At 19:22 12-08-2007, Gene Heskett wrote:
And why not? They've been announced as available, so one would assume a
simple run of sa-update would pull them.
The PDFInfo plugin is available from SARE. There is a
non-spamassassin.org channel to get the updates using
sa-update. Note that sa-upda
From: "Evan Platt" <[EMAIL PROTECTED]>
At 08:19 PM 8/12/2007, lynk wrote:
I'm totally confused re this spamassassin thingy... i can't seem to get MS
outlook to read the email i received (spam/ham) after spamassassin(3.1.9)
scanned the message.
You posted this 2 days ago. If no one answers ag
Tangaish.en wrote on Mon, 13 Aug 2007 10:22:45 +0800:
> I want use "rewrite_header To" rewrite the spam mail "rcpt to:" address
> to one accont named "[EMAIL PROTECTED]",
This won't work because rewriting a header doesn't change where the mail
goes. You have to do the redirection in the program
i managed to find out what the problems are (or so i thought), but i could
not get a fix.. it seems that the parsed email get an extra newline char on
almost every message header:value pairs. (i.e. from:value
, to , subject...). if
anyone can help me out here, i'll be grateful Thank's so much.
It looks like your message gets scanned twice as the report header is
added twice. As a first you may want to stop adding the spam report, then
the body won't get rewritten anymore.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Lynk wrote on Mon, 13 Aug 2007 01:43:21 -0700 (PDT):
> if
> anyone can help me out here, i'll be grateful
You seem to be using the same software that Nigel's company is using. Read
his posting. You will need to change that software. I don't know what this
spamc for Exchange is or if it is part
hi,
i already clear off the spam reports using clear_headers in my local.cf
still getting the same results... outlook still won't read my msg properly..
still came with the extra newline char at the end of each message
headers I'm searching for Nigel's posting as suggested by you.. but
couldn'
i managed to find out what the problems are (or so i thought), but i could
not get a fix.. it seems that the parsed email get an extra newline char
on
almost every message header:value pairs. (i.e. from:value
, to , subject...).
if
anyone can help me out here, i'll be grateful Thank's so m
On Monday 13 August 2007 07:12, Nigel Frankcom wrote:
> [20:35] man, who ever wrote this ExchangeSpamC NEVER use
> option explicit, therefore almost all of his vars (that he didn't
> copy/paste from) weren't dimensioned
Sounds like Visual Basic... ;-P
--
Magnus Holmgren[EMAIL PROTECTED]
Loren Wilton wrote:
>
>> i managed to find out what the problems are (or so i thought), but i
>> could
>> not get a fix.. it seems that the parsed email get an extra newline char
>> on
>> almost every message header:value pairs. (i.e. from:value
>> , to , subject...).
>> if
>> anyone can help
Lynk wrote on Mon, 13 Aug 2007 03:02:07 -0700 (PDT):
> I'm searching for Nigel's posting as suggested by you.. but
> couldn't seem to find the right postings
It's in this thread, Message-ID
<[EMAIL PROTECTED]>
If you can't find it stop using Nabbel as has already been suggested.
Kai
--
Kai Sc
lynk, your comments are indistinguishable from Loren's quoted text. A ">"
means quoted text, please do not put ">" before your own answer!
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Hi,
I want to be able to make SA rotate DNS servers. SA even now probes my
DNS for availability every now and then, so it could react to server
failrues, ie change active DNS server. It could even query another
server when the active one timed out while answering a
(single/several) requests. H
Pawel Sasin writes:
> Hi,
> > I want to be able to make SA rotate DNS servers. SA even now probes my
> > DNS for availability every now and then, so it could react to server
> > failrues, ie change active DNS server. It could even query another
> > server when the active one timed out while ans
output file. Then i followed instructions and installed Exchange SMTP
Transport Event Sink provided by christopher
lewis(http://www.christopherlewis.com/ESA/ExchangeSpamAssassin.htm). OE
is
stilll able to read the output from the sample-spam.txt when i tested it
Ok. Here's a theory. The last
Loren Wilton wrote on Mon, 13 Aug 2007 05:28:09 -0700:
> Short of managing to get in touch with the author of the sink and getting
> him to fix it
I would surely contact the author as he seems to maintain this program. On
top of that page there is:
6/17/2007 ESA and SpamAssassin have been teste
> Bug 5581 / patch attachment 4081 seems to solve my problem
> BTW Mark, very nice DNS timings in debug output :)
Thanks for trying it out!
