Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
bayes-db lives, nothing else No worries, you've been a big help! ... You and Jared Hall! Richard

Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
rite into? ... Again, pointers would be nice - it's not like I was planning to spend my day doing this; I have a customer visit planned that's coming up soon! I just don't have much time! Richard

spamd runs as root on Fedora Server 38 ?! - was Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
ook shows there are three for Spam Assassin on my system: /etc/sysconfig/spamassassin /etc/sysconfig/spamass-milter /etc/sysconfig/spamass-milter-postfix Before I make changes and possibly screw things up; any advice? Thanks! Richard

Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
would need to be changed, one would think, and somewhere the code told to run as sa-milt, which I presume isn't THAT hard to find, though I've never dealt with it before. THANKS for pointing this out! Richard

Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
amass-milter:/sbin/nologin So... run it as sa-milt (my guess), or as root? Note that this is on a Fedora Server v 38 - the OS is a couple of months old. Thanks again, Richard

Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
format, I think - somehow I guess I overlooked the -mbox switch! Thanks, Richard

Re: Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard Troy
Am 07.07.23 um 17:04 schrieb Richard: I've FINALLY built up a "corpus" of ham vs spam and also FINALLY had some time to spend on this and just ran sa-learn on, oh, IDK, some 10k email messages or so, I'd guess. And along the way, I NEVER ONCE got the kind of output r

Newb on sa-learn - didn't get what I expected as a response...

2023-07-07 Thread Richard
at I expected. For example, here I run it against a file containing just over 2100 spam: $ sa-learn -u richard --spam spam Learned tokens from 0 message(s) (0 message(s) examined) (I was running it as root - which the docs don't mention but I figure is what I'm supposed to do!) In t

Re: increase Pyzor weight

2023-06-29 Thread Richard Lucassen
ass-mail is legit and a lot of false-positives is caused by > morons marking mails they subscribed for as junk because they are to > dumb to unsubscribe Two things are infinite: the universe and human stupidity, but I’m not sure about the universe. -- richard lucassen http://contact.xaq.nl/

Re: increase Pyzor weight

2023-06-28 Thread Richard Lucassen
l_SpamAssassin_Conf.html#SCORING-OPTIONS Thnx Tom, I'll have a look at it :-) -- richard lucassen http://contact.xaq.nl/

Re: increase Pyzor weight

2023-06-28 Thread Richard Lucassen
On Wed, 28 Jun 2023 11:17:43 +0200 Reindl Harald wrote: > Am 28.06.23 um 10:46 schrieb Richard Lucassen: > > Is it possible to increase the weight of PYZOR_CHECK score? > > what makes you think that PYZOR_CHECK is more special than any other > rule? > > score PYZOR_CH

increase Pyzor weight

2023-06-28 Thread Richard Lucassen
Hello list, Is it possible to increase the weight of PYZOR_CHECK score? R. -- richard lucassen http://contact.xaq.nl/

Re: The rewrite_header Subject [SPAM] directive has stopped working?!

2023-03-03 Thread Richard Troy
g again because it'll be automagically moved for folks! Win! Thanks much, Richard

Re: The rewrite_header Subject [SPAM] directive has stopped working?!

2023-03-02 Thread Richard Troy
nnecessary materials," but I'll make an exception this time! On 2023-02-28 at 22:46:54 UTC-0500 (Tue, 28 Feb 2023 19:46:54 -0800 (PST)) Richard Troy is rumored to have said: Hi All, I've been subscribed for ... close to 15 years, I think? Heck, 20 is maybe possible! ... Just

The rewrite_header Subject [SPAM] directive has stopped working?!

2023-02-28 Thread Richard Troy
chanism if necessary), but I just don't have the time! Private replies welcome! Regards ... and thanks to the list for all the great and useful materials - just wish I could absorb it all! (I'm now trying to relearn years worth of stuff I've forgotten because I don't use it often enough! I only run this one site's systems as an SA!) Richard -- Richard Troy

UNSUBSCRIBE

2020-12-23 Thread Richard Ozer

Why the new changes need to be "depricated" forever

2020-07-20 Thread Richard Troy
es his lack of experience but also because I really have other things to do and don't really want to be writing to this list. ... This might be my last post here, IDK - it's certainly been painful of the time I have available. IF this project goes forward without said perpetual backwards compatibility option, I will dump this project ASAP. And now, not later. Regards, Richard -- Chief Scientist somewhere or other you can easily discover.

