pdfinfo plugin

2014-12-02 Thread Stefan Jakobs
Hello, I still use the pdfinfo plugin from Dallas Engelken (and it still hits on some messages). But does anyone know the status of the plugin? Is it maintained? Does it make sense to use it with spamassassin 3.4.0 or is a similar functionality already included there? Best regards Stefan

Re: dccifd error

2012-03-05 Thread Stefan Jakobs
Am Sonntag, 4. März 2012, 12:44:40 schrieb LuKreme: I’ve noticed the following error in my mailogs: mail spamd[26839]: dcc: failed to connect to local socket /var/dcc/dccifd spamassassins DCC plugin will use dccproc if dccifd is not available. If dccproc is run more than 500 times in fewer

Re: Using ZMI_GERMAN ruleset

2011-11-16 Thread Stefan Jakobs
Hi list, the published ruleset in the update channel is much older than the ruleset on the named website. # dig +short -t txt 2.3.3.70_zmi_german.cf.zmi.sa-update.dostech.net txt 20100831 Is the update with sa-update still supported? Thanks and kind regards Stefan Mo Okt 31

Re: Spamassassin stops to assign score

2011-08-20 Thread Stefan Jakobs
kipstar wrote: My configuration is Postfix+amavis+spamassassin. snip in the line concerning the amavis spam filter by using spamassassin the field Hits doesn't show a score but only a dash, i.e.: Hits: - That means that the message isn't passed to spamassassin, for reasons such as: - the

Re: Modul für Spamassassin gesucht

2011-05-15 Thread Stefan Jakobs
On Sunday 15 May 2011 15:56:04 sebastian wrote: Hallo, Hi, ich suche ein Modul für Spamassassin, mit welchem ich jede AbsenderIP welche mehr als XX Punkte in der zugehörigen Mail hat, in eine Textdatei oder Datenbank eintragen kann? Gibt es sowas oder hat jemand sowas mal gebaut? Have a

webmail message, false positiv

2011-02-25 Thread Stefan Jakobs
Hi list, I received a message from a friend, fetched the message by using POP3 and passed it to spamassassin. It marked the message as spam. I know this is not the intended use of spamassassin, but is there any chance that I can circumvent this kind of false positives? Here are the headers:

Re: webmail message, false positiv

2011-02-25 Thread Stefan Jakobs
On Friday 25 February 2011 10:29:08 Ned Slider wrote: snip 3.3 RCVD_IN_PBLRBL: Received via a relay in Spamhaus PBL [78.55.199.104 listed in zen.spamhaus.org] That looks to be your main problem right there - don't deep parse Received headers

Re: Command-line RBL check?

2010-05-16 Thread Stefan Jakobs
On Sunday 16 May 2010 08:43:06 Alex wrote: Hi all, Hi Alex, Can anyone recommend a command-line perl or sh RBL check script? I've tried a few out there, but they are either dated and don't support current RBLs, or just don't work. While doing a simple host lookup against an RBL may work for

spamassassin doesn't use modified @INC

2009-06-09 Thread Stefan Jakobs
Hello list, I'm in the progress of setting up a new Server with amavisd-new and spamassassin. I like to run the recent versions of this programms, but therefore I need some perl modules from cpan (e.g. IP::Country::Fast), because they are not in the repository of my distribution (SLES 11).

Re: spamassassin doesn't use modified @INC

2009-06-09 Thread Stefan Jakobs
Mark Martinec: Stefan, snip amavisd does not modify @INC nor use the 'use lib' pragma/module. %ENV: PERL5LIB=/usr/local/perl/lib:/usr/local/perl/lib/arch Note that amavisd runs in taint mode, so this will be ignored by perl according to its perlrun documentation: snip When

Re: accept only gpg/pgp mail

2009-03-08 Thread Stefan Jakobs
On Sonntag, 8. März 2009 01:00:57 Theo Van Dinter wrote: snip As for looking for encrypted vs unencrypted mails, you'd have to write your own rules and/or plugins (depending on how far/complicated you wanted to go) to identify those mails you do/don't want. Have a look at

Re: SA rules stats (Was: SARE false positives on MY_CID_* rules)

2009-01-31 Thread Stefan Jakobs
On Freitag, 30. Januar 2009 06:33:49 Rajkumar S wrote: After activating the rule I haven't seen any more FP. But that doesn't mean much. Here are my stats from yesterday: Rank Hits% Msgs % Spam% Ham Score Rule -- --- -

