On one of my machines, my logs are getting a fair amount of the following
message: Any clue would be welcome.
Aug 20 21:55:26 norcomix spamd[12046]: Can't locate object method type via
package Net::DNS::RR::MX
at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 212.
Aug 20
Exim has a feature ignore_target_hosts which causes it to strip certain IP
addresses from the list of MX hosts for a domain. I use it to block all
abusive or unreachable MXs (listed below). This kicks in when Exim is
doing address verification at SMTP time, for example sender verify fail
for
Old version of Net::DNS?
Loren
On Sunday 20 August 2006 23:50, Loren Wilton wrote:
Old version of Net::DNS?
Loren
Not according to cpan. That was the first thing I checked.
I wonder what low-level stuff Net::DNS is trying to use?
Its running on an older SuSE Distro, and the newer boxes
don't seem to show this
It was mentioned that several people are getting hammered by world-wide
robot attacks. I see from the little spam I get that there is a new spam
sending tool for robots that is running a stock spam. I suspect the traffic
is a combination of distributing the new spam tool and sending out the
On Monday 21 August 2006 00:09, Loren Wilton wrote:
The database might also be usable in front door spam blocking. Most people
probably shouldn't be accepting direct connections from dynamic ips on
someone else's network, especially if that ip has a recent history of
sending spam (say in the
I need to trap images that are not given full names
Something like this
-=_NextPart_000_00EB_01C5061E.42C54EA0
Content-Type: image/gif; name=zpalaver
Content-Transfer-Encoding: base64
Content-ID: [EMAIL PROTECTED]
The name should have been zpalaver.gif but the extension is deliberately
-=_NextPart_000_00EB_01C5061E.42C54EA0
Content-Type: image/gif; name=zpalaver
The name should have been zpalaver.gif but the extension is deliberately
omitted. Can someone help me with a regex for images without \.(?:gif|
png|jpg) extensions
There's a better way than a full rule if you
On Monday 21 August 2006 03:44, Benny Pedersen wrote:
On Sun, August 20, 2006 20:21, Dimitar G. Katerinski wrote:
I'm trying to setup Spamassassin to use mysql for bayes storage. However
I'm experiencing problems with DBI complaining about Transactions not
supported by database at
/etc/spamassassin/local.cf:
bayes_store_module Mail::SpamAssassin::BayesStore::MySQL
change to sql there, mysql does not work, sql does
Тhanks a lot, that fixed the problem ;-)
That just avoided the problem by using a less efficient plugin
which does not need transactions.
Mark
On Monday 21 August 2006 13:45, Mark Martinec wrote:
/etc/spamassassin/local.cf:
bayes_store_module Mail::SpamAssassin::BayesStore::MySQL
change to sql there, mysql does not work, sql does
Тhanks a lot, that fixed the problem ;-)
That just avoided the problem by using a less
Loren Wilton wrote:
It was mentioned that several people are getting hammered by world-wide
robot attacks. I see from the little spam I get that there is a new
spam sending tool for robots that is running a stock spam. I suspect
the traffic is a combination of distributing the new spam tool
A little bit off topic on this list, but since you are involved with
amavisd-new, do you know how to avoid the same problem in amavisd-new?
With Bayes db? Fix it within SpamAssassin, and amavisd-new will be happy too.
Like I mentioned previously, I've seen it too and it helped to reinstall
On Monday 21 August 2006 15:27, Mark Martinec wrote:
A little bit off topic on this list, but since you are involved with
amavisd-new, do you know how to avoid the same problem in amavisd-new?
With Bayes db? Fix it within SpamAssassin, and amavisd-new will be happy
too. Like I mentioned
Magnus Holmgren said:
It depends on the blacklist. Some, like Spamhaus SBL,
only list IP addresses known to be operated
by spammers (and not unsuspecting home users with
hijacked computers). SA scores mail with such IP
addresses in ANY Received line. For other lists, the
first hop is ignored
Our scanning program has the ability to archive all e-mail, both inbound
and outbound, which we have been doing for months now. Given that your
outbound mail is almost certainly ham, the majority of it's content is
going to be specific to our business sector, wouldn't feeding outbounds
through
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go throught it :
spam which has poor text, poor token, or none, and a subject always changing
the only thing which remain the same is the image
Hi all. I just started using spamassassin for the first time. It's
marking everything as spam, because MISSING_SUBJECT is always matching,
although the mail does have Subject: lines.
