Re: Add Header of DomainKeys status

2010-04-12 Thread N Alaudeen
Hello Martinec, Thank you for your response. I am adding DKIM Result in header using EXIM 4.71 configuration. But, it seems, this version does not support adding DK result in header. Some companies still configure only DK and not DKIM. We are in need of verifying both and adding the same in

Enable autolearn for certain shortcircuits

2010-04-12 Thread Daniel Lemke
Hi, I'd like to enable bayes auto learn for a specific shortcircuit rule. This is what I've got: shortcircuit BAYES_00 on score BAYES_00 -50 tflags BAYES_00 learn It's declared in site wide local.cf. A test showed that SA does consider changes to the score but ignors removing the noautolearn

Re: Quarantine Management

2010-04-12 Thread Lucio Chiappetti
On Sat, 10 Apr 2010, Dennis B. Hopp wrote: What are people using for quarantine management with spamassassin? We use an homegrown arrangement. I've forgotten the details since it's running without problems since ages, but in the nutshell we have this: - spam is quarantined system-wide

Re: AWL

2010-04-12 Thread Matt Kettler
On 4/9/2010 4:33 PM, Dennis B. Hopp wrote: I have AWL enabled and it seems to be ok with helping out legitimate senders that occasionally send a spammy type message, but lately I have seen an increase where AWL is adding a negative score to a very blatant spam. As long as it's not

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread RW
On Mon, 12 Apr 2010 00:30:18 -0700 (PDT) Daniel Lemke le...@jam-software.com wrote: Hi, I'd like to enable bayes auto learn for a specific shortcircuit rule. This is what I've got: shortcircuit BAYES_00 on score BAYES_00 -50 tflags BAYES_00 learn It's declared in site wide

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread Daniel Lemke
RW-15 wrote: The default is learn, not noautolearn - either prevents autoleaning. Hmm, so it's not possible to use a tflag for telling bayes to learn the message? What else can I do? -- View this message in context:

Re: Increase in image/zip spam?

2010-04-12 Thread --[ UxBoD ]--
- Original Message - Hi, Just wondering if others are also seeing an increase in image spam in the last week or so, some of which contain zip attachments? The body contains random bayes killer? text with an image or zip attachment. I can't otherwise find something to trigger on to

Re: Increase in image/zip spam?

2010-04-12 Thread Per Jessen
Alex wrote: Hi, Just wondering if others are also seeing an increase in image spam in the last week or so, some of which contain zip attachments? The body contains random bayes killer? text with an image or zip attachment. Yep, been seeing quite a few of those. Usually one image as a

Re: How to configure spamassassin

2010-04-12 Thread hateSpam
I used instruction for http://onetforum.com/fourm/viewtopic.php?f=2t=34 and reloaded the postfix now when I receive any email I have [SPAM] added on subject all emails even it is not a spam. hateSpam wrote: Dear All, I have Spamassassin on my Centos 5.4. For send and receive email I use

Re: How to configure spamassassin

2010-04-12 Thread Matus UHLAR - fantomas
On 12.04.10 06:16, hateSpam wrote: I used instruction for http://onetforum.com/fourm/viewtopic.php?f=2t=34 Why don't you ask on that forum for help then? and reloaded the postfix now when I receive any email I have [SPAM] added on subject turn subject rewriting off. all emails even it is

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread Daniel Lemke
RW-15 wrote: On Mon, 12 Apr 2010 04:25:13 -0700 (PDT) Daniel Lemke le...@jam-software.com wrote: RW-15 wrote: The default is learn, not noautolearn - either prevents autoleaning. Hmm, so it's not possible to use a tflag for telling bayes to learn the message? What

Re: How to configure spamassassin

2010-04-12 Thread hateSpam
I wanted to ask that forum but there was not any contact or registration option, so I wonder if anyone else has done the same configuration. Matus UHLAR - fantomas wrote: On 12.04.10 06:16, hateSpam wrote: I used instruction for http://onetforum.com/fourm/viewtopic.php?f=2t=34 Why

How to filter emails in a text file

2010-04-12 Thread yongke
Hi guys Is it possible to just run spamassassin on a text file? I don't have a mailsever or anything. Is it possible to have like a totally standalone spamassassin to just check emails I generate but haven't sent out yet? -- View this message in context:

