spamassassin on VPS ( fedora 7 ) to scan mails for windows based server

2008-02-18 Thread Agnello George
HI There is a client requiremt for mails on a windows server to be routed to a linux based server ( fedora core 7 ) to sacn for spam mails and then re-routed back to the windows based server has any one done this before ... and if so how is it done ?.. any links would really

Bayes: What am I missing

2008-02-18 Thread comparity
I have found that in the last few months a lot of mail has been coming through. I believe that the bayes filter isn't working. None of the caught messages include a bayes score. I have dutifully put all of my uncaught spam into a folder for the purposes of learning, and run sa-learn from time

Bayes: What am I missing

2008-02-18 Thread comparity
I have found that in the last few months a lot of mail has been coming through. I believe that the bayes filter isn't working. None of the caught messages include a bayes score. I have dutifully put all of my uncaught spam into a folder for the purposes of learning, and run sa-learn from time

Re: SVN notifications killing spamassassin

2008-02-18 Thread Justin Mason
Eric A. Hall writes: I sometimes get SVN notifications that contain lists of files and their status. The filenames will often get picked up by the URI matching algorithm, each of which end up being processed through numerous lookups (URICOUNTRY, my LDAP filter, etc). Sometimes I get very

Re: Nice girl like to chat spam

2008-02-18 Thread ram
On Mon, 2008-02-18 at 02:33 -0800, ItsMikeE wrote: For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl that would like to chat with you. Email me at [EMAIL PROTECTED] only, because I am using my friend's email to write this. To see my

Re: Nice girl like to chat spam

2008-02-18 Thread Chris
On Monday 18 February 2008 4:33 am, ItsMikeE wrote: For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl that would like to chat with you. Email me at [EMAIL PROTECTED] only, because I am using my friend's email to write this. To see my pics

Re: sa-update errors

2008-02-18 Thread Arthur Dent
Gentle Bump... I thought that the approved place to alter scores was in /etc/mail/spamassassin/local.cf so I have not gone rooting around trying to give these rules scores which surely they should have by default? Are these new rules? Obsolete rules? Altered rules? Why the sudden error? Or have

Re: Nice girl like to chat spam

2008-02-18 Thread ram
On Mon, 2008-02-18 at 06:14 -0600, Chris wrote: On Monday 18 February 2008 4:33 am, ItsMikeE wrote: For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl that would like to chat with you. Email me at [EMAIL PROTECTED] only, because I am

telnet port 783 from external network

2008-02-18 Thread Agnello George
Hi I can tel net port 783 on localhost ... but cant telnet it remotely ...how is that done ...thanks -- Regards Agnello Dsouza www.linux-vashi.blogspot.com www.bible-study-india.blogspot.com

Re: spamassassin on VPS ( fedora 7 ) to scan mails for windows based server

2008-02-18 Thread Michael Scheidell
I would go back to client and ask them WHY. Sounds like an uneducated client trying to tell the expert(you) how to solve a problem. If they just want incoming email from the outside scanned for spam before sending to a windows server, then so be it. If they want to use linux, so be it. If they

Re: Whois info?

2008-02-18 Thread ram
On Fri, 2008-02-15 at 17:34 -0800, Marc Perkel wrote: Is there any place to easily query whois information to determine on a mass scale how old a domain is? The dob list was supposed to do that. I think Unfortunately their dns servers suddenly have stopped responding

Re: telnet port 783 from external network

2008-02-18 Thread Michael Scheidell
The default is to only bind spamd on localhost. Read the faq, use the man page. It will help you -- Michael Scheidell, CTO |SECNAP Network Security Winner 2008 Network Products Guide Hot Companies _ This email has been

Re: What setup do I need?