Regards
Mark
On 13/08/07 14:50, Mark Martinec wrote:
>> Bug 5581 / patch attachment 4081 seems to solve my problem
>> BTW Mark, very nice DNS timings in debug output :)
>
> Thanks for trying it out!
>
> Regards
>Mark
>
welcome, though I obviously meant Bug 5589 (for the benefit of others
trying to find
Hello,
I've got this problem, empty messages (with attachments of course, and
existing subject) are hit pretty hard by SA rules, namely:
RAZOR2_CF_RANGE_51_100=0.5,
RAZOR2_CF_RANGE_E4_51_100=1.5,
RAZOR2_CHECK=0.5,
TVD_SPACE_RATIO=2.219
With treshold set at 4.5 points, most of these messages obvio
I didn't see a header for a listowner contact.. I did see a 'help',
but not sure if that goes to a human or not.
I'm getting a OOO e-mail for every post to the list (yes, 3 so far,
this will make 4) from Tom Stockton. I can e-mail the headers if
there's no Tom Stockton subscribed.. But can nhe
> On Tue, Aug 07, 2007 at 04:13:03PM +0530, Chaitu wrote:
> > Bayesian Poisoning..
On 07.08.07 13:46, Henrik Krohns wrote:
> ...is a myth.
do spammers care if it's a myth?
--
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertisin
-Original Message-
From: McDonald, Dan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 6:40 PM
To: Jean-Paul Natola
Subject: Re: what happend after 3.1.8?
On Fri, 2007-08-03 at 18:30 -0400, Jean-Paul Natola wrote:
> Hi all,
>
> this is sort of a re-post , as I never saw a repl
On Monday 13 August 2007, Kai Schaetzl wrote:
>Evan Platt wrote on Mon, 13 Aug 2007 06:33:04 -0700:
>> Tom Stockton
>
>Ah, it's coming from this list, I put his domain in my access.db one or
>two days ago.
>Those people subscribing from subject-to-autoreply messages are definitely
>annoying me :-(
On Monday 13 August 2007, SM wrote:
>At 19:22 12-08-2007, Gene Heskett wrote:
>>And why not? They've been announced as available, so one would assume a
>>simple run of sa-update would pull them.
>
>The PDFInfo plugin is available from SARE. There is a
>non-spamassassin.org channel to get the upda
I would not use ExchangeSpamC (I had to mod it HEAVLY to make it work,
after I get done testing the mods I did, I'm going to let the author
know of the issues I found) it is not viable at this point in time for
production use.
If the OP would like to test my mods, contact me off list and I will
pr
The fix is in 3.2.3.
Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
> -Original Message-
> From: Jean-Paul Natola [mailto:[EMAIL PROTECTED]
> Sent: 13 August 2007 14:49
> Cc: users@spamassassin.apache.org
> Subject: RE: what happened after 3.1.8?
>
>
>
> --
Evan Platt wrote on Mon, 13 Aug 2007 06:33:04 -0700:
> Tom Stockton
Ah, it's coming from this list, I put his domain in my access.db one or
two days ago.
Those people subscribing from subject-to-autoreply messages are definitely
annoying me :-(
Kai
--
Kai Schätzl, Berlin, Germany
Get your we
Since its not in the ports tree yet- ( that's how I usually upgrade)
Do I just fetch the file, unzip it in the p5-Mail-SpamAssassin directory,
and run make deinstall; make reinstall?
-Original Message-
From: Randal, Phil [mailto:[EMAIL PROTECTED]
Sent: Monday, August 13, 2007 10:02 A
I've been working on a new way to auto-generate body rules recently -- I
discussed it on my blog at http://taint.org/2007/03/05/134447a.html and
http://taint.org/2007/08/04/200125a.html . Anyway, the results are
checked into SVN trunk daily in the "rulesrc/sandbox/jm/20_sought.cf"
file.
We haven'
At 06:49 AM 8/13/2007, Matus UHLAR - fantomas wrote:
On 07.08.07 13:46, Henrik Krohns wrote:
> ...is a myth.
do spammers care if it's a myth?
It seems it would also do something to the AWL (the automatic
NOT_A_WHITELIST list).
--
Jerry Durand, Durand Interstellar, Inc. www.interstellar.c
I hadn't run across this blacklist before, seems our ISP is on it
(guess I have to contact them)...
