odd scores..

2004-10-14 Thread Jeremy
I was checking the logs on our qmail (4.9) box running SA (2.60) and in the logs I am getting a large number of messages with score (?/?) Oct 14 10:47:56smtpgate1 qmail-scanner[83917]: Clear:RC:0(xxx.xxx.xxx.xxx):SA:0(?/?): Oct 14 10:50:03smtpgate1 q

Help with SA rule

2005-10-28 Thread Jeremy
d line too - so that I can see exactly which blacklisted domain of mine has triggered my custom rule (eg. baddomain1.com, baddomain2.com or whatever). Is this possible to do with SA? Thanks, Jeremy

Getting RHSBLs to work

2005-11-24 Thread Jeremy
l_tests.cf that I'd prefer to find another solution if possible. Any advice would be appreciated! Cheers, Jeremy

Re: How to filter this kind of spam

2005-11-30 Thread Jeremy
Use the "70_sare_specific.cf" ruleset as found at http://www.rulesemporium.com/rules.htm. Would recommend also using SURBL and/or URIBL, if you're not already, as they will catch the URLs listed in those spams - see http://www.surbl.org and http://www.uribl.com. Cheers, J

Re: black list of words combos in subject

2009-02-26 Thread Jeremy
EVE+ __HENRY) > 1) Your version ends with >2 (greater than two), which means three or more - so the meta will only fire if all three names are present. If you just want to hit on any two of the three names, then use >1 (greater than one), ie. two or more. :) Cheers, Jeremy

Re: New free blacklist: BRBL - Barracuda Reputation Block List

2008-09-24 Thread Jeremy
ne wrapping - there should be four lines below)... headerRCVD_IN_BRBLeval:check_rbl('brbl-lastexternal', 'b.barracudacentral.org.', '127.0.0.2') describeRCVD_IN_BRBLReceived via relay listed in Barracuda RBL scoreRCVD_IN_BRBL1.0 tflagsRCVD_IN_BRBLnet Cheers, Jeremy

Re: Bad SARE Rule

2008-10-27 Thread Jeremy
mer <[EMAIL PROTECTED]> Using the $ in the regex means the above line would not match. Cheers, Jeremy

Re: spamd for windows

2009-01-16 Thread Jeremy
t a programmer myself so I have no idea if it includes what you'd need to pick up where the author left off. I hope it would, as I would also love to see this project updated! Cheers, Jeremy

Re: Updated: FreeMail.cf

2009-02-05 Thread Jeremy
tries you've added, and without me having to go and edit the file to fix the loadplugin etc. So it would be fully automatic. Know what I mean?! Cheers, Jeremy

Re: Pump and Dump SARE rules

2006-02-07 Thread Jeremy
I've been using it, seems to work well for me on my MDaemon server Cheers, Jeremy "Doc Schneider" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Chris Santerre wrote: >> >> >> > -Original Message- >> > Fr

Re: GIF stock spams

2006-02-28 Thread Jeremy
or base64 first, which the "full" rule types do not do. But perhaps this is not possible. Cheers, Jeremy "Shawn R. Beairsto" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I'm getting hammered by these as well, usually scoring below 2 points. I&#x

Re: Automatically Updating Rules on Windows

2006-03-02 Thread Jeremy
e for download - complete with logging and optional email reports. Works very well for me - I'd be happy to make it available if anyone was interested... Cheers, Jeremy "jdow" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Heh, I built my own bash script fo

Re: Drug email keeps getting thru

2006-03-08 Thread Jeremy
t http://www.rulesemporium.com/rules.htm, do you use any of those? It's possible that some of those may also help. Cheers, Jeremy "Tracey Gates" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I keep getting these drug emails that antidrug.cf is suppose to catch but i

unsubscribe

2006-05-17 Thread Jeremy
unsubscribe

Re: Sequential spamassassin scans get different results

2022-04-07 Thread Jeremy Ardley
o limit spammers? Would I get better results if I greylisted as well as postscreen? Or instead of? -- Jeremy OpenPGP_signature Description: OpenPGP digital signature

Re: Sequential spamassassin scans get different results

2022-04-07 Thread Jeremy Ardley
is still present in messages processed solely by 'internal'. I'm using the package as supplied by debian/armbian. I assume the 3.4.6-1_all deb. /var/cache/apt/archives/spamassassin_3.4.6-1_all.deb X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on 'internal' -- Jeremy OpenPGP_signature Description: OpenPGP digital signature

