Re: Small help for create a Spamassassin rules

On 24.12.2015 8.50, Olivier CALVANO wrote: Hi i request your help for create a small rules: i have a lot of domains, for two of this domain, i want create a specific "whitelist_from" for this, i: create the domain rules: header CEFSCA001_DOMAIN_72_1 To =~ /mydomain\.com/i header

Re: Small help for create a Spamassassin rules

create the domain rules: header CEFSCA001_DOMAIN_72_1 To =~ /mydomain\.(com|fr|net|org)/i header CEFSCA001_DOMAIN_72_2 Cc =~ /mydomain\.(com|fr|net|org)/i header CEFSCA001_DOMAIN_72_3 Apparently-To =~ /mydomain\.(com|fr|net|org)/i header CEFSCA001_DOMAIN_72_4 Delivered-To =~

Re: Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

On 21.12.2015 16.00, Mark Martinec wrote: On 2015-12-20 16:15, Jari Fredriksson wrote: Dec 20 17:04:08.149 [32761] dbg: timing: total 128808 ms - load_scoreonly_sql: 0.27 (0.0%), signal_user_changed: 127278 (98.8%), b_tie_ro: 127275 (98.8%), parse: 6 (0.0%), extract_message_metadata: 187 (0.1

Re: Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

On 20.12.2015 14.47, Jari Fredriksson wrote: Using SA 3.4.1 I just upgraded my raspbians to the latest (wheezy->jessie) and I am am facing very strange problems now. I have also problems in the latest Ubuntu X86_64, which I amd trying to use now for debugging this. I have to start f

Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

Using SA 3.4.1 I just upgraded my raspbians to the latest (wheezy->jessie) and I am am facing very strange problems now. I have also problems in the latest Ubuntu X86_64, which I amd trying to use now for debugging this. I have to start from somewhere, so it is now the Ubuntu. # systemctl

Re: Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

On 20.12.2015 15.48, Reindl Harald wrote: Am 20.12.2015 um 14:37 schrieb Jari Fredriksson: Dec 20 12:32:58 diseapps postfix/smtpd[17381]: NOQUEUE: reject: RCPT from ds4366.hostname.net.au[202.125.44.24]: 554 5.7.1 Service unavailable; Client host [202.125.44.24] blocked using zen.spamhaus.org

Re: Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

On 20.12.2015 14.47, Jari Fredriksson wrote: Using SA 3.4.1 I just upgraded my raspbians to the latest (wheezy->jessie) and I am am facing very strange problems now. I have also problems in the latest Ubuntu X86_64, which I amd trying to use now for debugging this. I have to start f

Re: Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

On 20.12.2015 15.08, Reindl Harald wrote: Am 20.12.2015 um 14:00 schrieb Jari Fredriksson: Now trying to get to the actual problem: All my SA daemons get jammed by every client being reserved and taking lng time so that they will time out and nothing gets filtered and no SA stuff show up

Re: Numerous problems with SA under Raspbian jessie & Ubuntu 15.10

On 20.12.2015 15.08, Reindl Harald wrote: Am 20.12.2015 um 14:00 schrieb Jari Fredriksson: Now trying to get to the actual problem: All my SA daemons get jammed by every client being reserved and taking lng time so that they will time out and nothing gets filtered and no SA stuff show up

EmailBL.pm error, anyone knows?

I have these in my logs for a long time, but did not bother to investigate... no such acl defined: freemail at /etc/spamassassin/EmailBL.pm line What might be it? -- jarif.bit

Re: Try my IXHASH

On 7.12.2015 18:51, Marc Perkel wrote: On 12/07/15 00:10, Charles Sprickman wrote: On Dec 6, 2015, at 11:41 PM, Marc Perkel wrote: ixhashdnsbl CTYME_IXHASH ixhash.junkemailfilter.com. bodyCTYME_IXHASH eval:check_ixhash('CTYME_IXHASH') describe

Re: Very strange SA result!

On 4.12.2015 16:56, RW wrote: On Fri, 04 Dec 2015 08:15:19 -0500 Kevin A. McGrail wrote: On December 3, 2015 3:19:04 PM EST, Jari Fredriksson <ja...@iki.fi> wrote: > >I was now trying to debug with spamassassin -D to find out why sfp >fails, but could not. It just works now, and

Re: Is it worth transferring bayes data between different sites?

