Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Mathias Homann
On Thursday 07 October 2010 11:46:58 Matus UHLAR - fantomas wrote: On 07.10.10 11:11, Shlomi Fish wrote: before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom of their messages. They have

How to write a more complicated rule...

2010-04-02 Thread Mathias Homann
Hi, I have the uricountry and relaycountry plugins active on a 3.3.1 SA. how would i make a rule that scores for mails that contain an url under the TLD .xx but haven't gone through at least one relay in the same country? how would I make a rule that scores for mails that contain an URL that

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-29 Thread Mathias Homann
Am Montag 29 März 2010 schrieb Karsten Bräckelmann: On Mon, 2010-03-29 at 16:23 -0400, Brent Kennedy wrote: Wow, I knew this was coming at some point. I just figured it was too expensive. You did read the entire thread, right? :) There's nothing new about this. Moreover, this still is a

has SA 3.3.1 been recalled?

2010-03-26 Thread Mathias Homann
I'm trying to get the 3.3.1 source frm the website, but so far all mirrors replied file not found... what's up with that? bye, MH

Re: has SA 3.3.1 been recalled?

2010-03-26 Thread Mathias Homann
Am Freitag, 26. März 2010 10:27:41 schrieb Daniel Lemke: Mathias Homann wrote: I'm trying to get the 3.3.1 source frm the website, but so far all mirrors replied file not found... what's up with that? bye, MH Hm for me too... But you can still get it from CPAN: http

Re: howto stop scanning

2010-02-04 Thread Mathias Homann
Am Donnerstag 04 Februar 2010 schrieb Christoph Lehmann: Hey List, is there a simple way to stop further checks after achieving a specified number of points? I don't think that would make sense, since the later checks might actually bring the total down. just imagine the whitelist_from

Re: painting everybody in Taiwan with the same brush

2010-01-25 Thread Mathias Homann
Am Dienstag 26 Januar 2010 schrieb jida...@jidanni.org: Fellows, I have the highest spam score vs. all my buddies: http://article.gmane.org/gmane.linux.debian.devel.eeepc/2850/raw It's all because http://www.rulesemporium.com/rules/70_sare_header1.cf headerSARE_RECV_SPAM_DOMN0b

Re: [sa] Re: FH_DATE_PAST_20XX

2010-01-04 Thread Mathias Homann
Am Montag, 4. Januar 2010 08:50:54 schrieb Per Jessen: Mathias Homann wrote: ... is a fix for that out through sa-update now? then why am i not getting it? my channels for sa-update: saupdates.openprotect.com updates.spamassassin.org 70_zmi_german.cf.zmi.sa-update.dostech.net I

Re: [sa] Re: FH_DATE_PAST_20XX

2010-01-03 Thread Mathias Homann
Am Montag 04 Januar 2010 schrieb John Hardin: On Sun, 3 Jan 2010, babydr wrote: Hello All , My main ? is how was this (see below(*)) email being caught by the FH_DATE_PAST_20XX . I've run the sa_update repeatedly (of course that was useless as crontab had already ran) and with '-D' I

Re: Can I auto-delete emails scoring 10 and above, yet mark as spam those 5 and above?

2009-09-16 Thread Mathias Homann
Am Mittwoch, 16. September 2009 02:33:27 schrieb drkwc: New Spamassassin nb qs: On the configuration panel, I have SpamAssassin set to mark as spam any email scoring 5 or above. I have a rule set in Outlook Express to route those to a SpamAssassin SPAM folder. Now, I'm wondering, can I

how to get amavisd-new to use spamassassin?

2009-09-16 Thread Mathias Homann
Hi all, I have a postfix-amavisd-new-postfix-cyrus imapd through deliver chain up and running, and amavisd-new faithfully uses clamav to scan for viruses. I also have a working spamassassin / spamd with dcc and razor2 and all the toppings, on the same host, with sql-based settings, AWL and

suggested sa-update channels?

2009-07-21 Thread Mathias Homann
Hi, which good/useful sa-update channels should i use, in addition to these: saupdates.openprotect.com updates.spamassassin.org 70_zmi_german.cf.zmi.sa-update.dostech.net thanks for any suggestions MH -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und

spam count going down?

