Re: Spamassassin behavior

2006-03-01 Thread jdow
Maybe. If the ENTIRE email is attached, all header lines and all body lines, in a format that can be easily extracted then yes is a possibility. You will probably have to write the automatic extraction tool to get the attachment out of the forwarded email and feed it to salearn. {^_^} -

UNWANTED_LANGUAGE_BODY gives different scores

2006-03-01 Thread Gerhard Hofmann
Hi all, we are a German company and 99 per cent of our daily email communication is in German language. There is only a very small amount of legitimate English email coming from some well known sources (mailing lists like [EMAIL PROTECTED], [EMAIL PROTECTED] and so on), any other non-German

Re: UNWANTED_LANGUAGE_BODY gives different scores

2006-03-01 Thread nick
Gerhard Hofmann wrote: Hi all, we are a German company and 99 per cent of our daily email communication is in German language. There is only a very small amount of legitimate English email coming from some well known sources (mailing lists like [EMAIL PROTECTED], [EMAIL PROTECTED] and so

How to deinstall the old version of Spamassassin [v2.43] if I can't do it by make make deinstall???

2006-03-01 Thread Zarshedi H. Ismoilzoda
My FreeBSD version is 5.3. I’m not familiar with Linux just learning it. I installed Spamassassin [v2.43] but that version was old and I downloaded the new one [v 3.1.0] and installed manually. Now it is not correctly functioning because I didn’t deinstall the previous [v2.43]. How

Re: Spamassassin does not learn

2006-03-01 Thread Chris Purves
Egoitz Aurrekoetxea Aurre wrote: First of all I don't understand how spamd and spamc work... I use spampd to act as smtp proxy for spamassassin, and I've uninstalled the exim4 fro the machine. Could anyone give me a link or an explanation of this? I'm very newbie; I've got the default

Re: FP on URIBL_JP_SURBL + URIBL_SBL

2006-03-01 Thread Jeff Chan
On Monday, February 27, 2006, 10:27:59 AM, Dave Pooser wrote: So I noticed some messages from one of my mailing lists landed in the ol' spambucket; there was a URI in there for 4dquiz-com (dot instead of dash) and it hit on URIBL_JP_SURBL and URIBL_SBL which scored enough to override BAYES_00.

Multidomain Mailhosting on one physical host

2006-03-01 Thread Uwe Kiewel
Hi there, on my server, there are two mail domains hostet. Spam and virus check is done by amavis. Amavis uses SpamAssassin 3.1 and H+BEDV Antivir in current versions. The administration front end for SpamAssassin is MaiaMailguard Well, lets say the hosted domains are dom1.org and dom2.org My

Spamassasin on Ubuntu with VHCS

2006-03-01 Thread James Smith
I need to get spamassasin installed and working on Ubuntu with VHCS. I have googled this and found a tutorial or two all of which start with the same line... apt-get install clamav clamav-daemon amavisd-new spamassassin Unfortunately this bombes out immediately with the error...

How to deinstall the old version of Spamassassin [v2.43] if I can't do it by make make deinstall???

2006-03-01 Thread Zarshedi H. Ismoilzoda
My FreeBSD version is 5.3. I’m not familiar with Linux just learning it. I installed Spamassassin [v2.43] but that version was old and I downloaded the new one [v 3.1.0] and installed manually. Now it is not correctly functioning because I didn’t deinstall the previous [v2.43]. How

Re: Spamassasin on Ubuntu with VHCS

2006-03-01 Thread Justin Mason
You need to add the universe repository. As to how you do this -- I'd suggest asking on an Ubuntu forum -- this is an issue with your apt setup, not SpamAssassin itself. --j. James Smith writes: I need to get spamassasin installed and working on Ubuntu with VHCS. I have googled this and

