Re: SPAM tagging

2007-10-30 Thread Matthias Haegele
Agnello George schrieb: Hi i have installed amavisd new on my postfix mailserver. Now i need to test spam , so I sent a mail with the following text in the body ( see link ) .. this is found at http://spamassassin.apache.org/gtube/ . As per the logs the mal is being blocked, but our

Re: sa-update

2007-10-30 Thread Obantec Support
- Original Message - From: Matt Kettler [EMAIL PROTECTED] To: Obantec Support [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Sent: Monday, October 29, 2007 11:29 PM Subject: Re: sa-update Obantec Support wrote: Hi i run sa-update from cron and last update seems to be Oct18 2007

RE: Custom rules working, but not sa-updates

2007-10-30 Thread Randal, Phil
Rob, that could be a MailScanner config problem. You don't say which version of MailScanner, alas. In /etc/MailScanner/MailScanner.conf check the Spamassassin Local State Dir line. Mine reads: SpamAssassin Local State Dir = # /var/lib/spamassassin Cheers, Phil -- Phil Randal Network Engineer

Win32.pm

2007-10-30 Thread Payne
Guys, How can I fix this? error: Can't locate Sys/Syslog/Win32.pm in @INC (@INC contains: /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/5.8.8/i586-linux-thread-multi /usr/lib/perl5/5.8.8

RE: Custom rules working, but not sa-updates

2007-10-30 Thread Rob Starr
Thanks for your response Phil, In an attempt to resolve the issue, I'm now using MailScanner 4.64.3 and have started from a fresh config file, so my Spamassassin Local State Dir line also reads: SpamAssassin Local State Dir = # /var/lib/spamassassin And, as I mentioned, a lint test shows that

Re: Win32.pm

2007-10-30 Thread Duane Hill
On Tue, 30 Oct 2007 02:04:31 -0400 Payne [EMAIL PROTECTED] confabulated: Guys, How can I fix this? error: Can't locate Sys/Syslog/Win32.pm in @INC (@INC contains: /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8

RE: Custom rules working, but not sa-updates

2007-10-30 Thread Randal, Phil
Right, and what does the MailScanner --debug --debug-sa output say it is using? Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Rob Starr [mailto:[EMAIL PROTECTED] Sent: 30 October 2007 12:29 To:

Enevelope from does not match header from

2007-10-30 Thread ram
Is there a rule where I can give a score for enevelope from not matching header from Atleast the domain part for eg, if someone forges my banks domain name in the header from ( They cant use that in the envelope from because my bank uses SPF records and phishers get caught easily ) then I want

Still problems with spamd at 100%

2007-10-30 Thread Peter Fastré
A few weeks ago, I posted the following question: Hello I have a severe problem with one of my mailservers. I'm using spamassassin 3.2.3 in combination with exim 4.66, and experience hanging spamd processes which consume all my server resources. I've searched these mailing lists, searched

RE: Custom rules working, but not sa-updates

2007-10-30 Thread Rob Starr
Boy, that's a handy command. I'll have to write that one down. I'm getting: In Debugging mode, not forking... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp debug: Score set 0 chosen. debug: running in taint mode? no debug: ignore: test message to precompile patterns

Re: Custom rules working, but not sa-updates

2007-10-30 Thread Andy Norris
Hi, I don't know if this is relevant for you or not, but on our mail server I could not get sa-update to work, either. I noticed that if the directory was not there, however, it would work. So a down and dirty approach I took was writing a crop job that removes that directory just before

RE: Custom rules working, but not sa-updates

2007-10-30 Thread Rob Starr
Thanks Andy, I have verified that sa-update is running and the rules folder is getting populated with lots of files. -Original Message- From: Andy Norris [mailto:[EMAIL PROTECTED] Sent: October-30-07 9:35 AM To: Randal, Phil Cc: Rob Starr; users@spamassassin.apache.org Subject: Re:

RE: SPAM tagging

2007-10-30 Thread Leon Kolchinsky
Hi, Read this http://www200.pair.com/mecham/spam/amavisd-settings.html And you’ll be set. Regards, Leon Kolchinsky From: Agnello George [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 30, 2007 8:31 AM To: users@spamassassin.apache.org

remove email

2007-10-30 Thread xou4
Hello, I want to remove the mails on which a score above 30 Thank you in advance for your help Xou -- View this message in context: http://www.nabble.com/remove-email-tf4718582.html#a13489061 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: remove email

