Re: Spam relayed through trendmicro?

2014-08-25 Thread Tom Hendrikx
On 08/25/2014 04:51 AM, Alex wrote: Hi all, I'm having difficulty understanding this one: http://pastebin.com/LYJVas5e It looks like a host in Japan relayed this message through a few systems within trendmicro.com http://trendmicro.com, then on to our system before being tagged as

drop of score after update tonight

2014-08-25 Thread Reindl Harald
Hi i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well - but after the update tonight my testmessage goes down from 7.5 to 5.3 that's one of the very high rated on a Barracuda appliance downloaded to a folder and only posting the

no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Hi header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging with the config below - not sure what i am missing spamassassin-3.4.0-7.fc20.x86_64 spamass-milter-0.3.2-11.fc20.x86_64 spamass-milter -p /run/spamass-milter/spamass-milter.sock -g sa-milt

Re: drop of score after update tonight

2014-08-25 Thread John Hardin
On Mon, 25 Aug 2014, Reindl Harald wrote: Hi i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well - but after the update tonight my testmessage goes down from 7.5 to 5.3 5.0 is still the score for spam. Rather than focusing on

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Kevin A. McGrail
On 8/25/2014 5:37 AM, Reindl Harald wrote: Hi header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging with the config below - not sure what i am missing See http://www.jigsawboys.com/2006/06/28/spamassassin-rewrite-subject-not-working/

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging with the config below - not sure what i am missing See

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Kevin A. McGrail
On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging with the config below - not sure what i am missing See

Give a penalty to messages with non latin UTF-8 characters?

2014-08-25 Thread Michael Opdenacker
Hi, I'm using SpamAssassin 4.0. Is there a simple way to give a penalty to messages containing non latin UTF-8 characters? I'm asking because we are receiving quite a lot of Chinese junk mail with subjects in Chinese (or more generally non-latin) characters, but: - The body is too short for

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Kevin A. McGrail
On 8/25/2014 11:17 AM, Reindl Harald wrote: Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header contains X-Spam-Status: Yes, score=7.5 required=5.0 but

Re: Give a penalty to messages with non latin UTF-8 characters?

2014-08-25 Thread Michael Opdenacker
On 08/25/2014 05:17 PM, Michael Opdenacker wrote: Hi, I'm using SpamAssassin 4.0. Oops, I meant 3.4 :) Is there a simple way to give a penalty to messages containing non latin UTF-8 characters? I'm asking because we are receiving quite a lot of Chinese junk mail with subjects in

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 17:21 schrieb Kevin A. McGrail: On 8/25/2014 11:17 AM, Reindl Harald wrote: Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl Harald wrote: header

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Antony Stone
On Monday 25 August 2014 at 17:21:51 (EU time), Kevin A. McGrail wrote: On 8/25/2014 11:17 AM, Reindl Harald wrote: Am 25.08.2014 um 17:11 schrieb Kevin A. McGrail: On 8/25/2014 11:08 AM, Reindl Harald wrote: Am 25.08.2014 um 16:58 schrieb Kevin A. McGrail: On 8/25/2014 5:37 AM, Reindl

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 17:29 schrieb Antony Stone: Post follow-ups on an appropriate support forum. This is not it. I think you're being unfairly rude to the original poster here. His problem is not specific to spamass-milter (if it were, I would agree with pointing him politely in the

Re: drop of score after update tonight

2014-08-25 Thread John Hardin
On Mon, 25 Aug 2014, Reindl Harald wrote: Am 25.08.2014 um 16:06 schrieb John Hardin: On Mon, 25 Aug 2014, Reindl Harald wrote: i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well - but after the update tonight my testmessage

Re: drop of score after update tonight

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 17:43 schrieb John Hardin: On Mon, 25 Aug 2014, Reindl Harald wrote: Am 25.08.2014 um 16:06 schrieb John Hardin: On Mon, 25 Aug 2014, Reindl Harald wrote: i am at setup a new mailgateway and playing around with spamassassin-3.4.0 and spamass-milter which looks both well -

