Re: Sender needs help with false positive

On Tue, 8 Aug 2017, Benny Pedersen wrote: Jacek Osuchowski skrev den 2017-08-08 00:56: I understand you trying to provide great software to fight email spam stop using bad amavisd.conf, ask for help on amavisd maillist since your issue is not spamassassin if you like to get a better

Re: Sender needs help with false positive

On Mon, 2017-08-07 at 19:15 -0400, Alex wrote: > > version=3.4.0 > > Version 3.4.0 is like ten years old. I also don't recall BAYES_999 > being available in that version, so one thing or the other is not > correct. Minor nitpick: 3.4.0 was released in Feb 2014, slightly less than 10 years ago.

RE: Sender needs help with false positive

David, Thanks a lot. I will try to modify the email text to have more 'meat on the bone'. I am just surprised email with no links, no adds, no attempts to sell anything can be interpreted as a spam. That img in the email is a tag from SendGrid email services used to trace the emails. I don't

RE: Sender needs help with false positive

On Mon, 7 Aug 2017, Jacek Osuchowski wrote: This is an email I sent to IsNotSpam.com. They list the whole thing when testing for spam. I am getting a lot of complains from our customers that our emails are not received. Our domain is not blacklisted anywhere so I suspect it is the spam

Re: Sender needs help with false positive

On Mon, 7 Aug 2017, David Jones wrote: [snip..] This IP is listed on SORBS and Spamhaus ZEN which are going to cause problems with delivery to many receiving mail filters, not just SpamAssassin. http://multirbl.valli.org/lookup/68.192.71.191.html That's his PC which is the MSA. As it's the

Re: Sender needs help with false positive

On Mon, 7 Aug 2017 19:28:04 -0400 "Jacek Osuchowski" wrote: > This is an email I sent to IsNotSpam.com. They list the whole thing > when testing for spam. I am getting a lot of complains from our > customers that our emails are not received. Our domain is not > blacklisted

Re: Sender needs help with false positive

Jacek Osuchowski skrev den 2017-08-08 00:56: I understand you trying to provide great software to fight email spam stop using bad amavisd.conf, ask for help on amavisd maillist since your issue is not spamassassin if you like to get a better life use spampd instaed of amavisd, amavisd is

Re: Sender needs help with false positive

On 08/07/2017 06:28 PM, Jacek Osuchowski wrote: This is an email I sent to IsNotSpam.com. They list the whole thing when testing for spam. I am getting a lot of complains from our customers that our emails are not received. Our domain is not blacklisted anywhere so I suspect it is the spam

Password reset strategies (was Re: Sender needs help with false positive)

[Just replying to one aspect of the original message.] On Mon, 7 Aug 2017 18:26:00 -0500 David Jones wrote: > First, it's a bad idea for a number of reasons to send passwords via > email. Most modern "lost password" mail loops use a unique URL that > expires after a short

Re: Sender needs help with false positive

On Mon, 7 Aug 2017, Alex wrote: Hi, On Mon, Aug 7, 2017 at 6:56 PM, Jacek Osuchowski wrote: We use emails to allow users to reset their passwords to our website. We send very brief emails containing the reset password. Example between : Your password to access

Re: Sender needs help with false positive

On 08/07/2017 05:56 PM, Jacek Osuchowski wrote: We use emails to allow users to reset their passwords to our website. We send very brief emails containing the reset password. Example between : Your password to access your account is: S]U3bC7k Upon successful login you may change your

RE: Sender needs help with false positive

This is an email I sent to IsNotSpam.com. They list the whole thing when testing for spam. I am getting a lot of complains from our customers that our emails are not received. Our domain is not blacklisted anywhere so I suspect it is the spam filtering (as IsNotSpam tool indicates). Is there

Re: Sender needs help with false positive

Hi, On Mon, Aug 7, 2017 at 6:56 PM, Jacek Osuchowski wrote: > We use emails to allow users to reset their passwords to our website. We > send very brief emails containing the reset password. Example between : > >> > Your password to access your account is: > >

Sender needs help with false positive

We use emails to allow users to reset their passwords to our website. We send very brief emails containing the reset password. Example between : > Your password to access your account is: S]U3bC7k Upon successful login you may change your password by going to Modify Account /

Re: Random word spams and wiki spams

On 08/07/2017 02:53 PM, Scott wrote: David: re: Postscreen weighted RBLs I've got my postscreen setup with some weighted RBL's. But I was curious what others did here. I searched for that subject and didn't get any specific hits. Any particular thread you know of? See the bottom of this

Re: Results of Individual Tests on spamd "CHECK"

