-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Sander Holthaus wrote:
> Theo Van Dinter wrote:
>> On Thu, Jan 18, 2007 at 01:59:47AM +0100, Sander Holthaus wrote:
>>> But how do I do this for just one specific language? I use the
>>> TextCat
>> ok_languages nl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theo Van Dinter wrote:
> On Thu, Jan 18, 2007 at 01:59:47AM +0100, Sander Holthaus wrote:
>> But how do I do this for just one specific language? I use the
>> TextCat
>
> ok_languages nl
>
>> in _LANGUAGES_, so
q 'nl' (bit silly to use /^nl$/). But I can't seem to
find anywhere how to put that in a rule,
since they all check aganiast things like header, body, full, etc.
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: G
e, it would still be qualified
as SPAM. Bayes seems to be a problem too, and could be a sign of more
wider problems (poisoned Bayes database?)
> Where's the !all in that record.. I don't see it.. do you?
I still find it odd that a bank does not have more stringent
SPF-records. I expec
ersions, perl-thingy's, mail-volume, etc)
Kind regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32)
iD8DBQFFo5eKVf373DysOTURAomlAKDkolQpoDvZU9d/5jj0Mey8e/9gmACfZne/
Wb/L266XkBdaFugU58tMAU4=
=bFvr
-END PGP SIGNATURE-
be in trouble.
But you can always check your IP's against the ZEN-blocklist
(something you should do or automate in any case) and optionally
request an unblock.
Kind regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32)
iD8DBQFFoPQlVf373DysOTURAtndAJ43gqebGdVC30MZuY72af/lbJi/JwCfbcow
eN3bLCECkT+kN4twRXdajaw=
=k16z
-END PGP SIGNATURE-
or an
account/domain are somewhere in the body of the bounce (body of the
bounce usually include headers of the original message). If you can't
find any of your relays, it is almost certainly a false bounce. Using
something like SPF for your domains might help too btw. And make sure
to avoid catc
using /var/lib/ is desired
behavior, even though I personally never seen a package on FreeBSD
using /var/lib/ and it is slightly confusing at first. But using /var/
does make more sense.
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32)
iD8DBQFFmpTEVf373DysOTURAnnWAJ97EsPW1Qao3YyYLdhGEgRdNDRl3wCgiPe6
Du2h1zxgRkilDbrcAZwS6cs=
=fdS4
-END PGP SIGNATURE-
both the trusted and internal
networks. In fact, it is hard to imagine an environment where
127.0.0.1 is neither trusted or internal, as it is the host running
spamassassin or it refers to an external trusted host.
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (M
catching). It's pretty small (about 1/6
> of what zen catches).
>
> I'm also contemplating adding dul.dnsbl.sorbs.net.
>
> I tend to put the newest (to me) rbl first, so I can see what it's
> actually catching before the stuff I was already using :-)
>
>
so I did comment it out
but I am still
> get the error.
>
You really really really need to read the documentation.
People are here to help you and more than willing to, but it is very
impolite to ask questions without reading the docs first (and getting
a basic understanding of SpamAssassin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John Rudd wrote:
> Michael Scheidell wrote:
>>> -Original Message-
>>> From: John van Oppen [mailto:[EMAIL PROTECTED]
>
>>> Is there a test that already does this?
>>
>> SPF
>
> I sure hope the SPF module is NOT using the HELO string for
> che
sing X-Qmail-Scanner in the above list (SpamAssassin 3.1.7)
Does anyone know of a good online resource of AntiSpam headers +
examples or has anyone got a recent up-to-date list themselves?
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Versi
he database and start over. A poisoned
Bayes-database will get you in trouble. Before enabling auto-learn,
make sure your spamassassin configuration performs well without Bayes.
I would also suggest to keep an eye on what is auto-learned the first
few days / weeks (depends on the traffic you
m/downloads/public/TheSpamMessage.txt
>
> Also, I even saw in the header that it Autolearned it as HAM - so
> this may be even worse, isn't it?
>
> Any help is highly appreciated.
>
> Thank you
>
> Christoph
>
> On 05.06.2006, at 13:24, Anthony Peacock wrote:
>
>> H
istoph Reichenberger --Christoph Reichenberger - ergonis
> software gmbh
>
>
>
>
Training Bayes to catch there kind of messages is difficult. Your best
bets are to use some rule-sets from SARE (www.rulesemporium.com) and
make sure you use several network tests (rbl's, surbl
the best way. It should be
learned with Spam that is specific for your mail-accounts (or better,
on a per account basis).
SARE has some very good rules. The SpamAssassin Wiki should help you
out further.
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (MingW32)
>
> mfg zmi
Are you sure that is a valid OE-email? Doesn't appear to me as such,
hence I'd say the tests fired correctly.
