spamd and plugins

For a high-volume site, is there any reason to not be running spamc/spamd over amavisd/spamassassin? Specifically, can you use all of the various perl plugins (imageinfo, pdfinfo, botnet, etc...)? Are there any other tradeoffs to this configuration? thanks, Jonathan.

Re: spamd and plugins

Matthias Leisi wrote: Amavisd uses the SpamAssassin Perl module directly (ie not really spamc or spamd). For a high-volume site, amavisd has advantages if you want to do additional checks besides SA (eg virus checking). If you only want to run SA, you could avoid the overhead of amavisd. Ok

Re: spamd and plugins

assin 3.002000 so given that amavisd is already daemonized... does this suggest that there would be minimal gains in moving to spamd called from postfix? (bearing in mind that amavisd is going to have to stay for virus filtering regardless). thanks, jonathan.

VBounce vs backscatter

ssassin/show_bug.cgi?id=5331, which causes some legit bounces to be flagged. Is anyone using VBounce in a large environment? How are you configuring it to avoid flagging legit mail? jonathan.

Re: Spam slipped

Suhas Ingale wrote: Any custom rules to catch this? body    JE_STOCK_ticker6   /\bC[\s\-\_\'\.]?H[\s\-\_\'\.]?F[\s\-\_\ '\.]?R\b|\bO[\s\-\_\'\.]?J[\s\-\_\'\.]?U[\s\-\_\'\.]?F\b|\bC[\s\-\_\'\.]?D[\s\-\ _\'\.]?P[\s\-\_\'\.]?N\b|\bD[\s\-\_\'\.]?S[\s\-\_\'\.]?D[\s\-\_\'\.]?I\b|\b

IP Address of DSL being marked down when using authenticated SMTP/office 365

eaders.. so is this a setup error on my part or a spam-assassin change? or a mistake? Obviously I need to resolve/stop this to reduce false positives.. Kind Regards, Jonathan Gilpin Full headers are: Return-path: Envelope-to: jonat...@fluent.ltd.uk Received: from [40.107.8.121] (port=

Re: IP Address of DSL being marked down when using authenticated SMTP/office 365

The header: x-originating-ip: [86.129.191.88] is being put in by office 365.. it is already in when our exim (FreeBSD Port Exim-sa-exim) receives the mail from Office 365.. IS there a way to make SpamAssassin ignore this x- header? Jonathan > On 25 Nov 2020, at 14:13, Kevin A. McGrail wr

Re: IP Address of DSL being marked down when using authenticated SMTP/office 365

Sorry yes, penny drop now.. Jonathan > On 26 Nov 2020, at 15:06, RW wrote: > > On Thu, 26 Nov 2020 10:39:29 + > Jonathan Gilpin wrote: > >> The header: x-originating-ip: [86.129.191.88] >> >> is being put in by office 365.. it is already in when our e

Re: Anyone else just blocking the ".top" TLD?

>> >> On Wed, Apr 27, 2016 at 5:39 PM, @lbutlr wrote: >> On Apr 27, 2016, at 2:06 PM, Olivier Coutu wrote: >> > I have affected a hefty penalty in SA to any mail that comes from one of >> > these TLDs: >> > >> > (party|science|click|link|faith|racing|win|zip|review|country|kim|cricket|work|gq|d

Re: RCVD_IN_SORBS_DUL on my own emails to self

On Apr 9, 2011, at 5:59 PM, Michelle Konzack wrote: > Hello rstarkov, > > Am 2011-04-09 15:50:36, hacktest Du folgendes herunter: >> Does your header definitely include an ESMTP marker as per the RFC? Mine >> didn't; that was the real issue. We didn't find a bug in this rule. So I >> guess SpamA

spam skating through

Two examples from the past half hour alone: http://pastebin.com/SraBrj7r http://pastebin.com/PRspRuLS I'm getting flooded with spam these days. Bayes is on, I'm using the built-in RBLs, hostkarma, mailspike, BRBL, botnet & freemail plugin, pyzor, razor.. and things are still sailing right thro

Re: spam skating through

Message has a DKIM or DK signature, not > necessarily valid > 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) > > Regards, > KAM > > > > On 2/23/2012 12:10 PM, Jonathan Nichols wrote: >> >> Two examples from the past half hour alone: >&

