I invoke spamassassin through Mailscanner v 4.38
I use Mailscanner with:
- sendmail
- clamav antivirus
- spamassassin
--
View this message in context:
http://www.nabble.com/Whitelist+-+blacklist+order-t1649123.html#a4500915
Sent from the SpamAssassin - Users forum at Nabble.com.
Chan, Wilson wrote:
Is there a way to search the SA mailing list? Thanks!
http://wiki.apache.org/spamassassin/MailingLists
Under the users section, pick any one of the three archives linked next
to Search.
On Freitag, 19. Mai 2006 16:06 James Lay wrote:
So far there are no good answers...anyone have anything?
No - but at least you got an answer this time *g*
mfg zmi
--
// Michael Monnerie, Ing.BSc- http://it-management.at
// Tel: 0660/4156531
I see in my webmin module, 'Location of DCC client program' but I don't
think I have it installed, what package should I be looking for, i'm
running rhel4 can i installed it from up2date or is there an rpm out
there? Any information on using DCC with spamassassin and rhel would be
great.
DCC is at: http://www.rhyolite.com/anti-spam/dcc/
Don't know about rpm's, you can try http://rpmfind.net (Don't think they have
RH EL rpms)
Or http://dag.wieers.com
But probably you'll have to compile it yourself (As I did for my RH EL3), which
is pretty simple.
-Sietse
On Samstag, 20. Mai 2006 12:58 Andrzej Adam Filip wrote:
You can use *separate* script to make spamcop.net send LARTs
(munged or unmunged).
e.g. http://anfi.homeunix.net/perl/spamcop-ack.pl or previous art
mentioned in previous thread about spamcop-ack.pl
How do I create that cookies file
On Thursday 18 May 2006 16:36, Ronald Nsubuga wrote:
check the retry time and what os are u running pliz and the version you are
using for spamassasin?
retries less than 1 minute. Debian Sid, SA 3.1.1
DCC is at: http://www.rhyolite.com/anti-spam/dcc/
Don't know about rpm's, you can try http://rpmfind.net (Don't think they
have RH EL rpms)
Or http://dag.wieers.com
But probably you'll have to compile it yourself (As I did for my RH EL3),
which is pretty simple.
okay, i'll install it from
Source can be found at the URL I gave you
http://www.rhyolite.com/anti-spam/dcc/ http://www.rhyolite.com/anti-spam/dcc/
.
Pyzor is basically the same as razor2. Major difference is that pyzor is
written in python and raozr2 in perl.
Don't know if there is much sense in using pyzor, as it
Razor is also a good check, but it only free for personal use
(same as dcc): http://razor.sourceforge.net
Razor compile and install is a bit more difficult than dcc or
pyzor, as it might need a whole lot of perl modules
(depending on what is already there), so better get your CPAN
On Montag, 22. Mai 2006 01:12 Sergei Gerasenko wrote:
But I'm reading everywhere that it's not a paricularly good idea.
There's not a single answer to whether which method is best. I use a
sitewide bayes, and it works good.
sitewide:
+ spam learned helps all users
+ good when trained with 100%
On Montag, 22. Mai 2006 03:57 Jonathan Nichols wrote:
[19298] warn: config: invalid regexp for rule ZMIde_URI:
[EMAIL PROTECTED]: Global symbol @freenet requires explicit
package name
My apoligies @all. Is somebody willing to write a wrapper script for me?
I'd like to change to using
On Montag, 22. Mai 2006 01:12 Sergei Gerasenko wrote:
But I'm reading everywhere that it's not a paricularly good idea.
There's not a single answer to whether which method is best. I use a
sitewide bayes, and it works good.
sitewide:
+ spam learned helps all users
+ good when trained
On Montag, 22. Mai 2006 17:28 Bret Miller wrote:
Either that or the other 95% of users get no spam ever.
*bruahaha* I just spit that nice coffee over my keyboard...
mfg zmi
--
// Michael Monnerie, Ing.BSc- http://it-management.at
// Tel: 0660/4156531
Hi,
I´d like to know if it´s possible to filter efficiently all those emails
about Viagra and friends with a subject that always changes and has
different letters inserted between the letters of the drug name. I guess you
know which ones I´m talking about (Re: test VhtAGGRA / CItAlLIS).