I searched the archives, and found mail from someone else in 2005 with
this problem. The suggestion there was
Upgrade to SA 3.1.4 and use a daily sa-update cron job to get the latest
rules.
Make sure you're using DCC, Razor, Pyzor, URIBLs, etc.
Use the rules from www.rulesemporium.com, and add the ImageIfo plugin
from there (http://www.rulesemporium.com/plugins.htm).
And train your bayes well.
Works
fanku,
i do use DCC, razor and pyzor
do use also uribl with qmail-scanner (i think)
there is a cron wich sa-learn all ham and spam (more than 2000 spams
inside)
but i could gain in using the rest you adviced to me
so i will have a serious look at it - as soon as i can
especially the
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go throught it :
spam which has poor text, poor token, or none, and a subject always
changing
the only thing which
Nope. I didn't write it clear, sorry about that. I want to make amavisd-new
use sql for all *_ quarantine_method, but DBI is complaining about the same
thing.
I understood. It is the same problem, once you resolve the problem with
Mail::SpamAssassin::BayesStore::MySQL, amavisd logging and
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go throught it :
spam which has poor text, poor token, or none, and a subject always
changing
the only thing which
looks like exactly i was in need,
beside, sa-update seems very powerfull thought
fanx alot
Chris a écrit :
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hey Stephane... you might want to try FuzzyOcr.
see http://wiki.apache.org/spamassassin/FuzzyOcrPlugin
for more info...
Chris
Hi,
Just a small problem with sa...
Two different machines:
Home=AMD Athlon XP 2600+, 512M, 40G hdd, SuSE 9.3, SA 3.1.4 (from cpan)
Work=AMD 4200 Dualcore, 2G, 3 * 300G sata, SuSE 10.1, SA 3.1.4 (from cpan)
The configuration on both machines is the same. Eg, I installed SA from cpan,
and
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails every
day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
FuzzyOCR, ImageInfo, SARE, sa-update.
Rory Vieira wrote:
Hi,
Just a small problem with sa...
Two different machines:
Home=AMD Athlon XP 2600+, 512M, 40G hdd, SuSE 9.3, SA 3.1.4 (from cpan)
Work=AMD 4200 Dualcore, 2G, 3 * 300G sata, SuSE 10.1, SA 3.1.4 (from cpan)
The configuration on both machines is the same. Eg, I installed
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Spamassassin List wrote:
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go
throught it :
spam which has poor text,
Stuart Johnston skrev:
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
FuzzyOCR, ImageInfo, SARE,
decoder wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Spamassassin List wrote:
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go
throught it :
spam which has
On Mon, Aug 21, 2006 at 05:36:40PM +0200, Anders Norrbring wrote:
I haven't looked at FuzzyOCR or ImageInfo at all, are they compatible
with SA 2.64?
No. They're plugins, which would require SA 3.0 or later.
--
Randomly Generated Tagline:
.senilgat gnidaer emit hcum oot dneps uoY
Hi.
I keep seeing suggestions to use sa-update quite often on this list, but
I thought it was no use doing so between releases according to this page:
http://wiki.apache.org/spamassassin/VirusScannerTypeUpdates
with these exact words in the end:
Daily and/or weekly updates aren't practical,
-Original Message-
From: Stuart Johnston [mailto:[EMAIL PROTECTED]
Sent: Monday, August 21, 2006 11:05 AM
To: users@spamassassin.apache.org
Subject: Re: How can I (we) get rid of this?
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
On Mon, August 21, 2006 03:02, Mark Martinec wrote:
On Sun, August 20, 2006 20:21, Dimitar G. Katerinski wrote:
I'm trying to setup Spamassassin to use mysql for bayes storage. However
I'm experiencing problems with DBI complaining about Transactions not
supported by database at
On Mon, 21 Aug 2006, Spamassassin List wrote:
Have a look at FuzzyOCR
http://wiki.apache.org/spamassassin/FuzzyOcrPlugin
Works very well for me - I'm using it in conjuction with ImageInfo and
since I'm using them those image spams get through VERY rarely
They will also block off
Sorry to be late to the dance,
but is there a relatively simple way to have sa-update traverse a proxy
based firewall? We'd need to provide username / password to get out.
