Re: spamassassin and *compressed* Maildir

2021-05-21 Thread RW
On Fri, 21 May 2021 15:41:22 -0400 Clive Jacques wrote: > I have a mail folder that I put false negatives in (i.e., spam which > ends up in my inbox) and another for false negatives (ham that ends > up in my spam folder). Each night I run sa-learn on each folder > (sa-learn will munch on entire

Re: spamassassin and *compressed* Maildir

2021-05-21 Thread Lucas Rolff
$ cat RMScaa8wVRnMfwqlQ0RxAzDjYGmIumlp1wlA8QNr8z.eml | sa-learn --spam Learned tokens from 0 message(s) (1 message(s) examined) Indeed does work from stdin - Lucas From: Clive Jacques Date: Friday, 21 May 2021 at 21.41 To: "users@spamassassin.apache.org" Subject: Re: spamassassin and

Re: spamassassin and *compressed* Maildir

2021-05-21 Thread Clive Jacques
I have a mail folder that I put false negatives in (i.e., spam which ends up in my inbox) and another for false negatives (ham that ends up in my spam folder). Each night I run sa-learn on each folder (sa-learn will munch on entire Maildirs) and also feed each message to spamassassin -r to report

Re: spamassassin and *compressed* Maildir

2021-05-21 Thread Lucas Rolff
You can do `zcat -f` or `gunzip -c -f` and avoid having to have .gz extension, that way you can skip the rename step Best Regards, Lucas Rolff From: Clive Jacques Date: Friday, 21 May 2021 at 21.04 To: "users@spamassassin.apache.org" Subject: Re: spamassassin and *compressed* Maildir That's

Re: spamassassin and *compressed* Maildir

2021-05-21 Thread Clive Jacques
That's confirmed. sa-learn doesn't like compressed files. I don't know if it will dine on compressed files with the correct extension (i.e., .gz). Unfortunately, when using compression with Maildir format, Dovecot doesn't seem to like to use extensions. So, I copied the directory to a temporary

Re: Detect Emoticons in Subject

2021-05-21 Thread RW
On Thu, 20 May 2021 19:39:06 +0100 RW wrote: > > /\xF0\x9F(?:\x98[\x80-\xBF]|\x99[\x80-\x8F])|xF0\x9F(?:[\xA4-\xA6][\x80-\xBF]|\xA7[\x80-\xBF])|\xE2\x98[\xB9-\xBB]/ This includes the block mentioned by Bill Cole and and is simplified a bit

Re: spamassassin and *compressed* Maildir

2021-05-21 Thread Henrik K
On Fri, May 21, 2021 at 10:54:54AM -0400, Clive Jacques wrote: > Do spamassassin or sa-learn understand compressed files or compressed Maildir? I believe sa-learn will automatically decompress if the files have .gz or .bz2 extension, but yes Maildir files without extension will not work. Should

spamassassin and *compressed* Maildir

2021-05-21 Thread Clive Jacques
Do spamassassin or sa-learn understand compressed files or compressed Maildir? I've been running spamassassin on my ubuntu mail server for years very successfully. Recently, I've been experiencing a lot of difficulty and I'm trying to figure it out. Earlier this year we upgraded the server from

Re: KAM_SENDGRID and SPF_HELO_NONE

2021-05-21 Thread Kevin A. McGrail
Interesting for sure. For me I saw the issue start to really get noticed last February. I think there might be correlation with a hack on their platform too. I reached out to Twilio leadership with nothing but crickets too. Here is a great cyber security reporter and an article from August

Re: KAM_SENDGRID and SPF_HELO_NONE

2021-05-21 Thread Jared Hall
Kevin A. McGrail wrote: And that rule is probably designed to hit legitimate sendgrid emails. They have become a hacker and spammer haven over the last year and a half approximately. Damned straight.  I'd say more like 2.5 years, maybe 1.5 pre-pandemic years. SendGrid -> novel (at thie

Re: KAM_SENDGRID and SPF_HELO_NONE

2021-05-21 Thread Matus UHLAR - fantomas
> Perhaps it's because Return-Path is null? > Return-Path: <> That's a different problem, apparently with your MTA->SA glue. The fact that something added a non-null "X-Envelope-From:" header and something (else?) added a null "Return-Path:" header indicates fundamental breakage. Whether SA is

Re: Detect Emoticons in Subject

2021-05-21 Thread Henrik K
On Fri, May 21, 2021 at 09:53:36AM +0200, Tom Hendrikx wrote: > > Can someone explain why SA cannot support this type of syntax, or what would > be needed to get it supported? IMHO it makes it a lot easier for end-users > to understand a rule, and for rule developers to write or even contribute >

Re: Detect Emoticons in Subject

2021-05-21 Thread Tom Hendrikx
On 20-05-2021 18:19, RW wrote: On Thu, 20 May 2021 11:42:59 -0400 Clive Jacques wrote: Hi, I've been using SA a long time. Lately, I'm getting more and more spam with emoticons in the subject line. I'd say about 90% of my emails with emoticons in the subject are spam. I'd like to create a