spam declared mail - contentless - lost?

[mauric]

Hello



i have mails that are signed as [SPAM] from Spamassassin 3.4.6, please it's
possible to catch the input from this mail, or it's this lost?



At this time me setup are so, that all mails that are declared as Spam, are
contentless.

Please friendly asking, It's here any change to do on me setup.? So that the
mail arnt contentless?



thanks

Spamc - connection refused

[mauric]

Hello

never found the solutions for this..



Sep 28 15:11:22 nmail spamd[3826]: prefork: child states: II



Sep 28 15:11:23 nmail spamc[4525]: connect to spamd on 127.0.0.1 failed,
retrying (#1 of 3): Connection refused

Sep 28 15:11:23 nmail spamc[4525]: connect to spamd on 127.0.0.1 failed,
retrying (#2 of 3): Connection refused

Sep 28 15:11:24 nmail spamc[4525]: connect to spamd on 127.0.0.1 failed,
retrying (#3 of 3): Connection refused



Sep 28 15:11:24 nmail spamc[4525]: connection attempt to spamd aborted after
3 retries

Sep 28 15:11:24 nmail postfix/pickup[4386]: 2B9D240051: uid=116
from=

--



>>ii  spamc 3.4.2-1+deb10u3 amd64  Client for
SpamAssassin spam filtering daemon

>>ii  postfix3.4.14-0+deb10u1 amd64   High-performance mail
transport agent



/etc/default/spamsassassin

OPTIONS="--nouser-config --create-prefs --max-children 5 --helper-home-dir
/var/lib/spamassassin --username=debian-spamd --groupname=debian-spamd
--siteconfigpath /etc/spamassassin

-socketpath=/var/spool/postfix/spamass/spamd.sock --socketowner=debian-spamd
--socketgroup=debian-spamd --socketmode=0660"



thanks

AW: spamass.sock - No such file or directory

[mauric]

Still the same

Jun 27 19:21:03 nmail postfix/smtps/smtpd[4946]: warning: connect to Milter
service unix:spamass/spamass.sock: No such file or directory
Jun 27 19:25:37 nmail postfix/smtps/smtpd[5552]: warning: connect to Milter
service unix:run/spamass/spamass.sock: No such file or directory

Thanks for any update


-Ursprüngliche Nachricht-
Von: Reindl Harald  
Gesendet: Samstag, 26. Juni 2021 12:15
An: mau...@gmx.ch; users@spamassassin.apache.org
Betreff: Re: spamass.sock - No such file or directory

why do you think "/run/spamass" and "unix:/spamass/" are the same path?

Am 26.06.21 um 09:37 schrieb mau...@gmx.ch:
> Run with Debian 10
> 
> I dont see why “spamass.sock: No such file or directory” this message 
> appair
> 
>>mail.log
> 
> Jun 26 09:27:12 nmail postfix/smtps/smtpd[9509]: warning: connect to 
> Milter service unix:/spamass/spamass.sock: No such file or directory
> 
>>main.cf
> 
> smtpd_milters = unix:/spamass/spamass.sock, 
> unix:opendkim/opendkim.sock, unix:opendmarc/opendmarc.sock
> 
>>/run/spamass# ls -la
> 
> -rw-r--r--  1 spamass-milter spamass-milter 5 Jun 26 09:26
spamass.pid
> srw-rw  1   postfix  postfix 0
Jun 26 09:26 spamass.sock
> 
> or
> 
> srw-rw  1   spamass-milter spamass-milter 0 Jun 26 09:26
spamass.sock
> 
>/etc/group 
> spamass-milter:x:128:postfix
>
> thanks for any help

WG: spamass.sock - No such file or directory

[mauric]

 

Thanks for your quick answer!

