Re: IP Address of DSL being marked down when using authenticated SMTP/office 365

Sorry yes, penny drop now.. Jonathan > On 26 Nov 2020, at 15:06, RW wrote: > > On Thu, 26 Nov 2020 10:39:29 + > Jonathan Gilpin wrote: > >> The header: x-originating-ip: [86.129.191.88] >> >> is being put in by office 365.. it is already in when our e

Re: IP Address of DSL being marked down when using authenticated SMTP/office 365

The header: x-originating-ip: [86.129.191.88] is being put in by office 365.. it is already in when our exim (FreeBSD Port Exim-sa-exim) receives the mail from Office 365.. IS there a way to make SpamAssassin ignore this x- header? Jonathan > On 25 Nov 2020, at 14:13, Kevin A. McGrail wr

IP Address of DSL being marked down when using authenticated SMTP/office 365

eaders.. so is this a setup error on my part or a spam-assassin change? or a mistake? Obviously I need to resolve/stop this to reduce false positives.. Kind Regards, Jonathan Gilpin Full headers are: Return-path: Envelope-to: jonat...@fluent.ltd.uk Received: from [40.107.8.121] (port=

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

> On Jul 9, 2020, at 9:00 PM, Kevin A. McGrail wrote: > > IMPORTANT NOTICE > > If you are running trunk, we are working on changing terms like whitelist to > welcomelist and blacklist to blocklist. > > https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7826 >

Re: URIBL_SBL_A - Spamhaus false positive..

found anyone using spamassassin that is not getting the same result Jonathan > On 23 Jan 2020, at 13:46, Dominic Raferd wrote: > > > > On Thu, 23 Jan 2020 at 13:06, Jonathan Gilpin <mailto:jonat...@fluent.ltd.uk>> wrote: > Hi, > > It seems that SpamAsassin is

URIBL_SBL_A - Spamhaus false positive..

Has anyone come across this before or can someone give any advise of what the cause of this might be? most importantly how to fix it? Kind Regards, Jonathan Gilpin fluent Ltd www.fluent.ltd.uk <http://www.fluent.ltd.uk/>

Is SpamAssassin using ARC-headers?

it in the roadmap? I am fully aware that ARC is still in draft. / Jonathan signature.asc Description: OpenPGP digital signature

Re: Anyone else just blocking the ".top" TLD?

>> >> On Wed, Apr 27, 2016 at 5:39 PM, @lbutlr wrote: >> On Apr 27, 2016, at 2:06 PM, Olivier Coutu wrote: >> > I have affected a hefty penalty in SA to any mail that comes from one of >> > these TLDs: >> > >> > (party|science|click|link|faith|racing|win|zip|review|country|kim|cricket|work|gq|d

Re: Trouble with SPF plugin

rough about 3 layers of different delivery filters, so it's time to check those for culprits. Thursday, November 19, 2015, 12:33:24 PM, you wrote: > On 19 Nov 2015, at 13:05, Jonathan Hilgeman wrote: >> I just recently noticed that I hadn't enabled the SPF plugin, so I did &g

Trouble with SPF plugin

I just recently noticed that I hadn't enabled the SPF plugin, so I did that and ran a quick test to test an SPF failure. However, in the resulting email, I get an SPF_HELO_PASS result and no other SPF_ test results. Did the plugin only run the HELO test and not check the actual IP against

Re: Heads up: Net::DNS update may have quietly broken your SpamAssassin.

> > Your problem is URIBL_BLOCKED. The usual cause of this is running a mail > system that relies on a public-access DNS resolver, although if you have > substantial volume on your system you can have this happen with your own DNS > infrastructure. See http://uribl.com/refused.shtml for detail

Re: Heads up: Net::DNS update may have quietly broken your SpamAssassin.