Re: Question about the 'URIBL_BLOCKED' rule

2020-04-30 Thread Richard Doyle
First result on Google: http://cweiske.de/tagebuch/uribl_blocked.htm Short version: URIBL will block you if you use any of the big DNS providers, such as 8.8.8.8. On 4/30/20 11:59 AM, Tom Williams wrote: > Hi!  I'm new to this mailing list, but not new to SpamAssassin. I've > used it on and off

Rule triggering more than once

2017-10-05 Thread Richard Nairn
I am using a rule to detect email with very long links included as I have seen that those are mostly spam. Some of the messages will include many copies of the link. Is there a way to write a meta rule that detects multiple instances of the same rule?

Google Safe Browsing plugin?

2017-04-25 Thread Richard Mealing
Hi everyone, I want to try and detect malicious uri in the body of emails better and thought there might be something I could use, since I imagine google have a good list of them. I found this link, but it fails to install. http://search.cpan.org/~danborn/Bundle-SafeBrowsing/lib/Bundle/SafeBrow

RE: Image spam - FuzzyOCR?

2016-09-01 Thread Richard Mealing
>-Original Message- >From: Matus UHLAR - fantomas [mailto:uh...@fantomas.sk] >Sent: Thursday, September 1, 2016 14:30 >To: users@spamassassin.apache.org >Subject: Re: Image spam - FuzzyOCR? >>On Wed, 31 Aug 2016 12:55:15 + Richard Mealing wrote: >>>

Image spam - FuzzyOCR?

2016-08-31 Thread Richard Mealing
Hi everyone, I am looking at Fuzzy ocr to detect more image spam and I had a couple of questions; 1) Is this being used? Does it detect image spam, or should I be looking at something else? 2) I'm getting some horny date spam coming through with just images and text inside an image

RE: KAM error?

2016-04-26 Thread Richard Mealing
-Original Message- From: RW [mailto:rwmailli...@googlemail.com] Sent: 25 April 2016 13:13 To: users@spamassassin.apache.org Subject: Re: KAM error? On Mon, 25 Apr 2016 11:43:07 + Richard Mealing wrote: > Hi everyone, > > I'm seeing this a bit on google, but I'

KAM error?

2016-04-25 Thread Richard Mealing
Hi everyone, I'm seeing this a bit on google, but I'm not quite sure of the fix. Apr 25 12:41:21.264 [49367] warn: rules: failed to run __KAM_SPF_NONE test, skipping: Apr 25 12:41:21.264 [49367] warn: (Can't locate object method "check_for_spf_none" via package "Mail: [...]:SpamAssassin::PerMs

RE: XPRIO - Can you help me?

2016-04-12 Thread Richard Mealing
-Original Message- From: Reindl Harald [mailto:h.rei...@thelounge.net] Sent: 12 April 2016 16:15 To: users@spamassassin.apache.org Subject: Re: XPRIO - Can you help me? Am 12.04.2016 um 16:40 schrieb John Hardin: > On Tue, 12 Apr 2016, Richard Mealing wrote: > >> I have c

XPRIO - Can you help me?

2016-04-12 Thread Richard Mealing
Hi everyone, I have come across a strange issue where I need some guidance to debug. I have 2 servers and when an email filters through 1 of them, I get this back - (not cached, score=5.403,required 4, BAYES_50 0.80, HTML_IMAGE_ONLY_28 1.40, HTML_MESSAGE 0.30, HTML_MIME_NO_HTML_TAG 0.38, LOCAL_M

Re: RDNS_NONE always being triggered

2016-01-04 Thread Richard Doyle
On 01/04/2016 05:46 AM, Reindl Harald wrote: > > > Am 04.01.2016 um 13:53 schrieb a.sm...@ldexgroup.co.uk: >> On Jan 4, 2016, 3:42 AM, rwmaillists at googlemail wrote: >>> >>> No look-up is done. RDNS_NONE tests whether rdns is recorded in the >>> received header. You need either to turn it on or t

RE: New rules..

