Hi
SA 3.2.4 on FC3
spamd is started by script and is running as root.
maillog shows various users with
spamd[5648]: auto-whitelist: open of auto-whitelist file failed:
auto-whitelist: cannot open auto_whitelist_path
/home/domain/domain71/.spamassassin/auto-whitelist
No such file or
Hi,
Currently running SA 3.25 via MailScanner frontend (CentOS5 box in the DMZ) to
Exchange2K7. Have setup two public folders for users to dump spam/ham in.
What's the usual way of moving these messages back to SA for learning? The
volume isn't that high so if there was a way to convert .MSG
Hi,
I am in the process of converting bayes from mysql to postgres.
On my running system I make a backup with
# sa-learn --backup /tmp/bayes.backup
I use this file as input on my redhat ( 2... ) testsystem using spamassassin
3.4.4
and postgres 8.3.1 like:
# sa-learn --restore bayes.backup
On Donnerstag, 19. Juni 2008 Peter Sørensen wrote:
[16119] dbg: bayes: seen_put: SQL error: ERROR: invalid byte sequence
for encoding UTF8: 0xd3ce [16119] dbg: bayes: HINT: This error can
also happen if the byte sequence does not match the encoding expected
by the server, which is controlled
Henry
Make sure the spam/ham folders are imap folders. Make sure they drag the
messages into that folder and not email them as it'll muck up the headers
otherwise.
Then grab a perl script (heck here's one below) to get messages from those
folders and place into the bayes.
Make sure you're
Hi,
i got some mail which got positive points for beeing in the
autowhitelist can someone enlight me ?
-Spam-Report:
* 1.0 NO_REAL_NAME From: does not include a real name
* 0.0 DK_POLICY_SIGNSOME Domain Keys: policy says domain signs some mails
* 0.0 UNPARSEABLE_RELAY Informational:
On 19.06.08 09:18, Martin.Hepworth wrote:
Please, set up your mailer to wrap lines below 80 characters per line, 72 to
76 is usually OK.
Make sure the spam/ham folders are imap folders. Make sure they drag the
messages into that folder and not email them as it'll muck up the headers
On 19.06.08 10:24, Robert Schetterer wrote:
i got some mail which got positive points for beeing in the
autowhitelist can someone enlight me ?
http://wiki.apache.org/spamassassin/AutoWhitelist
http://wiki.apache.org/spamassassin/AwlWrongWay
--
Matus UHLAR - fantomas, [EMAIL PROTECTED] ;
Matus UHLAR - fantomas schrieb:
On 19.06.08 10:24, Robert Schetterer wrote:
i got some mail which got positive points for beeing in the
autowhitelist can someone enlight me ?
http://wiki.apache.org/spamassassin/AutoWhitelist
http://wiki.apache.org/spamassassin/AwlWrongWay
thanks i allready
Martin.Hepworth martinh at solidstatelogic.com writes:
Henry
Make sure the spam/ham folders are imap folders. Make sure they drag the
messages into that folder and not
email them as it'll muck up the headers otherwise.
Then grab a perl script (heck here's one below) to get messages from
- Original Message -
From: Obantec Support [EMAIL PROTECTED]
To: users@spamassassin.apache.org
Sent: Thursday, June 19, 2008 8:12 AM
Subject: open of auto-whitelist file failed
Hi
SA 3.2.4 on FC3
spamd is started by script and is running as root.
maillog shows various users with
On Thu, June 19, 2008 09:25, Peter Sørensen wrote:
[16119] dbg: bayes: seen_put: SQL error: ERROR: invalid byte sequence for
encoding UTF8: 0xd3ce
[16119] dbg: bayes: HINT: This error can also happen if the byte sequence does
not match the encoding expected by the server, which is controlled
On Thu, June 19, 2008 10:48, Robert Schetterer wrote:
http://wiki.apache.org/spamassassin/AutoWhitelist
http://wiki.apache.org/spamassassin/AwlWrongWay
thanks i allready found and fixed it
fix is ?
Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098
I still miss samples for two rules, even if I did had hits according to
/var/spool/maillog I did not save them.
I added a sample for the FR_NOTSPAM rule, and I removed the
FR_YOURELUCKY rule as I see other forms of the text getting through so
it is not efficient. On the other hand, nearly
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 18, 2008 12:10 PM
To: John GALLET
Cc: users@spamassassin.apache.org
Subject: Re: [Rule Set proposal] French Rules
...omissis...
by the way, if you're reasonably perl-capable, it might be
Guys, you're being hit with hacked web site URIs showing up in a heavy
spam flood. I see Uribl.com got most of them, but in case:
rawbody GMD_R_DOT_HTML /\/r\.html$/
describe GMD_R_DOT_HTML Possible hacked site with porntube redirect
scoreGMD_R_DOT_HTML 3.5
Note: making it an uri rule
Giampaolo Tomassoni writes:
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 18, 2008 12:10 PM
To: John GALLET
Cc: users@spamassassin.apache.org
Subject: Re: [Rule Set proposal] French Rules
...omissis...
by the way, if you're
On Thursday, June 19, 2008, 7:33:44 AM, Yet Ninja wrote:
Guys, you're being hit with hacked web site URIs showing up in a heavy
spam flood. I see Uribl.com got most of them, but in case:
rawbody GMD_R_DOT_HTML /\/r\.html$/
describe GMD_R_DOT_HTML Possible hacked site with porntube redirect
Hi there. It seems my Spamassassin does not learn very well...