RE: Spamassasin on Ubuntu with VHCS

2006-03-01 Thread James Smith
You need to add the universe repository. As to how you do this -- I'd suggest asking on an Ubuntu forum -- this is an issue with your apt setup, not SpamAssassin itself. Thanks, added the new repositories and it now looks to be working. -- Jay

Re: Spamassassin behavior

2006-03-01 Thread Matt Kettler
Alan Au wrote: Hi Mr. Matt, Thanks a lot for replying me. I have some thing to clarify. Please see below : We forward a wrongly classifed email as attachement (RFC822) . Will it be OK for SpamAssassin to learn? If you strip the attachment and feed that to SA, yes. If you feed the

Re: UNWANTED_LANGUAGE_BODY gives different scores

2006-03-01 Thread Loren Wilton
X-Spam-Status: No, score=1.8 required=5.0 tests=AWL,BAYES_00,HTML_40_50, HTML_LINK_PUSH_HERE,HTML_MESSAGE,UNWANTED_LANGUAGE_BODY autolearn=no version=3.1.0 You see: UNWANTED_LANGUAGE_BODY rule applies to this message, but does not give the desired score, otherwise the score would be =

X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Ken Morley
I have a mailfilter running RedHat ES3, Postfix 2.2.8 (chroooted), amavis-d, SpamAssassin, etc. and it is generally working very well. I have had a complaint about a message sent using GoldMine being rejected. The NDR included Remote host said: 550 Error: Header X-Mailer indicates message

Failed to parse line...

2006-03-01 Thread Ken Morley
I have a mailfilter running RedHat ES3, Postfix 2.2.8 (chroooted), amavis-d, SpamAssassin, etc. and it is generally working very well. When I spamassassin -D --lint I see: [7670] dbg: plugin: registered Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8edd2c0) snip [7670] info: config:

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Tim Jackson
Ken Morley wrote: I have had a complaint about a message sent using GoldMine being rejected. The NDR included Remote host said: 550 Error: Header X-Mailer indicates message sent by spambot. That message hasn't come from SpamAssassin, it's from an MTA. Either you have something in your MTA

Re: Multidomain Mailhosting on one physical host

2006-03-01 Thread Uwe Kiewel
On Wednesday 01 March 2006 12:21, you wrote: Have you tried whitelisting the problem addresses? whitelist_from [EMAIL PROTECTED] In this case, what happens, if a spammer fake the from and use the whitelisted address? Uwe

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Ken Morley
Tim Jackson [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... That message hasn't come from SpamAssassin, it's from an MTA. Either you have something in your MTA config that is doing it, or it's been rejected by a mailserver before it gets to you (check your logs to see

Re: Failed to parse line...

2006-03-01 Thread Ken Morley
Drew Burchett wrote: I made this same mistake yesterday. Turned out that I hadnt enabled razor in v310.pre. Thanks very much for the reply Drew! I found that the line loading the Razor plug-in in v310.pre was commented out: # Razor2 - perform Razor2 message checks. # # Razor2

RE: SORBS unreasonable

2006-03-01 Thread Shayne Lebrun
jdow wrote: Extortion means extracting funds by some form of criminal means. Extortion in the form of, pay or we block access to your business, is as wrong as pay or we'll break your legs. {^_^} SORBS isn't blocking access to anybody's business. The worst they could be accused of is

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Scott Russell
Ken Morley wrote: Here's what shows in our maillog: Feb 28 14:07:49 maildrop postfix/cleanup[6597]: 2428D5A0004: reject: header X-Mailer: GoldMine [6.50.31113] from s16.vom.com[63.145.240.14]; from=[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Ken Morley
Scott Russell wrote: No. If this was amavisd or spamd it would be logged as such. This is postfix header checks rejecting the message. Check your postfix config. Thanks for the quick and accurate reply Scott! I checked /etc/postfix/header_checks and found: #anti spammer robots

Re: General assistance

2006-03-01 Thread DAve
Chris Santerre wrote: I would like to make a quick comment to everyone who has helped in this thread: Great job. Seriously. Some good answers here. Can we we all take a minute to make sure these answers are posted somewhere on the SA wiki's for future reference? Its been a while since we had a

