Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Mathias Homann
On Thursday 07 October 2010 11:46:58 Matus UHLAR - fantomas wrote: > On 07.10.10 11:11, Shlomi Fish wrote: > > before I unsubscribe I should note that the incoming messages from this > > list should have an Unsubscribe / How-to-get-help footer at teh bottom > > of their messages. > > They have sta

How to write a more complicated rule...

2010-04-02 Thread Mathias Homann
Hi, I have the uricountry and relaycountry plugins active on a 3.3.1 SA. how would i make a rule that scores for mails that contain an url under the TLD .xx but haven't gone through at least one relay in the same country? how would I make a rule that scores for mails that contain an URL that

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-29 Thread Mathias Homann
Am Montag 29 März 2010 schrieb Karsten Bräckelmann: > On Mon, 2010-03-29 at 16:23 -0400, Brent Kennedy wrote: > > Wow, I knew this was coming at some point. I just figured it was > > too expensive. > > You did read the entire thread, right? :) There's nothing new > about this. Moreover, this sti

Re: has SA 3.3.1 been recalled?

2010-03-26 Thread Mathias Homann
Am Freitag, 26. März 2010 10:27:41 schrieb Daniel Lemke: > Mathias Homann wrote: > > I'm trying to get the 3.3.1 source frm the website, but so far all > > mirrors replied "file not found"... > > > > > > what's up with that? > > > &

has SA 3.3.1 been recalled?

2010-03-26 Thread Mathias Homann
I'm trying to get the 3.3.1 source frm the website, but so far all mirrors replied "file not found"... what's up with that? bye, MH

Re: howto stop scanning

2010-02-04 Thread Mathias Homann
Am Donnerstag 04 Februar 2010 schrieb Christoph Lehmann: > Hey List, > > is there a simple way to stop further checks after achieving a > specified number of points? I don't think that would make sense, since the later checks might actually bring the total down. just imagine the whitelist_fro

Re: painting everybody in Taiwan with the same brush

2010-01-25 Thread Mathias Homann
Am Dienstag 26 Januar 2010 schrieb jida...@jidanni.org: > Fellows, I have the highest spam score vs. all my buddies: > http://article.gmane.org/gmane.linux.debian.devel.eeepc/2850/raw > > It's all because > http://www.rulesemporium.com/rules/70_sare_header1.cf > headerSARE_RECV_SPAM_DOMN0b

Re: [sa] Re: FH_DATE_PAST_20XX

2010-01-04 Thread Mathias Homann
Am Montag, 4. Januar 2010 08:50:54 schrieb Per Jessen: > Mathias Homann wrote: > > ... is a fix for that out through sa-update now? > > then why am i not getting it? > > my channels for sa-update: > > > > saupdates.openprotect.com > > updates.spama

Re: [sa] Re: FH_DATE_PAST_20XX

2010-01-03 Thread Mathias Homann
Am Montag 04 Januar 2010 schrieb John Hardin: > On Sun, 3 Jan 2010, babydr wrote: > > Hello All , My main ? is how was this (see below(*)) email being > > caught by the FH_DATE_PAST_20XX . I've run the sa_update > > repeatedly (of course that was useless as crontab had already > > ran) and with '-

how to get amavisd-new to use spamassassin?

2009-09-16 Thread Mathias Homann
Hi all, I have a postfix->amavisd-new->postfix->cyrus imapd through deliver chain up and running, and amavisd-new faithfully uses clamav to scan for viruses. I also have a working spamassassin / spamd with dcc and razor2 and all the toppings, on the same host, with sql-based settings, AWL and b

Re: Can I auto-delete emails scoring 10 and above, yet mark as spam those 5 and above?

2009-09-16 Thread Mathias Homann
Am Mittwoch, 16. September 2009 02:33:27 schrieb drkwc: > New Spamassassin nb qs: > > On the configuration panel, I have SpamAssassin set to mark as spam any > email scoring 5 or above. > > I have a rule set in Outlook Express to route those to a SpamAssassin SPAM > folder. > > Now, I'm wonderin

suggested sa-update channels?

2009-07-21 Thread Mathias Homann
Hi, which good/useful sa-update channels should i use, in addition to these: saupdates.openprotect.com updates.spamassassin.org 70_zmi_german.cf.zmi.sa-update.dostech.net thanks for any suggestions MH -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und

spam count going down?

2009-02-28 Thread Mathias Homann
Hey folks, is it just me or did the average spam per day count drop by 75% lately? bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

Not a reply: spamassassin stats (was Re: Tuning the bayes-system?)

