hi
Hi to all
I have some little problem with SpamAssassin SpamAssassin with MailScanner . I set the rule in mailscanner # This can also be the filename of a ruleset. Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db I now the 3 days file grows to very big file SpamAssaissin output SpamAssassin cache hit for message is output for every mail who marked like spam Server is Ubuntu 8.04.3 with SpamAssassin version 3.2.4 and MailScanner version 4.58.9 Ho I can fix it ?
Re: Hi to all
On 2/8/2010 9:52 AM, Tsabolov Sergey wrote: I have some little problem with SpamAssassin SpamAssassin with MailScanner . I set the rule in mailscanner # This can also be the filename of a ruleset. Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db I now the 3 days file grows to very big file SpamAssaissin output SpamAssassin cache hit for message is output for every mail who marked like spam Server is Ubuntu 8.04.3 with SpamAssassin version 3.2.4 and MailScanner version 4.58.9 Ho I can fix it ? Disable the cache? Seriously, if your mail volume is really high, the size of the cache is going to be large. Also, since it's a SQLite file, it won't shrink itself. The DB will mark entries as deleted, but will leave the space for use when inserting new entries, which means the size is going to end up being based on your peak mail load, not your recent mail load. In the long run, this is good behavior, because the file isn't shrinking and growing all the time, which wastes time as the kernel repeatedly updates the inodes. You could try changing the SpamAssassin Cache Timings setting, to make the cache entries shorter-lived, which will reduce the scale of the problem somewhat. http://www.mailscanner.info/MailScanner.conf.index.html#Cache%20SpamAssassin%20Results I'd also consider asking on the MailScanner mailing list. This is a MailScanner-specific issue, and there are more MailScanner users over there than there are on this list.
Hi, help with spamc and sa-learn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have already install spamassassin locally on my machine, now, I want tell to spamassassin which message is spam and which isn't, I have read about spamc and sa-learn, but how is you use exactly?, I mean I read the manpage and show me the usage: spamc [options] message but... what does this mean, which message?, in some file may be? and sa-learn?, which is better? thanks. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFFkxbgoZmxoVJRtGIRAo+AAJ9fVhD9XzETIKc0oUS4xUTjA7xl3QCcC8vn KkZE/OLo2ckp0LkyJhjv1d4= =Bwp8 -END PGP SIGNATURE-
Re: Hi, help with spamc and sa-learn
Exal de Jesus Garcia Carrillo wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have already install spamassassin locally on my machine, now, I want tell to spamassassin which message is spam and which isn't, I have read about spamc and sa-learn, but how is you use exactly?, I mean I read the manpage and show me the usage: spamc [options] message but... what does this mean, which message?, in some file may be? and sa-learn?, which is better? thanks. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFFkxbgoZmxoVJRtGIRAo+AAJ9fVhD9XzETIKc0oUS4xUTjA7xl3QCcC8vn KkZE/OLo2ckp0LkyJhjv1d4= =Bwp8 -END PGP SIGNATURE- To begin with, you are looking in the wrong man pages. You should look in the man pages for sa-learn. There's a lot there, and it's all pretty important that you fully understand it, and feel comfortable with it, it's not hard It all depends on what format your in-box is using. If it is mbox format (Mostly used I believe), then the proper way to run sa-learn to learn spam is to first of all, get all of your spam messages into one single file, mbox style. Lets pretend that the file you end up with is named /var/spool/mail/spam. In that case, you would run: sa-learn --spam --mbox /var/spool/mail/spam If you want to learn ham (good email), and you have a file in that same directory called ham, then run: sa-learn --ham --mbox /var/spool/mail/ham. -=Aubrey=-
Hi !
Hi .. I am new to this list. I need some help. I have installed qmail with qmail-scan, spamassassin and clamav. The installation was going well. The clamav and spamassassin is running under qscand user. The mails what came with virus attachment, the attachment is deleted by the clamav. But the spam not. I want the subject to be rewrited what's not happen. In my local.cf I have: rewrite_header Subject SPAM(_SCORE_) required_score 20.0 required_hits 20 what I thing is what I need to spamassassin rewrite the subject. The same settings I have added to homedir in qscand In user_prefs. Can anyone help me in how to setup the spamassassin to rewrite the subject ? Thanks! PS. I use p5-Mail-SpamAssassin-3.1.7_1 and a FreeBSD 6.1 AMD64
Re: Hi !