> On Sep 18, 2015, at 12:41 AM, Bill Cole > wrote: > > nd after many hours of trying to determine why which included reviewing BIND > configs and packet captures and dissection, I nailed it down to SA making DNS > queries without the "recursion desired" flag. Since my local nameservers > isn

Re: .co.at

for ; Thu, 13 Nov 2014 14:25:17 -0500 Received: by 0951643d.29nty.explosis.explosis.co.at (amavisd-new, port 17744) with ESMTP id 09DRBYWWHF5164CNPHMSOJ3D; for ; Thu, 13 Nov 2014 14:25:16 -0500 Hope this is what you want. -Jonathan

Re: SA and Ubuntu 14.04 LTS

On Jul 16, 2014, at 7:31 AM, Chris wrote: > On Wed, 2014-07-16 at 01:50 -0700, Ian Zimmerman wrote: >> On Wed, 16 Jul 2014 06:09:08 +0200 >> Karsten Bräckelmann wrote: >> >>> And to really include *local* plugins, provide a relative path (to the >>> current site-wide configuration dir, without

Re: 'hair' spam

>> >> >> >> Missing Date and Message-Id headers, no Received headers. I'd focus on >> fixing those, before looking at Bayes again. > > Just had a look at various samples here. Correction: The Message-Id > header appears to be missing indeed. > > I have now noticed this with all other message

'hair' spam

I've been getting flooded with pump n dump spams for a particular stock symbol, and my feeble admin skills these days are making it difficult to slow. Been using mailspike, spam cop at the mta, and barracuda too. Here's a sample: http://pastebin.com/Y5q4QTnf What kind of worries me are the lo

Re: Large # of Spam getting through all of a sudden.

On Jun 13, 2013, at 6:20 PM, Alex wrote: > > > It's only been in the last few weeks that I've had real difficulty > with pump-and-dump spam and needing to investigate something > additional. Interestingly, they only seem to work during EDT business > hours. After working with it for a few day

Re: URIBL_BLACK unreilable?

> > So, why is it triggering URIBL_BLACK and URIBL_DBL_SPAM etc now, but > not when I received the original spam? > > Or was the database updated with those > URLs after I received that particular spam? > i It is quite likely that it was not in the database when you received it, but was added

sa-update & different rulesets

sa-update need to be told which rulesets to download? Debian/Ubuntu have a "spamassassin" script in /etc/cron.daily but I didn't see anything in it that was specific to the update channels. Cheers, -- jonathan

Test - ignore

Excuse the test. Testing a delivery issue. I think I clamped down on things a bit too much and broke my own ability to send stuff to/from sourceforge. :-)

Re: spam skating through

> >> This sagrey plugin sounds great, I'm giving it a try now. Thanks for >> the info. > > I'd be wary about that. Personally, the FPs I've had in the past have > overwhelmingly "first contact". I've been giving it a whirl and adjusted the score down a little bit.. So far, it's been doing gr

Re: spam skating through

On Feb 23, 2012, at 12:59 PM, Benny Pedersen wrote: > Den 2012-02-23 18:50, Jonathan Nichols skrev: > >> Now this is something that I have never seen before and am going to >> look into this evening > > setup awl to mask on /32 and keep awl factor at 0.5 > >

Re: spam skating through

> > 1.3 SAGREY Adds score to spam from first-time senders > Now this is something that I have never seen before and am going to look into this evening

Re: spam skating through

Message has a DKIM or DK signature, not > necessarily valid > 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) > > Regards, > KAM > > > > On 2/23/2012 12:10 PM, Jonathan Nichols wrote: >> >> Two examples from the past half hour alone: >&

spam skating through

Two examples from the past half hour alone: http://pastebin.com/SraBrj7r http://pastebin.com/PRspRuLS I'm getting flooded with spam these days. Bayes is on, I'm using the built-in RBLs, hostkarma, mailspike, BRBL, botnet & freemail plugin, pyzor, razor.. and things are still sailing right thro

Re: RCVD_IN_SORBS_DUL on my own emails to self

On Apr 9, 2011, at 5:59 PM, Michelle Konzack wrote: > Hello rstarkov, > > Am 2011-04-09 15:50:36, hacktest Du folgendes herunter: >> Does your header definitely include an ESMTP marker as per the RFC? Mine >> didn't; that was the real issue. We didn't find a bug in this rule. So I >> guess SpamA

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On Mar 19, 2010, at 11:31 AM, Justin Mason wrote: > Release Notes -- Apache SpamAssassin -- Version 3.3.1 > > The Ubuntu package for hardy is *way* out of date and seemingly stuck at 3.2.5, Is it safe to update via CPAN and still retain compatibility with apt-get/aptitude? Cheers!

