FozzyOcr logging

2011-03-24 Thread polloxx
Dear, Is it possible to log FuzzyOcr logs to syslog? As default config is using focr_logfile. Thx, P.

Re: FozzyOcr logging

2011-03-24 Thread Ed Kasky
I have never seen an option for that in the cf. There is one note though regarding log file permissions - wherever you log to, fuzzyocr user needs permission to write, obviously... Ed On Mar 24, 2011, at 9:07 AM, polloxx wrote: > Dear, > > Is it possible to log FuzzyOcr logs to syslog? A

URIBL_RHS_DOB false positives?

2011-03-24 Thread Ned Slider
Hi List, Is anyone else seeing abnormally high instances of FP hits against URIBL_RHS_DOB today? Not causing ham to be classified as spam, but I've noticed quite a few hits on ham today that I wouldn't expect. Running the message through SA in debug doesn't tell me the domain that's hit as

Re: URIBL_RHS_DOB false positives?

2011-03-24 Thread RGB Camera
Yes, we set the pointage to 0.01 until whatever is broken gets fixed. We normally score that rule much higher than the default, and it normally works well. But it seems like there is a reset in the URIBL_RHS_DOB database or something. A lot of domains that are not new domains are now listed. >

Re: Bad Helo Host impersonating

2011-03-24 Thread jon1234
Dominic Benson wrote: > > > On 23 Mar 2011, at 08:09, Dave Funk wrote: > >> On Tue, 22 Mar 2011, jon1234 wrote: >> >>> >>> From where do they get that bounce message? From a host internal to your network or from hosts out on the Internet? >>> >>> The bounce message is only

RE: URIBL_RHS_DOB false positives?

2011-03-24 Thread McDonald, Dan
> -Original Message- > From: RGB Camera [mailto:zauschne...@gmail.com] > Sent: Thursday, March 24, 2011 4:34 PM > To: users@spamassassin.apache.org > Subject: Re: URIBL_RHS_DOB false positives? > > Yes, we set the pointage to 0.01 until whatever is broken gets fixed. > > We normally sco

Amazon S3 triggering FPs with SPOOF_COM* rules

2011-03-24 Thread Jason Haar
Hi there Apparently when you use sharethis.com (who use S3 for hosting services) to send out links, the links look like hXXp://img.sharethis.com *DOT* s3.amazonaws.com I imagine from this that ANY .com domain using Amazon S3 services would create similar URLs? This causes SPOOF_COM* rules to tr