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (MingW32)
iD8DBQFELSMqVf373DysOTURAt4wAJ4mS4RgB8yVAcSmA97f69bh/ov1JgC
he server sender are "192.168.10.250"
>
>
>
>
> Thanks for your help,
>
To mark it as ham or as spam??? Read the manual section on black- and
whitelisting, it should get you pretty far.
Kind Regards,
Sander Holthau
IL PROTECTED]> is not spam, stop to change its subject"
> =)
You should read the manual to set some specific options such as
whitelisting. But, why are they tagged as SPAM? It usually has a
reason :-)
Kind Regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (
authenticate
users. In small, closed, trusted environments it can be useful, but in
most situations, I don't think it will be usable. The nice thing about
using an IMAP-based sollution is that the user is authenticated
(provided you set it up correctly).
Kind Regards,
Sand
adding GMT Standard
Time, but it shouldn't be done on email. Your ISP should follow the
RFC's and SpamAssissin is correct in marking it as an invalid date.
The RFC speaks for itself, it clearly says how time-zones should be.
ail
X-JunkFolder
X-Message-Status
X-SID-PRA
X-SID-Result
X-Message-Info
if you're using the webmail-extension and a few other extensions...
If you look back on the maillinglist, you should be able to find a
discussion on using IMAP-folders to train SA.
nforcement or double reverse DNS-lookup. Lots less spam and lots
more false positives.
Kind regards,
Sander Holthaus
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (MingW32)
iD8DBQFEIIgwVf373DysOTURAvNHAKCbMYrYRR5Ei7Zrwbi+sDsEb4ru0ACdEu9Z
cmlVUP4MFEXf4bjtL6Avw28=
=o24w
-END PGP SIGNATURE-
I did some more digging, and I also find the following entry several times
in the maillog:
prefork: select returned undef! recovering
Spamd is currentlty die-ing twice a day :-| Never had any problem with any
other version in this regard...
Kind Regards,
Sander Holthaus - Orange XL
of
such problems with SpamAssassin 3.0.x or 2.xx
I'm using
SpamAssassin on FreeBSD 4.10 with Perl 5.8.5 installed.
Kind
Regards,
Sander
Holthaus
option follow-url's).
Kind
Regards,
Sander
Holthaus
shouldn't be too hard to
recognize this site.
Kind
Regards,
Sander
Holthaus
From: Greg Allen
[mailto:[EMAIL PROTECTED] Sent: Sunday, August 28, 2005 12:19
PMTo: satalk; users@spamassassin.apache.orgSubject: RE:
phish/bayes
I
wouldn't worry about it. You
s are quite wide. Beside the actual code that
calls Pyzor/DCC, the also contain or other bits, meaning they can time out
even though the called app ran succesfull (but took long, but still less
than the specified timeout by the user).
Kind Regards,
Sander Holthaus
Dan Kohn wrote:
> Justin said:
>
>> - - Razor: disable Razor2 support by default per our policy, since
>> the service is not free for non-personal use. It's trivial to
>> reenable.
But is that correct? As far as I can know, it is free to use for
non-person
URIBL_JP_SURBL ( 57%)
DCC_CHECK ( 57%) <--
URIBL_SBL ( 54%)
URIBL_SC2_SURBL ( 51%)
URIBL_OB_SURBL ( 51%)
URIBL_XS_SURBL ( 47%)
Kind Regards,
Sander Holthaus
(but only
sometimes), it will change the owner of one of the bayes_ files or
bayes.mutex to root. :-?
Sander Holthaus
Dan Mahoney, System Admin wrote:
> On Tue, 9 Aug 2005, Craig McLean wrote:
>
> I applied the patch, and it fixed things on my end. I noted
> in my PR that it was also odd
tty sure Google can answer your question much faster and better than
this maillinglist btw ;-)
Kind regards,
Sander Holthaus
PS: Sorry for the short answer, but answering it completely would be
somewhat offtopic and long. More important, you will learn much more by
finding the answer yourself (including learning how to find answers :-) ).
AGS ( 31%)
RCVD_IN_NJABL_DUL ( 30%)
Kind Regards,
Sander Holthaus
asy on FreeBSD through the ports-system. (Be aware
though that some installed modules may need to be re-upgraded/re-installed,
though I believe they made some changes to the perl-port recently to do this
automatically.)
Also upgrade to a recent version of Net::DNS (0.52+).
Personally, I would use Razor2 too. It has an excellent spam-detection
ratio, much better than rbl's/uribl's.
Kind Regards,
Sander Holthaus
ght help your problem and you can whitelist the sender. But
with a 2.0 point-level for spam, you'll always gonna have some FP's.
