help with ubuntu 22.04

2024-06-29 Thread Rick Gutierrez
hi list , The latest version of spamassassin on Ubuntu 22.04 does not exist or they did not create the deb package, someone on the list who has the deb package and wants to share it. thnk for any help. -- rickygm http://gnuforever.homelinux.com

Re: Correct KAM.cf location?

2021-10-20 Thread Rick Cooper
the KAM.cf files so they will get used? -- Rick Cooper I.T. Manager - Bob Thomas Dealerships Cell 260-414-8566 Fax 260-434-4400 Email rcoo...@dwford.com

RE: Lint problem with KAM.cf

2021-09-02 Thread Rick Cooper
It lints fine now Rick _ From: Kevin A. McGrail [mailto:kmcgr...@apache.org] Sent: Wednesday, September 01, 2021 5:43 PM To: SA Mailing list Subject: Re: Lint problem with KAM.cf I published a fix for the KAM SHORT A few hours ago. Please let me know how it's working for you

RE: Lint problem with KAM.cf

2021-08-31 Thread Rick Cooper
the name of the module should have changed to prevent exactly this. sub short_url { # Set by parsed_metadata return 0; } which just copies the behavior of short_url_tests Rick _ From: Kevin A. McGrail [mailto:kmcgr...@apache.org] Sent: Monday, August 30, 2021 5:13 PM To: Rick

Lint problem with KAM.cf

2021-08-30 Thread Rick Cooper
's being merged directly into SA. If I change short_url to short_url_tests the error goes away but I haven't run it down in the code. I am running SA 3.4.6 and am wondering if there is a new modual for DecodeShortURLs that I am missing somewhere? Rick Cooper

RE: Mal formed urls

2021-02-25 Thread Rick Cooper
Bill Cole wrote: > On 25 Feb 2021, at 13:37, Rick Cooper wrote: > >> I was just working on some rules to catch the current crop of mal >> formed urls used to escape detection by solutions that extract urls >> from emails and compare them to known bad urls and I am wonder

Mal formed urls

2021-02-25 Thread Rick Cooper
o find out. Rick

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Rick Macdougall
Hi, Are you running sa-learn as the same user that spamd runs as ? Running sa-learn as root won't help the scores. Regards, Rick On 2020-10-11 10:03 a.m., Ramon F Herrera wrote: *Line of Defense No. 2:* Spamassassin. It have submitted over a thousand messages as follows: % sa-

RE: Why the new changes need to be "depricated" forever

2020-07-22 Thread Rick Cooper
Kevin A. McGrail wrote: > On 7/21/2020 9:25 PM, Loren Wilton wrote: >> I do strongly wonder whether this is "society" or only "people in the >> USA". > One data point disproves that.  The SA project made the choice months > ago inspired by a decision in the United Kingdom: > https://www.zdnet.com/a

RE: How to write a rule to block phishing?

2020-06-15 Thread Rick Cooper
mited once because we hadn't logged in for a long time. If it's legit it should list the reason and you can go to the actual PayPal site and work it out from there Just saying. Rick _ From: Daryl Rose [mailto:rosed...@gmail.com] Sent: Monday, June 15, 2020 7:

RE: Technically not spam

2020-05-29 Thread Rick Cooper
@lbutlr wrote: > How do people deal with lists that a user subscribed to that require > logging in to an account to unsubscribe? I seem to be seeing a lot > more complaints from users who cannot get off lists (probably because > they didn't realize they were creating an account for getting > multip

RE: Bounced messages

2020-05-20 Thread Rick Cooper
Phil Reynolds wrote: > On Tue, 19 May 2020 07:43:14 -0400 > "Rick Cooper" wrote: > >> I occasionally get emails warning me of bounced mail, this one >> doesn't go through we will send a probe, yada, yada. >> >> They say they include the

Bounced messages

2020-05-19 Thread Rick Cooper
email that would retrieve the messages that had bounced and I have every single one of them already... Every singled one. What is up with that? Rick

RE: UTF-7 emails

2020-05-07 Thread Rick Cooper
Brent Clark wrote: > Hi Rick > > Will you be willing to share your Exim and SA rules / code? > So that the community can benefit from your finding and work. > Pretty standard exim acl The DataWhitelisted portion is calculated from several other items so that would be up to

