RE: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Michael Scheidell
Did uninstall, outlook 2002, sp3, spamassassin coach buttons still on menu. Can't get rid of them.

Re: Bayes: 1 message, 2 results

2006-09-01 Thread Thomas Ericsson
Thanks jdow Seems like you were right. My debug session was run as an administrator but needed to be run as root. Now I just got to figure out how my bayes database could get so sqewed. I've got a global SPAM and HAM mailbox for our whole domain that our users drop their false positives

Re: Discourage broken content

2006-09-01 Thread jdow
From: Kris Deugau [EMAIL PROTECTED] John Andersen wrote: Mailscanner ... or any other mail-handling software... has no business changing content. ... unless you explicitly configure it to do so. (ATTN: AVG for Windows POP3/SMTP interface/hook authors, This Means You! Among others.)

RE: Very big auto-whitelist file

2006-09-01 Thread Stéphane LEPREVOST
One more question in the same way : my bayes_seen file is quite huge too (about 160Mb) Googling around about this I saw there was some bugs with versions prior to 3.1 but despite I'm using version 3.1.1 (a bit late on upgrading too, I'm afraid :-\ ) I think there's something wrong here too... Is

Re: SPF_SOFTFAIL but there's no SPF record

2006-09-01 Thread jdow
From: Jason Haar [EMAIL PROTECTED] Daryl C. W. O'Shea wrote: This happens when DNS queries timeout as the plugin defaults to SOFTFAIL per the recommendation of the then current draft. I'm not sure what the current experimental RFC says about it, but regardless, we really need to assume that

Re: The grey hats are at it in force

2006-09-01 Thread jdow
From: Chris [EMAIL PROTECTED] This is even better than the last one: I wonder if we are seeing warring blackhats rather than greyhats fighting blackhats. {^_^}

FuzzyOcr development/support stop for 7 weeks

2006-09-01 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello all, since I will have a very tight time schedule in the next 7 weeks for a project at the university, I will not be able to release any new versions of FuzzyOcr, fix bugs, reply to questions or give support. Instead of writing me, you can

Re: Spammed by Non-delivery-report? (someone is using my email to spam)

2006-09-01 Thread Justin Mason
Rick Macdougall writes: John D. Hardin wrote: On Fri, 1 Sep 2006, Christian Purnomo wrote: I am having so much trouble at present that some people are using my email address to send their spam messages, in return I get hundreds and hundres of non-delivery email + other misc reply such

RE: Very big auto-whitelist file

2006-09-01 Thread Stéphane LEPREVOST
Well, a few more information : Output of sa-learn --dump magic -D : [22420] dbg: bayes: found bayes db version 3 [22420] dbg: bayes: DB journal sync: last sync: 1157102359 [22420] dbg: config: score set 3 chosen. 0.000 0 3 0 non-token data: bayes db version 0.000

score question

2006-09-01 Thread Tom Brown
Hi I sent a mail from my work account, which i have no control over, to my home account which i have full control over. I noticed that this check made up part of the score when it came in DNS_FROM_RFC_POST=1.708 Can anyone tell me what that check is checking as i think i may need to advise

IO::Socket::INET6 problems

2006-09-01 Thread Anders Norrbring
I'm trying to get IO::Socket::INET6 to install since I actually use IPv6.. But so far no luck, and I haven't found any cure when Googling around on the subject either. Anyone on the list who can help out? The output I get is this: CPAN.pm: Going to build

Strange SPF problem/wrong result

2006-09-01 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, today I saw a strange SPF bug occuring. The original mail header was: Return-Path: [EMAIL PROTECTED] Received: from mail.cs.uni-sb.de (mail.cs.uni-sb.de [134.96.254.200]) by wjpserver.cs.uni-sb.de (8.12.11.20060308/8.12.11) with ESMTP id

Re: score question

2006-09-01 Thread Duane Hill
On Friday, September 1, 2006 at 10:15:40 AM, Tom confabulated: Hi I sent a mail from my work account, which i have no control over, to my home account which i have full control over. I noticed that this check made up part of the score when it came in DNS_FROM_RFC_POST=1.708 Can anyone

Re: Strange SPF problem/wrong result

2006-09-01 Thread Justin Mason
it's trusted_networks -- SpamAssassin doesn't know that it can trust mail.cs.uni-sb.de. --j. decoder writes: today I saw a strange SPF bug occuring. The original mail header was: Return-Path: [EMAIL PROTECTED] Received: from mail.cs.uni-sb.de (mail.cs.uni-sb.de [134.96.254.200]) by

Re: Strange SPF problem/wrong result

2006-09-01 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So adding the line trusted_networks 134.96.254.200 to local.cf will fix this problem and this mail would be recognized correctly (as in pass SPF) ? Thanks Chris Justin Mason wrote: it's trusted_networks -- SpamAssassin doesn't know that it can

Re: Strange SPF problem/wrong result

2006-09-01 Thread Justin Mason
give it a try, anyway ;) you can see what SpamAssassin thinks of the relays in the message, using spamassassin -D -L -t message and reading the debug lines output. more info: http://wiki.apache.org/spamassassin/TrustPath http://wiki.apache.org/spamassassin/TrustedRelays --j.