Re: IPv6 issue

2022-05-06 Thread Jeremy Ardley
On 6/5/22 6:31 pm, Ted Mittelstaedt wrote: For unrelated reasons I had to turn off IPv6 on my incoming mailserver. Spam plummeted.  Like by 80% at least.  Both uncaught and caught spam did. Were there more hostname variations with records than A records? -- Jeremy

Re: Looking for advice about limiting DNS queries

2023-01-08 Thread jeremy ardley
8.8. Running your own DNS server seems to be more acceptable to the anti-spam sites. . -- Jeremy

Re: sa-update not updating the rules

2016-01-04 Thread Jeremy McSpadden
current version is 1720996 new version is 1720996, skipping channel 1720996 == 1720996 -- Jeremy McSpadden | Flux Labs Local - 850-250-5590x501 | Mobile - 850-890-2543 Fax - 850-254-2955 | Toll Free - 877-699-FLUX Web - http://www.fluxlabs.net<http://www.fluxlabs.net/> On Jan 4, 2016

Re: I have developed a new method of blocking spam that's a game changer

2016-01-13 Thread Jeremy McSpadden
I'd be willing to test it. -- Jeremy McSpadden | Flux Labs Local - 850-250-5590x501 | Mobile - 850-890-2543 Fax - 850-254-2955 | Toll Free - 877-699-FLUX Web - http://www.fluxlabs.net<http://www.fluxlabs.net/> On Jan 13, 2016, at 7:12 PM, Marc Perkel mailto:supp...@junkemai

Re: Freemail problem

2011-02-17 Thread Jeremy Fairbrass
"Noel Butler" wrote in message news:1297993593.5473.74.camel@tardis... /Very Ancient/ On Thu, 2010-06-10 at 18:40 +0200, Jeremy Fairbrass wrote: Hi, I've noticed what seems to be unexpected behaviour with the Freemail plugin, which I'm hoping someone can shed some

Disable a Rule

2011-10-30 Thread Jeremy McSpadden
. -- Jeremy McSpadden

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
clean; all are. Does not make sense to me. -- Jeremy McSpadden Flux Labs, Inc On Oct 30, 2011, at 12:54 PM, John Hardin wrote: On Sun, 30 Oct 2011, Jeremy McSpadden wrote: It seems nightly the rule is re-enabled. Don't edit the files that are deep in the SpamAssassin working directories,

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
org>. spamassassin -t -D < MSGID = -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, hightrust [98.126.47.12 listed in list.dnswl.org<http://list.dnswl.org>] I am using local dns servers. The server is at SoftLayer's DC. Using their local DNS servers, 10.0.X

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Then why would this rule be enabled by default, or even setup for SA out of the box. So your telling me that in order to use this rule, i have to setup a local dns ? i don't think so. I've run SA boxes for years and never had to run a local dns server. -- Jeremy McSpadden Flux Labs

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Very well. DNSMasq setup and running local, yet still returns HI -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net<http://www.fluxlabs.net/> Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:14 PM, Benny Pedersen wrote: On Sun,

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Yes, that is in place. (not a newbie here) -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net<http://www.fluxlabs.net/> Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:14 PM, Benny Pedersen wrote: On Sun, 30 Oct 2011 20:05:08

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Thanks for the help Benny. .. Anyone besides this guy have anything to say ? -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net<http://www.fluxlabs.net/> Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:40 PM, Benny Pedersen wrot

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
n 0.1% are affected by this stricter enforcement ... I have setup bind to do name-caching and no longer doing forwarding. I will continue to examine longs and monitor the system. Thanks for those who took the time to reply w/ enough information, rather than smart comments; or vague 1 liners. -- J

Re: dns problems :/

2011-11-01 Thread Jeremy McSpadden
connection refused means your dns servers are not responding properly. Check your entries in /etc/resolv.conf. The format should be: nameserver 1.2.3.4 -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net<http://www.fluxlabs.net/> Endless Solutions Office : 850-588-4626 Cell : 8

Re: DNSWL will be disabled by default as of tomorrow

2011-12-12 Thread Jeremy McSpadden
Thank you! I raised this question a few months ago and was in awe that it was enabled by default. It has caused quite a few issues that i've seen around the ML. They should return a different value than a negative score. Very bad design. -- Jeremy McSpadden Flux Labs, Inc

