Re: sa-learn won't read db created via MSTOR

On Saturday 08 July 2017 at 22:55:36, RW wrote: > I had a spillage and most of the punctuation characters > on my keyboard aren't working at the moment. Oh dear, my sympathies - but what a splendid quote on a mailing list :) Antony. -- Salad is what food eats.

Re: sa-learn won't read db created via MSTOR

On Sat, 8 Jul 2017 14:14:42 -0500 Jerry Malcolm wrote: > Thanks for the info. Unfortunately, I don't have a clue how to > interpret a regex expression. I couldn't find any reference to > mbox_format_from_regex in the 3.1.x Mail::SpamAssassin::Conf that > came up when I googled it. I hope you

Re: sa-learn won't read db created via MSTOR

Upon further investigation, I don't think sa-learn is even attempting to open the file. I get the exact same message whether I give it a real file or just a string of characters for a file name: [C:\Program Files\JAM Software\SpamAssassin in a Box]sa-learn.exe --spam --mbox

Re: Random word spams and wiki spams

Hi, >>> I'm interested in how your system would have (or currently does) >>> handle this email I received some days ago: >>> https://pastebin.com/innRFvZt >>> >>> Its IP (106.186.119.240) is still not listed with spamhaus, sorbs or >>> hostkarma, and has an 83 rating with senderscore. >> >> >>

Re: sa-learn won't read db created via MSTOR

Thanks for the info. Unfortunately, I don't have a clue how to interpret a regex expression. I couldn't find any reference to mbox_format_from_regex in the 3.1.x Mail::SpamAssassin::Conf that came up when I googled it. The separators in my mbox file are: From - Sat Jul 8 01:02:28 2017 Can

Re: sa-learn won't read db created via MSTOR

On Sat, 8 Jul 2017 01:57:47 -0500 Jerry Malcolm wrote: > Below is a complete log dump from the -D option on sa-learn. ... > _set_default_message_selection_opts After: Scanprob[1], want_date[0], > cache[0], from_regex[^From \S+ ?(\S\S\S \S\S\S .\d .\d:\d\d:\d\d >

Re: Random word spams and wiki spams

On Sat, 08 Jul 2017 00:29:29 -0400 Bill Cole wrote: > 1. Null sender with From & Subject both inconsistent with DSN or > other legit null-sender mail. In this case it's more a problem with his headers: Return-Path: <> ... X-Envelope-From: I think that a null sender

Re: Random word spams and wiki spams

On 07/07/2017 02:04 PM, Alex wrote: Hi, I ran that message through one of my filters manually: One of your filters? Copy/pasted your email into a file and manually ran spamassassin < msg on one of my eight mail filters. -0.2 RCVD_IN_DNSWL_NONE RBL: Sender listed at

Re: Random word spams and wiki spams

On 07/07/2017 11:29 PM, Bill Cole wrote: On 7 Jul 2017, at 13:04, Alex wrote: I'm interested in how your system would have (or currently does) handle this email I received some days ago: https://pastebin.com/innRFvZt Its IP (106.186.119.240) is still not listed with spamhaus, sorbs or

Re: Random word spams and wiki spams

I use quite low scoring for this plugin. I know its outdated, but it does (imho) some helpful checks on rdns which sa cannot do alone as it relies on the rdns result from mta. And my mta (postfix) only logs rdns if its a fcrdns :-) And thxs for the hint to check sa baserules first before

Re: Random word spams and wiki spams

> typo? Ups thats a c error :-) I score the HAS_LIST_ UNSUB with 0.1 As I need this test to show up in sa headers for my dovecot sieve rules to act upon, therefore I cannot use __RULE. I'll check the built in rules to ensure that I do not reinvent the wheel :-) Cheers tobi - Originale

Re: sa-learn won't read db created via MSTOR

Below is a complete log dump from the -D option on sa-learn. I am really curious that the file name I passed in is never even mentioned in the log. Is that expected? Do I have some sort of syntax error passing the mbox filename in? Here's the command: [C:\Program Files\JAM