Re: FreeMail plugin

2008-03-24 Thread Henrik K
On Mon, Mar 24, 2008 at 10:53:03AM +0530, Tarak Ranjan wrote: > > On Sat, 2008-03-22 at 15:51 +0200, Henrik K wrote: > > On Sat, Mar 22, 2008 at 06:41:26PM +0530, Tarak Ranjan wrote: > > > > > > On Sat, 2008-03-22 at 12:28 +, Justin Mason wrote: > > > > Henrik K writes: > > > > > I updated my

Re: Logging

2008-03-24 Thread Martin Gregorie
> > Generally it gets installed in /etc/init.d or /etc/rc.d/init.d, and > > then symlinked to various /etc/rc.d directories to > > cause it to be called at various runlevels. If your system has > > redhat-ish and chkconfig, it can automate this part for you, as the > > redhat init script that c

Regarding "FORGED_OUTLOOK_TAGS":

2008-03-24 Thread jdow
It sure as hell CAN send in this format. I just did it, silly people. {^_^} Joanne speaks - please listen.Title: Daily Diatribe == Newsletter 20080324 Regarding "FORGED_OUTLOOK_TAGS": Outlook sure as hell CAN send HTML in this for

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Matt Kettler
Sn!per wrote: Quoting Matt Kettler <[EMAIL PROTECTED]>: ie: the two most recent for the 3.2 branch are: # sa-update_3.2_20080114123639/ # sa-update_3.2_20080114144817/ Which were both made on January 14th, 2008. I suspect the rest is a timestamp, but I'm not entirely sure. If it is, the

Re: Am confused with mail header

2008-03-24 Thread Matt Kettler
Sn!per wrote: Quoting Matt Kettler <[EMAIL PROTECTED]>: Sn!per wrote: Hi all, Am using SA version 3.2.4 . So far working great. I am comparing the headers on two of my mails. The first mail is NOT a spam, and X-Spam-Status is like so: No, score=2.7 required=10.0 tests=RC

Re: any way to stop these tiny zip spams?

2008-03-24 Thread Benny Pedersen
On Tue, March 18, 2008 22:36, Jason Haar wrote: > ...we're getting around 15,000 per day at the moment: emails containing > one line of text and a <1Kbyte zip attachment (filename varies) - which > contains a spammy HTML file. yes to late to stop the spam, but sender ip is listed in spamhaus, and

Global Bayes

2008-03-24 Thread Mike Fahey
Just upgraded to 3.2.4. I am running spamassasin as a normal user, not root. I keep seeing this in the log files. bayes: cannot open bayes databases /var/sabayes/.spamassassin/bayes_* R/W: lock failed: File exists There are about 20 lock files in the directory. Is spamassassin not cleaning

Re: Global Bayes

2008-03-24 Thread Robert Blayzor
On Mar 24, 2008, at 11:08 AM, Mike Fahey wrote: Just upgraded to 3.2.4. I am running spamassasin as a normal user, not root. I keep seeing this in the log files. bayes: cannot open bayes databases /var/sabayes/.spamassassin/ bayes_* R/W: lock failed: File exists There are about 20 lock fil

Re: Global Bayes

2008-03-24 Thread Jared Hall
Mike Fahey wrote: Just upgraded to 3.2.4. I am running spamassasin as a normal user, not root. I keep seeing this in the log files. bayes: cannot open bayes databases /var/sabayes/.spamassassin/bayes_* R/W: lock failed: File exists There are about 20 lock files in the directory. Is spamass

Re: FreeMail plugin

2008-03-24 Thread Marc Perkel
Henrik K wrote: Hello, I updated my FreeMail plugin with a big list of domains (http://www.rhyolite.com/anti-spam/freemail.html). Try it out: http://sa.hege.li/FreeMail.pm http://sa.hege.li/FreeMail.cf Pretty good hit ratio here, especially when you add some extra scores like FREEMAIL_FROM

Re: FreeMail plugin

2008-03-24 Thread Henrik K
On Mon, Mar 24, 2008 at 09:19:19AM -0700, Marc Perkel wrote: > > I have a suggestion for your freemail plugin. I don't know if you can do > this but if you can I want to see how. > > First look at the last received and verify that it is genuine. (Forward > Confirmed rDNS). If it is then check t

Re: SA-UPDATE How often new updates?

