Re: Fwd: [mailop] SORBS Closing.

mall user of SORBS via SpamAssassin 4.0, I assume the correct response to disable use of SORBS is to place the following in my local.cf file: dns_query_restriction deny sorbs.net Is that correct and is there any additional portions of local.cf I need to configure so that I am no longer consulting SORBS ? Thanks, - J

"deadline shrunk" in logs ?

t does the expression "deadline shrunk" mean ? Thanks, - J

Re: Multiple REFUSED logs with sorbs.net ?

On 2024-05-17 23:13, Noel Butler wrote: On 18/05/2024 08:14, J Doe wrote: Hello, I make use of SpamAssassin 4.0.0 on a low volume e-mail server.  I also run my own validating resolver with Bind 9.18.27 on the e-mail server. The only piece of software I have in my e-mail stack that uses

Multiple REFUSED logs with sorbs.net ?

there are always *multiple* REFUSED results only for sorbs.net. Am I exceeding the number of free queries that SORBS allows ? If so, do I need to register with SORBS (similar to how SpamHaus requires registration to use their DQS service) ? If so, how do I update my SA configuration ? Thanks, - J

Re: localhost lookups ?

On 2024-02-24 00:26, Matija Nalis wrote: On Fri, Feb 23, 2024 at 06:43:53PM -0500, J Doe wrote: 23-Feb-2024 18:33:02.422 queries: info: (localhost.ca): query: localhost.ca IN +E(0) (127.0.0.1) 23-Feb-2024 18:33:02.422 queries: info: (localhost): query: localhost IN +E(0) (127.0.0.1

localhost lookups ?

: localhost.tld for a mail server with another TLD (ie: mail.com -> localhost.com) ? If others have seen this, is it result of a configuration parameter ? Thanks, - J

Support for RHSBL ?

idn't see if I could wire up my own RHSBL with SA. Thanks, - J

Re: Ensuring SPF/DKIM for @gmail.com

On 2023-07-25 19:39, Benny Pedersen wrote: J Doe skrev den 2023-07-26 01:20: its a one liner with welcomelist_auth Hi Benny, Thanks for your reply - perfect: welcomelist_auth is exactly what I was looking for! - J

Ensuring SPF/DKIM for @gmail.com

ensure valid SPF and DKIM, I believe I would need: welcomelist_from_spf *@gmail.com welcomelist_from_dkim *@gmail.com ... or *two* entries. Is that correct ? Thanks, - J

Re: Assistance with rule

antomas wrote: > On 28.04.23 11:04, Joey J wrote: > >I have this rule which I thought looked good, but doesn't seem to ever > kick > >in. > > >header FROM_TEST_IP_AND_EMAIL From =~ /sender@sender\.com/i && Received > =~ /from 138\.193\.30\.7/ > > >I wa

Re: FROM_RETURNPATH_MISMATCH

04.23 10:58, Joey J wrote: > >I'm trying to understand why SA keeps scoring this rule, when the sender > >only has their from address, no reply to etc, nothing helping me to > >understand why. > > > >I'm guessing here, but this would be where the reply to

Assistance with rule

Hello all, I have this rule which I thought looked good, but doesn't seem to ever kick in. header FROM_TEST_IP_AND_EMAIL From =~ /sender@sender\.com/i && Received =~ /from 138\.193\.30\.7/ score FROM_TEST_IP_AND_EMAIL -8.0 I was hoping to find the senders email address, then if it's found, see th

FROM_RETURNPATH_MISMATCH

Hello All, I'm trying to understand why SA keeps scoring this rule, when the sender only has their from address, no reply to etc, nothing helping me to understand why. I'm guessing here, but this would be where the reply to differs from the from? Any assistance appreciated. -- Thanks! Joey

Re: Rule Help - not sure what is wrong with my syntax

:57 PM John Hardin wrote: > On Thu, 12 Jan 2023, John Hardin wrote: > > > On Thu, 12 Jan 2023, Martin Gregorie wrote: > > > >> On Wed, 2023-01-11 at 18:39 -0500, Joey J wrote: > >>> Hello All, > >>> > >>> I created this rule to