2009-02-28 Thread Mathias Homann
Hey folks, is it just me or did the average spam per day count drop by 75% lately? bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

Re: how to keep updated against german spam?

2008-06-10 Thread Mathias Homann
Am Dienstag, 10. Juni 2008 schrieb Michael Monnerie: On Dienstag, 10. Juni 2008 peter pilsl wrote: I run spamassassin 3.2.3 and every few weeks a new wave of german SPAM hits our servers that are not detected by spamassassin... Is there a webpage where I can get new rules? or any channel

scores too low?

2007-05-22 Thread Mathias Homann
Hi, lately i'm getting a lot of spam with rather low scores under 12.0 meaning that trash is not automatically deleted by my sieve filter). Here's a set of headers: Return-Path: [EMAIL PROTECTED] Received: from localhost ([unix socket]) by celebrimbor (Cyrus v2.2.12) with LMTPA;

spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Hi, I'm running the following mail chain: fetchmail - postfix - clamsmtpd - postfix - spamassassin 3.1.7 (as local_transport via the spamdeliver python script that came with the spamassassin sources) - cyrus imapd (where spam gets sorted out based on its score). now, since a few days, i keep

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 09:56:29 schrieb Mathias Homann: now, since a few days, i keep getting the same spam mail several times a day, which has _no_ spamassassin headers at all, as if it has found a way _around_ my spamassassin. by the way... when i run that offending mail manually

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 10:37:51 schrieb David Goldsmith: Check your mail log for error messages like this one: spamd[12960]: prefork: server reached --max-children setting, consider raising it We've been running spamd with '-m8' (max children spawned) for quite sometime and all of a

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag, 23. Februar 2007 16:12:59 schrieb Matt Kettler: Mathias Homann wrote: Hi, I'm running the following mail chain: fetchmail - postfix - clamsmtpd - postfix - spamassassin 3.1.7 (as local_transport via the spamdeliver python script that came with the spamassassin sources

Re: spam mails bypassing spamassassin?

2007-02-23 Thread Mathias Homann
Am Freitag 23 Februar 2007 schrieb Mathias Homann: Am Freitag, 23. Februar 2007 16:12:59 schrieb Matt Kettler: Mathias Homann wrote: Hi, I'm running the following mail chain: fetchmail - postfix - clamsmtpd - postfix - spamassassin 3.1.7 (as local_transport via the spamdeliver

Re: Gif Spam

2006-12-21 Thread Mathias Homann
Am Donnerstag, 21. Dezember 2006 19:28 schrieb san: Hi, Is there any rule to stop mails which has .Gif attachment in SA 2.64. Yes, upgrade to 3.1.7. bye, MH -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin

Re: SPF is hopelessly broken and must die!

2006-12-13 Thread Mathias Homann
Am Donnerstag, 14. Dezember 2006 03:53 schrieb Matt Kettler: Yep - they are using normal email technology. No they're not. They're falsifying mail headers. Something last I checked was actually illegal in the united states under CAN-SPAM. and a russian criminal sitting in litavia, using his

How can i make spamd use recipient adresses as keys in mysql tables

2006-12-12 Thread Mathias Homann
Hi, I'm running spamassassin 3.1.7 on a redhat box that is not an endpoint mta but sort of an inbetween mta between our external MX and several internal machines. So, most of the mails that spamd sees on it have recipient adresses that are not local users, but still valid, which leads to AWL

Re: Breaking up the Bot army - we need a plan

2006-12-11 Thread Mathias Homann
Am Montag, 11. Dezember 2006 23:41 schrieb Bret Miller: So perhaps SPF should consider removing +all as an option. Realisticly anyone that has to say my e-mail might come from anywhere is contributing to the problem and probably deserves to have e-mail bounced. sounds like a possible SA

Re: Breaking up the Bot army - we need a plan

2006-12-11 Thread Mathias Homann
Am Dienstag, 12. Dezember 2006 05:09 schrieb Steve Thomas: Is anyone else getting tired of this? Forty eight messages on the SA list today that have nothing to do with SA. What's the point of having a topical mailing list if nobody cares that the discussion is off-topic? if you're so opposed