On 12/03/2015 02:29 AM, Charles Sprickman wrote: I had a look at that page - I use mysql to store the data, have multiple spamd boxes, and spamc on the inbound servers passing mail to spamd once all the “front door” checks are done. In that config, I end up with unique per-user bayes tokens.

Re: Is it worth transferring bayes data between different sites?

On 12/03/2015 01:38 PM, Jari Fredriksson wrote: On 12/03/2015 02:29 AM, Charles Sprickman wrote: I had a look at that page - I use mysql to store the data, have multiple spamd boxes, and spamc on the inbound servers passing mail to spamd once all the “front door” checks are done

Very strange SA result!

KAM_PAYPAL1 rampant paypal phishing scams Aarghs! I found out a mail from paypal as follows: X-Spam-Status: Yes, score=7.8 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VERIFIED,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,

Re: Very strange SA result!

:07 AM, Jari Fredriksson wrote: KAM_PAYPAL1 rampant paypal phishing scams Aarghs! I found out a mail from paypal as follows: X-Spam-Status: Yes, score=7.8 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VERIFIED,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE, KAM_PAYPAL1

Re: Very strange SA result!

I was now trying to debug with spamassassin -D to find out why sfp fails, but could not. It just works now, and I did not even restart spamd between... Some temporary hickup? Ah well... Sorry for the noise. On 3.12.2015 16:07, Jari Fredriksson wrote: KAM_PAYPAL1 rampant paypal phishing

Re: question re/ RDNS_NONE

On 23.11.2015 8.54, Matthias Apitz wrote: El día Sunday, November 22, 2015 a las 09:23:40PM +, RW escribió: https://wiki.apache.org/spamassassin/Rules/RDNS_NONE RDNS_NONE checks more than just the PTR (reverse) DNS record. It really should be named FCRDNS_NONE Then the wiki is wrong.

Re: question re/ RDNS_NONE

On 23.11.2015 10.30, Matthias Apitz wrote: El día Monday, November 23, 2015 a las 10:23:26AM +0200, Jari Fredriksson escribió: On 23.11.2015 8.54, Matthias Apitz wrote: El día Sunday, November 22, 2015 a las 09:23:40PM +, RW escribió: https://wiki.apache.org/spamassassin/Rules/RDNS_NONE

Re: How to get rid of this spam? Spam assassin does not catch it

On 30.10.2015 19:53, j...@lexoncom.com wrote: I did configure local recursive server and set both spam local.cf and resolved.conf to point to 127.0.0.1 and I still get the blocks. The file name for that is /etc/resolv.conf NOT resolved.conf Also if you update local.cf and you run

Re: How to get rid of this spam? Spam assassin does not catch it

On 27.10.2015 23.02, Martin Gregorie wrote: - The server's /etc/resolve.conf should contain the lines search example.lan nameserver 192.168.7.2 /etc/resolv.conf Typo fixed. -- jarif.bit

Re: Learning only on read emails?

On 10/20/2015 12:41 AM, Ryan Coleman wrote: Actually it makes absolute sense since I dump my spam into a folder to be scanned as spam and anything that is still in my inbox, and read, is indeed ham. I just have to re-investigate the ./new and ./cur folders to make sure they will operate how I

Re: Bayes Portal

On 3.9.2015 16.59, Roman Gelfand wrote: I guessing there must be a a byes/spamassassin portal out there. The idea is for each user to identify spam messages. If so, which would you recommend? Thanks in advance How would that benefit anyone? How would it work? Spam is a personal experience.

False SUBJECT_DRUG_GAP_C on ham

The Subject is in this case: Subject: DealBook: European Antitrust Investigation to Affect U.S. Tech Firms | Fears About Bond Market Volatility | Netflix Objects to ATT-DirecTV Merger | Value of Celebrity Venture Capitalists -- jarif.bit signature.asc Description: OpenPGP digital

Re: Can't change SpamAssassin score without enabling the Spam Auto-Delete function

On 16.12.2014 09:21, Herbert Eppel wrote: On 15.12.2014 20:09 UK Time, Jari Fredriksson wrote: On 15.12.2014 20:16, Herbert Eppel wrote: On 15.12.2014 18:03 UK Time, Joe Quinn wrote: On 12/15/2014 12:34 PM, Herbert Eppel wrote: On 15.12.2014 17:27 UK Time, Joe Quinn wrote: On 12/15/2014

