Re: Header of a false negative mail

2008-03-28 Thread Sn!per
Quoting Matt Kettler [EMAIL PROTECTED]: Can you tell us a bit about your setup? I am no sysadmin. But I will try anyway. How do you integrate SA into your mail chain? Procmail? I am using qmail-ldap and SA is integrated into the mail chain with maildrop. For that particular mail that went

Re: Detail Spam Scoring

2008-03-28 Thread Matt Kettler
Jeff Koch wrote: We used to get detailed spam scoring in the email headers but it seems to have disappeared after installing 3.2.4. Is there some command for turning the detailed scoring back on. Can someone please tell me what it is? look at the add_header command. Since 2.6.0 this has been

ALL_TRUSTED - problem (yes I set trusted_networks already)

2008-03-28 Thread peter pilsl
Our mailserver is behind a NAT-firewall (port 25 is passed through to the internal mailserver) and I ran into the ALL_TRUSTED-problem. I looked up the FAQ and set trusted_networks 127.0.0.1 (which actually gives me a warning that 127.0.0.1 is already part of trusted_networks)

RE: ALL_TRUSTED - problem (yes I set trusted_networks already)

2008-03-28 Thread Bowie Bailey
peter pilsl wrote: Our mailserver is behind a NAT-firewall (port 25 is passed through to the internal mailserver) and I ran into the ALL_TRUSTED-problem. I looked up the FAQ and set trusted_networks 127.0.0.1 (which actually gives me a warning that 127.0.0.1 is already part of

Re: Celebrity spams

2008-03-28 Thread penny/dell
Thanks for the uribl.com info. We will be contributing to it, it's a great resource. Back to the original problem The links are inconsistent. I'll post another. http://pastebin.com/m6025c7b4 --[ UxBoD ]-- wrote: why not :- util_rb_2tld grupogsv.com as that appears as part of the

Re: Spam abuse report plugin

2008-03-28 Thread Matus UHLAR - fantomas
On 27.03.08 19:58, ram wrote: I personally dont like the traditional spamcop report method of forwarding Spamcop uses a double confirm method, and to confirm all mails is a pain. I will look at how to automate this. I trust spamcop should not mind. This is building spamcops database of spam

SpamAssassin interest and Spam solution

2008-03-28 Thread Richard Hole
Hi I am interested in spam filtering software that I could encourage either my server or other servers to use. My server currently uses SpamAssassin and I hope your software could be easily modified to do what I suggest below. I want to receive my emails reliably without having genuine

Re: What to do about address spoofing

2008-03-28 Thread Matus UHLAR - fantomas
On 27.03.08 17:05, R.Smits wrote: Is there something I can do that our company addresses cannot be used for sending spam ? Is DKIM an answer ? yes, another answer is SPF. A lot of our users get delivery failed messages. So a spammer is sending spam with our addresses :-( A difficult

Re: tmp file handling

2008-03-28 Thread Matus UHLAR - fantomas
On 27.03.08 11:34, NFN Smith wrote: I'm currently running spamassassin 3.2.1-1~bpo.1 from the Debian etch-backports branch (yes, I know that backports now has 3.2.4 available, and I'll be upgrading shortly). Just FYI: Debian volatile archive has 3.2.3 and 3.2.4 was planned. Unlike

Re: Unsubscribe

2008-03-28 Thread Matus UHLAR - fantomas
Femitha Majeed wrote: Hi, Can you please tell me how to unsubscribe to this mailing list. I tried all that they suggested on the website but failed. On 27.03.08 22:03, Matt Kettler wrote: Could you be more specific? The SpamAssassin lists website

Re: Celebrity spams

2008-03-28 Thread --[ UxBoD ]--
look at line 55 of the pastebin ;) you can use that URL I believe. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44

Re: ALL_TRUSTED - problem (yes I set trusted_networks already)

2008-03-28 Thread Matus UHLAR - fantomas
On 28.03.08 14:26, peter pilsl wrote: Our mailserver is behind a NAT-firewall (port 25 is passed through to the internal mailserver) and I ran into the ALL_TRUSTED-problem. I looked up the FAQ and set trusted_networks 127.0.0.1 (which actually gives me a warning that 127.0.0.1 is