Re: trouble calling spamc from within postfix

2006-12-07 Thread Mathias Homann
Noel Jones schrieb: * NEVER * use sendmail -t to reinject mail coming from the network. Doing so will send mail to everyone listed in the To: header, which doesn't have anything to do with who should receive the mail. As the guide said, use sendmail -oi -f ${sender} -- ${recipient}. [...]

trouble calling spamc from within postfix

2006-12-06 Thread Mathias Homann
Hi, I'm trying to use spamassassin 3.1.7 from within postfix 2.2.10 on a redhat ES4 server, (loosely) following the directions in http://www.debuntu.org/postfix-and-pamassassin-how-to-filter-spam (loosely, because 1. its redhat and nbot ubuntu, and 2. there's a kaspersky antivirus involved as

whitelist poisoned? spam getting through

2006-08-04 Thread Mathias Homann
Hi, ohw can it be that the attached spam got through... the SA report says user in whitelist, thus it gave the spam a really high negative score. How can that be, or rather, how can i stop it? bye, MH --- spam starts here --- Return-Path: [EMAIL PROTECTED] X-Sieve: cmu-sieve 2.0

Re: Way OT: What do you use for anti-virus (Linux)

2006-05-01 Thread Mathias Homann
Am Montag, 1. Mai 2006 21:18 schrieb : I can say that the best, and most affordable, anti-virus package I have ever used was RAV. Until is was bought out by Microsoft. I have since been using ClamAV but it sure uses allot of RAM. What do you use? clamav. clamd uses some 2.8% of my ram

Re: relay distance and spam [was xxxl spam]

2006-04-11 Thread Mathias Homann
Am Dienstag, 11. April 2006 22:28 schrieb mouss: [EMAIL PROTECTED] wrote: mouss wrote: I would conjecture that most legitimate mail has two real hops (the sending MTA and the receiving MTA). That would be one hop. depends on how you count: MUA - my MTA1 - your MTA - your

on the value of SPF records (was: Re: Importance of SMTP gateway reverse lookup domain?)

2006-03-16 Thread Mathias Homann
Am Donnerstag, 16. März 2006 23:46 schrieb Michael Monnerie: On Donnerstag, 16. März 2006 17:15 Stewart, John wrote: Aye; thanks. Unfortunately, our current external DNS server doesn't yet support SPF records. =( let me rant a bit about SPF records. Background info: my day job is fondling

is it just me, or is the overall spam volume going down lately?

2006-02-03 Thread Mathias Homann
Hi folks, since i've been running spamassassin, and doing daily logfile stats via spamstats.pl 0.6b, I was used to getting somewhat near 50% spam (meaning, half of around 500 mails per day were tagged as spam by spamassassin), but lately, maybe since a month or so, the daily percentage has

how to configure SA to do nothing at all for one single user?

2006-01-18 Thread Mathias Homann
Hi, i want spamassassin not to touch my mails at all. server in question runs SA with mysql for user config. reason: i fetch with fetchmail from there, and run my own SA on my own mail server. how do i tell SA on the other server not to touch my mails at all? SA is invoked from within qmail

RE: how to configure SA to do nothing at all for one single user?

2006-01-18 Thread Mathias Homann
Bowie Bailey wrote: how do i tell SA on the other server not to touch my mails at all? SA is invoked from within qmail there. You would have to tell qmail not to invoke SA for your messages. But why is it a problem? When you run SA on your server, it should automatically remove the

Re: OKAY I'am the black man !!!

2005-12-06 Thread Mathias Homann
Am Dienstag, 6. Dezember 2005 20:27 schrieb Chris Santerre: --Chris (A lazy american wondering when the heck the second advent is? ) last sunday. advent: the four last sundays before christmas eve. so, coming sunday will be 3rd advent. bye, MH -- gpg key fingerprint: 5F64 4C92 9B77

automating spam handling

2005-11-28 Thread Mathias Homann
Hi, i want to automate my spam handling a bit further. here's what i got by now: - fetchmail gets mails from various pop3 accounts, injects into local mail system (postfix) - postfix pushes mail through clamsmtp and then through spamassassin - mail gets delivered into local cyrus imap which

Re: Report SpamAssassing/Qmail-scanner activity ?

