Re: Disable awl when some other rule hit

2014-03-20 Thread Matt Kettler
On 3/19/2014 1:44 PM, Joseph Brennan wrote: --On March 19, 2014 9:58:29 -0400 Kevin A. McGrail kmcgr...@pccc.com wrote: On 3/19/2014 5:14 AM, Nuno Fernandes wrote: Hello, Is it possible to disable awl (or at least score it 0.001) when a special rule hit like: if URIBL_DBL_SPAM

Re: Understanding spamhaus FP

2013-03-07 Thread Matt Kettler
On 3/7/2013 1:51 PM, Alex wrote: Hi, I received an email that was tagged with KHOP_SPAMHAUS_DROP, which means it was listed in the Spamhaus Don't Route Or Peer List. However, I've checked every IP and domain in the email, and none are listed on any spamhaus list, even as of a minute ago.

Re: How to change a database (configuration)

2011-06-02 Thread Matt Kettler
On 6/1/2011 10:37 AM, monolit wrote: Hello, I am a newbie in using Spamassassin. I need your help as for configuration of spamassasin. I use Debian Lenny Spamassassin 3.2.5 and I want to change database from Berkeley DB to SDBM (because this database was recommended me on this forum). 1) I

Re: Pyzor Server

2011-02-04 Thread Matt Kettler
On 2/4/2011 7:08 PM, User for SpamAssassin Mail List wrote: Hello, I don't keep constant eye on the mail server logs but did notice that pyzor was not working. I've ping the server that I've been using for years: # pyzor ping 82.94.255.100:24441 TimeoutError: And see it is not

Re: List Policy Question: Why no reply-to: header?

2011-01-30 Thread Matt Kettler
On 1/28/2011 5:28 PM, Benny Pedersen wrote: On Fri, 28 Jan 2011 17:00:02 -0500, Adam Moffett adamli...@plexicomm.net wrote: Is there any particular reason there can't be a reply-to: header added by the listserv? no its a mua problem to use list-post header when replying In this case, the

Re: List Policy Question: Why no reply-to: header?

2011-01-30 Thread Matt Kettler
On 1/31/2011 2:51 AM, Matt Kettler wrote: On 1/28/2011 5:28 PM, Benny Pedersen wrote: On Fri, 28 Jan 2011 17:00:02 -0500, Adam Moffett adamli...@plexicomm.net wrote: Is there any particular reason there can't be a reply-to: header added by the listserv? no its a mua problem to use list

Re: whitelist_return_path

2010-12-20 Thread Matt Kettler
On 12/19/2010 11:31 PM, jida...@jidanni.org wrote: Gentlemen, I wish there was a whitelist_from *...@facebookmail.com rule that would use the Return-Path field, $ egrep '^(From|Return-Path):' a b a:Return-Path: notification+zj4oo-6-6...@facebookmail.com a:From: Facebook

Re: user_prefs questions/problem

2010-09-21 Thread Matt Kettler
On 9/18/2010 4:57 PM, Chuck Campbell wrote: I have SA set up and working (mostly) on my mail machine, however I've put the following into my user_prefs: whitelist_from *...@zyngamail.com and whitelist_from_rcvd *...@zyngamail.com zyngamail.com and whitelist_allows_relays

Re: rule SCORE expected 2.356, seems to be 1.731

2010-09-10 Thread Matt Kettler
On 9/10/2010 6:55 PM, Dennis German wrote: Why does test TVD_APPROVED seem to have a score of TVD_APPROVED 2.356 2.599 2.599 2.090 on page http://spamassassin.apache.org/tests_3_3_x.html but the headers in my email show: X-Spam-testscores:

Re: unblacklist_from_rcvd

2010-09-07 Thread Matt Kettler
On 9/7/2010 7:11 PM, William Taylor wrote: I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com mail.foo.com whitelist_from_rcvd sa...@foo.com sales.foo.com

Re: Spamassassin not checking user provided RBLs

2010-09-04 Thread Matt Kettler
On 9/2/2010 8:24 AM, Chris Datfung wrote: On Thu, Sep 2, 2010 at 2:30 PM, Matt Kettler mkettler...@verizon.net mailto:mkettler...@verizon.net wrote: Can you try again using a message, such as the sample-spam.txt that comes with the SA tarball. spamassassin sample-spam.txt 21 -D

Re: Spamassassin not checking user provided RBLs

2010-09-02 Thread Matt Kettler
On 9/2/2010 3:08 AM, Chris Datfung wrote: On Thu, Sep 2, 2010 at 5:06 AM, Benny Pedersen m...@junc.org mailto:m...@junc.org wrote: On ons 01 sep 2010 22:47:36 CEST, Chris Datfung wrote header IN_NJABL_ORG rbleval:check_rbl('njabl','dnsbl.njabl.org.') describe