Re: DNSWL will be disabled by default as of tomorrow

2011-12-12 Thread Jeremy McSpadden
eries therefore banned" which returns a score that is giving a negative score ... has no justification. (sorry for the run on sentence) -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net<http://www.fluxlabs.net/> Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax :

Re: Spam messages with no payload

2012-02-18 Thread Jeremy McSpadden
Can you pastebin some sample messages + headers ? -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net <http://www.fluxlabs.net/> Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On 2/18/12 6:55 PM, "neon_overload" wrote: > >I

Re: Spam messages with no payload

2012-02-19 Thread Jeremy McSpadden
For starters, your using qmail. I know postfix will give you more protection up front with just rbl and certain restrictions that would help quite a bit. Are you running any rbl or dns checks with qmail? -- Jeremy McSpadden On Feb 19, 2012, at 4:46 PM, "Jason Haar" wrote: > I

Re: uribl lastminute.com listed in uribl whte and is now used for nordea phisting mails

2012-03-02 Thread Jeremy McSpadden
Ha. Nice -- Jeremy McSpadden On Mar 2, 2012, at 10:38 AM, "Michael Scheidell" wrote: > On 3/2/12 11:36 AM, Benny Pedersen wrote: >> just a note to whom it might concern :) >> > phisting? > > OUCH. > > > -- > Michael Scheidell, CTO >

Re: uribl lastminute.com listed in uribl whte and is now used for nordea phisting mails (SOLVED)

2012-03-02 Thread Jeremy McSpadden
Leap Year -- Jeremy McSpadden On Mar 2, 2012, at 11:11 AM, "Benny Pedersen" wrote: > Den 2012-03-02 17:50, Axb skrev: >> On 03/02/2012 05:36 PM, Benny Pedersen wrote: >>> just a note to whom it might concern :) >> why no pastebin a sample? > > februar

Re: sa-update

2012-03-26 Thread Jeremy McSpadden
Sa-update should reload SA, therefore reloading rules. What error are you getting ? -- Jeremy McSpadden On Mar 26, 2012, at 9:46 PM, "j...@j4computers.com" wrote: > After running sa-update, will restarting spamd load the new rulesets? I see > references to "spamassas

Re: Missed SPAM

2012-03-31 Thread Jeremy McSpadden
Post what you feel. The ML will help if they can. You can replace IPs and domains etc. -- Jeremy McSpadden On Mar 31, 2012, at 11:19 AM, "joea" wrote: >>>> On 3/31/2012 at 8:22 AM, Michael Scheidell > wrote: >> On 3/31/12 8:04 AM, joea wrote: >>>

Re: Suddenly getting lots of false positives.

2012-05-24 Thread Jeremy Morton
s. Sounds like something from a Monty Python sketch. -- Best regards, Jeremy Morton (Jez)

Re: Suddenly getting lots of false positives.

2012-05-24 Thread Jeremy Morton
On 24/05/2012 10:37, corpus.defero wrote: On Thu, 2012-05-24 at 10:14 +0100, Jeremy Morton wrote: I've gotten a lot of false positives coming into my inbox lately, and the principle reason for most of them seems to be that they are matching the following rule: -4.0 RCVD_IN_DNSWL_MED

Re: Suddenly getting lots of false positives.

2012-05-24 Thread Jeremy Morton
Where would the rules for these blocklists be, so I can check my rules files to see whether they're there? -- Best regards, Jeremy Morton (Jez) On 24/05/2012 11:09, Niamh Holding wrote: Hello Jeremy, Thursday, May 24, 2012, 10:53:33 AM, you wrote: JM> Interesting that they didn&#

Re: Suddenly getting lots of false positives.

2012-05-24 Thread Jeremy Morton
On 24/05/2012 15:30, dar...@chaosreigns.com wrote: On 05/24, Kevin A. McGrail wrote: Normally, I blame a DNS server. See pages like this for more information: http://www.surbl.org/faqs#dnsproxy Yup, that could do it. Icky. Jeremy: You could manually check if you're getting the wron

Re: Suddenly getting lots of false positives.

