8bit encoding in mail header by SpamAssassin

2007-10-11 Thread Lars Ippich
Hello list, I actually have problems with mails coming from a server where they already have been checked by SpamAssassin and have been added headers. Amavisd, which I am running on my server, rejects these messages because they are not obeying RFC 2822, which forbids 8bit encoding in mails: Oct

Re: where does include include from?

2007-10-11 Thread Per Jessen
Per Jessen wrote: I have spamd running with --nouser-config --virtual-config-dir=userdir When scanning, it'll pick up 'user_prefs' from userdir, but when I have an 'include file' in user_prefs, where will it look for file? I guess an strace will tell me, but I'm amazed that nobody

Re: 8bit encoding in mail header by SpamAssassin

2007-10-11 Thread Per Jessen
Lars Ippich wrote: I actually have problems with mails coming from a server where they already have been checked by SpamAssassin and have been added headers. Amavisd, which I am running on my server, rejects these messages because they are not obeying RFC 2822, which forbids 8bit encoding in

Deleting Spam (Linux Procmail)

2007-10-11 Thread Mark
Hi All I'm new to the list, so I hope this is the right place. I am running my mail through procmail and separating my spamassassin into 3 groups depending on score: X-Spam-Status: Yes, score=[2-9][0-9] X-Spam-Status: Yes, score=[0-9][0-9] X-Spam-Status: Yes I reason that this must

Re: Deleting Spam (Linux Procmail)

2007-10-11 Thread Gene Heskett
On Thursday 11 October 2007, Mark wrote: Hi All I'm new to the list, so I hope this is the right place. I am running my mail through procmail and separating my spamassassin into 3 groups depending on score: X-Spam-Status: Yes, score=[2-9][0-9] X-Spam-Status: Yes, score=[0-9][0-9]

Re: where does include include from?

2007-10-11 Thread Justin Mason
Per Jessen writes: Per Jessen wrote: I have spamd running with --nouser-config --virtual-config-dir=userdir When scanning, it'll pick up 'user_prefs' from userdir, but when I have an 'include file' in user_prefs, where will it look for file? I guess an strace will tell me,

Re: 8bit encoding in mail header by SpamAssassin

2007-10-11 Thread Justin Mason
Per Jessen writes: Lars Ippich wrote: I actually have problems with mails coming from a server where they already have been checked by SpamAssassin and have been added headers. Amavisd, which I am running on my server, rejects these messages because they are not obeying RFC 2822, which

Re: Deleting Spam (Linux Procmail)

2007-10-11 Thread Matus UHLAR - fantomas
On Thursday 11 October 2007, Mark wrote: I'm new to the list, so I hope this is the right place. I am running my mail through procmail and separating my spamassassin into 3 groups depending on score: X-Spam-Status: Yes, score=[2-9][0-9] X-Spam-Status: Yes, score=[0-9][0-9]

Re: 8bit encoding in mail header by SpamAssassin

2007-10-11 Thread Lars Ippich
Justin Mason wrote: Per Jessen writes: Lars Ippich wrote: I actually have problems with mails coming from a server where they already have been checked by SpamAssassin and have been added headers. Amavisd, which I am running on my server, rejects these messages because they are not obeying

Re: 8bit encoding in mail header by SpamAssassin

2007-10-11 Thread Mark Martinec
Lars, Oct 10 09:17:05 www amavis[2981]: (02981-06) BAD HEADER from [EMAIL PROTECTED]: Non-encoded 8-bit data (char FC hex) in message header 'X-Spam-Report'\n X-Spam-Report: ... Nachricht wurde nur \\374bervertrauensw...\n The administrator claims to be using version 3.2.3 and

Re: LashBack URL / BL?

2007-10-11 Thread Mikael Syska
Hi, I'm not sure about all the diff black list options ... but I guess it would be rather easy to test it . header RCVD_IN_LASHBACK eval:check_rbl('LASHBACK','ubl.unsubscore.com') describe RCVD_IN_LASHBACK lashback tflags RCVD_IN_LASHBACK net score RCVD_IN_LASHBACK 0.0 Would this be the

DOS_OE_TO_MX

2007-10-11 Thread Paolo De Marco
Hi, I can't understand the test DOS_OE_TO_MX. Can anyone tell me what this test does? Thanks -- Paolo De Marco Real Comm srl Tel. +39 0434 923134

Creating own DNS block list

2007-10-11 Thread kc99
Hi I am trying to block a number of IP addresses (from URI's) that are not listed in the default URI blocklists. I have created a rule in local.cf as follows: uridnsblURIBL_LOCAL mydomain.lanA bodyURIBL_LOCAL eval:check_uridnsbl('URIBL_LOCAL') describe

Re: LashBack URL / BL?

2007-10-11 Thread Kris Deugau
Mikael Syska wrote: I'm not sure about all the diff black list options ... but I guess it would be rather easy to test it . header RCVD_IN_LASHBACK eval:check_rbl('LASHBACK','ubl.unsubscore.com') describe RCVD_IN_LASHBACK lashback tflags RCVD_IN_LASHBACK net score RCVD_IN_LASHBACK 0.0

Are all cf files used in spamassassin

2007-10-11 Thread rdyes
I am a novice with spamassassin. I am having a problem getting my arms around several concepts. Here are several questions. In looking at the local.cf, I see that the threshhold for marking a piece of mail as spam is 5. Can I have this mail deleted instead of being sent to the user? In

Re: LashBack URL / BL?