Kind Regards,
Sander Holthaus
lear, but the best way would to just keep an eye one it, and
clean it when you notice there are too many one-time entries.
Do something like ' | grep "/1)
--" | wc -l' to count the one time-entries.
Kind Regards,
Sander Holthaus
("man ") for commands
such as ps, grep, awk, sed, sort, ls, etc. Mastering the basic *nix commands
can make your live a lot easier and save you a lot of time googling or
scouring/posting mailinglists ;-) If your are serious about spamassassin
and/or system administration, some reference
stop them, your best option is to use them. Where they live
depends on your platform and distribution, use the supplied documentation, the
man command and google to find out exactly where. If you don't want it to run at
all at bootup, disable the script (various ways of doing
that).
Kind
JamesDR wrote:
> Chavdar Videff wrote:
>> Hi List,
>>
>> Our mailserver server serves about 100 users. Our config:
>> Sendmail+Procmail+SpamAssassin.
>> The question is:
>> If I got it right, we should run sa-learn for each user in order to
>> benefit from bayes. We intend to run a cron job for ea
t; Is this a misconfiguration on my part, Should I be concerned?
No, those last two are in your working-dir of FreeBSD's port-directory. Go
to /usr/ports/mail/spamass-rules/ and do "make clean". They will disappear.
Persnally, I don't use that port, though I do use some of it's rulesets.
Best way is to install a script that updates your custom rules-sets on a
more regular basis (though only a few actually need that).
Kind Regards,
Sander Holthaus
le spam
to which doesn't require filtering nor anything like AWL(learning or
Bayes(learning)).
Kind Regards,
Sander Holthaus
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Friday, July 08, 2005 12:33 AM
> To: Theo Van Dinter
> Cc: users@spa
> I downloaded many of the SARE rulesets (not bigevil
> however), and I am running "spamassassin -D --lint". It
> seems like it is taking a very long time to run. Is this
> typical or am I "hosed"? I am running it on a test system
> (non-production) so it is not currently a serious problem,
> Hi,
> These are the lines in my local.cf:
>
> bayes_path /home/sharedspam/.spamassassin/bayes
> auto_whitelist_path /home/sharedspam/.spamassassin/auto-whitelist
> bayes_file_mode 777
> auto_whitelist_file_mode 777
> lock_method flock
777 is rather insecure... What's the output of ls -al on
ue. They talk about personal use and about commercially
embedded software, but where does this leave and ISP? It also means that
anyone not paying license fee's has absolutely no guarentee that the service
will remain reliable.
Kind Regards,
Sander Holthaus
File-permission issue?
From: Michael [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 05, 2005 6:21 PMTo:
users@spamassassin.apache.orgSubject:
autolearn=failed
When I receive spam msgs I have this line in
headers autolearn=failed .I tried to look it on wiki but I couldn't
gards,
Sander Holthaus
> -Original Message-
> From: Ronan McGlue [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 05, 2005 6:48 PM
> To: SPAMASSASSIN
> Subject: dcc / razor
>
> what is the official stance on using razor/dcc for not personal use.
> I've loo
er thing, you might want to check your DNS-server(s) and verify it's
results. I've had a similar problem recently and it turned out the
DNS-server was bricked.
Kind Regards,
Sander Holthaus
PS: This message doesn't really belong on the SpamAssassin mailinglist...
rsion or related modules
your are using. Some are actually quite old and have known bugs in them
which can lead to endless loops.
Before submitting a bugreport, upgrade perl and related modules to their
latest versions. Also save your db-files and the related messages (which can
be handy if it is indeed an unresolved bug).
Kind Regards,
Sander Holthaus
PS: What OS and which Perl-version are you using?
> On Fri, Feb 11, 2005 at 10:37:06AM -0500, Chris Santerre wrote:
> >
> > >
> > >> > 4) Can you share the output from a --lint with us?
> > >> $ spamassassin --lint
> > >> [EMAIL PROTECTED]:~$
> > >
> > >What about spamass
Is there anything specific with the message? (well, there most likely is :-)
). What kind of message is it? Are Perl and all related modules up to date
with latest versions? What is the absolute last message that is logged?
Kind Regards,
Sander Holthaus
> -Original Message-
> From
it be wise to re-add SARE_FRAUD as a extra ruleset to
> >SpamAssassin?
> >
> >Kind Regards,
> >Sander Holthaus
>
> The beauty of it, is you can add them and score them to your
> taste, just for a test. But I see no harm in adding them in
> anyway. But I might be bi
more
info. I would think it does not learn X-Spam-* headers by default. Also, I
would try to add other spam-related headers as well, as those can only be
abused by spammers IMHO.
Kind Regards,
Sander Holthaus
9 to 100%
* [score: 1.]
