Hi,
Lately I've received a few messages that ended up in my quarantine
without reason. Upon inspection, it seems that amavis uses CRM114
headers that were added by the sender, and scores on them.
My setup is amavisd-new 2.7.1, with only dspam as spamfilter, fed by
postfix (via content_filter). I
On 10-09-12 22:28, Nikolaos Milas wrote:
> On 6/9/2012 11:14 μμ, Nikolaos Milas wrote:
>
>> ...My question is whether the message file, as stored in amavis spam
>> quarantine dir, is in a format suitable for use by sa-learn.
>>
>> So, if I copy some messages (which I consider ham) from
>> /var/blo
On 10/16/12 9:33 AM, Nikolaos Milas wrote:
> On 28/9/2012 3:41 μμ, Nikolaos Milas wrote:
>
>> When I run simply "/usr/bin/sa-update -D", everything seems to run
>> smoothly.
>
> As an update, I am now using the following line in /etc/cron.d/sa-update:
>
> 10 3 * * * root /usr/bin/sa-update -D |
On 18/10/12 22:05, Nick Rosier wrote:
> matt wrote:
>> Hello all.
>>
>> I just received a 'male enhancement pharmacy' type spam email that
>> amavisd-new (v2.6.6) assigned a score of (-1.64). It is possibly the
>> best designed html spam I've seen, and I don't see how Spamassassin
>> could have ev
On 10/19/12 6:56 AM, matt wrote:
>
> On 10/18/2012 02:03 PM, Tom Hendrikx wrote:
>> On 18/10/12 22:05, Nick Rosier wrote:
>>> matt wrote:
>>>> Hello all.
>
> #
> I had to truncate my reply because mailman bounced the message as
> "spam"
On 04/16/2013 03:25 AM, Ryan de Laplante (personal) wrote:
> I enabled the amavis.log instead of using syslog and then rebooted.
> Same issue: just dtwo lines in the log file. Next I tried to manually
> start amavis and got an error message:
>
>> # /etc/init.d/amavis start
>> Starting amavisd: h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 25-08-14 21:25, Vernon Fort wrote:
> I am testing messages that made it pass the amavis scanner with a
> score less than 1 (0.1333). But when I sync the message from an
> exchange folder and test is manually by ‘spamassassin –D < {MID}.’,
> I get
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 31-10-14 19:16, Bruce Pennypacker wrote:
> A bit more of a followup to my spam scoring issue I'm seeing. I'm
> having spam that's scored highly quarantined. In my quarantine
> directory I have a few hundred quarantined messages from just the
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 07-11-14 20:27, Edgar Pettijohn wrote:
> It looks like I finally got my config working correctly, however I
> now see the following errors.
>
> Nov 7 12:05:02 pettijohn amavis[35902]: (35902-04) Checking:
> S8ZW_jrjqFJ3 [141.42.206.35]
> ->
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 23-02-16 21:26, Patrick Ben Koetter wrote:
> * Jakob Curdes :
>> As far as I know, Avira has also discontinued their linux
>> product.
>
> The scan engine is still available to system integrators. We are
> one of those and like the other integrat
On 08-03-16 16:56, @lbutlr wrote:
> before I duplicate work, I thought I’d check if someone else has
> already done something like this.
>
> Currently, amavis sends a notification to the virusal...@mydomain.tld
> address when it catches something with a forbidden (BANNED)
> attachment.
>
> I’d l
Hi,
A pgp signature, this message has one
Regards,
Tom
On 08-03-16 16:58, @lbutlr wrote:
> I have a quick question, the BANNED emails so far all seem to report the
> following:
>
>> No viruses were found.
>>
>> Banned name: .asc,letter.212885777.js
>> Content type: Banned
>
>
> The
On 08-03-16 19:15, @lbutlr wrote:
> On Mar 8, 2016, at 10:31 AM, Tom Hendrikx wrote:
>> On 08-03-16 16:58, @lbutlr wrote:
>>> What is “.asc” since that is not a banned attachment.
>>
>> A pgp signature, this message has one
>
> There is no way that ever
Hi,
You should probably also match only the address, not the full From line,
especially when you're anchoring:
header SPAM11OctF1 From:addr =~ /^aireco
Regards,
Tom
On 13-10-16 05:58, Indunil Jayasooriya wrote:
>>
>> I think that the parenthesis are not necessary and the @ must be
On 13-10-16 10:12, Indunil Jayasooriya wrote:
>>
>> You should probably also match only the address, not the full From line,
>> especially when you're anchoring:
>
>
> what's the difference between From and From:addr ?
>
Considering the header:
From: Indunil Jayasooriya
A rule "header Fro
On 13-02-17 09:19, Tim Smith wrote:
> On 13 February 2017 at 00:13, Deeztek Support wrote:
>> Is this inbound email from another domain to your email server? Can you be a
>> bit more specific?
>>
>
>
> Yes, so for example on an email received from a @google.com email
> address, I'll see :
>
>
On 20-06-17 15:55, Alex wrote:
> Hi,
>
> On Tue, Jun 20, 2017 at 8:42 AM, Hugo Manuel Ojendiz Lemus
> wrote:
>> I'm sorry to inform that I've abandoned the idea of installing COMODO
>> antivirus. Mainly because the OS version incompatibility, and heavy use of
>> the
>> GUI.
>>
>> I'm still sea
On 26-07-17 15:53, Phil Susi wrote:
> I've been googling for the last half hour and can not find any
> documentation that describes what these spam status scores mean. I'm
> seeing good mail flagged as spam because of this:
>
> X-Spam-Status: Yes, score=3.2 tagged_above=-999 required=3
>
On 09/27/2013 10:50 AM, Stefan Jakobs via amavis-users wrote:
>
> Hello list,
>
> I like to re-ask my question from march this year, as it is still an issue:
>
> I run a setup with postfix 2.5.13 and amavisd-new 2.7.2 in pre-queue
> configuration. Spamassassin (3.3.2) uses a MySQL DB as bayes s
On 10/11/2013 12:24 AM, Christopher Koeber via amavis-users wrote:
> Hello,
>
> I have been trying to get AmavisD ip[ and running with DSPAM for a while
> with no success. I have SpamAssasin running and integrated nicely but I
> get a permission denied error when I look at the logs. What do I nee
20 matches
Mail list logo