qmail+mysql+spamassassin
Hello, I'm using qmail-1.03 with mysql-3.x thanks to (http://www.softagency.co.jp/mysql/pro/README.qmail) and I would like to add some spam protection. There is no problem with intalling spamd/spamc with mysql and get it working, but I have no idea how to let users set their own white lists etc. Every mail that come to serwer is automaticly assign to user vmail, Is there any patch to spamassassin that reads To: field or any other way to solve my problem? -- Rafał Michaluk http://www.michaluk.pl/
Re: 25_uribl.cf
Thx: yes i should have looked in mimedefang list for this info So did i, this is de answer: In mimedefang-filter set : $SALocalTestsOnly=0- Original Message - From: Fred [EMAIL PROTECTED] To: Montse Seisdedos [EMAIL PROTECTED]; users@spamassassin.apache.org Sent: Wednesday, June 22, 2005 9:45 PM Subject: Re: 25_uribl.cf You need to set the option in MIMEDefang to allow network tests to run in SpamAssassin. I'm fairly sure it's in your mimedefang-filter file. Check with the MIMEDefang folks if you need more help. Montse Seisdedos wrote: Hello: I use mimedefang+spamassassin+clanv kit. I can't get these rules (25_uribl.cf) to work properly.
Simple Meta
New user. FreeBSD, SA 2.6.3. I am trying to create a meta rule which will assign a negative value if a password appears in either the Subject or Body. Following an example by Matt Kettler in his SA-rules-howto.txt, I came up with the following: header __VV_PassKeyH Subject =~ /VV/i body __VV_PassKeyB /VV/i meta VV_Passkey ( ( __VV_PassKeyH + __VV_PassKeyB ) 1 ) scoreVV_PassKey -10 It works, sorta, in that the passkey in either the body or the subject triggers it, but it gets scored as +1, not -10. In my first effort to create a password, I used two separate rules, one for header, one for body, which properly assigned the negative score, so I know I can do it that way. Any help most appreciated. Matt -- A vacuum is a hell of a lot better than some of the stuff that nature replaces it with. --Tennessee Williams
RE: Simple Meta
Hi Matt, I cut-n-pasted your rule into my local.cf and sure enough it got a 1.0 score. That is the default score assigned to a rule with no declared score. So I scrutinized your rule and discovered that you capitalized the K in the score line but not in the meta line. Since rule names are case sensitive, the score did not associate with the rule. Note that you could simplify the meta rule to a simple AND statement: meta VV_Passkey __VV_PassKeyH __VV_PassKeyB Good luck Pierre Thomson BIC -Original Message- From: Matt Wills [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 8:00 AM To: users@spamassassin.apache.org Subject: Simple Meta New user. FreeBSD, SA 2.6.3. I am trying to create a meta rule which will assign a negative value if a password appears in either the Subject or Body. Following an example by Matt Kettler in his SA-rules-howto.txt, I came up with the following: header __VV_PassKeyH Subject =~ /VV/i body __VV_PassKeyB /VV/i meta VV_Passkey ( ( __VV_PassKeyH + __VV_PassKeyB ) 1 ) scoreVV_PassKey -10 It works, sorta, in that the passkey in either the body or the subject triggers it, but it gets scored as +1, not -10. In my first effort to create a password, I used two separate rules, one for header, one for body, which properly assigned the negative score, so I know I can do it that way. Any help most appreciated. Matt -- A vacuum is a hell of a lot better than some of the stuff that nature replaces it with. --Tennessee Williams
RE: Simple Meta
At 08:10 AM 6/23/2005, you wrote: I cut-n-pasted your rule into my local.cf and sure enough it got a 1.0 score. That is the default score assigned to a rule with no declared score. So I scrutinized your rule and discovered that you capitalized the K in the score line but not in the meta line. Since rule names are case sensitive, the score did not associate with the rule. OK, live and learn: more attention to detail required. Thanks. Note that you could simplify the meta rule to a simple AND statement: meta VV_Passkey __VV_PassKeyH __VV_PassKeyB Yup, saw that, but I want an OR situation, so that the sender could put the password in either place. Matt
RE: Simple Meta
An OR statement can be constructed like this: meta VV_Passkey __VV_PassKeyH || __VV_PassKeyB Your original rule would function as an AND, since the sum has to be greater than 1. meta VV_Passkey ( ( __VV_PassKeyH + __VV_PassKeyB ) 1 ) Pierre -Original Message- From: Matt Wills [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 8:29 AM To: users@spamassassin.apache.org Subject: RE: Simple Meta At 08:10 AM 6/23/2005, you wrote: I cut-n-pasted your rule into my local.cf and sure enough it got a 1.0 score. That is the default score assigned to a rule with no declared score. So I scrutinized your rule and discovered that you capitalized the K in the score line but not in the meta line. Since rule names are case sensitive, the score did not associate with the rule. OK, live and learn: more attention to detail required. Thanks. Note that you could simplify the meta rule to a simple AND statement: meta VV_Passkey __VV_PassKeyH __VV_PassKeyB Yup, saw that, but I want an OR situation, so that the sender could put the password in either place. Matt
Re: {SPAM} .cf files in /etc/mail/spamassassin apparentely are not being used....
On Wednesday 22 June 2005 19:42, you wrote: My concern is if those .cf files are really being parsed (even after leaving only init.pre and local.cf in /etc/mail/sapmassassin ) as far as mail boxes are receiving mail containing words like those forbiden in 20_drugs.cf found in /usr/share/spamassassin. Helio Nunes Helio Nunes wrote: I have installed the last version 3.04 using Linux Qmail Toaster (Bill Shupp) version 0.7.12 together clamav, ripmime, and simscan 1.1. Linux distr. is Suse 9.2. Actually I expected these filterings being done through 20_drugs.cf and 20_porn.cf that I have put in /etc/mail/spamassassin. First, stop. Delete the above files from /etc/mail/spamassassin. The default rulesets that come with SA belong in /usr/share/spamassassin, and should have been put there by the installer. Only add-ons, init.pre, and local.cf belong in /etc/mail/spamassassin. SA will automatically parse all .cf files it finds in both directories, and by putting duplicate copies in you're double-parsing the rules. Also, future upgrades may bomb, as the installer does not remove files from /etc/mail/spamassassin. init.cf and local.cf are apparentely operatives as far my messages are being tagged with the string I put in local.cf: rewrite_header subject *VERIFICAR*SPAM* Onyone ..any idea ?? Erm.. What exactly is it that you expect to be happening? It sounds like things are working as they should. SA is detecting the message as spam, and adding your subject tag. What am I missing? -- Helio Nunes [EMAIL PROTECTED] Sao Paulo
RE: shared SQL DB
Hey Michael - In the presentation you provided, I have a question re: the AWL and the lastupdate table column. First off - it won't allow me to create the column w/o a default value (since it's not null). All 0's are fine - but when I tested it, each row inserted had that default value in it, instead of the true timestamp. Is there something I have to modify to get it to insert/update the current time into that row? -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Tuesday, June 14, 2005 1:23 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB Great stuff. Thank you Michael, I'll let you know how it goes. -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 14, 2005 1:17 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Care to explain how you've come to set this up? We run an ISP-type solution w/ two identical qmail-scanner/SA/clamav servers set up for load-balancing purposes (network edge device decides which server to use at all times). We'd like to consolidate bayes db, auto-whitelist settings, and logs to one location (all mysql db possibly?) so we can generate stats and keep bayes/auto-whitelist lists current on both machines. This should help with the SQL side, at least with SA proper: http://people.apache.org/~parker/presentations/ For logging, man syslog. You can send your syslogs to a remote server and parse them from there. Michael
merges bayes DB???