2015-11-03 Thread Richard Mealing
-Original Message- From: John Hardin [mailto:jhar...@impsec.org] Sent: 03 November 2015 17:18 To: users@spamassassin.apache.org Subject: RE: New rules.. On Tue, 3 Nov 2015, Richard Mealing wrote: > So I'm looking for something that would block this - > > fastnet.

RE: New rules..

2015-11-03 Thread Richard Mealing
From: Joe Quinn [mailto:jqu...@pccc.com] Sent: 02 November 2015 17:13 To: users@spamassassin.apache.org Subject: Re: New rules.. On 11/2/2015 12:00 PM, Richard Mealing wrote: Hi there, Would this be the best list to talk about new rules for spamassassin? I'm new here.. Thanks, Rich

New rules..

2015-11-02 Thread Richard Mealing
Hi there, Would this be the best list to talk about new rules for spamassassin? I'm new here.. Thanks, Rich

Re: Filtering snowshoe spam

2015-10-29 Thread Richard Doyle
On 10/29/2015 01:04 PM, Bill Cole wrote: > On 29 Oct 2015, at 11:09, Alex wrote: > >> Hi, >> >> I've been receiving tons of messages not being tagged by spamassassin >> on one host, despite it hitting bayes999, and wanted to see if there >> was something that could be done. >> >> http://pastebin.co

Re: Barracuda / EmailReg.org protection racket? (OT, but help?)

2015-06-20 Thread Richard Doyle
cuda to not block my mail? > > Thanks, > --Jered > The BRBL may have listed the entire /24 that includes your sending IPs. Painful experience has shown that Barracuda won't hear your requests for delisting, and the listing may never go away. Barracuda have run their emailreg.org scam for many years. -Richard

Re: some people get high score

2015-04-20 Thread richard lucassen
problem: 1st time: 6 years ago (1 From: address) 2nd time: 2 months ago (1 From: address) 3rd time: last week (1 From: address) :-) R. -- ___ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +--+ | Richard Lucassen, Utrecht| +--+

some people get high score

2015-04-19 Thread richard lucassen
emove all doubt. +------+ | Richard Lucassen, Utrecht| +--+

Re: Fedora 21 / Postfix config issue

2015-04-16 Thread Richard Troy
On Thu, 16 Apr 2015, Marieke Janssen wrote: On 2015-04-16 19:08, Richard Troy wrote: postfix/smtpd[18151]: warning: connect to Milter service unix:/run/spamass-milter/postfix/sock: No such file or directory Postfix probably tries to read /var/spool/postfix/run/spamass-milter/postfix

Fedora 21 / Postfix config issue

2015-04-16 Thread Richard Troy
cket::IP [::1]:783 (running version 3.4.0) ...This gives the STRONG suggestion I should be putting that socket number into postfix's smtpd_milters parameter... OK, that's where I'm at; help humbly requested. Regards, Richard

Re: Uptick in spam

2015-03-27 Thread Richard Doyle
On 03/27/2015 03:44 PM, Amir Caspi wrote: > On Mar 27, 2015, at 3:34 PM, Richard Doyle > wrote: > >> All of these were "From:" domains created today. > Shouldn't they have been picked up by DOB? Or do I need to manually enable > some DOB plugin in SA? (If so

Re: Uptick in spam

2015-03-27 Thread Richard Doyle
On 03/27/2015 11:51 AM, Amir Caspi wrote: > On Mar 27, 2015, at 12:20 PM, Axb wrote: > >> - Please post missed spam samples in pastebin.com - do not post samples to >> mailing lists > Of course, I would never post it to the list. I will put up a few in > pastebin but there are so many of them,

Re: Googlasi, blacklotus, etc.

