Re: false possitive

2016-07-31 Thread Martin Hepworth
3.3.1 was released march 2010, yes its a slow update these days as latest is 3.4.1 but most of the updates are around the rulesets But i'd really suggest you update On Sun, 31 Jul 2016 at 20:33, Benny Pedersen wrote: > On 2016-07-31 21:30, Matus UHLAR - fantomas wrote: > > > will you answer or ar

Re: Unmanageable spam levels

2015-04-28 Thread Martin Hepworth
that score does look very low, especially for those rules that fired, even with the BAYES_00. I'd look to make sure you're adding the scores for the rules in the headers as well as the rules that fired so you see if you've got another rule score with a big negative number --

Re: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Martin Hepworth
Yeah they tried a similar trick with MailScanner years ago, basically dont trust someone elses mail to tell the truth as per usual On Sunday, 9 November 2014, Marieke Janssen wrote: > >hitting like crazy and safe > > Confirmed, thank you. > > /MJ > > -- -- Martin Hepworth, CISSP Oxford, UK

Re: Dealing with a bad network device affecting DNS lookups

2014-07-16 Thread Martin Hepworth
So whats the forwarder as it leaves your machine, a local DNS server, the appliance you think is in the way or Rackspace's DNS. If you can alter the overall forwarding so as it leaves your network can you make this google's or OpenDNS servers does this make a difference? -- Marti

Re: Dealing with a bad network device affecting DNS lookups

2014-07-15 Thread Martin Hepworth
Zimbra, Inc. > > Zimbra :: the leader in open source messaging and collaboration > Run your own caching server on the sa box itself, makes a surprising difference and something I always reconmend Martin -- -- Martin Hepworth, CISSP Oxford, UK

Re: increase in spams getting though

2013-05-31 Thread Martin Hepworth
g here is, has anyone else > experienced an increase in penetration by spammers in the last couple of > months? > > > > -- > View this message in context: > http://spamassassin.1065346.n5.nabble.com/increase-in-spams-getting-though-tp104964.html > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. > -- -- Martin Hepworth, CISSP Oxford, UK

Re: Reducing SPAMD memory size?

2013-05-23 Thread Martin Hepworth
also look at compiling the rulesets -- Martin Hepworth, CISSP Oxford, UK On 23 May 2013 16:29, Kevin A. McGrail wrote: > On 5/23/2013 10:57 AM, Marc Perkel wrote: > >> My spamd tasks are using 100M to 300M each. Seems excessive. What can I >> do to reduce this? >>

Re: latest rules

2012-09-22 Thread Martin Hepworth
tests=BAYES_40,HTML_MESSAGE, > RCVD_IN_BRBL_LASTEXT,SPF_HELO_PASS,URIBL_BLACK autolearn=no > version=3.3.2 > > -- -- Martin Hepworth, CISSP Oxford, UK

Re: Bypassing SpamAssassin for SASL auth users

2012-06-06 Thread Martin Hepworth
is list for bypassing or having SA properly > recognise authenticated users' mail. (smtp-auth). > > > -- > Dave Funk University of Iowa > College of Engineering > 319/335-5751 FAX: 319/384-0549 1256 Seamans Center > Sys_admin/Postmaster/cell_**adminIowa City, IA 52242-1527 > #include > Better is not better, 'standard' is better. B{ > -- -- Martin Hepworth, CISSP Oxford, UK

Re: No spam, but get quarantined.

2012-03-28 Thread Martin Hepworth
io > > On Wed, Mar 28, 2012 at 1:21 PM, Martin Hepworth > > > wrote: > >> Spammassin itself doesnt do anything with the email , but merely scores >> it for other things to use that score to move it deliver it or send it >> somewhere different >> >> So

Re: No spam, but get quarantined.

2012-03-27 Thread Martin Hepworth
.0.1433-6.8.0.1017-18802.004 > X-TM-AS-Result: No--5.693-7.0-31-10 > X-imss-scan-details: No--5.693-7.0-31-10 > X-TM-AS-User-Blocked-Sender: No > > This is a Mime message, which your current mail reader may not > understand. Parts of the message will appear as text. If the remainder > appears as random characters in the message body, instead of as > attachments, then you'll have to extract these parts and decode them > manually. > > --DMW.Boundary.605592468 > Content-Transfer-Encoding: 7bit > > etc... > -- -- Martin Hepworth Oxford, UK

Re: razor2 and cloudmark?