2008-10-21 Thread Mathias Homann
Am Dienstag 21 Oktober 2008 schrieb Heinrich Christian Peters: > Email: 3870 Autolearn: 3575 Cached: 126 AvgScore: 29.35 > Spam: 3562 Autolearn: 3411 Cached: 113 AvgScore: 32.22 > Ham:308 Autolearn: 164 Cached:13 AvgScore: -3.81 > > TOP SPAM RULES FIRED

Re: how to keep updated against german spam?

2008-06-10 Thread Mathias Homann
Am Dienstag, 10. Juni 2008 schrieb Michael Monnerie: > On Dienstag, 10. Juni 2008 peter pilsl wrote: > > I run spamassassin 3.2.3 and every few weeks a new wave of german > > SPAM hits our servers that are not detected by spamassassin... > > > > Is there a webpage where I can get new rules? or any

scores too low?

2007-05-22 Thread Mathias Homann
Hi, lately i'm getting a lot of spam with rather low scores under 12.0 meaning that trash is not automatically deleted by my sieve filter). Here's a set of headers: Return-Path: <[EMAIL PROTECTED]> Received: from localhost ([unix socket]) by celebrimbor (Cyrus v2.2.12) with LMTPA;

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag 23 Februar 2007 schrieb Mathias Homann: > Am Freitag, 23. Februar 2007 16:12:59 schrieb Matt Kettler: > > Mathias Homann wrote: > > > Hi, > > > > > > > > > I'm running the following mail chain: > > > fetchmail -

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 16:12:59 schrieb Matt Kettler: > Mathias Homann wrote: > > Hi, > > > > > > I'm running the following mail chain: > > fetchmail -> postfix -> clamsmtpd -> postfix -> spamassassin 3.1.7 (as > > local_transp

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 10:37:51 schrieb David Goldsmith: > > Check your mail log for error messages like this one: > > spamd[12960]: prefork: server reached --max-children setting, consider > raising it > > We've been running spamd with '-m8' (max children spawned) for quite > sometime and a

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 10:06:06 schrieb Mathias Homann: > Am Freitag, 23. Februar 2007 09:56:29 schrieb Mathias Homann: > > now, since a few days, i keep getting the same spam mail several times a > > day, which has _no_ spamassassin headers at all, as if it has found a way

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 09:56:29 schrieb Mathias Homann: > now, since a few days, i keep getting the same spam mail several times a > day, which has _no_ spamassassin headers at all, as if it has found a way > _around_ my spamassassin. by the way... when i run that offending mail

spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Hi, I'm running the following mail chain: fetchmail -> postfix -> clamsmtpd -> postfix -> spamassassin 3.1.7 (as local_transport via the spamdeliver python script that came with the spamassassin sources) -> cyrus imapd (where spam gets sorted out based on its score). now, since a few days, i

Re: Gif Spam

2006-12-21 Thread Mathias Homann
Am Donnerstag, 21. Dezember 2006 19:28 schrieb san: > Hi, > > Is there any rule to stop mails which has .Gif attachment in SA 2.64. Yes, upgrade to 3.1.7. bye, MH -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin

Re: SPF is hopelessly broken and must die!

2006-12-13 Thread Mathias Homann
Am Donnerstag, 14. Dezember 2006 03:53 schrieb Matt Kettler: > > Yep - they are using "normal" email technology. > > No they're not. They're falsifying mail headers. Something last I > checked was actually illegal in the united states under CAN-SPAM. and a russian criminal sitting in litavia, usi

I need a little help with ALL_TRUSTED

2006-12-13 Thread Mathias Homann
Hi, I'm having a bit of trouble with ALL_TRUSTED hits on spam, can someone gve me a hand here? the situation is like this: box A has an address in a 10.x.y/24 subnet, and is (sort of) connected to the internet by destination nat'ing on our firewall, and is our external mail relay, running p

How can i make spamd use recipient adresses as keys in mysql tables

2006-12-12 Thread Mathias Homann
Hi, I'm running spamassassin 3.1.7 on a redhat box that is not an endpoint mta but sort of an inbetween mta between our external MX and several internal machines. So, most of the mails that spamd sees on it have recipient adresses that are not local users, but still valid, which leads to AWL ent

Re: Breaking up the Bot army - we need a plan

2006-12-11 Thread Mathias Homann
Am Dienstag, 12. Dezember 2006 05:09 schrieb Steve Thomas: > Is anyone else getting tired of this? Forty eight messages on the > SA list today that have nothing to do with SA. What's the point of > having a topical mailing list if nobody cares that the discussion > is off-topic? if you're so oppo

Re: Breaking up the Bot army - we need a plan

2006-12-11 Thread Mathias Homann
Am Montag, 11. Dezember 2006 23:41 schrieb Bret Miller: > So perhaps SPF should consider removing +all as an option. > Realisticly anyone that has to say "my e-mail might come from > anywhere" is contributing to the problem and probably deserves to > have e-mail bounced. sounds like a possible SA