Is there a way to merger 2 (or more)bayes DBs? Im still reading up on the MySQL option to my 2 servers but a stop-gap solution would be to merge the two DBs nightly and let them run as normal during the day... Ronan ps ive man'd sa-learn and saw nothing relevant so i presume I cant
Re: Simple Meta
Matt Wills wrote: At 08:10 AM 6/23/2005, you wrote: OK, live and learn: more attention to detail required. Thanks. Note that you could simplify the meta rule to a simple AND statement: meta VV_Passkey __VV_PassKeyH __VV_PassKeyB Yup, saw that, but I want an OR situation, so that the sender could put the password in either place. Just use the body rule, eliminate the subject rule entirely. SA considers the subject text to be a part of the body, and all body rules will match the subject line. However, if you need an OR in the future, use || instead of . This rule: meta VV_Passkey ( ( __VV_PassKeyH + __VV_PassKeyB ) 1 ) Requires both to match, since it is adding up the count and takes a 2 to be greater than 1. Since there's 2 sub-rules, both must match to be 1. This would work as you desire: meta VV_Passkey ( ( __VV_PassKeyH + __VV_PassKeyB ) 0 ) But, really a || operator would be more efficient, and more efficient still would be to only use a body rule.
Re: merges bayes DB???
Ronan McGlue wrote: Is there a way to merger 2 (or more)bayes DBs? Short answer, No. Long answer, search the users list. Michael signature.asc Description: OpenPGP digital signature
Re: shared SQL DB
Matthew Yette wrote: Hey Michael - In the presentation you provided, I have a question re: the AWL and the lastupdate table column. First off - it won't allow me to create the column w/o a default value (since it's not null). All 0's are fine - but when I tested it, each row inserted had that default value in it, instead of the true timestamp. Is there something I have to modify to get it to insert/update the current time into that row? You used the timestamp column type? You shouldn't need a default value with the timestamp type. What version of MySQL? What does your create table statement look like? Michael signature.asc Description: OpenPGP digital signature
RE: shared SQL DB
Thanks for the resoponse Michael. Apparently I created the table w/o the lastupdate column, then tried to add in the column later. Doesn't seem to work that way - you need to create it ala your create table statement in the presentation. Works now, though. Thanks! Matt -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 12:28 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Hey Michael - In the presentation you provided, I have a question re: the AWL and the lastupdate table column. First off - it won't allow me to create the column w/o a default value (since it's not null). All 0's are fine - but when I tested it, each row inserted had that default value in it, instead of the true timestamp. Is there something I have to modify to get it to insert/update the current time into that row? You used the timestamp column type? You shouldn't need a default value with the timestamp type. What version of MySQL? What does your create table statement look like? Michael
SA v3.0.4 install error
Hello, fellow SA admins. I'm installing SA v3.0.4 for the first time, and I'm running into a problem that I hope someone on here can tell me how to fix. The System: Solaris 8 on Sparc Perl v5.8.5 (with ExtUtils::MakeMaker v6.17) gcc v3.3.2 Other software: MIMEdefang v2.52, ClamAV v0.85.1, sendmail v8.13.4 This system is a mail relay, with no local user accounts. SA will be invoked by MIMEDefang, not via procmail or with spamd. MIMEDefang runs fine, and it relies heavily on Perl, so I'm pretty sure that my Perl install in /opt/perl is OK. I download and unpack the SA source, and then build the Makefile with: /usr/bin/perl ./Makefile.PL PREFIX=/opt/sa DATADIR=/opt/sa/rules CONFDIR=/opt/sa/conf LIB=/opt/perl/lib/site_perl/5.8.5 Makefile is generated just fine, and make doesn't have any problems. make test reports: All tests successful, 7 tests skipped. make install also runs without error. Two Issues: 1) Despite having Pod::Man installed, no man pages get installed (or even created, as far as I can tell). How can I get the man pages created? 2) After installing SA, MIMEDefang sees it, but I get the error message No configuration text or files found! Please check your setup. when I try to do anything. This error message vanishes if I remove SA, and re-appears when I reinstall it, so I'm pretty sure its an SA-related error. What configuration is it looking for, where is it looking, and how do I give it what it wants? Dirk
Re: SA v3.0.4 install error
Hello, fellow SA admins. I'm installing SA v3.0.4 for the first time, and I'm running into a problem that I hope someone on here can tell me how to fix. The System: Solaris 8 on Sparc Perl v5.8.5 (with ExtUtils::MakeMaker v6.17) gcc v3.3.2 Other software: MIMEdefang v2.52, ClamAV v0.85.1, sendmail v8.13.4 This system is a mail relay, with no local user accounts. SA will be invoked by MIMEDefang, not via procmail or with spamd. MIMEDefang runs fine, and it relies heavily on Perl, so I'm pretty sure that my Perl install in /opt/perl is OK. I download and unpack the SA source, and then build the Makefile with: /usr/bin/perl ./Makefile.PL PREFIX=/opt/sa DATADIR=/opt/sa/rules CONFDIR=/opt/sa/conf LIB=/opt/perl/lib/site_perl/5.8.5 Makefile is generated just fine, and make doesn't have any problems. make test reports: All tests successful, 7 tests skipped. make install also runs without error. Two Issues: 1) Despite having Pod::Man installed, no man pages get installed (or even created, as far as I can tell). How can I get the man pages created? 2) After installing SA, MIMEDefang sees it, but I get the error message No configuration text or files found! Please check your setup. when I try to do anything. This error message vanishes if I remove SA, and re-appears when I reinstall it, so I'm pretty sure its an SA-related error. What configuration is it looking for, where is it looking, and how do I give it what it wants? Dirk, Run this and report back to the list: spamassassin -D --lint = Kevin W. Gagel Network Administrator Information Technology Services (250) 561-5848 local 448 --- The College of New Caledonia, Visit us at http://www.cnc.bc.ca Virus scanning is done on all incoming and outgoing email. Anti-spam information for CNC can be found at http://avas.cnc.bc.ca ---
RDJ from cron - is it safe?
Hello, We have been running RDJ manually, but are now considering running it via cron. The problem is what if something 'goes wrong'? This is on a central mailhub, and we do not want the mail going through un-spam checked. I gather others do run RDJ from cron, so the question is have there been problems doing this? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839
Re: RDJ from cron - is it safe?
Hello, We have been running RDJ manually, but are now considering running it via cron. The problem is what if something 'goes wrong'? This is on a central mailhub, and we do not want the mail going through un-spam checked. I gather others do run RDJ from cron, so the question is have there been problems doing this? When ever there is a problem rdj reverts back to what it was replacing. In other words it does an automatic roll back on errors. At least that is what I've been seeing. = Kevin W. Gagel Network Administrator Information Technology Services (250) 561-5848 local 448 --- The College of New Caledonia, Visit us at http://www.cnc.bc.ca Virus scanning is done on all incoming and outgoing email. Anti-spam information for CNC can be found at http://avas.cnc.bc.ca ---
Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, Kevin W. Gagel wrote: Run this and report back to the list: spamassassin -D --lint /opt/sa 4 % ./spamassassin --lint Cannot open /usr/share/spamassassin/user_prefs.template: No such file or directory Failed to create default user preference file /home/admin/.spamassassin/user_prefs Dirk
Re: RDJ from cron - is it safe?
John Horne wrote: We have been running RDJ manually, but are now considering running it via cron. The problem is what if something 'goes wrong'? This is on a central mailhub, and we do not want the mail going through un-spam checked. I gather others do run RDJ from cron, so the question is have there been problems doing this? When there has been a problem (since RDJ lints the rules before attempting a restart IIRC) any problematic updated rules didn't get installed and everything kept on running as it should. As such, I've not experienced any problems on a live system running RDJ from cron. Regards, Martyn -- Martyn Drake http://www.drake.org.uk http://www.ourlittleduckling.com
Re: RDJ from cron - is it safe?
