Re: FreeMail plugin

2008-03-24 Thread Henrik K
On Mon, Mar 24, 2008 at 10:53:03AM +0530, Tarak Ranjan wrote: On Sat, 2008-03-22 at 15:51 +0200, Henrik K wrote: On Sat, Mar 22, 2008 at 06:41:26PM +0530, Tarak Ranjan wrote: On Sat, 2008-03-22 at 12:28 +, Justin Mason wrote: Henrik K writes: I updated my FreeMail plugin

Re: Logging

2008-03-24 Thread Martin Gregorie
Generally it gets installed in /etc/init.d or /etc/rc.d/init.d, and then symlinked to various /etc/rcrunlevel number.d directories to cause it to be called at various runlevels. If your system has redhat-ish and chkconfig, it can automate this part for you, as the redhat init script

Regarding FORGED_OUTLOOK_TAGS:

2008-03-24 Thread jdow
It sure as hell CAN send in this format. I just did it, silly people. {^_^} Joanne speaks - please listen.Title: Daily Diatribe == Newsletter 20080324 Regarding "FORGED_OUTLOOK_TAGS": Outlook sure as hell CAN send HTML in this for

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Matt Kettler
Sn!per wrote: Quoting Matt Kettler [EMAIL PROTECTED]: ie: the two most recent for the 3.2 branch are: # sa-update_3.2_20080114123639/ # sa-update_3.2_20080114144817/ Which were both made on January 14th, 2008. I suspect the rest is a timestamp, but I'm not entirely sure. If it is, the

Re: Am confused with mail header

2008-03-24 Thread Matt Kettler
Sn!per wrote: Quoting Matt Kettler [EMAIL PROTECTED]: Sn!per wrote: Hi all, Am using SA version 3.2.4 . So far working great. I am comparing the headers on two of my mails. The first mail is NOT a spam, and X-Spam-Status is like so: No, score=2.7 required=10.0

Re: any way to stop these tiny zip spams?

2008-03-24 Thread Benny Pedersen
On Tue, March 18, 2008 22:36, Jason Haar wrote: ...we're getting around 15,000 per day at the moment: emails containing one line of text and a 1Kbyte zip attachment (filename varies) - which contains a spammy HTML file. yes to late to stop the spam, but sender ip is listed in spamhaus, and

Global Bayes

2008-03-24 Thread Mike Fahey
Just upgraded to 3.2.4. I am running spamassasin as a normal user, not root. I keep seeing this in the log files. bayes: cannot open bayes databases /var/sabayes/.spamassassin/bayes_* R/W: lock failed: File exists There are about 20 lock files in the directory. Is spamassassin not cleaning

Re: Global Bayes

2008-03-24 Thread Robert Blayzor
On Mar 24, 2008, at 11:08 AM, Mike Fahey wrote: Just upgraded to 3.2.4. I am running spamassasin as a normal user, not root. I keep seeing this in the log files. bayes: cannot open bayes databases /var/sabayes/.spamassassin/ bayes_* R/W: lock failed: File exists There are about 20 lock

Re: Global Bayes

2008-03-24 Thread Jared Hall
Mike Fahey wrote: Just upgraded to 3.2.4. I am running spamassasin as a normal user, not root. I keep seeing this in the log files. bayes: cannot open bayes databases /var/sabayes/.spamassassin/bayes_* R/W: lock failed: File exists There are about 20 lock files in the directory. Is

Re: FreeMail plugin

2008-03-24 Thread Marc Perkel
Henrik K wrote: Hello, I updated my FreeMail plugin with a big list of domains (http://www.rhyolite.com/anti-spam/freemail.html). Try it out: http://sa.hege.li/FreeMail.pm http://sa.hege.li/FreeMail.cf Pretty good hit ratio here, especially when you add some extra scores like FREEMAIL_FROM

Re: FreeMail plugin

2008-03-24 Thread Henrik K
On Mon, Mar 24, 2008 at 09:19:19AM -0700, Marc Perkel wrote: I have a suggestion for your freemail plugin. I don't know if you can do this but if you can I want to see how. First look at the last received and verify that it is genuine. (Forward Confirmed rDNS). If it is then check the

Re: SA-UPDATE How often new updates?