2012-01-04 Thread Martin Hepworth
any troubleshooting techniques that you > can share. > > -AJ > > -- > View this message in context: http://old.nabble.com/razor2-and-cloudmark--tp33082922p33082922.html > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. > > -- -- Martin Hepworth Oxford, UK

Re: installation problem

2011-12-31 Thread Martin Hepworth
esearch & Development Ltd. > PO Box 1143, St Albans, Herts, AL1 9UT, UK > Registered in England No. 1909571 > Registered Office: 47 Holywell Hill, St Albans, Herts, AL1 1HD > Phone: +44 (0)1727 841455 > www.prd.co.uk > > -- -- Martin Hepworth Oxford, UK

Re: Bayes and MySQL - does it actually work?

2011-12-25 Thread Martin Hepworth
tuner and was nearly infected with fake AV virus. I > loaded up task manager and killed IE before it had a chance to infect > me. So, beware. > > -- > Gary V > -- -- Martin Hepworth Oxford, UK

Re: Apply Bayes learning to all users?

2011-12-15 Thread Martin Hepworth
Created a shared iMap or similar email account with a spam and ham folder for users to drag email into (not forward as that breaks headers in thing like outlook) Then find one of the many perl scripts lying about the net to grab this email and SA-learn it to the main bayes db. Martin On Friday,

Re: new paradigm

2011-11-24 Thread Martin Hepworth
n this list are violating RFCs doing the previous thing ! > > C > Rfc 5321 says I can discard if I have high confidence it's rubbish ! -- Martin -- -- Martin Hepworth Oxford, UK

Re: Negative score spamassassin

2011-11-21 Thread Martin Hepworth
=maq:index#getting_the_best_out_of_spamassassinfor some ideas - it's a little outdated but still usefull I think) -- Martin Hepworth Oxford, UK On 21 November 2011 08:26, ercibrest wrote: > > Hello and sorry for my english. > > I have got mailscanner, postfix 2.8.2, spamassassin 3.3

Re: Performance Problems Upgrading From 3.2.5 to 3.3.1 on CentOS 5/6

2011-11-17 Thread Martin Hepworth
rver on the box itself helps hugely). any clues on the maillog or of you run spammassassin with "--lint --debug" on a sample? -- Martin Hepworth Oxford, UK On 17 November 2011 15:55, Tom wrote: > Greetings, > > === Information == > Old Version: spama

Re: antiphishing

2011-10-12 Thread Martin Hepworth
or evil link) > so genuine links can be followed and evil links can be warned ! > > In sumary...replace text between and by the href or add the > href next to the text with an ascii arrow (-->) or something like > that. > > Cheers ! > -- -- Martin Hepworth Oxford, UK

Re: Minimal server specs for SA question

2011-10-03 Thread Martin Hepworth
Dns cache on the actual SA machine makes a huge difference! Martin On Monday, 3 October 2011, Simon Loewenthal wrote: > Martin Hepworth wrote: >> >> Also make sure youre running a caching nameserver to help with dns requests >> >> Drop unknown recipients at the st

Re: Minimal server specs for SA question

2011-10-03 Thread Martin Hepworth
; I would also recommend turning off as many network checks as possible in SA due to redundant and blocking I/O taking up the majority of SA's processing times. > > You could also try enabling the compile rule plugin (Rules2XS I believe?) and running sa-compile, however, our in-production

Re: DecodeShortURLs plugin

2011-07-12 Thread Martin Hepworth
to ask here). > > You may want to suggest to him that he only execute the "use Sys::Syslog" > if you have not turned off the syslog functionality.  Even if you get it to > work by just commenting out a line, it might be nice to get that working > for others in the future.

Re: delete spam instead of marking as spam

2011-06-06 Thread Martin Hepworth
over 15. >>> /^X-Spam-Level: \*{15,}/ DISCARD > >> I'm getting problem with Microsoft Office Outlook 2007 in my scenario > which >> I've tell above. > > postfix are doing it for all mua if you follow the above, but there is one > remaining problem left, s

Re: delete spam instead of marking as spam

2011-06-05 Thread Martin Hepworth
-spam-instead-of-marking-as-spam-tp31777343p31777343.html > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. > > -- -- Martin Hepworth Oxford, UK

