Re: use passwd file to control senders

2009-11-13 Thread Mike Cappella
FYI: On 11/13/2009 12:22 PM, Martin Gregorie wrote: However, the docs don't say whether its checking the envelope sender and/or the From: header. man 5 access: DESCRIPTION This document describes access control on remote SMTP client information: host names, network addresses

Re: [SA] sneaky pharma spam shooting past standard rules

2009-10-16 Thread Mike Cappella
ROM scoring at 0.6 for now: The high score ensured a forced quarantine, where manual inspection validated the results. 0 is indeed a very low FP, at least on our server over the course of several years. I agree, its best to reduce that freakish score for mass use. :-) # @Mike Cappella on sa

Re: Converting spam to email message

2009-08-27 Thread Mike Cappella
Mr. Student, On 8/27/2009 11:54 AM, MySQL Student wrote: Hi, I thought I understood, but I'm still having trouble converting a message in the quarantine back into a normal email message that I can forward on to a recipient. Does anyone know how to do this? Probably best answered on amavis us

Re: L_TAB_IN_FROM (was: derogatory subject excised)

2009-08-22 Thread Mike Cappella
On 8/6/09 11:44 PM, Henrik K wrote: Pretty good here.. OVERALLSPAM% HAM% S/ORANK SCORE NAME 024942799550.238 0.000.00 (all messages) 0.676 2.7504 0.02880.990 0.000.01 T_TAB_IN_FROM For some reason all the FPs appeared to come throu

Re: sa-update: stuck at 795855? [ off topic ]

2009-08-18 Thread Mike Cappella
[ off topic ] On 8/18/2009 1:00 PM, Toni Mueller wrote: Apart from not understanding "flynn", I think I get what you want to An famous old saying, in reference to Error Flynn [1], the swashbuckling, Aussie-American actor, meaning "everyhing is OK" [2]. [1] http://en.wikipedia.org/wiki/Erro

Re: Geniuses at expedia.com

2009-08-07 Thread Mike Cappella
On 8/6/09 11:44 PM, Henrik K wrote: Pretty good here.. OVERALLSPAM% HAM% S/ORANK SCORE NAME 024942799550.238 0.000.00 (all messages) 0.676 2.7504 0.02880.990 0.000.01 T_TAB_IN_FROM For some reason all the FPs appeared to come throug

Re: Geniuses at expedia.com

2009-08-06 Thread Mike Cappella
On 8/6/09 6:31 AM, Mark Martinec wrote: No it doesn't. Header fields names are case-insensitive. A space after : is shown in every example in 2822, but I don't see a requirement that it be there. It is extremely unusual not to see it. There is no requirement for a space after a colon. (but

Re: Number of rules

2009-07-31 Thread Mike Cappella
Dennis, On 7/31/2009 8:36 AM, Dennis B. Hopp wrote: I couldn't get sa-stats to give me any useful information. I did get amavis-logwatch and I am not sure if I like what it's showing me. I ran it against the last few maillogs I have so it encompasses basically the last month. Here is the relev

Re: Lotto/Money & email address spam

2009-07-23 Thread Mike Cappella
Hi Karsten, On 7/23/2009 10:00 AM, Karsten Bräckelmann wrote: On Thu, 2009-07-23 at 09:22 -0700, Mike Cappella wrote: Just as an FYI. I have had (only) one experience where a positive download contained a corrupted SOUGHT rule file, and an amavis restart failed. What exactly do you mean by

Re: Lotto/Money & email address spam

2009-07-23 Thread Mike Cappella
On 7/23/2009 3:34 AM, Karsten Bräckelmann wrote: Yes. SA will use the updates as provided by sa-update, when available. All you need to do is to restart your daemon, IFF there have been any updates. Just as an FYI. I have had (only) one experience where a positive download contained a corrup

Re: sa-stats.pl and SpamAssassin 3.2.4

2009-07-22 Thread Mike Cappella
On 7/22/2009 10:57 AM, MySQL Student wrote: Hi, Are spamd and amavisd-new mutually exclusive? I'm also trying to use sa-stats.pl, and it is reporting zeros because I've just learned it relies on spamd, which I'm apparently not using. Try amavis-logwatch too. Since you're running amavis, you