Build problems

2010-12-29 Thread Stuart Gall
cpan-testers results for installing this module, try: reports JMASON/Mail-SpamAssassin-3.3.1.tar.gz Running make install make test had returned bad status, won't install without force perl is 5.8.5 I am not sure what else I can do to diagnose the problem TIA Stuart

Re: spamd keeps running at 99% CPU until i kill the process

2007-09-11 Thread Stuart Gall
On 11 Sep 2007, at 05:15, Thomas Schulz wrote: On 30 Aug 2007, at 16:55, Micke Andersson wrote: Richard Hobbs wrote: Hello, To add information to this problem, it appears that spamd does eventually give up after 5 minutes - which then bounces the message back to the sender stating: 421 S

Re: spamd keeps running at 99% CPU until i kill the process

2007-09-10 Thread Stuart Gall
On 30 Aug 2007, at 16:55, Micke Andersson wrote: Richard Hobbs wrote: Hello, To add information to this problem, it appears that spamd does eventually give up after 5 minutes - which then bounces the message back to the sender stating: 421 SMTP incoming data timeout - message abandoned

Re: getting Bayes token data from spamassassin

2007-01-16 Thread Stuart Robinson
; > by the way, a nice, working plugin that does this would be quite useful on > the CustomPlugins wiki page, or contributed as an optional plugin... +----+ | Stuart Robinson| | Email: stuart at zapata dot org| | Homepage: http://www.zapata.org/stuart | ++

Re: getting Bayes token data from spamassassin

2007-01-16 Thread Stuart Robinson
exed? That wouldn't affect performance too much, would it? +----+ | Stuart Robinson| | Email: stuart at zapata dot org | | Homepage: http://www.zapata.org/stuart | ++

Re: getting Bayes token data from spamassassin

2007-01-15 Thread Stuart Robinson
Hello, all. > On Mon, Jan 15, 2007 at 01:54:07AM -0800, Stuart Robinson wrote: > > I've searched around a bit, both on gmane and Google, but I haven't found > > much more information regarding your two points. What IS stored in the > > token field of the table b

Re: getting Bayes token data from spamassassin

2007-01-15 Thread Stuart Robinson
be greatly appreciated. Thanks, Stuart On Mon, 15 Jan 2007, Theo Van Dinter wrote: > On Sun, Jan 14, 2007 at 11:43:39PM -0800, Stuart Robinson wrote: > > However, the tokens produced all seems like gibberish. The same happens > > when I called sa-learn with the --dump data flag. >

getting Bayes token data from spamassassin

2007-01-14 Thread Stuart Robinson
1 1168848000 deab0e9bd0 Why don't I see any of the words from the test email in this list? Thanks, Stuart Robinson +----+ | Stuart Robinson | | Email: stuart at zapata dot org | | Homepage: http://www.zapata.org/stuart | ++

Re: RelayChecker (now Botnet ) 0.4

2006-11-28 Thread Stuart Johnston
Sven Schuster wrote: sorry to get more OT here, but may I ask two questions regarding p0f, as we seem to some knowledgable people here :-) 1. does anybody know if there are any problems regarding running the mail server with p0f behind a Cisco PIX firewall?? I have two locations (where I just wa

Re: Using SpamAssassin variables

2006-11-22 Thread Stuart Johnston
John W Mickevich wrote: Hello all! ... I would like to know now to use a variable within SpamAssassin. For example, how would I “capture” the last name of the From header field for use in comparisons elsewhere? Here is a sample: >From: "Molly Owens" <[EMAIL PROTECTED]> >Subject: Me

Re: How To Turn Off ALL Network Tests (except DCC & Razor)

2006-11-21 Thread Stuart Johnston
Rob McEwen (PowerView Systems) wrote: RE: How To Turn Off ALL Network Tests (except DCC & Razor) In SpamAssassin, how do you turn off ALL Network tests, including ALL DNS and **all** rDNS lookups, but leave DCC & Razor running? ... If there anything ELSE that should be done to tell SA to NO

Re: getting mail directly and not via mail-relay

2006-11-21 Thread Stuart Johnston
Leon Kolchinsky wrote: Hello, There is a Mail-Relay administered by another person and its MX record stand before MX record of my mail server, so theoretically mail should go first through Mail-Relay to my server. The thing is that for some reason there are much e-mails (and spam among them

Re: sa-learn for normal users

2006-11-19 Thread Stuart Johnston
Richard van der Hoff wrote: I know this has come up before, but I've not really been able to find a satisfactory answer to it. The problem I have is that there is no way for sa-learn to update scores in a Bayes or AWL SQL database without having full SELECT, INSERT, UPDATE and DELETE privileg

Re: Help with sa-learn when using Outlook 2003.