Re: SARE false positives on MY_CID_* rules

2009-01-29 Thread Stefan Jakobs
On Thursday 29 January 2009 18:21, Michael Monnerie wrote: At least on our generally german e-mails, the following rules very often cause false positives: 1.6 MY_CID_AND_CLOSING SARE cid and closing 1.5 MY_CID_AND_STYLE SARE cid and style 1.6 MY_CID_ARIAL2_CLOSING SARE cid

optional modules

2008-11-13 Thread Stefan Jakobs
Hello list, I'm using SpamAssassin with amavisd-new and after starting amavisd it prints the following lines. I know what some modules are for, but from others I don't know. Maybe you can help me out. INFO: SA version: 3.2.5, 3.002005, no optional modules: Sys::Hostname::Long

again a false positive

2008-11-04 Thread Stefan Jakobs
Hello list, one of my users received this message: http://pastebin.com/m2d3ad435 and it scored like that: X-Spam-Status: Yes, score=12.501 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DATE_IN_PAST_12_24=0.992, EXTRA_MPART_TYPE=1, HTML_MESSAGE=0.001, INVALID_DATE=1.245,

Re: force Bayes DB to expire

2008-09-20 Thread Stefan Jakobs
On Thursday 18 September 2008 18:50, you wrote: Hello list, first I'm wondering why I got the following error, because in my local.cf I set 'bayes_auto_expire 1' to prevent SpamAssassin from expire the bayes-db (or did amavis the expire?): Ah? Bayes will auto expire if you set it for

force Bayes DB to expire

2008-09-18 Thread Stefan Jakobs
Hello list, first I'm wondering why I got the following error, because in my local.cf I set 'bayes_auto_expire 1' to prevent SpamAssassin from expire the bayes-db (or did amavis the expire?): Sep 18 13:15:48 server amavis[19655]: (19655-04) (!)SA TIMED OUT, backtrace: at

spamassassin doesn't finsh processing

2008-07-15 Thread Stefan Jakobs
Hello list, I received a mail which amavisd couldn't finish processing. Jul 15 11:56:13 server postfix/lmtp[32252]: F41C7381E71: to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1]:10024, conn_use=2, delay=8956, delays=7756/0/0/1200, dsn=4.4.2, status=deferred (conversation with 127.0.0.1

Re: collecting mail for sa-learn, how to?

2008-07-14 Thread Stefan Jakobs
On Friday 11 July 2008 17:29, andys wrote: Hi, Hello, for a mail server running email for multiple domains what is the typical/recommended way to collect emails which arent detected as spam to be processed by sa-learn? Users are downloading mail via POP3, so once a users sees a mail and

Re: collecting mail for sa-learn, how to?

2008-07-14 Thread Stefan Jakobs
On Monday 14 July 2008 16:27, John Hardin wrote: On Mon, 2008-07-14 at 15:48 +0200, Stefan Jakobs wrote: On Friday 11 July 2008 17:29, andys wrote: for a mail server running email for multiple domains what is the typical/recommended way to collect emails which arent detected as spam

Re: prevent to set a score for a non existend rule

2008-06-24 Thread Stefan Jakobs
On Tuesday 24 June 2008 02:33, Benny Pedersen wrote: On Tue, June 24, 2008 01:10, Stefan Jakobs wrote: I'm guess this doesn't work: amavis[31206]: (31206-01) SPAM-TAG, [EMAIL PROTECTED] - [EMAIL PROTECTED], Yes, score=7.88 tagged_above=-999 required=5 tests=[ALL_TRUSTED=-1.8

prevent to set a score for a non existend rule

2008-06-23 Thread Stefan Jakobs
Hello list, I'm using JM's sought ruleset, but the default score is in my opinion to high. That's why I have the following file: /etc/mail/spamassassin/sought_rules.cf with this content: score JM_SOUGHT_1 2.2 score JM_SOUGHT_2 2.2 score JM_SOUGHT_3

Re: prevent to set a score for a non existend rule

2008-06-23 Thread Stefan Jakobs
On Monday 23 June 2008 18:13, Benny Pedersen wrote: On Mon, June 23, 2008 14:33, Stefan Jakobs wrote: /etc/mail/spamassassin/sought_rules.cf with this content: score JM_SOUGHT_1 2.2 meta JM_SOUGHT_1_ADJ (JM_SOUGHT_1) score JM_SOUGHT_1_ADJ -0.1 score JM_SOUGHT_2 2.2

