RE: removing check for rulenames

>> I did reported to list.dnswl.org but there is no reporting tool for >> SenderScore >> > > Well, there is, but it has been notoriously difficult to find. > Although the rule names have changed with the release of 3.3.0, you > can find reporting information in the SA wiki. > > http://wiki.apa

RE: removing check for rulenames

>> How do I remove checking with RCVD_IN_DNSWL_LOW and RCVD_IN_RP_SAFE >> >> -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low >> trust >> [67.131.25.23 listed in list.dnswl.org] >> -2.0 RCVD_IN_RP_SAFERBL:

removing check for rulenames

Hi, How do I remove checking with RCVD_IN_DNSWL_LOW and RCVD_IN_RP_SAFE -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [67.131.25.23 listed in list.dnswl.org] -2.0 RCVD_IN_RP_SAFERBL: Sende

DomainKeys.pm

Hi, After upgrading to 3.3.0. I began to get an error Jan 29 03:12:40.458 [9168] warn: plugin: failed to parse plugin (from @INC): Can't locate Mail/SpamAssassin/Plugin/DomainKeys.pm in @INC (@INC contains: lib /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8

RE: spamassassin-3.3.0 for Fedora/RHEL

> Of course. You have to remove everything from > /var/lib/spamassassin/3.003000 that you do not want to use. As an example, > that is what remains here: Thank you

RE: spamassassin-3.3.0 for Fedora/RHEL

>> So how do I stop using sare or openprotect? > > remove the rules? > remove the channels? > > I suppose you know if you use them or not, do you? Yes I am using it. Since the blog advise to stop using it, thus I am wondering how do I do so? I had remove the sa-update from my crontab. Do I need t

RE: spamassassin-3.3.0 for Fedora/RHEL

> http://wtogami.livejournal.com/33674.html > > If you use spamassassin on Fedora or RHEL5, please see my blog post for > RPM packages and distro-specific notes. * STOP USING SARE or OpenProtect. They died a long time ago. Some of their rules are dangerous or redundant. Many of the bette

RE: exclude domain from server-wide

>> >> I am running a qmail + simscan + spamassassin + clamav on a >> centos 5.3. >> >> Regards >> > there are many ways to do it... > > you could try > > @example.com > > in your > > /var/qmail/control/badmailfrom > > might work... depending on some factors... > > you could smtp reject above a

RE: exclude domain from server-wide

>> How do I exclude a domain from a server-wide envoirment? >> >> > with magic words ? *g > > describe your mail spamassassin server setup ( cause there are > thousend ways which it might be implemented at your side ), then you > might get an answer I am running a qmail + simscan + spamassassi

exclude domain from server-wide

Hi, How do I exclude a domain from a server-wide envoirment? regards

flooded with undetected spam

Hi, My inbox is flooded by some new spams. Any idea how do I block it? http://202.42.86.77/1.eml http://202.42.86.77/2.eml Best regards

picture spams

Hi, Will ImageInfo be able to detect and catch this picture spam soon? http://dreams.741.com/spam.gif Thanks

[EMAIL PROTECTED] strikes again

h SMTP id a20mr2782785waa.1187106414523; Tue, 14 Aug 2007 08:46:54 -0700 (PDT) Received: from dw ( [220.255.72.245]) by mx.google.com with ESMTPS id m10sm10662529waf.2007.08.14.08.46.51 (version=SSLv3 cipher=RC4-MD5); Tue, 14 Aug 2007 08:46:53 -0700 (PDT) Message-ID:

Public.pm

Hi List, Does anyone encounter this error and how do you fix it? Use of uninitialized value in string eq at /usr/lib/perl5/vendor_perl/5.8.8/Mail/DomainKeys/Key/Public.pm line 67, line 319. Thanks

error with 3.2.2

Hi, I just updated to 3.2.2. Encountered an error as follows: Jul 30 21:00:33 beyond spamd[20765]: dcc: check failed: failed to read header Jul 30 21:00:36 beyond spamd[20767]: dcc: check failed: util: setuid 0 to 508 failed! at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Util.pm line

Re: How would you provide a 554 rejection notice for spam?

