Re: Fremail Plugin Suggestion

On Sun, Jun 29, 2008 at 11:37:13PM -0700, Marc Perkel wrote: > I'd like to suggest an additional feature for the freemail plugin. If > you test the sending host through FCrDNS and determine that the sending > host is a freemail hostname (like google.com) then you should consider > it a freema

Re: Fremail Plugin Suggestion

Henrik K wrote: On Sun, Jun 29, 2008 at 11:37:13PM -0700, Marc Perkel wrote: I'd like to suggest an additional feature for the freemail plugin. If you test the sending host through FCrDNS and determine that the sending host is a freemail hostname (like google.com) then you should conside

Re: Fremail Plugin Suggestion

Marc Perkel wrote: Henrik K wrote: On Sun, Jun 29, 2008 at 11:37:13PM -0700, Marc Perkel wrote: I'd like to suggest an additional feature for the freemail plugin. If you test the sending host through FCrDNS and determine that the sending host is a freemail hostname (like google.com) then

Re: Fremail Plugin Suggestion

On Mon, Jun 30, 2008 at 09:21:32AM +0200, mouss wrote: > > and it may be interesting to look in the body as well. some spam comes > from google (infected pc) but shows yahoo and hotmail as contact > addresses (the last I have seen has 3 addresses in the body: > hotmail.com, yahoo.com and yaho

SARE Rules problem?

Hello all. I have just upgraded from SA 3.2.4 to 3.2.5 and ran sa-update to get the latest rulesets (which also happens every night via a cronjob). I got the following errors: [EMAIL PROTECTED] ~]# sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A --g

Re: SARE Rules problem?

On Mon, 30 Jun 2008, Arthur Dent wrote: Hello all. I have just upgraded from SA 3.2.4 to 3.2.5 and ran sa-update to get the latest rulesets (which also happens every night via a cronjob). I got the following errors: [errors chopped] Stopping spamd:

How to capitalise X-Spam headers?

This is something that is probably so simple, but I'm tearing my hair out trying to find how to do it. At present I have a header line added as X-Spam-Flag: YES where SA has scored over the threshold. I want this in upper case as X-SPAM-FLAG: YES, rather than lower case X-Spam-Flag: YES The rea

Re: SARE Rules problem?

On Mon, Jun 30, 2008 at 10:46:13AM +, Duane Hill wrote: > On Mon, 30 Jun 2008, Arthur Dent wrote: > >> Hello all. >> >> I have just upgraded from SA 3.2.4 to 3.2.5 and ran sa-update to get the >> latest rulesets (which also happens every night via a cronjob). >> >> I got the following errors: >

Re: IP country plugin - can we look for two countries?

On Sat, 2008-06-28 at 01:40 +0200, mouss wrote: > mouss wrote: > >> Is there some way to grab the metadata from IPCountry to count the > >> number of countries that were involved in sending a mail, and set a > >> score based on that? > > > > you mean catching the "Junkman traveller"? > > > > you ca

VBounce FPs

Neither of the two messages at are bounce messages. They're both legitimate messages from the CommuniGate Pro mailing list, yet they both hit ANY_BOUNCE_MESSAGE and BOUNCE_MESSAGE. Comments? -- Christopher Bort <[EMAIL PROTECTED]>

Re: VBounce FPs

On 30.06.08 09:55, Christopher Bort wrote: > Neither of the two messages at > are bounce messages. They're both legitimate messages from the > CommuniGate Pro mailing list, yet they both hit > ANY_BOUNCE_MESSAGE and BOUNCE_MESSAGE. Comments? The From: is set to p

Re: VBounce FPs

On 06/30/08 10:46, [EMAIL PROTECTED] (Matus UHLAR - fantomas) wrote: On 30.06.08 09:55, Christopher Bort wrote: Neither of the two messages at are bounce messages. They're both legitimate messages from the CommuniGate Pro mailing list, yet they both hit ANY_BOU

Re: IP country plugin - can we look for two countries?

McDonald, Dan wrote: On Sat, 2008-06-28 at 01:40 +0200, mouss wrote: mouss wrote: Is there some way to grab the metadata from IPCountry to count the number of countries that were involved in sending a mail, and set a score based on that? you mean catching the "Junkman travelle

Re: IP country plugin - can we look for two countries?

On Mon, 2008-06-30 at 22:04 +0200, mouss wrote: > McDonald, Dan wrote: > > On Sat, 2008-06-28 at 01:40 +0200, mouss wrote: > > > >> mouss wrote: > >> > Is there some way to grab the metadata from IPCountry to count the > number of countries that were involved in sending a mail, an

Lots of spam with the following snip

God dag, *** Warning! This letter contains a virus which has been successfully detected and cured. *** The part that's noteworthy is this: *** Warning! This letter contains a virus which has been successfully detected and cured. *** Does someone have rule for this ready made? Thanks --

Re: Lots of spam with the following snip

On Monday 30 June 2008 6:04 pm, Steven W. Orr wrote: > God dag, > > *** > Warning! > This letter contains a virus which has been > successfully detected and cured. > *** > > The part that's noteworthy is this: > > > *** > Warning! > This letter contains a virus which has been > successfully de

Re: Lots of spam with the following snip

On Monday 30 June 2008 6:04 pm, Steven W. Orr wrote: > God dag, > > *** > Warning! > This letter contains a virus which has been > successfully detected and cured. > *** > > The part that's noteworthy is this: > > > *** > Warning! > This letter contains a virus which has been > successfully de

ways to check reason/error of rejected/bounced emails with calling customers

Many of our clients started to have problem sending emails to us after I inserted more strict SA rules . Previously our system was flooded with spams. So I decided to inserted them to the Existing emails. After this the spams had reduced significantly. But I know more worry about false Positive

Spam Rate

Hello, I am new to SA, I have read through some of the faq and wiki, so far can't find the average spam rate % detected by SA. I know it is not the same for everyone, but I want to get the feel of general statistics (If you don't mind to share) 1. How many Spam detection rate if I am using defaul

procmail config remove no spamed mail

Hi, I have add procmail to my config to avoid most spam, but il delete others mails too. Do you have an idea ? Regards Philippe My /etc/procmailrc file [EMAIL PROTECTED] etc]# cat procmailrc # Spamassassin utilise le daemon spamd :0 fw | /usr/bin/spamc # si echec :0e { EXIT