Re: Can't change SpamAssassin score without enabling the Spam Auto-Delete function

On 15.12.2014 20:16, Herbert Eppel wrote: On 15.12.2014 18:03 UK Time, Joe Quinn wrote: On 12/15/2014 12:34 PM, Herbert Eppel wrote: On 15.12.2014 17:27 UK Time, Joe Quinn wrote: On 12/15/2014 12:20 PM, Herbert Eppel wrote: I use QiQ.co.uk for web hosting and associated e-mail services. QiQ

Re: Can't change SpamAssassin score without enabling the Spam Auto-Delete function

On 15.12.2014 23:40, Axb wrote: On 12/15/2014 10:04 PM, LuKreme wrote: The best way is to train babes now THAT is a challenge... What do you feed them during the process? diamonds? an appt in the Burj Khalifa? a Veneno Roadster? SCR I know that this adds just the noise but it should be

Re: Spam messages autolearned as ham

26.09.2014, 02:53, Amir Caspi kirjoitti: As a result, I've got plenty of great fresh spam to feed the filter. I've also got plenty of great ham. Could you take a share in MassChecks? Currently SpamAssassin masschecks seem to need more fresh spam and ham. Would be great to have you within the

Re: Unsubscribe

25.09.2014, 13:13, Reindl Harald kirjoitti: Am 25.09.2014 um 05:59 schrieb Shankar: here you go list-unsubscribe: mailto:users-unsubscr...@spamassassin.apache.org don't send unsubscribe to the list not here and not on any other mailing list sent to the list to hopefully save some

Re: Simple question: load balancing spamd

18.09.2014, 22:58, Bob Proulx kirjoitti: Jari Fredriksson wrote: haproxy is just a small app capable of working as a proxy for http or plain tcp connections. HA. What are you using for the Bayes database on the distributed compute farm? (Just curious...) Bob MySQL /MariaDB 5.5

Re: Simple question: load balancing spamd

17.09.2014, 22:22, Reindl Harald kirjoitti: Am 17.09.2014 um 21:10 schrieb Jari Fredriksson: What kind of simple load balancers are you using? I have been using just DNS multiple address but that does not work any more. Something a *bit* more intelligent is needed have you considered how

Re: Simple question: load balancing spamd

17.09.2014, 22:22, Axb kirjoitti: On 09/17/2014 09:10 PM, Jari Fredriksson wrote: What kind of simple load balancers are you using? I have been using just DNS multiple address but that does not work any more. Something a *bit* more intelligent is needed. LVS Implemented haproxy. Took 3

Re: Simple question: load balancing spamd

18.09.2014, 20:15, Alex Regan kirjoitti: LVS Implemented haproxy. Took 3 minutes to install and configure ;) So that basically works the same way as LVS, where you set up one server to distribute the load across N number of spamassassin systems connected to it? If you set it up in 3

Simple question: load balancing spamd

What kind of simple load balancers are you using? I have been using just DNS multiple address but that does not work any more. Something a *bit* more intelligent is needed. -- jarif.bit signature.asc Description: OpenPGP digital signature

Re: sa-learn from a remote imap folder

13.09.2014, 08:57, Dave Pooser kirjoitti: Dave At $DAYJOB we export the spam folder (and a ham folder for FPs) Dave via NFS and mount them on the frontline SA servers for sa-learn. Doesn't that smell of locking issues? To be honest, I'd just assumed that NFS wouldn't do any locking on a

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

05.09.2014, 21:56, Karsten Bräckelmann kirjoitti: On Fri, 2014-09-05 at 11:55 -0400, Justin Edmands wrote: We are seeing a few emails that are about a 1MB and [...] dbg: timing: total 46640 ms BUT, because the live test likely took 46 seconds, I think SA is giving up or something similar. The

KAM rules keep me giggling

What poison pills are they ;) Someone suggested using kam and I'm happy now. I figure they are not with SA spirit that no one rule should make that happen but... yeah. One helluva rules! -- jarif.bit signature.asc Description: OpenPGP digital signature

Re: Rule for single URL in body with very few text

11.08.2014, 22:48, Karl Johnson kirjoitti: Hello all, I've recently installed Spamassassin (v3.3.1) + Amavis on a SMTP MTA server which is only used for outgoing email. I had to install SA to deal with compromised accounts that are used to send spam. It works pretty good for now however spam

Re: SA rule to detect prior SA pass?