Re: Whitelist question

2010-08-24 Thread Matt Kettler
On 8/24/2010 1:13 PM, Alex wrote: Hi, For clarity: assuming your MTA inserts a Return-Path: header, or adds a clause to the Received header about the envelope sender, whitelist_from_rcvd will match against it, in addition to the From: header, and several other from-like headers. (however

Re: Whitelist question

2010-08-22 Thread Matt Kettler
On 8/21/2010 1:27 AM, Henrik K wrote: On Sat, Aug 21, 2010 at 08:16:58AM +0300, Henrik K wrote: You need to use _envelope_ sender (e.g. Return-Path), not From. Never mind, I was confusing it with spf and read the docs.. For clarity: assuming your MTA inserts a Return-Path: header, or adds a

Re: Whitelist question

2010-08-20 Thread Matt Kettler
On 8/20/2010 9:09 PM, Alex wrote: Hi, I'm trying to use whitelist_from_rcvd and it doesn't appear to be working. I'm trying to whitelist mail from the AZ lottery. Here are the headers from the email: Received: from AZMTAQS01.AZ.GOV (azmtaprd01.az.gov [159.87.126.8]) From: Arizona

Re: mkdir error in lint

2010-08-17 Thread Matt Kettler
On 8/16/2010 10:53 PM, Mark Chaney wrote: When run lint, im getting the following error: Aug 16 21:47:16.112 [4457] dbg: config: mkdir /var/www/.spamassassin failed: mkdir /var/www/.spamassassin: Permission denied at /usr/share/perl5/Mail/SpamAssassin.pm line 1853 Though i have no idea

Re: Updating spam signatures file

2010-08-16 Thread Matt Kettler
On 8/16/2010 10:19 PM, Suhag P Desai wrote: I gone throughhttp://wiki.apache.org/spamassassin/RuleUpdates Below is my version.. SpamAssassin Server version 3.2.5 running on Perl 5.8.8 with SSL support (IO::Socket::SSL 1.31) with zlib support (Compress::Zlib 2.024) I have two

Re: AWL demoted??

2010-08-11 Thread Matt Kettler
On 8/10/2010 7:55 PM, Dennis German wrote: On Jul 22, 2010, at 10:47 AM, Michael Scheidell wrote:... due to performance vs accuracy issues, AWL was demoted in SA 3.3x. Can you please define demoted. Changed from enabled by default to disabled by default,

Re: AWL demoted??

2010-08-11 Thread Matt Kettler
On 8/11/2010 1:30 PM, RW wrote: On Wed, 11 Aug 2010 07:48:11 -0400 Matt Kettlermkettler...@verizon.net wrote: 1) lack of expiry process causes unbounded database growth. There's a script to clean out single-hit entries, but multi-hit persist forever, even when stale. (there are no timestamps

Re: disable trusted_networks and internal_networks

2010-07-24 Thread Matt Kettler
On 7/23/2010 10:05 AM, Benny Pedersen wrote: On fre 23 jul 2010 04:49:40 CEST, Matt Kettler wrote Fair enough... I was keying off Benny's suggestion to lower the score of both ALL_TRUSTED and NO_RELAYS, the latter of which is never a good sign. as all in life it depends :=) grep NO_RELAYS

Re: disable trusted_networks and internal_networks

2010-07-22 Thread Matt Kettler
On 7/20/2010 9:07 AM, Bowie Bailey wrote: On 7/19/2010 8:23 PM, Matt Kettler wrote: On 7/16/2010 2:31 PM, Cliff Hayes wrote: Hello, Our webmail server is on the same server as sendmail and spamassassin. I would like to filter outbound webmail but can't because the most recent

Re: AWL observations

2010-07-22 Thread Matt Kettler
On 7/22/2010 10:32 AM, Eric A. Hall wrote: Sometimes the AWL rule doesn't appear in the list. That's correct. At the very least, The AWL is a score averager, so the first message from a given From: and source IP combination cannot be AWLed. This definitely will cause a no-show. You need an

Re: AWL observations

2010-07-22 Thread Matt Kettler
On 7/22/2010 10:47 AM, Michael Scheidell wrote: On 7/22/10 10:32 AM, Eric A. Hall wrote: Sometimes the AWL rule doesn't appear in the list. From looking at the due to performance vs accuracy issues, AWL was demoted in SA 3.3x. It might not be worth the cpu cycles Slight Correction: The

Re: disable trusted_networks and internal_networks

2010-07-19 Thread Matt Kettler
On 7/16/2010 2:31 PM, Cliff Hayes wrote: Hello, Our webmail server is on the same server as sendmail and spamassassin. I would like to filter outbound webmail but can't because the most recent versions of spamassassin have 127.0.0.1 trusted by default. How can I override this? Or is that