dalchri wrote: I've recently put SpamAssassin in front of my Exchange server as an SMTP proxy. Our previous spam filter would provide a 554 rejection notice for anything that was identified as spam. This meant that any FP would be notified so that email would not get silently ignored. Although

Re: graphic spam

Other than FuzzyOCR, is there other way to filter graphic spams? I had ImageInfo but seem like it is not working. PS... also check out ImageInfo.pm http://www.rulesemporium.com/plugins.htm Yes I had that, but it is not working for me. [26559] dbg: config: read file /etc/mail/spamassassin/imagei

Re: graphic spam

Other than FuzzyOCR, is there other way to filter graphic spams? I had ImageInfo but seem like it is not working. PS... also check out ImageInfo.pm http://www.rulesemporium.com/plugins.htm Yes I had that, but it is not working for me. [26559] dbg: config: read file /etc/mail/spamassassin

Re: Please remove "[EMAIL PROTECTED]" from the list

He is bouncing emails. (See attachment.) Scroom and the camel he rode in on. I am getting the same thing

graphic spam

Hi, Other than FuzzyOCR, is there other way to filter graphic spams? I had ImageInfo but seem like it is not working. regards LC

Re: Bye for good FuzzyOCR

Spamassassin List schrieb: Spamassassin List schrieb: i just uninstalled FuzzyOCR from my system as it seems like its become out of fashion to send those spam images that FuzzyOCR can read and I noticed that I dont even need it to get the remaining imagespam above a score of 10. Thanks alot

Re: Bye for good FuzzyOCR

Spamassassin List schrieb: Spamassassin List schrieb: i just uninstalled FuzzyOCR from my system as it seems like its become out of fashion to send those spam images that FuzzyOCR can read and I noticed that I dont even need it to get the remaining imagespam above a score of 10. Thanks alot

Re: Bye for good FuzzyOCR

Spamassassin List schrieb: i just uninstalled FuzzyOCR from my system as it seems like its become out of fashion to send those spam images that FuzzyOCR can read and I noticed that I dont even need it to get the remaining imagespam above a score of 10. Thanks alot to the author, the plugin

Re: Bye for good FuzzyOCR

i just uninstalled FuzzyOCR from my system as it seems like its become out of fashion to send those spam images that FuzzyOCR can read and I noticed that I dont even need it to get the remaining imagespam above a score of 10. Thanks alot to the author, the plugin was great when imagespam was o

Re: CentOS 5 with FuzzyOCR

Spamassassin List wrote: I am getting some errors when try to spamassassin -t < email.txt Subroutine FuzzyOcr::O_CREAT redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/POSIX.pm line 19 Subroutine FuzzyOcr::O_EXCL redefined at /usr/lib/pe

Re: CentOS 5 with FuzzyOCR

Have you installed the programs that FuzzyOcr is calling? rpm -qa ocrad? Yes i have. [EMAIL PROTECTED] Spam]# rpm -qa ocrad ocrad-0.16

CentOS 5 with FuzzyOCR

Hi, I am getting some errors when try to spamassassin -t < email.txt Subroutine FuzzyOcr::O_CREAT redefined at /usr/lib/perl5/5.8.8/Exporter.pm line 65. at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/POSIX.pm line 19 Subroutine FuzzyOcr::O_EXCL redefined at /usr/lib/perl5/5.8.8/Exporter.pm l

domainkey

Hi, spamassassin -D --lint shows that i am having some problem with domainkey [31077] warn: plugin: failed to parse plugin (from @INC): Can't locate Mail/DKIM.pm in @INC (@INC contains: lib /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/per

Re: spam test

http://hege.li/howto/spam/spamassassin.html Remove everything from Botnet.cf RULES-section and set it up this way: Does the above line mean to remove from the # THE RULES? regards

Re: No RBL checks

On 3/12/07, Spamassassin List <[EMAIL PROTECTED]> wrote: > i think my spamassassin is performing no RBL checks, i disabled that > once, reset that change but it seems that the RBL are still not > working Have you remove -L from the setup of SA? i disbaled it from th

Re: No RBL checks

i think my spamassassin is performing no RBL checks, i disabled that once, reset that change but it seems that the RBL are still not working Have you remove -L from the setup of SA?

Re: FuzzyOCR: pamthreshold

Use patches from here >http://www200.pair.com/mecham/spam/image_spam2.html to solve your problem. thanks. but is the site down? unable to access to it.