Re: spam skating through

> > 1.3 SAGREY Adds score to spam from first-time senders > Now this is something that I have never seen before and am going to look into this evening

Re: spam skating through

On Feb 23, 2012, at 12:59 PM, Benny Pedersen wrote: > Den 2012-02-23 18:50, Jonathan Nichols skrev: > >> Now this is something that I have never seen before and am going to >> look into this evening > > setup awl to mask on /32 and keep awl factor at 0.5 > >

Re: spam skating through

> >> This sagrey plugin sounds great, I'm giving it a try now. Thanks for >> the info. > > I'd be wary about that. Personally, the FPs I've had in the past have > overwhelmingly "first contact". I've been giving it a whirl and adjusted the score down a little bit.. So far, it's been doing gr

Test - ignore

Excuse the test. Testing a delivery issue. I think I clamped down on things a bit too much and broke my own ability to send stuff to/from sourceforge. :-)

sa-update & different rulesets

sa-update need to be told which rulesets to download? Debian/Ubuntu have a "spamassassin" script in /etc/cron.daily but I didn't see anything in it that was specific to the update channels. Cheers, -- jonathan

Re: URIBL_BLACK unreilable?

> > So, why is it triggering URIBL_BLACK and URIBL_DBL_SPAM etc now, but > not when I received the original spam? > > Or was the database updated with those > URLs after I received that particular spam? > i It is quite likely that it was not in the database when you received it, but was added

Re: Large # of Spam getting through all of a sudden.

On Jun 13, 2013, at 6:20 PM, Alex wrote: > > > It's only been in the last few weeks that I've had real difficulty > with pump-and-dump spam and needing to investigate something > additional. Interestingly, they only seem to work during EDT business > hours. After working with it for a few day

'hair' spam

I've been getting flooded with pump n dump spams for a particular stock symbol, and my feeble admin skills these days are making it difficult to slow. Been using mailspike, spam cop at the mta, and barracuda too. Here's a sample: http://pastebin.com/Y5q4QTnf What kind of worries me are the lo

Re: 'hair' spam

>> >> >> >> Missing Date and Message-Id headers, no Received headers. I'd focus on >> fixing those, before looking at Bayes again. > > Just had a look at various samples here. Correction: The Message-Id > header appears to be missing indeed. > > I have now noticed this with all other message

Re: SA and Ubuntu 14.04 LTS

On Jul 16, 2014, at 7:31 AM, Chris wrote: > On Wed, 2014-07-16 at 01:50 -0700, Ian Zimmerman wrote: >> On Wed, 16 Jul 2014 06:09:08 +0200 >> Karsten Bräckelmann wrote: >> >>> And to really include *local* plugins, provide a relative path (to the >>> current site-wide configuration dir, without

Re: .co.at

for ; Thu, 13 Nov 2014 14:25:17 -0500 Received: by 0951643d.29nty.explosis.explosis.co.at (amavisd-new, port 17744) with ESMTP id 09DRBYWWHF5164CNPHMSOJ3D; for ; Thu, 13 Nov 2014 14:25:16 -0500 Hope this is what you want. -Jonathan

Re: Heads up: Net::DNS update may have quietly broken your SpamAssassin.

> On Sep 18, 2015, at 12:41 AM, Bill Cole > wrote: > > nd after many hours of trying to determine why which included reviewing BIND > configs and packet captures and dissection, I nailed it down to SA making DNS > queries without the "recursion desired" flag. Since my local nameservers > isn

Re: Heads up: Net::DNS update may have quietly broken your SpamAssassin.

> > Your problem is URIBL_BLOCKED. The usual cause of this is running a mail > system that relies on a public-access DNS resolver, although if you have > substantial volume on your system you can have this happen with your own DNS > infrastructure. See http://uribl.com/refused.shtml for detail

Trouble with SPF plugin

I just recently noticed that I hadn't enabled the SPF plugin, so I did that and ran a quick test to test an SPF failure. However, in the resulting email, I get an SPF_HELO_PASS result and no other SPF_ test results. Did the plugin only run the HELO test and not check the actual IP against

Re: Trouble with SPF plugin

rough about 3 layers of different delivery filters, so it's time to check those for culprits. Thursday, November 19, 2015, 12:33:24 PM, you wrote: > On 19 Nov 2015, at 13:05, Jonathan Hilgeman wrote: >> I just recently noticed that I hadn't enabled the SPF plugin, so I did &g

Is SpamAssassin using ARC-headers?

it in the roadmap? I am fully aware that ARC is still in draft. / Jonathan signature.asc Description: OpenPGP digital signature

URIBL_SBL_A - Spamhaus false positive..