Re: First run score: 25.7 Second: 2.6

2010-07-14 Thread Matt Kettler
On 7/14/2010 11:27 AM, Emin Akbulut wrote: I noticed randomly while I was testing SA. All I did is below: WinSpamC realspam.txt result1.txt NET STOP Spamassassin NET START Spamassassin WinSpamC realspam.txt result2.txt WinSpamC realspam.txt result3.txt result1: under 6.3 result2:

Re: SpamAssassin Integration

2010-06-17 Thread Matt Kettler
On 6/17/2010 8:02 AM, Gnanam wrote: Frank Heydlauf-2 wrote: that will not give you the output you'd expect. Just create a complete mail with header and mime-encoded multipart etc and feed this into SA. How do I create a complete mail with header, etc.? Is there any standard/rule

Re: How do I get better processing/delivery times?

2010-06-10 Thread Matt Kettler
On 6/9/2010 7:51 PM, Spiro Harvey wrote: I maintain a mail cluster that gets about 70,000 messages a day per node. I'm just wondering if it's possible to decrease the scan times. In the TOTALS section AvgTm is the average scantime in the spamassassin log file: (Delivered are messages that

Re: Rules updates

2010-06-09 Thread Matt Kettler
On 6/9/2010 12:11 PM, LuKreme wrote: On 8-Jun-2010, at 19:34, Matt Kettler wrote: Legacy version, 3.2.5 (rarely updated) Even better: Unsupported version 3.2.5 (critical updates only) or Deprecated version: 3.2.5 (critical updates only, if at all) Well, unsupported

Re: Rules updates

2010-06-08 Thread Matt Kettler
On 6/8/2010 5:48 PM, James Ralston wrote: On 2010-05-21 at 03:09+02 Karsten Bräckelmann guent...@rudersport.de wrote: 3.2.x is in maintenance, and gets emergency rule updates *exclusively*. As it has been for quite a long time. 3.3.x uses a new rule update model, and gets frequent

Re: Rules updates

2010-06-08 Thread Matt Kettler
On 6/8/2010 11:22 PM, Alex wrote: Hi, We also very loudly repeatedly state on the list that if you want to keep abreast of the latest spam, you need to be running the latest version of the codebase (can't take advantage of new features without it!), but don't have that clearly

Re: Disable

2010-06-02 Thread Matt Kettler
On 6/2/2010 8:45 AM, Gabor Illo wrote: Can somebody know how can i disable this RCVD_IN_BL_SPAMCOP_NET? It's correct? echo score RCVD_IN_BL_SPAMCOP_NET 0 /usr/local/etc/mail/spamassassin/local.cf assuming that /usr/local/etc/mail/spamassassin/ is your site rules dir, yes. If in doubt,

Re: SpamAssassin scoring for zen-spamhaus listed emails

2010-05-31 Thread Matt Kettler
On 5/31/2010 10:51 AM, Dhaval Soni wrote: Dear All, I have installed MailScanner - 4.79 v with sendmail, spamassassin and clamav on CentOS. I have also enabled Spam List from MailScanner.conf and using spamhaus-ZEN for the same. So is it possible to give scoring of those emails which listed

Re: sa-update problem

2010-05-30 Thread Matt Kettler
On 5/29/2010 4:23 PM, Benny Pedersen wrote: On Sat 29 May 2010 10:06:08 PM CEST, Matt Kettler wrote The loadplugin should be near the bottom of the file and looks like this: # MIMEHeader - apply regexp rules against MIME headers in the message loadplugin Mail::SpamAssassin::Plugin

Re: sa-update problem

2010-05-29 Thread Matt Kettler
On 5/29/2010 2:58 PM, Gabor Illo wrote: Hello all! Can somebody know how can i fix this error? May 29 18:58:04 mail spamd[84958]: config: failed to parse line, skipping, in /var/db/spamassassin/3.003001/updates_spamassassin_org/72_active.cf: mimeheader __TVD_MIME_ATT_AOPDF Content-Type =~

Re: bayes_learn_to_journal 1 (should we eliminate journaling) - subject oops

2010-05-28 Thread Matt Kettler
On 5/27/2010 11:50 PM, Matt Kettler wrote: On 5/27/2010 11:53 AM, Matt wrote: Does 'bayes_learn_to_journal 1' in local.cf do anything yet? I thought in past it helped save on disk I/O Matt FYI, please ignore the should we ignore journaling. My original version of the email

Re: bayes_learn_to_journal 1 (should we eliminate journaling)

2010-05-27 Thread Matt Kettler
On 5/27/2010 11:53 AM, Matt wrote: Does 'bayes_learn_to_journal 1' in local.cf do anything yet? I thought in past it helped save on disk I/O Matt Actually it will *increase* disk I/O during journal syncs by making the synced dataset larger. During all other times, this has no affect on