2012-05-24 Thread Jeremy Morton
Nope, but it doesn't actually give an answer section as part of its output. -- Best regards, Jeremy Morton (Jez) On 24/05/2012 16:06, Benny Pedersen wrote: Den 2012-05-24 16:41, Jeremy Morton skrev: I actually get: Host 40.152.71.64.list.dnswl.org not found: 5(REFUSED) dig +

Re: Suddenly getting lots of false positives.

2012-05-24 Thread Jeremy Morton
Not sure. I get this: http://pastebin.com/0U3WrgSS -- Best regards, Jeremy Morton (Jez) On 24/05/2012 16:12, Benny Pedersen wrote: Den 2012-05-24 17:03, Jeremy Morton skrev: Nope, but it doesn't actually give an answer section as part of its output. where it timeout or rejected ?,

Re: Suddenly getting lots of false positives.

2012-05-26 Thread Jeremy Morton
happening just after that. Can anyone think of why this might have caused the problem and how I can fix it? -- Best regards, Jeremy Morton (Jez) On 24/05/2012 10:14, Jeremy Morton wrote: I've gotten a lot of false positives coming into my inbox lately, and the principle reason for most o

Re: Suddenly getting lots of false positives.

2012-05-27 Thread Jeremy Morton
I don't see what relevance the DNS servers I use on my my machine have to do with querying dnswl.org - surely dnswl.org shouldn't even know if I'm using Google's nameservers? -- Best regards, Jeremy Morton (Jez) On 27/05/2012 08:53, Niamh Holding wrote: Hello Jeremy, Sa

Re: Suddenly getting lots of false positives.

2012-05-27 Thread Jeremy Morton
Server: google-public-dns-a.google.com Address: 8.8.8.8 Non-authoritative answer: Name:40.152.71.64.list.dnswl.org Address: 127.0.6.3 -- Best regards, Jeremy Morton (Jez) On 27/05/2012 10:41, Niamh Holding wrote: Hello Jeremy, Sunday, May 27, 2012, 10:28:17 AM, you wrote: JM>

Pyzor broke after update

2012-06-15 Thread Jeremy McSpadden
3:48.083 [742] dbg: pyzor: [745] finished successfully Jun 15 10:13:48.083 [742] dbg: pyzor: got response: public.pyzor.org:24441 (200, 'OK') 351 0 MailScanner --lint --debug: pyzor: check failed: internal error, python traceback seen in response But cannot find the trace -- Jeremy Mc

Re: Somewhat OT: Is this wrong?

2012-08-24 Thread Jeremy McSpadden
Topic Last Modified: 2006-04-05 http://technet.microsoft.com/en-us/library/aa996295.aspx .. for Exchange 2010 -- Jeremy McSpadden Flux Labs, Inc | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590 x 101 | Cell : 850-890-2543 | Fax : 850-254-2955

Re: Somewhat OT: Is this wrong?

2012-08-24 Thread Jeremy McSpadden
Microsoft handles SPF using the Edge Transport service, in 2010. If it is configured on the domain. You are correct with the article, although 2003 is old ... -- Jeremy McSpadden Flux Labs, Inc | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590

Request for wiki access

2012-12-28 Thread Jeremy Morton
Hi, Please add me to the Contributors Group with the wiki username jez. -- Best regards, Jeremy Morton (Jez)

Is the SpamAssassin wiki dead?

2013-01-06 Thread Jeremy Morton
mprove the documentation when they are willing to do so. -- Best regards, Jeremy Morton (Jez)

Re: Is the SpamAssassin wiki dead?

2013-01-06 Thread Jeremy McSpadden
Kevin added you back on the 31st. Should be done. Happy new year, KAM On 12/28/2012 7:53 AM, Jeremy Morton wrote: Hi, Please add me to the Contributors Group with the wiki username jez. -- Jeremy McSpadden Flux Labs | Endless Solutions Cell : 850-890-2543 | Fax : 850-254-2955 On Jan 6

Re: Is the SpamAssassin wiki dead?

2013-01-07 Thread Jeremy Morton
Sorry, I'm not sure what you mean by "added me". I don't think I already had an account with username jez so I was expecting to be send a password too. What should I do? -- Best regards, Jeremy Morton (Jez) On 06/01/2013 14:25, Jeremy McSpadden wrote: Kevin added

Added me to wiki contributors?