 

Update to:

smtpd_milters = unix:spamass/spamass.sock, unix:opendkim/opendkim.sock, 
unix:opendmarc/opendmarc.sock

 

systemctl restart spamass-milter spamassassin postfix

 

postfix/smtpd[15586]: warning: connect to Milter service 
unix:spamass/spamass.sock: Connection refused

 

 

 

Von: Dominic Raferd  
Gesendet: Samstag, 26. Juni 2021 09:42
An: mau...@gmx.ch
Cc: Postfix users 
Betreff: Re: spamass.sock - No such file or directory

 

Remove the slash after unix:

On Sat, 26 Jun 2021, 08:38 , mailto:mau...@gmx.ch> > wrote:

Run with Debian 10

I dont see why “spamass.sock: No such file or directory” this message appair

>mail.log
Jun 26 09:27:12 nmail postfix/smtps/smtpd[9509]: warning: connect to Milter 
service unix:/spamass/spamass.sock: No such file or directory 

>main.cf  
smtpd_milters = unix:/spamass/spamass.sock, unix:opendkim/opendkim.sock, 
unix:opendmarc/opendmarc.sock 


>/run/spamass# ls -la
-rw-r--r--  1 spamass-milter spamass-milter 5 Jun 26 09:26 spamass.pid
srw-rw  1   postfix  postfix 0 Jun 26 
09:26 spamass.sock

Or
srw-rw  1   spamass-milter spamass-milter 0 Jun 26 09:26 spamass.sock

 

>/etc/group
spamass-milter:x:128:postfix

thanks for any help

Mauri

spamass.sock - No such file or directory

[mauric]

Run with Debian 10

I dont see why "spamass.sock: No such file or directory" this message appair



>mail.log

Jun 26 09:27:12 nmail postfix/smtps/smtpd[9509]: warning: connect to Milter
service unix:/spamass/spamass.sock: No such file or directory



>main.cf

smtpd_milters = unix:/spamass/spamass.sock, unix:opendkim/opendkim.sock,
unix:opendmarc/opendmarc.sock



>/run/spamass# ls -la

-rw-r--r--  1 spamass-milter spamass-milter 5 Jun 26 09:26
spamass.pid

srw-rw  1   postfix  postfix 0 Jun
26 09:26 spamass.sock

or

srw-rw  1   spamass-milter spamass-milter 0 Jun 26 09:26
spamass.sock



>/etc/group

spamass-milter:x:128:postfix



thanks for any help

Mauri

all_spam_to

[mauric]

Hello

Here on this setup I have Postfix - spamassassin - Domino HCL

And this "all spam to" would mean that mail with spam flag will be
forwarding to this email Address?



?>but users in all_spam_to should never get mail blocked.

?>all_spam_to spamrep...@domain.com 



Please me goal are, that email that have the spamflag need to by deliver to
mailbox "Spam"

Thanks

AW: how to disable spamcheck for Outgoing mail

[mauric]

>default spamassassin DO scan rfc1918, but there is no rbl that lists ips

>in rfc1918, its a dns waste to test

>

>internal_networks 192.168.0.0/16

>trusted_networks 192.168.0.0/16



Yes this are done with my own ranges but still the same issue. Sending mail
from own domain

Will received as spam of the other side





>

>dev@spamassassin developpes consider add more non routed ip ranges as

>defult

>and there is ipv6 non routed aswell btw





Hello

Please I have two problems that I want friendly ask for help

I need to send any mails from internal Privat Network to Public Network
without that me email will send as Spam



the second point are, if receiving email from users at spamassassin this
will and only this, will received with two

spam flags Yes

spam flags No

possible are here that this email wiss send from gmx and after recifing any
answer this will forward to mailserver

but also here I will friendly ask for little help! I know here has a lot of
know how but I at this time I don't have the

time so sit and open any book.



