On Thu, 19 Oct 2006, John Andersen wrote:
On Thursday 19 October 2006 04:02, Giampaolo Tomassoni wrote:
In short: just use it. :-}
Right. :)
No, that's actually wrong. You never want to use it to send
or receive mail. You want it to be hit totally uninvited, not by accident.
E.g.
On Thursday 19 October 2006 20:34, Jo Rhett took the opportunity to say:
Mark wrote:
-Original Message-
From: Jo Rhett [mailto:[EMAIL PROTECTED]
Sent: donderdag 19 oktober 2006 9:56
To: Mark
Cc: users@spamassassin.apache.org
Subject: Re: ALL_TRUSTED creating a problem
I am trying to use URIDNSBL but can not get DNS resolutionSpamAssassin 3.1.7Net-DNS-0.59]# ps auxw | grep spamroot 22477 0.1 19.8 53720 50860 ? S 02:12 0:02 /usr/bin/spamd -d -c -m5 -H -r /var/run/spamd.pid
Mandrake Linux release 10.0 (RC1) for i586
Config file setup:::dns_available yesloadplugin
I am getting lots of mails like this. How to block it?
Subject: Good day
The message contains Unicode characters and has been sent
as a binary
attachment.
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
I am getting lots of mails like this. How to block it?
Subject: Good day
The message contains Unicode characters and has been sent
as a binary attachment.
Warm Regards,
Suhas
System Administrator
QualiSpace - A QuantumPages Enterprise
Hi,
have you tried a
Hello,
I am using spamassassin with postfix and amavis on a debian sarge
server. The versions I use are:
* postfix: 2.1.5
* amavisd-new
* spamassassin: 3.1.0a
The problem I have is that emails sent by one of my users is always
tagged as spam, although messages aren't spam. The
Hello,
(Sorry for my previous email without any subject).
I am using spamassassin with postfix and amavis on a debian sarge
server. The versions I use are:
* postfix: 2.1.5
* amavisd-new
* spamassassin: 3.1.0a
The problem I have is that emails sent by one of my users is
Even it is getting slipped thru the AV
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===
For
As far as I can guess, the problem could be the AWL (I think that
this
user is the same that had a problem some months ago with a worm virus
sending a lot of emails), but I run:
spamassassin --remove-addr-from-whitelist=hisemail
Without knowing the exact syntax, and this option: Wouldnt
On Fri, October 20, 2006 02:14, Kelson wrote:
I.e. they aren't trying to get your money (at least, not directly) --
they're phishers trying to get your eBay login and password.
it makes it more fun to recieve them if thay know my first name :-)
or if i realy don't use ebay
when ebay changes
Chris Hastie writes:
I have a number of spamtrap addresses that between them receive between about
3000 and 6000 messages a day. Until recently I have used this mail to simply
populate a database of machines that have sent me spam in the last 48 hours,
which is used as part of a series of
Any rules I install to use with SA/MD I install in the
/etc/mail/spamassassin/ folder where my sa-mimedefang.cf file is at. I
rarely create custom rules but the few I do have I place in the
sa-mimedefang.cf file itself - just my personal preference, again, since I
don't have many.
Bill
Hi,
actually, i use SpamAssassin 3.0.4 with this config:
==
Local.cf
==
required_hits 4.9
auto_whitelist_path/var/spool/spamassassin/auto-whitelist
auto_whitelist_file_mode 0777
#rewrite_header
David Berten wrote:
I am trying to use URIDNSBL but can not get DNS resolution
SpamAssassin 3.1.7
Output:::
Net-DNS-0.59]# spamassassin -D dns --lint
[22770] dbg: dns: is Net::DNS::Resolver available? yes
[22770] dbg: dns: Net::DNS version: 0.59
[22770] dbg: dns: is DNS available? 0
This is exactly what I was looking for.although I did enjoy the
flame war
Robert
Peace he would say instead of goodbyepeace my brother.
-Original Message-
From: Eric A. Hall [mailto:[EMAIL PROTECTED]
Sent: Friday, October 20, 2006 1:07 AM
To: Robert Swan
Cc:
Title: RE: Psst!
-Original Message-
From: David B Funk [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 20, 2006 1:20 AM
To: users@spamassassin.apache.org
Subject: Re: Psst!
On Thu, 19 Oct 2006, Matt Kettler wrote:
Another thing I've been noticing recently.. some idiot
I recently installed FuzzyOCR 2.3b and am still studying it before I
install it on my larger mail servers. It seems to work pretty good but I'm
starting to notice some HAM emails being rejected simply because of the
hashing feature being enabled.
A customer this morning called me about an
Chris Santerre wrote:
Just curious, but how many people see spam being sent to usersnames
with the fisrt letter dropped? I see a ton in my logs. I believe
spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad
for them...they do not. :)
I am noticing alot of this.
Title: RE: Psst!
Just curious, but how many people see spam being sent to
usersnames with the fisrt letter dropped? I see a ton in my logs. I believe
spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad for
them...they do not. :)
Mmmh. I think that they
On Thursday 19 October 2006 16:00, George R. Kasica wrote:
Its not a formal released version from Chris/decoder. I'm running b
here as it seems the most stable.