Recipient address: [EMAIL PROTECTED]
Reason: Remote SMTP server has rejected address
Diagnostic code: smtp;550 5.7.1 <[EMAIL PROTECTED]>... Your
domain does not have a working abuse addres
Gene Heskett wrote on Mon, 13 Aug 2007 10:24:15 -0400:
> All copies of the same exact file, by hand. Should I delete the one
> in /var/lib/perl5?
You can and should delete all that are not in use. The ones loaded with a
.pre file is in use, the others aren't.
> [28645] dbg: rules: meta test D
On Mon, 13 Aug 2007 06:33:04 -0700, Evan Platt
<[EMAIL PROTECTED]> wrote:
>I didn't see a header for a listowner contact.. I did see a 'help',
>but not sure if that goes to a human or not.
>
>I'm getting a OOO e-mail for every post to the list (yes, 3 so far,
>this will make 4) from Tom Stockton
i use sa-update to update/maintain three separate source channels of rules,
sudo -u spam sa-update --channelfile DIST-ch.conf
sudo -u spam sa-update --channelfile SARE-ch.conf --gpgkey 856AA88A
sudo -u spam sa-update --channelfile JMAS-ch.conf --gpgkey 6C6191E3
where, fwiw
i use sa-update to update/maintain three separate source channels of rules,
sudo -u spam sa-update --channelfile DIST-ch.conf
sudo -u spam sa-update --channelfile SARE-ch.conf --gpgkey 856AA88A
sudo -u spam sa-update --channelfile JMAS-ch.conf --gpgkey 6C6191E3
where, fwiw
At 09:23 AM 8/13/2007, Nigel Frankcom wrote:
I just blacklisted him at the MTA, as I do with all auto-responders
that hit me more than once. As I believe Lauren once said "it makes me
want to crawl back up the line and hit them in the face with a spade"
though I'm not certain the comment was aime
At 09:31 AM 8/13/2007, Kai Schaetzl wrote:
Better ask the other side for whitelisting you or abandon that obscure
RBL.
The other side is somebody on THIS list.
--
Jerry Durand, Durand Interstellar, Inc. www.interstellar.com
tel: +1 408 356-3886, USA toll free: 1 866 356-3886
Skype: jerryd
Hi Gene,
At 07:24 13-08-2007, Gene Heskett wrote:
Ok, but the above spamassassin check also reports this, near the end of the
report:
[28645] dbg: rules: meta test DIGEST_MULTIPLE has undefined
dependency 'DCC_CHECK'
This meta test depends on the DCC plugin. You can ignore the
warning. The
Jerry Durand wrote on Mon, 13 Aug 2007 08:47:13 -0700:
> I hadn't run across this blacklist before,
it's an obscure list that lists whole TLDs and makes up their own rules.
seems our ISP is on it
> (guess I have to contact them)...
http://www.rfc-ignorant.org/tools/detail.php?domain=verizon.ne
snowcrash+sa writes:
> i (think i) can simply cobble up a script to only re-compile rules for
> those channel files that HAVE been updated/changed, but though i'd ask
> here first ...
>
> *is* there an already available/clever script or process already
> available that would only re-compile those
hi jason,
> If I understand correctly, part of the recompile process includes removing
> redundant regexps. It can only do this if all rulesets are available at
> compile
> time for comparison.
hm. if that *is* the case, then you've got a point.
just seems that if we're sa-update'ing multiple
> Unfortunately -- not yet. It'll take code changes to sa-compile,
> specifically to cache the "base strings" somewhere so they don't have to
> be re-extracted next time.
>
> could you open an enhancement request on the bugzilla for this?
will do.
thanks!
> could you open an enhancement request on the bugzilla for this?
fyi: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5594
snowcrash+sa writes:
> hi jason,
>
> > If I understand correctly, part of the recompile process includes removing
> > redundant regexps. It can only do this if all rulesets are available at
> > compile
> > time for comparison.
>
> hm. if that *is* the case, then you've got a point.
That is i
At 09:35 13-08-2007, Evan Platt wrote:
I prefer (yeah, maybe it's stupidity) to let someone know I drop
them by bouncing (not dropping).
I assume you mean rejecting and not bouncing.
This is Postfix, and I generally add a header check, and Reject, ie
/[EMAIL PROTECTED]/ Reject
Yo
Jerry Durand wrote on Mon, 13 Aug 2007 09:37:16 -0700:
> The other side is somebody on THIS list.
