Re: sa-learn on an Exchange public folder

Does anything "speak" against just fetching the message from said folder (ex getmail or fetchmail) and feed them to sa-learn? At least for getmail one can define a filter section which then calls sa-learn and give it the message for learning. I use a getmail config like this [retriever] type = Si

Re: sa daemon loads config different to shell ?

> Jul 26 23:04:41 topixx2 spamd[22655]: asn: no first external relay IP available, skipping ASN check the plugin seems to be loaded but as no external relay IP found there is nothing to check. Ensure that your trusted_networks and/or internal_networks is set correctly. Cheers tobi On 7/27/21 10

Re: Matching on X-Spam headers doesn't get a hit

Martin, most MTA should have some filter capabilities. Maybe not all MTA have same powerful and efficient ways to perform such checks as postfix has ;-) iirc something like this should work for exim acl_smtp_data = check_message check_message:   deny message = 'Outscatter detected'   regex = ^X-S

Re: My 10 years old domain have a bad TLD

Hi Denis On 5/3/21 10:15 AM, Denis Chenu wrote: > And clearly : i never receive any spam fro .pro domain myself. you said the right word: myself. It all depends on your millage. We get a lot of spams/non-coi a day from .pro domains. Sure .com sends more spam but that might be due to fact that

Re: XM_RANDOM rule seems to hit too often

John, found that the following does hit much better > X-Mailer =~ /^[^\(]+q(?!q?mail|boxmail|\d|[-\w]*=+;)[^u]/i to ensure that search is never found after '(' Now I get a coffee as well although is almost end-of-working-day coffee here :-) Cheers & have a good one -- tobi

XM_RANDOM rule seems to hit too often

We for the last couples of days we see many hits of XM_RANDOM rule on legit mail. Samples of X-Mailers it hits > *X-Mailer:* AspQMail 2.0 4.03 (QSM260971F) > X-Mailer: WebService/1.1.18138 YahooMailAndroidMobile YMobile/1.0 (com.yahoo.mobile.client.android

Is there a way to perform selective full uri rbl lookups?

Hi list I'm looking for a way in spamassassin to run a full-uri-host rbl lookup for a specific rule. I do not want to discuss about sense or non-sense of full-uri-hosts lookups ;-) lets assume I have two rules which query my own rbl urirhssub HIT_DOMAINmy.rbl.tld. A 127.0.0.2 bodyHIT

kam.cf no hit on spam

Hi just found a spam today from "Michael Kors" that slipped through kam.cf rules. Sender was "Free|MichaelKors|USA " May be change rule to __ KAM_KORS1 From =~ /Michael.?Kors/i ? Cheers Tobi

Re: Random word spams and wiki spams

Am 07.07.2017 um 19:04 schrieb Alex: > > I'm interested in how your system would have (or currently does) > handle this email I received some days ago: > https://pastebin.com/innRFvZt > that one triggers one of my redpill meta rules and scores at 24.1 __HAS_LIST_ID exists:exists:List-Id HAS_L