2013-01-08 Thread Jeremy Morton
Hi, I'm told you added me to the Spamassassin wiki contributors list with username jez. Could you please tell me how I can obtain a password for login? I don't remember creating a jez account previously. -- Best regards, Jeremy Morton (Jez)

Problem with SpamAssassin wiki formatting

2013-01-08 Thread Jeremy Morton
shebang line at all; see here where I had to replace the exclamation mark to get that line to appear: http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix Any chance this could be fixed, or a tip as to how I might get it to work? -- Best regards, Jeremy Morton (Jez)

Re: Bayes - Problem using SQLite

2013-03-19 Thread Jeremy McSpadden
SQLite is/can-be extremely slow with inserts/updates. It uses a temporary file for each write operation. It also waits for the OS to complete the insert/update. … Thats all assuming you can even get it working. -- Jeremy McSpadden Flux Labs, Inc | http://www.fluxlabs.net<http://www.fluxlabs.

Re: Errors when processing mail.

2013-07-14 Thread Jeremy McSpadden
Check as to why this directory/file doesn't exist or change paths. -- Jeremy McSpadden Flux Labs, Inc | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x101 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jul 14, 2013, at 5:16 PM, "

Re: dependency hell]

2013-11-15 Thread Jeremy McSpadden
You've still left as all wondering what the purpose of that machine is considering it has no internet access. -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x101 | Cell : 850-890-2543 | Fax : 850-254-2955

Re: CentOS/RHEL repo?

2014-03-14 Thread Jeremy McSpadden
Centalt may have it. I'm not sure. 3.4 is still fairly new. -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Fri, Mar 14, 2014 at 2:01 PM -0700, "Bowie Bailey" mailto:bowie

Re: Bayer Filter Not Working

2014-06-24 Thread Jeremy McSpadden
Try adding -U to your mailscanner banger/# line. -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jun 24, 2014, at 5:42 PM, "Bruce Sackett" mailto

Re: getting tons of SPAM

2014-06-26 Thread Jeremy McSpadden
... A catchall ? -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jun 26, 2014, at 9:24 AM, "motty cruz" mailto:motty.c...@gmail.com>> wrote:

Re: getting tons of SPAM

2014-07-01 Thread Jeremy McSpadden
No mention of RBLs or greylisting ... -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jul 1, 2014, at 2:06 PM, "Steve Bergman" mailto:sbergma...@g

Re: getting tons of SPAM

2014-07-02 Thread Jeremy McSpadden
pastebin .. and do not edit the message, do not remove headers or email addresses -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955

Re: production MTA not doing URIBL lookups, why?

2014-07-11 Thread Jeremy McSpadden
What does a debug output show ? On both .. Pastebin -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jul 11, 2014, at 4:34 PM, "Quanah Gibson-Mount&q

Re: Dealing with a bad network device affecting DNS lookups

2014-07-15 Thread Jeremy McSpadden
Have you considered running your own DNS server locally ? -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jul 15, 2014, at 3:47 PM, "Quanah Gibson-Mount&q

Re: Dealing with a bad network device affecting DNS lookups

2014-07-15 Thread Jeremy McSpadden
Then I think we can all agree that just extending the timeout is not a fix. You have network issues that should be resolved. -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 8

Re: Filters Don't Seem to Be Learning

2014-07-23 Thread Jeremy McSpadden
Would need more info than this; rather vague. If your receiving the same email daily it's more than likely been trained as HAM, but marked as spam through TB. -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590

Re: Filters Don't Seem to Be Learning

2014-07-23 Thread Jeremy McSpadden
, RP_MATCHES_RCVD=-0.001, T_DKIM_INVALID=0.01] autolearn=no -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Jul 23, 2014, at 12:55 PM, "Asai" mailto:a...@globa

Re: Delays with Check_Bayes

2014-08-20 Thread Jeremy McSpadden
Do not have enough HAM to kick on bayes. -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Aug 20, 2014, at 10:36 AM, "redtailjason" mailto:ja...@redta

Re: Spamassassin doesn't work

2014-10-16 Thread Jeremy McSpadden
http://www.mimedefang.org/node/14 -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Oct 16, 2014, at 7:32 AM, Carlo Filippetto mailto:carlo.filippe...@gmail.com&g

