I've been getting more spam recently so I did sa-update for the first time in a
year (I thought it was automatic :-()).
I restarted the spamassassin service (Ubuntu).
$ /var/lib/spamassassin$ ll
total 16
drwxr-xr-x 4 root root 4096 Oct 15 2011 ./
drwxr-xr-x 45 root root 4096 Jun 12 06:40 ../
d
On 09/22/12 15:38, Martin Hepworth wrote:
> Itll use the lastest rule you downloaded as these are your core rules now
>
> Martin
>
> On Saturday, 22 September 2012, James wrote:
>
> I've been getting more spam recently so I did sa-update for the first
> tim
On 09/22/12 17:11, Daniel McDonald wrote:
>
>
>
> On 9/22/12 3:31 PM, "James" wrote:
>
>> Great thanks.
>>
>> I am lowering the required score to 3.
>
> That is generally not a desirable practice.
It didn't help. :-(
I got spam with
On 09/22/12 20:50, Glenn Sieb wrote:
> On 9/22/12 8:36 PM, Glenn Sieb wrote:
>> On 9/22/12 8:32 PM, James wrote:
>>> It didn't help. :-(
>>> I got spam with a low score.
>>> X-Spam-Status: No, score=2.4 required=3.0 tests=BAYES_00,HTML_MESSAGE,
>
On 09/22/12 22:38, John Hardin wrote:
> On Sat, 22 Sep 2012, James wrote:
>> On 09/22/12 20:50, Glenn Sieb wrote:
>>> On 9/22/12 8:36 PM, Glenn Sieb wrote:
>>>> On 9/22/12 8:32 PM, James wrote:
>>>>> It didn't help. :-(
>>>>> I got s
On 09/23/12 18:28, John Hardin wrote:
> On Sun, 23 Sep 2012, James wrote:
>
>> I wrote this little script to update the bayes rules. I can do this on my
>> imap account but my pop3 account gets way more spam and the messages are no
>> longer on the machine with sa once I
I don't think I have the Bayesian filter working.
This is some spam that wasn't marked as spam, shouldn't one of the tests be
BAYES_00?
X-Spam-Status: No, score=4.5 required=5.0 tests=FREEMAIL_FROM,FREEMAIL_REPLYTO,
FSL_MY_NAME_IS,HTML_MESSAGE,RDNS_DYNAMIC,T_OBFU_JPG_ATTACH autolearn=no
On 02/25/2015 10:03 PM, Dave Funk wrote:
It looks like you either have a permissions problem or a confusion
problem.
Your run of 'sa-learn --dump magic' is looking at some Bayes which has
enough ham/spam but what ever your spamassasin is looking at doesn't.
Your 'sudo' isn't running that sa-l
I get a lot of spam from Chinese senders and Chinese subjects but only
an image for the body.
I want to mark as spam any non-English sender names and subjects.
I tried TextCat but either I did it wrong or it only looks at the Body.
On 07/11/15 09:32, ch...@antennex.com wrote:
*From:* RW <mailto:rwmailli...@googlemail.com>
*Date:* 2015-07-11 08:28
*To:* users <mailto:users@spamassassin.apache.org>
*Subject:* Re: non-English sender and body
On Fri, 10 Jul 2015 22:00:10 -0400
James wr
lish sender and body
> On Fri, 10 Jul 2015 22:00:10 -0400
> James wrote:
>
> > I get a lot of spam from Chinese senders and Chinese subjects but
> > only an image for the body.
> > I want to mark as spam any non-English sender names and subjects.
English sender and body
*From:* RW <mailto:rwmailli...@googlemail.com>
*Date:* 2015-07-11 08:28
*To:* users <mailto:users@spamassassin.apache.org>
*Subject:* Re: non-English sender and body
On Fri, 10 Jul 2015 22:00:10 -0400
James wrote:
On 07/11/15 19:55, Reindl Harald wrote:
Am 11.07.2015 um 17:36 schrieb James:
Does Bayes catch them?
===
I don't know since I don't get any non-english emails. But, you
could collect and feed them to "sa-
On 07/12/15 00:22, ch...@antennex.com wrote:
Why not run:
sa-learn --dump magic
And you'll see the number of spams vs tyhe number of hams learned?