On Friday 17 November 2006 13:52, Cristi Tudose wrote: Hi .. One tip for the future: Hi ! is not a good subject line. I have installed qmail with qmail-scan, spamassassin and clamav. The installation was going well. The clamav and spamassassin is running under qscand user. The mails what came with virus attachment, the attachment is deleted by the clamav. But the spam not. I want the subject to be rewrited what's not happen. In my local.cf I have: rewrite_header Subject SPAM(_SCORE_) required_score 20.0 required_hits 20 It appears that Qmail-scanner can be run in one of two modes, and in the fast mode it adds its own headers, just like Amavis. See http://qmail-scanner.sourceforge.net/FAQ.php#cs, points 16 and 17. Also lower the required_score to something more normal. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpQwXj1IMzTf.pgp Description: PGP signature
RE: Hi !
What else do you have in your local.cf? Wes Cristi Tudose [EMAIL PROTECTED] wrote: v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} HI .. I never tried with 5 or 7. But! When I send to mysef from yahoo.com a spam message, And I check the full header I see this: eturn-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 66234 invoked from network); 17 Nov 2006 13:25:46 - Received: from 68.142.236.83 by mail.prosportequipment.ro (envelope-from [EMAIL PROTECTED], uid 1004) with qmail-scanner-2.01 (clamdscan: 0.88.5/2160. spamassassin: 3.1.6. Clear:RC:0(68.142.236.83):SA:1(102.8/20.0):. Processed in 8.861972 secs); 17 Nov 2006 13:25:46 - X-Spam-Status: Yes, score=102.8 required=20.0 X-Spam-Level: Received: from web57805.mail.re3.yahoo.com (68.142.236.83) by prosportequipment.ro with SMTP; 17 Nov 2006 13:25:37 - Received: (qmail 4186 invoked by uid 60001); 17 Nov 2006 13:25:30 - DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type; b=YcAocynBVNVztHvfRsfhaWeSV7bkd2BonJSwagVO9rJ3j9i6yc5JgM6K+XS7uIXW9sCSaWu9/45WIrQlMbAlEXttygutOM5Cnn3fgJvJMredHuQP30HsOPTYJ0gsYAd4GKIHHpvIBiYLv001mitxXCLmO28tV/Gn2n7yuvXltKM= ; Message-ID: [EMAIL PROTECTED] Received: from [80.97.65.247] by web57805.mail.re3.yahoo.com via HTTP; Fri, 17 Nov 2006 05:25:30 PST Date: Fri, 17 Nov 2006 05:25:30 -0800 (PST) From: Anti Piracy [EMAIL PROTECTED] Subject: dsada To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=0-1106431873-1163769930=:3976 the score is 102.8 what is huge ! I have set the Subject to subject .. but this not helps me. :( Any suggestion ? Thank you! - From: twofers [mailto:[EMAIL PROTECTED] Sent: Friday, November 17, 2006 3:18 PM To: users@spamassassin.apache.org Subject: Re: Hi ! Cristi, Have you tried lowering your required_score to something like between 5 and 7 ? also change rewrite_header Subject SPAM(_SCORE_) to: rewrite_header subject SPAM(_SCORE_) Keep it lower case. You can also run spamassassin -D --lint to check for syntax errors. Wes Depending on what version of SA you are using required_hits is depreciated and not used. Cristi Tudose [EMAIL PROTECTED] wrote: Hi .. I am new to this list. I need some help. I have installed qmail with qmail-scan, spamassassin and clamav. The installation was going well. The clamav and spamassassin is running under qscand user. The mails what came with virus attachment, the attachment is deleted by the clamav. But the spam not. I want the subject to be rewrited whatÂ’s not happen. In my local.cf I have: rewrite_header Subject SPAM(_SCORE_) required_score 20.0 required_hits 20 what I thing is what I need to spamassassin rewrite the subject. The same settings I have added to homedir in qscand In user_prefs. Can anyone help me in how to setup the spamassassin to rewrite the subject ? Thanks! PS. I use p5-Mail-SpamAssassin-3.1.7_1 and a FreeBSD 6.1 AMD64 - Sponsored Link Mortgage rates near 39yr lows. $510,000 Mortgage for $1,698/mo - Calculate new house payment - Sponsored Link Mortgage rates near 39yr lows. $510,000 Mortgage for $1,698/mo - Calculate new house payment
Re: Bayes failure on hi, it's Somebody spam
On 11/16/06, Jon Trulson [EMAIL PROTECTED] wrote: Hmm, that has not been my experience at all... Bayes (99) is still catching every one for me. In this instance, SpamAssassin is running after POP download from gmail, so I'm only seeing the samples that have already made it through google's filters. That may have something to do with it.