Re: Online game spam

On Thu, 8 Feb 2007, Spamassassin List wrote: But the header says:- X-Spam-Status: No, score=2.5 required=5.0 tests=DATE_IN_FUTURE_03_06, HTML_MESSAGE,MIME_HTML_ONLY autolearn=disabled version=3.1.7 I see no network tests (e.g. RCVD_IN_XBL) - do your logs show *any* messages hitting on

Re: Online game spam

On Thu, 8 Feb 2007, Spamassassin List wrote: But the header says:- X-Spam-Status: No, score=2.5 required=5.0 tests=DATE_IN_FUTURE_03_06, HTML_MESSAGE,MIME_HTML_ONLY autolearn=disabled version=3.1.7 I see no network tests (e.g. RCVD_IN_XBL) - do your logs show *any* messages hitting on

Online game spam

Hi, I am getting hit by the online game spam. If i test it using spamassassin -t < email, the result score 24.9. Please see http://202.42.86.68/result.txt But the header says:- X-Spam-Status: No, score=2.5 required=5.0 tests=DATE_IN_FUTURE_03_06, HTML_MESSAGE,MIME_HTML_ONLY autolearn=disabled

FuzzyOCR: pamthreshold

Hi, I am running CentOS 4.4 and have netpbm installed. [EMAIL PROTECTED] textspam]# rpm -q netpbm-devel netpbm-devel-10.25-2.EL4.3 [EMAIL PROTECTED] textspam]# rpm -q netpbm-progs netpbm-progs-10.25-2.EL4.3 [EMAIL PROTECTED] textspam]# rpm -q netpbm-devel netpbm-devel-10.25-2.EL4.3 I still have

Re: Drug Spam

http://www.peregrinehw.com/downloads/SpamAssassin/contrib/KAM.cf I had encountered errors [21895] info: rules: meta test KAM_RPTR_PASSED has undefined dependency '__URIBL_ANY' [21895] info: rules: meta test KAM_REAL has undefined dependency '__KAMREAL1' [21895] info: rules: meta test KAM_REAL

Re: blarsbl

This is the guy's www site http://www.blars.org/errors/block.html I had some trouble with his list before too. Not many people is using that list, so i guess, not much of damage done anyway.

Re: spam attacks - so and so wrote about a stock

Rob McEwen (PowerView Systems) wrote: In the meantime, it sure would be nice if that new ruleset that Chris bragged about could get on the SARE website ASAP. (Where are you Doc Schneider? I hope we haven't caught you on a busy day. Please hurry.) Rob McEwen PowerView Systems I just got it

Re: senders domain has MX or not?

Which rule will help me in checking if senders domain has MX record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule should check whether domain.com has an MX record or not. I think this should be a question on your mail daemon. Not spamassassin.

stock spams

The stock spams are killing me. I had 70_sare_stocks.cf and its not blocking them. Below is part of the spam and the score. What can i do to beat them? W a t c h o u t! ALLINACE ENTERPRSIE (A ETR) Curernt Pirce: 0.80 Add this g e m to your wat ch list, and w atch it tard closely! Nwes Reelas

Re: animated GIF spam

While skimming thru my daily rejected spam pile, did a double take when a GIF spam seemed to "blink" at me. Thought it was a sw glitch at first... then realized the sneaky Borg had adapted again. Took a look at the frames in PaintShopPro's AnimationShop, and the first three are all but blank (we

Re: a new kind of spam (with images)

Spamassassin List wrote: Stephane Bentebba wrote: hi all, i am more or less happy with my spamassassin configuration works good for one year but i have problem with a new kind of spam which easylly go throught it : spam which has poor text, poor token, or none, and a subject always changing

Re: a new kind of spam (with images)

Stephane Bentebba wrote: hi all, i am more or less happy with my spamassassin configuration works good for one year but i have problem with a new kind of spam which easylly go throught it : spam which has poor text, poor token, or none, and a subject always changing the only thing which remain

Re: Improved OCR Plugin with approximate matching

Spamassassin List wrote: decoder wrote: See http://wiki.apache.org/spamassassin/FuzzyOcrPlugin Major changes: Replaced imagemagick with netpbm, support png, invoked giffix for broken gifs, detect image format with magic bytes and not by content-type, added various configuration options. I

