Occasional spamassassin: Connection refused

2007-08-28 Thread Simon
around 90-100 msg per min on a dual xeon 2.8 running 2.6.8-13-em64t-p4-smp with 2GB of RAM. Simon

Re: Occasional spamassassin: Connection refused

2007-08-29 Thread Simon
On 8/29/07, Mark Martinec <[EMAIL PROTECTED]> wrote: > Simon, > > > connect to transport spamassassin: Connection refused > > You do not have a transport named 'spamassassin' in Postfix master.cf file. > > The name of a transport comes from a content_filter

How to filter these spam messages

2006-10-15 Thread Simon
et.com/spam.txt My config is pretty much default and I have few extra rulesets from rulesemporium Thanks, Simon

Re: How to filter these spam messages

2006-10-15 Thread Simon
as spam. -Simon On Sun, 15 Oct 2006 13:00:12 -0700, jdow wrote: >From: "Simon" <[EMAIL PROTECTED]> > >> Hello, >> >> I'm trying to figure out what to do to filter these spam messages. I can't seem to >> find a ruleset which

Re: How to filter these spam messages

2006-10-16 Thread Simon
e not permitted. I believe it should be very easy to write a rule set for these "work from home", stock, mortgage, etc... short spam emails, I just don't have the expertise to do it right. -Simon On Mon, 16 Oct 2006 15:06:34 -0400, Billy Huddleston wrote: >Yup.. an

Re: How to filter these spam messages

2006-10-16 Thread Simon
t of their job. Spamassassin has rules for majority of emails, so I don't see what's so difficult about adding more rules to combat these new breed of spam. -Simon On Mon, 16 Oct 2006 13:12:27 -0700, Jo Rhett wrote: >> On Mon, October 16, 2006 3:43 pm, R Lists06 said: >>&

Re: How to filter these spam messages

2006-10-16 Thread Simon
Why can't we simply have a new ruleset to score these short spam messages higher? -Simon On Mon, 16 Oct 2006 20:44:58 -0600, Gary V wrote: > >>On Oct 16, 2006, at 2:27 PM, Simon wrote: >> >>> >>>I reviewed greylisting as a solution in the

SA TIMED OUT message debian sarge

2006-11-02 Thread Simon
go with this one? Thanks Simon Nov 3 16:14:46 mx1 amavis[4765]: (04765-05) SA TIMED OUT, backtrace: at /usr/share/perl5/Mail/SpamAssassin/Locker.pm line 70\n\teval {...} called at /usr/share/perl5/Mail/SpamAssassin/Locker.pm line 70\n\tMail::SpamAssassin::Locker::jittery_one_second_sleep('

Re: SA TIMED OUT message debian sarge

2006-11-02 Thread Simon
On 11/3/06, Matt Kettler <[EMAIL PROTECTED]> wrote: Simon wrote: > Hi There, > > Using spamassassin 3.1.3-0bpo1 from backports.org on debian sarge. We > did have the standard 3.0.x sarge package. Using amavis-new to call > spamassassin and after upgrading spamassassin we

Re: SA TIMED OUT message debian sarge

2006-11-03 Thread Simon
On 11/3/06, Mark Martinec <[EMAIL PROTECTED]> wrote: On Friday November 3 2006 05:23, Matt Kettler wrote: > I believe the option is $sa_timeout > Not sure what the default is, probably 30. Which should be enough to > prevent that problem, unless you have a LOT of sa instances contending > for the

SA TIMED OUT message debian sarge (new error)

2006-11-03 Thread Simon
Hi There, Looks like ive solved one issue, and another crops up!... I think that i may need to move to a mysql storage engine here? approx 17,000 messages a day incoming on this server. Any pointers here? - Thanks!! Nov 4 11:39:40 mx1 amavis[32148]: (32148-07) SA TIMED OUT, backtrace: at /usr/

Have SA delete a message

2006-11-06 Thread Simon
Hi There, We are running debian sarge, with postfix and SpamAssassin 3.1.3. We have setup sa as a filter in postfix and it is now working and 'tag'ing spam correctly. What do i do to have sa delete the message above a certain level? Is there a preference i can set somewhere? Thanks Simon

Re: Have SA delete a message

2006-11-07 Thread Simon
at 03:21:40PM +1300, Simon wrote: > 'tag'ing spam correctly. What do i do to have sa delete the message > above a certain level? > > Is there a preference i can set somewhere? Stand on your head and chant "SA only marks up messages". :) ie: you can't ha

ruleset question (sa-update and custom rulesets)