2006-11-19 Thread Stuart Johnston
thekillerbean wrote: We currently have an Exchange 2003 server that is under heavy burden due to excessive SPAM. The company is not willing to spend $$$ to resolve the issue if it can be done on Linux - especially being that we have several Linux boxes lying idle! Hence, my plan is to implement

Re: Bayes column 'token'

2006-11-17 Thread Stuart Johnston
Mark wrote: -Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: vrijdag 17 november 2006 23:30 To: users@spamassassin.apache.org Subject: Re: Bayes column 'token' CREATE TABLE bayes_token ( id int(11) NOT NULL default '0', token char(5) CO

Re: Bayes column 'token'

2006-11-17 Thread Stuart Johnston
Mark wrote: -Original Message- From: Mark [mailto:[EMAIL PROTECTED] Sent: woensdag 15 november 2006 18:15 To: 'users@spamassassin.apache.org' Subject: RE: Bayes column 'token' Well, bayes_mysql.sql does not specify collation; so, like you said, the collation will be your MySQL server-

Re: would SA benefit from port to Java

2006-11-17 Thread Stuart Johnston
Giampaolo Tomassoni wrote: Thinking about the GPL Java announcement some, and trying to imagine the kinds of opportunities this allows for, it occurs to me that SpamAssassin might be a natural fit for Java. I'm just thinking out loud here, not advocating anything... Would it run better? What

Re: I've got TORA.08 spelled with numbers?

2006-11-17 Thread Stuart Johnston
Evan Platt wrote: At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3

Re: email appears to que all the time - sendmail,spamssassin,amavis-new

2006-11-17 Thread Stuart Johnston
Patrick Sherrill wrote: I seem to be getting significant delays in delivery (queue times are set to 15m). I am currently using amavis-new to hook SA with sendmail (tx and rx queue). What would be the best approach to minimizing delays beyond more RAM. Reject more messages with (good) DNSBLs

Re: RelayChecker 0.3

2006-11-17 Thread Stuart Johnston
Michael Alan Dorman wrote: On Thu, 16 Nov 2006 17:56:21 -0800 Derek Harding <[EMAIL PROTECTED]> wrote: On Sun, 2006-11-12 at 17:26 -0800, John Rudd wrote: http://people.ucsc.edu/~jrudd/spamassassin/RelayChecker.tar I've been running this for a few days now and am finding it to be pretty effe

Re: RelayChecker 0.3

2006-11-17 Thread Stuart Johnston
John Rudd wrote: Stuart Johnston wrote: Peter H. Lemieux wrote: Billy Huddleston wrote: Reverse DNS is a must. I'm surprised at how many people still haven't got that yet in the IT world.. (Consultants mostly..) It's not uncommon outside the industrialized world. Last few d

Re: RelayChecker 0.3

2006-11-16 Thread Stuart Johnston
Peter H. Lemieux wrote: Billy Huddleston wrote: Reverse DNS is a must. I'm surprised at how many people still haven't got that yet in the IT world.. (Consultants mostly..) It's not uncommon outside the industrialized world. Last few days I got a few false positives for a client that was corre

Re: maint question

2006-11-15 Thread Stuart Johnston
Bayes database? It won't get erased but I think there is a command you have to run to upgrade it. Check the upgrade file. Thanks, Dmitri - Original Message - From: "Stuart Johnston" <[EMAIL PROTECTED]> To: Sent: Wednesday, November 15, 2006 10:48 AM Subject: Re

Re: change spamhaus.org's score

2006-11-15 Thread Stuart Johnston
Payal Rathod wrote: On Tue, Nov 14, 2006 at 08:40:36PM -0500, Matt Kettler wrote: That's the un-scored parent rule that causes the DNS query. There are two child rules that don't perform a DNS lookup, they just use the results fetched by the rule above. The Two scored rules are *DIRECTLY* below

Re: maint question

2006-11-15 Thread Stuart Johnston
Dmitri wrote: Platform: fedora core 4 spamd version: 3.0.6 spamd invoked: runs as a service Greetings, Spamasassin is a great product and has been very useful to us. However I would like to ask what maintenance should/can be done to have spamd work more effectively (i.e. filter out more spam)

