Mails received with same message id every 15 - 20 seconds

2010-10-26 Thread Sharma, Ashish
Hi, I have SpamAssassin integrated on my postfix mail server via 'Amavisd-new'. The problem that I am facing is that I am receiving same email every 15 second from same sender with same message-ID on my production mail servers, following are my postfix logs: "Oct 25 01:11:02 g2t0433g postfix/

Updating SpamAssassin on production servers

2010-10-26 Thread Sharma, Ashish
Hi, I have SpamAssassin(3.3.1) deployed on production servers. The automatic update is disabled there. I want to know what is the best approach for ruleset updates: 1. sa-update 2. Manual update I favor manual update as I want to keep a local list of rule set updates going to my production an

Migrating Spamassassin Bayesian tokens to a fresh Spamassassin installation

2010-11-02 Thread Sharma, Ashish
Hi, I have to create a fresh installation of Spamassassin on Production machine, the staging machines(since they were tested by sample emails) have Bayesian tokens created. How can I migrate this Bayesian knowledge from one installation to other. Also suggest me what all other things I should

unable to switch Spamassasin module loading in amavisd-new

2010-11-18 Thread Sharma, Ashish
Hi, I have a default installation of 'amavisd-new' and with it an old SpamAssassin installation version 3.2.5. Now I have compiled Spamassassin version 3.3.1 from source and installed it at a custom location. How can I load my compiled Spamassassin 3.3.1 to the original 'amavisd-new' so that

local.cf not loading in spamassassin

2010-11-26 Thread Sharma, Ashish
Hi, I have a setup of 'amavisd-new' with 'Spamassassin 3.3.1'. In my local.cf in /etc/mail/spamassassin, I have specified some rules that are new as well as override some of the default spamassassin rules. But my local rules doesn't seem to be working, as none of them is getting hit. Can some

RE: local.cf not loading in spamassassin

2010-11-26 Thread Sharma, Ashish
.cf not loading in spamassassin On 2010/11/26 02:56 PM, Sharma, Ashish wrote: > Hi, > > I have a setup of 'amavisd-new' with 'Spamassassin 3.3.1'. > > In my local.cf in /etc/mail/spamassassin, I have specified some rules that > are new as well as override some

Difference in spam score for seperate email machines with same version of Spamassassin

2010-11-28 Thread Sharma, Ashish
Hi, I have two machines that contain spamassassin. On first machine(this is an old installation, 2-3 months old ), I had installed Spamassassin(3.3.1) from rpmforge repository by using yum (followed http://wiki.centos.org/HowTos/Amavisd) , while on the second I had manually installed Spamassas

RE: Difference in spam score for seperate email machines with same version of Spamassassin

2010-11-28 Thread Sharma, Ashish
in spam score for seperate email machines with same version of Spamassassin On søn 28 nov 2010 12:22:55 CET, "Sharma, Ashish" wrote > Can anybody give me some idea of this kind of behavior? its well dokumented that bayes needs training, if no training is done it takes time to auto

RE: Difference in spam score for seperate email machines with same version of Spamassassin

2010-11-28 Thread Sharma, Ashish
users@spamassassin.apache.org Subject: RE: Difference in spam score for seperate email machines with same version of Spamassassin On søn 28 nov 2010 17:10:03 CET, "Sharma, Ashish" wrote > But what about the Razor2 rules not getting hit? Any suggestions on that? no more then setup a

Unable to understand spamassassin rule

2011-06-17 Thread Sharma, Ashish
Hi, My spam assassin report is giving hit on following rules: 2.4 HTML_ATTACH BODY: HTML attachment to bypass scanning? 2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails I am unable to get a suitable explanation for these rules. Please help Thanks Ashish

Suggest OCR plugin on Spamassassin 3.3.1 for image spam

2011-07-20 Thread Sharma, Ashish
Hi, I am currently using FuzzyOCR(3.6.0) for image spam control on my Spamassassin(3.3.1) stack. The FuzzyOCR parent location (http://fuzzyocr.own-hero.net/wiki/Downloads) suggests the above FuzzyOCR is available only for testing on Spamassassin 3.2.x Somehow I am running this version of Fuzz

RE: Suggest OCR plugin on Spamassassin 3.3.1 for image spam

2011-07-20 Thread Sharma, Ashish
David, >[We don't use OCR, as it happens. We usually catch image spams anyway >using other techniques.] Can you please outline the other techniques that you use to catch image spams? Thanks Ashish Sharma -Original Message- From: David F. Skoll [mailto:d...@roaringpenguin.com] Sent: T

RE: Suggest OCR plugin on Spamassassin 3.3.1 for image spam

2011-07-20 Thread Sharma, Ashish
:03 AM To: users@spamassassin.apache.org Subject: Re: Suggest OCR plugin on Spamassassin 3.3.1 for image spam On 7/20/2011 9:18 PM, dar...@chaosreigns.com wrote: > On 07/20, Sharma, Ashish wrote: >> Can someone suggest some better OCR plugin for Spamassassin 3.3.1 for image >> spam? &