Has anyone come across this before or can someone give any advise of what the cause of this might be? most importantly how to fix it? Kind Regards, Jonathan Gilpin fluent Ltd www.fluent.ltd.uk <http://www.fluent.ltd.uk/>

Re: URIBL_SBL_A - Spamhaus false positive..

found anyone using spamassassin that is not getting the same result Jonathan > On 23 Jan 2020, at 13:46, Dominic Raferd wrote: > > > > On Thu, 23 Jan 2020 at 13:06, Jonathan Gilpin <mailto:jonat...@fluent.ltd.uk>> wrote: > Hi, > > It seems that SpamAsassin is

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

> On Jul 9, 2020, at 9:00 PM, Kevin A. McGrail wrote: > > IMPORTANT NOTICE > > If you are running trunk, we are working on changing terms like whitelist to > welcomelist and blacklist to blocklist. > > https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7826 >

delete email

Is there any way in the stock SA install to tell it to delete email? I know you can do it with procmail, milter, etc, but that's not what I want. I'm asking because the question has come up about "can spamassassin itself with NO add-ons be set to delete email."

Re: delete email

jdow wrote: From: "Jonathan Nichols" <[EMAIL PROTECTED]> Is there any way in the stock SA install to tell it to delete email? I know you can do it with procmail, milter, etc, but that's not what I want. I'm asking because the question has come up about "can spamass

Stupid lottery spam?

A.A.S Lottery Headquarters: Customer Service 580 N. Tenth Street Sacramento, CA 85914 Euro - Afro Asian Sweepstake Lottery an Affiliate of Foundmoney International Arena Complex Km 18 Route de Rufisque I.P.P Award Dept. johannesburg, south africa. Ref: EAASL/941OYI/03 Batch: 03/06/MA34 -- Ok,

Re: [ot] NASCAR fans gonna be mad at me :)

Kurt Buff wrote: I told ya so - time to ban that fight where occasionally a game breaks out. *spews coffee all over PowerBook* ahahahaha That was the funniest thing I've read all morning. Thanks. hehe

Re: *SPAM* feeding frenzy for ws.surbl.org!!!

ts) I'm starting to wonder if spammers are now trying to pollute SURBL with valid domains. -Jonathan

Re: *SPAM* feeding frenzy for ws.surbl.org!!!

LOL, oh please let me know how that conversation went! "Uh...yeah..hello. Is this Tanya? You actually exhist? Ok, thanks. *click*" I bet she slept well that night! I got voicemail. :P Good thing about Vonage, you don't get long distance charges. 6 pack of Pyramid Ale offerings, and I'll call anyo

Hi. I'm dumb.

I'm having problems whitelisting one of the mailing lists I'm on.. a few sparklist.com lists. I'm using SA 2.6x and amavisd-new. I can't just whitelist the "From" because it's the "To:" field that I need to use.. Help. I'm too brain dead today to figure this one out.. blah. Here's the full heade

Re: *SPAM* RE: Hi. I'm dumb.

Bret Miller wrote: I'm having problems whitelisting one of the mailing lists I'm on.. a few sparklist.com lists. I'm using SA 2.6x and amavisd-new. I can't just whitelist the "From" because it's the "To:" field that I need to use.. Help. I'm too brain dead today to figure this one out.. blah.

NOT_TO_ME

To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: *SPAM* BLM beach land Date: Thu, 28 Oct 2004 13:19:29 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/alternative; boundary="_=_NextPart_001_01C4BD2B.6D9A2B00" X-Virus-Scanned: by amavisd-new a

Re: NOT_TO_ME

"Jonathan Nichols". It might be, I'll have to go dig for it.. Besides, what are you complaining about? That message looks like it was probably spam from the headers, and this rule is probably all that pushed it over the limit. :-) It wasn't, that's the thing. It was a frie

Gentoo ebuild for 3.x?