Bayes failure on hi, it's Somebody spam
It looks to me as if the recent spate of pump'n'dump spams are deliberately crafted to avoid being Bayes-learned by spamassassin. In spite of all having different subject lines and senders and other minor differences, once you've learned one of them sa-learn ignores all the rest -- and they all still get a BAYES_00 score for me. I thought I had a pretty good understanding of how SA's Bayes training worked, but this is pretty clearly confusing it somehow.
Re: Bayes failure on hi, it's Somebody spam
On Thu, 16 Nov 2006, Bart Schaefer wrote: It looks to me as if the recent spate of pump'n'dump spams are deliberately crafted to avoid being Bayes-learned by spamassassin. In spite of all having different subject lines and senders and other minor differences, once you've learned one of them sa-learn ignores all the rest -- and they all still get a BAYES_00 score for me. I thought I had a pretty good understanding of how SA's Bayes training worked, but this is pretty clearly confusing it somehow. Hmm, that has not been my experience at all... Bayes (99) is still catching every one for me. There may be something else going wrong with your setup - no idea what offhand though, sorry. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta
Re: Re: Hi spam
Kenneth Porter wrote: I noticed today an unusually high incidence of spam subject lines of Re: Hi, and I don't see a rule for this in the distribution. Do others see this much in legitimate mail? Or could it make a good rule? I see enough legit mail with such a subject go through my systems that would make the rule useless, at least for my users. Daryl
Re: Re: Hi spam
Daryl C. W. O'Shea wrote: Kenneth Porter wrote: I noticed today an unusually high incidence of spam subject lines of Re: Hi, and I don't see a rule for this in the distribution. Do others see this much in legitimate mail? Or could it make a good rule? I see enough legit mail with such a subject go through my systems that would make the rule useless, at least for my users. True, the subject is a bad idea, but the contents is pretty consistent, most have something like Vragra in large type, a link and some random text fragment at the end ... Some of the Hi-mails are already tagged by our filter (I'd say somewhere beyond 80%), though some still get through untagged: HTML_MESSAGE 0.00, URIBL_SBL 1.09, URIBL_WS_SURBL 1.53) HTML_MESSAGE 0.00, RCVD_IN_BL_SPAMCOP_NET 1.33, URIBL_SBL 1.09, URIBL_WS_SURBL 1.53) HTML_MESSAGE 0.00, RCVD_IN_BL_SPAMCOP_NET 1.33, URIBL_SBL 1.09, URIBL_WS_SURBL 1.53) Wonder if there's an update to the rules-emporium config mangled some time soon !? -gg
Re: Hi spam
I noticed today an unusually high incidence of spam subject lines of Re: Hi, and I don't see a rule for this in the distribution. Do others see this much in legitimate mail? Or could it make a good rule?
Hi, i have a good idea for a plugin/ruleset, where do i send it?
Hi, I have a good idea for a plugin/ruleset, where do i send it? bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C
RE: Hi, i have a good idea for a plugin/ruleset, where do i send it?
Mathias Homann wrote: Hi, I have a good idea for a plugin/ruleset, where do i send it? users@spamassassin.apache.org is a good place to assess how useful it would be to the community. Is this something you would write yourself, or are you asking for help in writing it? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer
Re: Hi, i have a good idea for a plugin/ruleset, where do i send it?
Am Freitag, 21. Oktober 2005 17:57 schrieb [EMAIL PROTECTED]: Mathias Homann wrote: Hi, I have a good idea for a plugin/ruleset, where do i send it? users@spamassassin.apache.org is a good place to assess how useful it would be to the community. Is this something you would write yourself, or are you asking for help in writing it? with my perl skills being close to nil, I'd thought I put up the idea somewhere, then wait what happens... anyways, I'd love to be able to give scores to a mail if its from a given email address but it is not pgp signed. bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C
Re: Hi, i have a good idea for a plugin/ruleset, where do i send it?