Re: Strange SPF problem/wrong result

2006-09-01 Thread Gino Cerullo
On 1-Sep-06, at 7:18 AM, decoder wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, today I saw a strange SPF bug occuring. The original mail header was: Return-Path: [EMAIL PROTECTED] Received: from mail.cs.uni-sb.de (mail.cs.uni-sb.de [134.96.254.200]) by

Re: IO::Socket::INET6 problems

2006-09-01 Thread Nigel Frankcom
On Fri, 01 Sep 2006 12:43:36 +0200, Anders Norrbring [EMAIL PROTECTED] wrote: I'm trying to get IO::Socket::INET6 to install since I actually use IPv6.. But so far no luck, and I haven't found any cure when Googling around on the subject either. Anyone on the list who can help out? The output

Re: Strange SPF problem/wrong result

2006-09-01 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gino Cerullo wrote: On 1-Sep-06, at 7:18 AM, decoder wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, today I saw a strange SPF bug occuring. The original mail header was: Return-Path: [EMAIL PROTECTED] Received: from

Re: IO::Socket::INET6 problems

2006-09-01 Thread Anders Norrbring
Nigel Frankcom skrev: On Fri, 01 Sep 2006 12:43:36 +0200, Anders Norrbring [EMAIL PROTECTED] wrote: I'm trying to get IO::Socket::INET6 to install since I actually use IPv6.. But so far no luck, and I haven't found any cure when Googling around on the subject either. Anyone on the list who

RE: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Bowie Bailey
Will Duff wrote: Hi everyone, I've been working with SpamAssassin for the course of Google's Summer of Code to create 'SpamAssassin Coach' - an add-in available for Mozilla Thunderbird and Microsoft Outlook. The purpose of the add-in is to allow users to report spam and ham to SpamAssassin

RE: Hacked E-Trade Phishing Site

2006-09-01 Thread Bowie Bailey
Chris wrote: On Thursday 31 August 2006 7:54 pm, David B Funk wrote: On Wed, 30 Aug 2006, jdow wrote: From: Evan Platt [EMAIL PROTECTED] At 04:02 PM 8/30/2006, you wrote: Check at the top of this E-trade Phishing site: http://196.1.161.115/e/t/user/login/ I

Re: Hacked E-Trade Phishing Site

2006-09-01 Thread Gino Cerullo
On 1-Sep-06, at 9:12 AM, Bowie Bailey wrote: Chris wrote: On Thursday 31 August 2006 7:54 pm, David B Funk wrote: On Wed, 30 Aug 2006, jdow wrote: From: Evan Platt [EMAIL PROTECTED] At 04:02 PM 8/30/2006, you wrote: Check at the top of this E-trade Phishing site:

RE: Hacked E-Trade Phishing Site

2006-09-01 Thread Chris Santerre
Title: RE: Hacked E-Trade Phishing Site -Original Message- From: Gino Cerullo [mailto:[EMAIL PROTECTED]] Sent: Friday, September 01, 2006 9:25 AM To: users@spamassassin.apache.org Subject: Re: Hacked E-Trade Phishing Site On 1-Sep-06, at 9:12 AM, Bowie Bailey wrote:

Re: Strange SPF problem/wrong result

2006-09-01 Thread Ramprasad
Return-Path: [EMAIL PROTECTED] Received: from mail.cs.uni-sb.de (mail.cs.uni-sb.de [134.96.254.200]) by wjpserver.cs.uni-sb.de (8.12.11.20060308/8.12.11) with ESMTP id k7T8rU6P012050; Tue, 29 Aug 2006 10:53:30 +0200 Received: from mail-eur1.microsoft.com

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Justin Mason
Bowie Bailey writes: Will Duff wrote: Hi everyone, I've been working with SpamAssassin for the course of Google's Summer of Code to create 'SpamAssassin Coach' - an add-in available for Mozilla Thunderbird and Microsoft Outlook. The purpose of the add-in is to allow users to report