Re: Mail Delivery Failure

2010-05-19 Thread Matt Kettler
On 5/19/2010 6:08 AM, Ned Slider wrote: Chris wrote: All my post contained was my scores for the spam sample he posted. Any reason how/why this happened? Here's the actual post: http://pastebin.com/gSuHGqXa The scores also contain URIs that were matched against URIBLs so any email

Re: GPL rules

2010-05-03 Thread Matt Kettler
On 4/29/2010 11:07 PM, Luis Daniel Lucio Quiroz wrote: Hi all, I wonder if someone knows about GPL rules for SA, i know the SARE what others? TIA LD I assume by GPL you mean free to use. There's a bit of a list in the wiki at: http://wiki.apache.org/spamassassin/CustomRulesets

Re: Bayes spam and ham out of proportion

2010-04-29 Thread Matt Kettler
On 4/29/2010 8:25 AM, Frank Bures wrote: I've been running spamassassin for years. I am using auto-learn with very conservative thresholds. However, after several years of usage my spam database is about three time larger than my ham database and I am starting to see false positives. Is

Re: accepted connection from DNSBL's

2010-04-13 Thread Matt Kettler
On 4/13/2010 3:30 PM, Jean-Paul Natola wrote: -- var/log/exim/mainlog:2010-04-13 14:24:17 Connection from [110.139.156.19] refused: too many connections /Jason Ideally, correct me if I'm wrong, wouldn't I want SA to drop the connection after doing a lookup on the IP or are you saying

Re: AWL

2010-04-12 Thread Matt Kettler
On 4/9/2010 4:33 PM, Dennis B. Hopp wrote: I have AWL enabled and it seems to be ok with helping out legitimate senders that occasionally send a spammy type message, but lately I have seen an increase where AWL is adding a negative score to a very blatant spam. As long as it's not

Re: non-existing rule with sa-update

2010-04-06 Thread Matt Kettler
On 4/4/2010 12:35 PM, Cecil Westerhof wrote: When running sa-update with -D I see when there are updates the folowing lines: Apr 4 18:26:15.954 [12630] dbg: config: warning: score set for non-existent rule SHORTCIRCUIT Apr 4 18:26:15.957 [12630] dbg: config: warning: score set for

Re: Is report_safe broken?

2010-04-01 Thread Matt Kettler
On 4/1/2010 11:38 AM, Michael Weber wrote: eetings, again. spamassassin --lint runs clean. I re-entered the line by hand and deleted the original so that shouldn't be an issue. I also reviewed the configuration file location list and there are no other local.cf files or user_prefs files

Re: sa-update

2010-03-31 Thread Matt Kettler
On 3/31/2010 7:02 AM, Andrea Bencini wrote: I installed with yum lhe following pakages: postfix, amavisd-new and spamassassin. I have *.cf in /usr/share/spamassassin/ directory and now I would like update them. Is it possible? with sa-update? If yes which is the complete command to use to

Re: Is report_safe broken?

2010-03-31 Thread Matt Kettler
On 3/31/2010 12:34 PM, Michael Weber wrote: Greetings! I upgraded SA from version 3.2.5 to 3.3.1 this morning. Since that time all of the emails that are marked as spam are being converted to attachments. One other oddity. If you look close at the rewrite_header Subject line, you will

Re: Confused about how to use sa-update

2010-03-31 Thread Matt Kettler
On 3/31/2010 9:10 PM, Phill Edwards wrote: But I don't understand how to use sa-update. I've run it and I can see all the new rule files in /var/lib/spamassassin/3.002005. However, I think my rules run off the files in /usr/share/spamassassin/. The wiki at

Re: trusted_networks

2010-03-29 Thread Matt Kettler
On 3/29/2010 11:40 AM, Kaleb Hosie wrote: I'm having a problem with the trusted_networks option. Right now I have it set to: trusted_networks 10.0.1/24 In postfix, I need to have spamassassin listed under smtpd_recipient_restrictions so that it will only scan incoming emails however it

Re: Rules correct ?