Botnet keeps tripping

This might be very simple, but Botnet keeps triggering on a local school district. I THOUGHT that I added it to the pass_domains list correctly. Help! Botnet.cf has the following in it: botnet_pass_domains amazon\.com # they use IP in Hostname; dorks botnet_pass_domains

Re: Custom rules

Fabrizio Regalli wrote: Hi Jonathan, nice to hear this. I'm using amavisd-new also. My local.cf <http://local.cf> is owned by root, but readable from world -rw-r--r-- 1 root root 1304 Dec 1 19:00 local.cf <http://local.cf> Do you think this is the problem? 2008/12

Re: Custom rules

Fabrizio Regalli wrote: Hello. I'm writing my custom rule uri LOCAL_URI_VIAPAYPAL /www\.viapaypal\.com\// score LOCAL_URI_VIAPAYPAL 5.0 (for add five points to e-mail contains www.viapaypal.com into body) I've add it to /etc/mail/spamassassin/local.

spamd on a remote server - user_prefs

Hi. I'm testing a setup with DirectAdmin boxes and a dedicated spamd box, but so far I've found that spam_required is a global setting and you can't seem to send user_prefs across since they live on the spamc server. Is there a workaround for this at all? Can SA be told "Ok, user_prefs l

Spam from Gmail & Blogspot

Example spam at: http://www.pbp.net/~jnichols/spam3.txt I've been getting quite a lot of spam that's coming *directly* from Google, using Google servers and referencing blogspot.com (also a Google property) URLs. I've been submitting them to URIBL but naturally, they're constantly changing.

spamd & DirectAdmin

things. Any advice? -- Jonathan

Re: Returned mail spam

On Apr 9, 2008, at 2:16 PM, mouss wrote: Martin Gregorie wrote: On Wed, 2008-04-09 at 19:04, Jonathan Nichols wrote: Guys? He's been joe-jobbed. From the original email: "somebody is using my email as the bounce- back return email. How do I avoid the problem?" If SPF

Re: Configuring SA as frontend to Exchange

Henry Kwan wrote: Hi, Have been running SA on CentOS for a few years now and everything has been working great. But the powers that be want to move to Exchange so I am trying to plan a SA frontend that feeds the Exchange server. As I was thinking over how SA works now and how it might work in

Re: Returned mail spam

On Apr 8, 2008, at 2:50 PM, McDonald, Dan wrote: On Tue, 2008-04-08 at 12:36 -0700, ahgu wrote: They forged the header with my email addr as the return address. When it get bounced back by a server, everything is valid. Since the server strip off most of the content, it can pass the spamass

Re: How to whitelist the recipient?

Roman Serbski escribió: How do I configure SA to whitelist particular recipient's email address? Actually, I think you need "whitelist_to", same syntax as whitelist_from. There are other options: more_spam_to and all_spam_to. See the documentation at http://spamassassin.apache.org/full/3.2.x

Re: OT: uribl.com folks awake?

On Mar 27, 2008, at 10:19 AM, Dallas Engelken wrote: Jonathan Nichols wrote: Sorry for the OT. I've been trying to get in touch with whoever is in charge of URIBL zonefile mirrors without success. Is this thing on? Ping me offlist, por favor. I may have just been pinging the

OT: uribl.com folks awake?

Sorry for the OT. I've been trying to get in touch with whoever is in charge of URIBL zonefile mirrors without success. Is this thing on? Ping me offlist, por favor. I may have just been pinging the wrong people. -- Jonathan

Re: The 'believe-it' spams

On Feb 24, 2008, at 7:39 PM, Bob Proulx wrote: Jonathan Nichols wrote: Anyone catching these? Here's a sample: http://pastebin.ca/916902 Those have been slipping right through these days. Scores are in the pastebin post. Even with a current sa-update and also Justin's (very w

The 'believe-it' spams

Anyone catching these? Here's a sample: http://pastebin.ca/916902 Those have been slipping right through these days. Scores are in the pastebin post. SpamAssassin version 3.2.3 running on Perl version 5.8.7 (From the Ubuntu package, which I cannot for the life of me figure out how to e