Michael Monnerie [EMAIL PROTECTED] writes:
On Samstag, 20. Mai 2006 12:58 Andrzej Adam Filip wrote:
You can use *separate* script to make spamcop.net send LARTs
(munged or unmunged).
e.g. http://anfi.homeunix.net/perl/spamcop-ack.pl or previous art
mentioned in previous thread about
So - if I wanted to set up my own RBL for others to query me, how would I
do that? I'm seriously thinking about it. Alternatively, I can stream my
spam to anyone else who is already doing it. I've modified my spam stream
to exclude stuff already listed in several other popular block lists.
--On Saturday, May 20, 2006 4:54 PM -0700 jdow [EMAIL PROTECTED] wrote:
Looking at your own email it comes from a COMCAST cable connection
in Palmer Ranch Florida through the WFGB mailer. The WFGB mailer is
not in SORBS anywhere. YOUR address most certainly is a dialup. So
it WILL get tagged
Andrzej Adam Filip wrote:
Michael Monnerie [EMAIL PROTECTED] writes:
On Samstag, 20. Mai 2006 12:58 Andrzej Adam Filip wrote:
You can use *separate* script to make spamcop.net send LARTs
(munged or unmunged).
e.g. http://anfi.homeunix.net/perl/spamcop-ack.pl or
I just grepped my entire mail hierarchy for .geocities.com and the only
legitimate stuff I see either uses the www or uk subdomains. How can I
write a rule that matches on that? If it were just one subdomain I could
write one rule for all subdomains and one for just the one subdomain and
use a
Kenneth Porter wrote:
I just grepped my entire mail hierarchy for .geocities.com and the
only legitimate stuff I see either uses the www or uk subdomains. How
can I write a rule that matches on that? If it were just one
subdomain I could write one rule for all subdomains and one for just
the
Mike Jackson wrote:
So - if I wanted to set up my own RBL for others to query me, how
would I do that? I'm seriously thinking about it. Alternatively, I can
stream my spam to anyone else who is already doing it. I've modified
my spam stream to exclude stuff already listed in several other
On Monday, May 22, 2006 12:28 PM -0400 Bowie Bailey [EMAIL PROTECTED]
wrote:
I assume you mean www.geocites.com and uk.geocities.com, right?
Try this:
/(?:www|uk)\.geocities\.com/
Add other anchors as appropriate...
Doh! That was too easy! :P
BTW, in my corpus the only legit use of
On Montag, 22. Mai 2006 18:28 Bowie Bailey wrote:
/(?:www|uk)\.geocities\.com/
Or the full line could be:
uri ZMIgeocitiesGOOD m{(?:www|uk)\.geocities\.com}
describe ZMIgeocitiesGOOD probably good geocities site
scoreZMIgeocitiesGOOD -1.2
or whatever score you want to give them.
mfg
Still getting autolearn=failed but its no longer complaining about
running spamd as root but its trying to create read files from root
still even though I have the local.cf defined for the location of the
bayes files. Any ideas? Thanks!
May 22 08:13:57 localhost spamd[25519]: Creating
On Mon, May 22, 2006 at 08:17:57AM -1000, Chan, Wilson wrote:
Still getting autolearn=failed but its no longer complaining about
running spamd as root but its trying to create read files from root
still even though I have the local.cf defined for the location of the
bayes files. Any ideas?
On Monday, May 22, 2006 7:24 PM +0200 Michael Monnerie
[EMAIL PROTECTED] wrote:
Or the full line could be:
uri ZMIgeocitiesGOOD m{(?:www|uk)\.geocities\.com}
describe ZMIgeocitiesGOOD probably good geocities site
scoreZMIgeocitiesGOOD -1.2
or whatever score you want to give them.
That seemed to fix it. I guess the default is to create a prefs path.
Thanks!
/etc/sysconfig/spamasassin
# Options to spamd
SPAMDOPTIONS=-d -m5 -c -H -u spam --Removed -c
Wilson
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Monday, May 22, 2006 8:42 AM
On Thursday 18 May 2006 16:36, Ronald Nsubuga wrote:
check the retry time and what os are u running pliz and the version you are
using for spamassasin?
retries less than 1 minute. Debian Sid, SA 3.1.1
Bunch of these error messages seem to happening every few (five?) hours.
Marc Perkel [EMAIL PROTECTED] writes:
[...]
I've already made an arrangement with Spamcop to forward the spam
directly to an account they set up for me. I've sent them over 100,000
spams and they seem to like what they see. I'm told it will be a live
feed sometime later today.
These are the
Also, I would add the path to your auto-whitelist file
by adding this to your local.cf:
auto_whitelist_path /home/spam/.spamassassin/auto-whitelist
On Mon, May 22, 2006 at 09:07:48AM -1000, Chan, Wilson wrote:
That seemed to fix it. I guess the default is to create a prefs path.