Re: How to filter emails in a text file

2010-04-12 Thread Daniel Lemke
yongke wrote: Hi guys Is it possible to just run spamassassin on a text file? I don't have a mailsever or anything. Is it possible to have like a totally standalone spamassassin to just check emails I generate but haven't sent out yet? Uhm, not sure what you mean with totally

Re: How to filter emails in a text file

2010-04-12 Thread Per Jessen
yongke wrote: Hi guys Is it possible to just run spamassassin on a text file? I don't have a mailsever or anything. Is it possible to have like a totally standalone spamassassin to just check emails I generate but haven't sent out yet? Yep, just run 'spamassassin arguments...

Re: How to filter emails in a text file

2010-04-12 Thread yongke
Ok thanks, I will give this a try. Daniel Lemke wrote: yongke wrote: Hi guys Is it possible to just run spamassassin on a text file? I don't have a mailsever or anything. Is it possible to have like a totally standalone spamassassin to just check emails I generate but haven't

Re: How to configure spamassassin

2010-04-12 Thread Kai Schaetzl
HateSpam wrote on Mon, 12 Apr 2010 07:12:36 -0700 (PDT): I wanted to ask that forum but there was not any contact or registration option, so I wonder if anyone else has done the same configuration. You should not use it if you don't know how it works and it is not supported anymore. Kai --

Mail Marked Spam For VPN Users

2010-04-12 Thread Carlos Mennens
On my Postfix server, when my co-workers VPN from their laptops from home, they then send mail via Outlook and their ISP IP address. When the message gets to it's recipient, it's marked ***SPAM*** by SA. User's are complaining that email from internal users are being marked as 'spam' and they

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Michael Scheidell
On 4/12/10 12:38 PM, Carlos Mennens wrote: On my Postfix server, when my co-workers VPN from their laptops from home, they then send mail via Outlook and their ISP IP address. When the message gets to it's recipient, it's marked ***SPAM*** by SA. are they not authenticating through, and

file locking errors and general fyi

2010-04-12 Thread R-Elists
greetings, :-) coupla days ago upgraded from 3.2.5 to 3.3.1 on a production centos4 machine all 3.2.5 old files and dirs and all conflicting/duplicate rules removed from machine. it appears that overall things went quite well 2 days later doing some normal log parsing i noticed this

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Carlos Mennens
On Mon, Apr 12, 2010 at 12:43 PM, Michael Scheidell scheid...@secnap.net wrote: are they not authenticating through, and sending out via (forgive me) an exchange server? if outlook is authenticating direct to  the exchange server, then the exchange server would be the source ip, and you would

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Michael Scheidell
then read this part if I somehow confused you. On 4/12/10 12:55 PM, Carlos Mennens wrote: other option is set up submit port that only available via vpn, or use smtp auth and give anyone coming in via that -100 points. (amavisd-new can add credit for smtp-auth users) -- Michael

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Carlos Mennens
On Mon, Apr 12, 2010 at 1:02 PM, Michael Scheidell scheid...@secnap.net wrote: then read this part if I somehow confused you. On 4/12/10 12:55 PM, Carlos Mennens wrote:  other option is set up submit port that only available via vpn, or use smtp  auth and give anyone coming in via that

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Michael Scheidell
On 4/12/10 1:11 PM, Carlos Mennens wrote: (amavisd-new can add credit for smtp-auth users) How would I credit -100 points for someone who is using smtp auth? User's should be using TLS and SASL authentication so that should be fine. I just need to know how I would configure

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread David Morton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 4/12/10 12:11 PM, Carlos Mennens wrote: On Mon, Apr 12, 2010 at 1:02 PM, Michael Scheidell scheid...@secnap.net wrote: then read this part if I somehow confused you. On 4/12/10 12:55 PM, Carlos Mennens wrote: other option is set up submit

Country Relay Filter on SA 3.3.1

2010-04-12 Thread Kaleb Hosie
Hey Everyone, I'm having an issue with the Country Relay filter. I've realized that it hasn't been effecting the score rating at all since I've upgraded from version 2.6.5. Here is a sample of what I have in the local.cf file: header RELAYCOUNTRY_CA X-relay-countries =~ /CA/ describe

Re: Country Relay Filter on SA 3.3.1

2010-04-12 Thread RW
On Mon, 12 Apr 2010 14:25:36 -0400 Kaleb Hosie kho...@spectraaluminum.com wrote: Hey Everyone, I'm having an issue with the Country Relay filter. I've realized that it hasn't been effecting the score rating at all since I've upgraded from version 2.6.5. .. decrease or increase the score. I

Re: skipping dynamic tests for ISP's own dynamic networks?

