two options do, i found nothing on the
>spamassassin site.
At the moment i use bayes and the emails are marked like this in the header:
But some emails come through the spamassasin filter like th
http://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Conf.html#item_clear_report_template
Thanks about the link.
i will take a look at this the next days.
But can i something more do, agains the spam problem?
Marcus
___
I would like also to report the spams, but i dont wont get so much spams as
i can see there.
This is probably because you have an unconditional
warn message = X-Spam-Report: $spam_report
in your Exim configuration - check your ACL.
I dont know what you exactly meen, what wrong is? But i wil
Hello,
i have at the moment spamassassin with exim4 running.
But in my logfiles I have so many spam information like this:
2006-11-01 03:55:27 H=adsl-152-80-187.asm.bellsouth.net (COMPUTER)
[72.152.80.187] F=<[EMAIL PROTECTED]> rejected RCPT <[EMAIL PROTECTED]>:
DNSBL listed at sbl-xbl.spamha
rn=no version=3.1.4
Make your own rule, edit local.cf
maby like this:
body AETR /AETR|A ETR|AE TR|AET R/
score AETR 2
describe AETR new garbagecompany spam
hit of "A ETR", I thing that word is different from time to time in this
spam.
/markus
MennovB wrote:
Markus Edholm wrote:
I´m looking for some simple statistic script
using amavisd and spamassassin just to se how my own and "standard"
rules work
There are several simple scripts for amavisd/SA but it depends on what info
you want.
For example in the li
Hi all
I´m looking for some simple statistic script
using amavisd and spamassassin just to se how my own and "standard"
rules work
I tested sa-stat.pl but it wont work on amavisd log.
I tried to get amavis-stat to work, but there was to much error for my
poor mind.
Something simple?
nfig file for Rules_du_jour
located in /etc/rulesdujour/config
and not to local.cf
Rules_du_jour downlodes is files into /etc/spamassassin/RulesDuJour/
and after sucessful copied them to /etc/spamassassin/filename.cf
by default on my system
/Markus Edholm
x.net/spamassassin.html
>
> Of course, constructive feedback is always welcome.
>
> Andrew
>
Hi Andrew!
Very nice I´m manage to get my sa and sql to work, I tryed for some time
and failed, but now right on!
just some small corrections in sql lines.
tnx, and keep it up!!
/Markus
Sounds like you didn't kill spamd first.
this is my top:
7091 root 9 0 20092 1096 1096 S 0.0 0.1 0:01.17 spamd
7303 backuppc 8 0 5468 3364 1124 S 0.0 0.3 1:02.43 BackupPC
7315 backuppc 9 0 3032 1536 1100 S 0.0 0.1 0:07.87 BackupPC_trashC
7428 root 9 0 38596
Also be careful with bayes_file_mode.. you want 7's here not 6's like
you might think. This is really not a mode, but a mask, and it is
sometimes used in directory creation.
bayes_file_mode 0777
hello again,
so i make a cronjob the spamassassin is learning the spams from the spam
folder
header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]w
Pr[i1]c[e3]s?\b/i
You have a spurious line wrap above. Join it to the end of the line
above so that it will have the "w" followed by the "Pr[". That will
help. ALWAYS run "SpamAssassin --lint" when you make a change like that
and
It looks OK, except the file for some reason has HTML tags in it.. The
real file must not have HTML in it.
Which HTML Tags do you mean in the rule.cf?
header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i
score L_S_ULT_PHARM 3.0
describe L_S_ULT_PHARM spam from the ult
You can drop these into a .cf file in your site-config directory
(/etc/mail/spamassassin/ for most people):
header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i
score L_S_ULT_PHARM 3.0
describe L_S_ULT_PHARM spam from the ultimate online pharmacy
header L_S_SW_LOWPR
Are you sure your sa-learning was done as the correct user?
What user did you use? (root? nobody? The message recipient?)
I logged in as root.
I type sa-learn -spam and then the name of the email file.
Do you use spamd?
yes spamd is loaded.
Do you normally pass a -u parameter to either spamd
Hello again,
sorry but iI have still the problem , that i dont understand the spam bayes
function.