Re: mail spam not catched

2011-04-28 Thread Martin Hepworth
still a little old, 3.3.1 will do alot better job I would suggest -- Martin Hepworth Oxford, UK On 28 April 2011 15:22, Salvatore wrote: > Sorry !! my SA version is: > > spamassassin-3.2.5-2.fc10.i386 > > I am mortified to have given you a wrong information, > Sorry. > > > - > Salvatore. > > > >

Re: mail spam not catched

2011-04-28 Thread Martin Hepworth
al ruleset (eg rulesemporium). Also don't forget the install of SA 3.3 doesn;t include any rules at all and you have to run an sa-update to populate with the latest rules. -- Martin Hepworth Oxford, UK On 28 April 2011 14:53, Salvatore wrote: > "John Hardin" wrote: >

Re: new rules - where do i activate them?

2011-03-02 Thread Martin Hepworth
lready. >>> >>> So what is the point in this static, and likely huge, list of uri rules? >>> >>> >> >> > > -- > View this message in context: > http://old.nabble.com/new-rules---where-do-i-activate-them--tp31008400p31053506.html > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. > > -- -- Martin Hepworth Oxford, UK

Re: Not spam but spamassassin adds 50 hitpoints

2011-01-24 Thread Martin Hepworth
Han you don't mention which version of SA you're running with your MailScanner implementation. Might be time to upgrade if you're running something that's reasonably old. -- Martin Hepworth Oxford, UK On 24 January 2011 13:54, Han Boetes wrote: > On 01/24/2011 02:22

Re: Fwd: Re: Q about short-circuit over ruling blacklisting rule

2011-01-18 Thread Martin Hepworth
I tend to find AWL is a pain in a user population of more than 10 and disable it by default now. -- Martin Hepworth Oxford, UK On 18 January 2011 16:35, Bowie Bailey wrote: > On 1/18/2011 11:12 AM, J4 wrote: > > > > > > Right - I've moved the SA scanning to th

Re: BlackBerry Email Being Blocked by SpamAssassin

2011-01-13 Thread Martin Hepworth
Brendan I'd suggest a score of 3 is quite low to be marked as spam, I usually start at 5 at least if not higher. I'd also look at making sure the BB is sending from the correct company domains and not the generic blackberry domains. -- Martin Hepworth Oxford, UK On 13 January

Re: Reducing scan time

2010-04-21 Thread Martin Hepworth
ocal caching nameserver on the SA box? You run sa-update frequently? Does a debug show any obvious place where it's slow? -- Martin Hepworth Oxford, UK

Re: spam mail with flagged style images

2009-08-20 Thread Martin Hepworth
ark this kind of e-mail as spam? > > > Thank you very much. > -- > Marc Muñoz ~ http://www.atcubic.com > Tel. 902464246 > Fax. 933967266 > > > > > Marc Best idea would be to paastbin the full email and send the link. There maybe something in the full email that may well trigger existing rules. -- Martin Hepworth Oxford, UK

Re: mcafee sees drop in spam?

2009-05-08 Thread Martin Hepworth
Spamcop stats don't show this - yes the number of picture spams is going up, but not spam generally. http://www.spamcop.net/spamgraph.shtml?spamyear -- Martin Hepworth Oxford, UK 2009/5/8 Michael Scheidell > looks like mcafee sees a 20% drop in spam? > > wonder what that is a

spam and carbon emissions

2009-04-15 Thread Martin Hepworth
all interweb traffic that is spam?? -- Martin Hepworth Oxford, UK

Re: zen.spamhaus.org

2009-03-31 Thread Martin Hepworth
2009/3/31 Rik : > > On Tue, 2009-03-31 at 15:33 +0100, Martin Hepworth wrote: >> Maybe you went over their acceptable use limit? >> >> 2009/3/31 Rejaine Monteiro : >> > Hi >> > >> > The zen.spamhaus.org  list.dsbl.org stops wo

Re: zen.spamhaus.org

2009-03-31 Thread Martin Hepworth
Maybe you went over their acceptable use limit? 2009/3/31 Rejaine Monteiro : > Hi > > The zen.spamhaus.org  list.dsbl.org stops working here. > > Somebody noticed some problem? > > -- Martin Hepworth Oxford, UK

Re: dnsbl checks time out

2009-02-26 Thread Martin Hepworth
volume of queries, so I guess using "named" > would not make any difference, just in this case. > it will make a huge difference, I've seen it knock seconds off scan times (20 isn't uncommon). If you examine the DNS protocol itself you should be able to figure out why. I'd also think about using opendns as the forwarder for you organisation if your ISP's DNS servers are being so slow. -- Martin Hepworth Oxford, UK

Re: blacklist-uri.cf

2006-12-12 Thread Martin Hepworth
n for the Mailscanner list. If you get an answer, please let us know here so I can add it to our FAQ above. Cheers, Jeff C. MailScanner --debug-sa -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 8

Re: antispam recipe

2006-12-05 Thread Martin Hepworth
E and the URI-RBL's, DCC etc to get decent detection rates now-a-days. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confid

Re: amavisd-new or mailscanner?