The problem is finding out which directory the running spamassassin
uses, I can't seen to train the one it expects.
I put this i
On 07/12/15 17:15, Reindl Harald wrote:
Am 12.07.2015 um 21:40 schrieb Bill Cole:
On 12 Jul 2015, at 11:28, James wrote:
The problem is finding out which directory the running spamassassin
uses, I can't seen to train the one it expects.
I put this in my /etc/spamassassin/loc
I've been getting a lot of spam so I'm thinking of lowering the
"required" number.
About 50 % spam gets a 4.4 so my required=4.5 is a tiny bit high.
I run sa-learn --ham on my inboxes.
Is there a way to whitelist all the email addresses in my inboxes?
On 2019-03-17 5:45 p.m., John Hardin wrote:
On Sun, 17 Mar 2019, James wrote:
I've been getting a lot of spam so I'm thinking of lowering the
"required" number.
About 50 % spam gets a 4.4 so my required=4.5 is a tiny bit high.
I run sa-learn --ham on my inboxes.
Are
On 2019-03-17 5:46 p.m., John Capo wrote:
On Sun, March 17, 2019 17:03, James wrote:
I've been getting a lot of spam so I'm thinking of lowering the
"required" number.
About 50 % spam gets a 4.4 so my required=4.5 is a tiny bit high.
I run an IMAP server with my own
On 2019-03-17 5:43 p.m., @lbutlr wrote:
On 17 Mar 2019, at 15:03, James wrote:
I run sa-learn --ham on my inboxes.
You inboxes likely contain spam messages that haven't been caught, so training
on inbox will poison your bayes in favor of more spam. Unless your inbox is
perfect (ent
On 2019-03-18 7:40 p.m., @lbutlr wrote:
On 18 Mar 2019, at 13:59, James wrote:
The documentation says to use your inbox. :-)
It does not.
The example shows using your inbox.
if possible. This will make it more accurate for your incoming mail.
Do this using the "sa-learn" t
On 2019-03-20 12:07 p.m., Dave Warren wrote:
What is the result when you train inbound spam as ham first, then as
spam? As I understand it, forgetting is not required, SpamAssassin will
handle this automatically. So as long as users move spam into the spam
training folder (not deleting spam di
rrors.
Is there any way I can have spamd use the user that spamc passes it? Etc
[EMAIL PROTECTED] As of yet it's using root to connect to
the mysql db.
Any thoughts? Need more info?
Thanks,
James
Correct, I do get users not found with the -x. I guess the big thing is,
how do others do multi user/domain with their setup? Do you create the
user in every case? My plan was later down the road to deploy a few more
linux servers with sa only on them for higher mail volumes.
Thanks,
James
sing it but generates the errors above. In
the end it shows the stats but shows that no spam has ever been processed, all
percentages are 0. Am I logging spamd improperly?
- James
Like I said before it finds and reads the spam log file fine. It
occurs when parsing the actual log file, it does not have trouble
locating it. Any other ideas?
- James
Steve Dimoff wrote:
By default, the sa-stats.pl uses the log file /var/log/maillog
You need to tell sa-stats to use a
tch phrase, but leaves much to be desired. and at
$200/month ? EEK.
I wouldn't go near it.
James
nstance:
i use sa-learn and train it with say 6k emails.
i delete the original emails.
Does the database need to read anything from those emails or is it ok to
get rid of them?
I assumed that spamassassin just grabbed what it needed from training
and put it into database but i wasn't sure
TIA
-James
with your proposal but NOT "good luck" getting the
money you want to get from the U.N. to be put toward "solving" this
problem. It's simply not an issue I believe we should be spending any
portion of that particular budget for.
Sincerest regards,
James Butler
Chairman
error: (closed before
headers)" means
Snip below to put into context. I have spent all day reading and searching
but found very little.
Thanks James
May 16 01:35:56 66-226-75-102 spamd[30044]: spamd starting
May 16 01:35:59 66-226-75-102 spamd[30153]: server started on UNIX domain
s
n.org =>
1786640, parsed as 1786640
Apr 6 09:19:55.594 [10506] dbg: channel: current version is 1786853, new
version is 1786640, skipping channel
Apr 6 09:19:55.594 [10506] dbg: diag: updates complete, exiting with code 1
Update finished, no fresh updates were available
superchicken#
Any insights appreciated. Thanks!