Re: Strange SPF problem/wrong result

2006-09-01 Thread Justin Mason
Ramprasad writes: Return-Path: [EMAIL PROTECTED] Received: from mail.cs.uni-sb.de (mail.cs.uni-sb.de [134.96.254.200]) by wjpserver.cs.uni-sb.de (8.12.11.20060308/8.12.11) with ESMTP id k7T8rU6P012050; Tue, 29 Aug 2006 10:53:30 +0200 Received: from

Re: Strange SPF problem/wrong result

2006-09-01 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ramprasad wrote: Return-Path: [EMAIL PROTECTED] Received: from mail.cs.uni-sb.de (mail.cs.uni-sb.de [134.96.254.200]) by wjpserver.cs.uni-sb.de (8.12.11.20060308/8.12.11) with ESMTP id k7T8rU6P012050; Tue, 29 Aug 2006 10:53:30 +0200 Received:

RE: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Rob McEwen
RE: SpamAssassin Coach - Outlook/Thunderbird Plugin Any chance that an Outlook Express version might be forthcoming? I know that many of the Unix admins on this list hate any thing Microsoft produces and probably especially Outlook Express... but the fact is that a very large percentage of

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Justin Mason
Rob McEwen writes: RE: SpamAssassin Coach - Outlook/Thunderbird Plugin Any chance that an Outlook Express version might be forthcoming? I know that many of the Unix admins on this list hate any thing Microsoft produces and probably especially Outlook Express... but the fact is that a

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Rick Macdougall
Rob McEwen wrote: RE: SpamAssassin Coach - Outlook/Thunderbird Plugin Any chance that an Outlook Express version might be forthcoming? I know that many of the Unix admins on this list hate any thing Microsoft produces and probably especially Outlook Express... but the fact is that a very

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Theo Van Dinter
On Fri, Sep 01, 2006 at 03:44:03PM +0100, Justin Mason wrote: Any chance that an Outlook Express version might be forthcoming? in my experience, the problem is that OE mangles the message too much. Does OE even allow for plugins? -- Randomly Generated Tagline: If firefighters fight fire, and

RE: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Rob McEwen
in my experience, the problem is that OE mangles the message too much. I disagree... but don't take my word for it... double check this yourself... When you are viewing a message in Outlook Express, if you right click on the message, click properties from the drop-down, click the details tab,

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Michael Scheidell
on 'forget', did you mean for these to product different header lines? TELL SPAMC/1.3 Content-length: 2214 User: [EMAIL PROTECTED] Message-class: spam Set: local TELL SPAMC/1.3 Content-length: 3245 User: [EMAIL PROTECTED] Remove: local or is the Message-class: ham missing? (I don't

Re: Strange SPF problem/wrong result

2006-09-01 Thread SM
At 05:54 01-09-2006, decoder wrote: This is no real forwarding, but all mail for us gets received by that server first, and this server passes it to us. This is a common structure for a bigger mail setup. The trusted_networks option solved my problems, but it should definetly be included in the

Re: source SENDER authentication ? (as opposed to SPF HOST authentication)

2006-09-01 Thread Pat Lashley
Are there any SA methods that allow verification of the ‘sender’ of an email ? I am aware of SPF which can confirm that a host at ip address x.x.x.x is authorized to send mail as from domain “A”, but how about a means to confirm that [EMAIL PROTECTED] actually is a real user before

Re: Strange SPF problem/wrong result

2006-09-01 Thread Kelson
decoder wrote: The trusted_networks option solved my problems, but it should definetly be included in the wiki somewhere. How about this page: http://wiki.apache.org/spamassassin/TrustPath The common symptoms of a broken Trust path include: * ALL_TRUSTED matching spam email from the

Re: Strange SPF problem/wrong result

2006-09-01 Thread Magnus Holmgren
On Friday 01 September 2006 16:14, Ramprasad took the opportunity to say: This is no real forwarding, but all mail for us gets received by that server first, and this server passes it to us. This is a common structure for a bigger mail setup. The trusted_networks option solved my problems,

Re: Strange SPF problem/wrong result

2006-09-01 Thread Magnus Holmgren
On Friday 01 September 2006 13:41, decoder took the opportunity to say: So adding the line trusted_networks 134.96.254.200 to local.cf will fix this problem and this mail would be recognized correctly (as in pass SPF) ? If 134.96.254.200 is the MX for your domain, then it should even be in

Re: catching fake usernames?