Re: Amazon phishing spam

2015-02-12 Thread Jeremy McSpadden
ums of money 0.0 T_REMOTE_IMAGE Message contains an external image -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Feb 12, 2015, at 3:25 PM, Alex Regan mail

Re: Some tips email gateway

2015-02-17 Thread Jeremy McSpadden
Are you using any RBLs with postfix ? -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Feb 17, 2015, at 1:05 PM, ricky gutierrez mailto:xserverli...@gmail.com&g

Re: Lots of Polish spam

2015-02-24 Thread Jeremy McSpadden
Usually scores are 6 low 10 high. Are you running any RBLs ? -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net<http://www.fluxlabs.net/> | Endless Solutions Office : 850-250-5590x501 | Cell : 850-890-2543 | Fax : 850-254-2955 On Feb 24, 2015, at 11:35 AM, Yves Goergen mailto:no

Re: The query to URIBL was blocked

2015-05-02 Thread Jeremy McSpadden
Use only 127.0.0.1 as your DNS in /etc/resolv.conf ... Nothing else. -- Jeremy McSpadden | Flux Labs Local - 850-250-5590x501 | Mobile - 850-890-2543 Fax - 850-254-2955 | Toll Free - 877-699-FLUX Web - http://www.fluxlabs.net<http://www.fluxlabs.net/> On May 2, 2015, at 8:31 PM,

Re: Turning off queries to SORBS

2015-05-12 Thread Jeremy McSpadden
dig +trace and see if your ISP is intercepting queries. -- Jeremy McSpadden | Flux Labs Local - 850-250-5590x501 | Mobile - 850-890-2543 Fax - 850-254-2955 | Toll Free - 877-699-FLUX Web - http://www.fluxlabs.net<http://www.fluxlabs.net/> On May 12, 2015, at 8:49 PM, Chris mailto

Re: all connections being refused

2015-07-29 Thread Jeremy McSpadden
Make sure it's running. Check firewall/iptables/selinux -- Jeremy McSpadden | Flux Labs Local - 850-250-5590x501 | Mobile - 850-890-2543 Fax - 850-254-2955 | Toll Free - 877-699-FLUX Web - http://www.fluxlabs.net<http://www.fluxlabs.net/> On Jul 29, 2015, at 12:48 PM, jo

Re: [SA-List] IPlanet and SA

2004-10-02 Thread Jeremy Rumpf
;s not something that Shaw could fix themselves. Sun has been relatively unresponsive to our javascript and RFC bug reports to them. Jeremy

X-message-flag question

2004-10-11 Thread Jeremy Rumpf
ic Sender, Hash: PoHgCaAr Message-Id: <[EMAIL PROTECTED]> Thanks, Jeremy

Re: X-message-flag question

2004-10-11 Thread Jeremy Rumpf
On Monday 11 October 2004 12:43 pm, Justin Mason wrote: > Jeremy Rumpf writes: > > I've seen a few messages recently that contained the header > > > > X-message-flag: Authentic Sender, Hash: PoHgCaAr > > > > My questions are, are they trying to simulate som

Re: non-dns based load balancing spamd

2004-11-10 Thread Jeremy Rumpf
On Wednesday 10 November 2004 13:33 pm, [EMAIL PROTECTED] wrote: > I am looking for some help finding a proxy/load balancer that will work > with spamc->group of spamd machines > > Does anyone have any tips on what to use? > > I tried balance (http://www.inlab.de/balance.html) and pen > (http://sia

SURBL and DNS wildcards

2004-11-17 Thread Jeremy Rumpf
et.helpfulinfobox.com helpfulinfobox.com Thanks, Jeremy

Re: How can I bring CPU down where Spamd takes %60 of all CPU?

2004-11-18 Thread Jeremy Rumpf
nt to the spamd launch: nice -n15 spamd . or "man nice" form more details. HTH, Jeremy

Re: Missed spam

2004-11-30 Thread Jeremy Rumpf
99_FVGT_Tripwire.cf 70_sare_header0.cf 99_sare_fraud_post25x.cf 70_sare_specific.cf evilnumbers.cf Jeremy --- Date: Tue, 02 Nov 2004 11:42:41 +0200 Reply-To: "Jeremiah Farkas" <[EMAIL PROTECTED]&

upgrading to 3.0 from 2.64 note

2004-12-19 Thread Jeremy Kister
ent smooth. just FYI. -- Jeremy Kister http://jeremy.kister.net/

Re: spamassassin finding LDAP servers??