I have it running from cron on 12 servers. Never a problem. - Original Message - From: Martyn Drake [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Thursday, June 23, 2005 10:02 AM Subject: Re: RDJ from cron - is it safe? John Horne wrote: We have been running RDJ manually, but are now considering running it via cron. The problem is what if something 'goes wrong'? This is on a central mailhub, and we do not want the mail going through un-spam checked. I gather others do run RDJ from cron, so the question is have there been problems doing this? When there has been a problem (since RDJ lints the rules before attempting a restart IIRC) any problematic updated rules didn't get installed and everything kept on running as it should. As such, I've not experienced any problems on a live system running RDJ from cron. Regards, Martyn -- Martyn Drake http://www.drake.org.uk http://www.ourlittleduckling.com
Re: SA v3.0.4 install error
Dirk the Daring [EMAIL PROTECTED] wrote on 06/23/2005 11:54:49 AM: On Thu, 23 Jun 2005, Kevin W. Gagel wrote: Run this and report back to the list: spamassassin -D --lint /opt/sa 4 % ./spamassassin --lint Cannot open /usr/share/spamassassin/user_prefs.template: No such file or directory Failed to create default user preference file /home/admin/. spamassassin/user_prefs Dirk You forgot the -D we need the debug output spamassassin -D --lint Andy
Re: Phishing: My rule and thoughts
Murty Rompalli wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I did get this and other replies from list users! My rule does not assign a score of 5.0 (threshold to call it spam for sure). If it assigns [X] positive scores, it may cause FPs. [ ] negative scores, it may case NPs. [ ] zero scores, it's useless so only tests against real data can tell. So, an email can still get a score of 4.0 from my phish block rule and still go through unless ofcourse you changed the threshold. That I understand. but the issue is still here. an example is better than a long argumentation: example I can also propose a rule to look for /From: .*qs/ I know very few people with a 'qs' in their email address, so that seems like a good rule. and if FPs are a concern, one can just lower the score;-p (or as some like to repeat _just_ whitelist him) now, reiterate with rkf, iio, ... etc. and you'll end up with hundreds of (probably useless) rules. [things become more fun when you get friend with mailQSinger, maRKFowler, IIOpguru, ...]. /example do you see what I mean (or am I still unclear)?
How do I tell postfix to use spamassassin
Here are the details: I have a box, server1.mycompany.com, that has postfix installed. Server2 listens to smtp traffic on port 25. It is also set to relay all messages to server2.mycompany.com. This is what I want to: Before server1 relays messages to server2, I want spamassassin to tag them. What do I need to include in my master.cf to obtain this. I am using RHEL 4 and spamassasin 3.0.1 Many thanks
Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, Andy Jezierski wrote:
You forgot the -D we need the debug output
spamassassin -D --lint
Whoops! Sorry.
/opt/sa 75 % ./spamassassin -D --lint
debug: SpamAssassin version 3.0.4
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting
PATH
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/ccs/bin', keeping.
debug: PATH included '/usr/ucb', keeping.
debug: Final PATH set to: /usr/bin:/usr/sbin:/usr/ccs/bin:/usr/ucb
debug: diag: module not installed: DBI ('require' failed)
debug: diag: module installed: DB_File, version 1.809
debug: diag: module installed: Digest::SHA1, version 2.00
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.05
debug: diag: module not installed: Net::DNS ('require' failed)
debug: diag: module not installed: Net::LDAP ('require' failed)
debug: diag: module not installed: Razor2::Client::Agent ('require'
failed)
debug: diag: module installed: Storable, version 2.13
debug: diag: module not installed: URI ('require' failed)
debug: ignore: using a test message to lint rules
debug: using /opt/sa/conf/init.pre for site rules init.pre
debug: config: read file /opt/sa/conf/init.pre
debug: using /opt/sa/rules for default rules dir
debug: config: read file /opt/sa/rules/10_misc.cf
debug: config: read file /opt/sa/rules/20_anti_ratware.cf
debug: config: read file /opt/sa/rules/20_body_tests.cf
debug: config: read file /opt/sa/rules/20_compensate.cf
debug: config: read file /opt/sa/rules/20_dnsbl_tests.cf
debug: config: read file /opt/sa/rules/20_drugs.cf
debug: config: read file /opt/sa/rules/20_fake_helo_tests.cf
debug: config: read file /opt/sa/rules/20_head_tests.cf
debug: config: read file /opt/sa/rules/20_html_tests.cf
debug: config: read file /opt/sa/rules/20_meta_tests.cf
debug: config: read file /opt/sa/rules/20_phrases.cf
debug: config: read file /opt/sa/rules/20_porn.cf
debug: config: read file /opt/sa/rules/20_ratware.cf
debug: config: read file /opt/sa/rules/20_uri_tests.cf
debug: config: read file /opt/sa/rules/23_bayes.cf
debug: config: read file /opt/sa/rules/25_body_tests_es.cf
debug: config: read file /opt/sa/rules/25_hashcash.cf
debug: config: read file /opt/sa/rules/25_spf.cf
debug: config: read file /opt/sa/rules/25_uribl.cf
debug: config: read file /opt/sa/rules/30_text_de.cf
debug: config: read file /opt/sa/rules/30_text_fr.cf
debug: config: read file /opt/sa/rules/30_text_nl.cf
debug: config: read file /opt/sa/rules/30_text_pl.cf
debug: config: read file /opt/sa/rules/50_scores.cf
debug: config: read file /opt/sa/rules/60_whitelist.cf
debug: using /opt/sa/conf for site rules dir
debug: config: read file /opt/sa/conf/local.cf
debug: using /home/admin/.spamassassin for user state dir
debug: using /home/admin/.spamassassin for user state dir
Cannot open /usr/share/spamassassin/user_prefs.template: No such file or
directory
Failed to create default user preference file
/home/admin/.spamassassin/user_prefs
debug: using /home/admin/.spamassassin/user_prefs for user prefs file
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: failed to load Net::DNS::Resolver: Can't locate Net/DNS.pm in
@INC (@INC contains: /opt/perl/lib/site_perl/5.8.5/sun4-solaris
/opt/perl/lib/site_perl/5.8.5 /opt/perl/lib/5.8.5
/opt/perl/lib/site-perl/5.8.5 /opt/perl/lib/site_perl) at
/opt/perl/lib/site_perl/5.8.5/Mail/SpamAssassin/Plugin/URIDNSBL.pm line
113.
debug: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x522048)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa4831c)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0xa17cbc)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x522048)
implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa4831c)
implements 'parse_config'
debug: using /home/admin/.spamassassin for user state dir
debug: bayes: no dbs present, cannot tie DB R/O:
/home/admin/.spamassassin/bayes_toks
debug: Score set 1 chosen.
debug: MIME PARSER START
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: MIME PARSER END
debug: bayes: no dbs present, cannot tie DB R/O:
/home/admin/.spamassassin/bayes_toks
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x522048)
implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? no
debug: is DNS available? 0
debug: decoding: no encoding detected
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend
Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, Andy Jezierski wrote:
You forgot the -D we need the debug output
spamassassin -D --lint
Whoops! Sorry.
---snip---
module not installed: DBI ('require' failed) debug: diag:
diag: module not installed: Net::DNS ('require' failed)
debug: diag: module not installed: Net::LDAP ('require'
failed) debug: diag: module not installed:
Razor2::Client::Agent ('require' failed)
debug: diag: module not installed: URI ('require' failed)
/home/admin/.spamassassin for user state dir debug:
using /home/admin/.spamassassin for user state dir
Cannot open /usr/share/spamassassin/user_prefs.template:
No such file or directory
Failed to create default user preference file
/home/admin/.spamassassin/user_prefs
debug: using /home/admin/.spamassassin/user_prefs for
user prefs file debug: plugin: loading
Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug:
failed to load Net::DNS::Resolver: Can't locate Net/DNS.pm
I think you might have a rights issue here. It looks like
your running sa with a user called admin. Does that user
have full rights within its own home directory? I ask
because it does not appear to be able to create what it
needs.
make sure you su into the user that sa will be running as.
Then run the spamassassin -D --lint again. That should give
you a bit clearer of a pic as to what is wrong.
Also I see you don't have several perl modules installed.
