/null.
Ruben
Michael Scheidell wrote:
Ruben Cardenal wrote:
Michael Scheidell wrote:
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, May 07,
2007 4:47 AM
To: users@spamassassin.apache.org
Subject: Problem upgrading from 3.1.8 to 3.1.20, check.pm
Hi,
I
nning 3.1.8
for months
without any issues to 3.1.20,
What is 3.1.20? And when was it released?
Best I know, 3.1.18 was last release of 3.1.x and 3.2.0 was released
late last week.
It's a typo, sorry :) Too many things in head... Of course I mean
upgrading from 3.1.8 to 3.2.0.
Ruben.
Spam jest 100% naturalny?!
50_scores.cf:score ALL_NATURAL 1.310 0.618
0.357 0
Ruben
matched?
Ruben
> | http://geocities.com/VickieBarrett4208
> |
>
> FWIW,
>
> I have given geocities links a VERY high score. Just under my threshold
> mark.
>
>
So did I weeks ago with "/geocities/i" :)
Ruben
I'm missing something obvious? Nothing about different
> configure
> > instructions in the wiki or INSTALL notes.
> >
> > Kai
> >
>
> perl Makefile.PL
Aka RTFM
Ruben
That doesn't kill performance, sorry. I get average times of 0.1-0.3
seconds/mail using that rule (and a lot of other ones) while the cpu lives
happily. In several servers. You don't need a plugin for that.
Ruben
> -Mensaje original-
> De: Matt Kettler [mailto:
Hi,
Loren answered that a month ago. Is in the archives. You may use:
header RULE_NAME ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw:
.{0,30}\s*\1\b/i
That covers "Fw: userid" and "Fw: (some word[s]) userid".
Ruben.
> -Mensaje original-
> De: M
> SA by itself has only one score-based behavior: tag or don't tag.
That is the question
Ruben.
Thanks Matt, I was curious, your explanation is enough :)
Ruben.
> -Mensaje original-
> De: Matt Kettler [mailto:[EMAIL PROTECTED]
> Enviado el: domingo, 26 de febrero de 2006 17:01
> Para: Ruben Cardenal
> CC: Spamassassin
> Asunto: Re: I catch all this spam, but
Marco,
Thanks, but I already know how to write meta rules :) That's not what I'm
asking. My example lines are not textual lines, but the form that spam
takes. It's not that simple.
Ruben.
> -Mensaje original-
> De: Marco Maske [mailto:[EMAIL PROTECTED]
> En
(someone in this lists told me how), but I don't know
how to relate that line of the body with the "To" part of the headers. I
mean, the "john" word in that line of the body matches the "john" word in
the "To". I hope I've explained myself enough :) Thanks for any suggestions
about this.
Ruben
IF your mails have that kind of subject too, yes, but is malformed:
header ICAB_FW2 Subject =~ /^Fw:\s\d{1,9}$/i
score ICAB_FW2 4
describe ICAB_FW2 IMAGE SPAM
("ICAB" is related to my work, feel free to change it)
Ruben.
> -Mensaje original-
> De: Joey [mailto:
llinare.org/qmail-scanner/) That kind of funcinality has
been added in the Qmail-Scanner 2.00 RC1 .
Good luck,
Ruben
> -Mensaje original-
> De: Joey [mailto:[EMAIL PROTECTED]
> Enviado el: viernes, 24 de febrero de 2006 18:47
> Para: users@spamassassin.apache.org
> Asun
>
> > * 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
>
> So 6.0 point for your BAYES I hope your BAYES is well trained and never
> gets corrupted
Works like a charm :)
Ruben
BAYES_99 BODY: Bayesian spam probability is 99 to 100%
header ICAB_FW2 Subject =~ /^Fw:\s\d{1,9}$/i
score ICAB_FW2 1
Ruben
> -Mensaje original-
> De: Chris Conn [mailto:[EMAIL PROTECTED]
> Enviado el: viernes, 24 de febrero de 2006 17:35
> Para: users@spamassassin.apache.
.. Bye-BYe!
>
>
> This scored really low.