Am Freitag, 21. Oktober 2005 18:52 schrieb [EMAIL PROTECTED]: Mathias Homann wrote: anyways, I'd love to be able to give scores to a mail if its from a given email address but it is not pgp signed. Sounds like three rules should do the trick. Pseudo-rules follow: _FROM_JOE: From address matches /[EMAIL PROTECTED]/ _PGP_SIGNED: body matches /---PGP SIGNATURE--/ FROM_JOE_BUT_NOT_PGP_SIGNED: meta rule, _FROM_JOE !_PGP_SIGNED score 3 No perl necessary. The PGP rule might even exist already. :) well that would match any mail with the line PGP SIGNATURE in it... better would be a check for a _VALID_ signature... but then the mail server would have to have a gnupg key for the sender... bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C
RE: Hi, i have a good idea for a plugin/ruleset, where do i send it?
Mathias Homann wrote: better would be a check for a _VALID_ signature... but then the mail server would have to have a gnupg key for the sender... Now you're talking about a Mail::SpamAssassin::Plugin::GPG module. That's a serious undertaking. Mail::SpamAssassin::Plugin::DomainKeys is a good place to start looking, though, if you're committed to this. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer
Re: hi.. how do i recover mails?
Hello Ram, Saturday, February 5, 2005, 6:15:07 AM, you wrote: R my email server uses spamassassin. is there any way i can 'clean' all the R tags from an assasinated email and recover the original message? many R genuine mails have been getting assasinated and it becomes really difficult R to read them.. esp when they have html content. If your server has done this correctly, the original email, unchanged, is an attachment to the email you receive with the spam notification. You should be able to open that attachment using the normal method within your email program, and you should then be able to view that email. R and how do i figure out what version of spamassassin my server is equipped R with? is there any way of knowing just by looking at an assassinated mail? Check the email headers in any email. It should contain something like X-Spam-Status: No, score=-12.0 required=5.0 tests=BAYES_00,NO_REAL_NAME,SP_HAM_EXTREME autolearn=ham version=3.0.1 That last element is the SpamAssassin version. If you're getting a very large number of false positives, then there's a problem in your server's installation. Either they have scores out of whack, or a confused Bayes database. If the false positives (non-spam flagged as spam) are from specific and consistent senders (such as mailing lists or newsletters), you may be able to whitelist those sources. Otherwise you'll need to work with your server to help them fix their problem. Bob Menschel
hi.. how do i recover mails?
hi, my email server uses spamassassin. is there any way i can clean all the tags from an assasinated email and recover the original message? many genuine mails have been getting assasinated and it becomes really difficult to read them.. esp when they have html content. and how do i figure out what version of spamassassin my server is equipped with? is there any way of knowing just by looking at an assassinated mail? thanks, ram
Re: hi.. how do i recover mails?
Hi, * Ram wrote (2005-02-05 15:15): my email server uses spamassassin. is there any way i can 'clean' all the tags from an assasinated email and recover the original message? Look in the manpage for the --remove-markup option. many genuine mails have been getting assasinated and it becomes really difficult to read them.. esp when they have html content. Then ask the sender not to send HTML messages. and how do i figure out what version of spamassassin my server is equipped with? is there any way of knowing just by looking at an assassinated mail? Yes, look in the mail headers. Thorsten -- To announce that there must be no criticism of the president, or that we are to stand by the president, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public. - Theodore Roosevelt pgpa5XZRVZgbh.pgp Description: PGP signature
Re: hi.. how do i recover mails?
Ram wrote: hi, my email server uses spamassassin. is there any way i can clean all the tags from an assasinated email and recover the original message? many genuine mails have been getting assasinated and it becomes really difficult to read them.. esp when they have html content. Best thing that happened to me concerning recovering quarantined Messages is the bsmtp format which allows for very easy re-injection of the mails... look at the quarantine_method or something like that... This doesn't clean them, but allows you to deliver them finally and how do i figure out what version of spamassassin my server is equipped with? is there any way of knowing just by looking at an assassinated mail? There usually is a header telling you this - if not, a spamassassin -D should probably tell you... Matt
Hi. I'm dumb.
