Re: Extract Local-part from To: Adress to use in spamassassin rule

2024-05-23 Thread giovanni
On 5/23/24 5:39 PM, Bill Cole wrote: On 2024-05-23 at 03:40:48 UTC-0400 (Thu, 23 May 2024 09:40:48 +0200) Carsten is rumored to have said: Hi @all, I want to create a SpamAssassin rule that checks if the subject line of an email contains the local part of the recipient's email address

Re: Extract Local-part from To: Adress to use in spamassassin rule

2024-05-23 Thread Jimmy
multiple groups within the same rules like this? header __TZ_CAP_TO_ADDR To:addr =~ /(?)\@(?)/ Jimmy On Thu, May 23, 2024 at 2:40 PM Carsten wrote: > Hi @all, > > I want to create a SpamAssassin rule that checks if the subject line of an > email contains t

Re: Extract Local-part from To: Adress to use in spamassassin rule

2024-05-23 Thread Bill Cole
On 2024-05-23 at 03:40:48 UTC-0400 (Thu, 23 May 2024 09:40:48 +0200) Carsten is rumored to have said: Hi @all, I want to create a SpamAssassin rule that checks if the subject line of an email contains the local part of the recipient's email address (the part before the @ symbol)

Extract Local-part from To: Adress to use in spamassassin rule

2024-05-23 Thread Carsten
Hi @all, I want to create a SpamAssassin rule that checks if the subject line of an email contains the local part of the recipient's email address (the part before the @ symbol). For example, if the recipient's email address is |i...@example.com|, I want to check if the subject co

Re: Spamassassin rule

2023-11-17 Thread Matus UHLAR - fantomas
On 17.11.23 11:19, natan wrote: E-mail was signed DKIM but why SA set "DMARC_REJECT" in this time ? W dniu 17.11.2023 o 12:31, Matus UHLAR - fantomas pisze: it's hard to see this without envelope and header from: On 17.11.23 12:42, natan wrote: Return-Path: <3jtxxzrapacwkwuumvba-vwzmxtglw

Re: Spamassassin rule

2023-11-17 Thread Matus UHLAR - fantomas
natan skrev den 2023-11-17 11:19: How it realy realy works in SA ? I ask beacuse warking not so cool: On 17.11.23 14:21, Benny Pedersen wrote: its a hack, and bad example on expect it hits unaligned mail aswell as aligned, we screwed there :) generally it could work, but it could be the reas

Re: Spamassassin rule

2023-11-17 Thread natan
Hi I had spamassassin-4.x dor ~1 day ;) And I had to downgrade to spamassasin-3.4.6 The Problem was in /var/lib/amavis/tmp/ where content of the catalog grow and grow more was rising than falling like 29 GB and more When dowgrade to stable spamassassin-3.4.6 problem fixed and size is ~100MB

Re: Spamassassin rule

2023-11-17 Thread Benny Pedersen
natan skrev den 2023-11-17 11:19: How it realy realy works in SA ? I ask beacuse warking not so cool: its a hack, and bad example on expect it hits unaligned mail aswell as aligned, we screwed there :) good news dmarc plugin in sa trunc does aswell work in spamasasssin 3.4.6 last time i try

Re: Spamassassin rule

2023-11-17 Thread natan
W dniu 17.11.2023 o 12:31, Matus UHLAR - fantomas pisze: On 17.11.23 11:19, natan wrote: How it realy realy works in SA ? I ask beacuse warking not so cool: example: ifplugin Mail::SpamAssassin::Plugin::AskDNS askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=none;/ askdns

Re: Spamassassin rule

2023-11-17 Thread Matus UHLAR - fantomas
On 17.11.23 11:19, natan wrote: How it realy realy works in SA ? I ask beacuse warking not so cool: example: ifplugin Mail::SpamAssassin::Plugin::AskDNS askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=none;/ askdns __DMARC_POLICY_QUAR _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;