2010-03-22 Thread Matt Kettler
On 3/22/2010 9:11 AM, Joseph Brennan wrote: header__MY_FILTRAGE_TO_93 To =~ /\...@exxent\.net/i This matches if @exxent.net is in the To: header line. It doesn't match all mail sent to recipients at exxent.net-- only mail with their address in the To: header line. Of course

Re: Checking to see if multiple types of headers exist

2010-03-18 Thread Matt Kettler
On 3/18/2010 6:41 AM, Ned Slider wrote: Julian Yap wrote: I'm trying to consolidate some rules I have. I'm wondering if there's a way to see if multiple types of headers exist. eg. Currently separate rules: header CMN_LIST_1 exists:X-Campid describe CMN_LIST_1 Mail comes from a common

Re: Bayes and Plugin Tokens

2010-03-18 Thread Matt Kettler
On 3/17/2010 8:32 PM, RW wrote: The ASN and RelayCountry plugins are supposed to add extra tokens to Bayes. However, I don't see any evidence that this is happening (in 3.3.0). In a test message I see: bayes: header tokens for X-Relay-Countries = GB GB ** ** GB GB but don't see any

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Matt Kettler
On 3/16/2010 8:27 AM, RW wrote: On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) Toralf toralf.foers...@gmx.de wrote: At my stable Gentoo I see this : n22 /var/lib/spamassassin/3.002005 # head -n 1 updates_spamassassin_org.cf # UPDATE version 895075 and now I'm wondering whether I can compare

Re: Whitelist isn't working

2010-03-16 Thread Matt Kettler
On 3/16/2010 8:14 AM, Mark Martinec wrote: Phill, def_whitelist_from_rcvd *...@posts.freecycle.org posts.freecycle.org Received: from bulkmail2.freecycle.org ([95.172.20.170]) by mscip02.mailsentry.net.au with ESMTP; 16 Mar 2010 17:51:21 +1100 From: frances.dejong

Re: rules

2010-03-09 Thread Matt Kettler
On 3/8/2010 2:33 PM, Renata Dias wrote: Some messages receive score 0.00/0.00 and other receive the correct score like the example below. 0/0 generally indicates the message was not scanned at all. The big giveaway is the threshold is 0, instead of 6.0. I'm not really an expert on simscan,

Re: rules

2010-03-09 Thread Matt Kettler
On 3/8/2010 4:31 PM, Kai Schaetzl wrote: Renata Dias wrote on Mon, 8 Mar 2010 16:33:15 -0300: Some messages receive score 0.00/0.00 and other receive the correct score like the example below. First: there's no evidence that these messages *should* score anything. Yes, but is

Re: UPS Delivery problem

2010-03-03 Thread Matt Kettler
On 3/3/2010 8:22 AM, twofers wrote: I have 52 of these sitting in my inbox this morning when I came in to work. this is just the beginning. I get literally hundreds of these a day and Spamassassin does not even check them. Thats hundreds of these every day for weeks and weeks and weeks on

Re: Setting Blacklist_from and whitelist_to

2010-02-28 Thread Matt Kettler
On 2/28/2010 8:50 AM, damuz wrote: Hi all. I've very recently had the problem of sorting out my work's email spam dropped on my lap and to be honest, I know a little but a little knowledge can be a dangerous thing... Anyhow. Having spent the last few days making as sure as I can be that

Re: Rationale behind FREEMAIL_ENVFROM_END_DIGIT?

2010-02-20 Thread Matt Kettler
On 2/20/2010 10:39 AM, Jari Fredriksson wrote: On 20.2.2010 17:29, LuKreme wrote: On 20-Feb-2010, at 08:21, Jari Fredriksson wrote: I just found this rule in SA 1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit

Re: X-Spam-Languages always blank?

2010-02-14 Thread Matt Kettler
On 2/13/2010 9:49 AM, Robert Nicholson wrote: ok looks like my problem is because I'm reprocessing a message that already has an X-Spam-Languages: nothing header in it. I expected that it wouldn't matter that it was there as it would be removed and populated accordingly but that is only

Re: SA 3.30 question: redundant index in bayes?

2010-02-13 Thread Matt Kettler
On 2/13/2010 11:33 AM, David Morton wrote: So token was both a primary key, and an index, which is redundant. How is that redundant? If you search for only a token, it would not be indexed, and would perform very poorly. Because it is the primary key, which is by definition, an index!!!

Re: X-Spam-Languages always blank?

2010-02-12 Thread Matt Kettler
On 2/12/2010 10:50 PM, Robert Nicholson wrote: I have Feb 12 19:35:31.669 [81642] dbg: textcat: X-Languages: en, X-Languages-Length: 424 in my testing but the X-Spam-Languages ends up with nothing I have in my user_prefs add_header all Languages _LANGUAGES_ Is the

Re: SA 3.30 question: redundant index in bayes?

2010-02-12 Thread Matt Kettler
On 2/12/2010 2:51 PM, Michael Scheidell wrote: I looked at our bayes schema and at the schema in ../docs/sql/bayes_mysql.sql and I can't find the redundant index mentioned in the SA 3.30 upgrade/changes documents. did I miss something? or did I remove it years ago anyway? A quick diff of

Re: Hi to all

2010-02-08 Thread Matt Kettler
On 2/8/2010 9:52 AM, Tsabolov Sergey wrote: I have some little problem with SpamAssassin SpamAssassin with MailScanner . I set the rule in mailscanner # This can also be the filename of a ruleset. Cache SpamAssassin Results = yes SpamAssassin Cache Database File =

Re: update the wiki?