2006-11-09 Thread Simon
?) Thanks!!! Simon

Re: ruleset question (sa-update and custom rulesets)

2006-11-09 Thread Simon
On 11/10/06, Theo Van Dinter <[EMAIL PROTECTED]> wrote: On Fri, Nov 10, 2006 at 11:31:05AM +1300, Simon wrote: > - How do i confirm that SA is using the rulesets from sa-update? spamassassin --lint -D > - If i want to put in some custom ones... where is the best to do this

Re: ruleset question (sa-update and custom rulesets)

2006-11-09 Thread Simon
On 11/10/06, Theo Van Dinter <[EMAIL PROTECTED]> wrote: On Fri, Nov 10, 2006 at 12:21:12PM +1300, Simon wrote: > >You can put it in any files you want. /etc/mail/spamassassin/*.cf is read > >last. > > Cool - so to build a custom rule to block emails with a subject: &g

Custom Rulset Help

2006-11-27 Thread Simon
Hi There, Im slowly getting there with custom rulesets... Would someone be able to check this out and offer any help if i have it incorrect? Email is coming in with the subject "Name wrote:", where "Name" is a persons name. Subject =~ /\b[a-z]+\s+wrote:/i Thanks in advance

Updated to SA 3.1.3 to get sa-update... But:

2006-11-28 Thread Simon
I was getting these spam emails with the subject "Name wrote:", so someone suggested i update SA and run sa-update. Which i have and its now solved that issue - nice. But now im getting subject "hi it's Name", does someone have a custom ruleset for this spam please? Im trying to write one myself

Re: Updated to SA 3.1.3 to get sa-update... But:

2006-11-28 Thread Simon
Hi Chris, On 11/29/06, Chris <[EMAIL PROTECTED]> wrote: On Tuesday 28 November 2006 6:00 pm, Simon wrote: > I was getting these spam emails with the subject "Name wrote:", so > someone suggested i update SA and run sa-update. Which i have and its > now solved that iss

Using Apache as SpamD for SpamAssassin

2007-08-05 Thread Simon
Hello, I've just installed mod_perl and Mail::SpamAssassin::Spamd::Apache2. How can I use this as a SpamAssassin daemon for my mail server (sample config) ? How must I configure SpamC (command line) to use this version of SpamD ? I need SpamAssassin using SQL database for storing users prefs,

RE: non-free Services

2024-09-18 Thread Simon Standley
We use invalument.com ... good for the stuff that often slips by. Your mileage may vary, etc. -Original Message- From: Philipp Ewald Sent: 18 September 2024 11:27 To: users@spamassassin.apache.org Subject: Re: non-free Services Hello, >The idea is that you can use those services for f

Mailspike rules all return 0.0

2020-07-29 Thread Simon Harwood
, Simon

Re: Mailspike rules all return 0.0

2020-07-29 Thread Simon Harwood
sassin/local.cf <http://local.cf>*, just add > something like this: > > score RCVD_IN_MSPIKE_BL 0 4 0 4 > score RCVD_IN_MSPIKE_L5 0 4 0 4 > > This would add 4 points to the scoring when these rules matched. > > On Wed, Jul 29, 2020 at 3:28 PM Simon Harwood > w

Re: sa-update error 3 no mirrors.sought.rules.yerp.org

2021-03-13 Thread Simon Wilson
" You've not stated your OS but on a RHEL/CentOS 7 box the correct way to remove is to go to /etc/mail/spamassassin/channel.d and delete sought.conf. -- Simon Wilson M: 0400 12 11 16

AWL on 3.4

2021-03-20 Thread Simon Wilson
it goes, but am interested in comments on its usefulness? Simon -- Simon Wilson M: 0400 12 11 16

Re: AWL on 3.4

2021-03-21 Thread Simon Wilson
- Message from John Hardin - Date: Sat, 20 Mar 2021 08:08:17 -0700 (PDT) From: John Hardin Subject: Re: AWL on 3.4 To: users@spamassassin.apache.org On Sun, 21 Mar 2021, Simon Wilson wrote: I've just migrated and updated to SA 3.4, and have moved the Bayes

Re: AWL on 3.4

2021-03-21 Thread Simon Wilson
as Intended (TM). I've not set txrep_autolearn on yet, will monitor for a while. Simon On Sun, Mar 21, 2021 at 3:04 AM Simon Wilson wrote: - Message from John Hardin - Date: Sat, 20 Mar 2021 08:08:17 -0700 (PDT) From: John Hardin Subject: Re: AWL on