Spamassassin rule

2023-11-17 Thread natan
HI How it realy realy works in SA ? I ask beacuse warking not so cool: example: ifplugin Mail::SpamAssassin::Plugin::AskDNS askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=none;/ askdns __DMARC_POLICY_QUAR _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=quarantine;/ askdns __DM

Re: How to Bypass Specific Spamassassin Rule

2019-11-16 Thread KADAM, SIDDHESH
19 at 11:51:12AM +0530, KADAM, SIDDHESH wrote: Hi Folks, I have multiple domains which are running after Spamassassin server. I want to bypass one specific Spamassassin rule ie TextCat(Unwanted Language) for one recipient domain. Can someone please help me in achieving this requirement. Regards, Siddhesh

Re: How to Bypass Specific Spamassassin Rule

2019-11-15 Thread Henrik K
ve multiple domains which are running after Spamassassin server. > > I want to bypass one specific Spamassassin rule ie TextCat(Unwanted > Language) for one recipient domain. > > Can someone please help me in achieving this requirement. > > Regards, > Siddhesh

Re: How to Bypass Specific Spamassassin Rule

2019-11-15 Thread Matus UHLAR - fantomas
On 15.11.19 11:51, KADAM, SIDDHESH wrote: I have multiple domains which are running after Spamassassin server. I want to bypass one specific Spamassassin rule ie TextCat(Unwanted Language) for one recipient domain. how do you run spamassassin? with spamass-milter you can use per-recipient

Re: How to Bypass Specific Spamassassin Rule

2019-11-14 Thread Kevin A. McGrail
On 11/15/2019 1:21 AM, KADAM, SIDDHESH wrote: > Hi Folks, > > I have multiple domains which are running after Spamassassin server. > > I want to bypass one specific Spamassassin rule ie TextCat(Unwanted > Language) for one recipient domain. > > Can someone please h

How to Bypass Specific Spamassassin Rule

2019-11-14 Thread KADAM, SIDDHESH
Hi Folks, I have multiple domains which are running after Spamassassin server. I want to bypass one specific Spamassassin rule ie TextCat(Unwanted Language) for one recipient domain. Can someone please help me in achieving this requirement. Regards, Siddhesh

Re: SpamAssassin Rule To Block URL Which Contents Recipient Domain Name

2019-11-04 Thread Kevin A. McGrail
Hi Siddhesh, You can do this with a simple URI rule type or the Header rule type.  There are also RBLs you might consider supporting/using that can list the domain for you as well. header  __TO_EXAMPLE     To =~ /\@domain\.tld/i and uri    __URI_EXAMPLE    /domain\.tld/i Regards

SpamAssassin Rule To Block URL Which Contents Recipient Domain Name

2019-11-03 Thread KADAM, SIDDHESH
Hi, Can we assign a high score to mail which has an URL which contents a recipient domain name or recipient email ID ? I have been seeing lots of cases of Phish URL where spammer tries to pull end user's password by sending these URLs over mail. Regards, Siddhesh

Re: List Of Available Spamassassin Rule

2019-10-25 Thread Martin Gregorie
On Fri, 2019-10-25 at 05:10 -0600, @lbutlr wrote: > On 24 Oct 2019, at 07:24, Savvas Karagiannidis > wrote: > > you use a perl script like this: > > That’s useful enough it should be part of the SA install. > Agreed. Savvas Karagiannidis did a good job. I've found his script useful enough to hav

Re: List Of Available Spamassassin Rule

2019-10-25 Thread Henrik K
On Fri, Oct 25, 2019 at 05:10:17AM -0600, @lbutlr wrote: > On 24 Oct 2019, at 07:24, Savvas Karagiannidis wrote: > > you use a perl script like this: > > That???s useful enough it should be part of the SA install. Feel free to describe how it should work. Keep in mind there's no guarantee that

Re: List Of Available Spamassassin Rule

2019-10-25 Thread @lbutlr
On 24 Oct 2019, at 07:24, Savvas Karagiannidis wrote: > you use a perl script like this: That’s useful enough it should be part of the SA install. -- No matter how fast light travels it finds the darkness has always got there first, and is waiting for it.