Re: VBounce FP

2008-05-16 Thread Stefan Jakobs
On Friday 16 May 2008 20:45, Christopher Bort wrote: The message at http://pastebin.com/m42c297fd[1] hit ANY_BOUNCE_MESSAGE and BOUNCE_MESSAGE despite the host that sent it (mailgw02.wolfnettech.com) being listed in my whitelist_bounce_relays. What might I have (?:missed|not understood) about

Re: VBounce FP

2008-05-16 Thread Stefan Jakobs
On Friday 16 May 2008 22:33, you wrote: On 05/16/08 12:56, [EMAIL PROTECTED] (Stefan Jakobs) wrote: On Friday 16 May 2008 20:45, Christopher Bort wrote: The message at http://pastebin.com/m42c297fd[1] hit ANY_BOUNCE_MESSAGE and BOUNCE_MESSAGE despite the host that sent it (mailgw02

Re: whitelist mail from own host

2008-05-07 Thread Stefan Jakobs
On Tuesday 06 May 2008 23:06, mouss wrote: snip I see from your headers that you use postfix and amavdis-new, and that such messages are submitted with the sendmail command. if you trust the machine (no php mail to outside), then you can skip filtering for mail submitted via sendmail. to do

whitelist mail from own host

2008-05-06 Thread Stefan Jakobs
Hello list, here is a part of the header from a mail I like to whitelist: X-Spam-Status: Yes, score=6.958 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001, SPOOF_COM2COM=2.272, SPOOF_COM2OTH=2.044, URIBL_BLACK=1.955, URIBL_PH_SURBL=1.787,

Re: whitelist mail from own host

2008-05-06 Thread Stefan Jakobs
On Tuesday 06 May 2008 22:00, Benny Pedersen wrote: On Tue, May 6, 2008 21:32, Stefan Jakobs wrote: From: [EMAIL PROTECTED] add a spf record for this domain incl the subdomain :-) Yes, that's a possibility, but I can not do that. At least not in the near future. Any other ideas? snip

SA timed out with IP::Country

2008-05-05 Thread Stefan Jakobs
Hello list, I'm using spamassassin 3.2.4 (running on PERL 5.8.3) with amavisd-new 2.5.4 and IP::Country 2.23. From time to time (~ twice a day) I see the following error in my logfile: amavis[9384]: (09384-07) (!)SA TIMED OUT, backtrace: at /usr/lib/perl5/site_perl/5.8.3/IP/Country/Fast.pm

Re: vbounce false positive on CommuniGate group message

2008-05-02 Thread Stefan Jakobs
On Friday 02 May 2008 17:24, Jesse Stroik wrote: SA-Users, I'm running spamassassin rules 648641 for 3.2.4 fetched by sa-update. I've run into two issues with my current setup. First, group messages sent through my MTA (CommuniGate) are getting classified with BOUNCE_MESSAGE by vbounce.

Re: Different vbounce results between 3.2.2 and 3.2.4

2008-04-19 Thread Stefan Jakobs
On Friday 18 April 2008 15:50, Matus UHLAR - fantomas wrote: On 18.04.08 12:54, Stefan Jakobs wrote: I have two servers, one is running Spamassassin 3.2.2 and the other one is running 3.2.4. For each I have enabled the vbounce plug-in in v320.pre and have added the following line to my

Different vbounce results between 3.2.2 and 3.2.4

2008-04-18 Thread Stefan Jakobs
Hello list, I have two servers, one is running Spamassassin 3.2.2 and the other one is running 3.2.4. For each I have enabled the vbounce plug-in in v320.pre and have added the following line to my local.cf: whitelist_bounce_relays server.domain.tld If I now send this message

can not compile sought ruleset

2008-04-14 Thread Stefan Jakobs
Hello, I just tried the sought ruleset (see http://taint.org/2007/08/15/004348a.html). But I was not able to compile it. Is the ruleset not compilable or did I something wrong? I'm using SpamAssassin v3.2.3 and here's the output from sa-compile: # sudo /usr/bin/sa-compile [19022] info:

Re: can not compile sought ruleset

2008-04-14 Thread Stefan Jakobs
] info: body_0: 622 base strings extracted in 23 seconds re2c: error: line 103, column 19: can't find symbol command failed! at /usr/bin/sa-compile line 282, $fh line 1251. Greetings Stefan --j. Stefan Jakobs writes: Hello, I just tried the sought ruleset (see http://taint.org/2007/08/15

Re: disable all network test except ...

2008-01-21 Thread Stefan Jakobs
On Monday 21 January 2008 12:29, Matus UHLAR - fantomas wrote: On 18.01.08 13:24, Stefan Jakobs wrote: I'm using amavisd-new with spamassassin and for some tests I have to disable all network tests in spamassassin except for sorbs, njabl, uribl and maybe some other blackhole lists. why

disable all network test except ...