28.06.2014 04:43, David B Funk kirjoitti: Looking at my mail streams I see evidence that spammers sometimes add faked SpamAssassin headers to their messages (I assume to try to trick recipients into thinking that the message has already been given a clean bill-of-health). I wrote a few test

Re: SA rule to detect prior SA pass?

28.06.2014 05:47, Jari Fredriksson kirjoitti: 28.06.2014 04:43, David B Funk kirjoitti: Looking at my mail streams I see evidence that spammers sometimes add faked SpamAssassin headers to their messages (I assume to try to trick recipients into thinking that the message has already been given

Re: Reporting to SpamCop

, modification and delaying which often happens on submission servers. On 18.11.13 22:14, Jari Fredriksson wrote: Agreed. That's exactly what I was not wanting to do, while I initially asked for ways to direct the messaging to my local postfix. It's not good. TeliaSonera is doing no favor to Internet

Re: Reporting to SpamCop

20.11.2013 14:56, Matus UHLAR - fantomas kirjoitti: 19.11.2013 20:48, Matus UHLAR - fantomas kirjoitti: So, which address (domain) are you sending reports to? On 20.11.13 14:01, Jari Fredriksson wrote: What? SpamAssassin seems to send them to vmx.spamcop.net ok, so it is really

Re: Reporting to SpamCop

20.11.2013 16:38, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-11-20 15:12: I don't know. And I can't test it right now, the 4G has been down for several days now. same here in danmark, nearly no 2G mobil network either from telia, is telenor joined telia aswell in your country

Re: Reporting to SpamCop

18.11.2013 21:46, Matus UHLAR - fantomas kirjoitti: Matus UHLAR - fantomas skrev den 2013-11-17 20:13: I believe the point was exactly to avoid any MTA in path. On 18.11.13 00:34, Benny Pedersen wrote: why ? to avoid filtering, modification and delaying which often happens on submission

Re: Reporting to SpamCop

19.11.2013 00:52, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-11-18 21:14: It's not good. TeliaSonera is doing no favor to Internet with the restrictions on submission port. I swapped them out. well thay try the best to sell 4G, but would not make seperate APN for voice

Reporting to SpamCop

My current ISP seems to block my attempts to send reports to SpamCop from SpamAssassin ---report. Which port does it send to? If 25, can we use submission as an alternate? -- jarif.bit signature.asc Description: OpenPGP digital signature

Re: Reporting to SpamCop

16.11.2013 14:34, RW kirjoitti: On Sat, 16 Nov 2013 14:14:21 +0200 Jari Fredriksson wrote: My current ISP seems to block my attempts to send reports to SpamCop from SpamAssassin ---report. Which port does it send to? If 25, can we use submission as an alternate? It appears to be hard

Re: Reporting to SpamCop [wish: option to use port 25 instead of default 587]

16.11.2013 18:54, Andrzej A. Filip kirjoitti: On 11/16/2013 01:34 PM, RW wrote: On Sat, 16 Nov 2013 14:14:21 +0200 Jari Fredriksson wrote: My current ISP seems to block my attempts to send reports to SpamCop from SpamAssassin ---report. Which port does it send to? If 25, can we use

Re: Reporting to SpamCop

16.11.2013 14:34, RW kirjoitti: On Sat, 16 Nov 2013 14:14:21 +0200 Jari Fredriksson wrote: My current ISP seems to block my attempts to send reports to SpamCop from SpamAssassin ---report. Which port does it send to? If 25, can we use submission as an alternate? It appears to be hard

Re: Reporting to SpamCop

16.11.2013 20:51, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-11-16 18:14: OK. Is it possible to configure a relay for the task? I could handle this via a relay in another network. hack the perl module to only use submission on localhost, or check configs its not using your

Re: Reporting to SpamCop

16.11.2013 23:10, Benny Pedersen kirjoitti: i just dont understand why spamassassin use remote submission anyway Well SpamCop provides submission for *reporting*. What else could you use for *reporting*. -- jarif.bit signature.asc Description: OpenPGP digital signature

Re: Reporting to SpamCop

17.11.2013 01:08, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-11-16 23:23: 16.11.2013 23:10, Benny Pedersen kirjoitti: i just dont understand why spamassassin use remote submission anyway Well SpamCop provides submission for *reporting*. What else could you use for *reporting

Re: Block exe in attachment.