Hi everyone, Has anyone seen an ebuild for 3.x yet? Or, if there's anyone using Gentoo around here, have you installed 3.x successfully yet? :)

Help me help someone...

http://forums.gentoo.org/viewtopic.php?p=1777629 This poor guy is having some strange issues with SpamAssassin and RulesDuJour that I can't manage to recreate. Anyone care to take a look and offer a suggestion or two? :)

OT how often to reboot?

>support DSL. I nearly cried when I took that machine down. (I'd even >moved it, while still on its UPS, from one side of the room to another >when we rearranged the room for better space utilization.) Oh, that's nothing. :) I had a Sparc 5 that was up for like 520 days. I moved from Sacramento, C

Re: OT - How often to reboot?

n on-topic note, the mailgate box was spooling up all of the email and once I brought the primary mail server back online, the SA-SQL setup performed flawlessly and most customers had no idea about the mail server outage. :) BTW, when is the next run of SpamAssassin t-shirts? -Jonathan "I love beer" Nichols

Re: 70_sare_header0 70_sare_header1 and 70_sare_genlsub problems

On Fri, 2004-12-10 at 08:32 -0800, Robert Leonard wrote: > When I lint this rule I get numerous events warning that the describe > field is more the 50 characters in length.. Is this something new, or > something I can fix (short of going through and modifying each of > these lines by hand)? > >

Re: consensus on SPF

Clarke Brunt wrote: Hi, I have heard that SPF is controversial among mail administrators. Why is that? How many people use it (on this mailing list)? It's certainly not a simple subject: anyone who isn't familiar see http://spf.pobox.com/ So long as you're careful, and realise that mistakes migh

Re: Equifax/NCR partnership in spam???

You could always go through the unsubscribe link and unsubscribe but also do whatever is necessary for your SA install to mark any further messages from them as SPAM. Oh, they ignore those. I signed up for "freecreditreport.com" (scam) like a moron a few years ago. It requires you to pay for Equi

Re: OT: Crippled Verizon phones

I had a similar problem with T-Mobile and Cingular/AT&T...my office is in a dead spot. Repeated complaints to T-Mobile didn't help. (Pity, since they're by far the least expensive.) Reception is nonexistant there for T-Mobile and hit-or-miss for AT&T. Step outside the building a few feet a

Re: OT: Crippled Verizon phones

Blame that on NIMBYs in your neighborhood who do not want an unsightly cellphone tower there. Don't forget the NIMBYs that think cell towers cause brain cancer or something silly like that. Local school district wanted to enter into a contract with one of the carriers (Sprint, I believe) to clam

Humor: "The Ultimate Spam Email"

This oughta replace GTUBE! http://lowendmac.com/lite/05/0210.html

Re: Excessive DNS Requests

lister lynch wrote: Our ISP, Covad, is periodically claiming that we have excessive DNS requests and is threatening to turn off our service. It's primarily due to SA, I think. Looked around for answers, and already set a bunch of the BL checks to 0.0 to turn off the rules. Any idea how to furthe

OT quick amavisd-new question

I posted this to the Gentoo forums as well, no replies yet. :( New installation of amavisd-new. Here's the relevant information from the log.. notice the bit about "Couldn't POSIX::setuid.." I thought that was solved in Net::Server already. I have 0.85. Is there a known workaround for this issu

Re: OT quick amavisd-new question

did you check the amavisd-new web site? http://www.ijs.si/software/amavisd/#faq-net-server you know, I did read that too, but I never had to jump through that hoop on a nearly identical machine. I applied the new subroutine to the new box, and it solved the issue. I have *no* idea why it's actu

hillsdale media

Ugh. I'm getting stuff from these jerks slipping through left & right.. anyone else seeing this stuff? :| It's hitting the sbl rules, but still only scoring 4.152.. From: ChristianMortgageUSA.com <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Let our experts help you save on your home Date: T

Re: hillsdale media

He may not have posted the received headers for some ineffable reason.Plus, if the actual email did not originally hit ALL_TRUSTED, then the original score would have been 4.152 + 2.4 (ALL_TRUSTED score) = 6.552 which should have stopped the email unless his kill level is set higher than