2006-11-21 Thread Martin Hepworth
). As to why you get more spam in your inbox than with amavisd-new theres alot more around recently and how many third party rules have you installed??? -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ***

Re: Bayes file or SQL

2006-11-18 Thread Martin Hepworth
How about running a mysql server with common bayes Thanks Ram g'day you'll prob get more performance out of SQL for that load, and of course benefit from using the same bayes data on all you machines -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (

Re: MailScanner not using /usr/share/spamassassin?

2006-11-17 Thread Martin Hepworth
when run outside of MailScanner it could be something wrong with the spam.assassin.rules.conf settings. BTW /etc/mail/spamassassin/mailscanner.cf should now be a symbolic to spam.assassin.rules.conf so you shouldn't need to put in in -C when running spamassassin from the command line anymore

Re: "unlearnable" spam

2006-11-14 Thread Martin Hepworth
-learn it makes no difference. Each mail earns only 4-6 points max. My SA is 3.1.4, Debian testing. Any advices? Thank you. David Look at the SARE stocks ruleset from www.rulesemporium.com, this (and the other SARE rules) are very useful at catching this stuff... -- Martin Hepworth

Re: change spamhaus.org's score

2006-11-14 Thread Martin Hepworth
bl.spamhaus.org.') describe __RCVD_IN_SBL_XBL Received via a relay in Spamhaus SBL+XBL tflags __RCVD_IN_SBL_XBLnet Also no scores are given. Please tell a way. With warm regards, -Payal The scores are in 50_scores.cf... -- Martin Hepworth Senior Systems Administrator Solid Sta

Re: OT : MailScanner

2006-11-11 Thread Martin Hepworth
Just my take from a quick 5 minute wonder onto the amavid-new docs. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confidential and

Re: No hit on this..

2006-11-07 Thread Martin Hepworth
level above 50% [cf: 70] 0.6 HELO_MISMATCH_NET HELO_MISMATCH_NET 0.0 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419) -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300

Re: MailScanner versus Amavisd-new with postfix

2006-10-27 Thread Martin Hepworth
ah ok this has been in a while). it also glues SA, 12 anti-virus engines, and it's own tests (like executables which has saved me a few times before the av people have updates). horses for courses, but it's nice to have a choice of amavis-new OR MailScanner. -- Martin Hepworth Sen

Re: MailScanner & Postfix

2006-10-18 Thread Martin Hepworth
Benny Pedersen wrote: On Wed, October 18, 2006 10:22, Martin Hepworth wrote: any questions ask on the mailscanner list, we're a friendly bunch. mailscanner is not well done for postfix, but works well with sendmail for postfix i recommand to use amavisd-new, with btw olso works o

Re: MailScanner & Postfix

2006-10-18 Thread Martin Hepworth
nfo/doku.php?id=documentation:configuration:mta:postfix:installation any questions ask on the mailscanner list, we're a friendly bunch. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This

rulesemporium.com expired

2006-10-17 Thread Martin Hepworth
Guys someone forgot to renew the rulesemporium.com name - better get in there quick.. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with

Re: ALL_TRUSTED creating a problem

2006-10-16 Thread Martin Hepworth
order to get this working properly -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confidential and intended solely for th

Re: Low accuracy ?