2008-01-18 Thread Stefan Jakobs
Hello list, I'm using amavisd-new with spamassassin and for some tests I have to disable all network tests in spamassassin except for sorbs, njabl, uribl and maybe some other blackhole lists. I guess I can comment out the corresponding header lines in the files 20_dnsbl_tests.cf and

Re: disable all network test except ...

2008-01-18 Thread Stefan Jakobs
On Friday 18 January 2008 13:46, you wrote: Stefan Jakobs wrote: Hello list, I'm using amavisd-new with spamassassin and for some tests I have to disable all network tests in spamassassin except for sorbs, njabl, uribl and maybe some other blackhole lists. I guess I can comment out

Re: the opposit of ok_locales ??

2007-12-07 Thread Stefan Jakobs
On Friday 07 December 2007 04:42, Matt Kettler wrote: [EMAIL PROTECTED] wrote: MK I'll be happy to change my assumptions, but can you name any good reason MK why they would want to do so? The Matt theme: restrict oneself from getting mail from any but a few safe people, languages, or

Re: the opposit of ok_locales ??

2007-12-07 Thread Stefan Jakobs
On Friday 07 December 2007 20:42, Karsten Bräckelmann wrote: On Fri, 2007-12-07 at 08:38 -0500, Matt Kettler wrote: Stefan Jakobs wrote: Let's assume you running a mailrelay for a university and your users are from different countries. Lets assume further on you have no Swedish people

Re: the opposit of ok_locales ??

2007-12-07 Thread Stefan Jakobs
On Saturday 08 December 2007 01:15, Karsten Bräckelmann wrote: snip Ok. My fault I mistook charsets with country codes. But replace se with ru or ch or greek7. The result is the same. You want one charset to be considered as not ham and you have to give the whole list to the parameter.

Re: perl script which extract a mail from the appendix of an other mail

2007-11-19 Thread Stefan Jakobs
On Monday 19 November 2007 06:08, ram wrote: On Sat, 2007-11-17 at 23:36 +0100, Stefan Jakobs wrote: Hi list, I need a perl script which is able to extract a mail from the appendix of an other mail. The idea is that people can send me mails with non recognized spams in the appendix

perl script which extract a mail from the appendix of an other mail

2007-11-17 Thread Stefan Jakobs
Hi list, I need a perl script which is able to extract a mail from the appendix of an other mail. The idea is that people can send me mails with non recognized spams in the appendix. Then I can extract the spam from the appendix and will learn it with sa-learn. That leaves the headers

Re: Disabling speciffic RBLs

2007-10-22 Thread Stefan Jakobs
On Monday 22 October 2007 18:04, [EMAIL PROTECTED] wrote: Hi, Hello Gordan, I cannot seem to find any useful documentation on this. Specifically, I need to disable spamhaus RBLs in all forms (DNS, URI, etc.). The lookups are slowing down spamassassin too much, and the mail backs up by the

lint warning: score set for non-existent rule

2007-07-13 Thread Stefan Jakobs
Hello list, I'm running amavisd-new 2.3.3 with spamassassin 3.1.8. I will get the following warning if I do a spamassassin --lint. # spamassassin --lint [8590] warn: config: warning: score set for non-existent rule __RCVD_IN_SBL_XBL [8590] warn: lint: 1 issues detected, please rerun with

Re: lint warning: score set for non-existent rule

2007-07-13 Thread Stefan Jakobs
Am Friday 13 July 2007 16:42 schrieb Matus UHLAR - fantomas: On 13.07.07 16:21, Stefan Jakobs wrote: I'm running amavisd-new 2.3.3 with spamassassin 3.1.8. I will get the following warning if I do a spamassassin --lint. # spamassassin --lint [8590] warn: config: warning: score set

Re: lint warning: score set for non-existent rule

2007-07-13 Thread Stefan Jakobs
Am Friday 13 July 2007 18:32 schrieb McDonald, Dan: On Fri, 2007-07-13 at 16:21 +0200, Stefan Jakobs wrote: Hello list, I'm running amavisd-new 2.3.3 with spamassassin 3.1.8. I will get the following warning if I do a spamassassin --lint. # spamassassin --lint [8590] warn: config