Rule Help - not sure what is wrong with my syntax

Hello All, I created this rule to check for email addresses matching a list to get added some negative value. I also tried it with just domains so it would be more efficient, but I can't seem to get them to run. Any suggestions? header TO_SPECIFIC_EMAIL eval:check_to_specific_email() describe TO_

Re: Whitelist or add negative values for score

2E16D)) Dec 19 19:39:47 mgw postfix/qmgr[5368]: 1270980A01: removed On Thu, Dec 22, 2022 at 2:24 AM Matus UHLAR - fantomas wrote: > On 21.12.22 15:48, Joey J wrote: > >Thank you for pointing me in the better direction. > >Since not many people are

Re: Whitelist or add negative values for score

ints and it makes us all better evaluate what we are doing and consider efficiency and effectiveness. Thanks!! On Wed, Dec 21, 2022 at 2:39 PM Greg Troxel wrote: > The other thing that should be done for j...@company.com is that > company.com should sign their mail with DKIM, and th

Re: Whitelist or add negative values for score

does not automatically say, ok it's the approved source everything is ok, let them spam out, SA will still score content, and simply not score for bad SPF. 3. The goal is to say for user j...@company.com, if we can confirm the source is their mail server IP, the lets add some negative value,

Re: Whitelist or add negative values for score

words that SA looks at based on rules. We can't whitelist j...@company.com because of course everyone pretending to be him will more than likely get whitelisted and you know the rest. This is why I thought if user j...@company.com from ip 1.2.3.4 condition would allow me to add some negative sco

Re: Whitelist or add negative values for score

Actually, what would be the format, in respect to header for that rule? so header welcomelist_from_rcvd j...@company.com [1.2.3.4] On Mon, Dec 19, 2022 at 8:39 PM Greg Troxel wrote: > > Joey J writes: > > > I'm trying to see if there is a "best way" to

Re: Whitelist or add negative values for score

Thanks, So welcomelist_from_rcvd j...@company.com [1.2.3.4] Is saying if it's received from j...@company.com and the IP combination? And then simply score it welcomelist_from_rcvd score -2 I will try that thank you! On Mon, Dec 19, 2022 at 8:39 PM Greg Troxel wrote: > > Joe

Whitelist or add negative values for score

Hello All, I'm trying to see if there is a "best way" to provide negative scoring for a certain persons email. As an example if j...@company.com is communicating with paypal or other real banking institutions, then at times within the email chain, SA will tag it as spam. I want

How to incorporate network blocks

Hello All, I'm trying to see if there is a way to incorporate network ranges into SA to essentially flag messages. I know I can use iptables and reject it before getting to SA, but in some cases we would have legit email get flagged within these bigger blocks. I'm trying to incorporate: feeds.ds

Re: Block IP's for certain domains based on list

ng it. I agree don't re-invent, but some clients have many providers that send email on their behalf making it more complicated. On Fri, Jul 22, 2022 at 10:08 AM Reindl Harald wrote: > > > Am 21.07.22 um 22:58 schrieb Joey J: > > Hello, > > > > Is there a way for

Block IP's for certain domains based on list

Hello, Is there a way for me to block mail that claims its from a certain domain, based on my own valid ip address list? Example: myserver.com - IP address 1.2.3.4 If a messages comes in from any server other than 1.2.3.4 for domain myserver.com reject it? I know SPF/DKIM/DMARC would also help

Re: RBL via Spamassasin configuration

> wrote: > On 2022-06-28 at 14:38:16 UTC-0400 (Tue, 28 Jun 2022 14:38:16 -0400) > Joey J > is rumored to have said: > > > Hello All, > > > > In trying to setup RBL's with SA, I wanted to make sure the proper way > > to > > do it. &

Re: RBL via Spamassasin configuration

Thank you, this makes sense, I will look through the mentioned resource. On Tue, Jun 28, 2022 at 5:28 PM Bill Cole < sausers-20150...@billmail.scconsult.com> wrote: > On 2022-06-28 at 14:38:16 UTC-0400 (Tue, 28 Jun 2022 14:38:16 -0400) > Joey J > is rumored to have said:

RBL via Spamassasin configuration

Hello All, In trying to setup RBL's with SA, I wanted to make sure the proper way to do it. I have seen some samples like this header RCVD_IN_BARRACUDACEN eval:check_rbl('bbarracuda-lastexternal', 'b.barracudacentral.org.') describe RCVD_IN_BARRACUDACEN Relay is listed in b.barracudacentral.org tf

Re: Linting of local.cf

On 2022-04-15 09:21, Benny Pedersen wrote: On 2022-04-15 03:52, J Doe wrote: Out of curiosity - why doesn't SpamAssassin lint automatically when it reloads local.cf ? i ask in reverse, do you want spamd to be down on lint fails ? we have not seen default rules never have zerro lint

Re: Linting of local.cf

local.cf $ spamassassin --lint ... warn: config: failed to parse line, skipping, in "/etc/spamassassin/local.cf": blakclist_from u...@example.com Out of curiosity - why doesn't SpamAssassin lint automatically when it reloads local.cf ? Thanks again, - J

Re: Linting of local.cf

On 2022-04-14 21:09, Benny Pedersen wrote: On 2022-04-15 02:42, J Doe wrote: Because I did not see any warnings or errors on restart, I was wondering: ** Does SpamAssassin lint the local.cf file on re-load ? it does just not load lines with are lint fails, it runs without this line then

Linting of local.cf

e a way to manually lint local.cf to catch mistakes that I have made with keywords ? Thanks, - J

Re: RCVD_IN_DNSWL_HI false positives

es that allows SPAM though is a bad way to enforce > policy. It sounds like they've tried other options but didn't get a response from abusive users so this is the 'last resort' option. -- Daniel J. Luke

Re: BCC Rule and Subject change for specific rule

Thanks for the follow up. I understand what you are saying. This is SA within ProxMox Mail gateway, I added my custom rule via SA which is working, just this additional function. On Mon, Jan 4, 2021 at 8:23 PM John Hardin wrote: > On Mon, 4 Jan 2021, Joey J wrote: > > > If I

BCC Rule and Subject change for specific rule

Hello All, If I'm understanding things correctly, there is a way for me to BCC spam messages which lets say score 10 and send a BCC to an email address, but I'm trying to do it within only 1 rule, as well as modify the subject. What I don't want is a BCC sent for every messages which is scored a

How to Block messages from display name not matching expected sender email address

Hello, I'm trying to figure out how to write a rule that looks for matches of certain names against the display name, and then insuring its from a list of valid email addresses. So a phishing email come in from "Boss Man" So I want to check if the display name is "Boss Man" and if so, make

Re: txrep duplicated key with postgresql

due > to a difference in the way it handled duplicate keys compared with the > database that normally supports it. > > Martin > -- Daniel J. Luke

Re: DNS and RBL problems

vice. The first hints were those counters increasing at the same time as the mysterious issue happening. -- Daniel J. Luke

Re: Make test fails on macOS High Sierra - help needed

On Sep 8, 2018, at 8:48 PM, Sidney Markowitz wrote: > Macports install of db48 should work for that, but I haven't tried it. I use this (with a perl I built myself outside of macports) and I can confirm it works. -- Daniel J. Luke

Question regarding auto-learning

: bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_learn_threshold_spam 12.0 Can this be used before training the database or is it more often used to supplement (on an ongoing basis), a database that has already be trained ? Thanks, - J

Re: Method of setting score for a custom rule to be the required_score ?

rcuit plugin . . . is there more documentation (perhaps in another man or perldoc), where the shortcircuit keyword is mentioned ? Thanks again, - J

Re: Method of setting score for a custom rule to be the required_score ?

mar to have variables ? I was thinking I’d have something like the following in my: /etc/spamassassin/local.cf POISON_PILL = 100 …and then all the poison pill rules would reference that: score CUSTOM_RULE1 %POISON_PILL …with the advantage being that if I did want to vary the score assigned to all these rules, I could change it in one place ? Thanks, - J

Method of setting score for a custom rule to be the required_score ?

is used by SA rule writers ? Thanks, - J

Re: Question regarding trusted_networks

is using when it has already parsed local.cf and is running ? Thanks again, - J

Question regarding trusted_networks

question is: — Should I manually set trusted_networks to have the IP address of the host it is running on and ignore the warning from --lint or … — Should I not set trusted_networks and ignore the warning from --debug ? Thanks, - J