2005-11-28 Thread Mathias Homann
Noc Phibee wrote: Hi a small question : Do you know if they have a utility for create a entry into mrtg for count spamassassin result ? you might want to use munin instead of mrtg, it comes with spamassassin monitoring preconfigured... and it does other useful monitors as well. bye, MH

f-secure messaging security gateway x-series??

2005-11-23 Thread Mathias Homann
Hi, at work, someone dropped a flyer about the product mentioned in the subject on my desk... seems to be one of those linux-based appliances, meaning, 1U rackmount box running linux, a smtpd of unknown brand, a spam filter, and some f-prot based mail scanner... the leaflet itself is full

Re: f-secure messaging security gateway x-series??

2005-11-23 Thread Mathias Homann
Am Mittwoch, 23. November 2005 23:11 schrieb jdow: From: Mathias Homann [EMAIL PROTECTED] the ProofPoint Spam Detection (TM) module uses the ProofPoint MLX(TM) technology for automated learning (pat.pend.) which in itself doesn't tell

RE: Why did this mail get any score at all?

2005-11-04 Thread Mathias Homann
Pierre Thomson wrote: If you are trying to minimize the score for your own bulk mailing, then you should be I am not. I was just wondering about the scores that that mail has got, as well as a bit concerned about the fact that after upgrading to SA 3.1.0 i get all kind of weird results,

Why did this mail get any score at all?

2005-11-03 Thread Mathias Homann
Hi, here's the headers of a mail that got scored (ok, not very high but it should get no score at all): Return-Path: XXX X-Sieve: cmu-sieve 2.0 Return-Path: XXX X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on celebrimbor.eregion.home X-Spam-Status: No, score=1.7

Re: Integrity checks in URLs for blocking phishers as anti-phishing prevention

2005-10-31 Thread Mathias Homann
Am Montag, 31. Oktober 2005 19:33 schrieb [EMAIL PROTECTED]: A HREF=http://hacker.com;http://legit-bank.com/a On top of my mind, I never saw a situation like this in real life, except in phish emails. I see this all the time in promotional emails (spam, not phish) to track clickthrough.

Re: [EMAIL PROTECTED]: Mail delivery failed: returning message to sender]

2005-10-30 Thread Mathias Homann
Am Sonntag, 30. Oktober 2005 08:38 schrieb [EMAIL PROTECTED]: This domain is not a dialup and is a static IP address, and completely traceable to me. It has also never been involved in sending spam. If the anti-spam community start misbehaving the future is indeed bleak. ==John ffitch if

Hi, i have a good idea for a plugin/ruleset, where do i send it?

2005-10-21 Thread Mathias Homann
Hi, I have a good idea for a plugin/ruleset, where do i send it? bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

Re: Accessing descriptions of spam tests

2005-10-21 Thread Mathias Homann
Am Freitag, 21. Oktober 2005 14:48 schrieb Iain Smith: One of the reports is the top n most triggered spam tests. Does anyone know of an easy way to access the description of a test? I was hoping perhaps I could load one of the SpamAssassin modules and call a function, a la $desc =

Re: Hi, i have a good idea for a plugin/ruleset, where do i send it?

2005-10-21 Thread Mathias Homann
Am Freitag, 21. Oktober 2005 17:57 schrieb [EMAIL PROTECTED]: Mathias Homann wrote: Hi, I have a good idea for a plugin/ruleset, where do i send it? users@spamassassin.apache.org is a good place to assess how useful it would be to the community. Is this something you would write

Re: Hi, i have a good idea for a plugin/ruleset, where do i send it?

2005-10-21 Thread Mathias Homann
Am Freitag, 21. Oktober 2005 18:52 schrieb [EMAIL PROTECTED]: Mathias Homann wrote: anyways, I'd love to be able to give scores to a mail if its from a given email address but it is not pgp signed. Sounds like three rules should do the trick. Pseudo-rules follow: _FROM_JOE: From address