Re: Beginner - Spamassassins 3.4.4 - Deb 10

2020-05-11 Thread Larry Starr
Oh ya, you'll see the same in the Roles, under "Permissions". Larry On 5/9/20 1:22 PM, Matus UHLAR - fantomas wrote: > On 09.05.20 01:52, mau...@gmx.ch wrote: >> Subject: Beginner - Spamassassins 3.4.4 - Deb 10 >> >> Hello today i have installed SpamAssassin 3.4.4, iam new to this >>

Re: sa-update failing

2016-11-22 Thread Larry Starr
On Tuesday, November 22, 2016 18:34:05 bOnK wrote: > On 22-11-2016 18:22, Larry Starr wrote: > > Has there been a mirror change that I've missed? > > > For the past few days my daily "sa-update" job has been failing: > I don't know if this has a

sa-update failing

2016-11-22 Thread Larry Starr
with code 4 I'm seeing this on both of my mail servers. This has been running, without problems, for a few years. I'm wondering if the mirror has moved, or is there some other issue that I should be aware of? Thank you, -- Larry Starr Software Engineer Full Compass Systems 9770 Silicon Pr

Re: Spoofed Domain

2016-08-10 Thread Larry Starr
legitimate reason to use the old extension on the new file format. On 8/10/2016 9:28 AM, Larry Starr wrote: On Tuesday, August 09, 2016 18:01:57 RobMcEwen wrote: > On 8/9/2016 5:56 PM, Anthony Hoppewrote: > > H

Re: Spoofed Domain

2016-08-10 Thread Larry Starr
renamed to .docx, it will open a .docm renamed to .doc. I found this the hard way! It is necessary, if you wish to be safe from macro enabled documents to verify that the file is what the attachment's extension claims to be. -- Larry Starr Software Engineer Full Compass Systems 9770 Si

Re: Advice

2012-07-03 Thread Larry Starr
also noticed that every time one of these mailings is sent with several AOL users, our servers will be temporarily blocked. Are there some precautions I should take to possible get their mails trusted? Any other advice? -- Robert -- Larry Starr Software Engineer Full Compass Systems 9770

Re: UPS Delivery Problems

2010-03-03 Thread Larry Starr
The ones that I have seen are about 200k (size=194761) they tend to carry an invoice.zip attachment, containing an invoice.exe file. My Mimedefang filter is quarantining the attachement at the gateway, byt the messages are coming through. Mimedefang, in my case, sets a 48K maximum on the

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

2010-01-05 Thread Larry Starr
On Tuesday 05 January 2010, Thomas Harold wrote: On 1/4/2010 1:55 PM, Larry Starr wrote: On Monday 04 January 2010, Michael Scheidell wrote: On 1/4/10 1:36 PM, Larry Starr wrote: On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: My question, short of running with -D, which is a bit

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now! (custom sa-update script from howtoforge)

2010-01-05 Thread Larry Starr
On Tuesday 05 January 2010, Thomas Harold wrote: On 1/5/2010 1:50 PM, Larry Starr wrote: On Tuesday 05 January 2010, Thomas Harold wrote: You mean something more then: An update was available, and was downloaded and installed successfully. You are now running sa-update version svn607589

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

2010-01-04 Thread Larry Starr
On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: 1) If your system is configured to use sa-update [3] run sa-update now. An update is available that will correct the rule. No further action is necessary (other than restarting spamd or any service that uses SpamAssassin directly).