2006-10-11 Thread Martin Hepworth
ou're running the network tests as well (spamassassin -D --lint) -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confidential

Re: Mail Backing up while SpamAssassin is in Use

2006-10-09 Thread Martin Hepworth
e. I can provide my spamassassin --lint -D output if anyone is interested. Fedora Core 1 SpamAssassin 3.1.0 MailScanner 4.49.7 sendmail 8.13.5 Thanks, Derek Derek there's a whole heap of tuning with MS/SA you can do.. ask on the MailScanner list (or IRC channel) and we'll he

Re: performance question

2006-09-27 Thread Martin Hepworth
n users before you send it off to spamassassin etc for further processing. I drop over 2/3rds of my traffic that way. Given it's only 7 seconds to scan the email I'd says your system is more than handling the traffic being processed. -- Martin Hepworth Senior Systems Administrator S

Re: Earthlink emails

2006-09-26 Thread Martin Hepworth
and may well help with delection. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confidential and intended solely for the use of the

Re: SA increasing load average a lot and spams getting through

2006-09-21 Thread Martin Hepworth
Payal Rathod wrote: On Thu, Sep 21, 2006 at 03:39:26PM +0100, Martin Hepworth wrote: try dropping non-valid email addresses in the MTA inboundthis will drop over 66% of traffic I find I have already done that. Any more ideas? With warm regards, -Payal OK let keep this on list

Re: commerce Antispam Products

2006-09-14 Thread Martin Hepworth
#x27;hosted' services (MessageLabs) uses SpamAssasssin. If you've got millions of users then surely you have the budget and capacity to built yourself a SpamAssassin system. -- Martin Hepworth Senior Systems Administra

Re: spampd performance on a relay mail server

2006-08-15 Thread Martin Hepworth
nyone else having problems with spampd and performance? How much memory have you got in the machine... I normally recommend 1GB per 'core' (Pentium HT=1.5 cores). Also check what network/DNS based tests you are doing... -- Martin Hepworth Senior Systems Administrator Solid Sta

Re: Moving from SA 2.6 to SA 3.1.4 [bayes file]

2006-07-28 Thread Martin Hepworth
-- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are

Re: MailWatch on separate server

2006-07-27 Thread Martin Hepworth
Mailscanner? Hints and suggestions are highly apprecitated Kind Regard Paul Kinda the wrong emailing list - try the mailwatch list and we'll tell you how to do it from there. Also hang around IRC for more than 30 seconds when you ask a question, some of us have day jobs ya know ;-) -- M

Re: Should this hit more rules?

2006-07-26 Thread Martin Hepworth
FM_NO_FROM_OR_TO 0.5 FM_NO_TO FM_NO_TO 1.1 FM_MULTI_ODD2 FM_MULTI_ODD2 0.7 FM_MULTI_ODD3 FM_MULTI_ODD3 -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ***

RE: The Future of Email is SQL

2006-06-12 Thread Martin Hepworth
ility) which is v. usefull for large (1000+) user bases. Kinda proves the point really, you need a proper DB for this sort of thing not some tin pot 'user' thing. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message

RE: Editing Question....

2006-06-09 Thread Martin Hepworth
Tom Depends on what's call SA. SA will only mark the spam, any processing beyond that is up to you.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Tom Ray [mailto:[EMAIL PROTECTED] > Sent: 09 June 2

RE: DATE_IN_FUTURE

2006-05-16 Thread Martin Hepworth
Al Probably due to their timezone not being correct. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: news [mailto:[EMAIL PROTECTED] On Behalf Of Al Danks > Sent: 16 May 2006 15:54 > To: users@spamassassi

RE: home owner

2006-05-04 Thread Martin Hepworth
Jean-Paul If can put the full email on a web page (headers and all)... I can run it over my system, and let you know which of many extra rules I run hit...more than like some from www.rulesemporium.com/rules.htm -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865

RE: Spam that is nothing but one large image

2006-04-21 Thread Martin Hepworth
Matt Make sure you've got the URI-RBLs working (check the plugins in init.pre and v310.pre) and also maybe add the URI-Black in to the mix as well.. http://www.uribl.com/ -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original

RE: sa-update problem

2006-04-11 Thread Martin Hepworth
Max You're right - sometimes I'm such an idiot.. I did as you suggested and it now works fine (once I'd deleted the sa-update-keys directory) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From:

sa-update problem

2006-04-11 Thread Martin Hepworth
s first or am I just being daft? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are confidential and intended solely for the use of the

RE: SpamAssassin Woes

2006-04-11 Thread Martin Hepworth
Postfix and mailScanner work fine... http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:pos tfix:politics yes it doesn't use the 'accepted' interface but it works fine and many many people have implemented PF and MS together with no problems. -- Marti

RE: Spam getting through. Getting flooded.

2006-03-27 Thread Martin Hepworth
James Again from James Grey's rules - local_body.cf -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: news [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Fairbrass > Sent: 27 March 2006 15:

RE: Spam getting through. Getting flooded.