2006-09-01 Thread Steve Thomas
On Thu, August 31, 2006 05:41, Rick Roe wrote: like there should be a simpler, more automatic way to do this. Am I missing something? in postfix main.cf smtpd_reject_unlisted_sender = yes In exim.conf, somewhere in acl_check_rcpt: require verify = sender

Troubleshooting Spamassassin

2006-09-01 Thread Ben Ventura
**warning message from newbie**I've inherited an installation of SA version 3.0.1 on an OS X server (10.4) and it does not seem to be working properly.  It's running with Communigate as the mail server.  It seems to be scanning the messages, it is adding the headers like this:

Re: breaking out: thinking abt the 'sa-update *VS* rdj' thread .. .

2006-09-01 Thread Theo Van Dinter
Wow... This mail has been sitting in my draft folder for a while, so I figured I ought to get it out. On Wed, Aug 16, 2006 at 12:24:04PM -0400, Chris Santerre wrote: I got nothing but love for you, so here goes ;) .. :) Chris! I'm surprised to hear you spreading this misinformation.

Re: File mode set incorrectly

2006-09-01 Thread Albert Poon
It is 3.1.4. Theo Van Dinter-2 wrote: On Thu, Aug 31, 2006 at 12:32:37PM -0700, Albert Poon wrote: I know I don't need setting 0777 on them, and 0666 is fine for me. But for the auto_whitelist, I can't set to 0666, it only turns to 0640. What version are you running? There were some

Re: File mode set incorrectly

2006-09-01 Thread Theo Van Dinter
Hrm. In that case, I'd say open a BZ ticket (http://bugzilla.spamassassin.org/) and we'll see about reproducing/fixing it. On Fri, Sep 01, 2006 at 03:11:24PM -0700, Albert Poon wrote: It is 3.1.4. Theo Van Dinter-2 wrote: On Thu, Aug 31, 2006 at 12:32:37PM -0700, Albert Poon wrote: I

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Will Duff
Thanks all for the already valuable feedback and support! To answer some questions: On 8/31/06, Doc Schneider [EMAIL PROTECTED] wrote: Couple of commments. right clicking on a message doesn't give any option to report as ham or spam I think this would be a valuable option. Secondly, I use

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Loren Wilton
in my experience, the problem is that OE mangles the message too much. Eh? I think you are thinking of Outlook. OE doesn't seem to touch the message, or at least the 'view message source' window can accurately reconstruct it. (Which is easy to get to, unlike Outlook itself where it is

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Loren Wilton
I don't believe OE has an API accessible like LookOut and Thunderbird do. It doesn't. But that doesn't mean its impossible to do, just harder. The PGP stuff has a plugin for OE that allows it to sign messages after you compose them, adn to encrypt and decrypt messages. It also adds menus

RE: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Michael Scheidell
-Original Message- From: Will Duff [mailto:[EMAIL PROTECTED] Sent: Friday, September 01, 2006 6:40 PM To: users@spamassassin.apache.org Subject: Re: SpamAssassin Coach - Outlook/Thunderbird Plugin Thanks all for the already valuable feedback and support! To answer some

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread SECNAP Network Security
Title: Re: SpamAssassin Coach - Outlook/Thunderbird Plugin Justin Mason wrote: Bowie Bailey writes: Will Duff wrote: Hi everyone, I've been working with SpamAssassin for the course of Google's Summer of Code to create 'SpamAssassin Coach' - an add-in available for

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Faisal N Jawdat
this is really promising, but i think it sort of points out some deficiencies in the current state of handling sa things from the client side. i'm wondering if it would make sense to create a separate learner server that deals with this stuff, with this server calling the training

uridnsbl error, info what?

2006-09-01 Thread Chris
I've been testing OpenDNS tonight vice using Earthlinks DNS nameservers. Looking at my hourly syslog snip, about half way through my NANAS run I noticed the below entries. First of all, what are these entries telling me? Secondly, if this is an error in the uridnsbl plug-in is it possibly

Re: uridnsbl error, info what?

2006-09-01 Thread Theo Van Dinter
On Fri, Sep 01, 2006 at 10:22:42PM -0500, Chris wrote: First of all, what are these entries telling me? Secondly, if this is an error in the uridnsbl plug-in is it possibly caused by the change in nameservers? The error is saying that it's looking for a 127/8 result, but it gets 208.67.219.40

Antidrug.cf, call to cease RDJ updates.

2006-09-01 Thread Matt Kettler
Although not yet definite, I am likely switching ISPs starting next Friday. It is my intent to keep the Comcast account active for about 4 weeks as a fall-back if the new ISP doesn't work out. However, this means antidrug.cf will be moving, and at some point after I shut down the account the web