14.11.2013 19:44, Benny Pedersen kirjoitti: Antony Stone skrev den 2013-11-14 10:38: Or MailScanner. or stop using a computer where exe files can be used :) Like a VAX/VMS? -- jarif.bit signature.asc Description: OpenPGP digital signature

Re: Block exe in attachment.

15.11.2013 10:20, Jari Fredriksson kirjoitti: 14.11.2013 19:44, Benny Pedersen kirjoitti: Antony Stone skrev den 2013-11-14 10:38: Or MailScanner. or stop using a computer where exe files can be used :) Like a VAX/VMS? Or CLI under Linux. -- jarif.bit signature.asc Description

Offtopic: SpamCop refuses to receive reports

Nov 12 19:52:14 wellington report[1601]: reporter: SpamCop report to vmx.spamcop.net failed: 550 #5.7.1 Your access to submit messages to this e-mail system has been rejected. Nov 12 19:52:14 wellington report[1601]: reporter: could not report spam to SpamCop Has something changed in their

Re: Offtopic: SpamCop refuses to receive reports

is solved. Never has been this kind of response. I'll write to deputies. Thanks. On Nov 12, 2013, at 10:02 AM, Jari Fredriksson ja...@iki.fi mailto:ja...@iki.fi wrote: Nov 12 19:52:14 wellington report[1601]: reporter: SpamCop report to vmx.spamcop.net http://vmx.spamcop.net failed: 550 #5.7.1

Re: AXB_X_ORIG_OMNIMS is causing too many FPs

28.10.2013 18:27, Jose Borges Ferreira kirjoitti: I was wondering why MS costumers will have a 2.696+ penalty . header AXB_X_ORIG_OMNIMS X-OriginatorOrg =~ /\.onmicrosoft\.com$/ describe AXB_X_ORIG_OMNIMS outbound.protection.outlook.com forwarders score AXB_X_ORIG_OMNIMS

Re: Catching fake LinkedIn invites

30.08.2013 12:45, Martin Gregorie kirjoitti: On Thu, 2013-08-29 at 05:42 -0700, Neil Schwartzman wrote: On Aug 29, 2013, at 4:40 AM, RW rwmailli...@googlemail.com wrote: On Thu, 29 Aug 2013 00:55:29 +0200 Michael Schaap wrote: On 29-Aug-2013 00:30, John Hardin wrote: On Wed, 28 Aug 2013,

Re: one word spam

27.08.2013 16:27, Marcio Humpris kirjoitti: Someone please? 2013/8/23 Marcio Humpris marciohump...@gmail.com mailto:marciohump...@gmail.com please, i know its been talked about before, but isnt there a rule to deal with 1 word spams? spams that just have text Hi! and thats

Re: Creating new rules

31.07.2013 20:08, Franck Martin kirjoitti: Hi all, I noticed there is no rules to check if the domain in various emails fields are on blocking lists like DBL at spamhaus. I'm willing to work on some of these rules, but I would appreciate any advice to bootstrap the process. If you can

Re: Creating new rules

31.07.2013 21:05, Franck Martin kirjoitti: On Jul 31, 2013, at 7:56 PM, Ralf Hildebrandt ralf.hildebra...@charite.de wrote: * Franck Martin fmar...@linkedin.com: I looked at http://spamassassin.apache.org/tests_3_3_x.html could not find any rule that do the above. Please help. That's a

Re: Creating new rules

31.07.2013 21:05, Franck Martin kirjoitti: Ah yes, I saw these rules, but this is to check the domains of urls in the messages, not to check for instance that the domain used in the From: header is on the DBL. Address in From: is usually always forged in Spam nowadays. There is not much use

Re: Running as root.

15.07.2013 16:16, Christian Dysthe kirjoitti: Hi, Spamassassin runs fine but I have one remaining error message in the logs: spamd: still running as root: user not specified with -u I have looked around trying to figure out what to do about this but no luck so far. Maybe someone here

Re: Running as root.