Re: adjust rules and whitelist_from_rcvd

2006-11-15 Thread Stuart Johnston
It is probably this header generated by SquirrelMail that is causing the problem. > Received: from 217.132.226.2 > (SquirrelMail authenticated user ronits) > by mail.mydomain.ac.il with HTTP; > Tue, 14 Nov 2006 13:11:52 +0200 (IST) I'm not really sure what the solution i

Re: Processes are backing up

2006-11-15 Thread Stuart Johnston
Marc Perkel wrote: Got a strange problem with spamd that started on it's own. Processes are backing up - but spamd seems to be stuck not processing them or taking a very long time. Still have free memory and processor loads are not that high. It's as if spamd is waiting on something that isn't

Re: adjust rules and whitelist_from_rcvd

2006-11-15 Thread Stuart Johnston
This should be fixed if you install SA 3.1: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=3236 Leon Kolchinsky wrote: Hi, My server runs with static IP and have a legitimate MX record. Squirrelmail runs on the same mail server. So I don't think that this is the problem. Regards, Le

Re: change spamhaus.org's score

2006-11-14 Thread Stuart Johnston
Nigel Frankcom wrote: On Tue, 14 Nov 2006 14:35:33 -0500, "Peter H. Lemieux" <[EMAIL PROTECTED]> wrote: Matt Kettler wrote: Should be something like this in 50_scores.cf: score RCVD_IN_BL_SPAMCOP_NET 0 1.332 0 1.558 Just add score RCVD_IN_BL_SPAMCOP_NET 1.0 in your local.cf. That said, I woul

Re: Is there a release date for 3.1.8?

2006-11-12 Thread Stuart Johnston
You could browse the messages on the dev list or the commit logs from svn. Robert Nicholson wrote: Also since the Changes file doesn't appear to have been updated in a long while how can I learn the differences b/w each release/trunk code? On Nov 12, 2006, at 11:28 AM, Stuart Johnston

Re: Is there a release date for 3.1.8?

2006-11-12 Thread Stuart Johnston
code and I want to know what has to be version specific and what does not. Probably safer to assume everything is version specific. On Nov 12, 2006, at 11:28 AM, Stuart Johnston wrote: The Doctor wrote: On Sat, Nov 11, 2006 at 06:06:15PM -0600, Stuart Johnston wrote: Robert Nicholson

Re: Exim4 / spamd --username question

2006-11-12 Thread Stuart Johnston
Exim does not actually run spamc, it connects directly to spamd. spamd does run as root. Exim can connect as nobody depending on your configuration. Generally though, you want to have a writable home directory so it is easiest to create a user for this purpose that Exim can connect as. Bil

Re: Is there a release date for 3.1.8?

2006-11-12 Thread Stuart Johnston
The Doctor wrote: On Sat, Nov 11, 2006 at 06:06:15PM -0600, Stuart Johnston wrote: Robert Nicholson wrote: When will the Shortcircuit feature be made available in a release? The Shortcircuit plugin should be available in 3.2.0. Recent messages have suggested that this might be released

Re: Is there a release date for 3.1.8?

2006-11-11 Thread Stuart Johnston
Robert Nicholson wrote: When will the Shortcircuit feature be made available in a release? The Shortcircuit plugin should be available in 3.2.0. Recent messages have suggested that this might be released before January.

Re: Is the current spam war a Microsoft creation?

2006-11-10 Thread Stuart Johnston
Steve Lake wrote: Just wanted your guys' feedback on an article I wrote just the other day that talks about a possible source of this current spam war. It talks about how its all too convenient that Microsoft got smacked down hard on their Sender ID system recently, and then this start

Re: Relay Checker plugin v0.2

2006-11-03 Thread Stuart Johnston
John Rudd wrote: Stuart Johnston wrote: John Rudd wrote: I've put up a new version of Relay checker, in ... I expect I might, at some point, switch from using a dynamic score in the plugin, to a normal score. But that's the only change I expect to make, aside from bug fixes (if

Re: How to disable IADB

2006-11-03 Thread Stuart Johnston
Henk van Lingen wrote: On Fri, Nov 03, 2006 at 03:06:10PM -0500, Theo Van Dinter wrote: > On Fri, Nov 03, 2006 at 09:02:46PM +0100, Henk van Lingen wrote: > > Is there a way to disable this 'feature', without editting those files? > > Set the rule scores to 0. Oke, of course. There a