Re: dccifd and spamassassin

2007-07-08 Thread Stefan Jakobs
creates creates a socket to talk to the DCC server while dccifd caches open sockets. Hopes that answers your question ... so if you have a smal mail gw ... I dont see the point in running the daemon, if there are plenty of resources. // ouT Stefan Jakobs wrote: Hello list, I'm using

dccifd and spamassassin

2007-07-06 Thread Stefan Jakobs
Hello list, I'm using Spamassassin 3.1.8 with amavisd-new 2.3.3 and postfix 2.4.3 on a mailrelay. Some days ago I installed a new version of DCC. And saw in the installation instructions that I should enable dccifd if I use spamassassin. So I did. Now I get the following errors in my logs:

stock spam

2007-05-25 Thread Stefan Jakobs
Hello list, I get a lot of these Spam mails: http://home.arcor.de/stefan_jakobs/spam-mail.txt. And spamassassin doesn't recognise them. Here is the X-Spam header: X-Spam-Status: No, score=-1.11 tagged_above=-999 required=5 tests=[BAYES_05=-1.11] I'm using amavisd-new 2.3.3 and Spamassassin

experience with borderware

2007-02-02 Thread Stefan Jakobs
Hello list, maybe this it not the right list to ask such a question, but I'll do it all the same. I'm running a mailrelay with postfix + amavisd-new + spamassassin. The mailrelay is incoming and outgoing server for a lot of other mailserver. Now I have the problem that my mailrelay is

Re: experience with borderware

2007-02-02 Thread Stefan Jakobs
Am Freitag, 2. Februar 2007 15:54 schrieb Randal, Phil: That borderware page gives lots of clues about your IP: OK. But it doesn't say much. Good Recipients: 12.07% Bad Recipients: 87.93% What are good and what are bad recipients. Is a client of borderware a good recipient and

SA TIMED OUT

2006-12-05 Thread Stefan Jakobs
Hello list, I use a mailrelay with postfix, amavisd-new 2.3.3 and Spamassassin 3.1.7. I get the following failure ca. 25 times a day: Dec 5 15:32:58 server amavis[23505]: (23505-01-24) SA TIMED OUT, backtrace: at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Locker.pm line 71\n\teval

Re: SA TIMED OUT

2006-12-05 Thread Stefan Jakobs
Am Dienstag, 5. Dezember 2006 16:12 schrieb Theo Van Dinter: On Tue, Dec 05, 2006 at 04:06:17PM +0100, Stefan Jakobs wrote: Dec 5 15:32:58 server amavis[23505]: (23505-01-24) SA TIMED OUT, backtrace: at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Locker.pm line 71\n\teval {...} called

Re: SA TIMED OUT

2006-12-05 Thread Stefan Jakobs
Am Dienstag, 5. Dezember 2006 18:16 schrieb Theo Van Dinter: On Tue, Dec 05, 2006 at 06:11:56PM +0100, Stefan Jakobs wrote: 71\n\tMail::SpamAssassin::Locker::jittery_one_second_sleep('Mail::Spa mAss assin::Locker::UnixNFSSafe=HASH(0x9747010)') Are you using NFS? If not, switch

more than one X-Spam-Flag

2006-10-10 Thread Stefan Jakobs
Hello list, I use a mailrelay with postfix, amavis-new 2.3.3 and spamassassin. Is it possible that amavis add a X-Spam-Flag for every time that the mail goes through it? Usally amavis will overwrite the X-Spam-Flag if the mail passes amavis a second time. But I need a second X-Spam-Flag. Know

Re: Training Bayes properly

2006-06-30 Thread Stefan Jakobs
Am Freitag, 30. Juni 2006 02:09 schrieb Rick Macdougall: Hi, Hello, And my hit rates are For HAM RANKRULE NAMECOUNT %OFRULES %OFMAIL %OFSPAM %OFHAM 1BAYES_00 2281924.15 54.611.65 96.70 And SPAM RANKRULE NAMECOUNT %OFRULES %OFMAIL %OFSPAM %OFHAM

Re: size of bayes db

2006-06-09 Thread Stefan Jakobs
Hallo, Am Donnerstag, 8. Juni 2006 22:31 schrieb Kai Schaetzl: Stefan Jakobs wrote on Thu, 8 Jun 2006 13:56:22 +0200: I turned on bayes autolearning with the standard options, but my bayes_seen db grows and grows, now it is by 1.1 GB. This is indeed very much. This is a dbm db? (SQL has

size of bayes db

2006-06-08 Thread Stefan Jakobs
Hello list, I'm using SA 3.1.2 with amavis-new and postfix on a mailrelay. I turned on bayes autolearning with the standard options, but my bayes_seen db grows and grows, now it is by 1.1 GB. Why reduce SA the size not automatically? What can I do, to reduce the size of the db? What are your