Once you get those installed SA will give you a better
analysis of what is spam and what is not.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
Anti-spam information for CNC can be found at http://avas.cnc.bc.ca
---
Re: How do I tell postfix to use spamassassin
On 6/23/05, Erwin Zavala [EMAIL PROTECTED] wrote: Here are the details: I have a box, server1.mycompany.com, that has postfix installed. Server2 listens to smtp traffic on port 25. It is also set to relay all messages to server2.mycompany.com. This is what I want to: Before server1 relays messages to server2, I want spamassassin to tag them. What do I need to include in my master.cf to obtain this. I am using RHEL 4 and spamassasin 3.0.1 Many thanks There are any number of web pages with info about this, and several different ways to do it. Check the http://www.postfix.org/addon.html for some suggested how-to's, or google for something cryptic like using spamassasin with postfix -- Noel Jones
Re: question
Hi, is there any spamassassin mailing list in spanish? I have some doubts that I´d like to clear up but my english is not very good. I have Postfix with Amavis and Clamav, and I´d like to use Spamassassin. Amavis and Clamav work fine with Postfix, but I don´t know how should I configure Spamassassin to work with Amavis, Clamav and Postfix. My master.cf includes the following: smtp-amavis unix - - y - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - n - - smtpd -o content_filter= Please tell me if this configuration could work for using spamassassin, or how should I try. Or if there's any problem that I could face using this configuration. Thanks, -- == Daniel Geldres Castro Fono: 251-3584 Cel: 950-84999 MSN: [EMAIL PROTECTED] Lima - Peru ==
Re: question
Daniel Geldres wrote: Hi, is there any spamassassin mailing list in spanish? I have some doubts that I´d like to clear up but my english is not very good. I have Postfix with Amavis and Clamav, and I´d like to use Spamassassin. Amavis and Clamav work fine with Postfix, but I don´t know how should I configure Spamassassin to work with Amavis, Clamav and Postfix. My master.cf includes the following: smtp-amavis unix - - y - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - n - - smtpd -o content_filter= Please tell me if this configuration could work for using spamassassin, or how should I try. Or if there's any problem that I could face using this configuration. Thanks, Hello Daniel, If you already have amavis working, then most of the battle is won. Amavis will handle all the calls to SpamAssassin. Just install SpamAssassin and enable spam scanning in amavis. You don't need to make any changes to postfix. Check the amavis (I'm assuming you're using amavisd-new) documentation for information on configuration. Some SA configuration options only work in the amavisd.conf file and some only work in SpamAssassin's local.cf file, so it pays to read the docs to figure out how to make it do exactly what you want. There are a number of good how-to's involving setting SA up within amavis at http://www.freespamfilter.org/ Evan
Re: How do I tell postfix to use spamassassin
Noel Jones wrote: There are any number of web pages with info about this, and several different ways to do it. Check the http://www.postfix.org/addon.html for some suggested how-to's, or google for something cryptic like using spamassasin with postfix Or, if you're an advanced master of the arcane, you could even check the Wiki: http://wiki.apache.org/spamassassin/IntegratedInMta Or http://wiki.apache.org/spamassassin/IntegratedInMta?action=fullsearchcontext=180value=Postfixtitlesearch=Titles
Net::DNS
Hello everybody here. I am confused with this module: which one works and which one does not. I have installed 0.51 using CPAN. did not get SURBL working. Installed 0.49 by downloading TAR file. Still did not get SURBL working. Today I saw Net-DNS-0.51_02.tar.gz at their website and decided to install it using CPAN. By running spamassassin -D --lint I see references to both versions --- debug: diag: module installed: Net::DNS, version 0.51 ... ... debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.49 debug: trying (3) doubleclick.com... debug: looking up NS for 'doubleclick.com' debug: NS lookup of doubleclick.com failed horribly = Perhaps your resolv.conf isn't pointing at a valid server? debug: All NS queries failed = DNS unavailable (set dns_available to override) debug: is DNS available? 0 --- And why does it say there is a problem with resolv.conf? I have valid name servers that I've set up, serving about a thousand domains. What exactly do I need to have in local.cf in order SURBL to be working? Thank you for the help in advance. Irina
Problem with 3.1.0pre and Razor - solved
I was able to solve the problem I reported on Monday. The problem was
with this line in our local configuration:
bodyRAZOR2_CF_RANGE_96_100 eval:check_razor2_range('96','100')
When I changed it to this:
fullRAZOR2_CF_RANGE_96_100 eval:check_razor2_range('','96','100')
the error went away. Apparently the check_razor2_range eval has changed
to where it uses an additional argument, and needs to be a full rule
rather than body.
+++
I have installed SpamAssassin v3.1.0pre on a test system running Solaris
8, Perl 5.8.5, and Razor 2.67. I got the following message when I lint:
# spamassassin --lint
[15182] warn: razor2: razor2 check failed: No such file or directory
Can't use an undefined value as a SCALAR reference at
/usr/local/lib/perl5/site_perl/5.8.5/sun4-solaris/Razor2/Client/Agent.pm
line 828. at
/usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Plugin/Razor2.pm
line 317.
I also see this error in the log file when I run spamd. I have the
following razor entries in local.cf:
use_razor2 1
razor_config /etc/mail/spamassassin/.razor/razor-agent.conf
Contents of razor-agent.conf:
#
# Razor2 config file
#
# Autogenerated by Razor-Agents v2.61
# Mon Sep 13 11:48:50 2004
# Created with all default values
#
# see razor-agent.conf(5) man page
#
debuglevel = 2
identity = identity
ignorelist = 0
listfile_catalogue = servers.catalogue.lst
listfile_discovery = servers.discovery.lst
listfile_nomination= servers.nomination.lst
logfile= razor-agent.log
logic_method = 4
min_cf = ac
razorzone = razor2.cloudmark.com
rediscovery_wait = 172800
report_headers = 1
sort_by_distance = 0
turn_off_discovery = 0
use_engines= 4,8
whitelist = razor-whitelist
razorhome = /etc/mail/spamassassin/.razor/
What do I need to fix?
Larry Rosenbaum
ORNL
Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, Kevin W. Gagel wrote: I think you might have a rights issue here. It looks like your running sa with a user called admin. Does that user have full rights within its own home directory? I ask because it does not appear to be able to create what it needs. I don't want SA to create things in home directories. This is a mail relay. There are no local user accounts, mail is not delivered locally. SA should only use system-wide preferences and rules. SA will be invoked by MIMEDefang, normally. I'm just trying to test the install. Also I see you don't have several perl modules installed. Once you get those installed SA will give you a better analysis of what is spam and what is not. Thanks. Its on The List of Things To Do. Right now, I'd be happy to get it up and running in a basic fashion. Dirk
Re: SA v3.0.4 install error
Dirk the Daring [EMAIL PROTECTED] wrote on 06/23/2005 02:36:21 PM: I don't want SA to create things in home directories. This is a mail relay. There are no local user accounts, mail is not delivered locally. SA should only use system-wide preferences and rules. Start spamd with the -x flag SA will be invoked by MIMEDefang, normally. I'm just trying to test the install. I don't use MIMEDefang, but since you have SA installed into a non-default directory, is your MIMEDefang config setup to look in the same directory? Might be MIMEDefang complaining that it can't find the SA config files which are normally installed in /etc/mail/spamassassin Andy
Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, Kevin W. Gagel wrote: I think you might have a rights issue here. It looks like your running sa with a user called admin. Does that user have full rights within its own home directory? I ask because it does not appear to be able to create what it needs. I don't want SA to create things in home directories. This is a mail relay. There are no local user accounts, mail is not delivered locally. SA should only use system-wide preferences and rules. SA will be invoked by MIMEDefang, normally. I'm just trying to test the install. Regardless, you need to run SA as a user. To get your basics tested, su into that user and test SA. Once you test as the user you can setup your system wide prefs with a basic one for the user and your system wide for your actual preferences. I don't know about MIMEDefang, does it use spamd/spamc combo? If so then you want to run spamd with the no user prefs switch. Also I see you don't have several perl modules installed. Once you get those installed SA will give you a better analysis of what is spam and what is not. Thanks. Its on The List of Things To Do. Right now, I'd be happy to get it up and running in a basic fashion. Dirk = Kevin W. Gagel Network Administrator Information Technology Services (250) 561-5848 local 448 --- The College of New Caledonia, Visit us at http://www.cnc.bc.ca Virus scanning is done on all incoming and outgoing email. Anti-spam information for CNC can be found at http://avas.cnc.bc.ca ---
Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, Andy Jezierski wrote: Dirk the Daring [EMAIL PROTECTED] wrote on 06/23/2005 02:36:21 PM: I don't want SA to create things in home directories. This is a mail relay. There are no local user accounts, mail is not delivered locally. SA should only use system-wide preferences and rules. Start spamd with the -x flag MIMEDefang only uses SA thru the Perl modules. It will not use spamd. Or are you saying to invoke spamd -x as a testing method? SA will be invoked by MIMEDefang, normally. I'm just trying to test the install. I don't use MIMEDefang, but since you have SA installed into a non-default directory, is your MIMEDefang config setup to look in the same directory? Might be MIMEDefang complaining that it can't find the SA config files which are normally installed in /etc/mail/spamassassin I don't think its MIMEDefang complaining. I think the message is coming from SA, but MIMEDefang might not be telling SA what SA needs to know. Dirk
e-mail size limits
Does anyone know if Spamassassin limits the size of e-mails passing through it? For some reason I though it was limited to 8MB e-mails.. I am running RedHat and Spamassassin 3.04 spamd, spamc, postfix. Robert Peace he would say instead of goodbyepeace my brother.
