Re: real world spamassassin experiences re: processing on servers emailing from .info domains

2011-10-28 Thread Robert Schetterer
Am 27.10.2011 18:15, schrieb R - elists: greetings SA users there sure seems to be a lot of from .info server spamming wierd temp registered .info domains spamming eh? for those of you with volume, large or small, care to share an SA tips on how you deal with .info domains? i would

Re: sa-learn question

2011-10-28 Thread Jari Fredriksson
28.10.2011 4:38, Ricardo Ardila Vetrovec kirjoitti: Greetings list! Excuse my english, is not so good. I have a spamassasin standalone server, my MX it is another server postfix query spamassassin for score and work greats My question it's about spam that is not recognize on

Re: Rules explanations?

2011-10-28 Thread Loic Condette
Hi again list John, thanks a lot for your answer and help, that is greatly appreciated :) On Fri, 28 Oct 2011, Loic Condette wrote: I just received a spam which match the following rules: [DATE_IN_PAST_24_48=1.34, FSL_HELO_NON_FQDN_1=0.001, HELO_NO_DOMAIN=0.001, RDNS_NONE=0.793,

Re: Rules explanations?

2011-10-28 Thread Loic Condette
On Fri, 2011-10-28 at 02:07 +0200, Loic Condette wrote: I just received a spam which match the following rules: Are we really talking about a single spam message that slipped past SA? Yes, indeed. May I ask why? The problem here is that I could not find a description for the following

Re: Rules explanations?

2011-10-28 Thread darxus
On 10/28, Loic Condette wrote: and most rules do have textual descriptions available that can be displayed in the message header given the proper config options. Do you (or anyone else) know what the proper config options are? report Report = _REPORT_ Or you can just run the email

Re: Rules explanations?

2011-10-28 Thread Karsten Bräckelmann
On Fri, 2011-10-28 at 23:10 +0200, Loic Condette wrote: I just received a spam which match the following rules: Are we really talking about a single spam message that slipped past SA? Yes, indeed. May I ask why? Mostly just curious and making sure we're on the same page. However, no

Re: Rules explanations?

2011-10-28 Thread John Hardin
On Fri, 28 Oct 2011, Loic Condette wrote: Additionally, FSL_HELO_NON_FQDN_1 description is rather unclear, to say the least. Heh. That one probably duplicates HELO_NO_DOMAIN. FDQN is net-speak for Fully-Qualified Domain Name. Indeed, it's just that the rule's description on SA looks like

Re: Rules explanations?

2011-10-28 Thread Karsten Bräckelmann
On Fri, 2011-10-28 at 17:29 -0400, dar...@chaosreigns.com wrote: On 10/28, Loic Condette wrote: and most rules do have textual descriptions available that can be displayed in the message header given the proper config options. Do you (or anyone else) know what the proper config

Re: Rules explanations?

2011-10-28 Thread Karsten Bräckelmann
On Fri, 2011-10-28 at 23:05 +0200, Loic Condette wrote: [DATE_IN_PAST_24_48=1.34, FSL_HELO_NON_FQDN_1=0.001, HELO_NO_DOMAIN=0.001, RDNS_NONE=0.793, TO_NO_BRKTS_NORDNS=0.001] and most rules do have textual descriptions available that can be displayed in the message header given the

Re: sa-learn question

2011-10-28 Thread RW
On Fri, 28 Oct 2011 18:24:47 +0300 Jari Fredriksson wrote: 28.10.2011 4:38, Ricardo Ardila Vetrovec kirjoitti: on the spamassassin server i create a mail box so users can redirect the emails they consider spam ... question is: is this method works? with the redirection of the mail all