Re: sa-compile will not configure

2017-04-20 Thread Ian Zimmerman
On 2017-04-20 17:31, Robert Steinmetz AIA wrote: > >>> thelma@thelma:~$ echo $PATH BTW, do you have any connection to the Thelma who's asking a constant stream of close-to-newbie questions in the Gentoo user mailing list? It's not that common a name, so forgive me for the short-circuit in my

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread Lyle Evans
At 01:00 PM 4/20/2017, John Hardin wrote: On Thu, 20 Apr 2017, Merijn van den Kroonenberg wrote: On Thu, 20 Apr 2017 10:41:21 -0400 Lyle Evans wrote: I have been getting false positives from Yahoo due to FORGED_MUA_MOZILLA hitting on a new X-Mailer line added by Yahoo about 3/31/17 The

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread Lyle Evans
At 01:00 PM 4/20/2017, John Hardin wrote: On Thu, 20 Apr 2017, Merijn van den Kroonenberg wrote: On Thu, 20 Apr 2017 10:41:21 -0400 Lyle Evans wrote: I have been getting false positives from Yahoo due to FORGED_MUA_MOZILLA hitting on a new X-Mailer line added by Yahoo about 3/31/17 The

Re: sa-compile will not configure

2017-04-20 Thread Robert Steinmetz AIA
Thank you Bill, I checked all of the permissions at every level, they were all 755 except for as noted, which I changed. to 755 It works now. I'll re-check this in the morning and run security scans to make sure everything is tied down.. I appreciate your help. Bill Cole wrote: On 20

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread John Hardin
On Thu, 20 Apr 2017, Lyle Evans wrote: At 01:00 PM 4/20/2017, John Hardin wrote: On Thu, 20 Apr 2017, Merijn van den Kroonenberg wrote: > > On Thu, 20 Apr 2017 10:41:21 -0400 > > Lyle Evans wrote: > > > > > I have been getting false positives from Yahoo due to > > > FORGED_MUA_MOZILLA

Re: sa-compile will not configure

2017-04-20 Thread Martin Gregorie
On Thu, 2017-04-20 at 17:07 -0400, Bill Cole wrote: If your distro has an rkhunter package available, then I'd recommend that you install it. Once you're happy that your system clean, do its initial update "rkhunter --propupt" and thereafter make sure its run as a daily cronjob. This way you

Re: sa-compile will not configure

2017-04-20 Thread Bill Cole
On 20 Apr 2017, at 16:16, Robert Steinmetz AIA wrote: Thank you Bill, That has given me a clue. I ran the commands below: thelma@thelma:~$ echo $PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11:/usr/games:/usr/local/games:/snap/bin thelma@thelma:~$ ls -ld

Re: sa-compile will not configure

2017-04-20 Thread Robert Steinmetz AIA
Reindl Harald wrote: just ask your distribution how they broke your environment this is *not* a spamassassin issue and all the stuuf you do abvoe is not supposed to make things better - how do you imagine "I deleted the /usr/bin/X11 link

Re: sa-compile will not configure

2017-04-20 Thread Robert Steinmetz AIA
Thank you Bill, That has given me a clue. I ran the commands below: thelma@thelma:~$ echo $PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11:/usr/games:/usr/local/games:/snap/bin thelma@thelma:~$ ls -ld /usr/local/sbin drwxr-xr-x 2 root root 48 Mar 11 2007

Re: Spam from .br TLDs

2017-04-20 Thread Robert Schetterer
Am 20.04.2017 um 15:57 schrieb RW: > On Wed, 19 Apr 2017 17:37:42 +0200 > Heinrich Boeder wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> >> Hi all, >> >> I tried the Ruleset Robert Schetterer suggested but I still get Spam. >> The rules barely get a hit. I am pretty sure

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread John Hardin
On Thu, 20 Apr 2017, Merijn van den Kroonenberg wrote: On Thu, 20 Apr 2017 10:41:21 -0400 Lyle Evans wrote: I have been getting false positives from Yahoo due to FORGED_MUA_MOZILLA hitting on a new X-Mailer line added by Yahoo about 3/31/17 The X-Mailer line reads: X-Mailer:

Re: sa-compile will not configure

2017-04-20 Thread Bill Cole
On 19 Apr 2017, at 9:52, Robert Steinmetz wrote: Robert Steinmetz wrote: Responding to my own post with new information. I think I've confirmed that the problem is the $PATH, or the perl equivalent. I added the full path name where the specific commands were called and that removed that

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread RW
On Thu, 20 Apr 2017 17:02:57 +0200 Merijn van den Kroonenberg wrote: > > My guess is that they are including the http user-agent header of > > the browser that connected to their webmail server. > > > > Correct, I also noticed this a few days ago. Maybe the rule could be > changed to exclude

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread Merijn van den Kroonenberg
> On Thu, 20 Apr 2017 10:41:21 -0400 > Lyle Evans wrote: > >> I have been getting false positives from Yahoo due to >> FORGED_MUA_MOZILLA hitting on a new X-Mailer line added by Yahoo >> about 3/31/17 >> >> The X-Mailer line reads: >> >> X-Mailer: WebService/1.1.9272 YahooMailNeo Mozilla/5.0

Re: False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread RW
On Thu, 20 Apr 2017 10:41:21 -0400 Lyle Evans wrote: > I have been getting false positives from Yahoo due to > FORGED_MUA_MOZILLA hitting on a new X-Mailer line added by Yahoo > about 3/31/17 > > The X-Mailer line reads: > > X-Mailer: WebService/1.1.9272 YahooMailNeo Mozilla/5.0 (Windows NT >

False Positives from yahoo due to FORGED_MUA_MOZILLA

2017-04-20 Thread Lyle Evans
I have been getting false positives from Yahoo due to FORGED_MUA_MOZILLA hitting on a new X-Mailer line added by Yahoo about 3/31/17 The X-Mailer line reads: X-Mailer: WebService/1.1.9272 YahooMailNeo Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)

Re: Spam from .br TLDs

2017-04-20 Thread RW
On Wed, 19 Apr 2017 17:37:42 +0200 Heinrich Boeder wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > Hi all, > > I tried the Ruleset Robert Schetterer suggested but I still get Spam. > The rules barely get a hit. I am pretty sure that the rules are > outdated. > > I´d also like

Re: SpamAssassin scoring issues

2017-04-20 Thread RW
On Thu, 20 Apr 2017 12:08:54 +0200 Ralf Hildebrandt wrote: > * David Jones : > > > Are you hitting the URIBL_BLOCKED rule? If so, please follow the > > link in that reddit article to get rid of that rule hit. This is > > very important. > > Yes, but that's not his problem --

Re: SpamAssassin scoring issues

2017-04-20 Thread Ralf Hildebrandt
* David Jones : > Are you hitting the URIBL_BLOCKED rule? If so, please follow the > link in that reddit article to get rid of that rule hit. This is very > important. Yes, but that's not his problem -- since the URIBL query fails in both delivery AND his test. The actual

Re: SpamAssassin scoring issues

2017-04-20 Thread Ralf Hildebrandt
* W B : > Hey all! I'm having issues with SpamAssassin; it's assigning emails scores > that are way lower than it should. In addition, the scores it's assigning as > emails come in are different from the results of running SpamAssassin -t on > that same email after the