How to create spam score list for sample email messages

2011-10-10 Thread Sharma, Ashish
Hi, I have a mail receiving setup where in Postfix (2.6.6) is the MTA and then I have amavisd-new (with spamassassin and CLamAV) as content filter. I have enabled spam report header in my amavisd-new conf file. I want to create a report of sample emails with the spam scores generated in accord

RE: How to create spam score list for sample email messages

2011-10-11 Thread Sharma, Ashish
Subject: Re: How to create spam score list for sample email messages On Mon, 2011-10-10 at 15:36 +, Sharma, Ashish wrote: > I want to create a report of sample emails with the spam scores > generated in accordance with permissible limits after deploying the > spamassassin updated rulesets

Getting high spam score for email server hosted on AWS instance

2012-02-08 Thread Sharma, Ashish
Hi, I have a mail server setup on an AWS instance. When I am sending mails via this setup to a test spamassassin setup that acts as an email receiver server, I am getting high spam scores as follows: [FROM_LOCAL_HEX=0.331, HTML_IMAGE_ONLY_24=1.282, HTML_MESSAGE=0.001, RCVD_ILLEGAL_IP=3.399, T

RE: Getting high spam score for email server hosted on AWS instance

2012-02-09 Thread Sharma, Ashish
[mailto:michael.scheid...@secnap.com] Sent: Wednesday, February 08, 2012 7:28 PM To: users@spamassassin.apache.org Subject: Re: Getting high spam score for email server hosted on AWS instance On 2/8/12 6:41 AM, Sharma, Ashish wrote: > Hi, > > I have a mail server setup on an AWS instance. > > Wh

RE: Getting high spam score for email server hosted on AWS instance

2012-02-09 Thread Sharma, Ashish
[mailto:joseph.snider...@thoroquel.org] Sent: Wednesday, February 08, 2012 10:53 PM To: users@spamassassin.apache.org Subject: Re: Getting high spam score for email server hosted on AWS instance On 02/08/2012 08:57 AM, Michael Scheidell wrote: > On 2/8/12 6:41 AM, Sharma, Ashish wrote: >> Hi, >> &

RE: Getting high spam score for email server hosted on AWS instance

2012-02-10 Thread Sharma, Ashish
high spam score for email server hosted on AWS instance On 02/10/2012 02:16 AM, Sharma, Ashish wrote: > The cluster with which I am facing problem is different one. > > The node for which I am getting high spam score has the following details: > > cloudemail5.cpgtest.ostinet.net

RE: Getting high spam score for email server hosted on AWS instance

2012-02-10 Thread Sharma, Ashish
- From: Axb [mailto:axb.li...@gmail.com] Sent: Friday, February 10, 2012 2:39 PM To: users@spamassassin.apache.org Subject: Re: Getting high spam score for email server hosted on AWS instance On 02/10/2012 09:33 AM, Sharma, Ashish wrote: > Following is the spam score received for cloudemail5.cpgtest.o

Request for information about spam assasin channels

2012-03-13 Thread Sharma, Ashish
Hi, I am using Spamassassin 3.3.1, earlier I used to use following rule channels to update my rulesets: saupdates.openprotect.com, updates.spamassassin.org Since 'saupdates.openprotect.com' is closed now, what other alternatives I have? Please suggest. Thanks Ashish

Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage.

2013-03-06 Thread Sharma, Ashish
All, I have a mail receiving server that parses incoming emails for email attachment and the files are listed on a web page for users to see. Here I need to check for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage. Is there a

RE: Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage.

2013-03-08 Thread Sharma, Ashish
ge- From: Axb [mailto:axb.li...@gmail.com] Sent: Wednesday, March 06, 2013 3:59 PM To: users@spamassassin.apache.org Subject: Re: Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage. On 03/06/2013 11:20 AM, Sharma,

RE: Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage.

2013-03-21 Thread Sharma, Ashish
Martin, What would be the change in spam rule if the Content-Disposition field is mime word encoded as per RFC 2047 ? Please find the sample eml at: http://pastebin.com/FLjzCsUZ thanks Ashish -Original Message- From: Martin Gregorie [mailto:mar...@gregorie.org] Sent: Sunday, March 1

Re: Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage.

2013-03-24 Thread Sharma, Ashish
Martin, Please refer to ' http://en.wikipedia.org/wiki/MIME' section 'Encoded-Word' >>Content-Type: text/plain; charset=UTF-8; >>name="=?UTF-8?B?PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0PnRlcy50eHQ=?=" >>Content-Transfer-Encoding: 7bit >>Content-Disposition: attachment; >> filename="=?UTF-8?B?PHNjcmlwdD

FW: Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage.