--James
Thanks very much for everyone's quick responses (and sanity checks). :)
I love this .cf file, Kevin. A more advanced and sophisticated version of the
one I've been accumulating for a few years!
Thanks again!
--James
> On Apr 6, 2017, at 10:12 AM, Kevin A. McGrail wrote:
>
files (the bulk of
which are in /var/lib/spamassassin/3.003001/). Have rules been optimized or
something? Should I copy over all the SARE rules and setup RulesDuJour to
update, or leave as is? Thanks for the input.
James
On 1/14/11 6:38 AM, "Jason Bertoch" wrote:
>On 2011/01/14 7:28 AM, James Lay wrote:
>> Hey All!
>>
>> Been a while since I did a full blown install of SpamAssassin, and as
>> I'm looking at my old setup, I see a fair amount of changes. I have the
&g
teway spamd[15540]: Use of uninitialized value in string
ne at /usr/lib64/perl5/site_perl/5.10.1/Mail/SpamAssassin/AsyncLoop.pm line
174, line 158.
DNS is working fine on the machine, resolve.conf is set with the right
information as well. Any hints on to why this is happening? Thanks all.
James
On 1/29/11 5:15 PM, "Mark Martinec" wrote:
>On Saturday January 29 2011 15:51:25 James Lay wrote:
>> Just did a new install and I'm seeing the below when spamassassin is
>> checking an email:
>>
>> Jan 29 07:47:42 gateway spamd[15540]: dns: sendto(
Any way to tag this stuff as spam? Thanks folks!
James
On 2/25/11 6:32 AM, "Giles Coochey" wrote:
>On 25/02/2011 14:31, Giles Coochey wrote:
>> On 25/02/2011 14:18, James Lay wrote:
>>> Hi folks,
>>>
>>> SoI was sent an email that was pretty much all in Chineseheaders
>>> below:
&g
Thu 25.Jul'13 at 1:31:16 +0200, Karsten
Bräckelmann
[ ... ]
> NOTE: Be careful of using sa-learn in different environments or ways in
> parallel. For example via the dovecot anti-spam plugin, from a cron job
> harvesting mbox files, maildir, processed through f
Fri 2.Aug'13 at 12:55:40 +0530, N. Raghavendra
> At 2013-08-02T01:39:45+05:30, N. Raghavendra wrote:
>
> > I work in a setup where the external mail server (say,
> > extmail.example.com) in a DMZ runs Spamassassin as soon as mail arrives
> > from the Internet, and
Sat 3.Aug'13 at 9:19:49 +0530, N. Raghavendra
> At 2013-08-02T09:38:42+01:00, James Griffin wrote:
>
> > Yes, of course you can. You can put SA on any machine that processes
> > mail no matter if it's been scanned prior to arriving at
s? A quick
> >scan of the usual sources did not satisfy.
>
> man spamc should say it:
>
>-s max_size, --max-size=max_size
Are you invoking spamc with procmail, which may specify a file size in
the procmail recipe?
--
James Griffin: jmz at kontrol.kode5.net
A4B9 E875 A18C 6E11 F46D B788 BEE6 1251 1D31 DC38
mails with just hi! will be spam. I have
people/friends, that send mails like that to me, just to see if i'm
there/available.
Spammers would most likely have more than just "Hi!" in the mail body.
--
James Griffin: jmz at kontrol.kode5.net
A4B9 E875 A18C 6E11 F46D B788 BEE6 1251 1D31 DC38
ake: Fatal error: Command failed for target `spamc/spamc'
Current working directory /export/src/Mail-SpamAssassin-3.4.2
*** Error code 1
make: Fatal error: Command failed for target `spamc/spamc'
--James
a PID file: %s",
$pid, exit_status_str($child_stat,0)) unless $serverstarted;
However, there's no waiting for things to start. I'm investigating this now.
--James
> On Sep 17, 2018, at 4:53 PM, Kevin A. McGrail wrote:
>
> This patch was added for wind
RED.BY
<http://95.216.24.32/updates/MIRRORED.BY>
you get a not found.
I copied the MIRRORED.BY file from the 3.004001 directory then re-ran
sa-update. It pulled down rules and I'm in business.