Re: trouble calling spamc from within postfix

2006-12-07 Thread Mathias Homann
Noel Jones schrieb: > * NEVER * use "sendmail -t" to reinject mail coming from the network. > Doing so will send mail to everyone listed in the To: header, which > doesn't have anything to do with who should receive the mail. > > As the guide said, use "sendmail -oi -f ${sender} -- ${recipient}".

trouble calling spamc from within postfix

2006-12-06 Thread Mathias Homann
Hi, I'm trying to use spamassassin 3.1.7 from within postfix 2.2.10 on a redhat ES4 server, (loosely) following the directions in http://www.debuntu.org/postfix-and-pamassassin-how-to-filter-spam (loosely, because 1. its redhat and nbot ubuntu, and 2. there's a kaspersky antivirus involved as w

Re: whitelist poisoned? spam getting through

2006-08-04 Thread Mathias Homann
Kelson Vibber schrieb: >> To: [EMAIL PROTECTED] > > Simple answer: don't whitelist your own address. Some spammers will do this > deliberately, hoping it will get them past filters. I understood as much, but how exactly do i do that, in terms of mysql-stored spamassassin user preferences? if i

whitelist poisoned? spam getting through

2006-08-03 Thread Mathias Homann
Hi, ohw can it be that the attached spam got through... the SA report says "user in whitelist", thus it gave the spam a really high negative score. How can that be, or rather, how can i stop it? bye, MH --- spam starts here --- Return-Path: <[EMAIL PROTECTED]> X-Sieve: cmu-sieve 2.0 R

Re: Way OT: What do you use for anti-virus (Linux)

2006-05-01 Thread Mathias Homann
Am Montag, 1. Mai 2006 21:18 schrieb : > I can say that the best, and most affordable, anti-virus package I > have ever used was RAV. Until is was bought out by Microsoft. I > have since been using ClamAV but it sure uses allot of RAM. > > What do you use? clamav. clamd uses some 2.8% of my

Re: relay distance and spam [was xxxl spam]

2006-04-11 Thread Mathias Homann
Am Dienstag, 11. April 2006 22:28 schrieb mouss: > [EMAIL PROTECTED] wrote: > > mouss wrote: > >> I would conjecture that most legitimate mail has two "real" hops > >> (the sending MTA and the receiving MTA). > > > > That would be one hop. > > depends on how you count: > > MUA -> my MTA1 -> y

on the value of SPF records (was: Re: Importance of SMTP gateway reverse lookup domain?)

2006-03-16 Thread Mathias Homann
Am Donnerstag, 16. März 2006 23:46 schrieb Michael Monnerie: > On Donnerstag, 16. März 2006 17:15 Stewart, John wrote: > > Aye; thanks. Unfortunately, our current external DNS server > > doesn't yet support SPF records. =( let me rant a bit about SPF records. Background info: my day job is fondl

is it just me, or is the overall spam volume going down lately?

2006-02-03 Thread Mathias Homann
Hi folks, since i've been running spamassassin, and doing daily logfile stats via spamstats.pl 0.6b, I was used to getting somewhat near 50% spam (meaning, half of around 500 mails per day were tagged as spam by spamassassin), but lately, maybe since a month or so, the daily percentage has dr

RE: how to configure SA to do nothing at all for one single user?

2006-01-18 Thread Mathias Homann
Bowie Bailey wrote: >> how do i tell SA on the other server not to touch my mails at all? >> SA is invoked from within qmail there. > > You would have to tell qmail not to invoke SA for your messages. > > But why is it a problem? When you run SA on your server, it should > automatically remove t

how to configure SA to do nothing at all for one single user?

2006-01-18 Thread Mathias Homann
Hi, i want spamassassin not to touch my mails at all. server in question runs SA with mysql for user config. reason: i fetch with fetchmail from there, and run my own SA on my own mail server. how do i tell SA on the other server not to touch my mails at all? SA is invoked from within qmail t

Re: FUZZY_MORTGAGE misfire.

2006-01-06 Thread Mathias Homann
Am Samstag, 7. Januar 2006 02:09 schrieb Craig McLean: > Dear list, > The attached message was nailed to the tune of 3.7 points by > FUZZY_MORTGAGE. Unfortunately it's a legit opt-in mailing thats what whitelisting is for. bye, MH

Re: OKAY I'am the black man !!!

2005-12-06 Thread Mathias Homann
Am Dienstag, 6. Dezember 2005 20:27 schrieb Chris Santerre: > --Chris (A lazy american wondering when the heck the second advent > is? ) last sunday. advent: the four last sundays before christmas eve. so, coming sunday will be 3rd advent. bye, MH -- gpg key fingerprint: 5F64 4C92 9B7

Re: Report SpamAssassing/Qmail-scanner activity ?