15.07.2013 19:51, Benny Pedersen kirjoitti: Christian Dysthe skrev den 2013-07-15 15:16: Spamassassin runs fine but I have one remaining error message in the logs: spamd: still running as root: user not specified with -u spamd uses default port 783, with is below 1024 imho :=) only ports

Re: sa-learn

21.06.2013 16:06, emailitis.com kirjoitti: Benny, Regarding: sa-learn --spam /var/qmail/mailnames/hosted-domain.com/user-1/Maildir/.Spam/cur thank you for the correction and the education. If that was news for you, then maybe it is too, that sa-learn --ham is also something we must do.

Re: Just interested: MIME validation ruleset and ASCII-0

30.05.2013 14:38, Simon Loewenthal kirjoitti: Hi there, The SA custom rulesets page refers to /MIME validation/ ruleset. This is a small .cf file. I am interested in this rule: # ASCII-0 can crash mail clients. This is an absolute NO! rawbody MIME_ASCII0 /\0/ describe

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

29.05.2013 11:20, Simon Loewenthal kirjoitti: On 2013-05-29 9:21, Matus UHLAR - fantomas wrote: On 28.05.13 17:30, Simon Loewenthal wrote: I looked at scoring for an email on an SA installation and noticed differences between hand scanning with spamc and scanning with spamd. My manually

Re: OT: installing on CentOS 6.4

11.05.2013 14:45, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-05-10 19:09: I guess I have to cpan. and its dump to just use cpan direct installing, it will create more dependice errors then rebuild spec files from 3.3.1 to 3.3.2, did you google rpmbuild ? I did rpmbuild

Re: OT: installing on CentOS 6.4

11.05.2013 20:43, Jari Fredriksson kirjoitti: 11.05.2013 14:45, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-05-10 19:09: I guess I have to cpan. and its dump to just use cpan direct installing, it will create more dependice errors then rebuild spec files from 3.3.1 to 3.3.2

Re: [SA-Users] Re: OT: installing on CentOS 6.4

11.05.2013 17:07, Benny Pedersen kirjoitti: John R. Dennison skrev den 2013-05-11 15:42: why did you choice centos ? Perhaps we could head off the inevitable heated distribution thread? Assume he had his reasons / requirements and just let it go :) yep after redhat dropped support on redhat

OT: installing on CentOS 6.4

I'm installaling latest CentOS, and would like to have SA in that too. But to my disappointment, it has only SA 3.1.1 and no Razor nor Pyzor. What would be the best method of get somewhat up to date SA to this box? -- You can rent this space for only $5 a week. signature.asc Description:

Re: OT: installing on CentOS 6.4

10.05.2013 19:27, Bowie Bailey kirjoitti: On 5/10/2013 12:22 PM, Jari Fredriksson wrote: I'm installaling latest CentOS, and would like to have SA in that too. But to my disappointment, it has only SA 3.1.1 and no Razor nor Pyzor. What would be the best method of get somewhat up to date SA

Re: [SA-Users] Re: OT: installing on CentOS 6.4

11.05.2013 01:03, John R. Dennison kirjoitti: On Fri, May 10, 2013 at 02:42:21PM -0400, Bowie Bailey wrote: That's strange. Now that I actually try to install it myself, I see the same thing (my home server uses this repo, but I haven't updated in a while). But if you follow the link for the

Re: installing on CentOS 6.4

10.05.2013 19:31, Randal, Phil kirjoitti: pyzor and perl-Razor-Agent are in epel. Cheers, Phil Epel is a must, wonder how I forgot it. Now I have it, and those and running. Thanks! -Original Message- From: Jari Fredriksson [mailto:ja...@iki.fi] Sent: 10 May 2013 17:22

Re: BAYES question

27.04.2013 04:54, Karsten Bräckelmann kirjoitti: And it is good advice to keep the initial training corpora to a ratio roughly assembling your ham/spam ratio, or maybe 1/1. (At this point, we're approaching woodoo. Learning 10 times more ham than spam is most likely to be a bad choice,