Re: e-mail size limits
Robert Swan wrote: Does anyone know if Spamassassin limits the size of e-mails passing through it? For some reason I though it was limited to 8MB e-mails.. I am running RedHat and Spamassassin 3.04 spamd, spamc, postfix. No, but spamc will by default skip the scanning of any message over 250k. Such messages just pipe through with no changes. There's no limit in terms of SA as to how big a message you can pipe through. I get emails with 100mb attachments just fine. Trying to get SA to scan really large messages by modifying the 250k threshold is generally a subject to approach with caution, as it causes the size of the spamd child to expand considerably. However, the setting is tweakable on the command-line to spamc.
RE: shared SQL DB
Also Michael - how would one write a custom rule in the database? For example, if I have this in a .cf file: header MY_STOCK Subject =~ /[sS]t[0]ck/i score MY_STOCK 5.0 In which I create a new rule called MY_STOCK, how would I put that into the userpref table? Username of @GLOBAL, preference of header MY_STOCK and value of Subject =~ /[sS]t[0]ck/i doesn't seem to work. -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 12:28 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Hey Michael - In the presentation you provided, I have a question re: the AWL and the lastupdate table column. First off - it won't allow me to create the column w/o a default value (since it's not null). All 0's are fine - but when I tested it, each row inserted had that default value in it, instead of the true timestamp. Is there something I have to modify to get it to insert/update the current time into that row? You used the timestamp column type? You shouldn't need a default value with the timestamp type. What version of MySQL? What does your create table statement look like? Michael
Re: shared SQL DB
Matthew Yette wrote: Also Michael - how would one write a custom rule in the database? For example, if I have this in a .cf file: header MY_STOCK Subject =~ /[sS]t[0]ck/i score MY_STOCK 5.0 In which I create a new rule called MY_STOCK, how would I put that into the userpref table? Username of @GLOBAL, preference of header MY_STOCK and value of Subject =~ /[sS]t[0]ck/i doesn't seem to work. You don't. You can't put admin commands into the database, those belong in *.cf files. michael signature.asc Description: OpenPGP digital signature
RE: shared SQL DB
Thanks again! Did that, kept the score directive in the database, but oddly enough, on a test, it scores is 1.0 in the message headers, not 5 like I have in the db... -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 4:30 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Also Michael - how would one write a custom rule in the database? For example, if I have this in a .cf file: header MY_STOCK Subject =~ /[sS]t[0]ck/i score MY_STOCK 5.0 In which I create a new rule called MY_STOCK, how would I put that into the userpref table? Username of @GLOBAL, preference of header MY_STOCK and value of Subject =~ /[sS]t[0]ck/i doesn't seem to work. You don't. You can't put admin commands into the database, those belong in *.cf files. michael
RE: shared SQL DB
And I get this in the spamd debug output for all the custom score rules I put in... debug: Score configuration option without actual scores, skipping -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Thursday, June 23, 2005 4:39 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB Thanks again! Did that, kept the score directive in the database, but oddly enough, on a test, it scores is 1.0 in the message headers, not 5 like I have in the db... -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 4:30 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Also Michael - how would one write a custom rule in the database? For example, if I have this in a .cf file: header MY_STOCK Subject =~ /[sS]t[0]ck/i score MY_STOCK 5.0 In which I create a new rule called MY_STOCK, how would I put that into the userpref table? Username of @GLOBAL, preference of header MY_STOCK and value of Subject =~ /[sS]t[0]ck/i doesn't seem to work. You don't. You can't put admin commands into the database, those belong in *.cf files. michael
RE: shared SQL DB
Solved it myself: The preference column will contain score RULENAME and VALUE, not SCORE, contains the score. -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Thursday, June 23, 2005 4:41 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB And I get this in the spamd debug output for all the custom score rules I put in... debug: Score configuration option without actual scores, skipping -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Thursday, June 23, 2005 4:39 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB Thanks again! Did that, kept the score directive in the database, but oddly enough, on a test, it scores is 1.0 in the message headers, not 5 like I have in the db... -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 4:30 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Also Michael - how would one write a custom rule in the database? For example, if I have this in a .cf file: header MY_STOCK Subject =~ /[sS]t[0]ck/i score MY_STOCK 5.0 In which I create a new rule called MY_STOCK, how would I put that into the userpref table? Username of @GLOBAL, preference of header MY_STOCK and value of Subject =~ /[sS]t[0]ck/i doesn't seem to work. You don't. You can't put admin commands into the database, those belong in *.cf files. michael
RE: shared SQL DB
So to clear up the custom SQL query that's in your presentation: It says to use global and then domain level defaults: SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ or username = '@GLOBAL' or username = _DOMAIN_ order by username ASC Does that mean, if a rule exists both globally and domain-based - the domain one will take precedence? Or the global one? I would assume domain-based - that seems the more logical route? -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Thursday, June 23, 2005 4:45 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB Solved it myself: The preference column will contain score RULENAME and VALUE, not SCORE, contains the score. -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Thursday, June 23, 2005 4:41 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB And I get this in the spamd debug output for all the custom score rules I put in... debug: Score configuration option without actual scores, skipping -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Thursday, June 23, 2005 4:39 PM To: Michael Parker Cc: users@spamassassin.apache.org Subject: RE: shared SQL DB Thanks again! Did that, kept the score directive in the database, but oddly enough, on a test, it scores is 1.0 in the message headers, not 5 like I have in the db... -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Michael Parker [mailto:[EMAIL PROTECTED] Sent: Thursday, June 23, 2005 4:30 PM To: Matthew Yette Cc: users@spamassassin.apache.org Subject: Re: shared SQL DB Matthew Yette wrote: Also Michael - how would one write a custom rule in the database? For example, if I have this in a .cf file: header MY_STOCK Subject =~ /[sS]t[0]ck/i score MY_STOCK 5.0 In which I create a new rule called MY_STOCK, how would I put that into the userpref table? Username of @GLOBAL, preference of header MY_STOCK and value of Subject =~ /[sS]t[0]ck/i doesn't seem to work. You don't. You can't put admin commands into the database, those belong in *.cf files. michael
RE: :DNS
Hello everybody here. I am confused with this module: which one works and which one does not. I have installed 0.51 using CPAN. did not get SURBL working. Installed 0.49 by downloading TAR file. Still did not get SURBL working. Today I saw Net-DNS-0.51_02.tar.gz at their website and decided to install it using CPAN. By running spamassassin -D --lint I see references to both versions --- debug: diag: module installed: Net::DNS, version 0.51 ... ... debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.49 debug: trying (3) doubleclick.com... debug: looking up NS for 'doubleclick.com' debug: NS lookup of doubleclick.com failed horribly = Perhaps your resolv.conf isn't pointing at a valid server? debug: All NS queries failed = DNS unavailable (set dns_available to override) debug: is DNS available? 0 --- Are you sure you installed the 0.51_02 version? This is what I get: debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.51_02 debug: trying (3) cingular.com... debug: looking up NS for 'cingular.com' debug: NS lookup of cingular.com succeeded = Dns available (set dns_available to hardcode) debug: is DNS available? 1 debug: URIDNSBL: domains to query: And why does it say there is a problem with resolv.conf? I have valid name servers that I've set up, serving about a thousand domains. What exactly do I need to have in local.cf in order SURBL to be working? Thank you for the help in advance. Irina Erik
Re: RDJ from cron - is it safe?
At 09:54 AM Thursday, 6/23/2005, John Horne wrote -= Hello, We have been running RDJ manually, but are now considering running it via cron. The problem is what if something 'goes wrong'? This is on a central mailhub, and we do not want the mail going through un-spam checked. I gather others do run RDJ from cron, so the question is have there been problems doing this? RDJ will not restart the daemon or even keep changed rulesets if the lint returns an error. So, running it via a cron job is safe. Ed Kasky ~ Randomly Generated Quote (462 of 478): When angry, count to 10. When really angry, curse. - M. Twain
Re: Penny stocks, microcaps, etc.