Re: List Of Available Spamassassin Rule

2019-10-24 Thread Brent Clark
Out of interest, why do you want this? What are you hoping to gain? Regards Brent On 2019/10/24 14:56, KADAM, SIDDHESH wrote: Hi Folks, Can someone please help me in retrieving a list of present rules of Spamassassin. Spamassassin --lint or -D option I tried but not getting expected output.

Re: List Of Available Spamassassin Rule

2019-10-24 Thread Savvas Karagiannidis
Hi, you use a perl script like this: #!/usr/bin/perl use strict; use Mail::SpamAssassin; my $sa_instance = Mail::SpamAssassin->new(); $sa_instance->compile_now(0); my %scores; for (my $i=0; $i < 4; $i++) {     my $scoreset = $sa_instance->{'conf'}->{scoreset}[$i];     while (my ($key,$val

Re: List Of Available Spamassassin Rule

2019-10-24 Thread Henrik K
On Thu, Oct 24, 2019 at 06:26:13PM +0530, KADAM, SIDDHESH wrote: > Hi Folks, > > Can someone please help me in retrieving a list of present rules of > Spamassassin. > > Spamassassin --lint or -D option I tried but not getting expected output. Sorry there is no command. You can find all rule fil

List Of Available Spamassassin Rule

2019-10-24 Thread KADAM, SIDDHESH
Hi Folks, Can someone please help me in retrieving a list of present rules of Spamassassin. Spamassassin --lint or -D option I tried but not getting expected output. Regards, Siddhesh

Re: spamassassin rule to combat phishing

2014-10-29 Thread francis picabia
On Wed, Oct 29, 2014 at 10:27 AM, francis picabia wrote: > I've tested the rule: > > uri URI_MYDOMAIN_PHISH > m;^https?://(?:[^./]+\.)*example\.com[^/?];i > > > is catching this sample newletter link: > > Oct 29 09:38:50.368 [24608] dbg: rules: ran uri rule > URI_MYDOMAIN_PHISH ==> got hi

Re: spamassassin rule to combat phishing

2014-10-29 Thread francis picabia
I've tested the rule: uri URI_MYDOMAIN_PHISH m;^https?://(?:[^./]+\.)*example\.com[^/?];i is catching this sample newletter link: Oct 29 09:38:50.368 [24608] dbg: rules: ran uri rule URI_MYDOMAIN_PHISH ==> got hit: "http://example.com&"; Complete email body content in test of newslette

Re: spamassassin rule to combat phishing

2014-10-28 Thread francis picabia
On Tue, Oct 28, 2014 at 11:47 AM, francis picabia wrote: > > > On Mon, Oct 27, 2014 at 4:55 PM, John Hardin wrote: > >> On Mon, 27 Oct 2014, francis picabia wrote: >> >>uri URI_EXAMPLE_EXTRA m;^https?://(?:www\.)?example\.com[^/?];i >> > >>> However another spoofed message was rece

Re: spamassassin rule to combat phishing

2014-10-28 Thread francis picabia
On Mon, Oct 27, 2014 at 4:55 PM, John Hardin wrote: > On Mon, 27 Oct 2014, francis picabia wrote: > >uri URI_EXAMPLE_EXTRA m;^https?://(?:www\.)?example\.com[^/?];i > >> However another spoofed message was received today and the rule >> did not capture it. >> >> If I want to detect

Re: spamassassin rule to combat phishing

2014-10-27 Thread John Hardin
On Mon, 27 Oct 2014, francis picabia wrote: uri URI_EXAMPLE_EXTRA m;^https?://(?:www\.)?example\.com[^/?];i However another spoofed message was received today and the rule did not capture it. If I want to detect something in the form of: random_server.example.com.junk I need to wildcard t