RE: UTF-7 emails

2020-05-05 Thread Rick Cooper
Henrik K wrote: > On Tue, May 05, 2020 at 12:51:36PM -0400, Rick Cooper wrote: >> We received a couple emails yesterday that barely got caught and >> when I looked at them they should have hit big time. As I looked it >> would appear the body parts are encoded q

UTF-7 emails

2020-05-05 Thread Rick Cooper
ode("UTF-7", $self->{'decoded'}); just before the decoded body is returned in Node.pm and the body rules hit again including some quick tests I put together. Is ignoring utf-7 intentional or is this a new spammer tactic? The actual email messages are rendered perfectly through ou

Re: Spoofed From: names

2020-04-11 Thread Rick Cooper
On April 11, 2020 3:08:15 PM EDT, RW wrote: >On Sat, 11 Apr 2020 19:58:02 +0100 >RW wrote: > > >> >> The first one was cited as a format used in forwarded ham. The other >> two are common in spam. >> >> The point of this spamming technique is that many clients show only >> the display name i

RE: Spoofed From: names

2020-04-11 Thread Rick Cooper
ot;m...@mine.com " vs "Fname Lname (va...@mine.com) (give or take the parenthesis). Because the second one is more commonalty used for valid purposes (hence needing the ability to whitelist and address or domain). The first example I have never seen used in a legit fashion myself. So if it hits The first rule that is a high hit, well above threshold and the second rule is bypassed (no double dip), Hit the second rule and it's a moderate bump. Rick

RE: Spoofed From: names

2020-04-09 Thread Rick Cooper
that do this. I could of course add a whitelist of sorts but I prefer to bump the score a bit, enough to tag as low scoring spam. For detecting possible fraud addresses involving our own people I wrote a backend look up for exim that looks at any name like "Rick Cooper" and compares th

Re: some warnings KAM.cf

2020-02-12 Thread Rick Gutierrez
El mié., 12 feb. 2020 a las 16:28, Kevin A. McGrail () escribió: > > Those are warnings to be expected as we develop the rules for our internal > use but share them free to the world. We encapsulate some rules only useful > in our environment and it can cause some noise if you look at debug warn

some warnings KAM.cf

2020-02-12 Thread Rick Gutierrez
Hi list , some warning for debugging Feb 12 10:23:37.065 [1452] dbg: config: warning: no description set for KAM_RPTR_FAILED Feb 12 10:23:39.113 [1452] dbg: rules: CBJ_GiveMeABreak merged duplicates: KAM_IFRAME KAM_RAPTOR_ALTERED KAM_RPTR_FAILED KAM_RPTR_PASSED KAM_RPTR_SUSPECT -- rickygm http

Re: Spamassassin RPM for Centos 7

2020-02-06 Thread Rick Gutierrez
El jue., 6 feb. 2020 a las 16:31, John Hardin () escribió: > > On Sat, 11 Jan 2020, John Hardin wrote: > > > On Thu, 9 Jan 2020, Amir Caspi wrote: > > > >> On Jan 9, 2020, at 6:59 PM, Rick Gutierrez wrote: > >>> > >>> Hi everyone, someone f

SA perl requirements

2020-01-14 Thread Rick Cooper
changed to comply with the stated 5.8.8 above? I know to fix this before running make test, but the errors this produces during make test could be quite confusing if you just ran into it. Rick

Re: rpm of centos

2020-01-11 Thread Rick Gutierrez
El sáb., 11 ene. 2020 a las 12:15, John Hardin () escribió: > > On Thu, 9 Jan 2020, Amir Caspi wrote: > > > On Jan 9, 2020, at 6:59 PM, Rick Gutierrez wrote: > >> > >> Hi everyone, someone from the list who can share the rpm of the > >> latest version

Re: rpm of centos

2020-01-10 Thread Rick Gutierrez
El vie., 10 ene. 2020 a las 9:10, Chris Conn () escribió: > > > > On 1/9/2020 10:10 PM, Amir Caspi wrote: > > SA 3.4.2 is available for Fedora, and you can build it from the SRPM pretty > > easily for RHEL/CentOS 7 or 6 with no modifications. > > > > Hello, > > I just built SA 3.4.3 on Centos8 usi

rpm of centos

2020-01-09 Thread Rick Gutierrez
Hi everyone, someone from the list who can share the rpm of the latest version of spamassassin for centos 7 and 6 of x64, I want to update to the latest version and I can't find the rpm. thank -- rickygm http://gnuforever.homelinux.com

Re: Where is SA getting config info?