Re: Score vs Bars

Matt Kettler wrote: Theo Van Dinter wrote: On Wed, Feb 06, 2008 at 11:52:09PM -0500, Don Ireland wrote: When I look at the message source, the following is among them--this is actually from YOUR reply. X-Spam-Status: No, score=-6.6 X-Spam-Score: -65 X-Spam-Bar: -- Looks like it

Re: ok_languages doesn't seem to work

R. Steven Rainwater wrote: 100% of the non-English email we're getting is spam, so I added this to my local.cf file: ok_languages en However, I can't see that it's having any effect at all. Steven, I think you might need to uncomment loadplugin Mail::SpamAssassin::Plugin::TextCat in

Re: Problem with sa-learn and virtual user

Jean-Edouard Babin wrote: On Jan 17, 2008 1:38 PM, Jonathan Armitage <[EMAIL PROTECTED]> wrote: Jean-Edouard Babin wrote: But i would like to be able to run sa-learn for spefic users I tryed sa-lean --username [EMAIL PROTECTED] --spam files But as I can see with debug (-D) it use baye

Re: Problem with 3.2.2

jobthart wrote: Do you mean this should be solved in 3.2.3? I am having those errors when trying to install the version 3.2.3. So maybe there is still a bug in version 3.2.3 regarding this matter? I was still having this problem last week when trying to install the latest SpamAssassin from CPAN

Re: the opposit of "ok_locales" ??

Karsten Bräckelmann wrote: On Wed, 2007-12-05 at 17:00 +0100, Axel Werner wrote: im looking for some "opposit" parameters of "ok_locales" to make spamassassin mark all incoming mail of some specific charsets or language settings (locales) to get marked by default. Provided it is possible with

Re: what is error code 29 (make: Fatal error)

Jeffrey Pawlan wrote: I have had SpamAssassin version 3.1.7 running on Perl version 5.8.7 running perfectly for a year. The system is a Sun workstation (SPARC) with Solaris 5.9. Last night I tried to upgrade spamassassin to the current version by running as Root: perl -MCPAN -e shell

Re: Win32.pm

Duane Hill wrote: On Tue, 30 Oct 2007 02:04:31 -0400 Payne <[EMAIL PROTECTED]> confabulated: Guys, How can I fix this? error: Can't locate Sys/Syslog/Win32.pm in @INC (@INC contains: The maintainer has just told me that a new version of Sys::Syslog has been uploaded to CPAN which should f

Re: DNSWL question

Mark Wendt (Contractor) wrote: I've started seeing some spam come through that gets labeled with "RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/"; > Can someone point me in the right direction as to how and where I can turn off this rule if it can be turned off? In local.cf:

Re: newbie question: scan msgs smaller than certain size

Tom Bombadil wrote: Thanks for the response Loren, but unfortunately, as far as I know we can specify the "spamd" directive just once in exim. I realise we're getting OT here, but there are at least two ways to call SA from Exim, the built-in hook which you are using, and sa-exim, which calls

[Fwd: Re: unable to run sa-learn utility as non-root user]

Matt Kettler wrote: Srilatha wrote: Hi, I am using SpamAssassin 3.2.1 sa-learn utility is taking user name but it is not running as the given user First, I assume you're trying to use sa-learn -u. If you read the docs closely, the -u parameter to sa-learn *ONLY* works for SQL and virtual con

Perl error after upgrade to 3.2.3

Apologies if I am asking in the wrong place, since I can see that there are several possible reasons. We have just upgraded to SpamAssassin 3.2.3 on an elderly 386 box running Red Hat 9. At the same time I used CPAN to upgrade any out-of-date perl modules. Now, when SA starts, we get the foll

Re: spamd and plugins

assin 3.002000 so given that amavisd is already daemonized... does this suggest that there would be minimal gains in moving to spamd called from postfix? (bearing in mind that amavisd is going to have to stay for virus filtering regardless). thanks, jonathan.