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Karsten Bräckelmann
On Mon, 2014-08-25 at 11:37 +0200, Reindl Harald wrote: header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging with the config below - not sure what i am missing What does this command return? echo -e Subject: Foo\n | spamassassin

Re: drop of score after update tonight

2014-08-25 Thread Karsten Bräckelmann
On Mon, 2014-08-25 at 17:47 +0200, Reindl Harald wrote: yes and that is one which the currently existing Barracuda Spamfirewall scored with around 20 and grabbed from the backend there for testings the plain content i attached as ZIP (what made it to the listg) is used for testing by just

Re: drop of score after update tonight

2014-08-25 Thread John Hardin
On Mon, 25 Aug 2014, Reindl Harald wrote: the plain content i attached as ZIP (what made it to the listg) is used for testing by just copy the content to a formmailer or in a new plaintext message in TB point directly to the test MX The massage body by itself usually isn't enough to tell

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 18:00 schrieb Karsten Bräckelmann: On Mon, 2014-08-25 at 11:37 +0200, Reindl Harald wrote: header contains X-Spam-Status: Yes, score=7.5 required=5.0 but the subject does not get [SPAM] tagging with the config below - not sure what i am missing What does this command

Re: drop of score after update tonight

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 18:28 schrieb John Hardin: On Mon, 25 Aug 2014, Reindl Harald wrote: the plain content i attached as ZIP (what made it to the listg) is used for testing by just copy the content to a formmailer or in a new plaintext message in TB point directly to the test MX The

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Karsten Bräckelmann
On Mon, 2014-08-25 at 18:55 +0200, Reindl Harald wrote: Am 25.08.2014 um 18:00 schrieb Karsten Bräckelmann: What does this command return? echo -e Subject: Foo\n | spamassassin --cf=required_score 1 as root as expected the modified subject as the milter user the unmodified

Re: drop of score after update tonight

2014-08-25 Thread Daniel Staal
--As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond that yes, but given that the intention is to flag message above 5 with [SPAM] and reject messages above 7 which is the intention

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 19:13 schrieb Karsten Bräckelmann: On Mon, 2014-08-25 at 18:55 +0200, Reindl Harald wrote: Am 25.08.2014 um 18:00 schrieb Karsten Bräckelmann: X-Spam-Status: Yes, score=3.7 required=1.0 tests=MISSING_DATE,MISSING_FROM,

Re: drop of score after update tonight

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 19:35 schrieb Daniel Staal: --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond that yes, but given that the intention is to flag message above 5 with [SPAM]

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Karsten Bräckelmann
On Mon, 2014-08-25 at 19:43 +0200, Reindl Harald wrote: Am 25.08.2014 um 19:13 schrieb Karsten Bräckelmann: No tests at all. I doubt the milter generated all those missing headers including From and Date, instead of a Received one only. So it seems the restricted sa-milt user has no read

Re: no subject tagging in case of X-Spam-Status: Yes

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 20:03 schrieb Karsten Bräckelmann: On Mon, 2014-08-25 at 19:43 +0200, Reindl Harald wrote: Am 25.08.2014 um 19:13 schrieb Karsten Bräckelmann: No tests at all. I doubt the milter generated all those missing headers including From and Date, instead of a Received one only. So

Re: drop of score after update tonight

2014-08-25 Thread Matus UHLAR - fantomas
Given (a) you disabled RBL checks in SA On 25.08.14 19:06, Reindl Harald wrote: the reason for that is that postfix in front already does a damned good job with RBL's since SA uses deep header scanning in many times, which postfix does not (afaik), it's always better to NOT disable RBL's as

Re: drop of score after update tonight

2014-08-25 Thread Reindl Harald
Am 25.08.2014 um 20:41 schrieb Matus UHLAR - fantomas: Given (a) you disabled RBL checks in SA On 25.08.14 19:06, Reindl Harald wrote: the reason for that is that postfix in front already does a damned good job with RBL's since SA uses deep header scanning in many times, which postfix