In one of my systems:
X-Spam-Report:
* 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.]
* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
* [201.21.5.106 listed in dnsbl.sorbs.net]
Ruben
Hi,
> times and it would be nice to have inetd around to make sure it's allways
> running. If you have, what did you put in inetd.conf?
If you want to ensure spamd is always running, use it under tcpserver
My /service/spamd/run script:
#!/bin/sh
exec /usr/bin/spamd --siteconfigpath=/etc/mail/
Yes, that was his rule, I forgot to mention it in my reply :)
Ruben
> -Mensaje original-
> De: Loren Wilton [mailto:[EMAIL PROTECTED]
> Enviado el: viernes, 10 de febrero de 2006 22:00
> Para: users@spamassassin.apache.org
> Asunto: Re: Little custom rule
>
> &g
Hi,
You just need to modify a bit the regexp:
ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw: (hello)*\1\b/i
That would match both cases. If you want to include another words apart
from "hello" do it with (word1|word2|etc).
Ruben
> -Mensaje original-
> De: Irin
That one works! Thanks :)
Ruben
> -Mensaje original-
> De: Loren Wilton [mailto:[EMAIL PROTECTED]
> Enviado el: lunes, 06 de febrero de 2006 21:52
> Para: Ruben Cardenal; users@spamassassin.apache.org
> Asunto: RE: Little custom rule
>
> >It seems it doesn
Hi,
It seems it doesn't want to work, it just didn't match this:
From: "rkfexklqc" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Fw: oscarbru
Ruben
> -Mensaje original-
> De: Loren Wilton [mailto:[EMAIL PROTECTED]
> Enviado el: lunes, 06 de
header MY_NEWS Subject =~
/^Re:\s[0-9]*[a-z]*\snews\s[0-9]*[0-9]*[0-9]*[0-9]*/i
score MY_NEWS 6
Ruben
> -Mensaje original-
> De: Spamassassin List [mailto:[EMAIL PROTECTED]
> Enviado el: lunes, 06 de febrero de 2006 19:56
> Para: users@spamassassin.apache.org
> Asunto:
Hi again,
I added them and had to change the 1st "{" in the 1st rule for a "(" in
order spamd not to complain about it. Anyway, it doesn't work :(
Thanks anyway
Ruben
> -Mensaje original-
> De: Loren Wilton [mailto:[EMAIL PROTECTED]
> Enviado el:
Yes, the "To" also has the username of the account. I'll give a try to your
proposal shortly at work. Thanks
Ruben
> -Mensaje original-
> De: Loren Wilton [mailto:[EMAIL PROTECTED]
> Enviado el: lunes, 06 de febrero de 2006 0:40
> Para: users@spamassassin.apac
Yeah, all of them match the HTML_IMAGE_ONLY_12 rule, but not the rest of
them. As an initial measure I raised the score for that rule, but I
understand that's not the solution.
Ruben
> These are caught quite easily on my home system:
>
> Content analysis details: (42.1 points
n"
Can that be matched by a rule?
Regards,
Ruben
1
-Ruben
El vie, 03-02-2006 a las 10:27 +0100, Ole Nomann Thomsen escribió:
Hi, can I ask a small favor from some of you running SA with Bayes enabled:
Please run the following perl-oneliner on your SA-log (mine is "current"):
perl -ne 'if (/result:/) {$n++; $b++ if (/BAYES
PI directly you will
>> have to use some other tool to do it.
>>
>> Regards,
>>
>> Rick
>
> I am using qmail-scanner 1.25st.
Which rocks :)
- Ruben
my mail servers,
just for curiosity. For 1 month, 4049 mails correctly tagged as spam
with 1 false positive (and this was a mail sent from a mobile phone).
For those 4049, just 8 were bigger than 100Kb, and only one was bigger
than 1 200kb (216kb). So the default value works perfectly!
- Ruben
Hi,
> Can't locate IO/Wrap.pm in @INC (@INC contains:
/usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.6
I'd say you're missing the IO::Wrap perl module.
Regards,
- Ruben
32 matches
Mail list logo