Optimising DNS-based checks

2021-03-29 Thread Simon Wilson
quick and consistent average < 0.4s Simon SA Timing Percentiles % TimeTotal (ms)0% 5% 25% 50% 75%

Re: Optimising DNS-based checks

2021-03-30 Thread Simon Wilson
ng a Received-SPF filter using python-policyd-spf (called as last check in smtpd_recipient_restrictions), so yes it would make sense for spamassassin to trust the check already made - I'll see if I can work out how to do that. Simon. -- Simon Wilson M: 0400 12 11 16

Spamassassin reading inbound filter results; WAS: Re: Optimising DNS-based checks

2021-03-30 Thread Simon Wilson
d rules, but what is best practice for using DMARC results in Spamassassin? Simon -- Simon Wilson M: 0400 12 11 16

SA DKIM check

2021-04-01 Thread Simon Wilson
Does SA always do its "own" DKIM check, or can it be told to use an already written trusted AuthservId-written Authentication-Results header, e.g. from OpenDKIM? Thanks -- Simon Wilson M: 0400 12 11 16

Re: SA DKIM check

2021-04-02 Thread Simon Wilson
ernal by a properly configured SpamAssassin, please open a bug report. Yep, been through all of that with making sure SA knows what is internal and external, and what it can trust and not. No issues there. Simon -- Simon Wilson M: 0400 12 11 16

Re: Update SA on CentOS

2021-04-03 Thread Simon Wilson
ation (and teaching it when it fails to get it right) resulted in excellent spam prevention on CentOS 7 with its standard packaged SA. And then you are not stepping away from one of CentOS's main advantages - stable packages not built outside of RPM. Simon -- Simon Wilson M: 0400 12 11 16

Re: Update SA on CentOS

2021-04-03 Thread Simon Wilson
- Message from Amir Caspi - Date: Sat, 3 Apr 2021 22:06:03 -0600 From: Amir Caspi Subject: Re: Update SA on CentOS To: si...@simonandkate.net Cc: users@spamassassin.apache.org On Apr 3, 2021, at 9:15 PM, Simon Wilson wrote: And then you are not stepping away

Re: Update SA on CentOS

2021-04-04 Thread Simon Wilson
- Message from Bill Cole -    Date: Sun, 04 Apr 2021 15:16:32 -0400    From: Bill Cole Subject: Re: Update SA on CentOS      To: users@spamassassin.apache.org On 4 Apr 2021, at 0:19, Simon Wilson wrote: CentOS / RHEL backport critical security fixes into the stock versions

Senderscore

2021-04-18 Thread Simon Wilson
like every inbound email. From what I can see it's a genuine blocklist lookup by SA... (RCVD_IN_RP_RNBL in 20_dnsbl_tests.cf) but the error rate is strange. Am I the only one with high volume of lookup errors from that bl? :-) or do I need to be looking for an issue locally... Simon. --

KAM_DMARC_REJECT on internal emails

2021-04-18 Thread Simon Wilson
_50 results. sa-learn advises tokens learned, but it still seems to struggle with these. Other than that my Bayes is excellent, very effective and accurate. Any advice would be appreciated. Simon. -- Simon Wilson M: 0400 12 11 16

Re: KAM_DMARC_REJECT on internal emails

2021-04-19 Thread Simon Wilson
On 19.04.21 16:36, Simon Wilson wrote: - I'm running KAM rules in Spamassassin - Postfix port 587-submitted email is sent to Amavisd (as a content_filter) on port 10026 (tagged as ORIGINATING/MYNETS) and is spam-checked and DKIM-signed on its way out the door, sent back to Postfix at

Re: KAM_DMARC_REJECT on internal emails

2021-04-19 Thread Simon Wilson
I'd say that a proper solution would be to DKIM-sign mail before it's spam-scanned. On 19.04.21 19:39, Simon Wilson wrote: Good point. If DKIM is signed it should pass DMARC, even if SPF fails. Amavisd handles both pieces, including DKIM signing... from looking at the headers it

Re: KAM_DMARC_REJECT on internal emails

2021-04-19 Thread Simon Wilson
- Message from RW - Date: Mon, 19 Apr 2021 12:47:02 +0100 From: RW Subject: Re: KAM_DMARC_REJECT on internal emails To: users@spamassassin.apache.org On Mon, 19 Apr 2021 16:36:58 +1000 Simon Wilson wrote: Hi list, - I'm running KAM rules in Spamassassin - Po