Re: Sa-update failed

On Fri, Dec 15, 2017 at 04:26:45AM -0700, @lbutlr wrote: > FreeBSD system on 11.2-RELEASE with all packages updates as of this morning > (including a complete recompile of SA from ports). FreeBSD 11.1-RELEASE! You probably upgraded from 10.x and executed 'make delete-old-libs'!? Did you install pa

Re: getting help with SA sysadmin

f) another 'easy' test I would try would be to set numcpus in runGA to 1 just in case the problem is that somewhere there are multiple writers overwriting parts of the same file -- Daniel J. Luke

Re: getting help with SA sysadmin

the SA server now but it contains a lot of > files. I need to find the large dirs and exclude them. -- Daniel J. Luke

Re: getting help with SA sysadmin

s like it's building a version of SpamAssassin from trunk svn? maybe you are referring to something else?) -- Daniel J. Luke

Re: DNS again

On Jun 3, 2016, at 12:51 PM, Daniel J. Luke wrote: >> if the first hop in dns is 127.0.0.1 it works > > that's not how +trace works oh, nevermind - you are right. It will query for the root servers from your configured resolvers. -- Daniel J. Luke

Re: DNS again

onf only have one single line with nameserver > 127.0.0.1 nothing more nothing less good advise. > drop unbound if it cant make it right, replace it with bind9 either works fine if configured correctly (and not so well if configured incorrectly). -- Daniel J. Luke

Re: understanding HELO_DYNAMIC_IPADDR

-effective anti-spam measure I ever took (I had to stop using it to outright reject mail because of too many false positives, though). -- Daniel J. Luke

Re: understanding HELO_DYNAMIC_IPADDR

ikely experience delivery problems to many hosts as long as your dns or rdns 'looks like' a dynamic system. While you are at it, make sure your forward and reverse dns match. -- Daniel J. Luke

Re: spamd running much slower than spamassassin?

On Mar 29, 2016, at 10:41 AM, Daniel J. Luke wrote: > On Mar 28, 2016, at 8:57 PM, Bill Cole > wrote: >> On 28 Mar 2016, at 14:42, Daniel J. Luke wrote: >>> On Mar 24, 2016, at 12:10 PM, Daniel J. Luke wrote: >>>> /usr/bin/time spamassassin < spam.msg &

Re: spamd running much slower than spamassassin?

On Mar 28, 2016, at 8:57 PM, Bill Cole wrote: > On 28 Mar 2016, at 14:42, Daniel J. Luke wrote: >> On Mar 24, 2016, at 12:10 PM, Daniel J. Luke wrote: >>> /usr/bin/time spamassassin < spam.msg >>> 7.92 real 1.85 user 0.13 sys >>&g

Re: spamd running much slower than spamassassin?

On Mar 24, 2016, at 12:10 PM, Daniel J. Luke wrote: > /usr/bin/time spamassassin < spam.msg >7.92 real 1.85 user 0.13 sys > > /usr/bin/time spamc -U /var/run/spamd.sock < spam.msg > 126.44 real 0.00 user 0.00 sys well, it looks

spamd running much slower than spamassassin?

but I'm not sure why that would be / where I should look next to troubleshoot and fix. -- Daniel J. Luke

Re: DNS lookups - bug with recursive lookups, or shoddy bind config?

On 04/01/2016 20:48, Joe Quinn wrote: By the way, have you considered subscribing to the dev@ list and contributing to SA? You ran through this issue pretty much perfectly, other than the bad luck with our Bugzilla's results on Google. Time is my main issue (that and being a rather rusty with p

Re: DNS lookups - bug with recursive lookups, or shoddy bind config?

On 04/01/2016 20:39, Quanah Gibson-Mount wrote: If you're using Net::DNS 1.01 or later, you must patch SA. There is an entire thread dedicated to this issue.

DNS lookups - bug with recursive lookups, or shoddy bind config?