If you want J is at:
Decoder said some time ago that J was an early development version and
recommended people go with b. He's
* Chris Santerre wrote (20/10/06 15:30):
-Original Message-
From: David B Funk [mailto:[EMAIL PROTECTED]
Sent: Friday, October 20, 2006 1:20 AM
To: users@spamassassin.apache.org
Subject: Re: Psst!
On Thu, 19 Oct 2006, Matt Kettler wrote:
Another thing I've been noticing
Can someone please remind me how to create custom scores for existing
rules?? I do not want to manually go in and change any particular score, any
update will over ride that.. I want to manually change them to hit on a
higher [or lower as the case might be] score.
If memory serves, I THINK I
On Friday 20 October 2006 15:44, Nick Leverton wrote:
HTH etc,
Nick
fuzzyocr-23b-hashdb-poison.patch.gz
Ignore that second patch which wasn't from decoder. I must have
accidentally dropped it into the mail somehow (have I mentioned recently I
hate GUI mailers ?)
Nick
RFC 2821 Section 4.1.4 Order of Commands
...
An SMTP server MAY verify that the domain name parameter in the EHLO
command actually corresponds to the IP address of the client.
However, the server MUST NOT refuse to accept a message for this
reason if the verification fails:
ccrowley [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
All -
Just a quick inquiry. I updated from 3.1.3 to 3.1.7 yesterday. I'm seeing
substantially higher LA on the system. The system used to run at a range
of
2.x - 8.x LA. With 3.1.7 I'm seeing 10.x - 50.x.
I'm in the
Debbie D wrote:
Can someone please remind me how to create custom scores for existing
rules?? I do not want to manually go in and change any particular
score, any update will over ride that.. I want to manually change
them to hit on a higher [or lower as the case might be] score.
If memory
Chris Santerre wrote:
Just curious, but how many people see spam being sent to usersnames
with the fisrt letter dropped? I see a ton in my logs. I believe
spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad
for them...they do not. :)
Same here. I've also had lots
Andreas Pettersson wrote:
Same here. I've also had lots of spam to addresses with various
amounts of trailing d or n in local part. Like [EMAIL PROTECTED]
Seems to be fewer of these today though.
I meant tailing.
--
Andreas
Op 20-okt-06, om 16:30 heeft Chris Santerre het volgende geschreven:ust curious, but how many people see spam being sent to usersnames with the fisrt letter dropped? I see a ton in my logs. I believe spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED]. Too bad for them...they do
Title: RE: Psst!
-Original Message-
From: Mark Johnson [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 20, 2006 10:41 AM
To: users@spamassassin.apache.org
Subject: Re: Psst!
Chris Santerre wrote:
Just curious, but how many people see spam being sent to usersnames
On Fri, 20 Oct 2006 11:13:31 -0400, Chris Santerre
[EMAIL PROTECTED] wrote:
-Original Message-
From: Mark Johnson [mailto:[EMAIL PROTECTED]
Sent: Friday, October 20, 2006 10:41 AM
To: users@spamassassin.apache.org
Subject: Re: Psst!
Chris Santerre wrote:
Just curious,
On 10/20/2006 10:43 AM, Giampaolo Tomassoni wrote:
RFC 2821 Section 4.1.4 Order of Commands ...
An SMTP server MAY verify that the domain name parameter in the EHLO
command actually corresponds to the IP address of the client.
However, the server MUST NOT refuse to accept a message for this
hey friends,
I know this is not the right list to post the queries regarding
imap-spamassassin file , I thought may be somebody had tried this
script before. I am trying to configure imap-spamassassin.pl on my
system and I have edited the file but I am getting the below error
when I tried to
I am trying to understand scoring for spam messages in the
rules. I hope you guys can help me understand this better. I have
an email header below that is from a spam email. I think I follow that
the score for the various rules is in the X-Spam-Report section of the
header. I am running
Our mail server processes about 75k-100k messages a day, and runs a
force-expire once a day at 2am or so. Currently the bayes db (in sql) had a
expiry_max_db_size set to 500k, and when the expiration runs normally the db
is cut in half pretty much:
[7435] dbg: bayes: expiry check keep size,
Based on how far their mailing lists go back, Razor and DCC have been
around since the 2000/2001 time period, and as far as I can tell were
independent projects.
In fact, they're based on different goals/models, which is why it's
useful to use both of them. Razor is interested in specifically
Steve Ingraham wrote:
I am trying to figure out how I can get scores to this type of spam
bumped up so they do not get delivered to my user mailboxes. Can
anyone give me some suggestions on what I should do to stop this type
of spam from being delivered?
[...]
X-Spam-Flag: YES
X-Spam-Status:
Thank you for posting this.
Unfortunately after RDJ downloaded all those parking pages, their
timestamps were then LATER THAN the timestamps on the real rules files.
Because of this, the if-modified-since checks all returned false and the
real rulesets didn't clobber the broken ones.