Thanks!
Leonard Gray
Groupware and Email Administration
Information Technology Services, Washington Savannah River Company
Spamassassin List wrote:
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go
throught it :
spam which has poor text, poor token, or none, and a subject
always changing
sa-update last updated the rules here on August 14th.
Theo on this list a short while back recommended daily checking.
Cheers,
Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
-Original Message-
From: Andreas Pettersson [mailto:[EMAIL PROTECTED]
Sent: 21
On Mon, Aug 21, 2006 at 05:46:19PM +0200, Andreas Pettersson wrote:
I keep seeing suggestions to use sa-update quite often on this list, but
I thought it was no use doing so between releases according to this page:
http://wiki.apache.org/spamassassin/VirusScannerTypeUpdates
with these exact
On Mon, Aug 21, 2006 at 11:52:04AM -0400, Jean-Paul Natola wrote:
I'm getting an error when attempting to run sa-update
Can't locate Archive/Tar.pm in @INC (@INC contains:
[...]
Did you install the sa-update required modules, as listed in the INSTALL doc?
(Archive::Tar, LWP, IO::Zlib)
--
Pitmaster wrote:
Hi there,
I am a total newbie. Have SA installed and done nothing sinds.
SA is working and catches +- 5% of the spam. How can I simply help SA
to catch more and keep the speed up?
1) Get the latest version of SA
2) Run sa-update to get the latest rules
3) Enable the network
On Mon, Aug 21, 2006 at 11:53:40AM -0400, [EMAIL PROTECTED] wrote:
Sorry to be late to the dance, but is there a relatively simple way to
have sa-update traverse a proxy based firewall? We'd need to provide
username / password to get out.
Hrm. sa-update uses LWP for doing http requests,
Theo Van Dinter wrote:
On Mon, Aug 21, 2006 at 05:46:19PM +0200, Andreas Pettersson wrote:
I keep seeing suggestions to use sa-update quite often on this list, but
I thought it was no use doing so between releases according to this page:
Andreas Pettersson writes:
I keep seeing suggestions to use sa-update quite often on this list, but
I thought it was no use doing so between releases according to this page:
http://wiki.apache.org/spamassassin/VirusScannerTypeUpdates
with these exact words in the end:
Daily and/or weekly
Hey guys,
Running SA 3.1.1, on Fedora Core 3, with Perl 5.8.5
I installed gocr and imagemagick packages, copied the Ocr.pm and cf
files into /etc/mail/spamassassin
The tests don't seem to run, the pump 'n dump GIFs are still arriving
and I don't see that the test is being run in the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mike Pepe wrote:
Hey guys,
Running SA 3.1.1, on Fedora Core 3, with Perl 5.8.5
I installed gocr and imagemagick packages, copied the Ocr.pm and cf
files into /etc/mail/spamassassin
The tests don't seem to run, the pump 'n dump GIFs are still
hi Jessica --
I would suggest checking line endings -- that's a classic symptom
of \r\n being used where other parts of the mail delivery pipeline
are expecting \n.
--j.
Jessica Perry Hekman writes:
Hi all. I just started using spamassassin for the first time. It's
marking everything as spam,
Well, that got me going in the right direction -- it sounded reasonable
so I started mucking with some messages that had come in, and what I
discovered is that all incoming messages were getting two copies of
their From: lines written, one with a preceding . I imagine SA
reaches that and
Jessica Perry Hekman writes:
Hi all. I just started using spamassassin for the first time. It's
marking everything as spam, because MISSING_SUBJECT is always matching,
although the mail does have Subject: lines.
Btw, the last time the very same thing happened to me was because of an
unrelated
Hi
Thanks for a great addition to Spamassassin. Please keep it on the
Spamassassin list (except for configuration help). I have found it very
useful so far using the 2.2 beta1.
I have made a small change for my purposes, which was needed because the
temporary files were not unique using
Hello List,
iam using Debian with Spamassasin 3.1.1-1 and exim 4.62.