Automatically Updating Rules on Windows

2006-03-01 Thread Bret Miller
Thanks to a recent post with a sample of how to download rules in Perl, I managed to create a nice perl-based updating tool for SARE rules. Why? Because for a lot of Windows admins, setting up a CYGWIN environment for RulesDuJour was daunting. I had a previous example of a Windows-based tool, but

sa-learn question

2006-03-01 Thread Drew Burchett
Does sa-learn read subdirectories? If not, is there a way to make it read subdirectories? -- CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any

RE: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Marc Dufresne
What are my options at this point to resolve the issue? Marc Dufresne, Corporate IT Officer St. Lawrence Parks Commission 13740 County Road 2 Morrisburg, ON K0C 1X0 E-mail: [EMAIL PROTECTED] Voice: 613-543-3704 Ext#2455 Fax: 613-543-2847 Corporate website: www.parks.on.ca [EMAIL PROTECTED]

Re: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Marc Dufresne
I think it was Steve that said his database is in SQL format. How do I convert the spamassassin database on FreeBSD 5.4 to SQL? I just renamed the bayes_toks file to .org and copied a backup over. Now sa-learn --sync and sa-learn --dump magic work. Marc Dufresne, Corporate IT Officer St.

AW: Multidomain Mailhosting on one physical host

2006-03-01 Thread sa
Lisa, Hi, Well, lets say the hosted domains are dom1.org and dom2.org My problem is: User Sam and Joe has internet access via DSL with a dynamic ip address. The mail going from [EMAIL PROTECTED] to [EMAIL PROTECTED] is identified as SPAM because the sending ip address is

RE: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Matthew.van.Eerde
Marc Dufresne wrote: I think it was Steve that said his database is in SQL format. How do I convert the spamassassin database on FreeBSD 5.4 to SQL? http://wiki.apache.org/spamassassin/BetterDocumentation/SqlReadmeBayes -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902

Re: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Steve Thomas
I think it was Steve that said his database is in SQL format. How do I convert the spamassassin database on FreeBSD 5.4 to SQL? I used the procedure found on this page as a guide: http://www200.pair.com/mecham/spam/fc4-spamassassin-sql.html

Problem with SA / Razor

2006-03-01 Thread Joey
I keep getting the below message in maillog, but when I installed Razor via cpan, I had NO errors. I appreciate your help... Joey Mar 1 13:42:50 pluto spamd[7790]: Can't locate Razor2/Client/Agent.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi

RE: Problem with SA / Razor

2006-03-01 Thread Drew Burchett
Sounds like Razor2 isn't installed correctly. I'd reinstall and see if this clears the problem up. -Original Message- From: Joey [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 01, 2006 12:42 PM To: SpamAssassin Subject: Problem with SA / Razor I keep getting the below message in

Re: SARE_LEGIT_PAYPAL scores -0.0?

2006-03-01 Thread Philip Prindeville
Loren Wilton wrote: could I be doing that would avoid this sort of FP? You don't seem to be running net tests. I see headers for both SPF and DomainKeys in that mail. These tests should have pulled the score down by some amount if you had run them. How do you know if SPF is enabled

Wiki and use_terse_report

2006-03-01 Thread Philip Prindeville
I couldn't find any obvious indication of what use_terse_report has been replaced with... Anyone? -Philip

Re: SARE_LEGIT_PAYPAL scores -0.0?

2006-03-01 Thread David B Funk
On Wed, 1 Mar 2006, Philip Prindeville wrote: Loren Wilton wrote: could I be doing that would avoid this sort of FP? You don't seem to be running net tests. I see headers for both SPF and DomainKeys in that mail. These tests should have pulled the score down by some amount if you had

Re: SARE_LEGIT_PAYPAL scores -0.0?

