Missed spam

2004-11-26 Thread Jerry Bell
This spam went through with a score of 0. I'm using 3.01 with most of the sare rulesets. Any ideas on how to catch these? Thanks, Jerry http://www.syslog.org Return-path: <[EMAIL PROTECTED]> Envelope-to: [EMAIL PROTECTED], [EMAIL PROTECTED] Delivery-date: Thu, 25 Nov 2004 14:53:39 -0500 R

Re: Missed spam

2004-11-26 Thread Jerry Bell
I'm using SA through exim/exiscan, and I've got it set up to only report if it is spam. Guess I should change that. The SA logs showing it getting a score of 0. SA is working really well for me the other 99% of the time. Jerry > Jerry Bell wrote: >> This spam went throug

Re: Missed spam

2004-11-26 Thread Jerry Bell
I wonder if my bayes db has been poisoned to the point of thinking this is ham? In the logs, it autolearned this one as ham, so I suspect that may be the case. > Jerry Bell wrote: >> I'm using SA through exim/exiscan, and I've got it set up to only report >> if it is spa

Re: Missed spam

2004-11-26 Thread Jerry Bell
hanks for the help! It looks like its in the whitelist and scoring low in bayes. > Jerry Bell wrote: >> I wonder if my bayes db has been poisoned to the point of thinking this >> is >> ham? In the logs, it autolearned this one as ham, so I suspect that may >> be the

Re: 3 suggested rules regarding forged local addresses

2004-12-05 Thread Jerry Bell
1. This can be done really effectively using SPF. I believe spamassassin can use spf, and most MTA's can too. I highly recommend it. You would not believe the number of viruses that get turned away by using SPF. It seems that many of the recent ones send mails to a target domain with a from add

Interesting NW article

2004-12-20 Thread Jerry Bell
There's a big review of anti-spam products at nw fusion here: http://www.nwfusion.com/reviews/2004/122004spampkg.html?ts Here's a bit on spamassassin: http://www.nwfusion.com/reviews/2004/122004spamside6.html It's a pretty disappointing article. Jerry http://www.syslog.org

Re: Interesting NW article

2004-12-20 Thread Jerry Bell
nterprise-focused vendors." They do talk favorably of spamassassin in a few parts, but overall they seemed to have missed the boat. Jerry http://www.syslog.org > On Mon, Dec 20, 2004 at 10:41:33AM -0500, Jerry Bell wrote: >> Here's a bit on spamassassin: >> http://www.nwfu

sa-update question

2006-07-05 Thread Jerry Bell
I'm running 3.1.3 on a FreeBSD server. I just found out about sa-update which looks like a great tool. My question is this: how can I take advantage of the updated configs? The problem that I see is that Freebsd uses completely non standard directories for everything, so I don't have much confi

RE: sa-update question

2006-07-05 Thread Jerry Bell
> You don't need to include the directory. SA will automatically use it > if it exists. Run SA in debug mode to see which directory it uses. > > spamassassin -D config --lint Looks like I need to have a little more faith in the developers :) Thanks! Jerry

Re: SpamAssassin & MX Gateway Server

2006-09-30 Thread Jerry Bell
I'm not the authority on such things, but I don't believe it's possible without some customization. I really wanted to ask you, though, how you handle mail rejection on the "inner" layer of mail servers? If mail gets through your front end SA box and needs to be rejected because it's to an invali