Well, then they know what to do ;-)
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Over the past few days, I’ve been seeing a ton of spam with every second letter
replace with punctuation or other symbol that are getting past SA. Are there
any Rulesets out there that can take care of this? I am using SARE and most of
the SA plugins. You can see a sample here:
http://www.gc
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including zen?
I tried this in local.cf:
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including zen?
I
On Mon, Aug 13, 2007 at 03:55:52PM -0500, Fletcher Mattox wrote:
> But it seems not to work. I still see lots of outgoing queries with
> tcpdump, and I still get these debug messages:
>
> [30474] dbg: dns: checking RBL zen.spamhaus.org., set zen
> [30474] dbg: dns: launching DNS A query for 229.5
On Mon, 13 Aug 2007, Fletcher Mattox wrote:
> score RCVD_IN_SBL 0
> score RCVD_IN_XBL 0
> score RCVD_IN_PBL 0
> [30474] dbg: dns: timeout for zen, __RCVD_IN_ZEN,
-^
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
[EMAI
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including zen?
I
At 13:42 13-08-2007, Jason Bennett wrote:
Over the past few days, I've been seeing a ton of spam with every
second letter replace with punctuation or other symbol that are
getting past SA. Are there any Rulesets out there that can take
care of this? I am using SARE and most of the SA plugins.
Thanks.. The message I get is actually text, I put it in an image for
simplicity for myself.
-Original Message-
From: SM [mailto:[EMAIL PROTECTED]
Sent: Monday, August 13, 2007 3:18 PM
To: users@spamassassin.apache.org
Subject: Re: Punctuation Spam Lately
At 13:42 13-08-2007, Jason Be
Jason Bennett wrote:
> Over the past few days, I’ve been seeing a ton of spam with every second
> letter replace with punctuation or other symbol that are getting past SA.
> Are there any Rulesets out there that can take care of this? I am using SARE
> and most of the SA plugins. You can see
On Mon, 13 Aug 2007, Bill Landry wrote:
> Jason Bennett wrote:
> > Over the past few days, I've been seeing a ton of spam with every second
> > letter replace with punctuation or other symbol that are getting past SA.
> > Are there any Rulesets out there that can take care of this? I am using
Theo Van Dinter wrote:
> On Mon, Aug 13, 2007 at 03:55:52PM -0500, Fletcher Mattox wrote:
>> But it seems not to work. I still see lots of outgoing queries with
>> tcpdump, and I still get these debug messages:
>>
>> [30474] dbg: dns: checking RBL zen.spamhaus.org., set zen
>> [30474] dbg: dns: la
Theo Van Dinter writes:
> Alternately, add a "spamhaus.org" zone to your name server w/ no entries so
> that queries return "instantly".
Perfect! Thanks, Theo.
Fyi, even with
score __RCVD_IN_ZEN 0
score RCVD_IN_SBL 0
score RCVD_IN_XBL 0
score RCVD_IN_PBL 0
I stil
John Rudd wrote:
> Fletcher Mattox wrote:
> > Spamhaus has determined that my query rate is too high to continue
> > using their servers for free. So they have, apparently, blocked my
> > queries at their router, which incurs a 5 second timeout. How do I
> > tell SpamAssassin to stop using all sp
Fletcher Mattox wrote:
John Rudd wrote:
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop usi
Sorry for jumping in late to this thread.. But, I currently run SA3.18
with a similar yet different Exchange Sink and have no such problems as
the original poster.
Steven
> -Original Message-
> From: Loren Wilton [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 13, 2007 5:28 AM
> To: us
James MacLean wrote, on 15/07/07 05:05 PM:
Subject:
Re: PDFText Plugin for PDF file scoring - PDFText2.pm for ver 3.2
From:
James MacLean <[EMAIL PROTECTED]>
Date:
Sun, 15 Jul 2007 17:05:38 -0300
To:
users@spamassassin.apache.org
To:
users@spamassassin.apache.org
Theo Van Dinter wrote, on 14/0
Fletcher,
In the meantime, while you are waiting on finalizing the spamhaus contract, you
are welcome to test drive my "ivmSIP.com" DNSBL for free. I mention this
because, while my dnbsl is not meant to replace SpamHaus, it would probably
take the edge off the pain of you not having SpamHaus fo
Jean-Paul Natola wrote:
> Since its not in the ports tree yet- ( that's how I usually upgrade)
>
FWIW: The devs are working on rolling a 3.1.10 release, although it
isn't a rush project at the moment.