So thanks meny time for possible help

Regards

AW: how to disable spamcheck for Outgoing mail

[mauric]

On 2021-04-23 01:02 PM,   mau...@gmx.ch wrote:

>trusted_networks 192.168.1.0/24 37.120.190.188/22

>>Are you using postfix? If so, you can do something like this:
>>
>>submission inet  n - y - -smtpd
>> -o content_filter=spamassassin


yes this are always enable, please how I can fix that sending Email don’t scan 
from Spamassasin.
thanks

#smtp  inet  n   -   y   -   -   smtpd

smtp  inet  n   -   y   -   1   postscreen

policyd-spf  unix  -   n   n   -   -   spawn

user=policyd-spf argv=/usr/bin/policyd-spf

smtpd pass  -   -   y   -   -   smtpd

dnsblog   unix  -   -   y   -   0   dnsblog

tlsproxy  unix  -   -   y   -   0   tlsproxy

submission inet n   -   y   -   -   smtpd

  -o smtp_tls_mandatory_protocols=TLSv1.3

  -o smtpd_etrn_restrictions=reject

  -o smtpd_tls_security_level=encrypt

  -o smtpd_sasl_auth_enable=yes

  -o 
smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject

  -o 
smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject

  -o smtpd_helo_restrictions=permit_mynetworks,permit

  -o smtpd_tls_security_level=encrypt

 

  -o content_filter=spamassassin

 

  -o syslog_name=postfix/submission

  -o smtpd_sasl_auth_enable=yes

  -o smtpd_sender_restrictions=$submission_sender_checks

 

how to disable spamcheck for Outgoing mail

[mauric]

Hello

Please how its possible to disable the spam check from sending mails from
"privat to public" network?

I was realy thinking if enable the trusted network this will pass over.


trusted_networks 192.168.28.

thanks

Re: Spamassassin goes to folder spam

[mauric]

>> Hello

>>

>> Asking for litle help.. Doevecot and sieve are running fine.. One

>> thing now, if receiving mail from Users-spamassassin

>>

>> This mail will by forwarding from sieve to folder spam. I didn't see

>> why this will transfer there.



>You have two conflicting X-Spam-flag headers. This isn't why your email
wasn't filtered into the list folder, but it's the more serious problem.

>Ordinarily SA will strip any pre-existing X-Spam-* headers, which suggests
some other software is calling SA as a library and writing its own headers.

>If possible configure a header with a different and unique name.





disable now the content_filter in master.cf



smtp  inet  n   -   y   -   1   postscreen

## Disable  -o content_filter=spamassassin



and add here to main.cf following entry:



smtpd_milters = unix:spamass/spamass.sock,

   unix:opendkim/opendkim.sock,

   unix:opendmarc/opendmarc.sock,

   unix:private/clamav/clamav-milter.ctl

non_smtpd_milters = $smtpd_milters



but still the double flag appair running with Debain 10 and installed
cpan Spamassassin.



X-Spam-Flag: YES

X-Spam-Flag: NO

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on nmail.caloro.ch

X-Virus-Scanned: clamav-milter 0.102.4 at nmail.caloro.ch

X-Virus-Status: Clean



thanks for possible update

Spamassassin goes to folder spam

[mauric]

Hello

Asking for litle help.. Doevecot and sieve are running fine.. One thing now,
if receiving mail from Users-spamassassin

This mail will by forwarding from sieve to folder spam. I didn't see why
this will transfer there.



Dovecot 2.3.4.1 (f79e8e7e4) - Debain 10



Sieve



if header :contains "To" users@spamassassin.apache.org
  {

  fileinto "INBOX.Spamassassin";

}

if header :contains "X-Spam-Flag" "Yes" {

  fileinto :create "Junk";

  stop;

}

--

Return-Path: mau...@gmx.ch 

Delivered-To: mauri...@domain.ch 

Received: from nmail.caloro.ch

by nmail.caloro.ch with LMTP

id cxP8HP/ffWDaKwAAmDN1Rg

(envelope-from mau...@gmx.ch  )

for mauri...@domain.ch  ; Mon, 19
Apr 2021 21:54:39 +0200

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=212.227.15.15;
helo=mout.gmx.net; envelope-from=mau...@gmx.ch
 ; receiver=