Re: KAM_DMARC_REJECT on internal emails

2021-04-19 Thread Simon Wilson
pamassassin ?, it have to know all wan ips for your own server / servers Yes, my trusted_networks, internal_networks and msa_networks are all set correctly... I had a long discussion with this mailing list on the subject last year and got excellent help on resolving that! :) - End me

Re: Senderscore

2021-04-19 Thread Simon Bressier
Hi Simon, For info for few days now, the Senderscore DNS server is failing to answer. I've pinged one relation I have at Validity so they can dig on it. Senderscore via DNS is a legacy service they just maintain but dunno for how long... They are more on a mood to stop that service in the f

Re: Senderscore

2021-04-19 Thread Simon Bressier
And btw, usually on the DNS infos of Senderscores, you can see about 3 days of lag compared to their online interface, dunno if expected on their side, or they're facing perf issues, but that service is not a top priority at all at least On Mon, Apr 19, 2021 at 7:29 PM Simon Bressier

Re: KAM_DMARC_REJECT on internal emails

2021-04-20 Thread Simon Wilson
- Message from Henrik K - Date: Mon, 19 Apr 2021 17:11:41 +0300 From: Henrik K Reply-To: users@spamassassin.apache.org Subject: Re: KAM_DMARC_REJECT on internal emails To: users@spamassassin.apache.org On Mon, Apr 19, 2021 at 10:05:21PM +1000, Simon Wilson wrote

Re: Senderscore

2021-04-20 Thread Simon Wilson
And btw, usually on the DNS infos of Senderscores, you can see about 3 days of lag compared to their online interface, dunno if expected on their side, or they're facing perf issues, but that service is not a top priority at all at least On Mon, Apr 19, 2021 at 7:29 PM Simon Bressier

Re: KAM_DMARC_REJECT on internal emails

2021-04-20 Thread Simon Wilson
e relevant milters have run and added trusted headers on inbound email. Simon. -- Simon Wilson M: 0400 12 11 16

Re: KAM_DMARC_REJECT on internal emails

2021-04-20 Thread Simon Wilson
> On Mon, Apr 19, 2021 at 10:05:21PM +1000, Simon Wilson wrote: rather than change the channel distributed KAM.cf, what needs to go in local.cf to tell that not to run? *CAN* it be disabled from local.cf, or can it only be done by commenting out the entry in KAM.cf? It would not make any se

Re: KAM_DMARC_REJECT on internal emails

2021-04-20 Thread Simon Wilson
INBOUND -- Simon Wilson M: 0400 12 11 16

Re: KAM_SENDGRID and SPF_HELO_NONE

2021-05-20 Thread Simon Wilson
result by applying the check_host() function to the "MAIL FROM" identity as the . A HELO SPF check is most certainly not a "fall-back". Whether the SPF checking tool used follows the RFC is another matter entirely :-) Simon. -- Simon Wilson M: 0400 12 11 16

Re: CHAOS: v1.2.1 Released

2021-07-22 Thread Simon Wilson
art with the easy parts and follow with those more compliated functionality, because I feel the description starts with thelatter. I'm guessing from the silence in response that this will remain a mystery. Simon. ___ Simon Wilson M: 0400 12 11 16

Re: CHAOS: v1.2.2: Of Documentation

2021-07-23 Thread Simon Wilson
- Message from Jared Hall - Date: Fri, 23 Jul 2021 00:07:52 -0400 From: Jared Hall Subject: CHAOS: v1.2.2: Of Documentation To: users@spamassassin.apache.org Simon Wilson wrote: could you, please, finally, describe what does this module do, here to the list and/or to

Re: SHOPIFY_IMG_NOT_RCVD_SFY but from Shopify

2021-11-15 Thread Simon Wilson
is rule is triggering a lot on emails which are not Spam, reducing score from 2.497 score SHOPIFY_IMG_NOT_RCVD_SFY1.8 Simon -- Simon Wilson M: 0400 12 11 16

tests_pri on new server

2017-04-28 Thread Simon Wilson
erver, the identical email takes about 4000ms. On each server it is tests_pri_0 that takes the majority of the time, which I understand from reading is to be expected. Is the extended duration to be expected with newer SA, or do I need to be digging deeper to try and find out why it's so much

Re: tests_pri on new server

2017-04-30 Thread Simon Wilson
ical email takes about 4000ms. On each server it is tests_pri_0 that takes the majority of the time, which I understand from reading is to be expected. Is the extended duration to be expected with newer SA, or do I need to be digging deeper to try and find out why it's so much slower?