I use the following statements to learn spam/ham:
/usr/bin/fetchmail -a -s -n --folder assassin/spam -m '/usr/bin/sa-learn -D
--spam' /var/log/assassinspam.log
/usr/bin/fetchmail -a -s -n --folder assassin/ham -m '/usr/bin/sa-learn
Is there a good way to make SA exposed to spam flood , preferably with wide
variety of diff spam patterns, to check/measure how well the rule sets work
against them?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2008 5:28 PM
To: Giampaolo Tomassoni
Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org
Subject: Re: [Rule Set proposal] French Rules
Giampaolo Tomassoni writes:
-Original
Giampaolo Tomassoni writes:
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2008 5:28 PM
To: Giampaolo Tomassoni
Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org
Subject: Re: [Rule Set proposal] French Rules
Giampaolo
On Thu, June 19, 2008 17:41, heinztomato wrote:
/usr/bin/fetchmail -a -s -n --folder assassin/spam -m '/usr/bin/sa-learn -D
--spam' /var/log/assassinspam.log
Learned tokens from 1 message(s) (1 message(s) examined)
seems ok :-)
/usr/bin/fetchmail -a -s -n --folder assassin/spam -m
Jeff Chan writes:
On Thursday, June 19, 2008, 7:33:44 AM, Yet Ninja wrote:
Guys, you're being hit with hacked web site URIs showing up in a heavy
spam flood. I see Uribl.com got most of them, but in case:
rawbody GMD_R_DOT_HTML /\/r\.html$/
describe GMD_R_DOT_HTML Possible hacked site
-Original Message-
From: heinztomato [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2008 5:41 PM
To: users@spamassassin.apache.org
Subject: Spamassassin doesn't learn / debug outputs
Hi there. It seems my Spamassassin does not learn very well...
I use the following
Benny Pedersen wrote:
seems ok :-)
/usr/bin/fetchmail -a -s -n --folder assassin/spam -m '/usr/bin/sa-learn
21
-D --spam' /var/log/assassinspam.log
i hope its this, not tested
That helped (wrong position for 21 but sometimes I surprisingly manage to
think for myself :)
So
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2008 5:49 PM
To: Giampaolo Tomassoni
Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org
Subject: Re: [Rule Set proposal] French Rules
...omissis...
Ok, I see I have to get a copy of
Hi!
Message-id: Q0150625piByoZfn/[EMAIL PROTECTED]
Message-id: N7556814WYcmtrMl/[EMAIL PROTECTED]
Message-id: P5195955SYbtbcft/[EMAIL PROTECTED]
Message-id: P2384398XFKSgzjs/[EMAIL PROTECTED]
also, odd spaces:
Date: Thu, 19 Jun 2008 17:04:32 +0200
Date: Thu, 19 Jun 2008 18:03:54 +0300
On Torsdag, 19/6 2008, 18:11, heinztomato wrote:
That helped (wrong position for 21 but sometimes I surprisingly manage to
think for myself :)
good
So everything looks ok, but I still got mails from a sender which always get
through.
whitelisted ?
I saved mails from him a dozen times in
Giampaolo Tomassoni writes:
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2008 5:49 PM
To: Giampaolo Tomassoni
Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org
Subject: Re: [Rule Set proposal] French Rules
...omissis...
I am using sendmail as my mta
# rpm -q sendmail
sendmail-8.13.1-3.2.el4
What wierd is that the error clears up and then starts again after a while.
Also I noticed we are getting hit with a considerable amount of spam. Plus I
think our spamassassin version is old
# rpm -q spamassassin
I also notice this error in the maillog
spamd: still running as root: user not specified with -u, not found, or set
to root, falling back to nobody
raulbe wrote:
I am using sendmail as my mta
# rpm -q sendmail
sendmail-8.13.1-3.2.el4
What wierd is that the error clears up
On Torsdag, 19/6 2008, 18:36, raulbe wrote:
I am using sendmail as my mta
http://www.sendmail.org/m4/tweaking_config.html
adjust
confQUEUE_LA
confREFUSE_LA
confDELAY_LA
delay is default 0, but in your case it should be little more then what time
spamd uses pr scan msgs
all the abouve
On Torsdag, 19/6 2008, 18:37, raulbe wrote:
I also notice this error in the maillog
spamd: still running as root: user not specified with -u, not found, or set
to root, falling back to nobody
make a bug on this issue to your distro, its not really a bug but it could be
solved in the rpm
On Thu, 19 Jun 2008, raulbe wrote:
I am using sendmail as my mta
# rpm -q sendmail
sendmail-8.13.1-3.2.el4
What wierd is that the error clears up and then starts again after a while.