Re: Improved OCR Plugin with approximate matching

decoder wrote: See http://wiki.apache.org/spamassassin/FuzzyOcrPlugin Major changes: Replaced imagemagick with netpbm, support png, invoked giffix for broken gifs, detect image format with magic bytes and not by content-type, added various configuration options. I install the above plugin, and

Re: Image spam with inline jpeg image

- Original Message - From: "Gary Funck" <[EMAIL PROTECTED]> To: Sent: Thursday, August 10, 2006 12:04 AM Subject: RE: Image spam with inline jpeg image Menno wrote: Ramprasad wrote: > > But still this mail is getting thru > http://ecm.netcore.co.in/tmp/imagespam.txt > I tested your

Re: ImageInfo plugin for SA

Put the .pm file that is attached in your M::SA::Plugins dir. Add to your init.pre (or v310.pre) the following line. Where is the usual Plugins dir? regards

pyzor

Hi, Is there a port which I have to open to allow pyzor to run properly? I keep having the below error. [26217] dbg: util: executable for pyzor was found at /usr/bin/pyzor [26217] dbg: pyzor: pyzor is available: /usr/bin/pyzor [26217] dbg: info: entering helper-app run mode [26217] dbg: pyzor:

Re: Spamassassin + vpopmail

1st problem - now I got a lot of empty messages after deleting spam (I have compiled vpopmail with this options - 'WITH_SPAMASSASSIN=yes SPAM_THRESHOLD=15 RELAYCLEAR=15 LOGLEVEL=e' on freebsd). Those e-mails are empty with this header (margaret.starnet.cz is my server): I dont think vpopmail

Re: AW: WebGUI for Spamassassin?

Christian Reiter wrote: Hi Patrick! is there any WebGUI for training and managing Spamassassin like DSPAM uses one? May Maia Mailguard could help you: http://www.renaissoft.com/maia/ Or MailWatch if you use MailScanner/SA. http://mailwatch.sourceforge.net/ Ken A Any SA/Qmail? regar

Re: error after upgraded to 3.11

You have an older version of the stock rules. Doc fixed this one a week or two ago, since we knew it was going to come up. Weird. rules_du_jour did not grab the newer version.

Re: error after upgraded to 3.11

Leading zeros are required for values between (-1,1). Thanks. After examine all the rules, found out that 70_sare_stocks.cf is causing it. It contains lines like:- body SARE_MLB_Stock3 /Last[ _](?:Trade|Price)[ :]/i scoreSARE_MLB_Stock3 .794 bodySARE_LWSAFEH

error after upgraded to 3.11

Hi List, After upgraded SA from 3.10 to 3.11, ran spamassassin --lint, encountered the error as follows:- [21824] warn: config: SpamAssassin failed to parse line, "SARE_MLB_Stock3 .794" is not valid for "score", skipping: scoreSARE_MLB_Stock3 .794 [21824] warn: config: SpamAssassin fa

query score for Re: r news 5860 spam

Hi, I had been attacked by a spam ( http://60.49.100.123/news5860.txt ) in all my mail servers. Surprising it has a 0:0 hit. X-Spam-Status: No, score=0.0 required=5.0 tests=HTML_MESSAGE,UPPERCASE_25_50 autolearn=disabled version=3.1.0 What are your scores? Which ruleset do u use to tra

Re: Need help with DCC

On 11/22/05, Spamassassin List <[EMAIL PROTECTED]> wrote: >I am trying to enable DCC support but as far as I can see no >DCC_CHECK >is being involved. Your advise would be greatly appreciated. Did you enable local, -L? Remove this when you call spamd No, spamd is ca

Re: Need help with DCC

I am trying to enable DCC support but as far as I can see no >DCC_CHECK is being involved. Your advise would be greatly appreciated. Did you enable local, -L? Remove this when you call spamd

Re: why doesn't this email get detected as spam?

0.1 FORGED_RCVD_HELO Received: contains a forged HELO 0.1 OPTING_OUT_CAPSBODY: Talks about opting out (capitalized version) -0.7 BAYES_20 BODY: Bayesian spam probability is 5 to 20% [score: 0.1239] 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gi