2019-11-22 Thread Rick Macdougall
Hi, For the good of your blood pressure, just ignore h.rei...@thelounge.net I've plonked every thing from him into /dev/null so long ago I can't remember when I did it. Why he's still allowed to post here is beyond me. Regards, Rick On 2019-11-22 7:20 p.m., Jerry Malcol

RE: Rule for detecting two email addresses in From: field.

2019-10-03 Thread Rick Cooper
"Persons Name " > > Is there a way I can mark From: that has 2 email addresses in it as > spam? Pro's Cons? > > Phil From: =~ /^.*?<.+?\@.+?>.*?<.+\@.+?>/g Can't imagine the circumstance where such a from: format would be required Rick

Re: track messages

2019-03-27 Thread Rick Gutierrez
El mar., 26 mar. 2019 a las 10:39, Bowie Bailey () escribió: > > >> That looks to be far too complicated for most purposes, and reading back > >> and forth I don't think it's even intended for the standard spamd > >> logging; it's looking at log traces from some other SA library caller > >> entir

Fwd: track messages

2019-03-25 Thread Rick Gutierrez
El lun., 25 mar. 2019 a las 14:28, Grant Taylor () escribió: > > It looks like the spam-tag log may have part of what you want. > > awk '($7 == "spam-tag," && $11 == "Yes,"){print "From: " $8; print "To: > " $10; print "Score: " $12}' > > I don't know how well it will paly when you have multiple r

Re: track messages

2019-03-25 Thread Rick Gutierrez
El lun., 25 mar. 2019 a las 9:44, Kris Deugau () escribió: > That looks to be far too complicated for most purposes, and reading back > and forth I don't think it's even intended for the standard spamd > logging; it's looking at log traces from some other SA library caller > entirely. Can you po

track messages

2019-03-24 Thread Rick Gutierrez
Hi list , I need to do a trace of all the messages that spamassassin cataloged as spam yesterday, I have found a bash statement but I do not make it work, some idea that it may be failing, I am using centos 6 and spamassassin 3.4.2 grep "$(date +"%b %_d" -d "yesterday")" /var/log/maillog | grep 's

Re: problem with perl Net Patricia

2019-01-28 Thread Rick Gutierrez
El dom., 27 ene. 2019 a las 16:45, Bill Cole () escribió: > > That looks like a broken version of Net::Patricia. Line 34 of v1.15 > (March 2009) had a bug > (https://rt.cpan.org/Public/Bug/Display.html?id=48234) fixed in v1.15_01 > (July 2009). > > Note that this is NOT a SpamAssassin bug or funct

problem with perl Net Patricia

2019-01-27 Thread Rick Gutierrez
Hi list , I am using spamassassin 3.4.2 with centos 6.10, and when restart spamassassin it shows me the following message: Starting spamd: Use of uninitialized value $ 3 in concatenation (.) Or string at /usr/lib64/perl5/vendor_perl/Net/Patricia.pm line 34. some idea that may be causing that mess

RE: Phishing.pm

2019-01-21 Thread Rick Cooper
gt;> try Mail::SpamAssassin::Plugin::Phishing >> >> Cheers >> Giovanni > > man Mail::SpamAssassin::Plugin::Phishing > to be precise. >Giovanni Something that isn't answered in the docs is the default score and I am wondering if SA has to be restarted after each update of the data or does it reread each time the plugin is called Rick Cooper

Re: Is the SA Bayes implementation mathematically sound?

2018-12-24 Thread Rick Macdougall
On 2018-12-24 12:39 p.m., Ian Zimmerman wrote: On 2018-12-23 17:02, Rick Macdougall wrote: I'm just going to jump in here and mention that I train my bayes in SA and in Thunderbird email client. Thunderbird catches 99%+ and SA catches under 60% with the same training data. Have you

Re: Is the SA Bayes implementation mathematically sound?