* 3.4 NIGERIAN_BODY1 Message body looks like a Nigerian spam
message 1+
* 1.2 MISSING_SUBJECT Missing Subject: header
* 0.6 NIGERIAN_BODY2 Message body looks like a Nigerian spam
message 2+
* 3.0 NIGERIAN_BODY_2 More Nigerian scum body content
* 0.1 NIGERIAN_BODY3 Message body looks like a Nigerian spam
message 3+
* -7.0 AWL AWL: From: address is in the auto white-list
Scores pretty well (14.3, 9.0 required), though, I heard that SpamAssassin
3+ included the SARE_FRAUD rules (or similiar). But looking at the report, I
don't see any fraud-hits from SpamAssassin :-/
Would it be wise to re-add SARE_FRAUD as a extra ruleset to SpamAssassin?
Kind Regards,
Sander Holthaus
> > 4) Can you share the output from a --lint with us?
> $ spamassassin --lint
> [EMAIL PROTECTED]:~$
What about spamassassin -D --lint?
Kind Regards,
Sander Holthaus
n in score's for both ham and
spam. Otherwise, it may backfire. Without any extra rule-sets and or various
net-lookups (SPF, SURBL, etc), I can't indeed imagine that it will work...
Also, the AWL-factor may need some tuning, in order to have a possitive
effect.
> --Chris
Kind Regards,
Sander Holthaus
> On Thu, Feb 10, 2005 at 11:48:18AM +0100, Sander Holthaus -
> Orange XL wrote:
> > Your (mail)logs might come in handy for this, if you write out
> > SpamAssassin's basic output there. With a basic Perl-script
> (you can
> > do this in almost any other script
e extra rules, and results are very good
(though watch your memory and scantimes!). Have yet to see a false positive
with a treshold of 9, and only 1-2% of all traffic scores between 5 and 9.
Kind Regards,
Sander Holthaus
> -Original Message-
> From: Johann Spies [mailto:[EMAIL PROTECTED
> Stuart Johnston wrote:
> >
> >> Peter Marshall wrote:
> >>
> >>> Kevin Sullivan wrote:
> >>>
> >>>> --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote:
> >>>>
> >>>>> I've been inte
> > Kevin Sullivan wrote:
> >
> >> --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote:
> >>
> >>> I've been interested in offering customers to train
> manually train
> >>> the SpamAssassin Bayes filter for h
> --On 02/04/05 16:08:53 +0100 Sander Holthaus - Orange XL wrote:
> > Basically, I've got two option. All mail that is received
> is backupped
> > on the mailserver before adding any headers. I could match
> those with
> > mail received in the spam-learn an
swers your second question is as to why you are not seeing any
evidence, it is used in the bayes-filter. The only thing you could observe
is a slight improvement in bayes-scores.
Kind regards,
Sander Holthaus
received them the first time is a good idea. But I don't have enough
knowledge of SpamAssassin's internal workings and it's bayes-filter to be
sure...
Kind Regards,
Sander Holthaus
Kind
Regards,
Sander
Holthaus
;
There are rules for those, however, they only seem to exist for the body.
Mangled, Chickpox and SARE_adult all hit on that line.
Kind Regards,
Sander Holthaus
What kind of setup are you using? What do you do if a email is tagged as
spam? SpamAssassin ran twice, but because of -2.8 ALL_TRUSTED, I would say
that it is some configuration issue on how you quarentine spam.
Kind Regards,
Sander Holthaus
> -Original Message-
> From: Peter Ma
as
bayes) whereas 3.02 started using root's homedir.
Kind Regards,
Sander Holthaus
> -Original Message-
> From: Kevin Blackwell [mailto:[EMAIL PROTECTED]
> Sent: Thursday, February 03, 2005 8:48 AM
> To: users@spamassassin.apache.org
> Subject: bayes: bayes db version
rtion of that 50MB per child actually shared?
Kind Regards,
Sander Holthaus
> At 07:59 PM 2/2/2005, Sander Holthaus - Orange XL wrote:
> >I've been interested in offering customers to train manually
> train the
> >SpamAssassin Bayes filter for ham and spam (to reduce false
> positives
> >and negatives). However, I can only find doc
P and use Outlook (Express) as mail client. Is there a way
to train SpamAssassin with such a setup (e.g. forwarding mail with Outlook
(Express) using SMTP)?
Kind
Regards,
Sander
Holthaus
Yesterday, I saw the
following message in my logs after shutting down spamd:
Attempt to free unreferenced scalar: SV 0xbb91874.
I have no clue as to
what is means. Can anyone enlighten me? I'm using SpamAssassin 3.02, Perl 5.8.5
and FreeBSD 4.10
Kind
Regards,
Sander
Holthaus
71 matches
Mail list logo
