Amavis scoring on externally added headers?

2012-08-15 Thread Tom Hendrikx
Hi, Lately I've received a few messages that ended up in my quarantine without reason. Upon inspection, it seems that amavis uses CRM114 headers that were added by the sender, and scores on them. My setup is amavisd-new 2.7.1, with only dspam as spamfilter, fed by postfix (via content_filter). I

Re: Spam Quarantined mail can be used as Spamassassin ham?

2012-09-10 Thread Tom Hendrikx
On 10-09-12 22:28, Nikolaos Milas wrote: > On 6/9/2012 11:14 μμ, Nikolaos Milas wrote: > >> ...My question is whether the message file, as stored in amavis spam >> quarantine dir, is in a format suitable for use by sa-learn. >> >> So, if I copy some messages (which I consider ham) from >> /var/blo

Re: spam assassin rules update

2012-10-16 Thread Tom Hendrikx
On 10/16/12 9:33 AM, Nikolaos Milas wrote: > On 28/9/2012 3:41 μμ, Nikolaos Milas wrote: > >> When I run simply "/usr/bin/sa-update -D", everything seems to run >> smoothly. > > As an update, I am now using the following line in /etc/cron.d/sa-update: > > 10 3 * * * root /usr/bin/sa-update -D |

Re: Viagra spam mail autolearned as ham, tagged score -1.64

2012-10-18 Thread Tom Hendrikx
On 18/10/12 22:05, Nick Rosier wrote: > matt wrote: >> Hello all. >> >> I just received a 'male enhancement pharmacy' type spam email that >> amavisd-new (v2.6.6) assigned a score of (-1.64). It is possibly the >> best designed html spam I've seen, and I don't see how Spamassassin >> could have ev

Re: Viagra spam mail autolearned as ham, tagged score -1.64

2012-10-19 Thread Tom Hendrikx
On 10/19/12 6:56 AM, matt wrote: > > On 10/18/2012 02:03 PM, Tom Hendrikx wrote: >> On 18/10/12 22:05, Nick Rosier wrote: >>> matt wrote: >>>> Hello all. > > # > I had to truncate my reply because mailman bounced the message as > "spam"

Re: amavisd fails to start on reboot, but no problems starting manually [SOLVED]

2013-04-16 Thread Tom Hendrikx
On 04/16/2013 03:25 AM, Ryan de Laplante (personal) wrote: > I enabled the amavis.log instead of using syslog and then rebooted. > Same issue: just dtwo lines in the log file. Next I tried to manually > start amavis and got an error message: > >> # /etc/init.d/amavis start >> Starting amavisd: h

Re: Spam Scoring issue

2014-08-26 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 25-08-14 21:25, Vernon Fort wrote: > I am testing messages that made it pass the amavis scanner with a > score less than 1 (0.1333). But when I sync the message from an > exchange folder and test is manually by ‘spamassassin –D < {MID}.’, > I get

Re: SpamAssassin scoring

2014-10-31 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 31-10-14 19:16, Bruce Pennypacker wrote: > A bit more of a followup to my spam scoring issue I'm seeing. I'm > having spam that's scored highly quarantined. In my quarantine > directory I have a few hundred quarantined messages from just the >

Re: Amavis or ClamAV?

2014-11-07 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07-11-14 20:27, Edgar Pettijohn wrote: > It looks like I finally got my config working correctly, however I > now see the following errors. > > Nov 7 12:05:02 pettijohn amavis[35902]: (35902-04) Checking: > S8ZW_jrjqFJ3 [141.42.206.35] > ->

Re: Amavis and anti-virus engine ?

