Rise up bayes tests

Hi. Sometimes only bayes tests hit mails, so i recieve mail whit only bayes point (for exemple: X-Spam-Status: No, score=3.5 tagged_above=-999 required=5 tests=[BAYES_99=3.5]) Does anyone raise up the score of bayesan test? Is it safe? -- Paolo De Marco Real Comm srl Tel. +39 0434 923134

Stop tests when score is high

Hi. There is a way to stop tests when the score of the mail is higher then a value?

Re: Bounce notification

dvesely [EMAIL PROTECTED] writes: What's the best way to setup bounce notification? The best way is to not bounce at all but reject with a 5xx code during the SMPT conversation. Though be careful to only do this at 'border' MTAs (those listed in the MX records for the destination domain) not on

SpamAssassin 3.2.3 looks for user_prefs in the wrong place

Hello, Context === I use SpamAssassin 3.2.3 on Debian 4.0 i386 spamd is invoked with options : -u spamassassin -m 5 -H /etc/spamassassin (-D -u spamassassin -m 5 -H /etc/spamassassin when in debug mode) The home for user spamassassin is /none (this directory does not exist). my

False positives with Bayes_99

Hi there, I am running a well trusted travel community page that sends system e-mails like register, notice on comments etc. to its opt-in signed up users. Since two days all E-Mails from that server get an aditional spam score of 3.5!! by Bayes_99. I looked it up and found that Spamassasin

Re: False positives with Bayes_99

Merlin schrieb: Hi there, I am running a well trusted travel community page that sends system e-mails like register, notice on comments etc. to its opt-in signed up users. Since two days all E-Mails from that server get an aditional spam score of 3.5!! by Bayes_99. I looked it up and found

Re: Rise up bayes tests

Paolo De Marco schrieb: Hi. Sometimes only bayes tests hit mails, so i recieve mail whit only bayes point (for exemple: X-Spam-Status: No, score=3.5 tagged_above=-999 required=5 tests=[BAYES_99=3.5]) Does anyone raise up the score of bayesan test? Is it safe? afaik it is not recommended to

Re: False positives with Bayes_99

On Thu, 20 Dec 2007 03:08:34 -0800, Merlin [EMAIL PROTECTED] said: On Thu, 20 Dec 2007 11:59:32 +0100, Matthias Haegele [EMAIL PROTECTED] said: Merlin schrieb: Hi there, I am running a well trusted travel community page that sends system e-mails like register, notice on

Deleting from server

Can anyone let me know how to delete from server, if the score is over 8 please ? Any help appreciated. Chris.

Re: Rise up bayes tests

Matthias Haegele writes: Paolo De Marco schrieb: Hi. Sometimes only bayes tests hit mails, so i recieve mail whit only bayes point (for exemple: X-Spam-Status: No, score=3.5 tagged_above=-999 required=5 tests=[BAYES_99=3.5]) Does anyone raise up the score of bayesan test? Is it safe?

Re: Deleting from server

Chris schrieb: Can anyone let me know how to delete from server, if the score is over 8 please ? Any help appreciated. Chris. on amavisd-new e. g. look for: sa_kill_level_deflt = 8.0; maybe you need to watch: sa_tag_level* SA doesnt delete, tagging that must be done by your filter

Re: Stop tests when score is high

Paolo De Marco wrote: Hi. There is a way to stop tests when the score of the mail is higher then a value? Not in a general sense, but there is a shortcircuit plugin that can be used to stop checking when a particular rule hits. You can also use the rule priority to cause the trusted

Re: Deleting from server

Chris wrote: Can anyone let me know how to delete from server, if the score is over 8 please ? Any help appreciated. Spamassassin itself can't delete mail, as it has no control over the envelope. If it tried, most tools that call SA would assume it crashed and recover the original, unscanned

Re: False positives with Bayes_99

Merlin schrieb: On Thu, 20 Dec 2007 03:08:34 -0800, Merlin [EMAIL PROTECTED] said: On Thu, 20 Dec 2007 11:59:32 +0100, Matthias Haegele [EMAIL PROTECTED] said: Merlin schrieb: Hi there, I am running a well trusted travel community page that sends system e-mails like register, notice on

Re: SpamAssassin 3.2.3 looks for user_prefs in the wrong place

R. Portier wrote: Hello, Context === I use SpamAssassin 3.2.3 on Debian 4.0 i386 spamd is invoked with options : -u spamassassin -m 5 -H /etc/spamassassin (-D -u spamassassin -m 5 -H /etc/spamassassin when in debug mode) The home for user spamassassin is /none (this directory does

Re: Stop tests when score is high

Not that I am aware of... The complication with this would be the order in which tests are carrierd out - you might have a genuine email which hits some good and some bad tests, and if the bad tests are hit first then you might have a problem! However it is a feature I would like to see as it

Re: False positives with Bayes_99

On Thu, 20 Dec 2007, Merlin wrote: I looked it up and found that Spamassasin believes that it is to 99% spam by training from users. I believe there is more to it, as I can not believe that users mark such msges as spam. An unfortunate reality of system administration is that most people are

Log Basic Message Information to Database

Hello, Does anyone know of a way to log basic information about messages processed by Spamassassin to a database (ideally mysql)? The fields i'm interested in logging are: ip address of remote smtp server score assigned to message by spamassassin date and time

Is this a wiildcard ?