2006-03-27 Thread Martin Hepworth
Richard This is one of James Grey's useful rules... http://files.grayonline.id.au/ this one is the loca_rawbody.cf -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Gray, Richard [mailto:[EMAIL PROTECTED]

RE: Spamassassin Appliances?

2006-03-24 Thread Martin Hepworth
Paul The defenderMX product from fsl.com is good. No idea of prices, based on number of CPUs I believe. You provide the hardware and they manage the software once it's installed. It's basically a commercial vesrion of MailScanner with a more feature-full interface. -- Martin Hep

RE: What rule can we use to catch this spam?

2006-03-23 Thread Martin Hepworth
the SARE rules in http://www.rulesemporium.com/rules.htm which are nice too.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Peter M. Abraham [mailto:[EMAIL PROTECTED] > Sent: 23 March 2006 11:28 &g

RE: What rule can we use to catch this spam?

2006-03-23 Thread Martin Hepworth
TYLE 1.1 FM_MULTI_ODD2 FM_MULTI_ODD2 -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Peter M. Abraham [mailto:[EMAIL PROTECTED] > Sent: 22 March 2006 23:24 > To: users@spamassassin.apache.org > Subject: W

RE: INVALID_DATE

2006-03-22 Thread Martin Hepworth
y scroll to the other end of the inbox and notice there's stuff with no date entry. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Randal, Phil [mailto:[EMAIL PROTECTED] > Sent: 22 March 2006 16:26 > T

RE: penis spam coming thru

2006-03-22 Thread Martin Hepworth
Michael Scores well on my system.. X-Spam-Status: Yes, score=10.9 required=5.0 tests=BAYES_50,BODY_FOREIGN_CURR, DCC_CHECK,EXTRA_MPART_TYPE,FB_CONST_9,FM_MULTI_ODD2,FM_NO_STYLE, HTML_MESSAGE,TW_CV,TW_GJ,TW_LR,TW_MQ,TW_RX,TW_WR,TW_XC autolearn=no version=3.1.0 -- Martin

RE: This isn't being tagged

2006-03-17 Thread Martin Hepworth
And once again the URI_BLACK shows how useful it can be by being ahead of the other URI-RBLS. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Randal, Phil [mailto:[EMAIL PROTECTED] > Sent: 17 March 2006 1

RE: pharma spam still coming

2006-03-09 Thread Martin Hepworth
Payal Need the full headers as well mate. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Payal Rathod [mailto:[EMAIL PROTECTED] > Sent: 09 March 2006 16:37 > To: users@spamassassin.apache.org > Subj

RE: Amavisd replacement suggestion

2006-03-07 Thread Martin Hepworth
Works fine with postfix... http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:pos tfix:politics&s=politics -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Michael W Cocke [mailto:[EMAIL

RE: Amavisd replacement suggestion

2006-03-07 Thread Martin Hepworth
Shane Have a look at MailScanner as an alternative to amavisd - it's nice to have a choice isn't it.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sen

RE: All image spam

2006-03-07 Thread Martin Hepworth
Jack If you turn on the URI-RBLs in 3.1 (see v310.pre) you should see a reduction in this type of spam. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Jack Gostl [mailto:[EMAIL PROTECTED] > Sent: 07 March 2

RE: SpamAssassin tested by lwn.net

2006-03-02 Thread Martin Hepworth
Seems to produce != doesn't ever. Depends on your config, but I think the developers err on the side of caution a little and don't have single test score that would trigger go over the default 'is spam' limit. Could be wrong - frequently am... -- Martin Hepworth Snr S

RE: New RDJ configs..

2006-01-27 Thread Martin Hepworth
Chris That seemed to work ta - I'll me a little more careful with editing next time... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Chris Thielen [mailto:[EMAIL PROTECTED] > Sent: 26 January 2

RE: Exim4 and SA: Overloading the system

2006-01-17 Thread Martin Hepworth
RAM add more RAM. 256MB is pretty low, it's probably swapping a lot. Add more RAM - I've got 1.5GB for 120 users. BUT I have a lot extra Rulesets etc. I';m using about 1.2GB but that includes a mysql emai logging DB as well. -- Martin Hepworth Snr Systems Administrator Solid

New RDJ configs..