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

2010-01-04 Thread Larry Starr
On Monday 04 January 2010, Michael Scheidell wrote: On 1/4/10 1:36 PM, Larry Starr wrote: On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: My question, short of running with -D, which is a bit noisy, is there a way to get sa-update to report the items it updates? I have found

Re: Question on add-to-blacklist

2009-06-08 Thread Larry Starr
Just wanted to pass along a thank you to those who helped out here and provide a few notes, on my experience, that may help anyone else that is looking at this. By the way, converting to MySQL did alleviate the problems that I was seeing when attempting to apply updates to AWL ... processes

Re: Question on add-to-blacklist

2009-06-05 Thread Larry Starr
On Wednesday 03 June 2009, Jari Fredriksson wrote: On Tuesday 02 June 2009, Michael Scheidell wrote: What optional fields are you refering to? I have seen this, on the spamassassin WIKI: CREATE TABLE awl ( username varchar(100) NOT NULL default '', email varchar(200) NOT NULL

Re: Question on add-to-blacklist

2009-06-03 Thread Larry Starr
On Tuesday 02 June 2009, Adam Katz wrote: Larry Starr lar...@fullcompass.com wrote: I have been using the AWL ( --add-addr-to-blacklist ) for some time, to bump new spam senders above the Bayes-99 score. Theo Van Dinter responded: Well, the first problem is that the AWL has no impact

Re: Question on add-to-blacklist

2009-06-03 Thread Larry Starr
On Tuesday 02 June 2009, Michael Scheidell wrote: I have been using the AWL ( --add-addr-to-blacklist ) for some time, to bump new spam senders above the Bayes-99 score. My problem is that this feature seems, extreemly slow. I'm now trying to use the ( --add-to-blacklist ) option and

Question on add-to-blacklist

2009-06-02 Thread Larry Starr
I have been using the AWL ( --add-addr-to-blacklist ) for some time, to bump new spam senders above the Bayes-99 score. My problem is that this feature seems, extreemly slow. I'm now trying to use the ( --add-to-blacklist ) option and am finding that this is, equally, slow. I'm running it as:

Re: Our secret is out

2008-08-15 Thread Larry Starr
Perhaps Spambuster MX :-) Targets the originator and destroys the target! On Friday 15 August 2008, Luis HernĂ¡n Otegui wrote: 2008/8/15 John Hardin [EMAIL PROTECTED]: From a Slashdot thread about somebody suddenly seeing no spam on their mail feed and wondering why: A group of the

Applications file for Last Week

2008-03-31 Thread Larry Starr
I'm not sure who, at GE, this should be addressed to, however: We normally download an Activations file each Monday morning at 10:00. Occasionally, for whatever reason, the file isn't available when my automatic download runs and I have downloaded it as late as Tuesday afternoon. Last week,

Re: Applications file for Last Week

2008-03-31 Thread Larry Starr
I must appoligize. I sent the earlier message to our contacts at GE. Unfortunately I seem to have suffered an address-book malfunction whichh resulted an a list of recipients that, should NOT have been sent this message. If you are on that list, and have no idea what I was talking about,

Re: Applications file for Last Week

2008-03-31 Thread Larry Starr
Yup, 37 years of experience does not make one immune to Monday morning stupidity! I'm answering, off list, in the hope that I won't fan the flames any further! Have a good day. On Monday 31 March 2008 09:54, Arthur Dent wrote: On Mon, Mar 31, 2008 at 09:42:35AM -0500, Larry Starr wrote: I'm

Re: FW: Mail delivery failed: returning message to sender

2007-06-29 Thread Larry Starr
On Friday 29 June 2007 12:41, Don O'Neil wrote: I've been getting these messages fairly regularly lately. We're running SA 3.1.8 and Exim 4.6.6 on FreeBSD 6.1. I've changed the exim-SA config to go through a pipe rather than the traditional way, set it to only scan messages 100K, turned off

Re: FW: Mail delivery failed: returning message to sender

2007-06-29 Thread Larry Starr
firewall, so that couldn't be it. Could it possibly be something further upstream, or maybe even just a timeout value that needs to be extended? -Original Message- From: Larry Starr [mailto:[EMAIL PROTECTED] Sent: Friday, June 29, 2007 10:59 AM To: users@spamassassin.apache.org

Re: Patch for rules_du_jour

2007-06-28 Thread Larry Starr
I have a question regarding this. I have set up the sa_update channel for the SARE rules and run it. Everything worked OK BUT, I notice that sa_update is installing the rules in /var/lib/spamassassin/3.001007, while rulesdujour was instaling them in /etc/mail/spamassassin. Do I need to remove