Re: spamd and plugins

Matthias Leisi wrote: Amavisd uses the SpamAssassin Perl module directly (ie not really spamc or spamd). For a high-volume site, amavisd has advantages if you want to do additional checks besides SA (eg virus checking). If you only want to run SA, you could avoid the overhead of amavisd. Ok

spamd and plugins

For a high-volume site, is there any reason to not be running spamc/spamd over amavisd/spamassassin? Specifically, can you use all of the various perl plugins (imageinfo, pdfinfo, botnet, etc...)? Are there any other tradeoffs to this configuration? thanks, Jonathan.

blank mail with pdf attachment slipping right through

I had one slip right through. Looks like PDFInfo.pm loaded too.. Aug 20 14:05:59 mailgate postfix/qmgr[4397]: 6BD0419D66: from=<[EMAIL PROTECTED]>, size=32111, nrcpt=1 (queue active) Aug 20 14:05:59 mailgate postfix/smtpd[2391]: disconnect from localhost[127.0.0.1] Aug 20 14:05:59 mailgate ama

Use of uninitialized value in scalar chomp

my version. Oh yeah, I run Debian Etch. Any idea how I can get rid of these warnings? Jonathan

Re: amavisd & sa not loading plugins?

Theo Van Dinter wrote: On Thu, Aug 02, 2007 at 12:27:55PM -0700, Jonathan Nichols wrote: I tried dumping the PDFInfo.pm plugin there, but it's still not loading it. I also have a copy in /etc/mail/spamassassin along with the cf file, but no dice so far. Plugins aren't automatica

amavisd & sa not loading plugins?

My logs show this: Aug 2 12:22:43 mailgate amavis[2883]: (02883-01) extra modules loaded: Mail/SpamAssassin/Locales.pm, Mail/SpamAssassin/Plugin/Bayes.pm, Mail/SpamAssassin/Plugin/BodyEval.pm, Mail/SpamAssassin/Plugin/Check.pm, Mail/SpamAssassin/Plugin/DNSEval.pm, Mail/SpamAssassin/Plugin/H

RDJ "autoban"

I'm still seeing this when I run RDJ manually. I'm not running it from cron and it's been disabled for weeks. yes, I emailed the address noted in the error. :) [11915] warn: config: failed to parse line, skipping: AUTOBAN: Over 500 *.cf requests in 48 hours period - Check your CRON [11915] wa

Re: Returned mail: see transcript for details

ught I had this > solved ... Hope you get it fixed ... Jonathan

Re: Returned mail: see transcript for details

on earth should their machine think that I am a Polish spammer ? The IP address is in one of the static blocks administered by my (UK) ISP. Jonathan

Re: Returned mail: see transcript for details

e years. Where on earth did this response come from ? It's a bit thick to get branded as a spammer when replying to someone from this list! Jonathan

Errors in CPAN test

plugin/out.1 log/d.spamd_plugin/spamd.err.1 log/d.spamd_plugin/out.3 log/d.spamd_plugin/spamd.err.1 log/d.spamd_plugin/out.5 log/d.spamd_plugin/spamd.err.1 Failed 4/129 test programs. 24/1924 subtests failed. make: *** [test_dynamic] Error 255 What do I do next ? Jonathan

Re: AWL Skyrockets Address Into Spamosphere

now tens of megabytes, > not several gigabytes. Where is "trim_whitelist" - is it a part of the standard SA distribution, because I can't seem to find it on my system ... Jonathan

Re: Spam slipped

Suhas Ingale wrote: Any custom rules to catch this? body    JE_STOCK_ticker6   /\bC[\s\-\_\'\.]?H[\s\-\_\'\.]?F[\s\-\_\ '\.]?R\b|\bO[\s\-\_\'\.]?J[\s\-\_\'\.]?U[\s\-\_\'\.]?F\b|\bC[\s\-\_\'\.]?D[\s\-\ _\'\.]?P[\s\-\_\'\.]?N\b|\bD[\s\-\_\'\.]?S[\s\-\_\'\.]?D[\s\-\_\'\.]?I\b|\b

Folks using amavisd-new and SA...

ner yet. hah.) This setup has been working well for quite a while but I'm almost wondering if it's time to upgrade. Has greylisting helped you out at all? Thanks! -- Jonathan

Re: 404 while getting RDJ updates?

Sic the RIAA lawyers on them. {^_^} What? And give them a chance to show they may have some redeeming quality? Not to those sharks, Joanne, ever. I think that they'd encounter the spammers and a really bizarre "good or evil" loop would form, causing a vortex that would slurp up everyt

Re: 404 while getting RDJ updates?