Re: BAYES question

27.04.2013 12:03, Axb kirjoitti: On 04/27/2013 10:59 AM, Jari Fredriksson wrote: 27.04.2013 04:54, Karsten Bräckelmann kirjoitti: And it is good advice to keep the initial training corpora to a ratio roughly assembling your ham/spam ratio, or maybe 1/1. (At this point, we're approaching

Re: BAYES question

27.04.2013 18:24, Benny Pedersen kirjoitti: Jari Fredriksson skrev den 2013-04-27 10:59: 0.000 0 28252 0 non-token data: nspam 0.000 0 187579 0 non-token data: nham I have no problems with Bayes whatsoever. this is an good working mta setup

Re: BAYES question

27.04.2013 23:15, Karsten Br�ckelmann kirjoitti: Point being, am I correct in assuming these numbers roughly reflect your ham/spam ratio? 0.000 0 28252 0 non-token data: nspam 0.000 0 187579 0 non-token data: nham Yes. I want more spam, but it

Re: local score ignored

18.04.2013 13:45, Joe Acquisto-j4 kirjoitti: On 4/18/2013 at 6:38 AM, Axb axb.li...@gmail.com wrote: On 04/18/2013 12:23 PM, Joe Acquisto-j4 wrote: On 4/18/2013 at 6:15 AM, Axb axb.li...@gmail.com wrote: On 04/18/2013 12:11 PM, Joe Acquisto-j4 wrote: I'm missing something. Find a fair

Re: Supporting spamcop quick reporting

19.02.2013 17:54, Kevin A. McGrail kirjoitti: On 2/18/2013 9:47 PM, Dan Mahoney, System Admin wrote: Hey there, Spamcop has an undocumented feature that they allow you (if they trust you) to quick report spam, where you send to a different mail address, and it's reported instantly, without

Re: A plugin for banned words?

30.12.2012 17:34, Martin Gregorie kirjoitti: 1) not a plugin, but would my 'portmanteau' rule generation and maintenance system by of any help? Its intention is to maintain lists of words or patterns in easily lists (one item per line). I use it to maintain rules with up to a couple hundred

Re: A plugin for banned words?

30.12.2012 17:48, RW kirjoitti: On Sun, 30 Dec 2012 16:43:53 +0200 Jari Fredriksson wrote: I receive tons of spam currently on one mailing list. The list post has following features - sender gets negative points because it is listed in DNSWL_MED It's Redhat that's in DNSWL_MED - consider

Re: A plugin for banned words?

30.12.2012 18:05, Jari Fredriksson kirjoitti: So far I have created many meta rules containing those words, but the list is endless. The words like mostly U.S. town names and U.S. sports team names. On the face of it that doesn't sound too difficult. In addition to that the spam

Re: A plugin for banned words?

30.12.2012 21:09, RW kirjoitti: On Sun, 30 Dec 2012 19:13:01 +0200 Jari Fredriksson wrote: Finally they are getting some Bayes too, and exterbal URIBL databases are recognizing URIs in the payload. So I have now lowered the points on my rule to 5.5. Also created a local anti-DNSWL_MED

Re: A plugin for banned words?

30.12.2012 21:09, RW kirjoitti: IIWY I'd look at how well Bayes is doing in the list, it may be that you can safely add a meta rule to boost the score for the higher scoring bayes rules in the list, and then add a few low-scoring subject rules for Vs and some of the other common words. Looks

Re: A plugin for banned words?

30.12.2012 22:19, Ned Slider kirjoitti: On 30/12/12 19:27, Jari Fredriksson wrote: 30.12.2012 21:09, RW kirjoitti: On Sun, 30 Dec 2012 19:13:01 +0200 Jari Fredriksson wrote: Finally they are getting some Bayes too, and exterbal URIBL databases are recognizing URIs in the payload. So I have

Re: PDFassassin

15.11.2012 13:31, Olivier Nicole kirjoitti: In the same way, I am wondering if something similar exists for all the (open|libre|MS)office documents? ExtractText Works with this documents as well as with PDF. -- Fame is a vapor; popularity an accident; the only earthly certainty is oblivion.

Re: PDFassassin

than 3.2.5 Scott -Original Message- From: Jari Fredriksson [mailto:ja...@iki.fi] Sent: Thursday, November 15, 2012 6:01 AM To: users@spamassassin.apache.org Subject: Re: PDFassassin 15.11.2012 13:31, Olivier Nicole kirjoitti: In the same way, I am wondering if something similar

Re: What is the AM.WBL rule?