Thanks!
On Mon, 22 May 2006, Kenneth Porter wrote:
How does another machine properly vouch for it? If I route my mail to a
colocated host under my control, how do I make that host vouch for the mail
from my house?
Send it over an ssh tunnel so that to the MTA it appears to be coming
from 127.0.0.1.
Do you have a sample local.cf file I can base my on? Right now this is
what I have.
/etc/mail/spamassassin/local.cf
required_hits 5.0
report_safe 0
rewrite_header Subject** SPAM **
# Setup Bayesian Database Files
bayes_path /home/spam/.spamassassin/bayes
bayes_file_mode 0777
# Enable
On Mon, May 22, 2006 at 09:29:18AM -1000, Chan, Wilson wrote:
Do you have a sample local.cf file I can base my on? Right now this is
what I have.
That sounds pretty good. Mine is even shorter because bayes is enabled
by default and so is bayes_auto_learn. According to
man
Hello!
Is there any way to append certain spam status info (ie spam score, spam
tests etc) after the last line of the original message body?
I'm not interested in putting the original message body + spam status report
in two separate attachments, as done with the safe_report-option.
I read
On Mon, May 22, 2006 at 12:41:50PM -0700, chia3 wrote:
Is there any way to append certain spam status info (ie spam score, spam
tests etc) after the last line of the original message body?
There's no way to do this with the standard SA (though you could fake it by
running messages through
Hello,
I am running SA 3.0.4 on FC3 with mailman 2.1.5. Until about a month
ago everything was working well with my SA configuration. However,
now the spam (that I am assuming still comes to my lists) is no longer
being written to the spam folder for me to run sa-learn on it. No one
Kenneth Porter wrote:
On Monday, May 22, 2006 7:24 PM +0200 Michael Monnerie
[EMAIL PROTECTED] wrote:
Or the full line could be:
uri ZMIgeocitiesGOOD m{(?:www|uk)\.geocities\.com}
describe ZMIgeocitiesGOOD probably good geocities site
scoreZMIgeocitiesGOOD -1.2
or
Hi, I can't seem to find this anywhere, so I guess it couldn't be
too much of a faq :)
I'd like spamassassin to be bypassed for mail which originates from
the local server (sendmail running on freebsd)
Is there a way to do this?
Thanks!
Rich
Bowie Bailey wrote:
Kenneth Porter wrote:
Alternatively, is there regex syntax to match all patterns *except*
the one given? Can I somehow express all geocities.com subdomains
except www and uk as a regex?
That is a bit trickier because Perl does not currently support
variable length
On Mon, May 22, 2006 at 03:15:10PM -0500, Rich Winkel wrote:
Hi, I can't seem to find this anywhere, so I guess it couldn't be
too much of a faq :)
I'd like spamassassin to be bypassed for mail which originates from
the local server (sendmail running on freebsd)
Is there a way to do this?
Any else having this problem with spamass-milter with spamassassin?
Looks like spamass-milter locks up and dies randomly. Is there a simple
script that I can write to check say service spamass-milter to see if
it comes back as running? If it isn't then just restart the service as
a temp solution
Kai Schaetzl wrote:
Philip Prindeville wrote on Thu, 18 May 2006 08:47:48 -0600:
How legitimate is email sent as
windows-1252?
Very, because broken Windows clients use it.
Kai
Ah, the Strong Arm school of standards enforcement. ;-)
-Philip
On Monday, May 22, 2006 12:28 PM -0700 John D. Hardin
[EMAIL PROTECTED] wrote:
Send it over an ssh tunnel so that to the MTA it appears to be coming
from 127.0.0.1. That's how I do it.
Any way to do that with sendmail at both ends? Currently I use an AuthInfo
entry in the sending MTA's
[EMAIL PROTECTED] wrote:
Bowie Bailey wrote:
Kenneth Porter wrote:
Alternatively, is there regex syntax to match all patterns
*except* the one given? Can I somehow express all geocities.com
subdomains except www and uk as a regex?
That is a bit trickier because Perl does not
As it turns out, I had a SARE rule installed that should catch these, but I
found some spams leaking through due to the insecure dependency bug (bug
3838), even though I'm running Perl 5.8.3. I'm applying Daryl C. W.
O'Shea's patch for that bug.
Here's the SARE rule:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chan, Wilson wrote:
Any else having this problem with spamass-milter with spamassassin?
Nope.
(ask a vague question...)
C.
