I wrote these rules last week that stop em fast, even before the URIBL's
kick in.
# This will fire if 2 or more are found
rawbody __DRUGS268A /^V$/i
rawbody __DRUGS268B /^I$/i
rawbody __DRUGS268C /^C$/i
rawbody __DRUGS268D /^E$/i
rawbody __DRUGS268E /^33$/i
rawbody __DRUGS268F /^\=20$/i
meta DRUGS
Hi,
No, change the $SA_RESTART variable in the config file. That way you
don't have to make the same change every time you update RDJ.
The same goes for the $TRUSTED_RULESETS variable.
OK I see now. Thanks, that got it!
Lisa Casey
Lisa Casey wrote:
>
> I looked in /etc/mail/spamassassin/RulesDuJour and there is a
> different rules_du_jour which says at the top:
>
> Version 1.28 Added SARE_STOCKS
>
> Great! So I copied it over to /etc/local/sbin and ran it. I get:
>
> [EMAIL PROTECTED] defang]$ /usr/local/sbin/rules_du_jo
Lisa Casey wrote:
> Hi,
>
> > do you have version 1.28 of rules_du_jour?
> >
> > It's the version that added SARE_STOCKS.
>
> Yes I do and I've fiddled around with it and have it working now. One
> last question though: at the bottom of the rules_du_jour script, it
> says:
>
> [ "${SA_RESTART
Hi,
do you have version 1.28 of rules_du_jour?
It's the version that added SARE_STOCKS.
Yes I do and I've fiddled around with it and have it working now. One last
question though: at the bottom of the rules_du_jour script, it says:
[ "${SA_RESTART}" ] || \
SA_RESTART="/etc/init.d/spama
.61?
With warm regards,
-Payal
>
> -Original Message-
> From: Payal Rathod [mailto:[EMAIL PROTECTED]
> Sent: Friday, February 10, 2006 5:40 AM
> To: users@spamassassin.apache.org
> Subject: Re: lots of new spam
>
> On Thu, Feb 09, 2006 at 10:36:29AM -0700, Craig Bair
users@spamassassin.apache.org
Subject: Re: lots of new spam
On Thu, Feb 09, 2006 at 10:36:29AM -0700, Craig Baird wrote:
> These are one of the latest stock spam variations. I was getting a
gazillion
> of these when they first started. I upgraded to the latest copy of
> 70_sare_stocks.c
On Thu, Feb 09, 2006 at 10:36:29AM -0700, Craig Baird wrote:
> These are one of the latest stock spam variations. I was getting a gazillion
> of these when they first started. I upgraded to the latest copy of
> 70_sare_stocks.cf, and I don't think I've seen one since. Note that you do
> need
On Thu, 2006-02-09 at 07:54 -0500, Payal Rathod wrote:
> Hi,
> >From 4-5 days I have been receiving a lot of spams, 100s of them with
> weird subjects like, Re: a f news 141, Re: K R news 721, Re: B l news
> 203 etc.
> I have with bayes learned alteast 200 of them, but they are still pouring in.
Lisa Casey wrote:
> I'm having the same trouble with SARE_STOCKS. I have added it to
> Trusty Rulesets, but when I run rules_du_jour I get this:
>
>
> No index found for ruleset named SARE_STOCKS. Check that this
> ruleset is still valid.
> No files updated; No restart required.
do you have ver
Hi All,
Spam Ass wrote:
On 2/9/06, Bowie Bailey <[EMAIL PROTECTED]> wrote:
> The best and easiest way is to use RulesDuJour. This will let you
> update most of the third-party rulesets automatically on a regular
> basis (including all of the SARE rules).
>
> http://www.exit0.us/index.php?page
Spam Ass wrote:
> Disregard this question. Appearantly RDJ was not updating itself as
> I thought it would... SARE_STOCKS updates fine with the newest
> version.
In that case, you can also disregard my answer. :)
--
Bowie
Spam Ass wrote:
> On 2/9/06, Bowie Bailey <[EMAIL PROTECTED]> wrote:
> > The best and easiest way is to use RulesDuJour. This will let you
> > update most of the third-party rulesets automatically on a regular
> > basis (including all of the SARE rules).