DMARC-Filter: OpenDMARC Filter v1.3.2 nmail.caloro.ch C914140201

Authentication-Results: nmail.caloro.ch mail.caloro.ch caloro.ch; dmarc=none
(p=none dis=none) header.from=billmail.scconsult.com

Authentication-Results: nmail.caloro.ch mail.caloro.ch caloro.ch; spf=pass
smtp.mailfrom=mau...@gmx.ch 

DKIM-Filter: OpenDKIM Filter v2.11.0 nmail.caloro.ch C914140201

Mailing-List: contact users-h...@spamassassin.apache.org
 ; run by ezmlm

Precedence: bulk

list-help: mailto:users-h...@spamassassin.apache.org

list-unsubscribe: mailto:users-unsubscr...@spamassassin.apache.org

List-Post:  
mailto:users@spamassassin.apache.org

List-Id: 

Delivered-To: mailing list users@spamassassin.apache.org


X-Spam-Score: -0.001

X-Spam-Level:

X-Spam-Status: No, score=0.2 required=5.0
tests=AWL,FREEMAIL_FORGED_FROMDOMAIN,


FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,

SPF_PASS,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no

version=3.4.6

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=67.149.19.3;
helo=bigsky.scconsult.com;
envelope-from=sausers-20150...@billmail.scconsult.com
 ;
receiver=

From: "Bill Cole" sausers-20150...@billmail.scconsult.com


To: users@spamassassin.apache.org 

Subject: Re: KAM_DMARC_REJECT on internal emails

Date: Mon, 19 Apr 2021 15:54:00 -0400

Message-ID:

a6d58fa5-dcc4-4618-a6a9-0dc9065fe...@billmail.scconsult.com

In-Reply-To: 20210419195718.1fc40...@gumby.homeunix.com


References:
20210419220521.horde.x77ptxnvnoymeq5bd2xj...@mail.simonandkate.net


MIME-Version: 1.0

Content-Type: text/plain; format=flowed

Mail-Copies-To: nobody

X-Spam-Source:  on  via  in en

X-Spam-Hops:

Envelope-To: mau...@gmx.ch 

X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;

X-Spam-Flag: YES

X-UI-Filterresults: junk:10;V03:K0:oQ58xS3PZ3o=:ui

X-UI-Loop:V01:NQ+uvMhGdNE=:SW

X-Spam-Flag: NO

X-UI-Out-Filterresults: notjunk:1;V03:K0:oU0GgD86eVw=:3o

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on nmail.caloro.ch

X-Virus-Scanned: clamav-milter 0.102.4 at nmail.caloro.ch

X-Virus-Status: Clean



Thanks for possible update

learning news from Spamassassin ?

[mauric]

Hello

my spamassassin book are coming from 2004, and possible this arnt relay
up2date.

I need to refresh the update and build the own rules.



I read now meny topics from apache - spamassassin site, and it's time to
refresh

Me point to filter granularity.



Thanks

Mauri

Re: AW: gmail hotmail picture and a lot of spam-rubish

[mauric]

Sorry Benny,

 

>> Please broter make shorter way, I don’t have plenty of time 

 

>do you know what sieve autoreader is ?

historical questions?

 

>long version: i don need time to read reply's anymore

… m please let me think, it’s a other mailinglist?, yes, ok I understood !

 

If you are so open, I appreciate here any possible answer,  or any here with 
possible other maillist links?

 

I give now meny answers with, email addresses, headers, ip addresses, anything, 
and the answer are not so happy.

 

I don’t thin so for regards

Mauri

Re: AW: gmail hotmail picture and a lot of spam-rubish

[mauric]

 

>https://sanesecurity.com/

> there is a maillist for this aswell, ask on maillist with clamav signature 
> catch it

> 

> or build localy own signature to catch it, spammers is very genious in 2021

> and others is not :=)

 

But this are a joke? I need contact any other mailinglist, and you don’t know 
the answer?

and to build this absolut - magic signature from clamav know only this new 
mailigroup?

