Re: Apparent FP with URI_HEX

2010-09-14 Thread Karsten Bräckelmann
On Tue, 2010-09-14 at 15:41 -0700, Richard Doyle wrote: > On Tue, 2010-09-14 at 17:03 -0400, Glendon Solsberry wrote: > > Care to show me where? The only place I see it is part of the > > spamassassin -D call, and I'm not sure where that came from. > > Right, that's where it is, presumably derived

Re: Apparent FP with URI_HEX

2010-09-14 Thread Richard Doyle
On Tue, 2010-09-14 at 17:03 -0400, Glendon Solsberry wrote: > Care to show me where? The only place I see it is part of the > spamassassin -D call, and I'm not sure where that came from. Right, that's where it is, presumably derived from 141641-web1.networldalliance.com. The rule is: uri URI_HEX

Re: Apparent FP with URI_HEX

2010-09-14 Thread Matus UHLAR - fantomas
On 14.09.10 16:46, Glendon Solsberry wrote: > I have messages that are being flagged via URI_HEX, without having > *any* 'http' in them. Any help would be greatly appreciated. > > Full text of the message: ... > Received: from 141641-web1.networldalliance.com (unknown [67.192.58.43]) > by f

Re: Apparent FP with URI_HEX

2010-09-14 Thread Dominic Benson
Hi, On 14 Sep 2010, at 21:46, Glendon Solsberry wrote: > I have messages that are being flagged via URI_HEX, without having > *any* 'http' in them. Any help would be greatly appreciated. > > Full text of the message: Buried in the (vast) body of that are loads of IP addresses and hostnames.

Re: Apparent FP with URI_HEX

2010-09-14 Thread Glendon Solsberry
Care to show me where? The only place I see it is part of the spamassassin -D call, and I'm not sure where that came from. On Tue, Sep 14, 2010 at 4:54 PM, Richard Doyle wrote: > On Tue, 2010-09-14 at 16:46 -0400, Glendon Solsberry wrote: >> I have messages that are being flagged via URI_HEX, wit

Re: Apparent FP with URI_HEX

2010-09-14 Thread Richard Doyle
On Tue, 2010-09-14 at 16:46 -0400, Glendon Solsberry wrote: > I have messages that are being flagged via URI_HEX, without having > *any* 'http' in them. Any help would be greatly appreciated. Snippage contains http://141641

Re: SA should have a contact form rule

2010-09-14 Thread Benny Pedersen
On tir 14 sep 2010 22:09:51 CEST, Matus UHLAR - fantomas wrote I'm missing SA output instead of amavis one... does not count imho, Marc miss to tell us more on what versions he is using and what channels he is updating with, i use 3.3.1 and amavisd.new -- xpoint http://www.unicom.com/pw/re

Re: SA should have a contact form rule

2010-09-14 Thread Matus UHLAR - fantomas
> On tir 14 sep 2010 17:53:32 CEST, Marc Perkel wrote > >> To trigger on text like this: >> >> 1.YOUR FULL NAME, >> 2.YOUR HOME ADDRESS__, >> 3.YOUR PHONE AND CELL NUMBER__, >> 4.A COPY OF YOUR PICTURE___, >> 5.YOUR COUNTRY___, >> AGE___

Re: Autoimport .eml-Files as Spam or ham

2010-09-14 Thread Karsten Bräckelmann
On Tue, 2010-09-14 at 09:51 +0200, Giles Coochey wrote: > On Tue, September 14, 2010 09:41, Hans-Werner Friedemann wrote: > > i want to achieve a kind of auto-mass-import of eml-Files with sa-learn. > > The SPAM and HAM mails will be saved in different folders. EML sounds like messages created by

Re: SA should have a contact form rule

2010-09-14 Thread John Hardin
On Tue, 14 Sep 2010, Marc Perkel wrote: To trigger on text like this: 1.YOUR FULL NAME, 2.YOUR HOME ADDRESS__, 3.YOUR PHONE AND CELL NUMBER__, 4.A COPY OF YOUR PICTURE___, 5.YOUR COUNTRY___, AGE, Take a look at the

Re: SA should have a contact form rule

2010-09-14 Thread Benny Pedersen
On tir 14 sep 2010 17:53:32 CEST, Marc Perkel wrote To trigger on text like this: 1.YOUR FULL NAME, 2.YOUR HOME ADDRESS__, 3.YOUR PHONE AND CELL NUMBER__, 4.A COPY OF YOUR PICTURE___, 5.YOUR COUNTRY___, AGE, No, s

SA should have a contact form rule

2010-09-14 Thread Marc Perkel
To trigger on text like this: 1.YOUR FULL NAME, 2.YOUR HOME ADDRESS__, 3.YOUR PHONE AND CELL NUMBER__, 4.A COPY OF YOUR PICTURE___, 5.YOUR COUNTRY___, AGE,

Re: dkim-reputation.org / SA-Plugin

2010-09-14 Thread Robert Schetterer
Am 14.09.2010 00:06, schrieb Benny Pedersen: > On man 13 sep 2010 23:44:14 CEST, Andreas Schulze wrote >> has anybody managed the plugin to run with SA 3.3.1 ? > > using the 3.2.5 with sa 3.3.1 works for me :) > by the way replacing DKIM.pm with this plugin seems not a clean way of implementing

Re: Autoimport .eml-Files as Spam or ham

2010-09-14 Thread Giles Coochey
On Tue, September 14, 2010 09:41, Hans-Werner Friedemann wrote: > Hi @ all > > i want to achieve a kind of auto-mass-import of eml-Files with sa-learn. > The SPAM and HAM mails will be saved in different folders. > > Is it possible that sa-learn looks ervery 15 Minutes in these folders > and import

Autoimport .eml-Files as Spam or ham

2010-09-14 Thread Hans-Werner Friedemann
Hi @ all i want to achieve a kind of auto-mass-import of eml-Files with sa-learn. The SPAM and HAM mails will be saved in different folders. Is it possible that sa-learn looks ervery 15 Minutes in these folders and imports all files, which are in there? (b.e. via cron) Thanks in advance for y

RE: dkim-reputation.org / SA-Plugin

2010-09-14 Thread si
>> has anybody managed the plugin to run with SA 3.3.1 ? > using the 3.2.5 with sa 3.3.1 works for me :) Likewise here. Mup.