Matt Wills wrote: Does anyone have a ruleset for catching any or all of these stock tips? They change so quickly, I just write a temporary rule for the latest company name and/or symbol and replace it after a week. -- Kelson Vibber SpeedGate Communications www.speed.net
[SOLVED] Re: SA v3.0.4 install error
On Thu, 23 Jun 2005, I wrote: 2) After installing SA, MIMEDefang sees it, but I get the error message No configuration text or files found! Please check your setup. when I try to do anything. This error message vanishes if I remove SA, and re-appears when I reinstall it, so I'm pretty sure its an SA-related error. The problem turned out to be related to the order things ended up on this server. I installed MIMEDefang last month, and didn't get around to SpamAssassin until now. Because MD was installed before SA, MD did not install itself to support SA. However, MD does auto-detect SA at run-time, and will use it if it finds it. But the install process for MD still did not copy the config file that MD wants for SA. It would have done it if SA had been installed when MD was installed, but I ended up having to do it manually. Dirk
rewrite_header Subject
Hello, a while back, someone mentioned that they had configured SA to modify the subject to include the SA score like: *SPAM(10.2)* Is this easy to do? What is the syntax to acheive this in my local.cf file? Regards, Devin
Re: rewrite_header Subject
[EMAIL PROTECTED] wrote: Hello, a while back, someone mentioned that they had configured SA to modify the subject to include the SA score like: *SPAM(10.2)* Is this easy to do? What is the syntax to acheive this in my local.cf file? Regards, Devin Hi, rewrite_header subject *SPAM(_SCORE_)* man Mail::SpamAssassin::Conf is your friend Rick
Re: Exchange/Outlook - how do you learn spam?
I have implemented John's idea and it works like a charm!
I use postfix in my mail gateway at the perimiter, I have :
always_bcc = [EMAIL PROTECTED]
The reason I'm bcc-ing is because my mail-gateway is not suitable to
store large quantity of emails, very plain server.
I wrote a simple perl script below to automate all the processing.
/home/spamtrapcc/.maildir/.UndetectedSPAMS/cur/ is the folder where all
users drop the undetected spams.
/home/spamtrapcc/.maildir/.WhitelistSPAMS/cur/ users drop their
whitelist email request here
/home/ccmail/.maildir/new is the [EMAIL PROTECTED] mailbox
- this folder grows very quickly, I have a cron job to clean this
directory on a daily basis:
find /home/ccmail/.maildir/new -type f -mtime +3 -exec rm {} \;
Btw as you already see, I use Maildir format instead of Mailbox, just
love maildir!!
My perl is not good, the script only works in my environment. Feel free
to modify and post it back to this list if you have improvements.
Cheers
Christian.
--
#!/usr/bin/perl
chdir(/home/spamtrapcc/.maildir/.UndetectedSPAMS/cur/) or die(Failed to
chdir: $!\n);
opendir(UND, .) or die(Opendir failed: $!\n);
my @undfiles = grep {!/^\.+$/} readdir(UND);
closedir(UND);
my %badmessageids = ();
foreach $undfile (@undfiles) {
open(UFILE, $undfile) or die(Failed to open $undfile for reading: $!\n);
while (UFILE) {
if (/^Message-ID: (.*?)/) {
$badmessageids{$1} = 1;
last;
} }
close(UFILE);
}
chdir(/home/spamtrapcc/.maildir/.WhitelistSPAMS/cur/) or die(Failed to
chdir: $!\n);
opendir(WHITE, .) or die(Opendir failed: $!\n);
my @whitefiles = grep {!/^\.+$/} readdir(WHITE);
closedir(WHITE);
my %goodmessageids = ();
foreach $whitefile (@whitefiles) {
open(WFILE, $whitefile) or die(Failed to open $whitefile for reading: $!\n);
while (WFILE) {
if (/^Message-ID: (.*?)/) {
$goodmessageids{$1} = 1;
last;
} }
close(WFILE);
}
chdir(/home/ccmail/.maildir/new) or die(chdir failed: $!\n);
opendir(CCMAIL, .) or die(Failed to opendir CCMAIL: $!\n);
my @ccmailfiles = grep {!/^\.+$/} readdir(CCMAIL);
closedir(CCMAIL);
foreach $cm (@ccmailfiles) {
open(CCFILE, $cm) or die(Failed to open $cm for reading: $!);
while (CCFILE) {
if (/^Message-ID: (.*?)/i) {
if (defined($badmessageids{$1})) {
print Copying $cm to blackspam...\n;
system cp $cm /home/ccmail/.maildir/.blackspams/tmptmp;
chown 1008, 1008, /home/ccmail/.maildir/.blackspams/tmptmp/$cm;
} elsif (defined($goodmessageids{$1})) {
print Copying $cm to whitespam...\n;
system cp $cm /home/ccmail/.maildir/.whitespams/tmptmp;
chown 1008, 1008, /home/ccmail/.maildir/.whitespams/tmptmp/$cm;
}
}
}
}
Subject: Re: Exchange/Outlook - how do you learn spam?
Date: Wed, Jun 22, 2005 at 04:25:03PM +0100
Quoting John Hall ([EMAIL PROTECTED]):
: Sadly 'script' is rather a grand term. I haven't got around to automating
: things properly, so I manually do the following roughly once a week or so:
:
: # get a list of message-ids from the imap folder
: $ grep -i ^message-id: imap-folder | sed -e 's/.*\(.*\).*/\1/' msgids
:
: # get e-mails from the current archive folder
: $ cat /var/local/archive/mail | spamlearn msgids mbox
:
: # get e-mails from the last 3 weeks of archives
: $ zcat /var/local/archive/mail.[123].gz | spamlearn msgids mbox
:
: # feed to SA
: $ sa-learn --spam --mbox mbox
:
:
: The archive I keep is rotated once a week and gzipped. The perl script,
: spamlearn, is attached. This just scans stdin for messages in the supplied
: file and writes them to stdout. Any that it finds it removes from the
: supplied file. Hopefully, by the end, the file 'msgids' is empty.
:
: This could obviously be vastly improved and automated - I just haven't got
: round to it yet.
:
: regards,
: John
:
:
: begin 666 spamlearn.dat
: M(R$O=7-R+V)I;B]P97)L@IUV4@W1R:6-T.PH*;7D@)6US9VEDSL*;7D@
: M)'-T871E.PH*;7D@)%-4051%7U-405)4(#T@,#L*;7D@)%-4051%7TA%041%
: M4E,@/2 Q.PIM2 D4U1!5$5?3U544%545$E.1R ](#([FUY(135$%415]4
: M2%)/5TE.1U]!5T%9(#T@,SL*B,@;]O:R!A=!AF=U;65N=',*:[EMAIL PROTECTED]'-C
: M86QAB! 05)'5B A/2 Q*21%,L((\(1MV=I9'-?9FEL
: M92(@;W(@9EE()5;F%B;[EMAIL PROTECTED]\@;W!E;B D;7-G:61S7V9I;5.B D(5QN
: M(CL*=VAI;[EMAIL PROTECTED])1%,^*2![@EC:]M#L*21MV=I9'-[)%]](#T@
: M,3L*?0IC;]S92!-4T=)1%,[@IM2! 8W5RF5N=%]MV[B1S=%T92 ]
: M(135$%415]35$%25#L*G=H:6QE(@D7R ](#P^*26EF(@O7D9R;[EMAIL PROTECTED]@PH)0DDW1A
: M=4@/2 D4U1!5$5?2$5!1$524SL*0D)0-UG)E;G1?;7-G([EMAIL PROTECTED]1?*3L*
: M0E]@E]@EE;'-I9B H)'-T871E(#T](135$%415](14%$15)3*2![@D)
: M:[EMAIL PROTECTED]]365SV%G92U)1#IRH\*XJ*3XO:2D@PH)0EP=7-H($!C=7)R
:
Re: rewrite_header Subject
Rick Macdougall wrote: rewrite_header subject *SPAM(_SCORE_)* man Mail::SpamAssassin::Conf is your friend For completeness, two caveats apply to this. 1) the above syntax is for SA 3.0.0 or higher. 2.xx won't make sense of it. 2) If you are using a MTA integration tool that does it's own markups (MailScanner, possibly qmail-scanner and mimedefang), then this setting won't do anything.
not whitelist, but why are spams getting through?