Iam looking forward to use sa-stats[1] with the stats from spamassasin
from /var/log/exim4/mainlog.log like:
Aug 21 17:58:51 main spamd[4064]: spamd: result: . -1 - AWL,BAYES_00
I am having a few problems converting from Berkely DB to MySQL w/ InnoDB. I
have created the DB, Tables, and updated the local.cf. Everything appears ok,
but when I attempt to restore my Berkely DB backup with sa-learn --restore
filename. I get the following errors.
[21508] dbg: bayes:
Interesting.. if I try to import my old Berkely DB it fails right out. If I
process a message auto learn complains about the duplicate key again, but it
actually learns the tokens and I can see them with sa-learn --dump magic.
What key is duplicate? I'm still unclear on how to resolve this?
On Mon, Aug 21, 2006 at 08:48:10PM +1000, Bill Maidment wrote:
I have made a small change for my purposes, which was needed because the
temporary files were not unique using mimedefang. I added a date/time
stamp to the file names in the perl module:
--my $ts = time;
--my
--On Friday, August 18, 2006 11:17 AM -0400 Sanford Whiteman
[EMAIL PROTECTED] wrote:
Three out of your four objectives are markedly off-topic: there's no
reason for SA to ever see mail for unknown local recipients. Those
messages should be rejected by the MTA, using either your text
I'm having some difficulty getting a simple custom
rule towork based on the X-Mailer used. Here is the custom
rule:
header
SPAM_BAT X-Mailer =~ /The
Bat!/idescribe SPAM_BAT Potential spam
client (The Bat)score
SPAM_BAT
8.0
Here is a portion of an example header that goes
right through
Ryan,
I just did this myself the first time in the last week;
Be sure that all your operations on the DB are done as the user who is going
to be accessing it; ie: Spamassassin spamuser etc.
Not knowing the history of your install;
In your Spamassassin local.cf file you should have these
Hi,
I'm using the p5-Mail-SpamAssassin-3.1.4 on FreeBSD 6 with perl
v5.8.8. I've got a virtualmail user that handles all mail on the
server. So there is one single .spamassassin directory:
total 7304
-rw--- 1 virtualmail virtualmail 1.3M Aug 21 21:06 auto-
whitelist
-rw--- 1
On Mon, Aug 21, 2006 at 11:22:30PM +0200, Fabian Peters wrote:
Since a couple of weeks this setup has started acting up:
bayes: expire_old_tokens: Out of memory during ridiculously large
request at /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/
BayesStore/DBM.pm line 625.
I've
From: Spamassassin List [EMAIL PROTECTED]
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go throught it :
spam which has poor text, poor token, or none, and a subject
From: Spamassassin List [EMAIL PROTECTED]
Spamassassin List wrote:
Stephane Bentebba wrote:
hi all,
i am more or less happy with my spamassassin configuration
works good for one year
but i have problem with a new kind of spam which easylly go
throught it :
spam which has poor text, poor
Michael,
Thanks for the help, but it didn't seem to make a difference. Though I have
noticed some strange things.. See steps taken and responses inline.
I have dropped the database completely, commented out the local.cf bayes_sql
and bayes_store settings, and performed an sa-learn --sync.
From: Rob McEwen [EMAIL PROTECTED]
Magnus Holmgren said:
It depends on the blacklist. Some, like Spamhaus SBL,
only list IP addresses known to be operated
by spammers (and not unsuspecting home users with
hijacked computers). SA scores mail with such IP
addresses in ANY Received line. For other
From: Kyle Harris [EMAIL PROTECTED]
I'm having some difficulty getting a simple custom rule to
work based on the X-Mailer used. Here is the custom rule:
header SPAM_BAT X-Mailer =~ /The Bat!/i
header SPAM_BAT X-Mailer =~ /The Bat\!/i
Try that.