Re: tests_pri on new server

2017-04-30 Thread Simon Wilson
] - but is taking a LOT longer to complete them. Complete timing results are below. Is this just how long it takes now, or is there any tweaking I can be doing? Simon ** Full DNS timings Old server May 1 14:40:37.266 [14560] dbg: async: timing: 0.010 . dns:A:us-west-2.amazonses.com M

Re: Theories on blocking OUTGOING spam

2011-08-23 Thread Simon Loewenthal
oes not log this data. Far too much traffic generated! > http://en.wikipedia.org/wiki/Telecommunications_data_retention#European_Union > > > /Per Jessen, Zürich > -- Email simon AT klunky DOT co DOT uk PGP is optional: 4BA78604 I won't accept your confidentiality agreement, and your Emails are kept. ~Ö¿Ö~

Re: Not sure if this is old or new

2011-09-22 Thread Simon Loewenthal
code that uses an assignment = {}, but often is a typo for something else eg. if (a = b) {...} This is correct but sometimes the programmer might mean if (a == b) {...} Its pointing out a possible confusion. The warning is pointing out that he might want the latter. As I have demonstrated above, Go

Spamassassin did not log into spamd.log for one message scan (via spamass-milter_

2011-09-22 Thread Simon Loewenthal
d=5002,required_score=6.0,rhost=localhost,raddr=127.0.0.1,rport=36238,mid=<4e6510c8.5010...@klunky.co.uk>,bayes=0.00,autolearn=no,shortcircuit=no I wonder why spamd did not record this in spamd.log. Has anyone got any ideas? Simon. -- Email simon AT klunky DOT co DOT uk PGP

Re: Increasing score based on membership to commercial whitelist

2011-09-26 Thread Simon Loewenthal
"David F. Skoll" wrote: On Mon, 26 Sep 2011 13:49:36 -0400 dar...@chaosreigns.com wrote: > On 09/24, David Bennett wrote: > > It occurred to me that a sender that is paying their way into my > > inbox is almost certainly sending me junk mail. A little research > > in my inbox and it turns out to

Minimal server specs for SA question

2011-10-03 Thread Simon Loewenthal
core, 2 threads) 1024Mb RAM Transcend mSATA SSD 32Gb MLC Cheers for any commentary. Best regards, Simon. -- Email simon AT klunky DOT co DOT uk PGP is optional: 4BA78604 I won't accept your confidentiality agreement, and your Emails are kept. ~Ö¿Ö~

Re: Minimal server specs for SA question

2011-10-03 Thread Simon Loewenthal
On 10/03/2011 12:16 PM, Matus UHLAR - fantomas wrote: > On 03.10.11 12:08, Simon Loewenthal wrote: >>I have to set-up a few low power SA boxes. Currently I'm used to >> using Intel Xeon 2.6Ghz with 16Gb of memory, but these proposed boxes >> are small. I won't

Re: Minimal server specs for SA question

2011-10-03 Thread Simon Loewenthal
Martin Hepworth wrote: Also make sure youre running a caching nameserver to help with dns requests Drop unknown recipients at the start before SA checks really stop alot of junk too Martin On Monday, 3 October 2011, Alex B. wrote: > > > On 2011-10-03, at 6:08 AM, Simon Loewenth

Re: Minimal server specs for SA question

2011-10-06 Thread Simon Loewenthal
On 05/10/11 12:49, Henrik K wrote: On Mon, Oct 03, 2011 at 01:59:59PM -0400, Alex B. wrote: On 2011-10-03, at 6:08 AM, Simon Loewenthal wrote: Hi there, I have to set-up a few low power SA boxes. Currently I'm used to using

Re: DNSWL returns _HI trust level for everything to "abusive" DNS servers Re: Spam email many have RCVD_IN_DNSWL_MED

2011-10-12 Thread Simon Loewenthal
dar...@chaosreigns.com wrote: On 10/12, Alessio Cecchi wrote: > I have found the problem: Google name server > > >On 10/11, Alessio Cecchi wrote: > >>Received: from [175.145.6.37] (unknown [175.145.6.37]) > > > >$ host 37.6.145.175.list.dnswl.org > >Host 37.6.145.175.list.dnswl.org not found: 3(N

Re: real world spamassassin experiences re: processing on servers emailing from .info domains

2011-10-27 Thread Simon Loewenthal
Ned Slider wrote: On 27/10/11 18:36, Jenny Lee wrote: > > > >_ >> From: list...@abbacomm.net >> To: users@spamassassin.apache.org >> Subject: real world spamassassin experiences re: processing on servers >> emailing from .info domains >> Date: Thu, 27