Re: R: BIG increase in spam today

2006-11-03 Thread Stuart Johnston
Federico Giannici wrote: François Rousseau wrote: Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast. I don't trust enough DNSBLs to completely block an email only based on them. What about combining BlackListing and

Re: Relay Checker plugin v0.2

2006-11-03 Thread Stuart Johnston
John Rudd wrote: I've put up a new version of Relay checker, in ... I expect I might, at some point, switch from using a dynamic score in the plugin, to a normal score. But that's the only change I expect to make, aside from bug fixes (if there are any), and/or a switch to using Net::DNS.

Re: Compromised computer IP list downloadable?

2006-11-01 Thread Stuart Johnston
Ben Wylie wrote: Obviously there are many different DNS block lists and some of these are specifically for blocking compromised computers used as drones to send spam. However I have experienced a massive attack on my server by some bot network, trying to send spam through my server, and i would

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Stuart Johnston
John Rudd wrote: Stuart Johnston wrote: John Rudd wrote: 2) This sort of replaces the other set of rules I created, that did this with metarules instead of a plugin. This made some of the checks less useful. You probably don't need to use both methods. So, what is the point of

Re: Simple script that rejects mail from spammers

2006-10-31 Thread Stuart Johnston
Evan Platt wrote: At 09:36 AM 10/31/2006, you wrote: Here's something similar: http://fut.patch.com/ I'd be interested in something for postfix / ipfw... :) "Currently analyzes log files based on behavior of OpenSSH v4.2, Postfix v2.2.4, and ProFTPD v1.2 as packaged for Debian systems."

Re: Simple script that rejects mail from spammers

2006-10-31 Thread Stuart Johnston
sa-russian wrote: Hi to all! I made a simple script that scans sendmail log files, finds IP from which several spam messages were received, and blocks them in sendmail access file. The backgroung is as follows: Once I found that our MX is nearly down. Running top exposed a lot of spamd instan

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Stuart Johnston
John Rudd wrote: 2) This sort of replaces the other set of rules I created, that did this with metarules instead of a plugin. This made some of the checks less useful. You probably don't need to use both methods. So, what is the point of doing this as a plugin instead of using existing ru

Re: URIXBL?

2006-10-27 Thread Stuart Johnston
Jeff Hardy wrote: Hello all, I've been diddling with some tests and wondered why there is a spamhaus URIBL_SBL, but not URIBL_XBL (or better yet, combined URIBL_SBL-XBL). I can create this myself easy enough, but wondered if there was a reason XBL is not included. Thanks. XBL is mostly infec

Re: Scoring base64 blob messages

2006-10-27 Thread Stuart Johnston
Peter H. Lemieux wrote: Theo Van Dinter wrote: On Thu, Oct 26, 2006 at 09:46:28AM -0400, Peter H. Lemieux wrote: Also is there an SA rule that scores messages that contain only a single base64 part (as opposed to a base64-encoded attachment)? I doubt many legitimate messages arrive with only

Re: Spam isn't getting caught, can anyone help please?

2006-10-26 Thread Stuart Johnston
Have you restarted spamd? Is it running? Brian S. Meehan wrote: I know y'all are smart, just looking for a little help on this one. In addition to the below info, spamassassin -lint works fine and quietly. Thanks, Brian Original Message -

Re: How to filter these spam messages

2006-10-18 Thread Stuart Johnston
Jonas Eckerman wrote: R Lists06 wrote: A minute or two delay from grelisting matters that much Greylisting usually delay a mail for more than two minutes (when it delays, a good implementation can excempt most mail from the delay after a while). Even if the greylist implementation onl

Re: 3.1.6, local scores, and sa-update

2006-10-05 Thread Stuart Johnston
Daryl C. W. O'Shea wrote: Mike Grau wrote: Since upgrading to SpamAssassin 3.1.6, running sa-update yields # sa-update config: warning: score set for non-existent rule BAYES_50 config: warning: score set for non-existent rule BAYES_05 ... error: lint check of current site config failed, canno

ImageInfo Bug

2006-10-04 Thread Stuart Johnston
Dallas, I think there is a bug in the image_size_range function. my $name = $type.'_dems'; Should probably be more like: my $name = "dems_$type"; Thanks, Stuart