2007-10-30 Thread Duane Hill
On Tue, 30 Oct 2007 06:49:25 -0700 (PDT) xou4 [EMAIL PROTECTED] confabulated: Hello, I want to remove the mails on which a score above 30 Thank you in advance for your help Xou Your email server software (MTA) has to do that. SpamAssassin just scans what you feed it. It does not

Re: remove email

2007-10-30 Thread Matthias Haegele
xou4 schrieb: Hello, I want to remove the mails on which a score above 30 Thank you in advance for your help spamassassin tags messages whatever filter you use could do this ... Xou -- Grüsse/Greetings MH Dont send mail to: [EMAIL PROTECTED] --

Re: remove email

2007-10-30 Thread Matthias Haegele
Matthias Haegele schrieb: xou4 schrieb: Hello, I want to remove the mails on which a score above 30 Thank you in advance for your help spamassassin tags messages whatever filter you use could do this ... Perhaps you want to use amavisd-new or procmail or ... (Using

RE: Custom rules working, but not sa-updates

2007-10-30 Thread Randal, Phil
debug: using /usr/share/spamassassin for default rules dir Oh dear, that's definitely wrong. You should have config: using /var/lib/spamassassin/3.002003 for default rules dir try setting the MailScanner.conf line to SpamAssassin Local State Dir = # /var/lib/spamassassin And see if that

Re: remove email

2007-10-30 Thread Duane Hill
On Tue, 30 Oct 2007 15:00:52 +0100 Matthias Haegele [EMAIL PROTECTED] confabulated: Matthias Haegele schrieb: xou4 schrieb: Hello, I want to remove the mails on which a score above 30 Thank you in advance for your help spamassassin tags messages whatever filter you use could do

[OT] RE: remove email

2007-10-30 Thread Skip
xou4 schrieb: Hello, I want to remove the mails on which a score above 30 Or for procmail (this rule is for 20, add or decrease \* as appropriate): :0 * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* /dev/null

whitelist_from_rcvd with numeric IP?

2007-10-30 Thread Rosenbaum, Larry M.
The documentation for whitelist_from_rcvd shows examples like this: whitelist_from_rcvd [EMAIL PROTECTED] example.com What if the sending server has no rDNS? Is there a way to use this feature with a numeric IP instead of a rDNS domain? If so, what is the syntax? Thanks, Larry

Re: blacklist.cf needs to die (was Re: Help figuring our why SA is taking like 1.5 minutes to filter...)

2007-10-30 Thread Justin Mason
Matt Kettler writes: Daryl C. W. O'Shea wrote: Justin Mason wrote: OK, we really need to figure out some way to kill these FAQs off. Every week, someone asks a question about why SpamAssassin is killing their server, and most of the time the answer is stop using blacklist.cf and

Re: whitelist_from_rcvd with numeric IP?

2007-10-30 Thread Daniel J McDonald
On Tue, 2007-10-30 at 11:57 -0400, Rosenbaum, Larry M. wrote: The documentation for whitelist_from_rcvd shows examples like this: whitelist_from_rcvd [EMAIL PROTECTED] example.com What if the sending server has no rDNS? They you can't use whitelist_from_rcvd, and the sender needs to fix

Re: Custom rules working, but not sa-updates

2007-10-30 Thread Daniel J McDonald
On Tue, 2007-10-30 at 08:35 -0500, Andy Norris wrote: Hi, I don't know if this is relevant for you or not, but on our mail server I could not get sa-update to work, either. I noticed that if the directory was not there, however, it would work. Sounds like a permissions issue. So a

Re: Custom rules working, but not sa-updates

2007-10-30 Thread Daryl C. W. O'Shea
Daniel J McDonald wrote: On Tue, 2007-10-30 at 08:35 -0500, Andy Norris wrote: So a down and dirty approach I took was writing a crop job that removes that directory just before running sa-update. So, you delete it every time, even when there are no updates? And since updates occur about

Re: Custom rules working, but not sa-updates

2007-10-30 Thread Andy Norris
No, it was not a permissions issue. I'll get back to working on it soon, but, yes there were newer versions than what I was seeing on my server. There are so many posts about sa-update not working. I'm sure sa-update works, for some folks, but it wasn't for me, and I had to quit spending