2010-04-12 Thread Kris Deugau
Royce Williams wrote: From the documentation, msa_networks designates those servers that accept only authenticated messages, regardless of type. I'm the new guy on the list, and have some catching up to do with learning how the *_networks directives work, but the evidence is mounting that if

FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Jason Bertoch
I just received a FP report on a message sent from a phone via their text-to-email gateway. FROM_STARTS_WITH_NUMS matched because the sender's address is [10-digit phone numb...@somecarrier.com. My initial instinct was to file a bug suggesting there be a check in the rule to see if there

dcc: [26896] terminated: exit 241

2010-04-12 Thread Micah Anderson
I'm getting a lot of these log entries ever since I've upgraded: Apr 9 22:31:14 spamd2 spamd[2774]: dcc: [26896] terminated: exit 241 Obviously this is related to dcc, but I am not finding anything about what 'exit 241' is, and how I can adjust things so I no longer get them (or maybe they are

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Martin Gregorie
On Mon, 2010-04-12 at 16:29 -0400, Jason Bertoch wrote: I just received a FP report on a message sent from a phone via their text-to-email gateway. FROM_STARTS_WITH_NUMS matched because the sender's address is [10-digit phone numb...@somecarrier.com. My initial instinct was to file a bug

New log errors on upgrading

2010-04-12 Thread Micah Anderson
More new errors that I am getting from an upgrade to spamassassin 3.3: Use of uninitialized value $start_time in addition (+) at /usr/sbin/spamd line 1382, GEN2073 and also the following: spf: lookup failed: Can't locate object method new_from_string via package Mail::SPF::Mech::All at

Re: Country Relay Filter on SA 3.3.1

2010-04-12 Thread RW
On Mon, 12 Apr 2010 21:05:25 +0100 RW rwmailli...@googlemail.com wrote: On Mon, 12 Apr 2010 14:25:36 -0400 Kaleb Hosie kho...@spectraaluminum.com wrote: Hey Everyone, I'm having an issue with the Country Relay filter. I've realized that it hasn't been effecting the score rating at all

Re: New log errors on upgrading

2010-04-12 Thread Mark Martinec
Micah, More new errors that I am getting from an upgrade to spamassassin 3.3: 3.3.0 ? Use of uninitialized value $start_time in addition (+) at /usr/sbin/spamd line 1382, GEN2073 That was fixed in 3.3.1 . and also the following: spf: lookup failed: Can't locate object method

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Bob O'Brien
Martin Gregorie wrote: However, there is one fairly straight forward question that can be easily answered: has anybody ever seen an all-number mailbox/user id in circumstances where it *isn't* a phone number? Yes. I have seen personal addresses with all-digit LHS. It's almost always been

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Jason Bertoch
On 4/12/2010 4:58 PM, Martin Gregorie wrote: I had quite a bit to do with phone numbers en mass a while back. My initial reaction is that its not easy: not only do phone numbers vary in length between locales, but even such things as the 'international dialing' and non-local-call prefix vary

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Kelson
On 4/12/2010 4:26 PM, Bob O'Brien wrote: Other media references, too: 90210, 4100, I'm sure there are more which have been chosen by fans of one theme or another. Back in the late 1990s, I remember hearing that some site (maybe Hotmail?) was restricted to US residents, but didn't check very

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread John Hardin
On Mon, 12 Apr 2010, Carlos Mennens wrote: When users are on the LAN, their client IP is in range of 'mynetworks' parameter via Postfix. When they're home and VPN into my network, they fire up Outlook / Thunderbird send email as they would if they were sitting in the office. However their