Re: hillsdale media

The OP said nothing about having verified and set the trust path, and his server setup does appear to use a local IP, which means that there's a good chance that, *in his case*, the actual problem is not with the ALL_TRUSTED *rule* but with the *actual trust path*. In that case, disabling ALL

Re: hillsdale media

Try the wiki: http://wiki.apache.org/spamassassin/TrustPath Which will end up explaining a few things, and then direct you to the manpages for the trusted_networks setting. Ah. Thanks! :D I added "trusted_networks 192.168/16 127/8" to local.cf - the box itself is a 192.168.x.x host, as it's behin

hillsdale media = PWN3D

Ok, right on! I fixed the trusted_networks thing, and check this out! BTW, the jerks are using another domain.. for a new "division." my god, CAN-SPAM is a piece of crap. How the *hell* did it get passed? Ugh. At least it's getting plonked now. And with that, off to KFC I go... Return-Path: <[EM

Unable to whitelist...

tus: Yes, hits=7.684 tagged_above=-999 required=6 tests=HTML_90_100, HTML_FONT_SIZE_TINY, HTML_FONT_TINY, HTML_MESSAGE, MIME_HTML_ONLY, MSGID_FROM_MTA_ID, NOT_TO_ME X-Spam-Level: *** X-Spam-Flag:YES Campbell's (R) Wednesday, May 11, 2005 Creamy Mustard Pork

Re: Unable to whitelist...

Kevin W. Gagel wrote: Try adding the "Return-Path: <[EMAIL PROTECTED]>" address and see if thats it. Oddly enough, that worked. Hrm. I wonder why

Re: Blogger attacks SURBL

Jeff Chan wrote: Pardon the dramatic title, but hopefully it got your attention. This guy's domain got listed by Outblaze, we removed it, and as thanks this guy paints us as irresponsible. Please help us straighten him out, gently: http://blog.holtz.com/index.php/weblog/comments/blacklisting_b

Razor issues with SpamAssassin

I have just set up a little mail server with Postfx and Spamassassin2.63 with the newest Razor installed (of course).  Spamassassin seemsto be working fine, and running spamassassin -D --lint shows Razorappearing to be working fine.. but unfortunately it is not tagging anymessages.  So far I have

Re: Razor issues with SpamAssassin (update)

ags as it should.  Network checks are seemingly only working on a "local" level.    Any reason why this might be?   JON     >>> "Jonathan Lutz" <[EMAIL PROTECTED]> 6/8/2005 1:39:46 PM >>> I have just set up a little mail server with Postfx and Spama

Re: Razor issues with SpamAssassin (update)

Dinter <[EMAIL PROTECTED]> 6/9/2005 1:16:24 PM >>> On Thu, Jun 09, 2005 at 12:51:33PM -0400, Jonathan Lutz wrote:> However, when I run: spamassassin -D -t < spamfile on it, it shows a> whole bunch more such as DCC_CHECK and a bunch of URIBL tags as it> should.  Network chec

Dumb script question

ng and Perl, and this is totally spamassassin stuff related, so I'm asking.. help me! :) -Jonathan Scripting idiot

Re: Dumb script question

Hi, for i in `ls /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur`; do sudo rm /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur/$i; done Although imapsalearn is easier. Regards, Rick I should get an extra shot of espresso when I hit up the coffee shop in the morning. That worked fi

Use of uninitialized value in scalar chomp

my version. Oh yeah, I run Debian Etch. Any idea how I can get rid of these warnings? Jonathan

blank mail with pdf attachment slipping right through

I had one slip right through. Looks like PDFInfo.pm loaded too.. Aug 20 14:05:59 mailgate postfix/qmgr[4397]: 6BD0419D66: from=<[EMAIL PROTECTED]>, size=32111, nrcpt=1 (queue active) Aug 20 14:05:59 mailgate postfix/smtpd[2391]: disconnect from localhost[127.0.0.1] Aug 20 14:05:59 mailgate ama

Perl error after upgrade to 3.2.3

Apologies if I am asking in the wrong place, since I can see that there are several possible reasons. We have just upgraded to SpamAssassin 3.2.3 on an elderly 386 box running Red Hat 9. At the same time I used CPAN to upgrade any out-of-date perl modules. Now, when SA starts, we get the foll

[Fwd: Re: unable to run sa-learn utility as non-root user]