Re: pyzor timeout

2006-10-03 Thread Stuart Johnston
Fletcher Mattox wrote: Hi, How does one decrease the default Pyzor timeout of five seconds? (without editing the source code :) ) pyzor_timeout 1

Re: Stock spam in images

2006-10-02 Thread Stuart Johnston
Theo Van Dinter wrote: On Mon, Oct 02, 2006 at 03:18:58PM +0100, Randal, Phil wrote: undetected). Wouldn't it be better to inject the detected text back to SA? There should be enough variants of spam worlds to let SA fuzzily catch the ones from images. I think so. Some of the words would be p

Re: Q. about spam directed towards highest MX Record?

2006-09-29 Thread Stuart Johnston
Rob McEwen (PowerView Systems) wrote: Jon Trulson said: Hehe, that is an old spammer trick... Our secondary MX is pretty much 100% spam. I implemented greylisting on the secondary which reduced spam through it by about 99% :) The secondary does not do spam scanning, it's simply store and forwar

Re: Bayes test in spamassassin.bat

2006-09-11 Thread Stuart Johnston
The most common cause for this type of problem is that your mail server is not running as the same user as when you are testing or learning. IOW, it can't find the bayes DB. Floyd wrote: Hi, I am using Spamassassin with Exchange and i noticed I was getting different scores using spamassassin.b

Re: Marking Mail in the future as SPAM?

2006-09-08 Thread Stuart Johnston
John Rudd wrote: On Sep 8, 2006, at 5:59 PM, Stuart Johnston wrote: [EMAIL PROTECTED] wrote: When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local

Re: Marking Mail in the future as SPAM?

2006-09-08 Thread Stuart Johnston
[EMAIL PROTECTED] wrote: When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local timezone I would have people leaving messages in the future that always sit at t

Re: [Bump] No log to syslog after upgrade

2006-09-07 Thread Stuart Johnston
Kurt Buff wrote: I've requested an account, and am waiting for the password. I understand about command line tools and their use, but SA is a bit of a special case, as it's used as more than simply a command line tool - especially when you consider its use with Amavis, etc. amavisd-new has its

Re: Perfect spamassassin setup?

2006-08-30 Thread Stuart Johnston
jdow wrote: From: "Stuart Johnston" <[EMAIL PROTECTED]> Eric Persson wrote: This might be a shot in the dark, but after running a patched qmail, qmailscanner with spamassassin and mysqlsupport for a while and a selfdeveloped webinterface, we've started to look around what

Re: Perfect spamassassin setup?

2006-08-29 Thread Stuart Johnston
Eric Persson wrote: This might be a shot in the dark, but after running a patched qmail, qmailscanner with spamassassin and mysqlsupport for a while and a selfdeveloped webinterface, we've started to look around what others are using? Is there any project that combines the strength of spamassass

Re: RBL Rules Misfiring

2006-08-23 Thread Stuart Johnston
As a quick guess, you probably need to fix your Trust Path: http://wiki.apache.org/spamassassin/TrustPath D.J. wrote: Hello all. I searched my archive of the list, and couldn't find a similar issue. This is probably something I've misconfigured, but here goes. Running SA 3.14 via the Mail:

Re: Train from Outlook?

2006-08-23 Thread Stuart Johnston
Christopher Mills wrote: Tell me something, is there a pluggin for outlook that would allow me to train spamassassin on the web server? Eg, messages come in, end up in my Junk Mail folder, can i somehow select them, and click a button with this 'addin' and have it find our web server and train

Re: How can I (we) get rid of this?

2006-08-22 Thread Stuart Johnston
Vivek Khera wrote: On Aug 21, 2006, at 11:04 AM, Stuart Johnston wrote: Anders Norrbring wrote: Hiya all! I'm getting really sick on recieving 10-100 of the attached mails every day. Any suggestions on how to get rid of them? Apparently my Amavis-new and SpamAssassin only tags them f

Re: a new kind of spam (with images)

2006-08-21 Thread Stuart Johnston
decoder wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Spamassassin List wrote: Stephane Bentebba wrote: hi all, i am more or less happy with my spamassassin configuration works good for one year but i have problem with a new kind of spam which easylly go throught it : spam which has po

Re: How can I (we) get rid of this?