2014-10-02 Thread Richard Doyle
It is a new domain, created September 30 with namecheap. An effective "new domain" system would catch lots of similar spam. Oh, and I'm another satisfied invaluement customer. On 09/30/2014 10:41 AM, David Jones wrote: >> >> From: Philip Prindeville >> S

Re: Funky HARP Spam

2014-06-25 Thread Richard Doyle
On 06/25/2014 02:12 PM, Philip Prindeville wrote: > On Jun 25, 2014, at 2:58 PM, Axb wrote: > >> On 06/25/2014 10:21 PM, Philip Prindeville wrote: >> >>> http://pastebin.com/qLyKx40b >> "This paste has been removed!" :( > I’ve temporarily posted it on ftp://ftp.redfish-solutions.com/pub/harp.eml I

Re: Domain ages (was Re: SPAM from a registrar)

2014-06-09 Thread Richard Doyle
On 06/09/2014 02:42 PM, Matthias Leisi wrote: > > On Mon, Jun 9, 2014 at 11:31 PM, Richard Doyle > mailto:lists...@islandnetworks.com>> wrote: > > > A caching whois client (jwhois, for example) can significantly reduce > the volume of queries. > > >

Re: Domain ages (was Re: SPAM from a registrar)

2014-06-09 Thread Richard Doyle
On 06/09/2014 12:29 PM, Kevin A. McGrail wrote: > On 6/9/2014 3:24 PM, Patrick Domack wrote: >> The point was, I have already done this, and have it in production. I >> did this cause this subject keeps coming up from time to time, and I >> was personally interested to see the results of it. >> >>

Bayesian db not updating?

2014-02-19 Thread Richard Crane
xactly the same output. Is this correct? I have repeated this several times with different messages. The sa-learn execution displays a message like Learned tokens from 2 message(s) (2 message(s) examined) Richard Crane --- Haskins Laboratories / (203) 865-6163 X 275 / FAX (203) 865-

Re: .pw / Palau URL domains in spam

2013-05-08 Thread Richard Doyle
Hypotheticians might want to look at jwhois, which is a caching whois client. Cache expiration time is configurable ... On 05/08/2013 06:45 AM, Chris Santerre wrote: > RE: .pw / Palau URL domains in spam > > Hypothetically if one were running a reputation system and didn't want > to block all of

SURBL malware list vs. sa-update

2013-05-05 Thread Richard Doyle
SURBL has reorganized its lists and provided a new spamassassin configuration to support those changes: http://lists.surbl.org/pipermail/announce/2013-May/000209.html I'm using sa-update (version 3.003001) and noticed that 25_uribl.cf already contains the new configuration, but with all lines comm

Re: short prolific spam

2012-10-01 Thread Richard Doyle
On 10/01/2012 09:53 AM, JP Kelly wrote: > I am getting a bunch of particularly annoying spam which always has a short > html body message similar to: > > HELLO dude > > Any ideas how to combat this spam? Lower your threshold to 5. > > Here is an example: > > X-Spam-Checker-Version: SpamAssass

Re: Can't locate object method "get_tag"

2012-06-28 Thread Richard B. Pyne
On 6/28/2012 8:43 PM, Michael Scheidell wrote: > On 6/28/12 9:08 PM, Richard B. Pyne wrote: >> SpamAssassin version 3.3.2 running as spamd called from maiad called >> form postfix on CentOS 6.2 64bit linux. >> >> >> I am trying to get a new installation of SpamAs

Can't locate object method "get_tag"

2012-06-28 Thread Richard B. Pyne
t;Mail::SpamAssassin::PerMsgStatus" at (eval 69) line 366. Any help will be greatly appreciated. --Richard

Re: Spam from Moniker Privacy Services.

2012-03-30 Thread Richard Doyle
On 03/29/2012 05:10 PM, Frank Chan wrote: On 02-03-2012 15:49, Frank Chan wrote: Here are some samples of this spam in pastebin: http://pastebin.com/djidF7dg http://pastebin.com/DQan00ve http://pastebin.com/1PizAzMv http://pastebin.com/Hd6vVpYi Thank you, Frank On 02-03-2012 14:31, Jeremy McS

Re: strange problem here with spam detection

2012-03-23 Thread Richard Doyle
On 03/23/2012 11:23 AM, RW wrote: On Fri, 23 Mar 2012 11:54:47 -0400 Kiryl Hakhovich wrote: so here is my observation is that when email come spamd does less rules checking or something??? vs when i ran it manually via sa-learn it yell a lot more rules being detected. could it be that there