Before I raise this on Bugzilla, I just want to run this past people as I'm quite happy that I've failed to configure something, but can't see what. In short, RBL blacklists haven't been working and I've finally, with tcpdump, traced it to SpamAssassin not requesting recursive queries. The se

Re: Bayer Filter Not Working

On Sat, 5 Jul 2014 09:11:13 -0700 (PDT) John Hardin wrote: > > This appears to be a bit of odd coding in the Bayes DBM module. It's > passing a message to logger with unused arguments. > > I haven't done a deep analysis, but you might try this patch: > > Index: lib/Mail/SpamAssassin/BayesStore/D

Re: Bayer Filter Not Working

On Sat, 05 Jul 2014 16:02:29 +0200 Mark Martinec wrote: > On 2014-07-05 14:18, Herbert J. Skuhra wrote: > > >>>>> Jun 24 13:47:53.167 [3245] warn: plugin: eval failed: Insecure > >>>>> dependency in sprintf while running with -T switch at > >>

Re: Bayer Filter Not Working

On Thu, 03 Jul 2014 12:05:34 +0200 Herbert J. Skuhra wrote: > Den 01.07.2014 23:05, skrev Herbert J. Skuhra: > > On Tue, 01 Jul 2014 09:37:17 +0200 > > Herbert J. Skuhra wrote: > > > >> Den 25.06.2014 00:42, skrev Bruce Sackett: > >> > I apologize, I’m s

Re: Bayer Filter Not Working

Den 01.07.2014 23:05, skrev Herbert J. Skuhra: On Tue, 01 Jul 2014 09:37:17 +0200 Herbert J. Skuhra wrote: Den 25.06.2014 00:42, skrev Bruce Sackett: > I apologize, I’m sure it’s been covered, but I have not been > successful finding results in searches on the web or through the > h

Re: Bayer Filter Not Working

On Tue, 01 Jul 2014 09:37:17 +0200 Herbert J. Skuhra wrote: > Den 25.06.2014 00:42, skrev Bruce Sackett: > > I apologize, I’m sure it’s been covered, but I have not been > > successful finding results in searches on the web or through the > > history of the list. I get no

Re: Bayer Filter Not Working

Den 25.06.2014 00:42, skrev Bruce Sackett: I apologize, I’m sure it’s been covered, but I have not been successful finding results in searches on the web or through the history of the list. I get no BAYES results in the headers, so I don’t see any working. The part that gets me is below: Jun 2

Re: My Mad Plan's Achillies heel?

>>> On 3/29/2012 at 7:17 PM, "j...@j4computers.com" >>> wrote: >> If you trust those ISPs to not forge headers, then add them to the trusted >> list too, and that will push the checking boundary back to where they >> received the me

Re: My Mad Plan's Achillies heel?

> If you trust those ISPs to not forge headers, then add them to the trusted > list too, and that will push the checking boundary back to where they > received the message from. > > -- > John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ > jhar...@impsec.orgFALaholic

Re: My Mad Plan's Achillies heel?

>> Hmm, I use fetchmail to grab mail from various accounts. > add the ip address (last received) from each account to trusted_networks > in local.cf. > > >> S . . . the actual source or "IP of interest" will not be the > connection IP. > Thanks, but the "last received" will always be t

My Mad Plan's Achillies heel?

Continuing my learning curve with spamassassin, I find a fly in the ointment. Some SPAM continues to slip thru. I thought, oh well, I'll just block by IP. Hmm, I use fetchmail to grab mail from various accounts. S . . . the actual source or "IP of interest" will not be the connection

Re: submitting samples - empty link

However, this link -> http://gtmp.org/doku.php/pub_sa-postfix.en.html says there is nothing to see here . . . move along . . . move along . . . >>> "j...@j4computers.com" 03/27/12 10:27 AM >>> And, if I had read a bit further, I would have seen the bit about s

Re: submitting samples

And, if I had read a bit further, I would have seen the bit about setting up postfix alias(s) for just this purpose. Sorry for the bother. Still, suggestions welcome. >>> "j...@j4computers.com" 03/27/12 10:23 AM >>> I see that, to report SPAM and have spa

submitting samples

I see that, to report SPAM and have spamassassin "learn", I can do "spamassassin -r < message.txt". However, it is not clear what form "message.txt" should take. Since, by the time my mail client receives the missed SPAM, it has been altered from its "native" internet email form, I will have