OK, so it's not the autowhitelist doing it, but over the last couple of weeks an extraordinary amount of spam is getting through and I don't know why. A particular message just came into my inbox, with the following headers: X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on quadzilla X-Spam-Level: X-Spam-Status: No, score=4.4 required=5.0 tests=BAYES_60, RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO autolearn=no version=3.0.4 yet, when I run spamassassin message , I get this result: X-Spam-Prev-Subject: Hi funstuff..,,.beryllium X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on quadzilla X-Spam-Level: X-Spam-Status: Yes, score=13.0 required=5.0 tests=AWL,BAYES_60, RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL, RCVD_NUMERIC_HELO,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL, URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL autolearn=spam version=3.0.4 Looks like the automatic scanning via spamd is running different tests than when I run the message through manually. Why would this be? System is fairly stock fedora core 3.
Re: not whitelist, but why are spams getting through?
Mike Pepe wrote: OK, so it's not the autowhitelist doing it, but over the last couple of weeks an extraordinary amount of spam is getting through and I don't know why. A particular message just came into my inbox, with the following headers: X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on quadzilla X-Spam-Level: X-Spam-Status: No, score=4.4 required=5.0 tests=BAYES_60, RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO autolearn=no version=3.0.4 snip Looks like the automatic scanning via spamd is running different tests than when I run the message through manually. Why would this be? Any chance you're starting spamd with the -L parameter?
Re: rewrite_header Subject
From: Matt Kettler [EMAIL PROTECTED]
Rick Macdougall wrote:
rewrite_header subject *SPAM(_SCORE_)*
man Mail::SpamAssassin::Conf is your friend
For completeness, two caveats apply to this.
1) the above syntax is for SA 3.0.0 or higher. 2.xx won't make sense of
it.
2) If you are using a MTA integration tool that does it's own markups
(MailScanner, possibly qmail-scanner and mimedefang), then this setting
won't do
anything.
And if it will work this one will work better:
*SPAM* _SCORE(00)_ **
That will clearly mark spam and give a nice three digit score that can
be alpha sorted in your spam directory. That makes going through spam
a breeze. I effectively never see the higher score spam subjects. I just
look at the low scores, cull a few for Bayes training and false markups.
Then I delete the lot. (Sometimes I setup awkward test rules with really
high scores. That means I take a look at the high end of the list to see
if they hit the way I want. These are for things I consider sure spam,
most of the time. Then I adjust the scores to something sane.)
{^_-}
Customizing headers
Following an example I saw elsewhere, I thought I would get cute and customize my headers: clear_headers add_header all Flag _YESNOCAPS_ add_header spam Level _STARS(*)_ fold_headers 1 add_header all Summary Score _HITS_ (Spam threshold is _REQD_); Tests: _TESTSSCORES(, )_ Looks great, just what I had in mind. Yes, looks great, but now the spam is just being flagged. Instead of going to its spam mailbox, the headers tell me it is spam, the score (7.69), threshold (5.0), tests, etc., but the mail comes through to my regular mailbox. I am assuming that one or more of the options above negate sending spam to the spam mailbox, but which one, and how do I tell it where it should go? Matt -- A vacuum is a hell of a lot better than some of the stuff that nature replaces it with. --Tennessee Williams
Re: merges bayes DB???
On Jun 23, 2005, at 12:24 PM, Michael Parker wrote: Is there a way to merger 2 (or more)bayes DBs? Short answer, No. Long answer, search the users list. Show my complete ignorance on this subject, but wouldn't a dump and load work, at least technically speaking? Possibly followed by a sync and/or expire? Steven --- Steven Dickenson [EMAIL PROTECTED] http://www.mrchuckles.net
Re: Customizing headers
From: Matt Wills [EMAIL PROTECTED]
Following an example I saw elsewhere, I thought I would get cute and
customize my headers:
clear_headers
add_header all Flag _YESNOCAPS_
add_header spam Level _STARS(*)_
fold_headers 1
add_header all Summary Score _HITS_ (Spam threshold is _REQD_);
Tests: _TESTSSCORES(, )_
Looks great, just what I had in mind.
Yes, looks great, but now the spam is just being flagged. Instead of
going to its spam mailbox, the headers tell me it is spam, the score
(7.69), threshold (5.0), tests, etc., but the mail comes through to
my regular mailbox.
I am assuming that one or more of the options above negate sending
spam to the spam mailbox, but which one, and how do I tell it where
it should go?
Matt
It is not SpamAssassin that sends things to your spam mail box. It is
your milter, procmail, or other similar tool which reads the headers
SpamAssassin adds and sorts the mail into your spam mailbox. You
apparently destroyed the piece of header format that was being used
in the test.
{^_^}
Sys::Syslog with SA 3.0 and Perl 5.8.7?
I have Perl 5.8.3 installed. I am going to be installing SA 2.6, and then perform an upgrade to SA 3.0 as part of a test before attempting a real upgrade on an existing production system. I noted in O'Reilly's Spamassassin book that Sys::Syslog is listed as being required. I also saw this on another www source regarding SA 3.0.1 specifically. So when using CPAN to get Sys::Syslog with Perl 5.8.3, it states that it requires Perl 5.8.7 as a depedancy. Just checking to be sure that the later version of Perl is needed if one is intending to use SA 2.6 and/or 3.0 with sendmail? If Perl needs to be updated as well, then additional testing is going to be needed as Perl gets used in other places besides the SA tool.
Re: Customizing headers
At 09:45 PM 6/23/2005, jdow wrote:
It is not SpamAssassin that sends things to your spam mail box. It is
your milter, procmail, or other similar tool which reads the headers
SpamAssassin adds and sorts the mail into your spam mailbox. You
apparently destroyed the piece of header format that was being used
in the test.
{^_^}
That answers it.
The procmailrc is exactly as was automatically set up on my FreeBSD server
with the auto-install. Near the bottom, I see a recipe that appears to say
If the X-Spam-Status is Yes, put it in the var/mail/spam mailbox.
With my customized headings, I have no X-Spam-Status header.
Thanks for pointing me there.
Matt
Re: Customizing headers
Matt Wills wrote: Following an example I saw elsewhere, I thought I would get cute and customize my headers: clear_headers add_header all Flag _YESNOCAPS_ add_header spam Level _STARS(*)_ fold_headers 1 add_header all Summary Score _HITS_ (Spam threshold is _REQD_); Tests: _TESTSSCORES(, )_ Looks great, just what I had in mind. Yes, looks great, but now the spam is just being flagged. Instead of going to its spam mailbox, the headers tell me it is spam, the score (7.69), threshold (5.0), tests, etc., but the mail comes through to my regular mailbox. I am assuming that one or more of the options above negate sending spam to the spam mailbox, but which one, and how do I tell it where it should go? Where mail goes isn't a function of spamassassin. Period. SpamAssassin is physically incapable of attempting to direct mail to a spambox. It's in the wrong part of the mail change. I'm guessing you've got some kind of procmail or mail client rule that looks for SA's spam tag and moves the mail to your spambox. Find that, and change it to fit the new tag format. The old behavior you were seeing wasn't being done by SA, just a byproduct of some other program interpreting SA's output.
Re: Customizing headers
From: Matt Wills [EMAIL PROTECTED]
At 09:45 PM 6/23/2005, jdow wrote:
It is not SpamAssassin that sends things to your spam mail box. It is
your milter, procmail, or other similar tool which reads the headers
SpamAssassin adds and sorts the mail into your spam mailbox. You
apparently destroyed the piece of header format that was being used
in the test.
{^_^}
That answers it.
The procmailrc is exactly as was automatically set up on my FreeBSD server
with the auto-install. Near the bottom, I see a recipe that appears to say
If the X-Spam-Status is Yes, put it in the var/mail/spam mailbox.
With my customized headings, I have no X-Spam-Status header.
Thanks for pointing me there.
Matt
Glad I helped. I'm currently fiddling procmailrc rules to track down an
annoyance with PerMsgStatus.pm. If I have a full rule as a user it
will randomly trigger a security error trying to run as a user. The
same message will not always trigger the error. But when I get the
error SpamAssassin leaves no markup.