2010-02-05 Thread Matt Kettler
On 2/4/2010 5:35 AM, Kārlis Repsons wrote: People, in trying to set up Razor2 sitewide, I found some things, which were not so good about the wikipage [1]. As per me, it would be this way (and it works): I What was wrong 1. no need calling razor-client 2. no need to touch

Re: update the wiki?

2010-02-05 Thread Matt Kettler
On 2/5/2010 7:51 AM, Matt Kettler wrote: Its not clear to me in what cases should -C /etc/mail/spamassassin be added to calling spamassassin. Maybe /etc/mail/spamassassin is in some default path? (as it works without -C .. for me) That clearly needs fixing. -C should *NEVER

Re: Whitelist on List-ID

2010-01-21 Thread Matt Kettler
On 1/21/2010 10:46 PM, Alex wrote: Hi, I belong to several mailing lists and newsgroups. Messages from one particular list is almost always marked as spam by spamassassin. I've tried to whitelist this group but the from header matches the address of the original message sender, not the

Re: sa 3.2.1 FH_DATE_PAST_20XX

2010-01-14 Thread Matt Kettler
On 1/14/2010 8:55 PM, Benny Pedersen wrote: since 3.2.1 is still stable in gentoo portage would make sense to update rules on this for that bug ? Since, and 3.2.5 was released in June of 2008, and it's currently January of 2010, wouldn't it make sense for gentoo to either: 1) abandon the

Re: Warnings in mail.log: no meta_dependencies defined, Use of uninitialized value in split, Use of uninitialized value in concatenation

2010-01-07 Thread Matt Kettler
On 1/7/2010 9:14 PM, Matt Doran wrote: Hi guys, I was recently doing some reconfigurating/optimization of our SpamAssassin setup. And I've started seeing the following entries in the mail.log. They don't appear for every mail processed, but it does happen multiple times a day. I'm

Re: Warnings in mail.log: no meta_dependencies defined, Use of uninitialized value in split, Use of uninitialized value in concatenation

2010-01-07 Thread Matt Kettler
Matt Doran wrote: Matt Kettler wrote: On 1/7/2010 9:14 PM, Matt Doran wrote: Hi guys, I was recently doing some reconfigurating/optimization of our SpamAssassin setup. And I've started seeing the following entries in the mail.log. They don't appear for every mail processed

Re: ALL_TRUSTED rule no longer working

2010-01-06 Thread Matt Kettler
On 1/6/2010 3:43 PM, Julian Yap wrote: On Tue, Jan 5, 2010 at 5:12 PM, Matt Kettler mkettler...@verizon.net mailto:mkettler...@verizon.net wrote: On 1/5/2010 8:03 PM, Julian Yap wrote: Previously I was running SpamAssassin-3.1.8_1 on FreeBSD. I recently upgraded to 3.2.5_4

Re: spamassassin or spamd with amavisd-new?

2010-01-05 Thread Matt Kettler
On 1/5/2010 6:09 AM, Angel L. Mateo wrote: Hello, Because FH_DATE_PAST_20XX bug, I have found that when I run spamassassin through amavisd-new (in a postfix server) I need to restart spamassassin and amavisd-new after any change in spamassassin. Debugging this, I found that

Re: ALL_TRUSTED rule no longer working

2010-01-05 Thread Matt Kettler
On 1/5/2010 8:03 PM, Julian Yap wrote: Previously I was running SpamAssassin-3.1.8_1 on FreeBSD. I recently upgraded to 3.2.5_4. It's seems now, I never get any hits on the rule ALL_TRUSTED. Previously it seemed like SA was doing some kind of dynamic evaluation which was working well. -

Re: Sharing and merging bayes data?

2009-12-17 Thread Matt Kettler
On 12/17/2009 2:50 AM, Rajkumar S wrote: Hello, I have 2 SA servers running for a single domain. Both were primed with a set of 200 spam and ham messages are are now auto learning. After about a day both have auto learned different numbers of ham and spam mails. Is it possible to merge the

Re: Sharing and merging bayes data?

2009-12-17 Thread Matt Kettler
On 12/17/2009 11:17 AM, RW wrote: If you're using file-based bayes, there's no good way to share updates between one DB and the other. The information needed to make such a merger successful isn't stored, because it is not needed for any reason within SpamAssassin. The database merely

Re: Possible to whitelist *all* incoming emails that contain specific text in the subject line?