2016-02-23 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 23-02-16 21:26, Patrick Ben Koetter wrote: > * Jakob Curdes : >> As far as I know, Avira has also discontinued their linux >> product. > > The scan engine is still available to system integrators. We are > one of those and like the other integrat

Re: Virus notification

2016-03-08 Thread Tom Hendrikx
On 08-03-16 16:56, @lbutlr wrote: > before I duplicate work, I thought I’d check if someone else has > already done something like this. > > Currently, amavis sends a notification to the virusal...@mydomain.tld > address when it catches something with a forbidden (BANNED) > attachment. > > I’d l

Re: Meaning of ".asc" in BANNED messages

2016-03-08 Thread Tom Hendrikx
Hi, A pgp signature, this message has one Regards, Tom On 08-03-16 16:58, @lbutlr wrote: > I have a quick question, the BANNED emails so far all seem to report the > following: > >> No viruses were found. >> >> Banned name: .asc,letter.212885777.js >> Content type: Banned > > > The

Re: Meaning of ".asc" in BANNED messages

2016-03-08 Thread Tom Hendrikx
On 08-03-16 19:15, @lbutlr wrote: > On Mar 8, 2016, at 10:31 AM, Tom Hendrikx wrote: >> On 08-03-16 16:58, @lbutlr wrote: >>> What is “.asc” since that is not a banned attachment. >> >> A pgp signature, this message has one > > There is no way that ever

Re: spam assassin rule to block a From address

2016-10-13 Thread Tom Hendrikx
Hi, You should probably also match only the address, not the full From line, especially when you're anchoring: header SPAM11OctF1 From:addr =~ /^aireco Regards, Tom On 13-10-16 05:58, Indunil Jayasooriya wrote: >> >> I think that the parenthesis are not necessary and the @ must be

Re: spam assassin rule to block a From address

2016-10-13 Thread Tom Hendrikx
On 13-10-16 10:12, Indunil Jayasooriya wrote: >> >> You should probably also match only the address, not the full From line, >> especially when you're anchoring: > > > what's the difference between From and From:addr ? > Considering the header: From: Indunil Jayasooriya A rule "header Fro

Re: Amavis DNS query timeout

2017-02-13 Thread Tom Hendrikx
On 13-02-17 09:19, Tim Smith wrote: > On 13 February 2017 at 00:13, Deeztek Support wrote: >> Is this inbound email from another domain to your email server? Can you be a >> bit more specific? >> > > > Yes, so for example on an email received from a @google.com email > address, I'll see : > >

Re: How many antivirus are recommended?

2017-06-20 Thread Tom Hendrikx
On 20-06-17 15:55, Alex wrote: > Hi, > > On Tue, Jun 20, 2017 at 8:42 AM, Hugo Manuel Ojendiz Lemus > wrote: >> I'm sorry to inform that I've abandoned the idea of installing COMODO >> antivirus. Mainly because the OS version incompatibility, and heavy use of >> the >> GUI. >> >> I'm still sea

Re: BOTNET_* spam score meaning

2017-07-28 Thread Tom Hendrikx
On 26-07-17 15:53, Phil Susi wrote: > I've been googling for the last half hour and can not find any > documentation that describes what these spam status scores mean. I'm > seeing good mail flagged as spam because of this: > > X-Spam-Status: Yes, score=3.2 tagged_above=-999 required=3 >

Re: MySQL Bayes and timeout in amavisd

2013-09-27 Thread Tom Hendrikx via amavis-users
On 09/27/2013 10:50 AM, Stefan Jakobs via amavis-users wrote: > > Hello list, > > I like to re-ask my question from march this year, as it is still an issue: > > I run a setup with postfix 2.5.13 and amavisd-new 2.7.2 in pre-queue > configuration. Spamassassin (3.3.2) uses a MySQL DB as bayes s

Re: AmavisD with DSPAM and SpamAssasin...

2013-10-10 Thread Tom Hendrikx via amavis-users
On 10/11/2013 12:24 AM, Christopher Koeber via amavis-users wrote: > Hello, > > I have been trying to get AmavisD ip[ and running with DSPAM for a while > with no success. I have SpamAssasin running and integrated nicely but I > get a permission denied error when I look at the logs. What do I nee