- --
Craig McLeanhttp://fukka.co.uk
[EMAIL PROTECTED] Where the fun never starts
Powered by
Rich Winkel [EMAIL PROTECTED] writes:
Hi, I can't seem to find this anywhere, so I guess it couldn't be
too much of a faq :)
I'd like spamassassin to be bypassed for mail which originates from
the local server (sendmail running on freebsd)
Is there a way to do this?
How do you deployed
I don't know if I should call it a memory leak or not, or just a memory
release problem with spamd.
I currently have 8 gigs of ram in this machine, I am running 30 processes
currently as indicated in the spamassassin options:
SPAMDOPTIONS=-d -c -H -x -m30 -q -u spamfilter --round-robin
I have
On Mon, May 22, 2006 at 04:27:55PM -0600, Nathan Broderick wrote:
Where does the local.cf file first get read in by SpamAssassin?
What do you mean exactly? Your question doesn't really make sense.
--
Randomly Generated Tagline:
Know yourself. Don't accept your dog's admiration as conclusive
On Mon, May 22, 2006 at 04:50:09PM -0600, Alan Fullmer wrote:
Mem: 8108656k total, 5907792k used, 2200864k free, 218704k buffers
Swap: 2031608k total,0k used, 2031608k free, 2867736k cached
As you can see 6 gigs are being used. It increases over time.
Sure.
5 days uptime
Hi there,
I'm having problem setting up the init scripts to start spamd on a RH
linux box. I've installed Mail-SpamAssassin-3.1.1 using rpm:
rpmbuild -tb Mail-SpamAssassin-3.1.1.tar.gz
I've created spamd file and added in /etc/sysconfig, but when I tried to
setup the init scripts to start
This seems weird but as soon as I started specifying the location for
the whitelist bayes SA-milter in local.cf SA-milter started to fail
randomly. Could it be that SA-milter can't handle the all the email
coming in?
I also noticed it was more stable when I was using RBL's in sendmail.
Any
I just posted this:
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4906
I'd like to throw a line into _handle_hit to log the rule name that's
causing it. What's the Perl syntax for if $score isn't defined, log the
rule name?
On Mon, May 22, 2006 at 04:18:40PM -0700, Jana Nguyen wrote:
I'm having problem setting up the init scripts to start spamd on a RH
linux box. I've installed Mail-SpamAssassin-3.1.1 using rpm:
rpmbuild -tb Mail-SpamAssassin-3.1.1.tar.gz
That builds the RPM. Did you install the RPMs after
Hi All
I've been approaching the problem of filtering spam at the email client end
using the SpamAssassin (3.x) header. Our email server (over which I have no
control) has a couple of server-side filters that reject emails with
infected attachments and messages with a spam score 15. This leaves
Hi folks!
I really need help installing SA 3.0.3 to my debian 3.1 vserver with 256MB
RAM and lots of swap space.
I am using SpamAssassing together with Qmail through the ifspamh script. I
added a call to the ifspamh script to my user's .qmail file and it works
quite well.
The only problem is
From: [EMAIL PROTECTED]
Bowie Bailey wrote:
Kenneth Porter wrote:
Alternatively, is there regex syntax to match all patterns *except*
the one given? Can I somehow express all geocities.com subdomains
except www and uk as a regex?
That is a bit trickier because Perl does not currently support
From: Justin Mason [EMAIL PROTECTED]
Kenneth Porter writes:
As it turns out, I had a SARE rule installed that should catch these, but I
found some spams leaking through due to the insecure dependency bug (bug
3838), even though I'm running Perl 5.8.3. I'm applying Daryl C. W.
O'Shea's patch
On 5/22/2006 12:16 PM, Kenneth Porter wrote:
--On Saturday, May 20, 2006 4:54 PM -0700 jdow [EMAIL PROTECTED] wrote:
Looking at your own email it comes from a COMCAST cable connection
in Palmer Ranch Florida through the WFGB mailer. The WFGB mailer is
not in SORBS anywhere. YOUR address most
On 5/22/2006 8:09 PM, nxxs wrote:
The only problem is that I cannot receive mails above a certain size
(usually mails with attachments). They simply dont get delivered.
I can read the following error message in my syslog:
qmail: 1148341842.937112 starting delivery 79: msg 61161737 to local
On 5/22/2006 6:14 PM, Kenneth Porter wrote:
As it turns out, I had a SARE rule installed that should catch these,
but I found some spams leaking through due to the insecure dependency
bug (bug 3838), even though I'm running Perl 5.8.3. I'm applying Daryl
C. W. O'Shea's patch for that bug.
62 matches
Mail list logo