2006-01-17 Thread Martin Hepworth
he following file in /etc/mail/spamsassassin local_badhosts.cf.2 (NB the .2 at the end of filename) Why? In /etc/mail/spamsassassin/RulesDuJour the filename is correct with the .cf at the end not the .2? -- Martin Hepworth Sn

RE: Google search as spam URI

2006-01-04 Thread Martin Hepworth
Dallas Small change required for my to lint cleanly... redirector_pattern /^https?:\/\/(?:www\.)?google\.com\/search\?q=site:([A-Za-z0-9\-\.]+)$/i (lower case letter I at the end, not uppercase/capitol I) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300

RE: I'm afraid I might have to report this list as a spam source

2005-12-23 Thread Martin Hepworth
ud? > > Anyway, I'll second (third?) Jim Nasby's comments that: > > "It's surprising to me that the SA lists aren't just run through SA. > Spam making it past that is a good indication of where SA could be > improved afterall." > > C. > But o

US winning war on spam ?!?!?!

2005-12-21 Thread Martin Hepworth
http://news.bbc.co.uk/1/hi/technology/4547474.stm Not according to my statsbut the users don't get the spam anymore ;-) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 **

RE: SA not using SARE rules?

2005-12-16 Thread Martin Hepworth
Hi So a "spamassassin -D --lint" for a first stab at debugging. You don't mention how you are calling SA, so maybe there's file permission issues? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- &

RE: phishing stuf isn't being caught

2005-12-09 Thread Martin Hepworth
# Location of the perl program MAILCMD="mail"; # Location of the mail program t hat supports the -s flag GREP="grep";# Location of the grep program # (solaris users

RE: RATWARE_ZERO_TZ=4.1

2005-11-17 Thread Martin Hepworth
n classified correctly. Unless you re-score a bunch of > rules, you should expect legit mail to hit in the 3.5-5.0 range from > time to time, and likely at a higher rate than you'd see FPs at 5+. > > -- > Kelson Vibber > SpeedGate Communications Yeah, my kill value is 10.

RE: lint failure on RDJ for 2nd day.

2005-11-04 Thread Martin Hepworth
Found it - the KAZEEM rule was hiding in one of local rules files I have Apologies for the noise.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: Chris Santerre [mailto:[EMAIL PROTECTED] > Sent: 04

lint failure on RDJ for 2nd day.

2005-11-02 Thread Martin Hepworth
self and contact the author, but just wondering if anyone has already noticed this.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ** This email and any files transmitted with it are

RE: Spamassassin vs spamd

2005-10-11 Thread Martin Hepworth
o you mention how much RAM you have, what CPU it's running on... I'd ask the amavis-new folks about SA tuning from their point of view. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message- From: shane mullins [mailto:[EMAIL PROTE

RE: Spamassassin vs spamd

2005-10-11 Thread Martin Hepworth
Shane Depends on how you are call spamassassin Milter, amavis-new, MailScanner. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message- From: shane mullins [mailto:[EMAIL PROTECTED] Sent: 11 October 2005 16:17 To: users

RE: Rules_Du_Jour Site down?

2005-09-19 Thread Martin Hepworth
Larry Just tried it now and it finds the script finenot checked my logs though.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message- From: Larry Starr [mailto:[EMAIL PROTECTED] Sent: 12 September 2005 15:59 To: Spam Talk

RE: SA 3.1 tests

2005-09-16 Thread Martin Hepworth
Sorry typo meant aren't in -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message- From: Fred [mailto:[EMAIL PROTECTED] Sent: 16 September 2005 17:04 To: Martin Hepworth; users@spamassassin.apache.org Subject: Re: SA 3.1

RE: SA 3.1 tests

2005-09-16 Thread Martin Hepworth
Jona The JP test was included in 3.0.4 so you can take that out... Looking in /usr/local/share/spamassassin/25_uribl.cf the black and grey URI-RBLs are in their by default you so you'll need those. For the other tests, check in /usr/local/share/spamassassin and see for youself. -- M

RE: SA 3.1.0 and 70_sare_whitelist.cf

2005-09-16 Thread Martin Hepworth
Hate replying to myself...noted wasn't in the RDJ settings or updated to the latestupdated to the latest version and it works fine... (I'll get mi coat ;-) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message----- Fr

SA 3.1.0 and 70_sare_whitelist.cf

2005-09-16 Thread Martin Hepworth
Hi Just upgraded to 3.1.0 and when I lint with 70_sare_whitelist.cf in place it complains about the "whitelist_from_rcvd" setting not being valid. Am I missing a plugin in init.pre/v310.pre or somewhere? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1

  1   2   3   >