{^_^}
From: DAve [EMAIL PROTECTED]
Loren Wilton wrote:
It was mentioned that several people are getting hammered by world-wide
robot attacks. I see from the little spam I get that there is a new
spam sending tool for robots that is running a stock spam. I suspect
the traffic is a combination of
From: Joe Zitnik [EMAIL PROTECTED]
Our scanning program has the ability to archive all e-mail, both inbound
and outbound, which we have been doing for months now. Given that your
outbound mail is almost certainly ham, the majority of it's content is
going to be specific to our business sector,
| From: Joe Zitnik [mailto:[EMAIL PROTECTED]
|
| Our scanning program has the ability to archive all e-mail,
| both inbound
| and outbound, which we have been doing for months now. Given
| that your
| outbound mail is almost certainly ham, the majority of it's content is
| going to be specific
From: Anders Norrbring [EMAIL PROTECTED]
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails every
day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
FuzzyOcr
FuzzyOcr
FuzzyOcr
I tell you
From: Anders Norrbring [EMAIL PROTECTED]
Stuart Johnston skrev:
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6
Am 21.08.2006 um 23:30 schrieb Theo Van Dinter:
On Mon, Aug 21, 2006 at 11:22:30PM +0200, Fabian Peters wrote:
Since a couple of weeks this setup has started acting up:
bayes: expire_old_tokens: Out of memory during ridiculously large
request at
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160
On 8/21/06 jdow wrote:
Downloading and installing is a breeze
well, unless you're on OSX where you've got to find/build/install the
netpbm gocr prereqs ...
grumble working /grumble
- --
/\
\ / ASCII Ribbon Campaign
X against HTML email,
On Aug 21, 2006, at 3:41 PM, Richard wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160
On 8/21/06 jdow wrote:
Downloading and installing is a breeze
well, unless you're on OSX where you've got to find/build/install the
netpbm gocr prereqs ...
grumble working /grumble
Do post
Hi everyone, I have a problem and would appreciate any help possible. I'm a novice to SA, but have been trying to find information on this without success.I am currently running SA 3.1.4 on a Fedora Linux server, hosting almost 100 domains and a couple thousand email accounts.
The server also runs
jdow wrote:
From: DAve [EMAIL PROTECTED]
Loren Wilton wrote:
It was mentioned that several people are getting hammered by
world-wide robot attacks. I see from the little spam I get that
there is a new spam sending tool for robots that is running a stock
spam. I suspect the traffic is a
jdow wrote:
From: Anders Norrbring [EMAIL PROTECTED]
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
FuzzyOcr
FuzzyOcr
FuzzyOcr
Coders (if any):
Can anybody point me at a code sample showing how to get details into
the report SUMMARY tag from within a plugin?
Like the [IP address etc.] in this:
* 1.0 RBL_PSBL_01 RBL: Mail client listed by psbl.surriel.com
* [64.8.111.2 listed in psbl.surriel.com]
I can't
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160
Downloading and installing is a breeze
well, unless you're on OSX where you've got to find/build/install the
netpbm gocr prereqs ...
grumble working /grumble
Do post details of how it goes along. Considering that's what I'll be
doing
From: Chris Mills (Chrysalis) [EMAIL PROTECTED]
Hi everyone, I have a problem and would appreciate any help possible. I'm a
novice to SA, but have been trying to find information on this without
success.
I am currently running SA 3.1.4 on a Fedora Linux server, hosting almost 100
domains and a
From: DAve [EMAIL PROTECTED]
jdow wrote:
From: Anders Norrbring [EMAIL PROTECTED]
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
While skimming thru my daily rejected spam pile, did a double take when a
GIF spam seemed to blink at me. Thought it was a sw glitch at first...
then realized the sneaky Borg had adapted again.
Took a look at the frames in PaintShopPro's AnimationShop, and the first
three are all but blank (wee
On Aug 21, 2006, at 10:13 PM, Chip M. wrote:
While skimming thru my daily rejected spam pile, did a double take
when a
GIF spam seemed to blink at me. Thought it was a sw glitch at
first...
then realized the sneaky Borg had adapted again.
Took a look at the frames in PaintShopPro's
While skimming thru my daily rejected spam pile, did a double take when a
GIF spam seemed to blink at me. Thought it was a sw glitch at first...
then realized the sneaky Borg had adapted again.
Took a look at the frames in PaintShopPro's AnimationShop, and the first
three are all but blank (wee
82 matches
Mail list logo