Chris
Jo Rhett wrote:
Is there any difference here that I'm overlooking? Any advantage to RDJ?
And leading to my next point, given that sa-update is working fine --
isn't rdj going to be slimmed down to just the part that restarts the
process after running sa-update?
Hi Jo,
I'm the author of
Theo Van Dinter wrote:
FWIW, it happens to be the official tool since no one ever submitted
RDJ to be the official tool, so we had to write our own.
I would have offered, had I known there was any interest.
Chris T.
Theo Van Dinter wrote:
FWIW, it happens to be the official tool since no one
ever submitted
RDJ to be the official tool, so we had to write our own.
I would have offered, had I known there was any interest.
Chris T.
I'm glad it isn't the official tool since it doesn't run natively on
I had a working setup of Courier-MTA, spamassassin 3.0.4, and maildrop,
but I upgraded spamassassin to 3.1.7 and now I have errors and mail
doesn't get delivered unless I remove the tie-in to spamassassin in the
courierd file.
Here are some of the errors:
Oct 20 14:10:20 mail spamd[5776]:
On Fri, Oct 20, 2006 at 02:30:14PM -0400, Brian S. Meehan wrote:
Oct 20 14:10:20 mail spamd[5776]: configuration file
/usr/share/spamassassin/20_net_tests.cf requires version 3.001007 of
SpamAssassin, but this is code ve
rsion 3.04. Maybe you need to use the -C switch, or remove the old
Michael Beckmann wrote:
Greetings!
In the past few weeks, I have noticed significant amounts of spam
passing through my filter. It is reaching a level that annoys me. I use
Spamassassin 3.1.7.
I used to get maybe one or two spam messages a day earlier this year
with 200+ spams filtered.
On Fri, Oct 20, 2006 at 02:42:09PM -0400, Brian S. Meehan wrote:
When you say blow them away, are there folders besides the below ones that
should be removed?
/etc/mail/spamassassin
I'd save these files, since they're your local configs. Copy them back
appropriately after the install.
Peter Lemieux wrote:
You don't need to bump up the score; this one received an 8.3 which
exceeds your 5.0 ceiling. This result is that it's tagged as spam. SA
itself doesn't do anything other than tag likely spams. It's up to you
to decide what to do with these messages.
[...]
I was
Exactly. I guessed there would be a few other people out there still
trying to figure this one out.
Bowie
Chris Thielen wrote:
Thank you for posting this.
Unfortunately after RDJ downloaded all those parking pages, their
timestamps were then LATER THAN the timestamps on the real rules
Bret Miller wrote:
Theo Van Dinter wrote:
FWIW, it happens to be the official tool since no one ever
submitted RDJ to be the official tool, so we had to write our own.
I would have offered, had I known there was any interest.
Chris T.
I'm glad it isn't the official tool
Steve Ingraham wrote:
I was trying to see if there was anything I could change in the rules in
spamassassin to raise the spam score up enough to reach the spam_hits=10
limit set up in my qmail controls so that qmail will not deliver the
message. Once the spam score reaches 10 delivery is
On Friday 20 October 2006 10:37, Jim Maul wrote:
Others may suggest you lower your threshold but I feel this is the wrong
way to deal with this type of situation. Generally, you want to
increase the gap between spam scores and ham scores, not lower the
threshold. The way to do this is add on
Peter Lemioux wrote:
You can modify the scoring of any rule by adding a file to
/etc/mail/spamassassin that changes the score for specific rules. I
named mine ZZscores.cf so it will be read after the other files in this
directory. For instance,
score HTML_MESSAGE_BODY1.0
R Lists06 wrote:
I am sorry if I am asking this question and it is answered in the
archives. I will try to go back and read those past posts but is
there a site where I can download the SARE stock rules and the
plugins? I am aware of Rules Du Jour but whenever I have attempted
to
Steve Ingraham wrote:
Could you explain how I can train Bayes? What specifically do I need to
do to accomplish this?
http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html
If you are having problems with memory after downloading the rules,
you just need to be careful that you use the right ones. Read the
descriptions of the rules carefully and only use the ones that you
think would be useful. Any time you add more rules, the spamd
children will take up more
On Wed, 18 Oct 2006 13:17:04 -0400, you wrote:
I was hoping for a simple way to
detect if the image property frames 1
Will the updated SARE ruleset be able to do this?
It won't need to. It just useses other flags to determine whats going on. I
went about it as the gif didn't matter. Old
Hello,am using CGPro as mail server, and i need some help and adviceI am planning to implement CGPSA on our ingate servers and am not quitesure if it is a good ideawe recieve almost 7000 email per hour and i don't know if spamassassin
is going to miss anythinganother questionfor the amount of
Hi all,
I'm a long time SA user - my system runs Mac OSX 10.4.x,
running Postfix, Maia Mailguard, ClamAV, Amavisd-new now
SpamAssassin 3.1.7 since upgrading 4 days ag, the SA installation
intercepts all inbound mail for scanning prior to delivery.
Recently, I've discovered the URIDNSBL
57 matches
Mail list logo