 

Please broter make shorter way, I don’t have plenty of time 

 

--

Picture: 
https://creatingopenspace.files.wordpress.com/2017/08/1-format43.jpg?w=667 

 =818

AW: gmail hotmail picture and a lot of spam-rubish

[mauric]

Spam will send from Gmx to  domain.ch and so I  recieve every spam mail.

Please what I need read, or any help to minimize the rush, thanks for any
possible help!



Thanks

---



Return-Path: m...@gmx.ch 

Delivered-To: m...@domain.ch 

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip= x.x.x.x;
helo=mout-xforward.gmx.net; envelope-from=mau...@gmx.ch
 ; receiver=

DMARC-Filter: OpenDMARC Filter v1.3.2 nmail.domain.ch CA3D940180

Authentication-Results: nmail.domain.ch mail.domain.ch domain.ch; dmarc=none
(p=none dis=none) header.from=cv-megatec.com

Authentication-Results: nmail.domain.ch mail.domain.ch domain.ch; spf=pass
smtp.mailfrom=mau...@gmx.ch 

DKIM-Filter: OpenDKIM Filter v2.11.0 nmail.domain.ch CA3D940180

Authentication-Results: nmail.domain.ch;

dkim=pass (2048-bit key; unprotected)
header.d=cv-megatec.com header.i=@cv-megatec.com
  header.b="hhUQ+QzF";

dkim-atps=neutral



X-Spam-Status: No, score=2.9 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,

DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,


HEADER_FROM_DIFFERENT_DOMAINS,PHP_SCRIPT,SPF_PASS,UNPARSEABLE_RELAY

autolearn=no autolearn_force=no version=3.4.5



X-jogjacamp-MailScanner-EFA-Watermark:
1618578558.40183@GI+aO+rGLF+7R6OtU0xkOA


X-jogjacamp-MailScanner-EFA-From: ad...@cv-megatec.com


X-jogjacamp-MailScanner-EFA-SpamScore: sss

X-jogjacamp-MailScanner-EFA: Found to be clean

X-jogjacamp-MailScanner-EFA-ID: A562A450CE.AFC18

X-jogjacamp-MailScanner-EFA-Information: Please contact
host...@jogjacamp.co.id   for more
information

DMARC-Filter: OpenDMARC Filter v1.3.2 mx8-dti.idweb.host A562A450CE

DKIM-Filter: OpenDKIM Filter v2.11.0 mx8-dti.idweb.host A562A450CE

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=cv-megatec.com; s=default;
h=Content-Transfer-Encoding:Content-Type:


MIME-Version:Message-ID:Reply-To:From:Date:Subject:To:Sender:Cc:Content-ID:


Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-C
c


:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe
:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=lcoVdWgf8MV+ISqbw5wT7PGLxlDv6W2+sXs2sVA35Lc=;
b=hhUQ+QzFzaVdjRyjw4UiHkNBNp


ArsTfOKRFTFtsSPfM7YLe0APtp4aVW5Ne3U5xUEVGnQ7kadk6sI0q3uOrRQV1lwf/s+z452WYGRI
2


PViQnJgphenHammmvAiJ7rC9IAEnOFAwrBVoLblfLdYzMW3NIUZcXiy7okYdNFRSuw5TEN1z1pZu
R


p/6Pz3xoPdhwbo1y13R/DRAhPID4CzBTsGdC4+204bLsX4FB8RxCKIH2vE2CscU8IDCh9D1W6FPt
v


pHRbiudRKyPKHCeUkD90PUbH9BhlL/XumztdgnpaOSroOXDAj0T/1tEzmASKI2p5HpfQjM+xN0/s
U

zkQVD9Jw==;

To:   mau...@gmx.ch

Subject: Copy of: Ich glaube, ich mag dich sehr.