Re: sa-update

>>> On 3/26/2012 at 11:21 PM, Duane Hill wrote: > On Tuesday, March 27, 2012 at 02:48:08 UTC, jer...@fluxlabs.net confabulated: > >> Sa-update should reload SA, therefore reloading rules. What error are you > getting ? > > You have to reload spamd after sa-update if any rules were updated to >

Re: sa-update

>>> On 3/26/2012 at 10:48 PM, Jeremy McSpadden wrote: > Sa-update should reload SA, therefore reloading rules. What error are you > getting ? > > > -- > Jeremy McSpadden Running "/usr/sbin/spamassassin reload" produces "warn: archive-iterator: unable to open reload: No such file or directory

sa-update

After running sa-update, will restarting spamd load the new rulesets? I see references to "spamassassin reload" but that seems to present an error message.

Re: spamfilter:dummy - not found

>>>> Ralf Hildebrandt 03/26/12 9:40 AM >>> >* j...@j4computers.com : >> SpamAssassin Server version 3.2.4 >> running on Perl 5.8.8 >> with SSL support (IO::Socket::SSL 0.97) >> with zlib support (Compress::Zlib 1.35) >> >> Had i

spamfilter:dummy - not found

SpamAssassin Server version 3.2.4 running on Perl 5.8.8 with SSL support (IO::Socket::SSL 0.97) with zlib support (Compress::Zlib 1.35) Had it working, but . . . now seeing in /var/log/mail 'transport unavailable'. . . .'spamfilter.dummy . . . no such file or directory' (paraphrased) Was

Re: Mangled headers?

. . . > > Must be a configuration issue? Working now after some fiddling and a reboot. Odd that stopping and starting postfix and spamd did not seem to "see" the changes, but it worked after a reboot.

Mangled headers?

; 0003cafd 4f6f133f MAIL FROM: SIZE=295 RCPT TO: ORCPT=rfc822;j...@mydomain.com Received: from my-host.mydomain.com ([192.168.x.xxx]) by FS-Blah with ESMTP; Sun, 25 Mar 2012 08:44:47 -0400 Received: by my-host.mydomain.com (Postfix, from userid 1000)

dccproc/dccifd error

Hi, I am using perl-5.10.1, amavisd-new 2.7.0, Mail-SpamAssassin-3.3.2 and dcc-dccd-1.3.140. When I receive and scan a message with a 'X-DCC-xxx-Metrics'-header the following error is logged to maillog: Dec 23 01:04:53 mx dccproc[81847]: unrecognized "many" usage: [-VdAQCHER] [-h homedir] [-

Re: --virtual-config-dir without -u

On 11-10-16 03:37 PM, RW wrote: > > Could you not just run a script from cron that does chown ${USER}:spamd > and chmod g+rw on all the files in the virtual home directories. You seem to have gotten lost in minor details and lost sight on the original problem which is that of being able to run sp

Re: --virtual-config-dir without -u

On 11-10-16 03:12 PM, RW wrote: > > Not if you set --virtual-config-dir. Right. But such a change (i.e. a different $HOME on the server than on any other machine) is still on the "transparent to users" change that I am looking for -- the change that requires no user re-training and no increase i

Re: --virtual-config-dir without -u

On 11-10-16 02:08 PM, Martin Gregorie wrote: > Yep. A brainfart on my part. No worries. :-) > OK - if the MTA runs spamc (Postfix does this via a service defined as > part of its configuration - others MTAs have a similar ability) the -u > facility can be used to select the preference file much

Re: --virtual-config-dir without -u

On 11-10-16 01:31 PM, Martin Gregorie wrote: > > Have you thought of running spamc remotely? This way you could avoid the > need to login the the server just to process mail. Hrm. I'm not sure I follow. The server receives the mail and the server delivers it to the user's mailbox but on the way

Re: --virtual-config-dir without -u

On 11-10-16 12:16 PM, Christian Grunfeld wrote: > > You should have spamd running as root, But I do that already. That is what is causing the problem with the new switch (--virtual-config-dir=...): spamd: cannot use --virtual-config-dir without -u > then it can setuid to the > calling spamc ui