2018-12-23 Thread Rick Macdougall
to SA rejecting emails. Regards, Rick

Re: Howto - Full Report in Mail Header

2018-12-20 Thread Rick Gutierrez
El jue., 20 dic. 2018 a las 10:36, Reindl Harald () escribió: > > > Am 20.12.18 um 17:26 schrieb Rick Gutierrez: > >>>>> add_header all Report _REPORT_ > > you got already the correct answer and since it is a header you need to > look at the raw-source of the

Re: Howto - Full Report in Mail Header

2018-12-20 Thread Rick Gutierrez
El lun., 17 dic. 2018 a las 8:37, Kevin A. McGrail () escribió: > > On 12/16/2018 4:35 PM, RW wrote: > > On Sun, 16 Dec 2018 08:30:58 -0500 > > Kevin A. McGrail wrote: > > > > > >> On Sat, Dec 15, 2018, 17:25 RW >> > >>> On Sat, 15 Dec 2018 22:26:17 +0100 > >>> sebast...@debianfan.de wrote: > >>>

Re: rule for docx o xlsx

2018-12-19 Thread Rick Gutierrez
El lun., 17 dic. 2018 a las 14:22, Benny Pedersen () escribió: > > why not block it with default clamav installs ? > > spamassassin is not a virus scanner or macro detector, i still have not > seen rules in mimedefang or amavisd, or canit, and other tools support > deep content scanners in spamass

Re: rule for docx o xlsx

2018-12-19 Thread Rick Gutierrez
El lun., 17 dic. 2018 a las 13:40, RW () escribió: > > Content-Type: > application/vnd.openxmlformats-officedocument.wordprocessingml.document, > > doesn't contain msword|excel Hi RW , you suggest me to make the modification? -- rickygm http://gnuforever.homelinux.com

rule for docx o xlsx

2018-12-17 Thread Rick Gutierrez
Hi list , happy holidays to all, I am trying to make this rule work that a friend wrote in github, to be able to give a high score to documents sent from different countries, like pakistan, china or india , I have it in my spamassassin and I do not see it working, to see if someone on the list help

Re: spoofing mail

2018-11-30 Thread Rick Gutierrez
El vie., 30 nov. 2018 a las 3:06, Matus UHLAR - fantomas () escribió: > And, yes, there could be rule that catches message-id added by internal > server. Note that: > - Message-ID is not required (has SHOULD in RFC) > - many mailservers add message-id if it doesn't exist. > > >> > >> https://past

Re: spoofing mail

2018-11-29 Thread Rick Gutierrez
El mié., 28 nov. 2018 a las 19:08, Reindl Harald () escribió: > > > > > these are the files that increase the score of the rule , If I'm > > missing someone, please someone guide me or update me if I'm doing it > > wrong. > > > > /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf

Re: spoofing mail

2018-11-29 Thread Rick Gutierrez
El jue., 29 nov. 2018 a las 10:18, David Jones () escribió: > > On 11/29/18 9:44 AM, Paul Stead wrote: > > I can't find MSGID_BELONGS_RECIPIENT in the standard distribution - I think > > this might be because my Plugin is installed. > > > > Another to get into branch? > > > > I think this one is w

Re: spoofing mail

2018-11-29 Thread Rick Gutierrez
El jue., 29 nov. 2018 a las 7:47, David Jones () escribió: > > Here's what my mail filters say. You can ignore the DKIM_INVALID > because the body was intentionally modified (redacted) to post to pastbin. > > X-Spam-Status: Yes, score=11.0 required=5.0 tests=BAYES_99,DKIM_INVALID, > DKIM_

Re: spoofing mail

2018-11-28 Thread Rick Gutierrez
in days past when I start this type of messages / spammer increase the score of this rule HEADER_FROM_DIFFERENT_DOMAINS=0.001 , add the score to 3, but keep the default 0.001 , update my spamassassin once a day, I'm using version 3.4.1. these are the files that increase the score of the rule , I

