Re: Upgrading

Hi Grant, First update the ports (see the handbook how (cvsup-without-gui and portupgrade)) After this you'll run portupgrade -a Jack - Original Message - From: Grant Peel [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Monday, September 15, 2008 10:58 PM Subject:

Re: SPAM message received - but should not have been delivered. [Solved]

Michael Hutchinson wrote: Hello Matt, So, does anyone have a clue as to why the E-Mail in question was delivered to our domain? Or even, why would our servers try to deliver a message who's recipients don't exist here? I see nothing in those headers that would indicate who the recipients

Re: Erroneous doubled letters in subject

RobertH writes: Cool! I've added it as a test rule in my environment and will bump up the score once I see how it goes. For others looking for the rule, see here: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_basic .cf?revision=695394view=markup Are

RE: Erroneous doubled letters in subject

I should make clear that PR_TD_NOWRAP does hit some ham here, so perhaps it would be better named __PR_TD_NOWRAP. Over the last week here, the figures are mxo: PR_TD_NOWRAP_BAT1094, no fps PR_TD_NOWRAP only324, over 300 ham mx1: PR_TD_NOWRAP_BAT1236, no fps PR_TD_NOWRAP only

Re: New Day old Bread list trick

* Blaine Fleming [EMAIL PROTECTED]: Marc Perkel wrote: I just discovered the Day old Bread list of host names under 5 days old. I don't know where they get it but the list is very useful. I remember playing with this list a few years ago but now they seem to lag a few days behind. For

Re: Erroneous doubled letters in subject

OK. I'll probably change it likewise, depending on how it does on our corpora... Randal, Phil writes: I should make clear that PR_TD_NOWRAP does hit some ham here, so perhaps it would be better named __PR_TD_NOWRAP. Over the last week here, the figures are mxo: PR_TD_NOWRAP_BAT

Re: Shortcurcuit scoring problem (3.2.5)

Felix, Thank you for information. guenther, Yes, you are right, but this is not a reason for not working plug-ins and options. These options seems convenient and they are described in documentation, but did not work in 3.2.3 and do not work up to now. -- View this message in context:

rbldnsd blacklist question

Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information to the list and what will happen is that when you look up a name you might get several results. For example, a hostname might be

RE: MagicSpam

Well, since many guys are recommending what they use (IronPort, Barracuda) I thought I might bring BarricadeMX from Fort Systems into the game. Have a look at them. It is _very_ efficient and can be configured to use SpamAssassin as well. Comes with a very easy install for CentOS 5.2. Kind

Re: rbldnsd blacklist question

On Tue, 16 Sep 2008, Marc Perkel wrote: Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information to the list and what will happen is that when you look up a name you might get several

sa-learn

Dear all, should I run sa-learn on mails that already are classified as spam? -- Regards Lars Ebeling http://leopg9.no-ip.org Hobbithobbyist I am not young enough to know everything. -- Oscar Wilde

Re: rbldnsd blacklist question

John Hardin wrote: On Tue, 16 Sep 2008, Marc Perkel wrote: Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information to the list and what will happen is that when you look up a name you might

Re: sa-learn

Lars Ebeling wrote: Dear all, should I run sa-learn on mails that already are classified as spam? nobody knows :) - some people train on error. this is what I do. - others train on everything. the problem here is to get the everything to use for training.=, since you should only train on

Re: rbldnsd blacklist question

On Tue, 2008-09-16 at 20:12 +0200, mouss wrote: Marc Perkel wrote: Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information to the list and what will happen is that when you look up

where to report violations of RCVD_IN_BSP?

yes, I can set a positive score for RCVD_IN_BSP_TRUSTED rules (I have!) Without it, lots of spam would get through with the default -4.3 score. but if the spammer sends to our generic web contact address (found by harvesting our web pages), shouldn't the company who gets paid to 'bond' them

RE: Erroneous doubled letters in subject

--On Tuesday, September 16, 2008 10:16 AM +0100 Randal, Phil [EMAIL PROTECTED] wrote: I should make clear that PR_TD_NOWRAP does hit some ham here, so perhaps it would be better named __PR_TD_NOWRAP. What sources the ham that hits? What legitimately stuffs that string in email? Is it

Re: rbldnsd blacklist question

Marc Perkel wrote: Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information to the list and what will happen is that when you look up a name you might get several results. For example, a

Re: Re: rbldnsd blacklist question

John Hardin wrote: div class=moz-text-flowed style=font-family: -moz-fixedOn Tue, 16 Sep 2008, Marc Perkel wrote: Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information to the list and

Re: Re: rbldnsd blacklist question

Rob McEwen wrote: div class=moz-text-flowed style=font-family: -moz-fixedJohn Hardin wrote: On Tue, 16 Sep 2008, Marc Perkel wrote: Looking from opinions from people running rbl blacklists. I have a list that contains a lot of name based information. I'm about to add a lot more information

what does amavis logging Passed CEAN with Hits: -, mean?

example: Sep 16 01:18:22 mx1 amavis[11483]: (11483-01-31) Passed CLEAN, [12.xx.40.141] [12.xx.40.141] [EMAIL PROTECTED] - [EMAIL PROTECTED], Message-ID: [EMAIL PROTECTED], mail_id: 2M64mzvIA3wf, Hits: -, queued_as: 2CC9D1AF49B, 407 ms is - the same as 0.0, or something else? Len

Re: sa-learn

Lars Ebeling wrote: Dear all, should I run sa-learn on mails that already are classified as spam? Yes.. Even if they already score BAYES_99 and are classified as spam, there's still value in training them. Admittedly false negatives are more urgent to get trained, but there's value in training

Re: what does amavis logging Passed CEAN with Hits: -, mean?

Len Conrad wrote: example: Sep 16 01:18:22 mx1 amavis[11483]: (11483-01-31) Passed CLEAN, [12.xx.40.141] [12.xx.40.141] [EMAIL PROTECTED] - [EMAIL PROTECTED], Message-ID: [EMAIL PROTECTED], mail_id: 2M64mzvIA3wf, Hits: -, queued_as: 2CC9D1AF49B, 407 ms is - the same as 0.0, or something

Re: where to report violations of RCVD_IN_BSP? (needs investigating?)

Michael Scheidell wrote: yes, I can set a positive score for RCVD_IN_BSP_TRUSTED rules (I have!) Without it, lots of spam would get through with the default -4.3 score. but if the spammer sends to our generic web contact address (found by harvesting our web pages), shouldn't the company who

Re: where to report violations of RCVD_IN_BSP? (needs investigating?)

Michael Scheidell wrote: yes, I can set a positive score for RCVD_IN_BSP_TRUSTED rules (I have!) Without it, lots of spam would get through with the default -4.3 score. -4.3 is STILL way to high a credit. If the email typically scores 10 or higher, and you need the -4.3 to drag it back