So I created a custom header, sort of like X-Spoo: Before SpamAssassin.
Then I look for the usual first SpamAssassin header as well. If the
former exists and the latter does not I apply a small subject markup
and then feed it to regular SpamAssassin slightly niced to keep machine
load down.
I wish I could get the error message to spit out the actual eval rule
that was kicking out the error. Then I could feed it to the developers
perhaps with a fix. But the error message is not generated my any of
the SpamAssassin perl files. So I have to use indirect tricks.
(The only eval rules I have are in SARE rules. But it seems to be
related to specific sorts of things in my user_prefs rules. Lately
the working hypothesis is full rules are causing the glitch.)
Anyway - this is an example of how procmail can be used as a diagnostic
as well as sorting tool.
{^_^}
Re: Customizing headers
From: jdow [EMAIL PROTECTED]
So I created a custom header, sort of like X-Spoo: Before SpamAssassin.
Then I look for the usual first SpamAssassin header as well. If the
former exists and the latter does not I apply a small subject markup
and then feed it to regular SpamAssassin slightly niced to keep machine
load down.
I wish I could get the error message to spit out the actual eval rule
that was kicking out the error. Then I could feed it to the developers
perhaps with a fix. But the error message is not generated my any of
the SpamAssassin perl files. So I have to use indirect tricks.
(The only eval rules I have are in SARE rules. But it seems to be
related to specific sorts of things in my user_prefs rules. Lately
the working hypothesis is full rules are causing the glitch.)
Anyway - this is an example of how procmail can be used as a diagnostic
as well as sorting tool.
Ah - and that new procmailrc setup just showed me that it was not the
full rule that caused the mistrigger. Something else is doing it. I wonder
if I have too many user_prefs rules
And customizing headers is enabling this trouble shooting. They also show
me that spamassassin itself does not experience the hit when spamc/spamd
does.
{^_-}
Here is the procmail recipe:
===8---
:0 fw
* ^X-Spoo: Before
{
:0 fw
* !^X-Spam-Checker-Version:
{
:0 fw
| sed -e 's/Subject:/Subject: [ZZ Missed]/'
:0 fw
| nice -n 1 /usr/bin/spamassassin
}
}
Re: shared SQL DB
Matthew Yette wrote: So to clear up the custom SQL query that's in your presentation: It says to use global and then domain level defaults: SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ or username = '@GLOBAL' or username = _DOMAIN_ order by username ASC Does that mean, if a rule exists both globally and domain-based - the domain one will take precedence? Or the global one? I would assume domain-based - that seems the more logical route? Not sure if you mean rule there or just general config options. Try performing the query yourself and see how it comes out. It should work this way, although it is very easy to change the behavior, user overrides domain, domain overrides global. Basically, the query is passed into the config parser in a similar way that it is when read from a .cf file, so it will have the same sort of behavior based on where it comes in that stream. Michael signature.asc Description: OpenPGP digital signature
Re: Customizing headers
Could some explain to me what each of these line says. If you are going to refer me to the manual, please save it. I am asking this question because I cannot understand the syntax from the manual. clear_headers add_header all Flag _YESNOCAPS_ add_header spam Level _STARS(*)_ fold_headers 1 add_header all Summary Score _HITS_ (Spam threshold is _REQD_); Tests: _TESTSSCORES(, )_ On 6/23/05, Matt Wills [EMAIL PROTECTED] wrote: Following an example I saw elsewhere, I thought I would get cute and customize my headers: clear_headers add_header all Flag _YESNOCAPS_ add_header spam Level _STARS(*)_ fold_headers 1 add_header all Summary Score _HITS_ (Spam threshold is _REQD_); Tests: _TESTSSCORES(, )_ Looks great, just what I had in mind. Yes, looks great, but now the spam is just being flagged. Instead of going to its spam mailbox, the headers tell me it is spam, the score (7.69), threshold (5.0), tests, etc., but the mail comes through to my regular mailbox. I am assuming that one or more of the options above negate sending spam to the spam mailbox, but which one, and how do I tell it where it should go? Matt -- A vacuum is a hell of a lot better than some of the stuff that nature replaces it with. --Tennessee Williams
How to delete AWL list...
Howdy! I have unfortunately had many addresses learned in the AWL rule. How can I start from scratch... that is delete my auto white list database? THX in advance! Charles Read
Man pages missing on install
The System: Solaris 8 on Sparc Perl v5.8.5 (with ExtUtils::MakeMaker v6.17 and podlators v1.27) gcc v3.3.2 The Problem: Despite having Pod::Man installed, no man pages get installed (or even created, as far as I can tell). How can I get the man pages created? Dirk
Re: not whitelist, but why are spams getting through?
A particular message just came into my inbox, with the following headers: RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO autolearn=no version=3.0.4 yet, when I run spamassassin message , I get this result: X-Spam-Status: Yes, score=13.0 required=5.0 tests=AWL,BAYES_60, RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL, RCVD_NUMERIC_HELO,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL, URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL autolearn=spam Looks like the automatic scanning via spamd is running different tests than when I run the message through manually. Why would this be? There are two fairly obvious possibilities here: 1.Your server isn't normally running with net tests enabled, but they were for the manual test. 2.You ran the manual test 1/2hr after the automatic scan, and by then the domain had made it into all of the blacklists. Since awl kicked in on the manual test and didn't on the automatic test, you may have configuration differences. I'd look for some configuration difference that may be keeping net tests from running normally. Also feed this to bayes. Assuming it really is spam, it should be getting a lot higher than a 60. Loren
Re: Customizing headers
I am assuming that one or more of the options above negate sending spam to the spam mailbox, but which one, and how do I tell it where it should go? Unknown. SA doesn't route mail, it just marks it. Something else in your processing chain is looking at the markup to do the routing. Postfix, Amvis, maybe something else depending on how you have things set up. Loren
RE: Another tracking cookie trick
X-Message-ID:
106.100.111.119.64.101.97.114.116.104.108.105.110.107.46.110.101.116
Which is merely my email address encoded stupidly.
{^_-}
And how are you doing this? On the client or the server side? Is this a
static X-* header or a dynamic per email header? We're using
X-Brightmail-Tracker: AQAAA+k=
Re: merges bayes DB???
Is there a way to merger 2 (or more)bayes DBs? Short answer, No. Long answer, search the users list. Show my complete ignorance on this subject, but wouldn't a dump and load work, at least technically speaking? Possibly followed by a sync and/or expire? Also from almost complete ignorance: it seems unlikely since 3.0. Previously the bayes database had the actual tokens and counts in it. Since 3.0 the database has a hash of the token. I don't konw that the hashes from two different systems would end up being the same for the same tokens. If the hashes are the same, then you would still have to merge the scores and atimes for the tokens, and correct the overall database summary info. Loren
Re: Another tracking cookie trick
I am not doing it. Somebody else tacked that on as a tracking cookie on
an email sent to me. I am no filtering on the trick.
{^_-}
- Original Message -
From: Bruno S. Delbono [EMAIL PROTECTED]
X-Message-ID:
106.100.111.119.64.101.97.114.116.104.108.105.110.107.46.110.101.116
Which is merely my email address encoded stupidly.
{^_-}
And how are you doing this? On the client or the server side? Is this a
static X-* header or a dynamic per email header? We're using
X-Brightmail-Tracker: AQAAA+k=
Re: Penny stocks, microcaps, etc.
Hello Matt, Thursday, June 23, 2005, 1:35:47 PM, you wrote: MW Does anyone have a ruleset for catching any or all of these stock tips? Sare's obfuscation rule set is doing a pretty good job now of catching most of those that attempt obfuscation. The other SARE rules (bml, genlsubj, header, etc) do a decent job with the others. Won't catch them all, but they catch better than 99% of them here. Bob Menschel
Re: Penny stocks, microcaps, etc.
Matt Wills wrote: Does anyone have a ruleset for catching any or all of these stock tips? This is a little off-topic, but how do spammers expect to make money from that spam? Do they expect we would buy stocks from them? Is it some phishing attack that I am blind to? They just seem to be noise generators to me. Like those spams with links to http://localhost. Bob