Re: myfanbox.com

2011-11-06 Thread Simon Loewenthal
John Hardin wrote: On Sun, 6 Nov 2011, Karsten Bräckelmann wrote: > However, John, I strongly urge you NOT to include that rule in your > sandbox for stock. This is the wrong thing to do, and basically > contradicts everything SA stands for. I suspect the corpora and the scoring logic won't mak

Custom rawbody rule in local.cf not triggered

2011-11-23 Thread Simon Loewenthal
replacing |europjobs.eu| with |europjobs\.eu| in case it helped, but made no difference) I should have thought that this would pick it up. I missed something :( Anyone know what it was? Cheers, S. -- Email simon AT klunky DOT co DOT uk PGP is optional: 4BA78604 I

Re: Custom rawbody rule in local.cf not triggered

2011-11-23 Thread Simon Loewenthal
On 23/11/11 15:31, Axb wrote: > On 2011-11-23 15:13, Simon Loewenthal wrote: >> >> I have spam that hits on these rules. >> >> X-Spam-Report: >> * 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist >> * [URIs: europjobs.eu] >&g

Re: Custom rawbody rule in local.cf not triggered

2011-11-23 Thread Simon Loewenthal
On 23/11/11 16:21, Martin Gregorie wrote: > On Wed, 2011-11-23 at 15:13 +0100, Simon Loewenthal wrote: >> I have spam that hits on these rules. >> >> X-Spam-Report: >> * 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist >> * [

Re: Question for experts....

2011-11-29 Thread Simon Loewenthal
On 29/11/11 15:21, Bowie Bailey wrote: > On 11/28/2011 11:21 PM, Dave Warren wrote: >> On 11/28/2011 7:41 PM, Benny Pedersen wrote: >>> On Tue, 29 Nov 2011 16:21:56 +1300, Jason Haar wrote: >>> http://0x12.0x12.0x12.0x12/ >>> does not work in chrome >> I tried in Chrome 16.0.912.41 beta-m and

Re: [OT] RBLs

2012-01-11 Thread Simon Loewenthal
> mostly in with some selective > setup, clamav milter with sanesecurity, greylist, and some postscreen > configs > > ix.dnsbl.manitu.net perhaps is more in interest for german/euro region > > that was enough ever, for most global spam, for sure > you need analyse your logs an mak

warn: config: SpamAssassin failed to parse line, no value provided for "body", skipping: body

2012-02-03 Thread Simon Loewenthal
ease rerun with debug enabled for more information Any starting pointers? Cheers, S -- PGP is optional: 4BA78604 simon @ klunky . org simon @ klunky . co.uk I won't accept your confidentiality agreement, and your

Re: warn: config: SpamAssassin failed to parse line, no value provided for "body", skipping: body

2012-02-03 Thread Simon Loewenthal
Version 3.3.1 on Debian Squeeze -- Dogs are tough. I've been interrogating this one for hours and he still won't tell me who's a good boy. simon@klunky / .co.uk / .org "Kevin A. McGrail" wrote: >On 2/3/2012 5:00 AM, Simon Loewenthal wrote: >> Hi, &g

Re: warn: config: SpamAssassin failed to parse line, no value provided for "body", skipping: body

2012-02-16 Thread Simon Loewenthal
version eval stuff we've been trying to push out. > > On 2/3/2012 2:35 PM, Simon Loewenthal wrote: >> >> Yep, fails on standard rules. >> >> ( Excuse the slightly messy copy and paste, but I am using ConnectBot on a >> smartphone whilst travelling on

Bayes now changed to autolearn=unavailable.

2012-02-27 Thread Simon Loewenthal
: 4BA78604 simon @ klunky . org simon @ klunky . co.uk I won't accept your confidentiality agreement, and your Emails are kept. ~Ö¿Ö~

Re: Bayes now changed to autolearn=unavailable.

2012-02-27 Thread Simon Loewenthal
On 27/02/12 13:55, RW wrote: > On Mon, 27 Feb 2012 11:48:50 +0100 > Simon Loewenthal wrote: > > >> Recently I enabled shortcircuit for ham on a server because Bayes >> seems reasonably well trained. It works well. >> >> I noticed that emails that did

Re: Bayes now changed to autolearn=unavailable.