Matt Kettler wrote: Srilatha wrote: Hi, I am using SpamAssassin 3.2.1 sa-learn utility is taking user name but it is not running as the given user First, I assume you're trying to use sa-learn -u. If you read the docs closely, the -u parameter to sa-learn *ONLY* works for SQL and virtual con

Re: newbie question: scan msgs smaller than certain size

Tom Bombadil wrote: Thanks for the response Loren, but unfortunately, as far as I know we can specify the "spamd" directive just once in exim. I realise we're getting OT here, but there are at least two ways to call SA from Exim, the built-in hook which you are using, and sa-exim, which calls

Re: DNSWL question

Mark Wendt (Contractor) wrote: I've started seeing some spam come through that gets labeled with "RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/"; > Can someone point me in the right direction as to how and where I can turn off this rule if it can be turned off? In local.cf:

Re: Win32.pm

Duane Hill wrote: On Tue, 30 Oct 2007 02:04:31 -0400 Payne <[EMAIL PROTECTED]> confabulated: Guys, How can I fix this? error: Can't locate Sys/Syslog/Win32.pm in @INC (@INC contains: The maintainer has just told me that a new version of Sys::Syslog has been uploaded to CPAN which should f

Re: what is error code 29 (make: Fatal error)

Jeffrey Pawlan wrote: I have had SpamAssassin version 3.1.7 running on Perl version 5.8.7 running perfectly for a year. The system is a Sun workstation (SPARC) with Solaris 5.9. Last night I tried to upgrade spamassassin to the current version by running as Root: perl -MCPAN -e shell

Re: the opposit of "ok_locales" ??

Karsten Bräckelmann wrote: On Wed, 2007-12-05 at 17:00 +0100, Axel Werner wrote: im looking for some "opposit" parameters of "ok_locales" to make spamassassin mark all incoming mail of some specific charsets or language settings (locales) to get marked by default. Provided it is possible with

Re: Problem with 3.2.2

jobthart wrote: Do you mean this should be solved in 3.2.3? I am having those errors when trying to install the version 3.2.3. So maybe there is still a bug in version 3.2.3 regarding this matter? I was still having this problem last week when trying to install the latest SpamAssassin from CPAN

Re: Problem with sa-learn and virtual user

Jean-Edouard Babin wrote: On Jan 17, 2008 1:38 PM, Jonathan Armitage <[EMAIL PROTECTED]> wrote: Jean-Edouard Babin wrote: But i would like to be able to run sa-learn for spefic users I tryed sa-lean --username [EMAIL PROTECTED] --spam files But as I can see with debug (-D) it use baye

Re: ok_languages doesn't seem to work

R. Steven Rainwater wrote: 100% of the non-English email we're getting is spam, so I added this to my local.cf file: ok_languages en However, I can't see that it's having any effect at all. Steven, I think you might need to uncomment loadplugin Mail::SpamAssassin::Plugin::TextCat in

Re: Score vs Bars

Matt Kettler wrote: Theo Van Dinter wrote: On Wed, Feb 06, 2008 at 11:52:09PM -0500, Don Ireland wrote: When I look at the message source, the following is among them--this is actually from YOUR reply. X-Spam-Status: No, score=-6.6 X-Spam-Score: -65 X-Spam-Bar: -- Looks like it

The 'believe-it' spams

Anyone catching these? Here's a sample: http://pastebin.ca/916902 Those have been slipping right through these days. Scores are in the pastebin post. SpamAssassin version 3.2.3 running on Perl version 5.8.7 (From the Ubuntu package, which I cannot for the life of me figure out how to e

Re: The 'believe-it' spams

On Feb 24, 2008, at 7:39 PM, Bob Proulx wrote: Jonathan Nichols wrote: Anyone catching these? Here's a sample: http://pastebin.ca/916902 Those have been slipping right through these days. Scores are in the pastebin post. Even with a current sa-update and also Justin's (very w

OT: uribl.com folks awake?

Sorry for the OT. I've been trying to get in touch with whoever is in charge of URIBL zonefile mirrors without success. Is this thing on? Ping me offlist, por favor. I may have just been pinging the wrong people. -- Jonathan

Re: OT: uribl.com folks awake?

