On Fri, 15 Jan 2010 10:42:48 +0200
Jari Fredriksson wrote:
> On 15.1.2010 10:21, geoff.spamassass...@alphaworks.co.uk wrote:
> > I occasionally get a spam leaking through without having been
> > processed by SA despite passing the part of my procmail filtering
> > where SA is called. These spams
On 15.1.2010 10:21, geoff.spamassass...@alphaworks.co.uk wrote:
> I occasionally get a spam leaking through without having been processed
> by SA despite passing the part of my procmail filtering where SA is
> called. These spams are always at the time of scheduled SA restarts so I
> assume they sl
On Sat, December 27, 2008 21:45, JC Putter wrote:
> This message has been scanned by Nexus Mail Gateway
clamav signature is here:
hotfell.com=7720772077202e2068206f207420662065206c206c202e2063206f206d0a
save it in you clamav database dir and get rid of that domain
name it hotfell_com.db else
On 27.12.08 22:45, JC Putter wrote:
> Here is the raw message header
Don't post spam into this mailing list. Store it somewhere and paste a link.
We'd even need to convert into message, so it could be scanned.
Btw, I don't see any X-Spam header. Did you scan the message by SA at all?
--
Matus U
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kathryn Kleinschafer schrieb:
| Am I supposed to reload a service or is there something else I have
missed?
Yes, every change to a *.cf or *.pre file requires a restart of spamd
(as opposed to the standalone "spamassassin" binary, which will read
On 10.07.08 13:49, Kathryn Kleinschafer wrote:
> I have some spam coming into the system that seems to be only going to a
> couple of domains.
> The bayes confidence is 0-1% for the spam so it is getting a -2.6. It is
> hitting on the following rules
> -2.60 BAYES_00Bayesian spam
Sorry not sure what I was doing wrong before but it is hitting now.
Thanks
Kate
Jared Hall wrote:
header LOCAL_REMINDERSubject =~ /^REMINDER NOTIFICATION/
score LOCAL_REMINDER5.0
Regards,
Jared Hall
General Telecom, LLC.
Kathryn Kleinschafer wrote:
Hi all,
I have
Hi Jared,
Thanks for the help. I have made the file LOCALK.cf in my
/etc/mail/spamassassin/ folder and run spamassassin --lint (no errors)
However when I test the message it is not hitting the rule.
Am I supposed to reload a service or is there something else I have missed?
Thanks
Kate
Jared
Hi,
Our system does train Ham and I do train spam that gets through (where
possible).
I thought though that training say 5 emails as spam (assuming they were
all the same) won't necessarily change the Bayes confidence, is this not
correct?
Kate
Bowie Bailey wrote:
Alex Woick wrote:
BAY
Alex Woick wrote:
BAYES_00 means that the bayes engine thinks the message is definitely
not spam. If this rule is hitting on spam messages, you have a problem.
Unless this is just a really hammy looking spam, you may want to
consider retraining your bayes database. And regardless, you should
al
Alex Woick wrote:
> > BAYES_00 means that the bayes engine thinks the message is
> > definitely not spam. If this rule is hitting on spam messages, you
> > have a problem. Unless this is just a really hammy looking spam,
> > you may want to consider retraining your bayes database. And
> > regardl
BAYES_00 means that the bayes engine thinks the message is definitely
not spam. If this rule is hitting on spam messages, you have a problem.
Unless this is just a really hammy looking spam, you may want to
consider retraining your bayes database. And regardless, you should
always manually retra
Kathryn Kleinschafer wrote:
> Hi all,
>
> I have some spam coming into the system that seems to be only going
> to a couple of domains.
> The bayes confidence is 0-1% for the spam so it is getting a -2.6. It
> is hitting on the following rules
> -2.60 BAYES_00Bayesian spam probabil
Kathryn Kleinschafer <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> I have some spam coming into the system that seems to be only going to a
> couple of domains.
[...]
> The subject line is always REMINDER NOTIFICATION
>
> In order to get it recognised as spam am I best to have a custom rule for
> t
header LOCAL_REMINDERSubject =~ /^REMINDER NOTIFICATION/
score LOCAL_REMINDER5.0
Regards,
Jared Hall
General Telecom, LLC.
Kathryn Kleinschafer wrote:
Hi all,
I have some spam coming into the system that seems to be only going to
a couple of domains.