2009-12-08 Thread Matt Kettler
nathang wrote: Hi, I'd like to setup an email account in cPanel so that I receive *all* incoming emails that contain a specific word in the subject line. It would be critical that I get 100% of the emails sent to me (that contain a specific word in the subject line), and that none of them

Re: Language detection in TextCat

2009-12-06 Thread Matt Kettler
Marc Perkel wrote: I'm wondering if the language detection in TextCat can be improved. Here's the situation. It appears that TextCat was designed to be inclusive. You list the languages you want and it returns many possibilities so as not to trigger unwanted falsely. What I'm doing is

Re: Clear Database Question

2009-12-04 Thread Matt Kettler
Jason Carson wrote: Hello everyone, Is it necessary to clear the database... sa-learn --clear ...before I run the following to train SpamAssassin's bayesian classifier... sa-learn --spam /home/jason/.maildir/.Spam/cur/ No. That would be ill advised. Running --clear deletes your

Re: Scoring for DATE_IN_FUTURE_96_XX

2009-12-01 Thread Matt Kettler
Thomas Harold wrote: On 11/30/2009 9:27 PM, Thomas Harold wrote: While looking at the scores in 50_scores.cf, I noticed the following: score DATE_IN_FUTURE_03_06 2.303 0.416 1.461 0.274 score DATE_IN_FUTURE_06_12 3.099 3.099 2.136 1.897 score DATE_IN_FUTURE_12_24 3.300 3.299 3.000 2.189

Re: X_Report_Header

2009-11-29 Thread Matt Kettler
Daniel D Jones wrote: Running 3.2.5 under Debian Etch. I'm trying to add the Spamassassin X_Report_Header. Per the website at http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html report_safe ( 0 | 1 | 2 ) (default: 1) ... If this option is set to 0, incoming spam is

Re: SpamAssassin 3.3

2009-11-22 Thread Matt Kettler
LuKreme wrote: Is there a roadmap for the release of SA 3.3? Probably the best roadmap would be to look at the list of bugs assigned against 3.3.0 https://issues.apache.org/SpamAssassin/buglist.cgi?query_format=advancedbug_status=NEWbug_status=ASSIGNEDbug_status=REOPENEDversion=3.3.0 a

Re: Problem with sa-blacklist

2009-11-21 Thread Matt Kettler
Michael Monnerie wrote: I can't reach Bill Stearns, so I try at this list: Dear Bill, I'm using the sa-blacklist.reject for postfix since a long time, but these last days your rsync doesn't work anymore: rsync: failed to connect to rsync.sa-blacklist.stearns.org: Connection timed out

Re: Relation bettwen MAIL FROM: and From:

2009-11-12 Thread Matt Kettler
Luis Daniel Lucio Quiroz wrote: Hi All, I'm wondering if some know is this is possible to stop using SA. Look. MAIL FROM and From: are commonly mismatched in legitimate mail. For example, every message that you receive from this list (and every other sanely configured mailing list) will have

Re: Development dead

2009-11-11 Thread Matt Kettler
Anatoly Pugachev wrote: On 04.11.2009 / 09:20:16 -0500, Bowie Bailey wrote: polloxx wrote: Hi, Is the spamassassin development dead? On the website there's: 2008-06-12: SpamAssassin 3.2.5 has been released. Not quite. If you look at svn, you'll see this:

Re: New to Spamassassin. Have a few ?s...

2009-11-08 Thread Matt Kettler
Computerflake wrote: I'm looking into a free spam filter that can do the following. Will Spamassassin do these things? 1) Will it filter multiple domains so I can filter for many different companies? Sure. Depending on how you set it up, you can even have per-domain customization of the

Re: About log generation

2009-11-08 Thread Matt Kettler
Jose Luis Marin Perez wrote: Dear friends, There is some configuration of SA to generate different logs and these are for each mail domain? spamd, like most well behaved unix daemons, uses syslog. It doesn't write logfiles directly. The old-school approach to this would be to run several

Re: update does not work correctly?

2009-10-23 Thread Matt Kettler
klop...@gmx.de wrote: Hi, I use Spamassassin 3.2.5 with CentOS On October 20 I startet an update with this commands: sa-update --channel updates.spamassassin.org When I start now the update, the date of the folder and file in /var/lib/spamassassin/3.002005 does not change. It is

Re: How can i block blank messeage mail

2009-10-22 Thread Matt Kettler
cofe2003 wrote: i find SA will not scan a mail if messeage is blank . so ,i want score all of blank messeages mails is 6.00 how can i do? my SA version is 3.17 thanks That's odd. SA should scan it, unless it is so blank there aren't even any headers. How have you integrated SA into

Re: Valid mail from blacklisted dynamic IPs

2009-10-08 Thread Matt Kettler
MySQL Student wrote: Hi, I have a set of users that are authorized to use the mail server via pop-before-smtp, but SA catches the mail they send through the system as spam because they are on blacklisted Verizon or Comcast IPs: X-Spam-Status: Yes, hits=5.4 tag1=-300.0 tag2=5.0 kill=5.0

