Trouble with DATE_IN_FUTURE_96_XX

Hi, I have a (what I think) false positive that I do not understand: ---8- Received: from mailgate2.x.de (x.110.60.14) by jencas01.ad.x.net (10.0.87.63) with Microsoft SMTP Server id 14.2.342.3; Thu, 30 Jan 2014 12:13:43 +0100 X-Virus-Scanned: amavisd-new at x.de

regexp for SMTP AUTH

hi, mails delivered via sendmail SMTP AUTH contain a Received: header like this: Received: from [192.168.5.238] (xyz.example.com [90.217.201.80]) (authenticated bits=0) by myserver.mydomain.at (8.13.8/8.13.8) with ESMTP id s0VE3Iwj027715 (version=TLSv1/SSLv3

Re: regexp for SMTP AUTH

On 1/31/2014 9:24 AM, Rainer Fügenstein wrote: hi, mails delivered via sendmail SMTP AUTH contain a Received: header like this: Received: from [192.168.5.238] (xyz.example.com [90.217.201.80]) (authenticated bits=0) by myserver.mydomain.at (8.13.8/8.13.8) with ESMTP id

Re: Trouble with DATE_IN_FUTURE_96_XX

On 31.01.14 12:36, Rainer Sokoll wrote: I have a (what I think) false positive that I do not understand: Authentication-Results: mailgate2.x.de (amavisd-new); dkim=pass (512-bit key) header.d=x.com Received: from mail01.www3.x.com (mail01.www3.x.com [x.92.26.27])by

Re: regexp for SMTP AUTH

On 1/31/2014 9:24 AM, Rainer Fügenstein wrote: mails delivered via sendmail SMTP AUTH contain a Received: header like this: Received: from [192.168.5.238] (xyz.example.com [90.217.201.80]) (authenticated bits=0) by myserver.mydomain.at (8.13.8/8.13.8) with ESMTP id s0VE3Iwj027715

Re: Trouble with DATE_IN_FUTURE_96_XX

Am 31.01.2014 um 15:44 schrieb Matus UHLAR - fantomas uh...@fantomas.sk: On 31.01.14 12:36, Rainer Sokoll wrote: I have a (what I think) false positive that I do not understand: Authentication-Results: mailgate2.x.de (amavisd-new); dkim=pass (512-bit key) header.d=x.com Received:

Re: Trouble with DATE_IN_FUTURE_96_XX

On 31.01.14 12:36, Rainer Sokoll wrote: Date: Thu, 30 Jan 2014 06:13:33 -0500 X-Spam-Status: No, hits=4.7 required=100.0 tests=BAYES_60,DATE_IN_FUTURE_96_Q, HTML_FONT_FACE_BAD,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RP_MATCHES_RCVD,SPF_PASS autolearn=no version=3.3.2 As far as I can see, all

Re: regexp for SMTP AUTH

bowie, matus, header MY_AUTH ALL =~ /\(authenticated bits=\d+\)\s+by\s+myserver.mydomain.at/ thanks. looks plausible, but doesn't work, unfortunately. I figured out that rules matching the first line work, but rules for lines 2+ never match, regardless of \n \s etc. I think this is what

Re: Help with a regex to catch spam with gibberish html tags

On 1/30/2014 6:37 PM, David B Funk wrote: On Thu, 30 Jan 2014, Amir Caspi wrote: On Jan 30, 2014, at 10:28 AM, Kevin A. McGrail kmcgr...@pccc.com wrote: If you want to share the complete rule, I can throw it into my sandbox and see what masscheck thinks as well. The complete rule

khop channel errors

Getting these errors on the khop sa-update channels on both home and office servers: channel: no 'mirrors.khop-bl.sa.khopesh.com' record found, channel failed channel: no 'mirrors.khop-blessed.sa.khopesh.com' record found, channel failed channel: no 'mirrors.khop-general.sa.khopesh.com' record

Re: khop channel errors

On 1/31/2014 1:08 PM, Jeremy McSpadden wrote: http://www.downforeveryoneorjustme.com/khopesh.com -- Jeremy McSpadden Flux Labs | http://www.fluxlabs.net http://www.fluxlabs.net/ | Endless Solutions Office : 850-250-5590x101 tel:850-250-5590;101 | Cell : 850-890-2543 tel:850-890-2543 | Fax :

Re: not learned Ham with BAYES_99

On Mon, 20 Jan 2014 11:37:48 +0100 Matus UHLAR - fantomas wrote: I heave received a ham message, that hit BAYES_50 at the time I received it. After feeding to spamassassin -k and rechecking it gives BAYES_99: On 20.01.14 12:10, RW wrote: This is the odd bit. I think I have found it: Jan 20