Its true, scanners indicate klingon war vessels approaching our sector. We've dropped out of warp due to overuse of the dilythium crystals. Federation starships have been called in for assistance. Scottie has given us more power, but is not sure she will hold together much longer. All the whil

VBounce vs backscatter

ssassin/show_bug.cgi?id=5331, which causes some legit bounces to be flagged. Is anyone using VBounce in a large environment? How are you configuring it to avoid flagging legit mail? jonathan.

Amavis / SA / ClamAV

using SA and/or ClamAV. Jonathan Metts

Re: Just a general question

Count me in. 1 domain, 1 user. Why? Just because I can. Evan Platt wrote: At 01:06 PM 3/23/2007, Gary V wrote: I've been on this mail list only for a few months now, and am wondering if I am the smallest guy here. No, you're not. Oh me me me! 1 domain, 1 user. :)

Re: Blocking mail from one specific user to another

Another option would be to use Sieve or another type of server side filter. This way, you would have a few options. You could reject it, discard it, or redirect the message elsewhere. Just an idea, but like the others have said, I wouldn't use SA for it. .metts Michael Connors wrote: Denn

Re: New stock spam (2/14/07)

Maciej Friedel wrote: On 02/14/07 Jonathan wrote: http://www.pbp.net/~jnichols/spam2.txt 0.0 BOTNET_NORDNS IP address has no PTR record 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML 0.0 HTML_MESSAGE BODY: HTML included in message 1.0 BAYES_50 BODY: Bayesian spam probability is 40 to

New stock spam (2/14/07)

Ugh! http://www.pbp.net/~jnichols/spam2.txt I've been getting absolutely hammered with these spams. I had over 50 in my inbox this morning. Any rulesets to deal with them? They're scoring lower and lower all the time. The one I linked to scored -2 :-(

Re: Stock Spam

It's time to switch to 3.1.7, San. Isn't it? :) giampaolo It was time a long time ago. :-) The upgrade is good. sa-update is a useful tool.

Re: Loads of 'xxx wrote:' Spam

John D. Hardin wrote: On Mon, 27 Nov 2006, Jonathan Nichols wrote: I ran sa-update earlier, have URIBL, razor, etc.. and I'm still getting these slipping through. It's tempting to add +3 to "wrote:" in the subject. Do you happen to be using the SARE stocks ruleset? If no

Re: Loads of 'xxx wrote:' Spam

Chris wrote: On Monday 27 November 2006 4:27 pm, John D. Hardin wrote: On Mon, 27 Nov 2006, Bowie Bailey wrote: As has been the suggestion for the past X months, run sa-update. :) we've got to make this a more prominent FAQ somehow... Too bad you can't have a "sticky" thread on a mailing list

Re: Text::Wrap warn

On Thu, Nov 02, 2006 at 10:56:39AM -0500, Theo Van Dinter wrote: > > http://wiki.apache.org/spamassassin/TextWrapError Can you tell me, since I am not a perl guru, how to downgrade this module ? Jonathan

Re: Can someone explain what this header info means?

On Monday 30 October 2006 11:27, Contriver wrote: The 'No' means SpamAssassin doesn't think it is spam. The score is a rating given by SpamAssassin on how likely the message is spam. The higher the number the more likely the message contains spam. Negatives generally mean it isn't likely spa

problem with my queues

sent low priority   :0fw: formail2.lock* ^X-Spam-Flag: YES| formail -I "X-Priority: 5" -I "Priority: Non-Urgent" -I "Importance: low" -I "X-MSMail-Priority: Low"     And also, my mqueues is always grown. I have like 70 message in queues since 2 days. But the new message is working.   regards   Jonathan  

RE: Message headers not being added

he -c option, which just returned the score. As soon as I cleared out the -c, qmail-scanner started processing the message and added all those wonderful headers back into the mix. Problem solved. Sorry for the interruption - I'll be leaving now. :) - Jonathan -Original Message- From

Message headers not being added

,make,make install), I figured I'd try here first. Please help! :) - Jonathan

Re: Broken Dependency

spams made it through SA and found that in the log. Running SA -t on the (saved) spam told me: Broken Pipe and running it with -D as well showed that it broke during base64 decoding - I assume the attachment, a GIF, was badly encoded. Otherwise it looked just the usual text + something in a GIF spam. Jonathan

Broken Dependency

Hi All, I'm running 3.1.5 in FC2 and have a broken dependency. Any ideas how to fix it ? meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Jonathan

Re: Strange Error Log ...

ing started checking the log, I now find that I also have this error reported during startup: spamd[23037]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Any ideas here ? Jonathan

Strange Error Log ...