I'm having problems whitelisting one of the mailing lists I'm on.. a few sparklist.com lists. I'm using SA 2.6x and amavisd-new. I can't just whitelist the From because it's the To: field that I need to use.. Help. I'm too brain dead today to figure this one out.. blah. Here's the full headers from one of them: Return-Path: [EMAIL PROTECTED] Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87]) by mail.pbp.net (Postfix) with ESMTP id E263958F7B for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:34:35 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailgate.pbp.net (Postfix) with ESMTP id A3DBA25813B for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:49:38 -0700 (PDT) Received: from mailgate.pbp.net ([127.0.0.1]) by localhost (mailgate.pbp.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19109-11 for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:49:37 -0700 (PDT) Received: from intm-dl.sparklist.com (intm-dl.sparklist.com [64.62.197.83]) by mailgate.pbp.net (Postfix) with SMTP id E90AF25812D for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:49:35 -0700 (PDT) Message-Id: [EMAIL PROTECTED] Reply-To: isp-tech@isp-tech.com From: Maria Wells [EMAIL PROTECTED] To: isp-tech@isp-tech.com Subject: *SPAM* [isp-tech] Re: Error with secure sites using both IE 6.0 and Netscape 7.1 Date: Wed, 27 Oct 2004 14:33:45 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 In-Reply-To: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Thread-Index: AcS8UlCrfVWu/BJGR8Ga0nXYV6pD3AAAQP4w X-MailScanner-Information: Please contact the ISP for more information X-MailScanner: Found to be clean X-MailScanner-SpamScore: s List-Unsubscribe: mailto:[EMAIL PROTECTED] X-INTM-Message-Id: [EMAIL PROTECTED] X-Virus-Scanned: by amavisd-new at mailgate.pbp.net X-Spam-Status: Yes, hits=6.5 tagged_above=-999.0 required=6.0 tests=BAYES_60, J_CHICKENPOX_34, MAILTO_TO_REMOVE, NOT_TO_ME, REMOVE_REMOVAL_2WORD X-Spam-Level: ** X-Spam-Flag: YES
RE: Hi. I'm dumb.
I'm having problems whitelisting one of the mailing lists I'm on.. a few sparklist.com lists. I'm using SA 2.6x and amavisd-new. I can't just whitelist the From because it's the To: field that I need to use.. Help. I'm too brain dead today to figure this one out.. blah. Ouch. I'd guess so.. Try whitelist_to. Here's the full headers from one of them: Return-Path: [EMAIL PROTECTED] Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87]) by mail.pbp.net (Postfix) with ESMTP id E263958F7B for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:34:35 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailgate.pbp.net (Postfix) with ESMTP id A3DBA25813B for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:49:38 -0700 (PDT) Received: from mailgate.pbp.net ([127.0.0.1]) by localhost (mailgate.pbp.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19109-11 for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:49:37 -0700 (PDT) Received: from intm-dl.sparklist.com (intm-dl.sparklist.com [64.62.197.83]) by mailgate.pbp.net (Postfix) with SMTP id E90AF25812D for [EMAIL PROTECTED]; Wed, 27 Oct 2004 11:49:35 -0700 (PDT) Message-Id: [EMAIL PROTECTED] Reply-To: isp-tech@isp-tech.com From: Maria Wells [EMAIL PROTECTED] To: isp-tech@isp-tech.com Subject: *SPAM* [isp-tech] Re: Error with secure sites using both IE 6.0 and Netscape 7.1 Date: Wed, 27 Oct 2004 14:33:45 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 In-Reply-To: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Thread-Index: AcS8UlCrfVWu/BJGR8Ga0nXYV6pD3AAAQP4w X-MailScanner-Information: Please contact the ISP for more information X-MailScanner: Found to be clean X-MailScanner-SpamScore: s List-Unsubscribe: mailto:[EMAIL PROTECTED] X-INTM-Message-Id: [EMAIL PROTECTED] ts.isp-lists.com X-Virus-Scanned: by amavisd-new at mailgate.pbp.net X-Spam-Status: Yes, hits=6.5 tagged_above=-999.0 required=6.0 tests=BAYES_60, J_CHICKENPOX_34, MAILTO_TO_REMOVE, NOT_TO_ME, REMOVE_REMOVAL_2WORD X-Spam-Level: ** X-Spam-Flag: YES
Re: *SPAM* RE: Hi. I'm dumb.
Bret Miller wrote: I'm having problems whitelisting one of the mailing lists I'm on.. a few sparklist.com lists. I'm using SA 2.6x and amavisd-new. I can't just whitelist the From because it's the To: field that I need to use.. Help. I'm too brain dead today to figure this one out.. blah. Ouch. I'd guess so.. Try whitelist_to. Oh, duh. I was trying to stick them somewhere in amavisd.conf - forgot all about local.cf Whoops. *goes to finish his coffee* Thanks :D