Re: spoofing mail

2018-11-28 Thread Rick Gutierrez
El mié., 28 nov. 2018 a las 6:03, Christian Grunfeld () escribió: > > Hi, > > this is a logcould you paste the email headers? > > cheers > I do not know if it is useful, the amavisd + spamassassin I have it in front of the mail server. https://pastebin.com/ktMUDLps I appreciate any comments o

Re: spoofing mail

2018-11-27 Thread Rick Gutierrez
El mar., 27 nov. 2018 a las 16:22, David Jones () escribió: > > Can you send a copy of the original email lightly redacted via pastebin > so I can run it through my filters to give some pointers? > > -- > David Jones Hi David , the email is very simple, but I attach it in the following link http

Re: spoofing mail

2018-11-27 Thread Rick Gutierrez
El mar., 27 nov. 2018 a las 11:54, Alan Hodgson () escribió: > > > > Malware/phishes are usually either in an attachment or the message has a > link. Personally I add a lot of points to either if they come through > questionable countries. Users can dig them out of their Junk if they happen > t

Re: spoofing mail

2018-11-27 Thread Rick Gutierrez
El mar., 27 nov. 2018 a las 11:14, Alan Hodgson () escribió: > > Wow, that's hard to read. > > It was close to being tagged because of the Pakistan relay. Just add a few > points for Word docs and you should be good. Word docs from spammy countries > should really get a lot of points. Hi Alan ,

spoofing mail

2018-11-27 Thread Rick Gutierrez
Hi , I have a situation a little complicated, I have emails from spammers that come with the name of one of my users, but the email address is not from my domain , they send it from a valid domain, which complies with spf, DKIM etc etc, some idea that could help me to adjust my spamassassin and sto

RE: Major DNS issues since 3.4.1 upgrade

2017-04-14 Thread Rick
Bill Cole wrote: > On 14 Apr 2017, at 16:54, Rick wrote: > >> Everything having to do with DNS has gone terribly wrong since the >> update. Spamd cannot do anything at all with DNS even though it's a >> local caching NS and EVERTHING else is resolving just fine. It

Major DNS issues since 3.4.1 upgrade

2017-04-14 Thread Rick
Everything having to do with DNS has gone terribly wrong since the update. Spamd cannot do anything at all with DNS even though it's a local caching NS and EVERTHING else is resolving just fine. It does pull the name server entry correctly but it resolves nothng. If I force it use DNS all queries

RE: TXREP dont work

2016-10-07 Thread Rick Cooper
Karol Augustin wrote: > On 07/10/16 03:51, Rick Cooper wrote: >> So how do I dump the ~/ disk file for the DB . The txrep.cf file : >> >> user_awl_dsn DBI:mysql:SpamAssassin:127.0.0.1 >> user_awl_sql_username CorrectUser >> user_awl_sql_password CorrectPas

RE: TXREP dont work

2016-10-06 Thread Rick Cooper
DB . The txrep.cf file : user_awl_dsn DBI:mysql:SpamAssassin:127.0.0.1 user_awl_sql_username CorrectUser user_awl_sql_password CorrectPassword user_awl_sql_table txrep use_txrep 1 txrep_track_messages 1 Thanks for any help, Rick

Re: New Install - Tons of Spam Getting Through

2016-08-18 Thread Rick Macdougall
irst issue resolved and can start training myself? Here is a pastebin.com link to an example uncaught spam message. SA scored it a 4.7. http://pastebin.com/T1CfVgP4 Hi, We are going to need the full headers, not just the email body. Regards, Rick

Re: SA cannot block messages with attached zip

2016-05-20 Thread Rick Macdougall
On 2016-05-20 11:00 AM, Reindl Harald wrote: Am 20.05.2016 um 16:50 schrieb Rick Macdougall: On 2016-05-20 10:36 AM, Paul Stead wrote: Second, the foxhole_js database is what you're looking for Paul On 20/05/16 13:11, Reindl Harald wrote: Am 20.05.2016 um 13:07 schrieb Dianne Skoll

Re: SA cannot block messages with attached zip

2016-05-20 Thread Rick Macdougall
24631.XlsHeur.UNOFFICIAL 623 Sanesecurity.Jurlbl.Auto.87287f.UNOFFICIAL 414 winnow.spam.ts.xmailer.2.UNOFFICIAL 341 Sanesecurity.Jurlbl.Auto.a33ccf.UNOFFICIAL 283 Sanesecurity.Jurlbl.Auto.aaeaca.UNOFFICIAL 157 Regards, Rick

