Re: best way to whitelist this list?

2015-09-19 Thread Ian Zimmerman
On 2015-09-19 20:12 +0200, A. Schulze wrote: > today I was notified by ezmlm that my MTA rejected messages to > me. Messages to this list where classified as spam by .. spamassassin. All of today's messages here scored around -7.5 for me, with no special handling. -- Please *no* private copies

Re: best way to whitelist this list?

2015-09-19 Thread Reindl Harald
Am 19.09.2015 um 20:12 schrieb A. Schulze: today I was notified by ezmlm that my MTA rejected messages to me. Messages to this list where classified as spam by .. spamassassin. OK, no surprise some messages look spammy. As usual: there is one solution that is smart, fast and obvious. But

best way to whitelist this list?

2015-09-19 Thread A. Schulze
Hello, today I was notified by ezmlm that my MTA rejected messages to me. Messages to this list where classified as spam by .. spamassassin. OK, no surprise some messages look spammy. As usual: there is one solution that is smart, fast and obvious. But sometimes this one is also wrong. So I

Re: best way to whitelist this list?

2015-09-19 Thread Benny Pedersen
A. Schulze skrev den 2015-09-19 20:12: So I ask the list: (how) do you whitelist this list? X-Spam-Status: No, score=-2.5 required=5.0 tests=AWL,DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,RCVD_IN_DNSWL_HI,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, SPF_HELO_NONE shortcircuit=no autolearn=ham

Help with RegEx Rule

2015-09-19 Thread AK
Hi all. I'm getting hit with lots of JUNK mail that has multiple lines with just a '.' on several lines [0]. Most of the JUNK email has at least 5 and at most 10 lines (so far) with just this '.' character somewhere in the middle of the message. I've copied the message source to RegexBuddy

Re: Help with RegEx Rule

2015-09-19 Thread Benny Pedersen
On September 19, 2015 4:52:30 PM AK wrote: = Start Rule Block = rawbody __MANY_PERIODS_1 ALL =~ /(^\.\n){5,}/ remove ALL =~, my own rawbody rules dont have it

Re: Help with RegEx Rule

2015-09-19 Thread Bill Cole
On 19 Sep 2015, at 10:51, AK wrote: Hi all. I'm getting hit with lots of JUNK mail that has multiple lines with just a '.' on several lines [0]. Most of the JUNK email has at least 5 and at most 10 lines (so far) with just this '.' character somewhere in the middle of the message. I've

Re: best way to whitelist this list?

2015-09-19 Thread Bill Cole
On 19 Sep 2015, at 14:12, A. Schulze wrote: Hello, today I was notified by ezmlm that my MTA rejected messages to me. Messages to this list where classified as spam by .. spamassassin. OK, no surprise some messages look spammy. As usual: there is one solution that is smart, fast and

Re: Help with RegEx Rule

2015-09-19 Thread Adam Major
Hello If you using compiled rules you probably should use: sa-compile command and restart (if use :) sa-spamd Best Regards.

Re: Help with RegEx Rule

2015-09-19 Thread AK
On 20/09/15 01:30, Benny Pedersen wrote: On September 19, 2015 4:52:30 PM AK wrote: = Start Rule Block = rawbody __MANY_PERIODS_1 ALL =~ /(^\.\n){5,}/ remove ALL =~, my own rawbody rules dont have it Still no joy after removal. However, at least the rule

Re: Help with RegEx Rule

2015-09-19 Thread Dave Funk
On Sun, 20 Sep 2015, AK wrote: Hi all. I'm getting hit with lots of JUNK mail that has multiple lines with just a '.' on several lines [0]. Most of the JUNK email has at least 5 and at most 10 lines (so far) with just this '.' character somewhere in the middle of the message. I've copied

Re: Help with RegEx Rule

2015-09-19 Thread Dave Funk
On Sun, 20 Sep 2015, AK wrote: [..snip..] Still no joy after removal. However, at least the rule now hits if I replace: /(^\.\n){5,}/ with /(^\.\n)*/ But that looks like it might bring about some FPs. Any other suggestions? Do you realize that rule will -always- fire on -any- message?