The bayes confi
dalchri000 wrote:
> What can I do to make the server wait on spamd? Is it a spamd, spamc,
> spamass-milter, or sendmail setting? Most of the time the server is
> hardly
If you had a postfix setup, you would (typically) adjust the max smtpd
daemons in master.cf - I'm sure you've got some similar
00
> To: users@spamassassin.apache.org
> Subject: Re: Spam getting through. Getting flooded.
>
> Could you also kindly share where BODY_GAPPY_TEXT comes from? I don't seem
> to have that one.
>
> Cheers,
> Jeremy
>
>
>
>
> "Martin Hepworth" <
> Sent: 27 March 2006 09:56
> To: users@spamassassin.apache.org
> Subject: RE: Spam getting through. Getting flooded.
>
> > Here's the rules that I get hits for..
> >
> > Content analysis details: (18.8 points, 5.0 required)
&
> Here's the rules that I get hits for..
>
> Content analysis details: (18.8 points, 5.0 required)
>
> pts rule name description
> --
> --
> 2.5 MISSING_HB_SEP Missing blank line between
> message h
> The problem is Im seeing an increase of spam getting through, mainly
> pharmecutical. I am using rules dejour and here is a list of all the rules
New spam form from our friend Leo. Its mutated twice in two weeks now.
New rules coming soon from a SARE near you.
(Hum, now that I've said that in
Hello robert,
Tuesday, September 20, 2005, 12:08:57 PM, you wrote:
rdc> Using Spamassassin 3.1 on Fedora Core 2 running qmail. Spamassassin rules
rdc> are running through a MySQL database.
rdc> The problem is Im seeing an increase of spam getting through, mainly
rdc> pharmecutical. I am using ru
Have you verified that they are working correctly? Do the messages
contain a URL?
[EMAIL PROTECTED] wrote:
Yes Im using SURBL and dcc.
Robert
[EMAIL PROTECTED] wrote:
Using Spamassassin 3.1 on Fedora Core 2 running qmail. Spamassassin
rules
are running through a MySQL database.
The pro
Yes Im using SURBL and dcc.
Robert
> [EMAIL PROTECTED] wrote:
>> Using Spamassassin 3.1 on Fedora Core 2 running qmail. Spamassassin
>> rules
>> are running through a MySQL database.
>>
>> The problem is Im seeing an increase of spam getting through, mainly
>> pharmecutical. I am using rules dejo
[EMAIL PROTECTED] wrote:
Using Spamassassin 3.1 on Fedora Core 2 running qmail. Spamassassin rules
are running through a MySQL database.
The problem is Im seeing an increase of spam getting through, mainly
pharmecutical. I am using rules dejour and here is a list of all the rules
Im using. Is th
> We use a program called Guinevere, that works with Novell GroupWise
> systems to filer the e-mail after it has passed through SA. All of the
> suggestions I have received seem to point to the fact that this may be
> where the error lies. I appreciate all the suggestions by the group.
That's ab
Thank you JD, that is the direction most everyone has been pointing me
in.
>>> "jdow" <[EMAIL PROTECTED]> 01/14/05 3:50 PM >>>
From: "Joe Zitnik" <[EMAIL PROTECTED]>
> Keith,
> Why would you need to be psychic?
>
> 1. My e-mail shows the NAME of my rule - MY_CAPABLE
> 2. My e-mail shows the MY
From: "Joe Zitnik" <[EMAIL PROTECTED]>
> Keith,
> Why would you need to be psychic?
>
> 1. My e-mail shows the NAME of my rule - MY_CAPABLE
> 2. My e-mail shows the MY_CAPABLE rule worked, adding 11 points to the
> score
> 3. My e-mail shows my threshold is 4 points, and the e-mail scored
> 14
Thomas,
We use a program called Guinevere, that works with Novell GroupWise
systems to filer the e-mail after it has passed through SA. All of the
suggestions I have received seem to point to the fact that this may be
where the error lies. I appreciate all the suggestions by the group.
>>> Thoma
Keith,
I think you may have seen too many Oliver Stone movies, or perhaps
gotten too wrapped up in the X-Files. Are you somehow involved in the
paranormal? All this talk of secretiveness and psychics might be better
suited to the alt.psycho.babble newsgroup. The "entire process" that I
was speak
The usual suggestions that come up at this point, are:
1) If you're using spamc/spamd, don't forget to restart spamd so
that it will reload your new rule.