Re: Try my IXHASH

2015-12-10 Thread Rick Macdougall
On 2015-12-09 11:58 AM, Marc Perkel wrote: On 12/09/15 05:50, Rick Macdougall wrote: Hi, The messages it flags are messages that would have been caught without it. About 2% of messages it flags are not seen by any other markers. Regards, Rick Any false positives? I suppose catching

Re: Try my IXHASH

2015-12-09 Thread Rick Macdougall
On 2015-12-08 9:46 PM, Marc Perkel wrote: I'm confused. Are you saying it's catching the same spam messages you about the same amount? If they are new messages then it's doing well. On 12/08/15 12:43, Rick Macdougall wrote: Hi, Quick and dirty look. grep CTYME_IXHASH /var/lo

Re: Try my IXHASH

2015-12-08 Thread Rick Macdougall
. Regards, Rick On 2015-12-08 3:32 PM, Marc Perkel wrote: I'd like to get a sense from everyone how well it works. Is it hitting spam other tests aren't hitting? Are there false positives? On 12/08/15 05:57, Reindl Harald wrote: Am 08.12.2015 um 14:37 schrieb Alex: On Sun, Dec 6,

Re: spamassassin logging

2015-09-17 Thread Rick Macdougall
Hi, That information should be in the spamd log file. I don't know which Toaster you are using but mine is in /var/log/spamd/current Regards, Rick On 9/17/2015 3:27 PM, Rajesh M wrote: hi we are using qmailtoaster with spamassassin currently the spamassasin log details show as suc

whitelist filter not matching

2015-03-13 Thread Rick Hantz (TirNanOg)
For some reason, whitelist_from *@*.usps.gov whitelist_from *@*.usps.com doesn't work on the header below. Anyone spot something that I missed? Received: from mailcentral12.srvs.usps.gov ([56.0.143.18]:47963 helo=gk-c18-email.usps.gov) by coeus.lunarmania.com with esmtps (TLSv1:DHE-RSA-AES

RE: whitelist_from in user_prefs is not being processed.

2015-03-13 Thread Rick Hantz (TirNanOg)
2015 11:23:33 -0700 Rick Hantz \(TirNanOg\) wrote: > > However, none of the whitelist seems to get processed. Mail that > should have a high negative number doesn't and ends up in the spam > folder. > > whitelist_from 23andme.com > ... > whitelist_from *.aarp

Re: whitelist_from in user_prefs is not being processed.

2015-03-12 Thread Rick Hantz (TirNanOg)
In my user_prefs file, I have: (see resulting header below) whitelist_from mailto:*@sailthru.com whitelist_from mailto:*@e.washingtonpost.com Do I also need whitelist_from mailto:*@*.sailthru.com ? Appreciate all the help. -RickH Return-path: Envelope-to: rickhan!!tirna

whitelist_from in user_prefs is not being processed.

2015-03-12 Thread Rick Hantz (TirNanOg)
obytel.com whitelist_from boldprogressives.org whitelist_from *.care2.com whitelist_from *.charbroil.com whitelist_from cnet.online.com whitelist_from *.consumerlab.com whitelist_from *.costco.com whitel . Any ideas or workarounds? Thanks, Rick

Re: sa-update cron failure

2015-02-05 Thread Rick Macdougall
Hi, First HPUX 900 certified admin in Canada circa 1982. I too remember those days. Regards, Rick PS. Still under 50 :) Sent from my iPad > On Feb 5, 2015, at 7:37 PM, Martin Gregorie wrote: > >> On Thu, 2015-02-05 at 16:06 -0700, Bob Proulx wrote: >> >> Not q

Re: Heads Up: Yahoo! goof

2015-02-05 Thread Rick Macdougall
Hi, FTR = for the record as far as I know. Regards, Rick Sent from my iPad > On Feb 5, 2015, at 5:51 PM, Alex Regan wrote: > > > >> On 02/05/2015 11:11 AM, Axb wrote: >> >> adding FTR: > > Can you explain FTR? > >> Received: from [238.10.216