List of urls

2010-10-25 Thread Richard Smits
e url_2 10 score url_3 10 score url_4 10 But I want just one line to define the score. Are there more ways to do this ? Greetings .. Richard

Re: Apparent FP with URI_HEX

2010-09-14 Thread Richard Doyle
imilarly, uribl-black objects to backup.sh I'm not surprised that a message like this hits a number of rules. > On Tue, Sep 14, 2010 at 4:54 PM, Richard Doyle > wrote: > > On Tue, 2010-09-14 at 16:46 -0400, Glendon Solsberry wrote: > >> I have messages that are being flagg

Re: Apparent FP with URI_HEX

2010-09-14 Thread Richard Doyle
On Tue, 2010-09-14 at 16:46 -0400, Glendon Solsberry wrote: > I have messages that are being flagged via URI_HEX, without having > *any* 'http' in them. Any help would be greatly appreciated. Snippage contains http://141641

Russian spam

2010-01-25 Thread Richard Smits
, but are there some secret tricks i should know about ? Greetings, Richard ...

Re: URL Block Lists

2009-07-22 Thread Richard Doyle
On Wed, 2009-07-22 at 22:52 -0400, MySQL Student wrote: > Hi, > > What is the preferred list of URL block lists that everyone uses? I'm > currently using SURBL and a few others, often times there are URLs > like 'learningbetter.net' that isn't tagged. http://dnsbl.invaluement.com/ivmuri/ Very ta

Re: sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
t; once an > hour like that. Noted. I just needed a quick fix to get rid of them and the manual rules worked like a charm. Richard

Re: sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
ved to be futile :( Richard

Re: sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
2008/12/2 Yet Another Ninja <[EMAIL PROTECTED]>: > these should be caught by your AV - submit samples to your vendor if its > still not being detected. While I agree in general, the text is very static and antivirus eats CPU, SA does not (so much). Richard

sa-update does not pick up newest German spam wave

2008-12-02 Thread Richard Hartmann
ate my own? Thanks, Richard

Re: Is spam volume really down

2008-11-21 Thread Richard Bishop
ly, certainly there was a spike on 14/11/2008 (Friday). I wonder what caused that? I'd certainly be interested if other people saw something similar. On a similar note, does anybody remember what happened on 16/02/2008? The amount of spam coming through our systems seemed to have jumped by 530%! Regards Richard

Re: why is this message hitting URIBL_BLACK ...

2008-10-29 Thread Richard Frovarp
Claudia Burman wrote: ...if the URI is not listed in www.uribl.com ? Another message from the same domain doesn't hit the rule uribl.com checks embedded URIs in the message, not the from domain. The content of the two messages was obviously different. One contained a listed URI, the other

RE: sa-update

2008-10-23 Thread Richard Doyle
On Thu, 2008-10-23 at 19:43 -0400, Jean-Paul Natola wrote: > I used to get about 19-15 spam messages in my box per week, now , eve today I > got 11- > > and they are hardly hitting any rules, anything new (rbl's etc..) I should > look into? jm_sought rules are useful http://wiki.apache.org/spam

Re: EmailReg Whitelist

2008-10-15 Thread Richard Doyle
On Wed, 2008-10-15 at 15:20 -0700, Bill Landry wrote: > Just wondering if anyone has had any experience with this particular > whitelist: > > http://www.emailreg.org/ Their confirmation message scored on DNS_FROM_OPENWHOIS, WHOIS_PRIVPROT and MIME_HTML_ONLY BODY, adding 6.9 points to the score!

Can use some advice on a simple rule

2008-10-15 Thread Richard Ozer
Greetings, We've been getting quite a bit of spam with the following header: Message-ID: <[EMAIL PROTECTED]> From: David Samuels <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: New Job! -2UigK Date: Wed, 15 Oct 2008 13:16:03 + I've been trying to write a rule that looks at the From: li

Re: using RHEL / CentOS / Fedora perl?