2008-03-24 Thread mouss
Matt Kettler wrote: Sn!per wrote: Quoting Matt Kettler [EMAIL PROTECTED]: ie: the two most recent for the 3.2 branch are: # sa-update_3.2_20080114123639/ # sa-update_3.2_20080114144817/ Which were both made on January 14th, 2008. I suspect the rest is a timestamp, but I'm not entirely

update from 3.20 to 3.24 problem with local.cf

2008-03-24 Thread .rp
SA 3.20 was working okay, went for the 3.24 update. It installed , but upon restarting spamd I got error messages. I'd appreciate information on how to fix the local.cf file. Here is the log: Mon Mar 24 10:56:02 2008 [22312] info: logger: removing stderr method Mon Mar 24 10:56:09 2008 [22314]

Re: update from 3.20 to 3.24 problem with local.cf

2008-03-24 Thread Michael Scheidell
You have (at leqase) some OLD 2.x stuff in that local.cf http://readlist.com/lists/incubator.apache.org/spamassassin-users/0/4503.htm l Also, score have to be like '0.79' not '.79'. Google for each option that failed. I think you will find that they are OLD 2.0 options, for the most part.

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Matthias Leisi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A side note: | I have this in my cron to update the rules: | 00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 - --channel saupdates.openprotect.com --channel

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Mike Jackson
00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel saupdates.openprotect.com --channel updates.spamassassin.org --allowplugins Am I missing anything? Beside the other comments, throw something like

Re: FreeMail plugin

2008-03-24 Thread mouss
Marc Perkel wrote: Henrik K wrote: Hello, I updated my FreeMail plugin with a big list of domains (http://www.rhyolite.com/anti-spam/freemail.html). Try it out: http://sa.hege.li/FreeMail.pm http://sa.hege.li/FreeMail.cf Pretty good hit ratio here, especially when you add some extra

RE: Cyrillic spam

2008-03-24 Thread Michael Hutchinson
-Original Message- From: Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] Sent: Friday, 21 March 2008 3:28 a.m. To: users@spamassassin.apache.org Subject: Re: Cyrillic spam For some strange reason, I'm seeing Cyrillic spams very frequently lately. None of my users read

cannot install SA by CPAN without force

2008-03-24 Thread Juan Miscaro
I'm running OpenBSD and I repeatably have trouble installing SpamAssassin via CPAN. The (make) tests always fail. I usually install by force but now I'm trying to understand what's going wrong. I have attached the cpan session. Thanks to any responders. /juan

Why two spam assassins rank the same message so differently?

2008-03-24 Thread V V
My e-mail provider has SpamAssasin-3.2.1 installed. But it ranks many spam messages very differently than my SpamAssasin-3.2.4 on my computer. For example message below is ranked score=2.2 by SpamAssassin-3.2.1 on my provider with failing tests=RCVD_BAD_ID,RDNS_NONE. And the same message is

Re: Why two spam assassins rank the same message so differently?

2008-03-24 Thread Theo Van Dinter
On Mon, Mar 24, 2008 at 02:24:38PM -0700, V V wrote: For example message below is ranked score=2.2 by SpamAssassin-3.2.1 on my provider with failing tests=RCVD_BAD_ID,RDNS_NONE. And the same message is ranked score=15.007 by SpamAssassin-3.2.4 on my computer with failing

RE: Why two spam assassins rank the same message so differently?

2008-03-24 Thread Jason J. Ellingson
From what I see... it looks like perhaps your provider is doing only local tests from within SpamAssassin (the RDNS_NONE is from the MTA reporting no RNDS for that IP). You, on the other hand, seem to be running networks tests + Razor. - Jason J Ellingson

Re: Why two spam assassins rank the same message so differently?