2008-03-24 Thread mouss
Matt Kettler wrote: Sn!per wrote: Quoting Matt Kettler <[EMAIL PROTECTED]>: ie: the two most recent for the 3.2 branch are: # sa-update_3.2_20080114123639/ # sa-update_3.2_20080114144817/ Which were both made on January 14th, 2008. I suspect the rest is a timestamp, but I'm not entirely

update from 3.20 to 3.24 problem with local.cf

2008-03-24 Thread .rp
SA 3.20 was working okay, went for the 3.24 update. It installed , but upon restarting spamd I got error messages. I'd appreciate information on how to fix the local.cf file. Here is the log: Mon Mar 24 10:56:02 2008 [22312] info: logger: removing stderr method Mon Mar 24 10:56:09 2008 [22314]

Re: update from 3.20 to 3.24 problem with local.cf

2008-03-24 Thread Michael Scheidell
You have (at leqase) some OLD 2.x stuff in that local.cf http://readlist.com/lists/incubator.apache.org/spamassassin-users/0/4503.htm l Also, score have to be like '0.79' not '.79'. Google for each option that failed. I think you will find that they are OLD 2.0 options, for the most part. Also

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Matthias Leisi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A side note: | I have this in my cron to update the rules: | 00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 - --channel saupdates.openprotect.com --channel updat

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Mike Jackson
00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel saupdates.openprotect.com --channel updates.spamassassin.org --allowplugins Am I missing anything? Beside the other comments, throw something like

Re: FreeMail plugin

2008-03-24 Thread mouss
Marc Perkel wrote: Henrik K wrote: Hello, I updated my FreeMail plugin with a big list of domains (http://www.rhyolite.com/anti-spam/freemail.html). Try it out: http://sa.hege.li/FreeMail.pm http://sa.hege.li/FreeMail.cf Pretty good hit ratio here, especially when you add some extra scores

RE: Cyrillic spam

2008-03-24 Thread Michael Hutchinson
> -Original Message- > From: Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] > Sent: Friday, 21 March 2008 3:28 a.m. > To: users@spamassassin.apache.org > Subject: Re: Cyrillic spam > > > > For some strange reason, I'm seeing Cyrillic spams very frequently > > > lately. > > > > > > None

cannot install SA by CPAN without force

2008-03-24 Thread Juan Miscaro
I'm running OpenBSD and I repeatably have trouble installing SpamAssassin via CPAN. The (make) tests always fail. I usually install by force but now I'm trying to understand what's going wrong. I have attached the cpan session. Thanks to any responders. /juan __

Why two spam assassins rank the same message so differently?

2008-03-24 Thread V V
My e-mail provider has SpamAssasin-3.2.1 installed. But it ranks many spam messages very differently than my SpamAssasin-3.2.4 on my computer. For example message below is ranked score=2.2 by SpamAssassin-3.2.1 on my provider with failing tests=RCVD_BAD_ID,RDNS_NONE. And the same message is ran

Re: Why two spam assassins rank the same message so differently?

2008-03-24 Thread Theo Van Dinter
On Mon, Mar 24, 2008 at 02:24:38PM -0700, V V wrote: > For example message below is ranked score=2.2 by SpamAssassin-3.2.1 on my > provider with failing tests=RCVD_BAD_ID,RDNS_NONE. > > And the same message is ranked score=15.007 by SpamAssassin-3.2.4 on my > computer with failing > tests=RAZOR

RE: Why two spam assassins rank the same message so differently?

2008-03-24 Thread Jason J. Ellingson
>From what I see... it looks like perhaps your provider is doing only local tests from within SpamAssassin (the RDNS_NONE is from the MTA reporting no RNDS for that IP). You, on the other hand, seem to be running networks tests + Razor. - Jason J Ellingson Fro

Re: Why two spam assassins rank the same message so differently?