Re: sa-learn from a remote imap folder

2014-09-12 Thread Rick Macdougall
On 2014-09-12 1:24 PM, John Hardin wrote: On Fri, 12 Sep 2014, Reindl Harald wrote: Am 12.09.2014 um 15:26 schrieb Giles Coochey: On 12/09/2014 13:47, Rick Macdougall wrote: I have used imap-sa-learn.pl for years. Works great. Google imap-sa-learn.pl to get the perl source code

Re: sa-learn from a remote imap folder

2014-09-12 Thread Rick Macdougall
years. Works great. Google imap-sa-learn.pl to get the perl source code. Regards, Rick

Re: Filters Don't Seem to Be Learning

2014-07-23 Thread Rick Macdougall
On 2014-07-23 3:05 PM, Asai wrote: Hi, I'm also not seeing any BAYES results in the Spam Status. Are you sure BAYES is turned on ? Regards, Rick That's a good question. As far as I can tell, it is. But is there a way to get a config dump from the command line? I have a fe

Re: Filters Don't Seem to Be Learning

2014-07-23 Thread Rick Macdougall
S results in the Spam Status. Are you sure BAYES is turned on ? Regards, Rick

Re: Who wants to trade data?

2014-02-06 Thread Rick Macdougall
Err, I have received automated emails from Mark's service multiple times about compromised users. He and his services are definitely white hat, and have helped us knock infected users off line. Not sure what your problem is. Regards, Rick Sent from my iPad > On Feb 6, 2014, at

RE: Spamassassin with single link in body

2013-07-06 Thread Rick Cooper
t was legit but only had one link, I believe the OP wants to match a body that is blank except for a single url and I found no way to do that without writing a custom plugin Rick

RE: "Chain" rules?

2013-06-25 Thread Rick Cooper
Andrew Talbot wrote: > This is what I was wondering. We don't want to have to run a > computationally-expensive body rule unless we need to. No choice > though, I guess. Thanks for your help! > > >> -Original Message- >> From: John Hardin [mailto:jhar...@impsec.org] >> Sent: Monday, June

Re: MariaDB instead of MySQL

2013-05-16 Thread Rick Macdougall
an ISP. regards, Rick Sent from my iPad On 2013-05-16, at 8:02 PM, Alex wrote: > Hi, > >> Running a 4 server cluster of SA servers with MySQL running on one. 2 >> running auto learn and the other two just >> doing queries. Looks like I average about 6300 queries a mi

Re: MariaDB instead of MySQL

2013-05-16 Thread Rick Macdougall
to hear other reports. Regards, Rick Sent from my iPad On 2013-05-16, at 6:59 PM, Marc Perkel wrote: > In the past I have never managed to get bayes to work with MySQL in a > reliable way. Even running in ram it would die of some sort of corruption > after a few hours. > >

Bayes Data Base

2013-05-10 Thread Rick Cone
Hello, I was curious if somebody out there publishes a Spamassassin Bayes SPAM/HAM data base that someone could buy or subscribe to? If so, please provide details if known. Thanks, Rick

RE: sa-lean

2013-04-29 Thread Rick Cone
the email and select the "Move" option, it also has a "Copy to Folder" option. Can we just "copy to Folder" the good emails to the "ham" IMAP email user? Rick -Original Message- From: Matus UHLAR - fantomas [mailto:uh...@fantomas.sk] Sent: Monda

RE: sa-lean

2013-04-29 Thread Rick Cone
27;m reluctant to make some big email switch from POP to IMAP, as it appears you need lots of storage on the email server for that (is that true?). Any suggestions? We use the Bynari Insight Server, and their support is a bit limited on this older product. Thanks! Rick -Original Message--

sa-lean

2013-04-28 Thread Rick Cone
Hello, I have spamassassin available for use in a POP environment with Outlook 2010. We don't use IMAP. How would someone recommend getting the SPAM and HAM information to sa-learn? Thanks, Rick

RE: Hot News

2013-03-15 Thread Rick Cooper
ar. I also find that there are *several* common traits within the body of the web pages, for instance a fox news copyright, specific class names and links names such as 'Home' (remove the --) If anyone has a chance to verify this, especially the 404 without a user-agent string I would think something could easily be done with a custom plug-in to detect that. Oh, and they all do a 301 or 302 redirect at the intial request Rick