Hi, Just looking through the SA setup on a couple of my accounts, and notice in the email filters, that this is in place : Destination $header_subject: contains * Discard Isn't * a wildcard ? Wouldn't that rule above discard all emails ? Chris.

Re: Is this a wiildcard ?

On Thu, Dec 20, 2007 at 04:57:25PM +0100, Chris wrote: Just looking through the SA setup on a couple of my accounts, and notice in the email filters, that this is in place : Destination $header_subject: contains * Discard Isn't * a wildcard ? Wouldn't that rule above discard all emails

Re: SpamAssassin 3.2.3 looks for user_prefs in the wrong place

Hello, Thank you for your answer. I agree with you, but there is still something puzzling me. I have an old SpamAssassin 3.0.3 running on another server. Pretty much the same configuration (running as user spamassassin, allow_user_prefs 1, ...). This old version of SpamAssassin does manage to

Re: hits gawk program re: spamassassin

- Original Message - I am trying to learn how you did your hits gawk program and how to use it and what the logfile should look like How do I learn more regarding your setup so I can use or change to use on my setup Robert, To use the hits report the command line is: gawk -f hits

Re: Stop tests when score is high

- Original Message - Paolo De Marco wrote: Hi. There is a way to stop tests when the score of the mail is higher then a value? Not in a general sense, but there is a shortcircuit plugin that can be used to stop checking when a particular rule hits. You can also use the rule priority to

Re: Is this a wiildcard ?

Theo Van Dinter schrieb: On Thu, Dec 20, 2007 at 04:57:25PM +0100, Chris wrote: Just looking through the SA setup on a couple of my accounts, and notice in the email filters, that this is in place : Destination $header_subject: contains * Discard Isn't * a wildcard ? Wouldn't that rule

Re: Bounce notification

dvesely wrote: I have setup bounce notification for my spamassasin mail server but my server manager has reccomended that I do not use it. He wrote: Right. Best not to generate bounces to spam after you have received it because if you do you become a source of spam yourself. The most of the

Re: False positives with Bayes_99

On Thu, 20 Dec 2007 15:18:45 +0100, Matthias Haegele [EMAIL PROTECTED] said: Merlin schrieb: On Thu, 20 Dec 2007 03:08:34 -0800, Merlin [EMAIL PROTECTED] said: On Thu, 20 Dec 2007 11:59:32 +0100, Matthias Haegele [EMAIL PROTECTED] said: Merlin schrieb: Hi there, I am running a

Upgrade to 3.2.3 introduced severe slowness

Hi. I recently tried upgrading our anti-spam servers to run v 3.2.3. Previously we were using 3.1.7. When I tried to do this, performance took a bit hit - messages take more than double the time to scan in 3.2.3 as compared to 3.1.7. As an example, one particular test spam message takes an

Re: Stop tests when score is high

Kevin W. Gagel wrote: Couldn't a whitelist shortcircut option be added? What I mean is a feature that allows an admin to direct SA to check the whitelist/blacklist first and then (if enabled) abandon further testing if sender is listed. AFAIK there's no reason why you can't do that already,

Re: Stop tests when score is high

- Original Message - Kevin W. Gagel wrote: Couldn't a whitelist shortcircut option be added? What I mean is a feature that allows an admin to direct SA to check the whitelist/blacklist first and then (if enabled) abandon further testing if sender is listed. AFAIK there's no reason why

Re: Stop tests when score is high

Kevin W. Gagel wrote: - Original Message - Kevin W. Gagel wrote: Couldn't a whitelist shortcircut option be added? What I mean is a feature that allows an admin to direct SA to check the whitelist/blacklist first and then (if enabled) abandon further testing if sender is listed.