-date) 3.1.4 with no additions except FuzzyOCR. Any idea what it means ? Jonathan

Re: FuzzyOcr mailing list

ion available, if the people here don't mind that... I'd still keep it all here, myself. You'll still get lots of questions here anyway, from people who don't know about your list, so I'm not sure what benefit there will be to moving to a new list. Sending a new-version message here would be mandatory ! Jonathan

Re: FuzzyOcr mailing list

it and been able to install it. My vote, for what it's worth, is to keep it all here ... Jonathan

Re: I never see BAYES anymore..

Matt Kettler wrote: Jonathan Nichols wrote: I feed all of my spam into Bayes. Stuff that slips through gets fed into bayes as well. but I never see any Bayes hits. spamassassin -D --lint gives me this: Are you *sure* you're running this as the same user your mail gets scanned as?

Re: I never see BAYES anymore..

Matt Kettler wrote: Jonathan Nichols wrote: I feed all of my spam into Bayes. Stuff that slips through gets fed into bayes as well. but I never see any Bayes hits. spamassassin -D --lint gives me this: Are you *sure* you're running this as the same user your mail gets scanned as?

I never see BAYES anymore..

use things have been ok. Just recently a LOT of spam has been slipping through. :-| If anyone wants the full output from spamassassin -D --lint, let me know. Otherwise..any ideas? -- Jonathan

Re: sa-learn --username option

In Solaris, that would be something like: su - user1 -c "sa-learn --spam /home/user2/Maildir/.Spam/cur/" Jon Aaron Axelsen wrote: I am trying to run a cronjob as root which will learn a different accounts spam into my spam db. Example command: sa-learn -u user1 --spam /home/user2/Maildir/.S

"strategic oil" spam

http://www.pbp.net/~jnichols/textfiles/spam_060606.txt Here's an example of one. TONS of these have been slipping through. I have pretty much every single ruleset that RulesDuJour will install, plus Bayes, etc. My big question - is there now a ruleset that lists stock ticker symbols? I'm thi

Re: New German ruleset failing lint

Hm, not here: RDJ says it's version 01.11.25, downloaded about 10 hours ago. Kai RDJ just picked up 01.11.28 early this morning and it passed OK. :-)

New German ruleset failing lint

***WARNING***: spamassassin --lint failed. Rolling configuration files back, not restarting SpamAssassin. Rollback command is: mv -f /etc/spamassassin/70_zmi_german.cf /etc/spamassassin/RulesDuJour/70_zmi_german.cf.2; mv -f /etc/spamassassin/RulesDuJour/70_zmi_german.cf.20060521-0531 /etc/spam

Re: Which Operating Systems Do You Use and Why?

Ask List wrote: Ask List gmail.com> writes: We can not seem to come to an agreement on the best operating system to run spam assassin. So we have decided to post this question to the mailing list so we can have other opinions. I see RedhatEL,Fedora,CentOS is a common theme. Anyone not runn

Re: Filtering windows-1252 charset

Theo Van Dinter wrote: On Mon, Apr 03, 2006 at 12:07:00PM -0600, Philip Prindeville wrote: --=_NextPart_000_0016=_NextPart_000_0016 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit Using: # don't allow windows-1252 text attachments... header __CT

Re: SA rule for userid in subject?

back. Thanks again. Jonathan. Ruben Cardenal wrote: That doesn't kill performance, sorry. I get average times of 0.1-0.3 seconds/mail using that rule (and a lot of other ones) while the cpu lives happily. In several servers. You don't need a plugin for that. Ruben -

SA rule for userid in subject?

hello assassin-types, I'm seeing a lot of image-only spam of the following form: rcpt to: @domain.com Subject: Fw: Is there a way to create a simple spamassassin rule that will hit on this? I could use () and \1 in regular expressions and a giant, multi-line matching RE (probably), but I'

  1   2   >