2006-08-21 Thread Stuart Johnston
Anders Norrbring wrote: Hiya all! I'm getting really sick on recieving 10-100 of the attached mails every day. Any suggestions on how to get rid of them? Apparently my Amavis-new and SpamAssassin only tags them from 0 to 1.6 points. FuzzyOCR, ImageInfo, SARE, sa-update.

Re: SPAM: Increase in targeted spams

2006-08-12 Thread Stuart Johnston
John D. Hardin wrote: On Sat, 12 Aug 2006, Michael Scheidell wrote: (can we come up with an RBL for domains registered with jokers?) A while back I suggested a more-general spammer-friendly-registrar RBL. Can anyone give me a seed list of the registrars we would consider "spammer-friendly"?

Re: SPAM: Increase in targeted spams

2006-08-12 Thread Stuart Johnston
John D. Hardin wrote: On Sat, 12 Aug 2006, Michael Scheidell wrote: (can we come up with an RBL for domains registered with jokers?) A while back I suggested a more-general spammer-friendly-registrar RBL. Can anyone give me a seed list of the registrars we would consider "spammer-friendly"?

Re: breaking out: thinking abt the 'sa-update *VS* rdj' thread .. .

2006-08-11 Thread Stuart Johnston
Chris Santerre wrote: We write rules, not delivery systems. You can print out the rulesets from our webpage, and retype them into your system if you like. You can have someone encrypt ROT13, RAR, ZIP, and send you the torrent link. How you get your rules is your choice. It looks like SARE r

Re: Image spam with inline jpeg image

2006-08-10 Thread Stuart Johnston
Bowie Bailey wrote: Michael Scheidell wrote: From: Bowie Bailey [mailto:[EMAIL PROTECTED] Possibly. It depends on the overhead involved in setting up the channels. Plus, not all of us want ALL 62 files! Some of the *[0-3] files say to use 70_abcd0.cf , or _1, or_2, or_3. Would need tome cf

Re: Broken images in mails

2006-08-09 Thread Stuart Johnston
Logan Shaw wrote: On Wed, 9 Aug 2006, John D. Hardin wrote: Could the image-size calculation stuff from the ImageInfo plugin be merged into this? I was envisioning all of those tests in a single plugin, with configuration options to control whether or not the OCR itself (fuzzy or not) takes pla

Re: Spam came from users in whitelist

2006-08-09 Thread Stuart Johnston
Reginaldo Bray Mendoza wrote: Good day. I have spamassassin working with MailScanner in a redhat linux machine. Recently, we are receiving SPAM that claims to be from some users that are on whitelist and, for that reason, spamassassin marks them as NOT SPAM (user in whitelist rule scores -1

Internal Networks Not Trusted?

2006-08-04 Thread Stuart Johnston
Shouldn't internal_networks be automatically trusted? When I use this config: internal_networks 127/8 10. trusted_networks 216.65.194.186 I get this: [15275] dbg: received-header: parsed as [ ip=10.2.100.6 rdns= helo= by=ebby.com ident= envfrom= intl=0 id=25268392 auth= ] [15275] dbg: receiv

Re: [AMaViS-user] sa-update (sa v 3.1.4)

2006-08-03 Thread Stuart Johnston
Gary V wrote: Mark wrote: Theo, to change Mail::SpamAssassin to provide a suitable default for LOCAL_STATE_DIR. Please consider this a feature request. http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4952 :) Appreciated! # sa-update --updatedir /usr/local/share/spamassassin

Re: More honesty in spam

2006-08-03 Thread Stuart Johnston
Yesterday I noticed that the stock-image spams I had been receiving were pushing "Espion International, Inc, a leader in the fight against email based viruses, spam...". :) Kelson wrote: I received a stock spam this morning. The randomly generated sender name was, and I kid you not... "Bagl

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Stuart Johnston
Davin Flatten wrote: Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... This OCR stuff looks promising. Any comments on perfor

Re: exim4 + forwarding + spamassassin

2006-07-27 Thread Stuart Johnston
jdow wrote: From: "Chr. v. Stuckrad" <[EMAIL PROTECTED]> On Thu, 27 Jul 2006, jdow wrote: From: "Loren Wilton" <[EMAIL PROTECTED]> ... I've never seen the logic of placing SpamAssassin inside the incoming transaction before the termination of the SMTP connection rather than down the pipe in

Re: exim4 + forwarding + spamassassin

2006-07-26 Thread Stuart Johnston
Your first scan is running as nobody (that's bad) but the second is running as szinski. That would explain the BAYES_99. I'm not sure about the FORGED_RCVD_HELO and HTML_50_60 though. Zinski, Steve wrote: I need some help trying to figure out why spamassassin scores the same message differen

dns?.name-services.com - uridnsbl without the bl

2006-07-26 Thread Stuart Johnston
It seems like for the vast majority of spam that gets through my system with a url in it, the name server is one of name-services.com. Is there any way to create a rule that check a url's name server against a static list? Like uridnsbl without the bl?