AFAIK, they have all the blocking bugs fixed, and sometime soonish I'd
expect they'll roll a
On Mon, 13 Aug 2007 at 17:02 -0400, [EMAIL PROTECTED] confabulated:
You need to find the source rules and set them to zero, ala:
$ grep spamhaus.org
/var/lib/spamassassin/3.001008/updates_spamassassin_org/*.cf | awk '/check_rbl/
{ print $2 }'
__RCVD_IN_ZEN
RCVD_IN_XBL
RCVD_IN_PBL
Set those s
On Tue, Aug 14, 2007 at 02:07:20AM +, Duane Hill wrote:
> Wouldn't these changes get overwritten by the next sa-update performed?
> I'm just asking to solidify my thoughts.
Nope. You set the score in your site config dir
(/etc/mail/spamassassin/local.cf), which doesn't change via sa-update.
Never mind. I understand. Set the scores to zero within local.cf. Forgive
the noise.
On Tue, 14 Aug 2007 at 02:07 -, [EMAIL PROTECTED] confabulated:
On Mon, 13 Aug 2007 at 17:02 -0400, [EMAIL PROTECTED] confabulated:
You need to find the source rules and set them to zero, ala:
$ grep
Sorry for jumping in late to this thread.. But, I currently run SA3.18
with a similar yet different Exchange Sink and have no such problems as
the original poster.
Steven
So which sink do you use? Maybe he should use it instead?
Loren
Kestutis wrote:
> Hello,
>
> I've got this problem, empty messages (with attachments of course, and
> existing subject) are hit pretty hard by SA rules, namely:
> RAZOR2_CF_RANGE_51_100=0.5,
> RAZOR2_CF_RANGE_E4_51_100=1.5,
> RAZOR2_CHECK=0.5,
> TVD_SPACE_RATIO=2.219
> With treshold set at 4.5 poin
so I have to make two calls to learn?
ie. one to forget and another to relearn?
never is learning combined with forgetting right?
Kai Schaetzl wrote:
Jo Rhett wrote on Sat, 11 Aug 2007 09:31:05 -0700:
No, I didn't. I asked where a given rule was. I was given a reference
to a page that described how to set up sa-update.
You were given the exact name of the rule, that reference to sa-update was
an additional courtesy a
FYI I'd like to point out that this quoted reply is very insulting in
tone. Golly gee wonder, Bob, there might be information on web page?
No kidding.
Now, why do you think I didn't understand the reference? Because he
didn't explain it. He send me the opening page to a very large topic
wi
On Monday 13 August 2007, Kai Schaetzl wrote:
>Gene Heskett wrote on Mon, 13 Aug 2007 10:24:15 -0400:
>> All copies of the same exact file, by hand. Should I delete the one
>> in /var/lib/perl5?
>
>You can and should delete all that are not in use. The ones loaded with a
>.pre file is in use, the
On Tue, Aug 14, 2007 at 10:32:56AM +0700, Robert Nicholson wrote:
> ie. one to forget and another to relearn?
> never is learning combined with forgetting right?
One call is sufficient. If the message was previously learned the wrong way,
it'll be forgotten for you, then learned the way you speci
> -Original Message-
> From: Loren Wilton [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 13, 2007 8:02 PM
> To: users@spamassassin.apache.org
> Subject: Re: MS outlook can't read parsed email... HELP!!
>
> > Sorry for jumping in late to this thread.. But, I currently run
> > SA3.18 wi
I can understand this but also consider another approach that if
_you_ don't use bayes.. ie. this is the error that is shown when it's
turned off but you still call "learn"
possibly it would be nicer to fail gracefully instead of assuming a
reference to bayes exist if learn is called?
Can't call method "learn" on an undefined value at Mail/SpamAssassin/
PerMsgLearner.pm line 133.
at Mail/SpamAssassin/PerMsgLearner.pm line 133
I can understand this but also consider another approach that if
_you_ don't use bayes.. ie. this is the error that is shown when it's
turned off b
At 20:33 13-08-2007, Jo Rhett wrote:
In specific, the original question referenced SARE rulesets and thus
the obvious assumption was that it was a SARE rule, and I had done
the search and hadn't found the rule so I needed to know which SARE
ruleset that I wasn't currently downloading provided t
hi all ;
i have used "whitelist_from_rcvd" option for spamassassin and it works
successfully if domain has only one mx record . for instance i have domain.com
and it has only one mx record . the below line is used users who have email
address "[EMAIL PROTECTED]".
whitelist_from_rcvd
79 matches
Mail list logo