Re: Bounce notification

Dan Vesely wrote: If you reject at the smtp level how are users notified? There has to be a way to notify users if they are rejected so that they can contact the sender to be put on the white list. The user would get a normal bounce return. As far as the person receiving the bounce message

Re: Upgrade to 3.2.3 introduced severe slowness

Add re2c to your system, and enable the rules compiling. That should make up for the performance difference. On Thu, Dec 20, 2007 at 11:17:07AM -0800, Thomas Ledbetter wrote: Hi. I recently tried upgrading our anti-spam servers to run v 3.2.3. Previously we were using 3.1.7. When I tried to

Re: Upgrade to 3.2.3 introduced severe slowness

Thomas Ledbetter wrote: Hi. I recently tried upgrading our anti-spam servers to run v 3.2.3. Previously we were using 3.1.7. When I tried to do this, performance took a bit hit - messages take more than double the time to scan in 3.2.3 as compared to 3.1.7. As an example, one particular test

good spamd box

I just built a new box with the AMD Phenom 9500 processor, gigabyte am2+ motherboard, and 8GB ram (ram is getting cheap!). It was all under $1000 for everything including power supply, cheesy video card, 2 sata drives. This thing rocks so hard for spamassassin, it's amazing. Most of my other

Re: good spamd box

jp wrote: I just built a new box with the AMD Phenom 9500 processor, gigabyte am2+ motherboard, and 8GB ram (ram is getting cheap!). It was all under $1000 for everything including power supply, cheesy video card, 2 sata drives. This thing rocks so hard for spamassassin, it's amazing.

spam rules

Hi, I'm new to SpamAssassin and have checked the web on spam rules. I just can't seem to find the info I'm looking for. I want to create a rule where all mail to [EMAIL PROTECTED] with a certain text like 'new message' is passed through and all other mail is considered spam. This quite a

Re: spam rules

At 01:44 PM 12/20/2007, jikke wrote: Hi, I'm new to SpamAssassin and have checked the web on spam rules. I just can't seem to find the info I'm looking for. I want to create a rule where all mail to [EMAIL PROTECTED] with a certain text like 'new message' is passed through and all other mail

Re: spam rules

On Thu, 20 Dec 2007, jikke wrote: I'm new to SpamAssassin and have checked the web on spam rules. I just can't seem to find the info I'm looking for. I want to create a rule where all mail to [EMAIL PROTECTED] with a certain text like 'new message' is passed through and all other mail is

Re: spam rules

On 12/20/2007 10:44 PM, jikke wrote: Hi, I'm new to SpamAssassin and have checked the web on spam rules. I just can't seem to find the info I'm looking for. I want to create a rule where all mail to [EMAIL PROTECTED] with a certain text like 'new message' is passed through and all other mail is

Get HAM's from Exchange / Outlook

Hello all, anyone have an idea of how to get HAM's from an exchange / Outlook environment back to SA? My incoming is scanned by a SA gateway but outgoing goes straight from exchange to the cloud. Best Regards, Jason Holbrook Chief Technology Integrator / Partner Empower Information Systems

Re: Get HAM's from Exchange / Outlook

Jason Holbrook wrote: Hello all, anyone have an idea of how to get HAM’s from an exchange / Outlook environment back to SA? My incoming is scanned by a SA gateway but outgoing goes straight from exchange to the cloud. Best Regards, Jason Holbrook Chief Technology Integrator / Partner

Re: Get HAM's from Exchange / Outlook

Thank you for the link. Best Regards, Jason Holbrook Chief Technology Integrator / Partner Empower Information Systems [EMAIL PROTECTED] weblog.empoweris.com www.empoweris.com Skype: holbrook.jason Gtalk: jaholbrook 757-320-2667 (Direct) 757-273-9399 (office) 757-715-1944 (cell) 866-477-1544

Re: SpamAssassin 3.2.3 looks for user_prefs in the wrong place

Remy PORTIER wrote: Hello, Thank you for your answer. I agree with you, but there is still something puzzling me. I have an old SpamAssassin 3.0.3 running on another server. Pretty much the same configuration (running as user spamassassin, allow_user_prefs 1, ...). This old version of

Re: spam rules

Yet Another Ninja wrote: On 12/20/2007 10:44 PM, jikke wrote: Hi, I'm new to SpamAssassin and have checked the web on spam rules. I just can't seem to find the info I'm looking for. I want to create a rule where all mail to [EMAIL PROTECTED] with a certain text like 'new message' is passed

Re: Bounce notification

My server manager tells me that my Windows version of SpamAssasin cannot reject email at the SMTP level. This is only possibble in the Unix version. True or False? If false, can you give me a link to instructions on enabling this feature or any known workaround please? Thanks, Dan Bob

Re: Bounce notification

dvesely wrote: My server manager tells me that my Windows version of SpamAssasin cannot reject email at the SMTP level. This is only possibble in the Unix version. True or False? If false, can you give me a link to instructions on enabling this feature or any known workaround please?