2012-02-27 Thread Simon Loewenthal
On 27/02/12 15:24, Simon Loewenthal wrote: > On 27/02/12 13:55, RW wrote: >> On Mon, 27 Feb 2012 11:48:50 +0100 >> Simon Loewenthal wrote: >> >> >>> Recently I enabled shortcircuit for ham on a server because Bayes >>> seems reasonably well trained.

Re: Bayes now changed to autolearn=unavailable.

2012-02-27 Thread Simon Loewenthal
On 27/02/12 15:29, Simon Loewenthal wrote: > On 27/02/12 15:24, Simon Loewenthal wrote: >> On 27/02/12 13:55, RW wrote: >>> On Mon, 27 Feb 2012 11:48:50 +0100 >>> Simon Loewenthal wrote: >>> >>> >>>> Recently I enabled shortcircuit for

Re: uribl lastminute.com listed in uribl whte and is now used for nordea phisting mails

2012-03-02 Thread Simon Loewenthal
It was a last minute decision. Jeremy McSpadden wrote: >Ha. Nice > > >-- >Jeremy McSpadden > >On Mar 2, 2012, at 10:38 AM, "Michael Scheidell" > wrote: > >> On 3/2/12 11:36 AM, Benny Pedersen wrote: >>> just a note to whom it might concern :) >>> >> phisting? >> >> OUCH. >> >> >> -- >> Mich

Re: Some rules I created for suspicious Javascript practices

2012-03-06 Thread Simon Loewenthal
Hi, Were these rules, or an improved variant, added to the rules? Regards, Simon. On 16/02/12 01:43, neon_overload wrote: > Hello, > > I have created some rules which I have found to be very effective so far at > identifying a certain type of spam that spamassassin other

Re: Spamassassin detect my mails as spam

2012-03-09 Thread Simon Loewenthal
On 09/03/12 11:29, FC Mario Patty wrote: > I'm sorry for not giving full information before. > > We set our mail server to use SMTP with TLS (port 587) and the > outgoing server (of the mail client on android smart phone) as our > server itself (in other words, not relaying through the provider > s

Re: Better phish detection

2012-03-12 Thread Simon Loewenthal
"David F. Skoll" wrote: >Hi, > >I've been following this thread... not sure how many of you are aware >of >this project: > >http://code.google.com/p/anti-phishing-email-reply/ > >We use the phishing address list and it does catch a few things. We >don't yet use the phishing URL list, but it look

Re: Better phish detection

2012-03-12 Thread Simon Loewenthal
Paul Russell wrote: >On 3/12/2012 12:58, Simon Loewenthal wrote: >> >> At first glance: >> This is private black list of email assesses maintened by many. Free >to use, but it'll turn into a huge file for a server to parse. >> >> Eventually we m

Quick question about enabling a private rules in the local.cf

2012-03-23 Thread Simon Loewenthal
|sucabikes\.com\.ar|mpe-export\.com|eceurop\.com|cdromland\.nl|buyshield\.com)/ scoreRBODY_PDOMAINS1 5.0 SA version is 3.3.1-1 running on Debian Squeeze. Something ought to have changed, because I swear these custom rules works last month. Regards, Simon -- PGP is optional

Re: Quick question about enabling a private rules in the local.cf

2012-03-23 Thread Simon Loewenthal
Indeed I certainly can. http://pastebin.com/c2an4irw On 23/03/12 13:44, Banyan He wrote: > Maybe you can share with us the debug output for the second thought in > this case, Simon. > > Best regards, > > > Banyan He > Blog: http://www.rootong.com > Email:

Re: Quick question about enabling a private rules in the local.cf

2012-03-23 Thread Simon Loewenthal
; /path/to/sampler > > What did you see here then? > > > Banyan He > Blog: http://www.rootong.com > Email: ban...@rootong.com > > > On 2012-03-23 8:49 PM, Simon Loewenthal wrote: >> Indeed I certainly can. >> >> http://pastebin.com/c2an4

Re: Quick question about enabling a private rules in the local.cf

2012-03-26 Thread Simon Loewenthal
spamc >> run? >> >> spamc -y -R < /path/to/sampler >> >> What did you see here then? >> >> >> Banyan He >> Blog: http://www.rootong.com >> Email: ban...@rootong.com >> >> >> On 2012-03-23 8:49 PM, Simon Loewenthal wrote

Mail::SpamAssassin::Plugin::SpamCop

2012-04-11 Thread Simon Loewenthal
Hi, Are these options still valid for Mail::SpamAssassin::Plugin::SpamCop settings in the local.cf http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_SpamCop.html (from spamcop.net http://spamcop.net/fom-serve/cache/331.html ). *It is recommended the default settings in Sp