Re: spamassassin rule to combat phishing

2014-10-27 Thread francis picabia
On Fri, Sep 19, 2014 at 2:59 PM, John Hardin wrote: > On Fri, 19 Sep 2014, francis picabia wrote: > > On Tue, Sep 16, 2014 at 5:27 PM, John Hardin wrote: >> >> On Tue, 16 Sep 2014, francis picabia wrote: >>> >>> Hello, >>> We just received the most authentic looking phishing I've se

Re: spamassassin rule to combat phishing

2014-09-19 Thread francis picabia
On Tue, Sep 16, 2014 at 5:27 PM, John Hardin wrote: > On Tue, 16 Sep 2014, francis picabia wrote: > > Hello, >> >> We just received the most authentic looking phishing I've seen. It was >> professionally written, included a nice signature in the style used by >> people at my workplace, and the t

Re: spamassassin rule to combat phishing

2014-09-16 Thread John Hardin
On Tue, 16 Sep 2014, francis picabia wrote: Hello, We just received the most authentic looking phishing I've seen. It was professionally written, included a nice signature in the style used by people at my workplace, and the target link was an exact replica of an ezproxy website we run. Th

spamassassin rule to combat phishing

2014-09-16 Thread francis picabia
Hello, We just received the most authentic looking phishing I've seen. It was professionally written, included a nice signature in the style used by people at my workplace, and the target link was an exact replica of an ezproxy website we run. The URL domain was only different by a few letters.

Re: Spamassassin Rule Scores

2014-04-28 Thread Matus UHLAR - fantomas
>On 4/24/2014 6:12 AM, emailitis.com wrote: >>Also, in the maillog, I would like to see spamd show not just the >>tests, but the scores of each. On Sunday 27 April 2014 at 19:03, Matus UHLAR - fantomas wrote: add_header all Report _REPORT_ On 27.04.14 19:10, Antony Stone wrote: Doesn't this

Re: Spamassassin Rule Scores

2014-04-27 Thread Antony Stone
On Sunday 27 April 2014 at 19:03, Matus UHLAR - fantomas wrote: > >On 4/24/2014 6:12 AM, emailitis.com wrote: > >>Also, in the maillog, I would like to see spamd show not just the > >>tests, but the scores of each. > > I believe that > > add_header all Report _REPORT_ > > in your user_prefs doe

Re: Spamassassin Rule Scores

2014-04-27 Thread Matus UHLAR - fantomas
On 4/24/2014 6:12 AM, emailitis.com wrote: Also, in the mailllog, I would like to see spamd show not just the tests, but the scores of each. At present we get just: spamd[7403]: spamd: result: Y 4 - DKIM_SIGNED,HTML_MESSAGE,MIME_HTML_ONLY,T_DKIM_INVALID,T_REMOTE_IMAGE scantime=2.8,size=60575

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 2:14 PM, Axb wrote: IMO this should be configurable as it could break stats/loggers/etc The change right now just adds additional API functions. Nothing uses them. spamd could be configured to use them and should be a configuration option, I agree.

Re: Spamassassin Rule Scores

2014-04-24 Thread Axb
On 04/24/2014 07:44 PM, Kevin A. McGrail wrote: On 4/24/2014 1:34 PM, David F. Skoll wrote: On Thu, 24 Apr 2014 13:28:56 -0400 "Kevin A. McGrail" wrote: Keeping more in the like and kind with the existing code in PMS, wouldn't this be closer to what you need? Completely untested but passed t

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 1:34 PM, David F. Skoll wrote: On Thu, 24 Apr 2014 13:28:56 -0400 "Kevin A. McGrail" wrote: Keeping more in the like and kind with the existing code in PMS, wouldn't this be closer to what you need? Completely untested but passed tests. Sure... I'm not picky about how it's imple