2008-02-18 Thread Matus UHLAR - fantomas
On 17.02.08 18:14, tmasboa wrote: Hello I need a little bit more help please. I am using webmin and got Fetchmail working partially... I am sorry, but spamassassin list is not the right place for questions like this. You probably should ask on your OS/distribution support list... -- Matus

Re: SVN notifications killing spamassassin

2008-02-18 Thread Eric A. Hall
On 2/18/2008 5:50 AM, Justin Mason wrote: Eric A. Hall writes: I sometimes get SVN notifications that contain lists of files and their status. The filenames will often get picked up by the URI matching algorithm, each of which end up being processed through numerous lookups (URICOUNTRY, my

Bayes Implementation + Auto Whilte Listing

2008-02-18 Thread Tarak Ranjan
Hi List, I have one Qmail based MTA , Spamassassin SpamAssassin version 3.1.4 ,running on Perl version 5.8.8, i want to implement bayesian Filtering site-wide and Auto whitelisting site-wide.. anyone help me regarding this setup / Tarak Ranjan

Re: spamassassin on VPS ( fedora 7 ) to scan mails for windows based server

2008-02-18 Thread Matus UHLAR - fantomas
On 18.02.08 15:12, Agnello George wrote: There is a client requiremt for mails on a windows server to be routed to a linux based server ( fedora core 7 ) to sacn for spam mails and then re-routed back to the windows based server has any one done this before ... and if so how

Re: Rule for Russian character sets

2008-02-18 Thread jidanni
Hmm, let me see. I use the below in user_prefs. Hope that helps. header J_CHSET3 Subject:raw =~ /\s=\?(windows-(125[0125]|874)|koi8-r|iso-8859-[28])\?/i score J_CHSET3 5 ifplugin Mail::SpamAssassin::Plugin::TextCat #ok_languages en zh.big5

Re: Nice girl like to chat spam

2008-02-18 Thread jidanni
I just use in user_prefs body J_GIRL /\bgirl.*\bpic(ture)?s\b/ score J_GIRL 5

RE: Nice girl like to chat spam

2008-02-18 Thread Randal, Phil
This rule should be resistant to FPs: body HC_GIRL/\bnice girl that would like to chat.{1,16}Email me at \ .{1,32}\.info.{1,120}\bpic(ture)?s\b/ describe HC_GIRLGirl with pics scam scoreHC_GIRL5 Mind the linebreak :-) Cheers, Phil -- Phil Randal Network

Re: False positive with scoring I don't understand

2008-02-18 Thread Tim Alberts
Tim Alberts wrote: Rubin Bennett wrote: spamassassin --remove-addr-from-whitelist (Googled for SpamAssassin AWL remove entry) http://wiki.apache.org/spamassassin/AwlWrongWay Also man spamassassin should give you some more details about that command :) Rubin yahoo'd - spamassassin auto

RE: Nice girl like to chat spam

2008-02-18 Thread Chris Santerre
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 2008-02-18 11:35 To: users@spamassassin.apache.org Subject: Re: Nice girl like to chat spam I just use in user_prefs body J_GIRL /\bgirl.*\bpic(ture)?s\b/ score J_GIRL 5 While this rule will catch the

Using network tests

2008-02-18 Thread Rob Wright
Greetings all. I'm using 3.2.4 on Debian Etch. I'm not sure that I'm actually getting network tests run. spamassassin -D --lint yields this in the plugins section: [5786] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC [5786] dbg: razor2: local tests only, skipping Razor But

Suspicious rcfile

2008-02-18 Thread timinator08
Hi, I'm setting up a user with spamassassin but unable to get it working. The following is from the maillog when I send a test message to user green Any suggestions? Thanks Feb 18 12:21:37 netmax sendmail[4198]: m1IHLbGR004195: forward /home/green/.forward.netmax: World writable directory Feb

user_prefs: mind the linebreak

2008-02-18 Thread jidanni
RP Mind the linebreak :-) That reminds me of this MINOR ITEM, Currently, each rule or configuration setting must fit on one-line; multi-line settings are not supported yet.

Re: Bayes: What am I missing

2008-02-18 Thread Luis Hernán Otegui
2008/2/17, comparity [EMAIL PROTECTED]: I have found that in the last few months a lot of mail has been coming through. I believe that the bayes filter isn't working. None of the caught messages include a bayes score. I have dutifully put all of my uncaught spam into a folder for the

Re: Using network tests

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 10:56 -0600, Rob Wright wrote: Greetings all. I'm using 3.2.4 on Debian Etch. I'm not sure that I'm actually getting network tests run. spamassassin -D --lint yields this in the plugins section: The debug switch implies local tests only, *unless* you feed it a

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Philip Prindeville
Matt Kettler wrote: Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Depends on whether you equate bare domains with URL's, I suppose. If MUA's equate them with URLs, spammers will use this, and SpamAssassin will use