Also I noticed we are getting hit with a considerable amount of spam. Plus I
think our spamassassin
were do I find these lines?
adjust
confQUEUE_LA
confREFUSE_LA
confDELAY_LA
I looked in both the sendmail.cf file and the sendmail.mc file and didnt
see them?
thanks
Benny Pedersen wrote:
On Torsdag, 19/6 2008, 18:36, raulbe wrote:
I am using sendmail as my mta
Henry Kwan wrote:
Thanks for the script but I don't think I can use it as Exchange2K7
has dropped IMAP support for public folders. Or least this blog post
from MSFT seems to indicate:
http://msexchangeteam.com/archive/2006/02/20/419994.aspx
I don't have any Exchange 2007 experience, but at
Your question doesn't really make sense. The results of the Bayes
examination
are rules based on the 0-100 spam probability.
If I understand what you're asking though, the Bayes system results in
1 rule
hit, whereas there are hundreds of other rules that can all hit, so
generally
rules
-Original Message-
From: Thiago Henrique Rodrigues [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 19, 2008 11:11 PM
To: users@spamassassin.apache.org
Subject: Re: The rules has more weigh than bayesian-learn ?
Your question doesn't really make sense. The results of the Bayes
As if email from freebie @yahoo.com addresses isn't enough, Yahoo has
now announces two new domains that the freebie spammers can spam from:
ymail.com and rocketmail.com
*SAN FRANCISCO — Yahoo Inc. is offering free e-mail accounts under two
new designations in an effort to attract Web surfers
On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote:
Guys, you're being hit with hacked web site URIs showing up in a heavy
spam flood. I see Uribl.com got most of them, but in case:
rawbody GMD_R_DOT_HTML /\/r\.html$/
describe GMD_R_DOT_HTML Possible hacked site with porntube redirect
Chris [EMAIL PROTECTED] wrote:
On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote:
Guys, you're being hit with hacked web site URIs showing up in a heavy
spam flood. I see Uribl.com got most of them, but in case:
rawbody GMD_R_DOT_HTML /\/r\.html$/
describe GMD_R_DOT_HTML
On Thursday 19 June 2008 7:50 pm, Sahil Tandon wrote:
Chris [EMAIL PROTECTED] wrote:
On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote:
Guys, you're being hit with hacked web site URIs showing up in a heavy
spam flood. I see Uribl.com got most of them, but in case:
rawbody
Gentlemen, every few months we must upgrade Spamassassin (the software
itself, not just doing sa-update).
So what script do you use to take the bore out of the process?
Need something like:
set -xeu
set /tmp/$USER.SpamassassinUpgrade
mkdir $1
cd $1
latest=`(fancy code to determine latest version
Typically we do something like this basic outline
login to non-root account and change to proper directory
wget
http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.2.5.tar.g
z
rpmbuild -tb Mail-SpamAssassin-3.2.5.tar.gz
su to root and change to proper directory
yum
I'm trying to figure out how to stop SPF_FAIL on messages generated on
an internal rfc1918 network and routed through a trusted host.
Host A: generates mail, origin IP 10.x.x.x
Host B: relays mail for Host A, to Host C
Host C: receives mail, marks SPF_FAIL
Host B is both in the valid SPF
On Thu, 2008-06-19 at 20:37 -0700, Jo Rhett wrote:
Example:
host A: 10.0.0.1 generates e-mail, routes via HostB
Host B: has outside IP 64.13.143.16
Received: from arran.svcolo.com (arran.sc.svcolo.com
[64.13.143.17]) by kininvie.sv.svcolo.com (8.14.1/8.14.1) with ESMTP
Jo Rhett wrote:
I'm trying to figure out how to stop SPF_FAIL on messages generated on
an internal rfc1918 network and routed through a trusted host.
Host A: generates mail, origin IP 10.x.x.x
Host B: relays mail for Host A, to Host C
Host C: receives mail, marks SPF_FAIL
Host B is both in
On Thu, 2008-06-19 at 20:54 -0700, John Hardin wrote:
header XX Received =~ /from \S+\.svcolo\.com (\S+ \[10\.\d\.\d\.\d\]) by
arran\.svcolo\.com (/
score XX -5
Oops. Need some plusses in there...
/from \S+\.svcolo\.com (\S+ \[10\.\d+\.\d+\.\d+\]) by arran\.svcolo\.com
(/
--
John
49 matches
Mail list logo