> >
> > http://www.exit0.us/index.php?page
Disregard this question. Appearantly RDJ was not updating itself as I thought it would... SARE_STOCKS updates fine with the newest version.IanOn 2/9/06,
Spam Ass <[EMAIL PROTECTED]> wrote:
On 2/9/06, Bowie Bailey <[EMAIL PROTECTED]> wrote:
The best and easiest way is to use RulesDuJour. This w
On 2/9/06, Bowie Bailey <[EMAIL PROTECTED]> wrote:
The best and easiest way is to use RulesDuJour. This will let youupdate most of the third-party rulesets automatically on a regular basis(including all of the SARE rules).
http://www.exit0.us/index.php?pagename=RulesDuJourIs anyone else not gettin
'Payal Rathod' wrote:
> On Thu, Feb 09, 2006 at 09:46:02AM -0500, Chris Santerre wrote:
>> With regard to enabling URIBL:
>> http://www.uribl.com/usage.shtml
>
> I put the listing given on the page in local.cf but in logs I get an
> error as,
>
> Feb 9 14:57:51 dc2 spamd[20236]: Failed to run U
On Thu, Feb 09, 2006 at 09:46:02AM -0500, Chris Santerre wrote:
> With regard to enabling URIBL:
> http://www.uribl.com/usage.shtml
I put the listing given on the page in local.cf but in logs I get an
error as,
Feb 9 14:57:51 dc2 spamd[20236]: Failed to run URIBL_GREY SpamAssassin
test, skippi
Roger Jochem wrote:
> Where do I upgrade my spamassassin cf files to the latest versions?
The best and easiest way is to use RulesDuJour. This will let you
update most of the third-party rulesets automatically on a regular basis
(including all of the SARE rules).
http://www.exit0.us/index.php?pa
>
> To: "Payal Rathod" <[EMAIL PROTECTED]>
> Cc:
> Sent: Thursday, February 09, 2006 3:36 PM
> Subject: Re: lots of new spam
>
>
> > These are one of the latest stock spam variations. I was getting a
> > gazillion
> > of these when they first s
On Thu, Feb 09, 2006 at 12:40:51PM -0500, Benjamin Adams wrote:
> I try updating my rules using sa-update
> [19602] dbg: dns: query failed: 0.1.3.updates.spamassassin.org =>
> NXDOMAIN
> [19602] dbg: channel: no updates available, skipping channel
[...]
> anyone else having this problem?
There a
I try updating my rules using sa-updateI get [19602] dbg: dns: query failed: 0.1.3.updates.spamassassin.org => NXDOMAIN[19602] dbg: channel: no updates available, skipping channel[19602] dbg: diag: updates complete, exiting with code 0spamassassin --versionSpamAssassin version 3.1.0 running on Perl
Where do I upgrade my spamassassin cf files to the latest versions? Sorry if
this is a dumb question...
- Original Message -
From: "Craig Baird" <[EMAIL PROTECTED]>
To: "Payal Rathod" <[EMAIL PROTECTED]>
Cc:
Sent: Thursday, February 09, 2006 3:36
These are one of the latest stock spam variations. I was getting a gazillion
of these when they first started. I upgraded to the latest copy of
70_sare_stocks.cf, and I don't think I've seen one since. Note that you do
need the *latest* version of 70_sare_stocks.cf. I was running an older on
Title: RE: lots of new spam
> -Original Message-
> From: Payal Rathod [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 09, 2006 9:35 AM
> To: users@spamassassin.apache.org
> Subject: Re: lots of new spam
>
>
> On Thu, Feb 09, 2006 at 09:32:32AM -0500
On Thu, Feb 09, 2006 at 09:32:32AM -0500, JamesDR wrote:
> Yes, you have something missconfigured, Bayes is poisoned, net test
> are failing and/or you don't have URIBL's enabled.
What does Bayes poisoning mean? And how do I enable URIBL?
With warm regards,
-Payal
Payal Rathod wrote:
Hi,
From 4-5 days I have been receiving a lot of spams, 100s of them with
weird subjects like, Re: a f news 141, Re: K R news 721, Re: B l news
203 etc.
I have with bayes learned alteast 200 of them, but they are still pouring in.
Any ideas on their blocking?
With warm rega
Hi,
>From 4-5 days I have been receiving a lot of spams, 100s of them with
weird subjects like, Re: a f news 141, Re: K R news 721, Re: B l news
203 etc.
I have with bayes learned alteast 200 of them, but they are still pouring in.
Any ideas on their blocking?
With warm regards,
-Payal
27 matches
Mail list logo