Re: Spamassassin Rule Scores

2014-04-24 Thread David F. Skoll
On Thu, 24 Apr 2014 13:28:56 -0400 "Kevin A. McGrail" wrote: > Keeping more in the like and kind with the existing code in PMS, > wouldn't this be closer to what you need? Completely untested but > passed tests. Sure... I'm not picky about how it's implemented. ;) Just so long as there's an

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:04 AM, David F. Skoll wrote: We integrate with SpamAssassin at the Perl library level, and we reach into the innards to get at the test scores. Here's our code: my $conf = $sa_status->{conf} || {}; my $scores = $conf->{scores} || {}; my $testnames = join(

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:37 AM, Benny Pedersen wrote: Kevin A. McGrail skrev den 2014-04-24 17:30: Ahhh... Well not sure it warrants going on the list. I like the idea but need someone to step forward and implement it and I don't think enough will care. replyed private lots of idears, no coders :(

Re: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-04-24 17:30: Ahhh... Well not sure it warrants going on the list. I like the idea but need someone to step forward and implement it and I don't think enough will care. replyed private lots of idears, no coders :(

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:28 AM, Benny Pedersen wrote: Kevin A. McGrail skrev den 2014-04-24 17:12: Sounds like overkill without enough demand, personally... only thing i see here is that you writed to me personally Ahhh... Well not sure it warrants going on the list. I like the idea but need someone

Re: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-04-24 17:12: Sounds like overkill without enough demand, personally... only thing i see here is that you writed to me personally

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 11:06 AM, Benny Pedersen wrote: Kevin A. McGrail skrev den 2014-04-24 16:50: Always love people submitting patches! or opensource with think like: make syslog plugin, make it basicly same options as in add_header just for sysloging then each admin can make there own login form

Re: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-04-24 16:50: Always love people submitting patches! or opensource with think like: make syslog plugin, make it basicly same options as in add_header just for sysloging then each admin can make there own login format based on same tags as in add_header i wo

Re: Spamassassin Rule Scores

2014-04-24 Thread David F. Skoll
On Thu, 24 Apr 2014 10:50:25 -0400 "Kevin A. McGrail" wrote: > I don't believe that functionality exists. Feel free to submit a > patch to add the option, etc. though. Always love people submitting > patches! We integrate with SpamAssassin at the Perl library level, and we reach into the innar

Re: Spamassassin Rule Scores

2014-04-24 Thread Kevin A. McGrail
On 4/24/2014 6:12 AM, emailitis.com wrote: Can someone tell me how we can find out the Spamassassin rule scores? Best way is to view the applicable 50_scores.cf directly, i.e. /var/lib/spamassassin/3.004000/updates_spamassassin_org/50_scores.cf for 3.4.0 in the default location. Also, in

Re: Spamassassin Rule Scores

2014-04-24 Thread Axb
On 04/24/2014 02:00 PM, emailitis.com wrote: Thank you very much Antony, I had been looking at http://spamassassin.apache.org/tests.html before which is where the "Tests" menu goes to from the page you gave me of https://spamassassin.apache.org/tests_3_3_x.html. I'm not yet mad which is reassu

RE: Spamassassin Rule Scores

2014-04-24 Thread Benny Pedersen
emailitis.com skrev den 2014-04-24 14:00: Can anyone help with how to get scores showing in the maillog as well? this needs a patch to spamassassin to support syslog but spampd does what you want note not spamc/spamd

RE: Spamassassin Rule Scores

2014-04-24 Thread emailitis.com
w to get scores showing in the maillog as well? Kind Regards, Christoph -Original Message- From: Antony Stone [mailto:antony.st...@spamassassin.open.source.it] Sent: 24 April 2014 11:27 To: users@spamassassin.apache.org Subject: Re: Spamassassin Rule Scores On Thursday 24 Apri