2008-03-24 Thread mouss
V V wrote: My e-mail provider has SpamAssasin-3.2.1 installed. But it ranks many spam messages very differently than my SpamAssasin-3.2.4 on my computer. For example message below is ranked score=2.2 by SpamAssassin-3.2.1 on my provider with failing tests=RCVD_BAD_ID,RDNS_NONE. And the same

RE: Why two spam assassins rank the same message so differently?

2008-03-24 Thread James E. Pratt
by dgw218.neoplus.adsl.tpnet.pl with smtp (Exim 4.62 We've been blocking adsl.tpnet.pl for over a year yet they still barrage our servers daily with bot-infested clients. Some sites block the whole .PL tld, but that's a bit evil IMO.

Re: Why two spam assassins rank the same message so differently?

2008-03-24 Thread Arvid Ephraim Picciani
On Monday 24 March 2008 23:14:48 James E. Pratt wrote: . Some sites block the whole .PL tld, but that's a bit evil IMO. I know a big corp who blocks the entire .org. worst part is that the bounces go to the receiver instead the sender. you got an email from your developer contact , but you're

RE: Why two spam assassins rank the same message so differently?

2008-03-24 Thread D Hill
On Mon, 24 Mar 2008 at 18:14 -0400, [EMAIL PROTECTED] confabulated: by dgw218.neoplus.adsl.tpnet.pl with smtp (Exim 4.62 We've been blocking adsl.tpnet.pl for over a year yet they still barrage our servers daily with bot-infested clients. Some sites block the whole .PL tld, but that's

Re: Howto stop SPF_FAIL from internal network?

2008-03-24 Thread Benny Pedersen
On Wed, March 19, 2008 18:42, Enrico Scholz wrote: Hi, I have a problem that mails from internal (private) IPs generate SPF_FAIL hits. E.g. my configuration is | internal_networks 62.153.82.30 | internal_networks 192.168.0.0/16 | | trusted_networks62.153.82.30 |

Re: Howto stop SPF_FAIL from internal network?

2008-03-24 Thread Benny Pedersen
On Thu, March 20, 2008 16:48, Enrico Scholz wrote: ok; fixed it by removing the 192.168.0.0/16 from 'internal_networks'. But problem still persists that senders from the private 192.168.0.0/16 network are tagged with SPF_FAIL. if you have nic cards that are open to the air with that ip

Re: FreeMail plugin

2008-03-24 Thread Justin Mason
Henrik K writes: On Sat, Mar 22, 2008 at 12:28:34PM +, Justin Mason wrote: Henrik K writes: I updated my FreeMail plugin with a big list of domains (http://www.rhyolite.com/anti-spam/freemail.html). Try it out: http://sa.hege.li/FreeMail.pm

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Sn!per
Quoting Matt Kettler [EMAIL PROTECTED]: Well, as I said above no updates have been published since Jan 14th. So I would not expect any. However, sa-update's don't go in /usr/share/spamassassin. You'll *NEVER* see updates if you keep looking there. Feb 7th should be the date of your

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Matt Kettler
Sn!per wrote: So my cron would look like this then? 00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel saupdates.openprotect.com --channel updates.spamassassin.org --allowplugins /etc/init.d/spamd

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Sn!per
Quoting Matt Kettler [EMAIL PROTECTED]: Also, You shouldn't need to specify the keys and channels, unless you've got other channels installed on your system that you don't want to update. sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel

Re: SA-UPDATE How often new updates?

2008-03-24 Thread Daryl C. W. O'Shea
On 24/03/2008 9:34 PM, Matt Kettler wrote: Sn!per wrote: So my cron would look like this then? 00 * * * * /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --gpgkey D1C035168C1EBC08464946DA258CDB3ABDE9DC10 --channel saupdates.openprotect.com --channel

Re: FreeMail plugin

2008-03-24 Thread Loren Wilton
You would open a bug on the Bugzilla, and attach a patch; we then apply that patch, and it's updated in the next release of SpamAssassin. Is a CLA needed? Loren