Re: drop of score after update tonight

2014-08-25 Thread Ian Zimmerman
I definitely have FNs today (about 10 by now today, normally 0). Looks like some/all RBLs tests are not working. I have not changed my configuration at all. Sample here: http://pastebin.com/dsqaVA9Z -- Please *no* private copies of mailing list or newsgroup messages. Local Variables:

RE: drop of score after update tonight

2014-08-25 Thread David Jones
From: Ian Zimmerman i...@buug.org Sent: Monday, August 25, 2014 2:28 PM To: users@spamassassin.apache.org Subject: Re: drop of score after update tonight I definitely have FNs today (about 10 by now today, normally 0). Looks like some/all RBLs

Re: drop of score after update tonight

2014-08-25 Thread Daniel Staal
--As of August 25, 2014 7:49:39 PM +0200, Reindl Harald is alleged to have said: Am 25.08.2014 um 19:35 schrieb Daniel Staal: --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond

Re: drop of score after update tonight

2014-08-25 Thread Reindl Harald
first - thank you for your feedback SA is a new beat to me Am 25.08.2014 um 22:00 schrieb Daniel Staal: --As of August 25, 2014 7:49:39 PM +0200, Reindl Harald is alleged to have said: Am 25.08.2014 um 19:35 schrieb Daniel Staal: --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is

Upgrading to SA 3.4.0 on Ubuntu Precise (12.04)

2014-08-25 Thread Michael Schaap
Hi, On my server, I'm running SpamAssassin 3.3.2 as provided as a package on Ubuntu Precise (12.04 LTS). I'd like to upgrade to SpamAssassin 3.4.0, but there is no upgrade available for Precise (12.04). I could upgrade to Ubuntu Trusty (14.04), but I'm afraid to... Alternatively, I could

Re: drop of score after update tonight

2014-08-25 Thread Ian Zimmerman
On Mon, 25 Aug 2014 19:50:20 +, David Jones djo...@ena.com wrote: Ian I definitely have FNs today (about 10 by now today, normally 0). Ian Looks like some/all RBLs tests are not working. I have not changed Ian my configuration at all. Ian Sample here: Ian http://pastebin.com/dsqaVA9Z

Re: drop of score after update tonight

2014-08-25 Thread Reindl Harald
Am 26.08.2014 um 00:02 schrieb Ian Zimmerman: On Mon, 25 Aug 2014 19:50:20 +, David Jones djo...@ena.com wrote: Ian I definitely have FNs today (about 10 by now today, normally 0). Ian Looks like some/all RBLs tests are not working. I have not changed Ian my configuration at all.

RE: Upgrading to SA 3.4.0 on Ubuntu Precise (12.04)

2014-08-25 Thread Kevin Miller
Had a similar question on another list (MailWatch for MailScanner). I received the following reply: Centos 5.x and 6.x Source installs the binary in /usr/local/bin/ so you might need a symlink for /usr/bin/spamassassin if you are using Mailwatch or you might need to edit your

Re: Spam relayed through trendmicro?

2014-08-25 Thread Alex
Hi, On Mon, Aug 25, 2014 at 4:34 AM, Tom Hendrikx t...@whyscream.net wrote: On 08/25/2014 04:51 AM, Alex wrote: Hi all, I'm having difficulty understanding this one: http://pastebin.com/LYJVas5e It looks like a host in Japan relayed this message through a few systems within

Re: drop of score after update tonight

2014-08-25 Thread Karsten Bräckelmann
On Tue, 2014-08-26 at 00:08 +0200, Reindl Harald wrote: the bayes=1.00 below makes me wonder because around 1000 careful selected ham/spam messages for training - IMHO that should be more in such clear cases Please do read the docs or at least the rule's description (hint, see the BAYES_99