X-PHP-Script: cv-megatec.com/index.php for 175.101.241.38

X-PHP-Originating-Script: 1301:class.phpmailer.php

Date: Fri, 9 Apr 2021 13:09:13 +

From: CV MEGATEC ad...@cv-megatec.com 

Reply-To: mau...@gmx.ch 

Message-ID: 684126612d000a4a63e4bf572dc29...@cv-megatec.com


X-Priority: 3

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report

X-AntiAbuse: Primary Hostname - bangunkerto.idweb.host

X-AntiAbuse: Original Domain - gmx.ch

X-AntiAbuse: Originator/Caller UID/GID - [1301 993] / [47 12]

X-AntiAbuse: Sender Address Domain - cv-megatec.com

X-Get-Message-Sender-Via: bangunkerto.idweb.host: none

X-Authenticated-Sender: bangunkerto.idweb.host:

X-Source:

X-Source-Args:

X-Source-Dir: cv-megatec.com:/public_html

Envelope-To: mau...@gmx.ch 

X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;

X-UI-Filterresults: junk:10;V03:K0:zb2Lq9jis3I=:ZJCkd9rnw/AWEoyI1Hk/FRVokf63

X-UI-Loop:V01:b45uBQMNFLo=:ZzxzB5ZJASLhm3BQ49swt4RNAPUHBwD0Duqjgkr0Xeg=

X-Spam-Flag: YES

X-UI-Out-Filterresults: junk:10;V03:K0:455IVB/0FCI=:fp3ZmfrWb651vpz+1/87wEBx



X-Spam-Level: **

X-Spam-Checker-Version: SpamAssassin 3.4.5 (2021-03-20) on nmail.domain.ch

X-Virus-Scanned: clamav-milter 0.102.4 at nmail.domain.ch

X-Virus-Status: Clean







Von: Loren Wilton mailto:lwil...@earthlink.net> >
Gesendet: Freitag, 9. April 2021 10:11
An: users@spamassassin.apache.org 
Betreff: Re: gmail hotmail picture and a lot of spam-rubish



We would need to see the original headers from the spam, or ideally the
whole spam before we could say anything. It would also be helpful to see the
rules it hit on your system.



   Loren

gmail hotmail picture and a lot of spam-rubish

[mauric]

After implementing spamassassin and spamssassin, the situation are better
then bevor.

also lot of women picture from Hotmail or gmail, but sencerly how I can
eliminate this?



Please how it's possible for block, this kind of mail?

Thanks

Spamassassin dont send Mail to Spam domain

[mauric]

Hello

after modified the hole mail.cf and master.cf postfix 3.4.14 the flush from 
Mail runs better,  that how fell and see mail.log 

one thing, bevor all Spam Email wass delivered to Spam @ domain.ch mailbox, but 
now, this rule don’t have the right effect ☹

 

Thanks for possible update

 

Spamassassin - local.cf

#   Add *SPAM* to the Subject header of spam e-mails

rewrite_header Subject *SPAM*

 

all_spam_to s...@domain.ch  

 

--

 

cat /etc/postfix/main.cf | grep header_checks

smtp_header_checks = regexp:/etc/postfix/header_checks

 

--

 

root@nmail:/etc/postfix# cat header_checks

/^X-Spam-Status: Yes/ REDIRECT s...@domain.ch  

/^Received:/IGNORE

/^subject: *$/   REJECT  Please add subject to your mail.

/^X-Originating-IP:/IGNORE

/^X-Mailer:/IGNORE

/^Received: from .*127.0.0.1*/ IGNORE

 

--

 

master.cf

smtp  inet  n   -   -   -   1   postscreen

-o content_filter=/usr/local/bin/spamassassin

policyd-spf  unix  -   n   n   -   -   spawn

user=policyd-spf argv=/usr/bin/policyd-spf

smtpd pass  -   -   -   -   -   smtpd

dnsblog   unix  -   -   -   -   0  dnsblog

tlsproxy  unix  -   -   -   -   0   tlsproxy

submission inet n   -   n   -   -  smtpd

 

 

 

Spam mail from Hotmail - Outlook - how to stop

[mauric]

Hello

Please how i can filter/ban E-Mail from Hotmail, Outlook, with women
pictures.