2008-03-24 Thread mouss
V V wrote: My e-mail provider has SpamAssasin-3.2.1 installed. But it ranks many spam messages very differently than my SpamAssasin-3.2.4 on my computer. For example message below is ranked score=2.2 by SpamAssassin-3.2.1 on my provider with failing tests=RCVD_BAD_ID,RDNS_NONE. And the same m

RE: Why two spam assassins rank the same message so differently?

2008-03-24 Thread James E. Pratt
> > by dgw218.neoplus.adsl.tpnet.pl with smtp (Exim 4.62 We've been blocking adsl.tpnet.pl for over a year yet they still barrage our servers daily with bot-infested clients. Some sites block the whole .PL tld, but that's a bit evil IMO.

Re: Why two spam assassins rank the same message so differently?

2008-03-24 Thread Arvid Ephraim Picciani
On Monday 24 March 2008 23:14:48 James E. Pratt wrote: >. Some sites block the whole .PL tld, but that's a bit evil IMO. I know a big corp who blocks the entire .org. worst part is that the bounces go to the receiver instead the sender. "you got an email from your developer contact , but you're

RE: Why two spam assassins rank the same message so differently?

2008-03-24 Thread D Hill
On Mon, 24 Mar 2008 at 18:14 -0400, [EMAIL PROTECTED] confabulated: by dgw218.neoplus.adsl.tpnet.pl with smtp (Exim 4.62 We've been blocking adsl.tpnet.pl for over a year yet they still barrage our servers daily with bot-infested clients. Some sites block the whole .PL tld, but that's

Re: Howto stop SPF_FAIL from internal network?

2008-03-24 Thread Benny Pedersen
On Wed, March 19, 2008 18:42, Enrico Scholz wrote: > Hi, > > I have a problem that mails from internal (private) IPs generate > SPF_FAIL hits. E.g. my configuration is > > | internal_networks 62.153.82.30 > | internal_networks 192.168.0.0/16 > | > | trusted_networks62.153.82.30

Re: Howto stop SPF_FAIL from internal network?

2008-03-24 Thread Benny Pedersen
On Thu, March 20, 2008 16:48, Enrico Scholz wrote: > ok; fixed it by removing the 192.168.0.0/16 from > 'internal_networks'. But problem still persists that senders > from the private 192.168.0.0/16 network are tagged with SPF_FAIL. if you have nic cards that are open to the air with that ip ra

Re: FreeMail plugin

2008-03-24 Thread Justin Mason
Henrik K writes: > On Sat, Mar 22, 2008 at 12:28:34PM +, Justin Mason wrote: > > Henrik K writes: > > > I updated my FreeMail plugin with a big list of domains > > > (http://www.rhyolite.com/anti-spam/freemail.html). > > > > > > Try it out: > > > > > > http://sa.hege.li/FreeMail.pm > > > htt

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Sn!per
Quoting Matt Kettler <[EMAIL PROTECTED]>: > Well, as I said above no updates have been published since Jan 14th. So > I would not expect any. > > However, sa-update's don't go in /usr/share/spamassassin. You'll *NEVER* > see updates if you keep looking there. Feb 7th should be the date of > yo

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Matt Kettler
Sn!per wrote: So my cron would look like this then? 00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel saupdates.openprotect.com --channel updates.spamassassin.org --allowplugins && /etc/init.d/spamd

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Sn!per
Quoting Matt Kettler <[EMAIL PROTECTED]>: > Also, You shouldn't need to specify the keys and channels, unless you've > got other channels installed on your system that you don't want to update. > sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 > --channel saupdates.openp

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Daryl C. W. O'Shea
On 24/03/2008 9:34 PM, Matt Kettler wrote: > Sn!per wrote: > >> So my cron would look like this then? >> >> 00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel >> sought.rules.yerp.org --gpgkey >> D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel >> saupdates.openprotect.com --channel

Re: FreeMail plugin

2008-03-24 Thread Loren Wilton
You would open a bug on the Bugzilla, and attach a patch; we then apply that patch, and it's updated in the next release of SpamAssassin. Is a CLA needed? Loren