Kevin, thanks for the patch. It works. Sorry for the extra noise and perhaps
we need to
k.
Is this worth raising as a bug (or improvement request)? Could someone
try variants of the ADVANCE_FEE rules without __FRAUD_JBU and see if
it performs better?
Unfortunately, I can't see enough of the original email, and would be
unlikely to have permission to supply it if I did.
Thanks,
James.
I’m thinking about using the EBL from msbl.org with SA.
Can anyone tell me what detection rate they are getting with it? Is it worth
using, or would the spam be trapped by other methods (RBL, etc) anyway?
Pretty hard to find much information about how useful it is.
Thanks,
James.
smime.p7s
ed meta
dependencies: L_BROKEN_ANTIVIRUS
<>
lint: 1 issues detected. please rerun with debug enabled for more
information.
#
Any ideas?
Thanks!
-turgut
this could be it:
debug: Excluding meta test L_BROKEN_ANTIVIRUS; unsolved meta
dependencies: L_BROKEN_ANTIVIRUS
--
Thanks,
James
email."
Short answer: no.
--
Thanks,
James
o if anybody knows what I might be missing I would appreciate
a hint. Maybe this is a solaris issue, I have seen postings on this list
suggesting downgrading gcc in order to compile.
Well any ideas would help.
cheers
-James
James Marquez hotmail.com> writes:
>
> Well I seem to have a problem getting Spamassassin 3.0.1 to compile. I am
> running Solaris 2.5.1 with Perl 5.8.5 and gcc 3.3.2. I have been able to
> install all the required perl modules. Now I want to finally install
> Spamassas
here is no "crle" for 2.5.1 I am
wondering if there is another way of doing this or should I just uninstall
DB_File, I think spamassassin can run with out it.
cheers
-James
ever written OO perl before. :)
Maybe I'm missing something, but wouldn't it be best to not accept mail
to invalid users?
--
James
James R wrote:
Brian R. Jones wrote:
So I wrote a plugin for spamassassin, and I'd like a few volunteers to
try/abuse/critique it before I donate it fully to the public domain.
The plugin is ValidLocalUser.pm, and the reason I wrote it is because
I get a lot of spam to my domain that ha
spam/ham so this is unlikely to
happen again.
--
Thanks,
James
oes a good job, and is easy to setup and train -- but at the same
token, it's easy to hose your db with incorrect training (as you've
seen.) That's why I've got so many steps to the training process. But
then again, I use rbls etc at get go on the SMTP conversation that
blocks a vast majority of spams so I don't have to use BW or store any
spams that made it past the initial SMTP conversation.
--
Thanks,
James
sually get action. Tho, if this isn't the us,
you may be in trouble.
On their site, did they have a publicly accessible policy on how they
use your information?
My $.02
--
Thanks,
James
prohibited. If you have received
an electronic communication in error, you should immediately return it
to the sender and delete it from your system.
Look into the sql stuff. Works well.
--
Thanks,
James
list
--
Thanks,
James Rallo
Trusswood Inc.
[EMAIL PROTECTED]
www.Trusswood.DynDns.org
Tele: (321) 383-0366
Fax: (321) 383-0362
Arvinn Løkkebakken wrote:
James R wrote:
Arvinn Løkkebakken wrote:
Arvinn Løkkebakken wrote:
How can that happen? Anybody else here with the same experience?
Are we talking about a bug here? I would really like to know if this
is a problem in my setup or if others are experiencing the same
s I hope?
Thanks for your help,
Ben
Add ClamAV to your list: http://www.clamav.net
--
Thanks,
James
figured I could
flog a user if he/she started spamming ;-D
--
Thanks,
James
this?
Slightly OT, but related none-the-less:
http://www.theregister.co.uk/2005/05/16/sober_spews_spam/
--
Thanks,
James
have a script that strips those lines off, and the message as delivered
to the client is now what is trained upon.
--
Thanks,
James
Matt Kettler wrote:
At 01:01 PM 5/16/2005, James R wrote:
Take a look at Thunderbirds redirect plugin. It works well, and only
adds a few lines to the message, along with your mail server's lines.