On Mon, 2017-08-07 at 14:17 -0500, Jerry Malcolm wrote: > I tried SYMBOLS. You are correct that it lists the tests, but not the > results: > > BAYES_95,HTML_IMAGE_ONLY_32,HTML_MESSAGE,JAM_DO_STH_HERE,LOTS_OF_MONEY,MIME_HTML_ONLY, > [...] > > But I saw this line in a forum discussion... So I'm

Re: Random word spams and wiki spams

David: re: Postscreen weighted RBLs I've got my postscreen setup with some weighted RBL's. But I was curious what others did here. I searched for that subject and didn't get any specific hits. Any particular thread you know of? -- View this message in context:

Re: Results of Individual Tests on spamd "CHECK"

David, Thanks, I'll try REPORT . I am indeed using the full spamd invocation as you described. I just abbreviated it in my orig post. It has been working for a couple of years. I'm just seeing a few spams that I can't seem to get rid of. I've tried training BAYES with them. But I'm

Re: Results of Individual Tests on spamd "CHECK"

I tried SYMBOLS. You are correct that it lists the tests, but not the results:

Re: Results of Individual Tests on spamd "CHECK"

On Mon, 7 Aug 2017, Jerry Malcolm wrote: I'm invoking spamd using: CHECK SPAMC/1.2\r\n I'm getting the expected response such as: Spam: False ; -1.8 / 4.0 I am trying to figure out how to get the TESTS= results of the individual tests returned as well. (e.g.tests=[AWL=-1.103,

Re: Logwatch from local machine being flagged as spam

On 2017-08-06 10:37, Scott wrote: > Centos7 > Posftfix 3.2.2 > Amavisd 2.11.0 > spamassassin-3.4.0 > To: r...@mail2.myserver.com > From: logwa...@mail2.myserver.com Since these are locally submitted messages (i.e. not SMTP), IMO the best and cleanest way to deal with it is to tell the MTA not

Results of Individual Tests on spamd "CHECK"

I'm invoking spamd using: CHECK SPAMC/1.2\r\n I'm getting the expected response such as: Spam: False ; -1.8 / 4.0 I am trying to figure out how to get the TESTS= results of the individual tests returned as well. (e.g.tests=[AWL=-1.103, BAYES_00=-2.599,

Re: SA 3.4.1 for Centos 7?

On 08/07/2017 08:37 AM, Scott wrote: spamassassin-3.4.1-14.fc27.src.rpm is available now. When trying to rebuild that src (or the one you mentioned earlier) for my Centos7 box I get these warnings: Is this OK? Is there a fix? spamc/libspamc.c: In function '_try_to_connect_tcp':

Re: Logwatch from local machine being flagged as spam

On Sun, 6 Aug 2017 10:37:36 -0700 (MST) Scott wrote: > Centos7 > Posftfix 3.2.2 > Amavisd 2.11.0 > spamassassin-3.4.0 > > I have a logwatch output that gets mailed to me daily. Spamassassin > is scoring it high enough as exceed my threshold for whacking it as > spam. > > While this is not

Re: Increased spam related to drugs such as medicine and health

On 08/07/2017 08:25 AM, Naisiew Yeak wrote: Hi All, Recently we notice some increased of spam mostly related to drugs, like medication, health and so on. Is that correct? Does anyone of you experiencing the same? The current updated version is 1799552 since June 2017. That is the latest

Re: SA 3.4.1 for Centos 7?

spamassassin-3.4.1-14.fc27.src.rpm is available now. When trying to rebuild that src (or the one you mentioned earlier) for my Centos7 box I get these warnings: Is this OK? Is there a fix? spamc/libspamc.c: In function '_try_to_connect_tcp': spamc/libspamc.c:490:19: warning: variable 'family'

Increased spam related to drugs such as medicine and health

Hi All, Recently we notice some increased of spam mostly related to drugs, like medication, health and so on. Is that correct? Does anyone of you experiencing the same? The current updated version is 1799552 since June 2017. Thanks. -- Naisiew Yeak

Re: Logwatch from local machine being flagged as spam

On 08/06/2017 05:10 PM, msxc wrote: I have a logwatch output that gets mailed to me daily. Spamassassin is scoring it high enough as exceed my threshold for whacking it as spam. Please subscribe to the list for future posts. However, I would argue that this is expected behavior because your

RE: Logwatch from local machine being flagged as spam

>> I have a logwatch output that gets mailed to me daily. Spamassassin is >> scoring it high enough as exceed my threshold for whacking it as spam. >Please subscribe to the list for future posts. > >However, I would argue that this is expected behavior because your >logwatch notice almost