Re: How to get rid of this spam? Spam assassin does not catch it

Am 27.10.2015 um 18:50 schrieb j...@lexoncom.com: I use spam assassin with razors on ubuntu server. In recent months i started to get tons of spam. Spam assassin does not catch it and scores are very low. Are those emails fabricated so well that they look like legitimate? Can i do something

Re: How to get rid of this spam? Spam assassin does not catch it

On 10/27/2015 06:50 PM, j...@lexoncom.com wrote: I use spam assassin with razors on ubuntu server. In recent months i started to get tons of spam. Spam assassin does not catch it and scores are very low. Are those emails fabricated so well that they look like legitimate? Can i do something to

How to get rid of this spam? Spam assassin does not catch it

I use spam assassin with razors on ubuntu server. In recent months i started to get tons of spam. Spam assassin does not catch it and scores are very low. Are those emails fabricated so well that they look like legitimate? Can i do something to catch those as spam? I moved them all to one folder

Re: How to get rid of this spam? Spam assassin does not catch it

I understand now. sa-learn --ham --no-rebuild ham_directory sa-learn --spam --no-rebuild spam_directory sa-learn --rebuild so would the best practice to be move spam to spam folder and learn as spam and learn all other folders as ham and then rebuild. The inbox would never be scanned as it might

Re: How to get rid of this spam? Spam assassin does not catch it

Am 27.10.2015 um 21:02 schrieb j...@lexoncom.com: SO i setup the dns server. Can i force spam assassin to use localhost for dns or I must reconfigure the host? i recommend to read at least basic docs google "spamassassin dns" leads to

Re: Spamassassin and amavisd-new wont' check (faked) bounce with zip-archive/exe (maleware)

On 26.10.15 13:09, Django [BOfH] wrote: Hello list, dear Marc! correction: Helo spamassassn-users list - it has nothing to do with attachment or virus scanning. you should have contacted amavisd-new list http://lists.amavis.org/cgi-bin/mailman/listinfo/amavis-users So I tried to

Re: spf records and cnames

Am 27.10.2015 um 20:15 schrieb Matus UHLAR - fantomas: it does not explain why should it cause problems for HELO SPF. as I have already noted, using CNAME for HELO violates SMTP RFC, so there's technically no reason to follow CNAME expecially in these cases that is nonsense the goal of

Re: How to get rid of this spam? Spam assassin does not catch it

Am 27.10.2015 um 20:19 schrieb j...@lexoncom.com: I dont use any ham training then you can't expect bayes to work at all because how do you expect the bayes filter to know the *difference* of ham and spam signs? https://wiki.apache.org/spamassassin/BayesFaq signature.asc Description:

Re: How to get rid of this spam? Spam assassin does not catch it

On Tue, 27 Oct 2015, j...@lexoncom.com wrote: X-Spam-Status: No, score=3.1 required=5.0 tests=BAYES_00,HTML_MESSAGE, RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,SPF_HELO_PASS, SPF_PASS,URIBL_BLOCKED,URIBL_DBL_SPAM autolearn=no autolearn_force=no

Re: How to get rid of this spam? Spam assassin does not catch it

Am 27.10.2015 um 20:23 schrieb Marc Perkel: Also - add a highest numbers MX record tarbaby.junkemailfilter.com This will help tune our list to your spam and also get rid of a lot od it how do you distinct fools like facebook at the moment always trying first the backup-MX (which is here a

Re: How to get rid of this spam? Spam assassin does not catch it

SO i setup the dns server. Can i force spam assassin to use localhost for dns or I must reconfigure the host? > On Tue, 27 Oct 2015, j...@lexoncom.com wrote: > >> X-Spam-Status: No, score=3.1 required=5.0 tests=BAYES_00,HTML_MESSAGE, >> >>

Re: How to get rid of this spam? Spam assassin does not catch it

You can use my black and white lists. It should help. header __RCVD_IN_HOSTKARMA eval:check_rbl('HOSTKARMA-lastexternal','hostkarma.junkemailfilter.com.') describe __RCVD_IN_HOSTKARMA Sender listed in JunkEmailFilter tflags __RCVD_IN_HOSTKARMA net header RCVD_IN_HOSTKARMA_W

Re: How to get rid of this spam? Spam assassin does not catch it

Yes - add to local.cf As the highest numbered MX record tarbaby,junkemailfilter.com usually only sees virus bots. It never accepts email and refuses with a 4xx error in case something legit hits it. So we never see your email. It also doesn't blacklist good email. The sender has to commit

Re: spf records and cnames

On 22.10.15 00:19, Reindl Harald wrote: otherwise you would not be able to set a SPF-record for your CNAMES and "reject_unknown_sender_domain" won't hit for a forged subdomain because it exists - so SPF *must* work for CNAMES or the whole intention for HELO SPF would not work Am 22.10.2015 um