Re: results in languages other than english

2009-10-08 Thread Matt Kettler
ahattarki wrote: The spamassassin report comes back in English. Is this configurable to return results in languages other than english. Also can a single spamassassin handle returning results in different languages. One user gets the results back in English, while another gets the results

Re: SpamAssassin Ruleset Generation

2009-10-06 Thread Matt Kettler
poifgh wrote: I have a question about - understanding how are rulesets generated for spamassassin. For example - consider the rule in 20_drugs.cf : header SUBJECT_DRUG_GAP_C Subject =~ /\bc.{0,2}i.{0,2}a.{0,2}l.{0,2}i.{0,2}s\b/i describe SUBJECT_DRUG_GAP_C Subject contains a

Re: New spamhaus list not included

2009-10-04 Thread Matt Kettler
Mike Cardwell wrote: SpamHaus announced a new list a couple of days back - http://www.spamhaus.org/news.lasso?article=646 According to that page it returns results of 127.0.0.3 I just took a quick look at 20_dnsbl_tests.cf and it doesn't seem to include it yet. Currently we have:

Re: SQL Bayes behavior

2009-09-29 Thread Matt Kettler
pm...@email.it wrote: Hi, I've few question about the behavior of Bayes and SQL. Before the questions, i've followed this tutorial http://www200.pair.com/mecham/spam/debian-spamassassin-sql.html that should be the same thing of this:

Re: 3.3.0 and sa-compile

2009-09-25 Thread Matt Kettler
to...@starbridge.org wrote: Benny Pedersen a écrit : On fre 25 sep 2009 13:38:19 CEST, to...@starbridge.org wrote I've tested with SA 3.2.5 and it's working fine with Rule2XSBody active. I've tried to delete compiled rules and compile again: same result. forget to sa-compile in 3.3 ?

Re: partial (lazy) scoring? (shortcircuit features)

2009-09-24 Thread Matt Kettler
Matus UHLAR - fantomas wrote: Matt Kettler mkettler_sa at verizon.net writes: In theory, a feature could be added to let you do something like this (SA doesn't have this feature, but I'm proposing it could be added): On 22.09.09 11:46, ArtemGr wrote: That would be a nice

Re: partial (lazy) scoring? (shortcircuit features)

2009-09-22 Thread Matt Kettler
ArtemGr wrote: I would like to configure Spamassassin to only do certain tests when the required_score is not yet reached. For example, do the usual rule-based and bayesian tests first, and if the score is lower than the required_score, then do the DCC and RAZOR2 tests. Is it possible?

Re: Re-running SA on an mbox

2009-09-20 Thread Matt Kettler
MySQL Student wrote: Hi, I have an mbox with about a 100 messages in it from a few days ago. The mbox is a combination of spam and ham. What is the best way to run SA through these messages again, so I can catch the ones that have URLs in them that weren't on the blacklist at the time they

Re: Re-running SA on an mbox

2009-09-20 Thread Matt Kettler
MySQL Student wrote: Hi, Do you just want to re-scan the whole mbox and see what rules hit now for research reasons? That's a good start, but I'd like to see if I can break out the ham to train bayes. There's no way to (directly) get SA to modify email that's already in an

Re: Re-running SA on an mbox

2009-09-20 Thread Matt Kettler
Theo Van Dinter wrote: You probably want spamassassin --mbox. :) It won't modify the messages in-place, but you can do something like spamassassin --mbox infile outfile. If you're talking about sa-learn, though, it also knows --mbox. Yes, but he's got mixed spam and nonspam in one mbox.

Re: Does Spam Assassin support additional languages?

2009-09-15 Thread Matt Kettler
Chris Arrendale wrote: I am running version 3.2.4 and interested to know if there are additional language packs for Spam Assassin such as German, Turkish, Chinese, etc.? If they are available, does anybody know where I can download them? There are a few language packs that come with SA.

Re: URL rule creation question

2009-09-11 Thread Matt Kettler
McDonald, Dan wrote: From: Matt Kettler [mailto:mkettler...@verizon.net] This rule should detect 10 consecutive occurrences. uri L_URI_FUNNYDOTS /(?:\.[a-z,0-9]{2}\.){10} Warning: I wrote this quickly without too much thought. It may have bugs, but I'm short on time at the moment

Re: URL rule creation question

2009-09-10 Thread Matt Kettler
MySQL Student wrote: Hi all, I've seen this pattern in spam quite a bit lately: snip - URI that verizon won't let me send Would it be reasonable to create a rule that looks for this two-char then dot pattern, or is it reasonable that it might appear in a legitimate email too frequently?

  1   2   3   4   5   6   7   8   9   10   >