--virtual-config-dir without -u

Hi, In my network, users have their home dirs on their local machines (for performance) which are automounted to the mail server for purposes of spamd accessing their ~/.spamassassin dirs. This of course fails when a machine is turned off so I want to move users' ~/.spamassassin dirs to the serve

Re: DNSBL checks only on last untrusted host

val:check_rbl_txt('spamcop-lastexternal', 'bl.spamcop.net.', '(?i:spamcop)') -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com

Re: X-Spam-Version-Checker reports 3.2.3 but running 3.3.1 - Why?

7;ve done wrong? I think that's a mailscanner bug... There has been some discussion on this list about this in the past... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com

me.com as freemail?

I notice that me.com (Apple's "mobile me") is now offering a "free 60 day trial" for their mail solution. About half the mail from me.com has been spam here lately, so I've added it to my local list of freemail domains. Anyone seen anything similar? -- Daniel

Re: How do I filter out phishing email?

? You will need to restart it to load the new rules > The commands I used are: [...] > sa-update --channelfile sa-update-channels.txt --gpgkeyfile > sa-update-keys.txt -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com

Re: What happened to SOUGHT rules' server?

> I've been having the same problem from several locations/ISPs, since > mid-Saturday. > "500 Can't connect to yerp.org:80 (connect: timeout)" > > Dave Anyone figure this out? I have received the same yerp.org down errors and it's screwing up my SA royally. I guess this is "what we get" when we

Re: Whitelists in 3.3.0

at position. As a one-liner, it is something that can be tacked on the end of a script that calls sa-update (or in the middle, if you follow up your sa-update with an sa-compile). Just watch out for the two spaces in the cut command `cut -d\ -f1-3` >I never would have thought of doing it that

Re: is bayes enabled by default?

At Sun, 17 Jan 2010 11:57:45 -0800 (PST), tonjg wrote: > > > > Herbert J. Skuhra wrote: > > > > > > It would show disabled if use_bayes or use_bayes_autolearn is off. Sorry, use_bayes_autolearn is wrong. :-) > thanks but in what file would it sho

Re: is bayes enabled by default?

At Sun, 17 Jan 2010 10:57:55 -0800 (PST), tonjg wrote: > > > I have sa version 3.2.5 > my autolearn setting always shows as 'no'. Will this eventually come on by > itself or do I need to turn it on? > thanks for any advice. http://wiki.apache.org/spamassassin/AutolearningNotWorking It would sho

Re: hostkarma false positive

R_RELAY received from a host that does a lot of backscatter score RCVD_IN_BACKSCATTER_RELAY 1.30 -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com

Re: FH_DATE_PAST_20XX

At Thu, 31 Dec 2009 17:53:24 -0800 (PST), John Hardin wrote: > > On Fri, 1 Jan 2010, Mike Cardwell wrote: > > > I just received some HAM with a surprisingly high score. The following > > rule triggered: > > > > * 3.2 FH_DATE_PAST_20XX The date is grossly in the future. > > > > Yet the date head

Re: habeas - tainted white list

On Fri, 2009-12-18 at 12:53 +, Christian Brel wrote: > On Fri, 18 Dec 2009 06:49:41 -0600 > Daniel J McDonald wrote: > > > On Fri, 2009-12-18 at 08:49 +, Christian Brel wrote: > > > On Fri, 18 Dec 2009 03:44:32 -0500 > > > "Daryl C. W. O'Shea&

Re: habeas - tainted white list

who really is in charge of this project? > It's been fixed. Don't you know how to use bugzilla? http://svn.apache.org/viewvc/spamassassin/trunk/rules/50_scores.cf?r1=891460&r2=891459&pathrev=891460 The new scores will come out in 3.3.0, RC1 is very soon... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com

Re: sa 3.3 problem with spec file?

sc/%{name}/%{name}-%{version}%{beta}.tar.gz Source1: ftp://ftp.isc.org/isc/%{name}/%{name}-%{version}%{beta}.tar.gz.asc > > Kai > -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com

  1   2   3   4   >