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 09:51 -0800, Philip Prindeville wrote: Daryl C. W. O'Shea wrote: Philip Prindeville wrote: Yeah, I'll talk to the Outlook folks, and file a bug against Thunderbird... (I think the latter only does it to be compatible with the former...) Yeah, good luck with

Re: Suspicious rcfile

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 09:39 -0800, timinator08 wrote: Hi, I'm setting up a user with spamassassin but unable to get it working. The following is from the maillog when I send a test message to user green Any suggestions? This is not a SA question. Your problem is with procmail. Feb 18

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Philip Prindeville
Daryl C. W. O'Shea wrote: Philip Prindeville wrote: There is an RFC that defines what a URL looks like. A bare domain doesn't cut it. You want to forbid bare domains in email? Go ahead. You can forbid anything you like. I don't, and I doubt Matt wants to either. But don't

Re: FW: Rule for Russian character sets (=?koi8-r? not quite acharset)

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 09:36 +1300, Michael Hutchinson wrote: We don't want to only allow the English locale, because we (here at my work) do not want our international clients (non Russian) to be denied email service. ok_locales en ja ko th zh This will allow anything but

Re: False positive with scoring I don't understand

2008-02-18 Thread Paul Douglas Franklin
I have use_auto_whitelist 0 in my local.cf. awl was causing just too much trouble. --Paul Tim Alberts wrote: Tim Alberts wrote: Rubin Bennett wrote: spamassassin --remove-addr-from-whitelist (Googled for SpamAssassin AWL remove entry) http://wiki.apache.org/spamassassin/AwlWrongWay Also

Re: False positive with scoring I don't understand

2008-02-18 Thread René Berber
Tim Alberts wrote: [snip] OK, I ran the command and just received another email from the customer today. The mail is still being marked as spam. I need to fix this now or stop using spamassassin. To re-iterate the problem. I am receiving mail from a customer and it is being marked as

Re: False positive with scoring I don't understand

2008-02-18 Thread Theo Van Dinter
On Mon, Feb 18, 2008 at 11:12:59AM -0800, Paul Douglas Franklin wrote: use_auto_whitelist 0 Alternately, and the better way, is to disable the AWL plugin. You'll find the following line in v310.pre (in your site config directory): loadplugin Mail::SpamAssassin::Plugin::AWL comment it out and

FW: Nice girl like to chat spam

2008-02-18 Thread Michael Hutchinson
-Original Message- From: ItsMikeE [mailto:[EMAIL PROTECTED] Sent: Monday, 18 February 2008 11:33 p.m. To: users@spamassassin.apache.org Subject: Nice girl like to chat spam For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl

Re: False positive with scoring I don't understand

2008-02-18 Thread Tim Alberts
René Berber wrote: Tim Alberts wrote: [snip] OK, I ran the command and just received another email from the customer today. The mail is still being marked as spam. I need to fix this now or stop using spamassassin. To re-iterate the problem. I am receiving mail from a customer and it is

Re: Nice girl like to chat spam

2008-02-18 Thread Jari Fredriksson
On Mon, 2008-02-18 at 06:14 -0600, Chris wrote: scoring BOTNET at 5.0 dont you get far too many FP's Besides how do you get clamav to score a plain text mail. Are you using the clam signatures for spam Botnet as is is way dangerous for an ISP, but for personal defence it works fine. I

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Justin Mason
Karsten =?ISO-8859-1?Q?Br=E4ckelmann?= writes: On Mon, 2008-02-18 at 09:51 -0800, Philip Prindeville wrote: Daryl C. W. O'Shea wrote: Philip Prindeville wrote: Yeah, I'll talk to the Outlook folks, and file a bug against Thunderbird... (I think the latter only does it to be

Re: False positive with scoring I don't understand

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 13:12 -0800, Tim Alberts wrote: Thank you again everyone for responding. I do have the per user settings and it prompts the question that I don't see an answer for yet. What happens with the command 'spamassassin --remove-addr-from-whitelist' with per user settings?

RE: False positive with scoring I don't understand

2008-02-18 Thread Bowie Bailey
Tim Alberts wrote: I do have the per user settings and it prompts the question that I don't see an answer for yet. What happens with the command 'spamassassin --remove-addr-from-whitelist' with per user settings? I assumed running the command as root, it would filter down through each

Re: Nice girl like to chat spam

2008-02-18 Thread Chris
On Monday 18 February 2008 6:29 am, ram wrote: On Mon, 2008-02-18 at 06:14 -0600, Chris wrote: On Monday 18 February 2008 4:33 am, ItsMikeE wrote: For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl that would like to chat with you.