2) If you're running SA directly from a milter, or some such, make
sure that SA is started up in a way that it will find the new rule.
Joe Zitnik wrote:
Keith,
Why would you need to be psychic?
Sorry, my way of saying that I didn't think you gave us enough
information with your request for help.
Did you post the mail that you passed through spam assassin manually, or
the one that made it through?
Did you try passing the mai
Please note that if you upgraded from 3.0.0 to 3.0.1 or 3.0.2,
the uridnsbl rules changed from type "header" to type "body".
If the rules are not similarly updated, they will not trigger.
Jeff C.
--
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Am Freitag, 14. Januar 2005 13:04 schrieb Loren Wilton:
> Well, it obviously was scored correctly, and showed at least some headers
> indicating this. So SA must be doing its job.
>
> Since SA isn't in charge of deciding what to DO with the mail once
Thank you. I thought I remembered earlier posts where people listed
problems like "some e-mail were not being checked" or "every other
e-mail was being skipped", and I was wondering if I might be
experiencing some of that.
>>> "Loren Wilton" <[EMAIL PROTECTED]> 01/14 7:04 AM >>>
Well, it obviousl
Well, it obviously was scored correctly, and showed at least some headers
indicating this. So SA must be doing its job.
Since SA isn't in charge of deciding what to DO with the mail once it is
scored, the problem must lie in some other part of your system.
The only possibiliity I can think of of
Keith,
Why would you need to be psychic?
1. My e-mail shows the NAME of my rule - MY_CAPABLE
2. My e-mail shows the MY_CAPABLE rule worked, adding 11 points to the
score
3. My e-mail shows my threshold is 4 points, and the e-mail scored
14.
4. I stated this was from an e-mail that made it thro
Thomas,
That was a mail that made it through. I won't go through my entire
process, but I archive every mail that comes in to our system, and when
I'm done, I have every e-mail that made it through to the user's desk.
I have specific rules set up and was wondering why mail that I knew
should have
Of course, that's not universally true, Keith. Someone is flooding the
Internet with email messages so bogus fetchmail spits up on it. I had to
telnet into the Earthlink server and manually delete the message.
8<
list
+OK
1 475
.
retr 1
+OK 475 octets
Status: U
Return-Path: <[EMAIL PROTECT
Joe Zitnik:
>> We've been having a group of the same type of e-mails making it through
>> spamassassin. These are the e-mails that have the "get a capable html
>> e-mailer" line in them. [...]
Thomas Arend <[EMAIL PROTECTED]> writes:
> I used my magic eye to find your rule. No joy. [...]
I wro
Joe Zitnik wrote:
some of these e-mails are
getting caught by my rule and some aren't. When I run the ones that are
getting past through spamassassin manually, they hit my rule as well and
are above my spam threshold. So why do they make it past?
Joe, how can you possibly ask that question wit
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Am Donnerstag, 13. Januar 2005 12:47 schrieb Joe Zitnik:
> We've been having a group of the same type of e-mails making it through
> spamassassin. These are the e-mails that have the "get a capable html
> e-mailer" line in them. I have yet to see any
They are enabled. My problem is more that some of these e-mails are
getting caught by my rule and some aren't. When I run the ones that are
getting past through spamassassin manually, they hit my rule as well and
are above my spam threshold. So why do they make it past?
>>> Martin Hepworth <[EM
Joe
enable the URIRBL rules, these are very effective against html spam.
(make sure you have the latest Net:DNS module installed and the init.pre
file in /etc/mail/spamassassin and the plugin turned on).
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Joe Z
Found part of the problem. I did not import my db after upgrading, do
my bayes db were not working. Fixed that with:
sa-learn --import
sa-learn --sync
Hope this save someone else some time.
Shane
> shane mullins wrote:
> > When we first built our spam filters, over a year ago, it worked
gr
Shane
apply extra rules mentioned in www.rulesemporium.com/rules.htm
(Don't use the bigevil on though, turn on the URIRBL handling in SA3.01)
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
shane mullins wrote:
When we first built our spam filters, over a year
45 matches
Mail list logo