Yes spamassassin and meny other tools installed and will block meny of bad

E-Mail, the email With picture and more will also transfer.

 

I think that I am on the right way with the application Spamassassin, I need

To know how I can define filtering bad email.

 

Spamassassin 3.4.2-1+deb10u3

body LOCAL_OBFU_VIAGRA
/(?:\b[vu]|\B(?:\\\/|\xCE\xBD))[\W_]{0,3}(?:[il1:\|\*\xCC-\xCF\xEC-\xEF\xA6]
|\xC4[\xA8-\xB0]|\xC4\xBA|\xC4\xBC|\xC4\xBE|\xC5\x80|\xC5\x82|\xC7[\x8F-\x90
]|\xD0[\x86-\x87]|\xD1[\x96-\x97]|\xCE\x8A|\xCE\x90|\xCE\x99|\xCE\xAA|\xCE\x
AF|\xCE\xB9|\xCF\x8A)[\W_]{0,3}(?:[a4\*\@\xC0-\xC5\xAA\xE0-\xE5]|\/\\|\xC4[\
x80-\x85]|\xC7[\x8D-\x8E]|\xC7[\xBA-\xBB]|\xCE\x86|\xCE\x91|\xCE\x94|\xCE\x9
B|\xCE\xAC|\xCE\xB1|\xD0\x90|\xD0\xB0)[\W_]{0,3}(?:[g6]|\xC4[\x9C-\xA3]])[\W
_]{0,3}(?:[r\xAE]|\xC5[\x94-\x99]|\xD1\x93)[\W_]{0,3}(?:[a4]\b|(?:[\*\@\xC0-
\xC5\xAA\xE0-\xE5]|\/\\|\xC4[\x80-\x85]|\xC7[\x8D-\x8E]|\xC7[\xBA-\xBB]|\xCE
\x86|\xCE\x91|\xCE\x94|\xCE\x9B|\xCE\xAC|\xCE\xB1|\xD0\x90|\xD0\xB0)\B)/i

score LOCAL_OBFU_VIAGRA 1.8

describe LOCAL_OBFU_VIAGRA Obfuscated 'VIAGRA' in body

 

describe MANGLED_VIAGRA mangled viagra

body MANGLED_VIAGRA
/(?!viagra)v{1,3}(?:[_\W]{0,5}|[viagra])[iÌÍÎÏìíîï\|1l\!](?:[_\W]{0,5}|[viag
ra])[aÀÁÂÃÄÅàáâãäå4\@](?:[_\W]{0,5}|[viagra])g(?:[_\W]{0,5}|[viagra])r(?:[_\
W]{0,5}|[viagra])[aÀÁÂÃÄÅàáâãäå4\@]/i

scoreMANGLED_VIAGRA 2.5

 

postfix - 3.4.14

smtp  inet  n   -   -   -   1   postscreen
-o content_filter=spamassassin

postscreen_dnsbl_sites = zen.spamhaus.org*3

and so on

 

thanks

 

Beginner - Spamassassins 3.4.4 - Deb 10

[mauric]

Hello today i have installed SpamAssassin 3.4.4, iam new to this
application.



Also the CPAN Module are installed and the Service from SpamAssassin are up
and Running,

i think that iam ready but also i recieve always alot of spam



I read the installation paper on the Spamassassin site, but i dont know
exactly

What do you use to learn this application. you buy a book ? or you found any

Thing on Spamassassin site ?





On the local.cf i made the following changes ;

rewrite_header Subject *SPAM*

required_score 5

use_bayes 1

bayes_auto_learn 1



ifplugin Mail::SpamAssassin::Plugin::Shortcircuit

whitelist_from i...@sbb.ch 



Thanks for possible update

M