2007-10-11 Thread Bill Landry
Kris Deugau wrote: Mikael Syska wrote: I'm not sure about all the diff black list options ... but I guess it would be rather easy to test it . header RCVD_IN_LASHBACK eval:check_rbl('LASHBACK','ubl.unsubscore.com') describe RCVD_IN_LASHBACK lashback tflags RCVD_IN_LASHBACK net score

Re: Auto-RBL was: Why did this not hit more? (SPF, DKIM, Ironport, X-originating-ip)

2007-10-11 Thread jdow
From: Dan Mahoney, System Admin [EMAIL PROTECTED] Sent: Monday, 2007, October 08 10:33 On Mon, 8 Oct 2007, Matus UHLAR - fantomas wrote: On Sat, 6 Oct 2007, Rob McEwen wrote: FWIW... that IP, 220.226.197.15, is currently listed on four spam blacklists (RBLs): 1) uceprotect 2) no-more-funn

Re: Are all cf files used in spamassassin

2007-10-11 Thread jdow
From: [EMAIL PROTECTED] Sent: Thursday, 2007, October 11 10:06 I am a novice with spamassassin. I am having a problem getting my arms around several concepts. Here are several questions. In looking at the local.cf, I see that the threshhold for marking a piece of mail as spam is 5. Can I

Re: DOS_OE_TO_MX

2007-10-11 Thread Daryl C. W. O'Shea
Paolo De Marco wrote: Hi, I can't understand the test DOS_OE_TO_MX. Can anyone tell me what this test does? My rule: Outlook Express Sent mail directly to Your MX DOS_ OE_ TO_MX Daryl

Re: Creating own DNS block list

2007-10-11 Thread Mr Shunz
On 10/11/07, kc99 [EMAIL PROTECTED] wrote: Hi I am trying to block a number of IP addresses (from URI's) that are not listed in the default URI blocklists. I have created a rule in local.cf as follows: uridnsblURIBL_LOCAL mydomain.lanA bodyURIBL_LOCAL

MIPSpace

2007-10-11 Thread Rick Macdougall
Hi, Anyone ever hear of or use them? www.mipspace.org Looks like they block commercial senders. Regards, Rick

Re: MIPSpace

2007-10-11 Thread James
Rick Macdougall wrote: Hi, Anyone ever hear of or use them? www.mipspace.org Looks like they block commercial senders. Regards, Rick Where is their comparison to spamhau's ZEN ? MIPSpace uses innovative technology to detect and block such junk Sounds like a great catch phrase, but leaves

Re: Advice on MTA blacklist

2007-10-11 Thread mouss
David B Funk wrote: Jo you didn't read Chris's statement closely. A conscientious mail server administrator will configure the SERVER to -ONLY- accept encrypted connections for SMTP-AUTH transactions; the server should enforce the encryption requirements. This is a religious war

Re: 8bit encoding in mail header by SpamAssassin

2007-10-11 Thread mouss
Mark Martinec wrote: This is not a default behaviour, normally such errors in header are only flagged/logged as a warning, but a message is delivered nevertheless. There is no particularly good reason to block such messages, but you can if you want to. In countries like here, that would

Re: Deleting Spam (Linux Procmail)

2007-10-11 Thread mouss
Matus UHLAR - fantomas wrote: On Thursday 11 October 2007, Mark wrote: I'm new to the list, so I hope this is the right place. I am running my mail through procmail and separating my spamassassin into 3 groups depending on score: X-Spam-Status: Yes, score=[2-9][0-9]

Re: where does include include from?

2007-10-11 Thread Loren Wilton
When scanning, it'll pick up 'user_prefs' from userdir, but when I have an 'include file' in user_prefs, where will it look for file? I suspect most people aren't using include. I'm not quite sure why you would, unless you are doing some sort of user grouping. If every user includes the

SARE rule defects - and two others - one a 3.1.4 system rule (at the least)

2007-10-11 Thread jdow
(I am tired of seeing these in the logs. They are MOSTLY SARE rules. They don't affect scores. But they do rather fill up the maillog files.) Under SA 3.2.3 SARE_HEAD_SUBJ_RAND in 70_sare_header.cf depends on SARE_XMAIL_SUSP2 in 70_sare_header4.cf (which is not listed on the rules

Re: Are all cf files used in spamassassin

2007-10-11 Thread Matt Kettler
[EMAIL PROTECTED] wrote: I am a novice with spamassassin. I am having a problem getting my arms around several concepts. Here are several questions. In looking at the local.cf, I see that the threshhold for marking a piece of mail as spam is 5. Can I have this mail deleted instead of

Re: DOS_OE_TO_MX

2007-10-11 Thread Matt Kettler
Paolo De Marco wrote: Hi, I can't understand the test DOS_OE_TO_MX. Can anyone tell me what this test does? Thanks From reading the rule code, it appears to detect if a message claiming to be generated by Outlook Express was delivered directly to your network by an outside host. ie: there's

Re: MIPSpace

2007-10-11 Thread Matt Kettler
Rick Macdougall wrote: Hi, Anyone ever hear of or use them? www.mipspace.org Looks like they block commercial senders. Aye, looks like their goal is to list all commercial senders, legit, semi-legit, or otherwise. Which I could see being useful in some environments. (ie: certain

Re: MIPSpace

2007-10-11 Thread John Rudd
Matt Kettler wrote: Rick Macdougall wrote: Hi, Anyone ever hear of or use them? www.mipspace.org Looks like they block commercial senders. Aye, looks like their goal is to list all commercial senders, legit, semi-legit, or otherwise. Which I could see being useful in some environments.