Re: Spamassassin Rule Scores

2014-04-24 Thread Antony Stone
On Thursday 24 April 2014 at 11:12, emailitis.com wrote: > Can someone tell me how we can find out the Spamassassin rule scores? https://spamassassin.apache.org/tests_3_3_x.html Antony -- I want to build a machine that will be proud of me. - Danny Hillis, creator of The Connection Mach

Spamassassin Rule Scores

2014-04-24 Thread emailitis.com
Can someone tell me how we can find out the Spamassassin rule scores? Also, in the mailllog, I would like to see spamd show not just the tests, but the scores of each. At present we get just: spamd[7403]: spamd: result: Y 4 - DKIM_SIGNED,HTML_MESSAGE,MIME_HTML_ONLY,T_DKIM_INVALID,T_REMOTE_IMAGE

Re: spamassassin rule set issue

2012-04-18 Thread Joseph Brennan
rawbody BLOCK_RULE2 /(\W|^)Orange(\W|^)/i Some good suggestions here already. While your original regexp should have worked in most cases, the optimal regexp for this situation is: /\borange\b/i And probably body, not rawbody. Rawbody won't match if the spammer obfuscates words with

Re: spamassassin rule set issue

2012-04-17 Thread Bowie Bailey
On 4/17/2012 8:03 AM, dhanushka ranasinghe wrote: > Hi.. guys > > i have following rule in place in spamassassin, > > rawbody BLOCK_RULE2 /(\W|^)Orange(\W|^)/i > score BLOCK_RULE2 50 > describe BLOCK_RULE2 Bad Word > > but one of my mails got blocked even-though its doesn't have word > "Orange" ,

Re: spamassassin rule set issue

2012-04-17 Thread Martin Gregorie
On Tue, 2012-04-17 at 15:18 +0200, Tom Kinghorn wrote: > > /\borange\b/i is what I'd use. > > > I should have added that the latest versions of grep understand Perl regex syntax, which can be useful for rapidly checking regexes before writing an SA rule. The main difference is that the regex shoul

Re: spamassassin rule set issue

2012-04-17 Thread Tom Kinghorn
On 17/04/2012 15:15, Martin Gregorie wrote: On Tue, 2012-04-17 at 14:39 +0200, Tom Kinghorn wrote: Indeed, and /^Orange$/i will only match Orange if it is the entire line. In fact, as SA converts each paragraph into one long line in body rules, it will only match a paragraph containing just the w

Re: spamassassin rule set issue

2012-04-17 Thread Martin Gregorie
On Tue, 2012-04-17 at 14:39 +0200, Tom Kinghorn wrote: > On 17/04/2012 14:18, dhanushka ranasinghe wrote: > > Hi.. guys.. > > > > I don't think regex is the issue , i tested the /(\W|^)Orange(\W|^)/i > > its correctly doing the exact word match > > > > > > Thank You > > Dhanushka > > > > Firstly,

Re: spamassassin rule set issue

2012-04-17 Thread RW
On Tue, 17 Apr 2012 14:39:41 +0200 Tom Kinghorn wrote: > On 17/04/2012 14:18, dhanushka ranasinghe wrote: > > Hi.. guys.. > > > > I don't think regex is the issue , i tested > > the /(\W|^)Orange(\W|^)/i its correctly doing the exact word match > > > > > > Thank You > > Dhanushka > > > > Firstly,

Re: spamassassin rule set issue

2012-04-17 Thread Tom Kinghorn
On 17/04/2012 14:18, dhanushka ranasinghe wrote: Hi.. guys.. I don't think regex is the issue , i tested the /(\W|^)Orange(\W|^)/i its correctly doing the exact word match Thank You Dhanushka Firstly, please do not "top post" Secondly, I disagree with you completely. The ^ (carat) ind

Re: spamassassin rule set issue

2012-04-17 Thread Swati R
Try testing below rules, if you are trying to flag the mails containing the exact 'orange' word only and not other such as orangecat. Rest will depend upon requirement. Thanks, Swati On Tue, Apr 17, 2012 at 5:48 PM, dhanushka ranasinghe < parakrama1...@gmail.com> wrote: > Hi.. guys.. > > I don'