2005-02-11 Thread Jeremy Rumpf
aps it's the underlying LDAP implementation? How about > some details on your setup? What versions of libraries, perl modules > are you running? How are you startin spamd? What does your local.cf > look like? All that sorta goodness that helps debug problems. > > Michael Might be nsLDAP setup in /etc/ldap.conf? Check /etc/nsswitch.conf as well. Cheers, Jeremy

spamd Blowing up

2005-05-01 Thread Jeremy Beaty
I'm currently running SpamAssassin 3.01 on a linux box running Exim 4.43.  When I upgraded to SA 3.01 I also configured exim to reject messages at data time based on a spam score that was sufficiently high.  Since doing that I have found that every once in a while one of the spamd child proc

Re: MP3 Spam

2007-10-19 Thread Jeremy Fairbrass
No, MIMEHeader works fine with 3.1.x - Jeremy "Justin Mason" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > Martin.Hepworth writes: >> Hmm >> >> I'm still running 3.1.8.. > > I think you need 3.2.x for the MIMEHe

False FORGED_YAHOO_RCVD trigger

2006-06-22 Thread Jeremy Kister
lt;[EMAIL PROTECTED]> To: ... Subject: Yahoo! HotJobs Search Agent Results for "Marketing" -- Jeremy Kister http://jeremy.kister.net./

Bayes only works sometimes

2006-07-10 Thread Jeremy Kister
. any clues ?? -- Jeremy Kister http://jeremy.kister.net./

Re: Any rules for URLs like this?

2006-08-18 Thread Jeremy Fairbrass
I dunno what the RFCs say about the usage of such characters in a sub-domain... Cheers, Jeremy "Loren Wilton" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >>> Do you need rules for them? It looks like URIBL was able to pick >>> it up fine.

Re: Train from Outlook?

2006-08-24 Thread Jeremy Fairbrass
tlook plugin works perfectly for me. You can find it at http://www.olspamcop.org/. Oh yeah, and it's freeware...! Cheers, Jeremy --- "Christopher Mills" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Tell me something, is there a pluggin for o

Re: Why are most of my messages EMPTY_MESSAGE

2006-09-06 Thread Jeremy Fairbrass
I've had that problem in the past, and found that it was caused by an error with some other rule elsewhere (usually a custom rule I'd written myself which had a syntax error in it that I'd overlooked). I'd suggest doing a --lint check of your rules, see what it turns up. -

Re: ZMI

2006-09-13 Thread Jeremy Fairbrass
AFAIK it's currently residing at http://zmi.at/x/70_zmi_german.cf - Jeremy <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > what is the current home of the ZMI (german) ruleset? > > Wolfgang Hamann

FORGED_HOTMAIL_RCVD bug??

2006-10-17 Thread Jeremy Fairbrass
PSVC(6.0.3790.1830); Mon, 16 Oct 2006 00:52:09 -0700 ------ Cheers, Jeremy

Re: bayes score

2005-08-30 Thread Jeremy Kister
likely to be spam > * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% > * [score: 1.] 100% likely to be spam -- Jeremy Kister http://jeremy.kister.net./

3.1.0 make test errors

2005-11-09 Thread Jeremy Kister
hines, their hostname is set to '--fqdn'. I cant find information about these failures being expected and don't know if I should make install. Suggestions? -- Jeremy Kister http://jeremy.kister.net./

URIBL_SBL error

2005-12-05 Thread Jeremy Kister
at http://jeremy.kister.net/tmp/ uribl_sbl.txt is the original message uribl_sbl-sa.txt is the message after spamc processing. Note: It's only the URIBL_SBL that i'm concerned with. Any idea what's going on? -- Jeremy Kister http://jeremy.kister.net./

Ways to block bouncebacks?

2009-04-04 Thread Jeremy Morton
mankind) to be spam? Best regards, Jeremy Morton (Jez)

Re: Ways to block bouncebacks?

2009-04-05 Thread Jeremy Morton
acteristics (Viagra, etc., just 'this mail was not delivered' or other such non-spammy text), and yet one that I still want to block? How would SRS help deal with that? Best regards, Jeremy Morton (Jez) Mark wrote: Consider using SRS. I wrote a (now somewhat older) doc about

  1   2   3   >