Re: SpamAssassin interest and Spam solution

2008-03-28 Thread Michael Scheidell
From: Richard Hole [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED], [EMAIL PROTECTED] Date: Fri, 28 Mar 2008 01:42:24 +1000 To: users@SpamAssassin.apache.org Subject: SpamAssassin interest and Spam solution Hi I am interested in spam filtering software that I could encourage either my

Re: SpamAssassin interest and Spam solution xyz vqw

2008-03-28 Thread Henrik K
On Fri, Mar 28, 2008 at 01:42:24AM +1000, Richard Hole wrote: When two people communicate via email they would not have to type each others code every time they reply as the code should automatically appear in the subject field of the new message. If two people are communicating, each

Re: SpamAssassin interest and Spam solution

2008-03-28 Thread SM
Hi Richard, At 08:42 27-03-2008, Richard Hole wrote: I am interested in spam filtering software that I could encourage either my server or other servers to use. My server currently uses SpamAssassin and I hope your software could be easily modified to do what I suggest below. I want to receive

Not scoring high enough on this spam...

2008-03-28 Thread Andrew Hearn
http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew

Re: Not scoring high enough on this spam...

2008-03-28 Thread Richard Frovarp
Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew pts rule name description --

Re: OT: uribl.com folks awake?

2008-03-28 Thread Jonathan Nichols
On Mar 27, 2008, at 10:19 AM, Dallas Engelken wrote: Jonathan Nichols wrote: div class=moz-text-flowed style=font-family: -moz-fixedSorry for the OT. I've been trying to get in touch with whoever is in charge of URIBL zonefile mirrors without success. Is this thing on? Ping me offlist,

Re: Not scoring high enough on this spam...

2008-03-28 Thread Randy Ramsdell
Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew If you learn the message which = 3.5 wouldn't that put the score +5?

Re: Not scoring high enough on this spam...

2008-03-28 Thread John Hardin
On Fri, 28 Mar 2008, Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? span name=3D#rwpt/spanpbr/pa name=3D#twtw/a I have some stupid

-2.6 bayes_00

2008-03-28 Thread Jean-Paul Natola
Why does this hit on the most OBVIOUS messages? Its almost an oxymoron How can all these rules get triggered 0.6 J_CHICKENPOX_34BODY: 3alpha-pock-4alpha 0.6 J_CHICKENPOX_64BODY: 6alpha-pock-4alpha 0.6 J_CHICKENPOX_82BODY: 8alpha-pock-2alpha -2.6

Re: Bounce back spam

2008-03-28 Thread mouss
Jeff Koch wrote: Our users are getting inundated with bounce-back, joe-job spam. We have the Vbounce.pm plugin enabled (v3.2.4) and have a 'whitelist_bounce_relays' with the name of the mailserver in the local.cf file and the 'failure notices', 'mail delay' and undeliverables don't seem to

can we make AWL ignore mail from self to self?

2008-03-28 Thread Jo Rhett
I send myself a lot of email from my phone. So AWL properly scores me well. I just got a piece of SPAM which should have scored 12.something that got a -6 from the AWL. I think that mail from self to self should be ignored by the AWL. (it's harder to forged mail from a regular

Re: can we make AWL ignore mail from self to self?

2008-03-28 Thread Theo Van Dinter
On Fri, Mar 28, 2008 at 06:09:03PM -0700, Jo Rhett wrote: I think that mail from self to self should be ignored by the AWL. (it's harder to forged mail from a regular correspondent, so this makes AWL more useful) If you know the mail is from you, don't waste the resources scanning the

Re: can we make AWL ignore mail from self to self?

2008-03-28 Thread Benny Pedersen
On Sat, March 29, 2008 02:09, Jo Rhett wrote: I send myself a lot of email from my phone. So AWL properly scores me well. and the sender ip with a fuss of /16 I just got a piece of SPAM which should have scored 12.something that got a -6 from the AWL. ok I think that mail from self to

SARE stock

2008-03-28 Thread hamann . w
SARE_PROLOSTOCK_SYM3 traps on ISMN (international standard Music number, similar to ISBN) I just got an order confirmation from a music book store with a pretty high score Wolfgang Hamann