2005-11-28 Thread Mathias Homann
Noc Phibee wrote: > Hi > > a small question : > > Do you know if they have a utility for create a entry into mrtg > for count spamassassin result ? you might want to use munin instead of mrtg, it comes with spamassassin monitoring preconfigured... and it does other useful monitors as well. bye

automating spam handling

2005-11-28 Thread Mathias Homann
Hi, i want to automate my spam handling a bit further. here's what i got by now: - fetchmail gets mails from various pop3 accounts, injects into local mail system (postfix) - postfix pushes mail through clamsmtp and then through spamassassin - mail gets delivered into local cyrus imap which pu

Re: f-secure messaging security gateway x-series??

2005-11-23 Thread Mathias Homann
Am Mittwoch, 23. November 2005 23:11 schrieb jdow: > From: "Mathias Homann" <[EMAIL PROTECTED]> > > > "the ProofPoint Spam Detection (TM) module uses the ProofPoint > > MLX(TM) technology for automated learning (pat.p

f-secure messaging security gateway x-series??

2005-11-23 Thread Mathias Homann
Hi, at work, someone dropped a flyer about the product mentioned in the subject on my desk... seems to be one of those linux-based "appliances", meaning, 1U rackmount box running linux, a smtpd of unknown brand, a spam filter, and some f-prot based mail scanner... the leaflet itself is full

RE: Why did this mail get any score at all?

2005-11-04 Thread Mathias Homann
Pierre Thomson wrote: > If you are trying to minimize the score for your own bulk mailing, then you > should be I am not. I was just wondering about the scores that that mail has got, as well as a bit concerned about the fact that after upgrading to SA 3.1.0 i get all kind of weird results, f

Why did this mail get any score at all?

2005-11-03 Thread Mathias Homann
Hi, here's the headers of a mail that got scored (ok, not very high but it should get no score at all): Return-Path: X-Sieve: cmu-sieve 2.0 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on celebrimbor.eregion.home X-Spam-Status: No, score=1.7 required=5.0 tests

Re: Integrity checks in URLs for blocking phishers as anti-phishing prevention

2005-10-31 Thread Mathias Homann
Am Montag, 31. Oktober 2005 19:33 schrieb [EMAIL PROTECTED]: > > http://hacker.com";>http://legit-bank.com > > > > On top of my mind, I never saw a situation like this in real > > life, except in phish emails. > > I see this all the time in promotional emails (spam, not phish) to > track clickthrou

Re: [EMAIL PROTECTED]: Mail delivery failed: returning message to sender]

2005-10-30 Thread Mathias Homann
Am Sonntag, 30. Oktober 2005 08:38 schrieb [EMAIL PROTECTED]: > This domain is not a dialup and is a static IP address, and > completely traceable to me. It has also never been involved in > sending spam. If the anti-spam community start misbehaving the > future is indeed bleak. ==John ffitch i

strange problem with spamd on a suse 8.0

2005-10-27 Thread Mathias Homann
Hi, i've been running spamassassin sucessfully on a suse 8.0 with postfix and cyrus-imap for quite a while, but ever so often i hit the following snag: after a reboot, spamd wouldnt start. the init script i'm using: <-- cut --> #! /bin/sh # Copyright (c) 1995-2002 SuSE Linux AG, Nuernberg, Ge

Re: Hi, i have a good idea for a plugin/ruleset, where do i send it?

2005-10-21 Thread Mathias Homann
Am Freitag, 21. Oktober 2005 18:52 schrieb [EMAIL PROTECTED]: > Mathias Homann wrote: > > anyways, I'd love to be able to give scores to a mail if its from > > a given email address but it is not pgp signed. > > Sounds like three rules should do the trick. Pseudo-r

Re: Hi, i have a good idea for a plugin/ruleset, where do i send it?

2005-10-21 Thread Mathias Homann
Am Freitag, 21. Oktober 2005 17:57 schrieb [EMAIL PROTECTED]: > Mathias Homann wrote: > > Hi, > > I have a good idea for a plugin/ruleset, where do i send it? > > users@spamassassin.apache.org is a good place to assess how useful > it would be to the community. Is this s

Re: Accessing descriptions of spam tests

2005-10-21 Thread Mathias Homann
Am Freitag, 21. Oktober 2005 14:48 schrieb Iain Smith: > One of the reports is the top n most triggered spam tests. Does > anyone know of an easy way to access the description of a test? I > was hoping perhaps I could load one of the SpamAssassin modules and > call a function, a la $desc = getdes

Hi, i have a good idea for a plugin/ruleset, where do i send it?

2005-10-21 Thread Mathias Homann
Hi, I have a good idea for a plugin/ruleset, where do i send it? bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C