Spamassassin not catching spam

2008-02-18 Thread tmasboa
hello, I just got SA set up on my server, and it does not seem to be working very well. Out of about 300 spam messages, only 30 were caught, with many of the false -'s receiving scores like 2.x or something. I have version 3.2.3 and it just doesn't seem to work well at all. I tried editing

Re: Spamassassin not catching spam

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 15:59 -0800, tmasboa wrote: hello, I just got SA set up on my server, and it does not seem to be working very well. Out of about 300 spam messages, only 30 were caught, with many of the false -'s receiving scores like 2.x or something. I have version 3.2.3 and it

Re: telnet port 783 from external network

2008-02-18 Thread Matt Kettler
Agnello George wrote: Hi I can tel net port 783 on localhost ... but cant telnet it remotely ...how is that done ...thanks You can do this using spamd's -i parameter: From man spamd: **-i* [/ipaddress/], *--listen-ip*[=/ipaddress/], *--ip-address*[=/ipaddress/]* Tells spamd to listen on

Re: Bayes Implementation + Auto Whilte Listing

2008-02-18 Thread Matt Kettler
Tarak Ranjan wrote: Hi List, I have one Qmail based MTA , Spamassassin SpamAssassin version 3.1.4 ,running on Perl version 5.8.8, i want to implement bayesian Filtering site-wide and Auto whitelisting site-wide.. anyone help me regarding this setup

Nabble (was: Re: Spamassassin not catching spam)

2008-02-18 Thread Karsten Bräckelmann
Please read the subject as an annoyed, pissed off grunt. *Edit* ?! Nabble provides a web-frontend, and calls it forum. However, obviously they don't understand that they are dealing with a mailing list. It is not a bloody forum. They just managed to send out two DIFFERENT messages with the very

Re: user_prefs: mind the linebreak

2008-02-18 Thread jidanni
MK Why would there ever be a problem fitting on one line? Lines aren't MK limited to 80 characters or anything silly like that.. MK That sounds a bit like complaining that a ship must fit in the water.. MK There's a whole ocean out there, so who cares if you can't put one MK boat in 2 rain

Re: user_prefs: mind the linebreak

2008-02-18 Thread Matt Kettler
[EMAIL PROTECTED] wrote: MK Why would there ever be a problem fitting on one line? Lines aren't MK limited to 80 characters or anything silly like that.. MK That sounds a bit like complaining that a ship must fit in the water.. MK There's a whole ocean out there, so who cares if you can't put

RE: user_prefs: mind the linebreak

2008-02-18 Thread Michael Hutchinson
-Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, 19 February 2008 4:43 p.m. To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: user_prefs: mind the linebreak [EMAIL PROTECTED] wrote: MK Why would there ever be a problem fitting on

Re: user_prefs: mind the linebreak

2008-02-18 Thread jidanni
MK Call me older fashioned.. I consider line-wrapping a bit too fancy MK for my config editing preferences. I see, you must have a billion column wide terminal or something. Oops. You whippersnappers don't call them terminals these days. Anyway, I swear I am not dreaming: $ info make We split

RE: [OT]user_prefs: mind the linebreak

2008-02-18 Thread Rubin Bennett
On Tue, 2008-02-19 at 16:56 +1300, Michael Hutchinson wrote: -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, 19 February 2008 4:43 p.m. To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: user_prefs: mind the linebreak [EMAIL

Re: user_prefs: mind the linebreak

2008-02-18 Thread Matt Kettler
Michael Hutchinson wrote: Line wrapping in config is bad. I've had several instances of an editor in linux that I won't name where I've lost config data because of it wrapping lines instead of just displaying it off page until I'm ready to see it. This seems to happen a lot more frequently with

Re: user_prefs: mind the linebreak

2008-02-18 Thread Daryl C. W. O'Shea
[EMAIL PROTECTED] wrote: MK Call me older fashioned.. I consider line-wrapping a bit too fancy MK for my config editing preferences. I see, you must have a billion column wide terminal or something. Oops. You whippersnappers don't call them terminals these days. Anyway, I swear I am not