2008-09-08 Thread Richard Frovarp
Justin Mason wrote: have you seen this? http://blog.vipul.net/2008/08/24/redhat-perl-what-a-tragedy/ That bug in Red Hat perl will almost definitely slow down SpamAssassin, too, I would say. Can anyone verify? --j. I don't notice any difference between my RHEL 4 (not affected) and my R

Re: Fwd: Attn: webmail Subscriber

2008-08-15 Thread Richard Frovarp
Greg Troxel wrote: Sort of related, occasionally some messages on the list get so many points that my MTA rejects them (score > 10). I'd like to not do that, since it seems rude to the list (although ezmlm seems to not really care). I'm guessing that I need a custom rule to assign negative poin

Re: Spammer trying to hijack more accounts

2008-08-06 Thread Richard Frovarp
my organization tries to make sure everything we send out to our users is well edited. These messages are all horrible when it comes to the content and grammar. You would think they should be able to tell the difference. Richard

Re: simple drug spam not flagged

2008-08-01 Thread Richard Frovarp
Jake Maul wrote: Greetings, I've recently been getting more simple drug-related spam that has no real obfuscation and often doesn't get flagged with anything other than HTML_MESSAGE (0.0) and BAYES_XX (generally 50-99). A few sample Subject lines: Subject: Use Generik Viagra and forget about y

Re: checking against RBLs

2008-07-31 Thread Richard Frovarp
ave ??? No, spamcop is for spam sources, not sources based on the type of their connection. If one of the hosts in the list is a spam originator, chances are that piece of mail is probably spam as well. Spam sources do send through relays, so this information is quite valuable. Richard

Re: checking against RBLs

2008-07-30 Thread Richard Frovarp
ts, you'll see some with lastexternal or something similar. That's how you tell SA to check the one that contacted your system. Richard

Re: Sa-update

2008-07-25 Thread Richard Frovarp
Kai Schaetzl wrote: Eduardo Júnior wrote on Fri, 25 Jul 2008 08:58:25 -0300: Peguei of the includes updates_spamassassin_org.cf and put in /etc/spamassassin/local.cf and I made a copy of my *. cf / etc / spamassassin to maintain consistently referenced in the path includes. Not sure w

Re: [OT] Odd spammer tactic?

2008-07-23 Thread Richard Frovarp
Many do. That is why 587 is becoming popular for authenticated mail. Without it, many users would notice, as they would no longer be able to use their work's SMTP for those email addresses. Richard

Re: What's wrong with this regex?

2008-07-18 Thread Richard Frovarp
Per Jessen wrote: body PND_STOCK_PAYI /[^a-z](P[^a-z]{0,4}A[^a-z]{0,4}Y[^a-z]{0,4}I[^a-z] Pay88)/i (all on one line of course). In SA3.2.5, I get the following message: [5183] info: config: invalid regexp for rule PND_STOCK_PAYI: /[^a-z (P[^a-z]{0,2}A[^a-z]{0,2}Y[^a-z]{0: missing or invalid de

Re: DNS Tests not always getting done

2008-07-17 Thread Richard Frovarp
mouss wrote: Skip wrote: Periodically I have seen spam come in my inbox and after reviewing the headers, I'd see that it didn't hit any of the DNS/URL BL checks. So I left SA running in debug mode for a while and saw some strange entries (sorry for the long post here). Fortunately, these do

Re: Detecting the Registrar of the sending host?

2008-07-07 Thread Richard Frovarp
Yet Another Ninja wrote: On 7/2/2008 6:05 PM, Marc Perkel wrote: Is there an easy way to detect the registrar of a domain through DNS? For example - can I easilly figure out if an email I'm processing is hosted by GoDaddy or Tucows? Here's what I'm thinking. I think there's some expensive and

Re: Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-04 Thread Richard Johnson
On Fri, 2008-07-04 at 16:47 +0200, Alex Woick wrote: > Richard Johnson schrieb am 04.07.2008 06:35: > > I then reinstall: > > apt-get install spamassassin > [...] > > Suggested packages: > > razor libnet-ident-perl libio-socket-ssl-perl pyzor libmail-dkim

Re: Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-04 Thread Richard Johnson
On Fri, 2008-07-04 at 16:47 +0200, Alex Woick wrote: > Richard Johnson schrieb am 04.07.2008 06:35: > > I then reinstall: > > apt-get install spamassassin > [...] > > Suggested packages: > > razor libnet-ident-perl libio-socket-ssl-perl pyzor libmail-dkim

Re: Cannot Scan ... SpamAssassin/PerMsgStatus.pm line 164.