2013-03-24 Thread Sharma, Ashish
On Sun, 2013-03-24 at 11:05 +, Sharma, Ashish wrote: > I have encoded the harmful filename 'alert(1)tes.txt' > to base64 and added them into the email as it's allowed as per RFC > 2047 in email headers and is a valid form. > > This is bypassing the spam rul

Unable to verify custom rules being loaded from 'local.cf'

2013-07-17 Thread Sharma, Ashish
Original Message Subject: Unable to verify custom rules being loaded from 'local.cf' From: "Sharma, Ashish" To: users@spamassassin.apache.org CC: Hi, I have a amavisd-new setup with spamassassin(3.3.1) on RHEL 5.8 , at the following location: /e

Scanning attachments with spamassassin

2010-06-10 Thread Sharma, Ashish
Hi, I am a newbie in this. I have configured spamassassin for my postfix server invoked via amavisd. (I used the link: http://wiki.centos.org/HowTos/Amavisd) Here my question is: Since by default spamassassin and it's default plugins do not check email attachments for spam, are there custom p

RE: Scanning attachments with spamassassin

2010-06-10 Thread Sharma, Ashish
Martin, Thanks for the advice but I am already doing what you have suggested. Thanks Ashish Sharma -Original Message- From: Martin Gregorie [mailto:mar...@gregorie.org] Sent: Thursday, June 10, 2010 7:20 PM To: Sharma, Ashish Subject: Re: Scanning attachments with spamassassin On Thu

RE: Scanning attachments with spamassassin

2010-06-10 Thread Sharma, Ashish
...@lf.net] Sent: Thursday, June 10, 2010 8:22 PM To: users@spamassassin.apache.org Subject: Re: Scanning attachments with spamassassin Hi, On Thu, Jun 10, 2010 at 01:37:05PM +, Sharma, Ashish wrote: > > Since by default spamassassin and it's default plugins do not check email > a

unable to find logic behind spamassassin rule

2010-06-21 Thread Sharma, Ashish
Hi, I have the latest version of spamassassin, I am unable to find the logic behind the following rule and it's high spam score. MANY_SPAN_IN_TEXT 3.099 Can anybody give a reason? Thanks in advance Ashish Sharma

problem in using FuzzyOcr with spamassassin

2010-06-22 Thread Sharma, Ashish
Hi, I have deployed an mail receiving postfix server combined with amavisd (with clamAV and spamassassin) by using the reference: http://wiki.centos.org/HowTos/Amavisd on a CentOS 5.5(64 bit) machine. Now I have deployed the FuzzyOCR module for image spam, but the test cases as provided for f

Alternatives to fuzzyOCR

2010-06-23 Thread Sharma, Ashish
Hi, I have SpamAssassin 3.3.1 installed. I want to have some OCR module deployed on this one, since FuzzyOcr(3.6.0) is still not available for this version of Spamassassin(3.3.1), is there any other alternative (free or paid) that I can use? Thanks Ashish Sharma

RE: Scanning attachments with spamassassin

2010-06-24 Thread Sharma, Ashish
spamassassin works. Thanks Ashish Sharma -Original Message- From: Frank Heydlauf [mailto:fh-sa2...@lf.net] Sent: Friday, June 11, 2010 1:02 PM To: Sharma, Ashish Cc: users@spamassassin.apache.org Subject: Re: Scanning attachments with spamassassin Hi, On Thu, Jun 10, 2010 at 03:16:02PM

A developers perspective on Spamassassin

2010-06-25 Thread Sharma, Ashish
Hi, I want to know how spamassassin works from a developers point of view, specifically I want an answer to following questions: 1. How is an email rendered on spamassassin once it's received? 2. How are email attachments handled on spamassassin for rule parsing? 3. How is spamassassin able to

anti porn rules for spamassassin

2010-06-26 Thread Sharma, Ashish
Hi, I want to implement anti porn rules for spam assassin. Right now I have implemented SARE Adult rules (http://www.rulesemporium.com/rules/70_sare_adult.cf) and added scores to spamassassin's latest porn rule set. But since it's about 3 years the SARE rules have not been upgraded , I think I

gif image scanning failing

2010-07-01 Thread Sharma, Ashish
Hi, I have Spamassassin deployed with amavisd-new. Spamassassin version: 3.3.1 FuzzyOCR version : 3.6.0 Recently I integrated FuzzyOCR with my Spamassasin but whenever a gif image is passed as attachment in the email, following error's are received: Jul 1 07:08:51 ip-10-194-99-63 amavis[31657

RE: gif image scanning failing

2010-07-01 Thread Sharma, Ashish
Dhaval, Thanks for the reply. >>Have you installed ocrad well? Can you tell me how can I confirm that ocrad is correctly installed on my machine? Thanks Ashish Sharma From: Dhaval Soni [mailto:sonidha...@gmail.com] Sent: Thursday, July 01, 2010 5:29 PM To: Sharma, Ashish Subject: R