Re: spamassassin rule set issue

2012-04-17 Thread dhanushka ranasinghe
Hi.. guys.. I don't think regex is the issue , i tested the /(\W|^)Orange(\W|^)/i its correctly doing the exact word match Thank You Dhanushka On 17 April 2012 17:44, Swati R wrote: > > > On Tue, Apr 17, 2012 at 5:39 PM, Tom Kinghorn > wrote: >> >> On 17/04/2012 14:03, dhanushka ranasinghe wr

Re: spamassassin rule set issue

2012-04-17 Thread Swati R
On Tue, Apr 17, 2012 at 5:39 PM, Tom Kinghorn wrote: > On 17/04/2012 14:03, dhanushka ranasinghe wrote: > >> >> Any idea why this is happening ? >> >> Thank You >> Dhanushka >> >> > Try > > /^Orange$/i > > The $ specifies end of the word. > > Regards > Tom > I think, this should work : /\bOrang

Re: spamassassin rule set issue

2012-04-17 Thread Tom Kinghorn
On 17/04/2012 14:03, dhanushka ranasinghe wrote: Any idea why this is happening ? Thank You Dhanushka Try /^Orange$/i The $ specifies end of the word. Regards Tom

spamassassin rule set issue

2012-04-17 Thread dhanushka ranasinghe
Hi.. guys i have following rule in place in spamassassin, rawbody BLOCK_RULE2 /(\W|^)Orange(\W|^)/i score BLOCK_RULE2 50 describe BLOCK_RULE2 Bad Word but one of my mails got blocked even-though its doesn't have word "Orange" , but when search via the mail spamassassin show mail has word Orang

Re: spamassassin rule not firing

2011-08-22 Thread Benny Pedersen
On Tue, 16 Aug 2011 18:29:13 +0200, Geert Haustraete wrote: I'm running 2 mail servers where one is a backup server in case the primary is unreachable. Both are set to include the SPF result in the mail header. I have put these rules into my local.cf file. (snip-rules) perldoc Mail::SpamAssa

Re: spamassassin rule not firing

2011-08-22 Thread Matus UHLAR - fantomas
On 16.08.11 18:29, Geert Haustraete wrote: I'm running 2 mail servers where one is a backup server in case the primary is unreachable. Both are set to include the SPF result in the mail header. I have put these rules into my local.cf file. #Check for SPF headers header LOCAL_SPF_PASS Received

spamassassin rule not firing

2011-08-16 Thread Geert Haustraete
Hello, I'm running 2 mail servers where one is a backup server in case the primary is unreachable. Both are set to include the SPF result in the mail header. I have put these rules into my local.cf file. #Check for SPF headers header LOCAL_SPF_PASS Received-SPF =~ /^pass/ header LOCAL_SPF_NE

Re: Unable to understand spamassassin rule

2011-06-17 Thread Joseph Brennan
--On Friday, June 17, 2011 13:52 +0100 RW wrote: 2.4 HTML_ATTACH BODY: HTML attachment to bypass scanning? html is encoded as an attached file rather than a normal html mime section. Some email client will display such attachments. That, and a SpamAssassin bug/feature, that it scans on

Re: Unable to understand spamassassin rule

2011-06-17 Thread RW
On Fri, 17 Jun 2011 10:20:43 + Sharma, Ashish wrote: > Hi, > > My spam assassin report is giving hit on following rules: > > 2.4 HTML_ATTACH BODY: HTML attachment to bypass scanning? html is encoded as an attached file rather than a normal html mime section. Some email client will display s

Unable to understand spamassassin rule

2011-06-17 Thread Sharma, Ashish
Hi, My spam assassin report is giving hit on following rules: 2.4 HTML_ATTACH BODY: HTML attachment to bypass scanning? 2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails I am unable to get a suitable explanation for these rules. Please help Thanks Ashish