Re: How to get rid of this spam? Spam assassin does not catch it

can you explain how this works? Do i add this to spam local.cf file? would not > Also - add a highest numbers MX record tarbaby.junkemailfilter.com allow your servers to see my emails? thx > You can use my black and white lists. It should help. > > header __RCVD_IN_HOSTKARMA >

Re: How to get rid of this spam? Spam assassin does not catch it

thx, yes i did that but found old doc and that option was not available: https://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html > > Am 27.10.2015 um 21:02 schrieb j...@lexoncom.com: >> SO i setup the dns server. >> Can i force spam assassin to use localhost for dns or I must

Re: How to get rid of this spam? Spam assassin does not catch it

I dont use any ham training.Should I scan all my folders with this command: sa-learn --ham --mbox /home/username/mail/foldername "is the bayes-db of this user *realy* used at scan time" how do i check that? I use the procemail to pass all mail through spam assassin. I use default ubuntu setup

Re: How to get rid of this spam? Spam assassin does not catch it

Am 27.10.2015 um 20:31 schrieb j...@lexoncom.com: I understand now. sa-learn --ham --no-rebuild ham_directory sa-learn --spam --no-rebuild spam_directory sa-learn --rebuild so would the best practice to be move spam to spam folder and learn as spam and learn all other folders as ham and then

Re: How to get rid of this spam? Spam assassin does not catch it

j...@lexoncom.com skrev den 2015-10-27 21:33: thx, yes i did that but found old doc and that option was not available: https://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html this is why i suggest to check local docs first, if not found local, check atleast to diff

Re: How to get rid of this spam? Spam assassin does not catch it

On Tue, 27 Oct 2015, j...@lexoncom.com wrote: example mail sa headers: Is this from a spam? X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on ip-10-254-37-89.us-west-2.compute.internal X-Spam-Level: *** X-Spam-Status: No, score=3.1 required=5.0 tests=BAYES_00,HTML_MESSAGE,

Re: How to get rid of this spam? Spam assassin does not catch it

On 28/10/2015 07:38, j...@lexoncom.com wrote: i uploaded my inbox with all spam that does not get filtered https://mega.nz/#!IRhlyQLL 1/ that site is slo 2/ you need a decryption key to access it 3/ try pastebin instead -- If you have the urge to reply to all rather than reply to

Re: How to get rid of this spam? Spam assassin does not catch it

On 10/27/15 14:16, David Jones wrote: Also - add a highest numbers MX record tarbaby.junkemailfilter.com This will help tune our list to your spam and also get rid of a lot od it. Is this safe to use with greylisting on the lower MX records? I see you temp fail (4xx) all email so it should

Re: How to get rid of this spam? Spam assassin does not catch it

>> Also - add a highest numbers MX record tarbaby.junkemailfilter.com >> >> This will help tune our list to your spam and also get rid of a lot od it. >> Is this safe to use with greylisting on the lower MX records? I see you temp fail (4xx) all email so it should be safe. Didn't see anything

Re: How to get rid of this spam? Spam assassin does not catch it

j...@lexoncom.com skrev den 2015-10-27 21:02: SO i setup the dns server. Can i force spam assassin to use localhost for dns or I must reconfigure the host? perldoc Mail::SpamAssassin::Conf see dns server # local.cf dns_server 127.0.0.1

Re: How to get rid of this spam? Spam assassin does not catch it

try this https://www.dropbox.com/s/ngmaryggdelecjq/INBOX.spam?dl=0 it is mbox file with like 1000 spam messages that are not recognized as spam > On 28/10/2015 07:38, j...@lexoncom.com wrote: >> i uploaded my inbox with all spam that does not get filtered >> >> https://mega.nz/#!IRhlyQLL >> > >

Re: How to get rid of this spam? Spam assassin does not catch it

yes there might be few emails there that were legitimate i cleaned it but i did not have time to do it property are not net/RBL/DNSBL tests enabled by default? i need to review the documentation and see why it does not work > On Tue, 27 Oct 2015, j...@lexoncom.com wrote: > >> try this >>

Re: How to get rid of this spam? Spam assassin does not catch it

Is there a way to learn what bayes learned so far? > On Oct 27, 2015, at 4:35 PM, John Hardin wrote: > >> On Tue, 27 Oct 2015, j...@lexoncom.com wrote: >> >> example mail sa headers: > > Is this from a spam? > >> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on

Re: How to get rid of this spam? Spam assassin does not catch it

On Tue, 27 Oct 2015, j...@lexoncom.com wrote: try this https://www.dropbox.com/s/ngmaryggdelecjq/INBOX.spam?dl=0 it is mbox file with like 1000 spam messages that are not recognized as spam Are you -sure- all those messages are spam? One of them was a personal FaceBook update message. If

Re: How to get rid of this spam? Spam assassin does not catch it

On 27 Oct 2015, at 16:02, j...@lexoncom.com wrote: SO i setup the dns server. Can i force spam assassin to use localhost for dns or I must reconfigure the host? You can just change SA, but you should change the whole host to use it if your MTA is running there as well. the MTA is probably