2008-07-04 Thread Richard Johnson
On Fri, 2008-07-04 at 12:39 +0200, Alex Woick wrote: > Richard Johnson schrieb am 03.07.2008 10:58: > > > check: no loaded plugin implements 'check_main': cannot scan! at > > /usr/share/perl5/Mail/SpamAssassin/PerMsgStatus.pm line 164. > > > [9086] dbg:

Re: Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-04 Thread Richard Johnson
With this in mind it started to look like a perl issue: > I have just spotted the line: "No /usr/bin/perl found" So I checked: -rwxr-xr-x 2 root root 1.1M 2007-12-04 09:18 perl -rwxr-xr-x 2 root root 1.1M 2007-12-04 09:18 perl5.8.8 -rwxr-xr-x 1 root root 37K 2007-12-04 09:

Re: Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-03 Thread Richard Johnson
On Thu, 2008-07-03 at 21:53 +0200, Karsten Bräckelmann wrote: > On Thu, 2008-07-03 at 20:38 +0100, Richard Johnson wrote: > > On Thu, 2008-07-03 at 13:34 -0400, Theo Van Dinter wrote: > > > > If you're missing pre files, I would suggest reinstalling SA. A normal >

Re: Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-03 Thread Richard Johnson
On Thu, 2008-07-03 at 13:34 -0400, Theo Van Dinter wrote: > On Thu, Jul 03, 2008 at 06:01:21PM +0100, Richard Johnson wrote: > > As the .pre files are missing, what would I do to rectify it? What > > should they contain? > > If you're missing pre files, I would suggest

Re: Detecting the Registrar of the sending host?

2008-07-03 Thread Richard Frovarp
Marc Perkel wrote: Michele Neylon wrote: On 2 Jul 2008, at 19:56, Marc Perkel wrote: Again - it's not to figure out where spam comes from. It's figuring out where non-spam comes from. I think there are registrars out there that don't have any spam domains registered. What are you t

Re: Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-03 Thread Richard Johnson
On Thu, 2008-07-03 at 16:34 +0200, Karsten Bräckelmann wrote: > > Leaving the evolution plugin thing to one side for now. > > > > I don't have any .pre files. /etc/spamassassin is empty. > > See, there's your problem. > Thank you, Karsten. I've learned the [ctrl] + [l] now. My apologies, I di

Re: Detecting the Registrar of the sending host?

2008-07-03 Thread Richard Frovarp
Marc Perkel wrote: Matus UHLAR - fantomas wrote: On 03.07.08 13:22, Henrik K wrote: If lesser registrar means that it's probably ham, why couldn't someone use that to add some negative scores or use it as a part of whitelist trustworthiness? Even if it's handful of domains, it's useful. If

Cannot scan! SpamAssassin/PerMsgStatus.pm line 164.

2008-07-03 Thread Richard Johnson
Hello, this is the first time I've used a 'list' so if I have posted in the wrong context or using the wrong protocol please forgive my blunder. Let me try again as clearly I did something wrong and 'hijacked' a thread accidentally. Can someone help me with Spamassassin? Here is an overview of wh

Cannot Scan ... SpamAssassin/PerMsgStatus.pm line 164.

2008-07-03 Thread Richard Johnson
Hello, this is the first time I've used a 'list' so if I have posted in the wrong context or using the wrong protocol please forgive my blunder. Can someone help me with Spamassassin? Here is an overview of where I am at: I'm running Ubuntu gutsy and have spamassassin installed. The original plan

Re: RDJ error

2008-06-27 Thread Richard Frovarp
taken? use sa-update, RDJ is afaik obsolete. OK. BTW, with RDJ I could choose which rulest update automatically and which not. How could I setup sa-learn so that it updates ruleset different the standard one's, such as 'sought ruleset'. Thanks, rocsca sa-upda

Re: MODERATION REQUEST: how to stop SPF checks from going past trusted host?