Re: unable to find logic behind spamassassin rule

2010-06-21 Thread John Hardin
On Mon, 21 Jun 2010, Bowie Bailey wrote: Michael Scheidell wrote: On 6/21/10 3:25 PM, Sharma, Ashish wrote: I have the latest version of spamassassin, I am unable to find the logic behind the following rule and it's high spam score. MANY_SPAN_IN_TEXT 3.099 Can anybody give a reason? 72_sc

Re: unable to find logic behind spamassassin rule

2010-06-21 Thread Bowie Bailey
Michael Scheidell wrote: > On 6/21/10 3:25 PM, Sharma, Ashish wrote: >> Hi, >> >> I have the latest version of spamassassin, I am unable to find the >> logic behind the following rule and it's high spam score. >> >> MANY_SPAN_IN_TEXT 3.099 >> >> >> Can anybody give a reason? >> >> > grep MANY_S

Re: unable to find logic behind spamassassin rule

2010-06-21 Thread Michael Scheidell
On 6/21/10 3:25 PM, Sharma, Ashish wrote: Hi, I have the latest version of spamassassin, I am unable to find the logic behind the following rule and it's high spam score. MANY_SPAN_IN_TEXT 3.099 as for the scoring, it is done autoomaticallay, checking how much 'ham' has more than 4 jlkj

Re: unable to find logic behind spamassassin rule

2010-06-21 Thread Michael Scheidell
On 6/21/10 3:25 PM, Sharma, Ashish wrote: Hi, I have the latest version of spamassassin, I am unable to find the logic behind the following rule and it's high spam score. MANY_SPAN_IN_TEXT 3.099 Can anybody give a reason? grep MANY_SPAN_IN_TEXT * 72_active.cf:##{ MANY_SPAN_IN_TEXT 72_a

unable to find logic behind spamassassin rule

2010-06-21 Thread Sharma, Ashish
Hi, I have the latest version of spamassassin, I am unable to find the logic behind the following rule and it's high spam score. MANY_SPAN_IN_TEXT 3.099 Can anybody give a reason? Thanks in advance Ashish Sharma

Re: Problem with Custom Spamassassin Rule

2007-05-10 Thread Bryan K. Walton
On Thu, May 10, 2007 at 06:36:05PM -0400, Daryl C. W. O'Shea wrote: > > You'll have to use To:raw =~ to prevent the extra whitespace from > being removed and even that might not work. I think we fixed it so that > it does though. Thank you every body that replied. To:raw =~ was the fix that

Re: Problem with Custom Spamassassin Rule

2007-05-10 Thread Daryl C. W. O'Shea
Bryan K. Walton wrote: I'm running SA 3.2.0 and am trying to write a custom spamassassin rule to deal with some recent spam I've been seeing that has 10 additional spaces in the "To:" header. For example: To: <[EMAIL PROTECTED]> So, I would like to writ

Re: Problem with Custom Spamassassin Rule

2007-05-10 Thread Kris Deugau
Bryan K. Walton wrote: > I'm running SA 3.2.0 and am trying to write a custom spamassassin rule > to deal with some recent spam I've been seeing that has 10 additional > spaces in the "To:" header. For example: > > To: <[EMAIL PROTECTED]> &

Problem with Custom Spamassassin Rule

2007-05-10 Thread Bryan K. Walton
I'm running SA 3.2.0 and am trying to write a custom spamassassin rule to deal with some recent spam I've been seeing that has 10 additional spaces in the "To:" header. For example: To: <[EMAIL PROTECTED]> So, I would like to write a rule that looks for at l

a SpamAssassin rule-discovery algorithm (fwd)

2007-03-05 Thread Justin Mason
SpamAssassin rule developers might be interested in this post over at my blog: > So far, most SpamAssassin text rules are manually developed; somebody > looks at a few spam samples, spots common phrases, and writes a rule to > match that. It'd be great to automate more of that w