2006-03-01 Thread Philip Prindeville
David B Funk wrote: On Wed, 1 Mar 2006, Philip Prindeville wrote: Loren Wilton wrote: could I be doing that would avoid this sort of FP? You don't seem to be running net tests. I see headers for both SPF and DomainKeys in that mail. These tests should have pulled the score

Re: False hits on rules... But Debugging doesn't show them.(SA3.1.0)

2006-03-01 Thread Hamish Marson
On Tue, 2006-02-28 at 16:51 -0800, jdow wrote: From: Hamish Marson [EMAIL PROTECTED] On Tue, 2006-02-28 at 17:55 +, Hamish Marson wrote: I have a problem... Got aload of complaints about emails not coming through. On investigating, I have discovered that we're getting rules such as

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread mouss
Ken Morley a écrit : #anti spammer robots /^X-Mailer: .*(PSS Bulk Mailer|ccMail Link|IXO-Mail|MMailer|K-ML|GoldMine|MAGIC|bomber|expeditor|Brooklyn North|Broadcast|DMailer|Extractor|EMailing List Pro|News Breaker|dbMail|Unity|PG-MAILINGLIST PRO|Dynamic| Splio|Sarbacane|sMailing|[EMAIL

Re: sa-learn question

2006-03-01 Thread mouss
Drew Burchett a écrit : Does sa-learn read subdirectories? If you mean maildir folders, yes.

RE: question on training spamassassin

2006-03-01 Thread Webmaster
-Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: February 27, 2006 5:18 PM To: Jeff Portwine Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org Subject: Re: question on training spamassassin Jeff Portwine wrote: Hmm.. I don't quite understand this.

Re: Wiki and use_terse_report

2006-03-01 Thread Matt Kettler
Philip Prindeville wrote: I couldn't find any obvious indication of what use_terse_report has been replaced with... Anyone? report_template

SA Howto question

2006-03-01 Thread Abel Jeffcoat
I don't mean to sound like a I repeat questions, so if this has been answered - I'm sorry. Are there any good Howto documents on SA? In Particular running Qmail? I have been using SA for a while, but really want to learn how to use it to its fullest. Any help would be appreciated. Abel

Re: Automatically Updating Rules on Windows

2006-03-01 Thread jdow
Heh, I built my own bash script for updating. It is rude, crude, and effective. If somebody develops an irrational ideological repulsion to RDJ I can share it. I'd recommend RDJ. I'm just a hard core reactionary who developed her script about the time RDJ was developed. I stopped when it was

Re: How to deinstall the old version of Spamassassin [v2.43] if I can't do it by make make deinstall???

2006-03-01 Thread jdow
From: Zarshedi H. Ismoilzoda [EMAIL PROTECTED] My FreeBSD version is 5.3. I’m not familiar with Linux just learning it. I installed Spamassassin [v2.43] but that version was old and I downloaded the new one [v 3.1.0] and installed manually. Now it is not correctly functioning because I

Any rule to flag missing message-id's as SPAM?

2006-03-01 Thread Robert Nicholson
Hi,Is there a rule that says that any message without a message-id is SPAM ie. one who's SCORE I can increase.I've got a spammer sending messagegs without message-id's.I have no problem with this being considered as SPAM. From:   [EMAIL PROTECTED] Subject: Nate Crosswait Date: February 17, 2006

Re: Any rule to flag missing message-id's as SPAM?

2006-03-01 Thread Graham Murray
Robert Nicholson [EMAIL PROTECTED] writes: Hi, Is there a rule that says that any message without a message-id is SPAM ie. one who's SCORE I can increase. I've got a spammer sending messagegs without message-id's. Just change the score for MSGID_FROM_MTA_ID. This rule will be hit when the

bayes DBM versus SQL

2006-03-01 Thread Webmaster
Those of you you have used both native DBM and new SQL bayesian, can you comment on benefits of one versus the other please. Much appreciated!