Re: Mail::SpamAssassin::Plugin::SpamCop

2012-04-11 Thread Simon Loewenthal
On 11/04/12 15:30, Simon Loewenthal wrote: > Hi, > > Are these options still valid for > Mail::SpamAssassin::Plugin::SpamCop settings in the local.cf > http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_SpamCop.html > > (from spamcop.net http://spamco

Re: Mail::SpamAssassin::Plugin::SpamCop

2012-04-11 Thread Simon Loewenthal
On 04/12/2012 12:58 AM, Benny Pedersen wrote: > Den 2012-04-11 15:37, Simon Loewenthal skrev: > >> Partially answered. >> # spamassassin --lint >> Apr 11 15:35:06.700 [24545] warn: config: failed to parse line, >> skipping, in "/etc/spamassassin/local.cf&q

Re: Where the spams are stored

2012-04-13 Thread Simon Loewenthal
Hi, SA does not store spam. It scans it. It is up to your to decide what to do with it. I send mine to Dovecot for delivery to the users' mailboxes. S -- Dogs are tough. I've been interrogating this one for hours and he still won't tell me who's a good boy. simon@kl

Re: spamassassin bayesian training on foreign characters

2012-07-24 Thread Simon Loewenthal
Hi I have Bayes correctly scoring BAYES_99 on Dutch and French straight out of the box. No problems. -- Dogs are tough. I've been interrogating this one for hours and he still won't tell me who's a good boy. simon@klunky / .co.uk / .org John Hardin wrote: >On Mon,

Re: Academic interested in interviewing you for research paper.

2012-08-18 Thread Simon Loewenthal
>... for their own protection. What do we need protection from? s -- Dogs are tough. I've been interrogating this one for hours and he still won't tell me who's a good boy. simon@klunky / .co.uk / .org jonathonb wrote: >Hi All, > >Some interesting responses

Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Simon Loewenthal
Evening all, A great majority of our ham starts with Dear Sir/ Dear Madam / Dear Bob. Therefore I've always wondered why this this is scored so highly: * 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' Does anyone know the rational behind this, or is our user base simply communicating

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Simon Loewenthal
Except for formal letters to administrative addresses. Dear Bob was a frivolous and incorrect example. It is really Sir/Madam As Alex noted, I coils score it lower,bit am concerned on the overall effect. I'lltest first. Cheers. RW wrote: >On Thu, 25 Oct 2012 16:47:20 +0200 >Simon

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Simon Loewenthal
dar...@chaosreigns.com wrote: > >But more importantly, it's because we do not have have the rule >hit statistics from your email .. Which has been on my personal backlog for over a year. (It is self-serving & should have a higher priority thus) .

Re: White Text Rule

2013-02-05 Thread Simon Loewenthal
Hi Mark, maybe this works. This I stole it from someone who posted here. # HTML - White text on a white background. What is the point? rawbody HTML_TEXT_WHITE_SHORT /style=.color#FFF;/ describe HTML_TEXT_WHITE_SHORT White html txt on white bg score HTML_TEXT_WHITE_SHORT 0.1 Simon --- &q

sa-learn " splice() offset past end of array at /usr/share/perl5/Mail/SpamAssassin/HTML.pm line 492 and 502.

2013-02-27 Thread Simon Loewenthal
^s*([a-z_-]+)s*:s*(S.*?)s*$/i) { # "display: none", "visibility: hidden", etc. $new{'style_'.$1} = $2; } } } sa-learn still exits with a zero. Does any one know what may have tripped this up? Is it a bug, or some strange formatting in the email message?

Re: sa-learn " splice() offset past end of array at /usr/share/perl5/Mail/SpamAssassin/HTML.pm line 492 and 502.

2013-02-27 Thread Simon Loewenthal
Mark Martinec wrote: >Simon Loewenthal wrote: >> > Just notcied sa-learn kick up a fuss with some files fed into >> > it from a user's HAM directory in a dovecot directory. >> > >> > I put a copy of >> > the ham on http://pastebin.com/MLEh

Upgrade from SA 3.3.1 to 3.3.2 - increase in memory requirements on Debian 6

2013-03-05 Thread Simon Loewenthal
performance related dependencies on other packages? Currently, Perl is 5.10.1-17squeeze4. Regards, S -- "I decided that I was a lemon for a couple of weeks. I kept myself amused all that time jumping in and out of a gin and tonic." simon@klunky .co.uk / .org

  1   2   >