Re: Should this hit more rules?

2006-07-26 Thread Stuart Johnston
Dimitri Yioulos wrote: On Wednesday July 26 2006 2:10 pm, Stuart Johnston wrote: Dimitri Yioulos wrote: On Wednesday July 26 2006 12:57 pm, Martin Hepworth wrote: Dimitri Yioulos wrote: Hello to all. I'm wondering why the following isn't hitting more rules: Return-Path: <[EM

Re: Should this hit more rules?

2006-07-26 Thread Stuart Johnston
Dimitri Yioulos wrote: On Wednesday July 26 2006 12:57 pm, Martin Hepworth wrote: Dimitri Yioulos wrote: Hello to all. I'm wondering why the following isn't hitting more rules: Return-Path: <[EMAIL PROTECTED]> Received: from braunconsult.com (216-130-126-2.cimcoisp.net [216.130.126.2] (may b

Re: spam

2006-07-26 Thread Stuart Johnston
0 (CDT) I suppose you might say that the HELO (burkeauto.com) is faked. Thomas Lindell wrote: Does that mean they just faked the headers? I am new to mail administration only been doing it a couple of months now and I appreciate all the help. Thanks Tom -Original Message- From:

Re: spam

2006-07-26 Thread Stuart Johnston
I think you may be misreading the headers. This mail came from pro75-3-82-234-174-1.fbx.proxad.net [82.234.174.1] (a French ISP). Thomas Lindell wrote: Gah just when I thought I had spam problems resolved not it appears someones able to send spam directly from the server Return-Path: <[

Re: Spamassassin -r on Already Spam?

2006-07-26 Thread Stuart Johnston
John Andersen wrote: Am I messing up my Bayes in an attempt to help out razor and spamcop? No, it helps.

Re: traveling user unable to email

2006-07-25 Thread Stuart Johnston
Jean-Paul Natola wrote: -Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 4:53 PM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: traveling user unable to email Jean-Paul Natola wrote: -Original Message- From

Re: traveling user unable to email

2006-07-25 Thread Stuart Johnston
Jean-Paul Natola wrote: -Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 4:19 PM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: traveling user unable to email Jean-Paul Natola wrote: I'm really getting frust

Re: traveling user unable to email

2006-07-25 Thread Stuart Johnston
Jean-Paul Natola wrote: I'm really getting frustrated here I whitelisted all her email addresses and aliases whitelist_from_rcvd [EMAIL PROTECTED] fcimail.org whitelist_from_rcvd [EMAIL PROTECTED] familycareintl.org whitelist_from_rcvd [EMAIL PROTECTED] fcimail.org whitelist_from_rcvd [EMAIL

Re: traveling user unable to email

2006-07-25 Thread Stuart Johnston
Jean-Paul Natola wrote: Hi all I have a user that is now in Africa and she is unable to send to any external user using outlook , and when attempting to use Eudora she gets a "your message scored 6.7 points" I have whitelisted her in my local.cf but Eudora stills gives her the message congratul

Re: Bug in sa-learn (Debian :3.0.3-2sarge1)

2006-07-24 Thread Stuart Johnston
This is just a warning that you can ignore. If it bothers you, the best solution would be to upgrade to 3.1.3. Alternately, you could try this on your lib/Mail/SpamAssassin/HTML.pm: 182c182,189 < $hp->parse(pack ('C0A*', $text)); --- > { > local $SIG{__WARN__} = sub { > warn @_ u

Re: Problem with exim and spamd set for my own user (fall back to nobody?)

