Re: Low-scoring authenticated SMTP

2011-08-12 Thread Ted Mittelstaedt
Finally fixed the problem, we are using spamass-milter. The regex might have worked if we were using procmail or mailscanner or some such to scan the mail with SA but spamass-milter operates on a synthesized version of the header that sendmail adds, not the real header. That is because it's a mi

Re: Low-scoring authenticated SMTP

2011-08-11 Thread Ted Mittelstaedt
On 8/11/2011 1:25 PM, dar...@chaosreigns.com wrote: Well, your example email doesn't match either of your rules. On 08/11, Ted Mittelstaedt wrote: header LOCAL_AUTH_RCVD Received =~ /^from [^ ]+ \([^)]*\)\s+\(authenticated bits=\d+\)\s+by mail\.wonkulating\.net/ header AUTHBIT0 From =~ /auth

Re: Low-scoring authenticated SMTP

2011-08-11 Thread darxus
Well, your example email doesn't match either of your rules. On 08/11, Ted Mittelstaedt wrote: > header LOCAL_AUTH_RCVD Received =~ /^from [^ ]+ > \([^)]*\)\s+\(authenticated bits=\d+\)\s+by mail\.wonkulating\.net/ > header AUTHBIT0 From =~ /authenticated bits=0/ > Received: from [192.168.0.4] (

Low-scoring authenticated SMTP

2011-08-11 Thread Ted Mittelstaedt
Hi All! We had a mailserver (mail.wonkulating.net) running Sa 3.2.5 that had the following constructs in it's config file: header LOCAL_AUTH_RCVD Received =~ /^from [^ ]+ \([^)]*\)\s+\(authenticated bits=\d+\)\s+by mail\.wonkulating\.net/ describe LOCAL_AUTH_RCVD Message was received loca