Re: Patch for rules_du_jour

2007-06-28 Thread Larry Starr
On Thursday 28 June 2007 16:39, Theo Van Dinter wrote: On Thu, Jun 28, 2007 at 04:33:43PM -0500, Larry Starr wrote: Do I need to remove the rules, in /etc/mail/spamassassin, to prevent the older rules from overriding any updates that may come in? Yes. I suspected as much. Thank you

Re: TVD_ENVFROM_APOST

2007-02-09 Thread Larry Starr
It checks the Envelope from, NOT the Header From:. On Friday 09 February 2007 14:57, Mathieu Bouchard wrote: Two questions about TVD_ENVFROM_APOST : 1. Is its execution conditional in any way? Because I have many posts that have an apostrophe in the From: yet don't trigger this flag. I can't

Senders with single quote in email address

2007-02-07 Thread Larry Starr
I have seen a growing amount of spam, usually scoring in the 2.7-3.5 range, from senders with singel quotes ( ' ) in the sending email address (both the Envelope and Headers). For example: Roop Wizard Octavio'[EMAIL PROTECTED] Looking at my logs, admittedly somewhat short term, I find

Re: Senders with single quote in email address

2007-02-07 Thread Larry Starr
On Wednesday 07 February 2007 10:04, Theo Van Dinter wrote: On Wed, Feb 07, 2007 at 09:42:14AM -0600, Larry Starr wrote: I am considering writing a rule to add a couple of points for these addresses and have 2 questions: 1. Is there already such a rule out there, that I've missed? Yes

Re: forwarding email using /etc/aliases and keeping spamassassin headers intact

2006-09-20 Thread Larry Starr
Are you certain that SA even sees the message before it's forwarded? My first guess, without seeing config files, etc. Would be that your SMTP daemon (sendmail?) is forwarding the message as it's received. On Wednesday 20 September 2006 12:24, ajmcello wrote: I'm having an issue with SA

Re: abuse of all_spam_to

2006-07-20 Thread Larry Starr
You might want to look at stream_by_recipient(), in mimedefang-filter(5). On Thursday 20 July 2006 05:41, Patrick Wolfe wrote: I noticed today that an image spam email passed through my sendmail/mimedefang/spamassassin config, because it was addressed to multiple destinations, one of which was

Re: RulesDuJour random.current.cf?

2006-06-28 Thread Larry Starr
and everything is, once again, working fine. Thought I'd pass this along, in case someone else should run into a problem like this. On Monday 26 June 2006 09:43, Larry Starr wrote: About a week ago I started seeing: The following rules had errors: William Stearn's RANDOM WORD Ruleset

Re: RulesDuJour random.current.cf?

2006-06-28 Thread Larry Starr
:35, L. Mark Stone wrote: On Wed, 2006-06-28 at 09:19 -0500, Larry Starr wrote: I have found the problem: Never underestimate the power of your own systems to make you feel dumb!. It seems that our SonicWall firewall, sometime recently, had decided that this was a forbidden site, so

Re: Bayes db corrupt, not fixable?

2006-06-27 Thread Larry Starr
I don't believe that it is referring to the Spamassassin Version, but rather the version of Berekly DB. Have you updated any packages lately? On Tuesday 27 June 2006 10:45, Bobby Johnson wrote: When I run sa-learn --dump or --sync, it tells me the database is version 2. This machine never

Re: RulesDuJour random.current.cf?

2006-06-27 Thread Larry Starr
-blacklist/random.current.cf. Additional Info: 403 Thanks, On Tuesday 27 June 2006 11:57, Chris Thielen wrote: Larry Starr wrote: About a week ago I started seeing: The following rules had errors: William Stearn's RANDOM WORD Ruleset was not retrieved because of: 403 from http://www.sa

RulesDuJour random.current.cf?