Re: Specify the user homedir in a non-standard setup (ISP)

2012-02-27 Thread Rick Macdougall
ehow to teach SA to get configs from a "dummy" dir. How can I do that? is only doable with patches? of course, looking at them would be awesome :) Cheers, Hi, Storing the user prefs in sql would make it easy to access. Just depends on how the users access their prefs. Regards, Rick

Re: Yahoo sent 5.5x as much spam as any other legit provider in April

2011-05-11 Thread Rick Macdougall
1.4% hotmail.com Interesting. Here, it's hotmail servers sending over 57% of the spam. I wonder if they are so low on that list because the list the actual senders IP as the origination point. Regards, Rick

DOB RBL

2011-04-29 Thread Rick Wesson
week. apologies for any inconvenience and poke me if you have questions or suggestions for the service. best, -rick

Re: [OT] If you can read french please...

2011-04-11 Thread Rick Macdougall
;t find the server at devel.debian.tamay-dogan.net. Regards, Rick

Re: spamassassin or simscan ???

2010-07-27 Thread Rick Macdougall
. If you want to scan authenticated users you will need to recompile simscan adding the --enable-spam-auth-user=y configure value. You can find your old configure options in config.log and then just add the --enable-spam-auth-user=y at the end. Regards, Rick

Re: spamassassin or simscan ???

2010-07-27 Thread Rick Macdougall
On 27/07/2010 1:21 PM, Suhag P Desai wrote: Thanks Rick, Now my tcp.smtp file looks like below [r...@spd tcprules.d]# cat tcp.smtp 127.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/q mail/control/domainkeys/%/private" 192.168.10.:allow,R

Re: spamassassin or simscan ???

2010-07-27 Thread Rick Macdougall
an" :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="5",CHKUSER_WRONGRCPTLIMIT="10",DKSIGN="/var/qmail/control/domainkeys/%/private" Hi, You need a .QMAILQUEUE="/var/qmail/bin/simscan" on the last allow line to enable simscan on incoming mail. Regards, Rick

Re: Worthwhile to scan outgoing?

2010-06-21 Thread Rick Macdougall
here currently scanning their outgoing mail with SA? Good results? Bad results? Hi, We, a mid sized ISP, virus scan all outgoing mail and SA all non AUTH'd outgoing mail. Just FYI. Regards, Rick

Re: Question URIBL

2010-04-08 Thread Rick Macdougall
ons ? Perhaps you have disabled network tests. Regards, Rick

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
estigation. Regards, Rick

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
On 24/03/2010 2:40 PM, Michael Scheidell wrote: On 3/24/10 2:23 PM, Rick Macdougall wrote: Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
On 24/03/2010 2:40 PM, Michael Scheidell wrote: On 3/24/10 2:23 PM, Rick Macdougall wrote: Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers

Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
vance. Rick

RE: Off Topic - SPF - What a Disaster

2010-02-26 Thread Rick Cooper
Original Message From: Marc Perkel [mailto:m...@perkel.com] Sent: Thursday, February 25, 2010 6:11 PM To: Rick Cooper Cc: 'ram'; users@spamassassin.apache.org Subject: Re: Off Topic - SPF - What a Disaster > Rick Cooper wrote: >> >> >>> The anti-S

RE: Off Topic - SPF - What a Disaster

2010-02-25 Thread Rick Cooper
>>> From: Marc Perkel [mailto:m...@perkel.com] Sent: Thursday, February >>> 25, 2010 12:30 PM To: ram Cc: users@spamassassin.apache.org Subject: >>> Re: Off Topic - SPF - What a Disaster >>> ram wrote: >>> On Tue, 2010-02-23 at 18:33 -0800, Marc Perkel wrote: >> Jeff Koch wro

RE: Block Spammers Spoofing My Domain

2010-02-25 Thread Rick Cooper
il, period. In my case if you break the helo with my name rule You are instantly added to the firewall for a week. Rick -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

Re: how can i finetune to spamassassin to handle spams

2010-01-28 Thread Rick Macdougall
d, if needed, run sa-compile. Rick

  1   2   3   4   5   6   >