12.11.2012 14:58, Steve Allison kirjoitti: Dear List, What is AM.WBL? I can't find it in the score files. First entry of this header, AM.WBL=5 X-Spam-Status: Yes, score=5.317 tagged_above=-500 required=5 tests=[AM.WBL=5, AWL=-0.810, BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,

Re: score 0 autolearn=ham

04.11.2012 22:33, Joseph Acquisto kirjoitti: I'd love to use RBL but understand I can't, as the last IP is always the same, as I fetch all mail from a single POP.Perhaps I am missing something? Yes. You put that single POP ESP address to your trusted networks. Then it works as designed.

Re: BAYES_99 score

24.10.2012 18:19, Ned Slider kirjoitti: I have had very good success running adjusted scores for BAYES rules, but I am very careful how I train my bayes database. I've disabled auto-learning and only manually train on hand-checked ham and spam examples. Consequently, I find the extremes

Re: BAYES_99 score

22.10.2012 21:15, dar...@chaosreigns.com kirjoitti: Huh, ruleqa doesn't track hits to BAYES_99? If it did, against which database it would do that? Just askin... -- I'm out of options for now. It is something that has gone wrong in the apt-get region (can't find a good expression for that)

Re: sa-compile fails after upgrading to Ubuntu 12.10

21.10.2012 03:10, Kevin A. McGrail kirjoitti: On 10/20/2012 5:01 PM, Jari Fredriksson wrote: Sa-compile says: # /usr/bin/sa-compile Oct 20 23:59:32.992 [6734] info: generic: base extraction starting. this can take a while... Oct 20 23:59:32.992 [6734] info: generic: extracting from rules

sa-compile fails after upgrading to Ubuntu 12.10

Sa-compile says: # /usr/bin/sa-compile Oct 20 23:59:32.992 [6734] info: generic: base extraction starting. this can take a while... Oct 20 23:59:32.992 [6734] info: generic: extracting from rules of type body_0 100%

Re: Testing new install - was Updating 3.2.4 on SUSE sles10

15.10.2012 21:02, Joseph Acquisto kirjoitti: Still can't get GTUBE messages. Am I being dense? Sending messages with the GTUBE signature, from external sites, don't seem to arrive. I don't see them trapped in my day jobs outgoing queue, etc. Maybe the server (you used to send)

Re: Testing new install - was Updating 3.2.4 on SUSE sles10

15.10.2012 00:48, Joseph Acquisto kirjoitti: Upgrade effort abandoned. Installed OpenSuse 12.2 which, oddly enough, came with the new version of SA. All seems to be working well. OS seems a big leisurely though. However, I can't seem to test with GTUBE. Gmail seems to eat these, they

Re: How to check from that is not on the header?

26.09.2012 18:09, Sergio kirjoitti: Hi all, how may I can check a FROM different to the one on the headers? I have seen that some emails on the FROM on the header has something different than the FROM on the email, as an example: FROM THE HEADERS: Received: from (127.0.0.1) by

Re: Overlay between BILLION_DOLLARS and US_DOLLARS_3

06.09.2012 00:30, Kevin A. McGrail kirjoitti: On 9/5/2012 5:22 PM, Michael Orlitzky wrote: Nope, the only thing that looked suspicious to me was that both rules would hit ONE MILLION DOLLARS ($1,000,000) for a score of ~4. Individually, ONE MILLION DOLLARS should add some points, and so

Re: Very spammy messages yield BAYES_00 (-1.9)

15.08.2012 20:36, Ben Johnson kirjoitti: Hello, Some 99% of the spam that I receive, which is grossly spammy (we're talking auto loans, cash advances, dink pills, the whole lot) contains BAYES_00=-1.9 in the tests portion of the X-Spam-Status header. Might anyone know why? This is a stock

Re: setup spamassassin without amavisd

On Sun, July 8, 2012 13:49, David Kentwood wrote: Hi, I want to setup spamassassin + clamav + postfix. Many internet guides use Amavisd to integrate them together. However, my vps has only 516mb ram so I don't want to install Amavisd unless it's really recommended. So would the setup work

<    1   2   3   4   5   6   7   >