I have a script that strips those lines off, and the message as
delivered to the client i
o parse line, skipping: rewrite_subject 0
config: SpamAssassin failed to parse line, skipping: always_add_headers 1
config: SpamAssassin failed to parse line, skipping: auto_learn
are because those options are depreciated.
use instead:
rewrite_subject is now rewrite_header Subject
always_add_headers is replaced with the add_header command (see the man
pages for that)
auto_learn is now bayes_auto_learn
HTH
--
Thanks,
James
amc: connection attempt to spamd aborted after 3 retries
0/0
With tcpdump i can see that connections from 3.1 to 2.1 (por 783) are
done, but spamd in 2.1 do not apear accept client 3.1 (option -A
malfunctioning?)
Anybody can help me?
Thanks.
What's the params. that you start spamd with?
--
Thanks,
Jam
Jeffrey N. Miller wrote:
How and where can I change the Manual Whitelist and/or Blacklist scores?
score
in your local.cf to override.
--
Thanks,
James
Jeffrey N. Miller wrote:
can u give me an example?
would you put:
blacklist_to [EMAIL PROTECTED]
score 10.0
-Original Message-
From: James R [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 18, 2005 10:00 AM
To: users@spamassassin.apache.org
Subject: Re: Whitelist and Blacklist default
[EMAIL PROTECTED] wrote:
I would like to be removed from this distrubtion list, anyone have an idea
how to do that?
Yes in the headers:
[EMAIL PROTECTED]
--
Thanks,
James
rates. SA has been, so far, a bit of a
disappointment and I'm sure it's my fault. :)
--
James Bucanek <mailto:[EMAIL PROTECTED]>
Steven Dickenson wrote on Friday, June 10, 2005:
>James Bucanek wrote:
>> Greetings, As you can see, the Bayes filter has nailed it as spam,
>> but it still only gets a score of 3.6.
>
>Bayes scores are really quite low in SA v3 - 3.0.2. You may want to
>upgrade to 3.0.
just start putting in random addresses, possibly
screwing up the entire Pyzor network, when I had no idea what I was doing.
Do you have a link to a step-by-step instructions that explains how to set up
Pyzor? Maybe I'll make Pyzor my project or next weekend.
James
--
James Bucanek <mailto:[EMAIL PROTECTED]>
ut. It installs nicely. (But give it a lot of time for
> some of its tests. My first shot at a CPAN install I thought it
> had died or locked up on a couple tests.)
Does it make that much of a difference over 3.0.2? If so, I might take a shot
at upgrading later this month or next, when I get the time.
--
James Bucanek <mailto:[EMAIL PROTECTED]>
James MacLean wrote, on 15/07/07 05:05 PM:
Subject:
Re: PDFText Plugin for PDF file scoring - PDFText2.pm for ver 3.2
From:
James MacLean <[EMAIL PROTECTED]>
Date:
Sun, 15 Jul 2007 17:05:38 -0300
To:
users@spamassassin.apache.org
To:
users@spamassassin.apache.org
Theo Van Dinter wrote,
r
> not specified with -u, not found, or set to root, falling back to nobody
> at /usr/bin/spamd line 1161, line 4.
Robert,
What's your startup line to start spamd look like? If you're starting it
like:
Spamd -u spamduser
Is that user in your /etc/passwd file?
James
>
&
On 8/17/07 11:24 AM, "Robert Moskowitz" <[EMAIL PROTECTED]> wrote:
> thanks for the quick reply.
>
> James Lay wrote:
>>
>> On 8/17/07 10:58 AM, "Robert Moskowitz" <[EMAIL PROTECTED]> wrote:
>>
>>
On 8/17/07 11:53 AM, "Robert Moskowitz" <[EMAIL PROTECTED]> wrote:
> More questions...
>
> James Lay wrote:
>>
>> On 8/17/07 11:24 AM, "Robert Moskowitz" <[EMAIL PROTECTED]> wrote:
>>
>>
>>> thanks for the quick r
s time : 8.75 seconds
Average message score : 19.52
Average spam score : 22.40
Average clean message score : -7.68
Total spam volume : 267 Mbytes
Total clean volume :87 Mbytes
I've been able to handle a 5 second lagtime on email quite nicely :)
James
On 8/17/07 2:13 PM, "Robert Moskowitz" <[EMAIL PROTECTED]> wrote:
> Well maybe progress but things are still wrong.
