Re: getmail headers

2016-12-15 Thread Martin Gregorie
OK, Understood. Thanks for the explanation. Martin On Thu, 2016-12-15 at 23:30 +, RW wrote: > On Thu, 15 Dec 2016 22:35:10 + > Martin Gregorie wrote: > > > > > On Thu, 2016-12-15 at 22:19 +, RW wrote: > > > > > > > > If you are using getmail/fetchmail it commonly just works. SA h

Re: getmail headers

2016-12-15 Thread RW
On Thu, 15 Dec 2016 22:35:10 + Martin Gregorie wrote: > On Thu, 2016-12-15 at 22:19 +, RW wrote: > > > If you are using getmail/fetchmail it commonly just works. SA has > > explicit support for fetchmail, and getmail headers are unparseable. > > Either way there is typically a chain of pr

getmail headers

2016-12-15 Thread Martin Gregorie
On Thu, 2016-12-15 at 22:19 +, RW wrote: > If you are using getmail/fetchmail it commonly just works. SA has > explicit support for fetchmail, and getmail headers are unparseable. > Either way there is typically a chain of private and localhost IP > addresses up to the MX server. > Yes, that'

Re: recent increase in spam getting through

2016-12-15 Thread RW
On Thu, 15 Dec 2016 20:20:02 + David Jones wrote: > >From: Martin Gregorie > >Sent: Thursday, December 15, 2016 1:39 PM > >To: users@spamassassin.apache.org > >Subject: Re: recent increase in spam getting through >   > >On Thu, 2016-12-15 at 18:23 +, David Jones wrote: > >> There a

Re: recent increase in spam getting through

2016-12-15 Thread David Jones
>From: Martin Gregorie >Sent: Thursday, December 15, 2016 1:39 PM >To: users@spamassassin.apache.org >Subject: Re: recent increase in spam getting through   >On Thu, 2016-12-15 at 18:23 +, David Jones wrote: >> There are many valuable SMTP realtime checks that must be done at >> the edge MT

Re: recent increase in spam getting through

2016-12-15 Thread Martin Gregorie
On Thu, 2016-12-15 at 18:23 +, David Jones wrote: > There are many valuable SMTP realtime checks that must be done at > the edge MTA.  Since you don't have control of this, then you have to > resort to tuning SA constantly which is a never-ending game of > cat-n-mouse since spam changes charact

Re: recent increase in spam getting through

2016-12-15 Thread Benny Pedersen
Ian Zimmerman skrev den 2016-12-15 19:56: On 2016-12-15 11:32, Kevin A. McGrail wrote: I'm a fan of MIMEDefang but I am not very familiar with Arch Linux so I don't know what mta you are using nor it's capabilities. By now I have heard of MIMEDefang many times, and each time I wanted to try i

Re: recent increase in spam getting through

2016-12-15 Thread Larry Rosenman
On 2016-12-15 12:56, Ian Zimmerman wrote: On 2016-12-15 11:32, Kevin A. McGrail wrote: I'm a fan of MIMEDefang but I am not very familiar with Arch Linux so I don't know what mta you are using nor it's capabilities. By now I have heard of MIMEDefang many times, and each time I wanted to try i

Re: recent increase in spam getting through

2016-12-15 Thread Ian Zimmerman
On 2016-12-15 11:32, Kevin A. McGrail wrote: > I'm a fan of MIMEDefang but I am not very familiar with Arch Linux so > I don't know what mta you are using nor it's capabilities. By now I have heard of MIMEDefang many times, and each time I wanted to try it. But it seems to require the milter int

Re: recent increase in spam getting through

2016-12-15 Thread Kevin A. McGrail
> There are many valuable SMTP realtime checks that must be done at > the edge MTA. Since you don't have control of this, then you have to > resort to tuning SA constantly which is a never-ending game of > cat-n-mouse since spam changes characteristics all of the time. That was unfortunately my

Re: recent increase in spam getting through

2016-12-15 Thread David Jones
>From: frede...@ofb.net >Sent: Thursday, December 15, 2016 11:26 AM >To: David Jones >Cc: users@spamassassin.apache.org >Subject: Re: recent increase in spam getting through   >I'm using a friend's MTA, which is perhaps the source of the recent >change - I'll have to check what they are doing.

Re: recent increase in spam getting through

2016-12-15 Thread frederik
Thank you, David. Sorry I should have known to give you a more verbose listing of the headers, I put one at the end for the "voicemail" spam. I'm using a friend's MTA, which is perhaps the source of the recent change - I'll have to check what they are doing. All my mail goes to a spool directory

Re: recent increase in spam getting through

2016-12-15 Thread David Jones
>From: frede...@ofb.net >Sent: Thursday, December 15, 2016 9:33 AM >To: users@spamassassin.apache.org >Subject: recent increase in spam getting through   >    X-Spam-Status: No, score=0.3 required=5.0 tests=BAYES_05,HTML_MESSAGE, >   RDNS_NONE,T_SPF_TEMPERROR autolearn=no autolearn_force=n

Re: recent increase in spam getting through

2016-12-15 Thread John Hardin
On Thu, 15 Dec 2016, frede...@ofb.net wrote: sudo -u spamd sa-learn --showdots -D 1 --ham --dir ~/mail/folders/inbox Bad idea. That learns as ham any FNs you haven't yet noticed and removed from your inbox. You should only learn as ham messages that you have explicitly reviewed and judged

Re: recent increase in spam getting through

2016-12-15 Thread Kevin A. McGrail
On 12/15/2016 11:24 AM, frede...@ofb.net wrote: No, I only run Spamassassin. I take it that 'clamav' would improve things. I don't have numbers in front of me, but these malicious payloads with zips are quite common but we don't What do you mean "if you are using an engine that can do it"? Spam

Re: recent increase in spam getting through

2016-12-15 Thread frederik
Hi Kevin, Thanks for your reply. On Thu, Dec 15, 2016 at 11:07:33AM -0500, Kevin A. McGrail wrote: > On 12/15/2016 10:33 AM, frede...@ofb.net wrote: > > Dear Spamassassin, > > > > I've seen a recent increase in spam getting through Spamassassin... > > I've been getting groups of spam messages wh

Re: recent increase in spam getting through

2016-12-15 Thread Kevin A. McGrail
On 12/15/2016 10:33 AM, frede...@ofb.net wrote: Dear Spamassassin, I've seen a recent increase in spam getting through Spamassassin... I've been getting groups of spam messages which have the same subject, often with zip attachments. Here's a screenshot from Mutt: It's an interesting intersectio

recent increase in spam getting through

2016-12-15 Thread frederik
Dear Spamassassin, I've seen a recent increase in spam getting through Spamassassin... I've been getting groups of spam messages which have the same subject, often with zip attachments. Here's a screenshot from Mutt: 36604 N * Dec 15 %GIRL_NAME Lyon (0.2K) Re: Healthy soul in healthy body. O