On Mar 27, 2008, at 10:19 AM, Dallas Engelken wrote: Jonathan Nichols wrote: Sorry for the OT. I've been trying to get in touch with whoever is in charge of URIBL zonefile mirrors without success. Is this thing on? Ping me offlist, por favor. I may have just been pinging the

Re: How to whitelist the recipient?

Roman Serbski escribió: How do I configure SA to whitelist particular recipient's email address? Actually, I think you need "whitelist_to", same syntax as whitelist_from. There are other options: more_spam_to and all_spam_to. See the documentation at http://spamassassin.apache.org/full/3.2.x

Re: Returned mail spam

On Apr 8, 2008, at 2:50 PM, McDonald, Dan wrote: On Tue, 2008-04-08 at 12:36 -0700, ahgu wrote: They forged the header with my email addr as the return address. When it get bounced back by a server, everything is valid. Since the server strip off most of the content, it can pass the spamass

Re: Configuring SA as frontend to Exchange

Henry Kwan wrote: Hi, Have been running SA on CentOS for a few years now and everything has been working great. But the powers that be want to move to Exchange so I am trying to plan a SA frontend that feeds the Exchange server. As I was thinking over how SA works now and how it might work in

Re: Returned mail spam

On Apr 9, 2008, at 2:16 PM, mouss wrote: Martin Gregorie wrote: On Wed, 2008-04-09 at 19:04, Jonathan Nichols wrote: Guys? He's been joe-jobbed. From the original email: "somebody is using my email as the bounce- back return email. How do I avoid the problem?" If SPF

"strategic oil" spam

http://www.pbp.net/~jnichols/textfiles/spam_060606.txt Here's an example of one. TONS of these have been slipping through. I have pretty much every single ruleset that RulesDuJour will install, plus Bayes, etc. My big question - is there now a ruleset that lists stock ticker symbols? I'm thi

Re: sa-learn --username option

In Solaris, that would be something like: su - user1 -c "sa-learn --spam /home/user2/Maildir/.Spam/cur/" Jon Aaron Axelsen wrote: I am trying to run a cronjob as root which will learn a different accounts spam into my spam db. Example command: sa-learn -u user1 --spam /home/user2/Maildir/.S

I never see BAYES anymore..

use things have been ok. Just recently a LOT of spam has been slipping through. :-| If anyone wants the full output from spamassassin -D --lint, let me know. Otherwise..any ideas? -- Jonathan

Re: I never see BAYES anymore..

Matt Kettler wrote: Jonathan Nichols wrote: I feed all of my spam into Bayes. Stuff that slips through gets fed into bayes as well. but I never see any Bayes hits. spamassassin -D --lint gives me this: Are you *sure* you're running this as the same user your mail gets scanned as?

Re: I never see BAYES anymore..

Matt Kettler wrote: Jonathan Nichols wrote: I feed all of my spam into Bayes. Stuff that slips through gets fed into bayes as well. but I never see any Bayes hits. spamassassin -D --lint gives me this: Are you *sure* you're running this as the same user your mail gets scanned as?

Re: FuzzyOcr mailing list

it and been able to install it. My vote, for what it's worth, is to keep it all here ... Jonathan

Re: FuzzyOcr mailing list

ion available, if the people here don't mind that... I'd still keep it all here, myself. You'll still get lots of questions here anyway, from people who don't know about your list, so I'm not sure what benefit there will be to moving to a new list. Sending a new-version message here would be mandatory ! Jonathan

Strange Error Log ...

-date) 3.1.4 with no additions except FuzzyOCR. Any idea what it means ? Jonathan

Re: Strange Error Log ...

ing started checking the log, I now find that I also have this error reported during startup: spamd[23037]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Any ideas here ? Jonathan

Broken Dependency

Hi All, I'm running 3.1.5 in FC2 and have a broken dependency. Any ideas how to fix it ? meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Jonathan

Re: Broken Dependency

spams made it through SA and found that in the log. Running SA -t on the (saved) spam told me: Broken Pipe and running it with -D as well showed that it broke during base64 decoding - I assume the attachment, a GIF, was badly encoded. Otherwise it looked just the usual text + something in a GIF spam. Jonathan

Message headers not being added

,make,make install), I figured I'd try here first. Please help! :) - Jonathan

  1   2   >