>
> James Lay wrote:
>>
>> On 8/17/07 11:53 AM, "Robert Moskowitz" <[EMAIL PROTECTED]> wrote:
>>
>>
>>
have our spam emails tagged in the subject
line, so people normally just delete it out.
http://wiki.apache.org/spamassassin/ClamAVPlugin
James
clues on where to find out what the issue may be?
Thank you!
James
? Thanks for the help.
James
er will not forward. Has anyone found a way
> to do this?
>
Sounds like you¹ll need to determine what MTA you¹re using (postifix,
sendmail, etc..), read some docs and post to that group. Hope that helps.
James
Hello all!
I saw a post a couple days ago about converting to MySQL with SpamAssassin
and wondered what the purpose would be for that? Just reporting? And if
so, is there a reporting package for use with MySQL and SpamAssassin?
Thanks for the assist.
James
On 9/26/07 8:50 AM, "Chris St. Pierre" <[EMAIL PROTECTED]> wrote:
> On Wed, 26 Sep 2007, James Lay wrote:
>
>> I saw a post a couple days ago about converting to MySQL with SpamAssassin
>> and wondered what the purpose would be for that? Just reporting?
e above is a bad idea =)
-James
core : 23.80
Average clean message score : -6.44
Total spam volume : 345 Mbytes
Total clean volume :92 Mbytes
We are well pleased with SA without blacklist.cf :)
James
6.133 to
local_networks and trusted_networks?
Hope this helps,
James.
--
E-mail: james@ | "Right lads, we've got 45 minutes to score 37 goals.
aprilcottage.co.uk | No problem with that -- the other team just did."
New upgrade is running GREAT here :)
James
s marketing ham, not person-to-person ham.
In my (limited) experience, nonspam IP-based URLs almost always have
paths after the IP address, whereas a *lot* of spam just points to the
IP address.
Does this match anyone else's experience?
James.
--
E-mail: james@ | How abou
Just an observation hereI did my 3.2.3 to 3.2.4 and suddenly sysloging
of spamd stopped. I had to manually add s mail to my startup to get it to
play fair again. Was this change documented anywhere...that syslog was now
turned off by default?
James
s have been done from source.
Both machines I had to manually add the -s mail to see spamd entries in
syslog. Danke :)
James
_DUL optional and not "on by default"
in the general distribution?
Cheers,
James
Matus UHLAR - fantomas wrote:
On 25.03.08 07:57, James Gray wrote:
Why are rules that look up against this list still in the base of
SpamAssassin?? The SORBS dynamic list is so poorly maintained that it's
practically useless
I don't find it useless. It works quite well
Unless y
On Wed, 26 Mar 2008 03:31:34 am mouss wrote:
> James Gray wrote:
> > Why are rules that look up against this list still in the base of
> > SpamAssassin?? The SORBS dynamic list is so poorly maintained that
> > it's practically useless and if you are an unfortunate w
On Wed, 26 Mar 2008 03:31:34 am mouss wrote:
> James Gray wrote:
> > Why are rules that look up against this list still in the base of
> > SpamAssassin?? The SORBS dynamic list is so poorly maintained that
> > it's practically useless and if you are an unfortunate w
y're not. If you query MY DNS server (202.77.91.40) you'll see it
lists the secondary MX for both gray.net.au and grayonline.id.au as
mail.mas...
James
--
It is often the case that the man who can't tell a lie thinks he is the best
judge of one.
-- Mark Twain, &
On Wed, 26 Mar 2008 12:09:47 pm D Hill wrote:
> Now your confusing the subject. The previous response you made was from:
>
> From: James Gray <[EMAIL PROTECTED]>
>
> Now you are using:
>
>From: James Gray <[EMAIL PROTECTED]>
>
> BOTH of those dom
On Wed, 26 Mar 2008 12:59:19 pm mouss wrote:
> James Gray wrote:
> > On Wed, 26 Mar 2008 03:31:34 am mouss wrote:
> >> James Gray wrote:
> >>> Why are rules that look up against this list still in the base of
> >>> SpamAssassin?? The SORBS dynamic li
1 - 100 of 359 matches
Mail list logo