2008-06-27 Thread Richard Frovarp
Benny Pedersen wrote: On Fri, June 27, 2008 03:09, Jo Rhett wrote: Personal attacks are not relevant to the topic. hmm AppleMail is the only mua i have seen that cant make a reply to maillist without sending cc you talk like its my problem right ? is AppleMail the only option you h

SA-Bayes not working

2008-06-24 Thread Richard J. Kieran
so-on, but for some reason it does not appear that Bayes is being used. It doesn't show up in the tests list on any emails, at any rate. I checked permissions and configuration and all looks OK. Can anyone suggest what I might be missing? TIA. Richard

Re: SA experts needed here - SPAM examples

2008-06-16 Thread Richard Frovarp
NGSS wrote: Hi, I am losing confident in SA, the training process is pretty slow or it doesn’t seem to be learning. I am training SA with around 30-50 manually identified spam (moving spam mails to and spam folder created in squirrelmail and crond the sa-train command on that folder every

Re: Spam in qmail queue

2008-05-23 Thread Richard Frovarp
Marcin Praczko wrote: Hi, I am not sure that I am writing to correct list, but maybe you will help me. On one of my server qmail has been installed, SpamAssassin and qmail-scanner. There is a several virtual domains, and Spam filter is working quite OK. But I have some message

SA with FreeBSD 7

2008-04-29 Thread Richard J. Kieran
Has anyone tested SpamAssassin with FreeBSD 7? Are there any known problems? I use SA with MIMEDefang/Sendmail. TIA. Richard

Re: Returned mail spam

2008-04-17 Thread Richard Smits
Hos safe is it to pump up the score for the ANY_BOUNCE_MESSAGE ? Is it bug free, so I can give it 5 or 10 points ? Is anyone doing this ? (Maybe a step to far) Greetings Richard Matus UHLAR - fantomas wrote: >> Graham Murray wrote: >>> If you publish a suitable SPF record th

Re: Not scoring high enough on this spam...

2008-03-28 Thread Richard Frovarp
Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew pts rule name description -- --

SpamAssassin interest and Spam solution

2008-03-28 Thread Richard Hole
ou know the contacts of any service providers associations that I could share this with? You can email me [EMAIL PROTECTED] Your help will be appreciated, Regards Richard.

Re: How to report 120,000 spams a day

2008-03-10 Thread Richard Frovarp
Tuc at T-B-O-H.NET wrote: Seriously... How hard is it to setup the MX boxen to only allow 4 email addresses to pass for that particular domain, rejecting all others in the SMTP conversation? Unless the customer is dropping BIG DADDY $$$ with you, tell him policy change and that he isn't losing

Re: [OT] Yahoo Deferred

2008-02-25 Thread Richard Frovarp
Michael Hutchinson wrote: --- original message --- From: Tony Bunce [mailto:[EMAIL PROTECTED] Sent: Tuesday, 26 February 2008 5:54 a.m. To: users@spamassassin.apache.org Subject: [OT] Yahoo Deferred Sorry for the Off Topic thread but I'm at a loss. I

Re: [OT] Bogus MX opinions

2008-02-22 Thread Richard Frovarp
Marc Perkel wrote: Mark Johnson wrote: Marc Perkel wrote: Because there is occasionally some server doing something very weird you might have to open up port 25 one some specific IP who is running something really dumb. I think I've had to do this only once or twice. But once you open up

Re: [OT] Bogus MX opinions

2008-02-21 Thread Richard Frovarp
Marc Perkel wrote: Richard Frovarp wrote: We issue tcp-reset via iptables and have never heard of any problems. Doing this also makes connecting servers fail out quickest, instead of waiting to timeout. Interesting. How do you do that? -A ports_deny -d de.st.i.p -p tcp -m tcp --dport 25

Re: [OT] Bogus MX opinions

2008-02-21 Thread Richard Frovarp
Marc Perkel wrote: Michael Scheidell wrote: Didn't qmail have a problem if it hit a 'dead' primary mx server first? Qmail has a problem if it gets a 421 on the lowest MX. But if the lowest MX is totally dead Qmail is fine with it. We issue tcp-reset via iptables and have never heard

  1   2   3   4   >