Re: Custom rules working, but not sa-updates

2007-10-30 Thread Daryl C. W. O'Shea
Andy Norris wrote: No, it was not a permissions issue. I'll get back to working on it soon, but, yes there were newer versions than what I was seeing on my server. There are so many posts about sa-update not working. I'm sure sa-update works, for some folks, but it wasn't for me, and I had

Re: Custom rules working, but not sa-updates

2007-10-30 Thread Andy Norris
I appreciate that you would like to see it working right, Daryl. To that, I'd add, me, too. But, like I said, I had to move on, and I hope to get back to it soon. And, by the way, I played with setting the update paths to all kinds of places, and all kinds of permissions, too. ;-) I'm sure

Myspace's mail headers

2007-10-30 Thread Joseph Brennan
Excerpt, headers from a generated message from myspace (I have folded lines for legibility) : Received: from vmta17.myspace.com (vmta17.myspace.com [204.16.33.80]) by cayenne.cc.columbia.edu (8.14.1/8.14.1) with ESMTP id l9U3N5he001961 for [EMAIL PROTECTED]; Mon, 29 Oct 2007 23:23:10 -0400

RE: Spamassassin SPF error

2007-10-30 Thread Jose Luis
Hi friends, It has solved the problem of the message headers to SA to work with SPF, this has been done by applying the Qmail patch QmailSpfPatch which is on the web http://wiki.apache.org/spamassassin/QmailSpfPatch Thanks Date: Sun, 28 Oct 2007 11:13:06 -0400 From: [EMAIL PROTECTED]

Re: The Bat! reanimated (suspicious Date header)

2007-10-30 Thread Kenneth Porter
On Friday, October 26, 2007 11:55 PM +0200 KarstenBräckelmann [EMAIL PROTECTED] wrote: NOTE: I only did a very brief investigation of Date: headers sent by The Bat! users on this list. If anyone can assure this, or got any inside knowledge whether The Bat! can or can not generate such headers

required_score

2007-10-30 Thread maillist
SpamAssassin version 3.2.3 running on Perl version 5.8.8 mimedefang version 2.63 sendmail Version 8.14.0 I have been running spamassassin for over 2 years now, and suddenly, the required score has changed. I have it set to 7.0, but it has suddenly changed back to the default of 5.0. I only

High Qmail-Server Load

2007-10-30 Thread Qnet ..
Hi Guys, I'm running a Qmail server with spamassassin + clamav + Simscam. The server i'm using is a HP ML110 CPU PIV (3.2 GHZ) 2mb chache , 1GB RAM. The problem is, the i'm getting very high load because spamd is the processes which take the most part of the load (invoked by spamassassin) si

Re: Myspace's mail headers

2007-10-30 Thread Bart Schaefer
On Oct 30, 2007 12:27 PM, Joseph Brennan [EMAIL PROTECTED] wrote: Notice the all-lower-case field names, which do not conform to the RFC 2822 field names that they almost match. That is, a from: header is not the same as a From: header! It's *supposed* to be the same. RFC *822 does not

Re: The Bat! reanimated (suspicious Date header)

2007-10-30 Thread Loren Wilton
FWFW, I ran masschecks on the original posted rules and got zero hits in any corpus. That rather surprised me. But it may indicate that this is either a very recent thing or isn't all that universal. Loren On Friday, October 26, 2007 11:55 PM +0200 KarstenBräckelmann [EMAIL

Re: Myspace's mail headers

2007-10-30 Thread Matt Kettler
Joseph Brennan wrote: Excerpt, headers from a generated message from myspace (I have folded lines for legibility) : Received: from vmta17.myspace.com (vmta17.myspace.com [204.16.33.80]) by cayenne.cc.columbia.edu (8.14.1/8.14.1) with ESMTP id l9U3N5he001961 for [EMAIL PROTECTED]; Mon, 29

Re: blacklist.cf needs to die (was Re: Help figuring our why SA is taking like 1.5 minutes to filter...)

2007-10-30 Thread Matt Kettler
Justin Mason wrote: Matt, any chance you could open a bz feature request for this? Done.. also added to it so there's now 3 warning level options. http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5710 --j.