2006-07-14 Thread Stuart Johnston
Are you using exiscan? If so, you need something like this in your acl: spam = spamd See for full examples: http://duncanthrax.net/exiscan-acl/exiscan-acl-examples.txt Giorgio Volpe wrote: I'm running spamassassin SpamAssassin Server version 3.1.1 running on Perl 5.8.8 with

Re: body speedups using new features in perl 5.9.x

2006-07-12 Thread Stuart Johnston
Bowie Bailey wrote: [EMAIL PROTECTED] wrote: While I doubt it'd have quite the performance gains that A-C can offer, Regexp::Assemble certainly sounds like something worth trying... the coderef trick, in particular, is very nifty. It can work well. After reading about it here, I tried it on

Re: spamassassin and sql

2006-07-06 Thread Stuart Johnston
Martin Schiøtz wrote: Hi I'm trying to setup spamassassin with postgres for with bayes_sql, awl_sql, dcc, razor using sql user_pref etc. I have configured the database with: http://spamassassin.apache.org/full/3.1.x/dist/sql/awl_pg.sql wget http://spamassassin.apache.org/full/3.1.x/dist/sql/bay

Re: Blocking all inline GIF or JPG Images

2006-06-27 Thread Stuart Johnston
Matt wrote: An inline gif is INLINE with HTML.. an attached GIF is attached to the message and the message is in MIME-text format. HTML does not belong in e-mails. Well, that's easy then. If you want to block all html messages, just score up: HTML_MESSAGE If you want to only hit those wit

Re: Blocking all inline GIF or JPG Images

2006-06-27 Thread Stuart Johnston
Matt wrote: 1 - No legit e-mail should have in-line gifs.. they should be attached. I guess I'm missing something. What is the difference between an inline gif and an attached gif?

Re: Dev list on an RBL

2006-06-27 Thread Stuart Johnston
Daryl C. W. O'Shea wrote: Chris Santerre wrote: dev@spamassassin.apache.org mailing list Blockedby cbl.abuseat.org Oh noes! :) Both the users@ and dev@ lists use the same servers, so I don't see how you'd have one listed and not the other. Any particular IP that you see listed? I receiv

Re: Start it up

2006-06-26 Thread Stuart Johnston
Brian Hamlin wrote: I am putting along with Perl. I just wrote a script that loops through my mail, reads a msgs, sends it to SA, then writes it out to a nw mbox. When it is done, it copies the new mbox into the system one. * horribly slow * will miss mails * mayeb I made more mistakes but it

Re: How to avoid MSGID_DOLLARS, PRIORITY_NO_NAME, RATWARE_OUTLOOK _NONAME

2006-06-23 Thread Stuart Johnston
markwolk wrote: Thanks for giving me the benefit of the doubt. I am by no means a spammer; I send an average of 40 mails a day, most replies to enquiries and regular day-to-day correspondence. Worrying about being mistaken for a spammer is more than watchmaker's perfectionism when I see that the

Re: Adding Phishing Link rule

2006-06-19 Thread Stuart
Unfortunately, although many phishing mails would match this rule, just as many ligitimate messages would as well. Check the archives. http://www.nabble.com/Detecting-phishing-urls-t1027084.html#a2669493 On Sat, 17 Jun 2006 21:56:03 +0200 Yves Goergen <[EMAIL PROTECTED]> wrote: Hello, I'm ru

Re: Bad quoting

2006-06-08 Thread Stuart Johnston
Philip Prindeville wrote: I noticed the following message (well, I'll just put a fragment): Note that the '=' got escaped as '=3D' they probably entered the text and their HTML editor escaped it, not figuring it was raw HTML being entered directly... =3D comes from quoted-print

Re: How to handle your domain in received from field

2006-06-08 Thread Stuart Johnston
Ronald I. Nutter wrote: I am fighting a situation where two vendors used by my college are sending email out authorized by the college (remote distance learning situations) where the email looks like it came from us because it has our domain name in the from field. I had been using a global blac

Re: Another example...

2006-06-08 Thread Stuart Johnston
Looks like you have [EMAIL PROTECTED] whitelisted somewhere. That's probably a bad idea. Spam usually uses a spoofed address. NW7US, Tomas wrote: Here are headers from another example of spam, that is marked STRONGLY as NOT being spam. What is VERY interesting about THIS one, is that it see

Re: Virtual Users

2006-06-08 Thread Stuart Johnston
http://www.exim.org/eximwiki/ExiscanExamples#head-962411f515d3c420ace6c0672cd70e91224f4355 David O'Brien wrote: Hello, Thanks for the reply. I am quite new at this. I didn't actually know a lot about spamc. Well I still don't but I have read a little bit about it now. I am calling SpamAssas

  1   2   >