I have SA-learn about 50 emails they are spam. But always the same header as
spam comes as ham into my mailbox.
e.g.:
The Ultimate Online Pharmaceutical
Software
Software At Low Pr1ce
How can
Hi all,
Spam Assassin is working perfectly for my friend Jason. Our settings, email
accounts, everything is identical. We have the same domain name at the end of
our addresses, but I get the spam. He has implimented rules in the local.cf
file to mark certain words as spam. I can send him my spam
Suppose you address it as "foo.bar.baz". Then you can simply do a
"host foo.bar.baz" and get the address for that machine. That
becomes the only entry to "trusted_networks". Your "internal_network"
is a different proposition. In your case I might set it to 127.0.0.1
if you have exactly one machine
For an example setup:
If my network is 192.168.1.0/24 and I have two mailservers at
192.168.1.2 and 192.168.1.3, I could set it up two different ways.
Individually:
trusted_networks 192.168.1.2
trusted_networks 192.168.1.3
Or the entire network:
trusted_networks 192.168.1.
My ISP m
It's more like "I know all machines in 10.2.3.xxx belong to my network
which is safe and which I trust, so I'll add 10.2.3.xxx/24 to
trusted_networks"
I don't think it's safe to add a external network like gmx to your
trusted_networks list.
But what is my internal network. I have one serv
The trusted_networks setting specifies which mail servers you trust not
to forge header information. Normally, this will just be the servers
that you directly control. You can either list your mailservers
individually, or you can list your entire network so that you
automatically trust any mai
Are you running German-language rules on 3.0.x? If so this is
(unfortunately) expected.
If you are only running English-language rules files, then this would
probably indicate that you had rules from 2.6x on a 3.x SA install.
I have spamassassin installed on a debian sarge version with
apt-g
debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
Here is a BIG problem! You got an ALL_TRUSTED on this spam. Assuming you
fed in a spam that came from outside and the headers are still there
showing
that, it shoudl NEVER get an ALL_TRUSTED indication. This results in a
ne
sa-learn will help here. Another way to help is by grabbing some of the
rulesets off of rulesemporium.com that cover the spam which is giving you
the most trouble.
I have made
spamassassin -D --lint
but i got the warnings in the attached file.
i have debian and installed it with:
apt-get
Hello together,
At the moment i use spamassassin for spam protection.
Also Autobayes is activated.
I know when autobayes make some mistakes with ham or spam, that i can
correct it manually.
e.g.
sa -- learn (the file)
But what does sa--learn keep in mind?
On the next day, a spam emails als
o parse the body for http://
URIs, resolve the hostname(s), look-up the IP address(es) in the
blackholes list and assign a spam-score if any.
The question is: Does this work? And how?
Thanks!
-Markus
lackhole rules
above) and assign a spam-score based on that.
Is there a way to do that and is it a reasonable thing to do? The
mail-volume is fairly low, so the overhead involved should not be too
bad.
Many thanks.
-Markus
Hello,
i am new on this list.
I have a problem. I installed exim4, courier and spamassassin.
But every email i sent it out, is marked bei spam. e.g. Spam Score 1.6
Can i turn it of or is some configuration error?
Thanks a lot
marcus
___
;
>> I'm also not getting any errors with that -d left in...
>
>
> Where your log go?, maybe you don't have logging enabled. Try '-s
> /var/log/spamd.log'
>
Logging should be handled by deamontools aswell better check the
log/run script under the supervise
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matthew Yette wrote:
>
>
> On 9/22/05 9:39 AM, "Marko Lerota" <[EMAIL PROTECTED]>
> wrote:
>
>> Markus Eskola <[EMAIL PROTECTED]> writes:
>>
>>> Skip the -d for daemonize makes damonto
GFILES+"n\$MAXLOGFILES"}
> \ \${PROCESSOR+"!\$PROCESSOR"} \ ./main --- run
>
> mkdir main chown qmaill:qmail main chmod +s main chmod +x run
>
> ln -s /var/spamd-service /service
>
> And that's it, of course /service is the directory created by
> d
t?
Currently in my setup I have 3-4 diffrent users who move all the spam
that got thru into certain folders eg SPAM under IMAP. These folders
are scanned, emptied and reported once a night thru a script.
If someone has a more effectie way, I'd appreciate a hint in the right
direction.
Sorry f
Why Mail::SpamAssassin module always giving output
spam score 0? while if i run spamassassin from console
to check the same sample-spam file it give spam score
4?
--- Markus Hardiyanto <[EMAIL PROTECTED]>
wrote:
> can i use Mail::SpamAssassin to setup
> required_score?
> i a
, not from /etc/spamassassin/local.cf
already try this, but it seems didn't working:
my $spamtest = new Mail::SpamAssassin ({
'config_text' => 'required_score 2'
});
please help
Best Regards,
Markus
__
Do yo
72 matches
Mail list logo