2006-06-26 Thread Larry Starr
About a week ago I started seeing: The following rules had errors: William Stearn's RANDOM WORD Ruleset was not retrieved because of: 403 from http://www.sa-blacklist.stearns.org/sa-blacklist/random.current.cf. I ignored it for awhile, because I've seen transient problems with some of the

Using whitelist_from_rcvd with multiple relay domains

2006-03-15 Thread Larry Starr
After receiving a large volume of phishing messages, in this case with a forged ebay sender, I have been looking at my whitelist entries. I have a number of wildcard entries i.e. whitelist_from [EMAIL PROTECTED] This one was an easy fix, since all of the messages, that I could identify came

Re: Pump and Dump SARE rules

2006-02-06 Thread Larry Starr
On Sunday 05 February 2006 17:41, Doc Schneider wrote: Chris Santerre wrote: -Original Message- From: Doc Schneider [mailto:[EMAIL PROTECTED] Sent: Friday, January 27, 2006 5:14 PM To: users@spamassassin.apache.org Subject: Pump and Dump SARE rules

Rule to catch strange Sender Address?

2006-02-03 Thread Larry Starr
Lately I have seen a number of SPAM messages with a sender in the form of: @somedomain.whatever for example: @ipyub.com I'm not sure if this is intentional or simply broken ratware. The ones, that I have seen, are primarily mortgage spam. Does anyone see a problem with a rule to

Remove Address from Whitelist - question

2005-11-11 Thread Larry Starr
I am running Spamassassin version 2.60 on a Redhat 8.0 mail server. I have a couple of addresses that I would like to remove from the AWL but when I have tried: spamassassin --remove-addr-from-whitelist=addr The process appears to run forever, with no effect. Well, almost no effect, I

Re: Bayes mysql db error

2005-11-02 Thread Larry Starr
On Wednesday 02 November 2005 12:02, Rick Cooper wrote: -Original Message- From: Michael Monnerie [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 02, 2005 12:07 PM To: users@spamassassin.apache.org Subject: Re: Bayes mysql db error On Mittwoch, 2. November 2005 15:25 Mike

Rules_Du_Jour Site down?

2005-09-19 Thread Larry Starr
Over the weekend my rules_du_jour started reporting connection errors with http://sandgnat.com/rdj/rules_du_jour;. --09:53:00-- http://sandgnat.com/rdj/rules_du_jour (try:15) = `rules_du_jour' Connecting to sandgnat.com[208.42.148.125]:80... failed: Connection timed out. Retrying.

Re: Rules_Du_Jour Site down?

2005-09-19 Thread Larry Starr
, Martin Hepworth wrote: Larry Just tried it now and it finds the script finenot checked my logs though.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message- From: Larry Starr [mailto:[EMAIL PROTECTED] Sent: 12 September

Re: Spammers Target Secondary MX hosts?

2005-03-18 Thread Larry Starr
On Friday 18 March 2005 08:17, Alexander Bochmann wrote: ...on Fri, Mar 18, 2005 at 08:52:23AM -0500, Yang Xiao wrote: On Fri, 18 Mar 2005 13:48:46 +, Duncan Hill [EMAIL PROTECTED] wrote: In a large number of cases, the secondary MX is not configured to know the list of valid

Re: Anyone have a rule to catch Mailer Daemon bounces to Forged Sender Address

2005-02-23 Thread Larry Starr
On Wednesday 23 February 2005 00:57, Robert Menschel wrote: Hello Larry, Tuesday, February 22, 2005, 3:11:00 PM, you wrote: LS I have been seeing hundreds of Postmaster messages a day, that LS are bounced to bogus sender addresses, in my domain. ... LS The real problem is that I receive

Spamassassin 3.0 with mimedefang 2.37

2004-09-29 Thread Larry Starr
I am working to upgrade spamassassin, from 2.60 to 3.0, on my RedHat 8 Mailserver. I'm currently running mimedefang 2.37. I have found no references to a required version of Mimedefang in the docs, and would like to avoid changing the entire world at once. Does anyone know of any problems