Re: ANNOUNCE: Apache SpamAssassin 3.3.0-alpha2 available

2009-10-08 Thread Ralf Hildebrandt
* Justin Mason j...@jmason.org: Apache SpamAssassin 3.3.0-alpha2 is now available for testing. Downloads are available from: http://people.apache.org/~jm/devel/ md5sum of archive files: 1b396a9df1faa22185263c7526fe6042 Mail-SpamAssassin-3.3.0-alpha2.tar.bz2 sa-update fails with: #

Re: ANNOUNCE: Apache SpamAssassin 3.3.0-alpha2 available

2009-10-08 Thread Karsten Bräckelmann
On Thu, 2009-10-08 at 15:10 +0200, Ralf Hildebrandt wrote: 1b396a9df1faa22185263c7526fe6042 Mail-SpamAssassin-3.3.0-alpha2.tar.bz2 sa-update fails with: rules: failed to run __RCVD_IN_2WEEKS test, skipping: (Can't locate object method received_within_months via package

Re: ANNOUNCE: Apache SpamAssassin 3.3.0-alpha2 available

2009-10-08 Thread Ralf Hildebrandt
* Karsten Bräckelmann guent...@rudersport.de: From memory, I believe that eval function has been added to the code after the alpha2 tarball. With the very latest rules from SVN, you'd need SA from trunk. Sorry. Yes, that fixed it -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung

Subject Rewrite Based on Score

2009-10-08 Thread Shane Webster
Spamassassin Version 3.2.5 I am curious if it is possible to rewrite the subject based on the value of the score. A example of this would be if a score of 4.0 was given the subject would state [Potential Spam], but if it was 5.0-10.0 then it is [SPAM] if it was greater then 10.0 it would be

Re: Subject Rewrite Based on Score

2009-10-08 Thread Jason Bertoch
Shane Webster wrote: Spamassassin Version 3.2.5 I am curious if it is possible to rewrite the subject based on the value of the score. A example of this would be if a score of 4.0 was given the subject would state [Potential Spam], but if it was 5.0-10.0 then it is [SPAM] if it was greater then

Re: Subject Rewrite Based on Score

2009-10-08 Thread Eddie Hallahan
To be honest it sounds like you want MailScanner. Eddie Hallahan Enterprise Management Consulting www.emcuk.com Enterprise Management Consulting is a company registered in England and Wales with company number 3134544. VAT registration number is 681038440. Shane Webster wrote: Spamassassin

Re: Subject Rewrite Based on Score

2009-10-08 Thread Karsten Bräckelmann
On Thu, 2009-10-08 at 12:01 -0400, Jason Bertoch wrote: Shane Webster wrote: I am curious if it is possible to rewrite the subject based on the value of the score. A example of this would be if a score of 4.0 was given the subject would state [Potential Spam], but if it was 5.0-10.0 then it

Re: Subject Rewrite Based on Score

2009-10-08 Thread Shane Webster
I will look into doing this, thank you. On Thu, 2009-10-08 at 19:02 +0200, Karsten Bräckelmann wrote: On Thu, 2009-10-08 at 12:01 -0400, Jason Bertoch wrote: Shane Webster wrote: I am curious if it is possible to rewrite the subject based on the value of the score. A example of this

Re: Subject Rewrite Based on Score

2009-10-08 Thread Jari Fredriksson
Spamassassin Version 3.2.5 I am curious if it is possible to rewrite the subject based on the value of the score. A example of this would be if a score of 4.0 was given the subject would state [Potential Spam], but if it was 5.0-10.0 then it is [SPAM] if it was greater then 10.0 it would

Re: Subject Rewrite Based on Score

2009-10-08 Thread Shane Webster
I actually would be doing that but the filter does not know how to handle int(), so I would have to build a filter for all possible number combinations, but if I could just get SA to do the basic math for me and write a header or subject I can filter off of that. On Thu, 2009-10-08 at 20:21

Re: Subject Rewrite Based on Score

2009-10-08 Thread Mark Martinec
On Thursday 08 October 2009 19:26:10 Shane Webster wrote: I actually would be doing that but the filter does not know how to handle int(), so I would have to build a filter for all possible number combinations, but if I could just get SA to do the basic math for me and write a header or

Re: Subject Rewrite Based on Score

2009-10-08 Thread John Hardin
On Thu, 8 Oct 2009, Shane Webster wrote: I actually would be doing that but the filter does not know how to handle int(), so I would have to build a filter for all possible number combinations, You could check the asterisks in X-Spam-Level: if match X-Spam-Level: ** subject - [ULTRA

Re: Subject Rewrite Based on Score

2009-10-08 Thread MySQL Student
Hi,  I actually would be doing that but the filter does not know how to  handle int(), so I would have to build a filter for all possible number  combinations, but if I could just get SA to do the basic math for me and  write a header or subject I can filter off of that. We do something

Re: Subject Rewrite Based on Score

2009-10-08 Thread Benny Pedersen
On tor 08 okt 2009 19:26:10 CEST, Shane Webster wrote I actually would be doing that but the filter does not know how to handle int(), try using: X-Spam-Level header so -- xpoint

Re: Subject Rewrite Based on Score

2009-10-08 Thread LuKreme
On 8-Oct-2009, at 09:39, Shane Webster wrote: I am curious if it is possible to rewrite the subject based on the value of the score. A example of this would be if a score of 4.0 was given the subject would state [Potential Spam], but if it was 5.0-10.0 then it is [SPAM] if it was greater

Re: Subject Rewrite Based on Score

2009-10-08 Thread Karsten Bräckelmann
On Thu, 2009-10-08 at 13:47 -0400, MySQL Student wrote: We do something similar here using a procmail/formail script which calls a perl script to match on X-Spam-Status then rewrite the subject to include the bayes score prepended to the subject. *boggle* That sounds overly complicated and

Re: Subject Rewrite Based on Score

2009-10-08 Thread John Hardin
On Thu, 8 Oct 2009, LuKreme wrote: You can do this easily with procmail. DOGPILE! :) -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6

Re: Subject Rewrite Based on Score

2009-10-08 Thread jdow
From: Jason Bertoch ja...@i6ix.com Sent: Thursday, 2009/October/08 09:01 Shane Webster wrote: Spamassassin Version 3.2.5 I am curious if it is possible to rewrite the subject based on the value of the score. A example of this would be if a score of 4.0 was given the subject would state

Re: Subject Rewrite Based on Score

2009-10-08 Thread MySQL Student
Hi, That sounds overly complicated and like a lot of wasted cycles. Calling a Perl script for each message? What you just described sounds a hell of lot like this light-weight SA configuration: Yes, I should have mentioned that it is a copy of the mail that users receive and only visible by a

Re: Subject Rewrite Based on Score

2009-10-08 Thread Karsten Bräckelmann
On Thu, 2009-10-08 at 14:45 -0400, MySQL Student wrote: That sounds overly complicated and like a lot of wasted cycles. Calling a Perl script for each message? What you just described sounds a hell of lot like this light-weight SA configuration: Yes, I should have mentioned that it is a

Re: Subject Rewrite Based on Score

2009-10-08 Thread MySQL Student
Hi, It still is spawning a Perl process per message. You can do away with that processing hog, if you use the add_header rule I mentioned before and have SA do it instead. You may be right. I'll have to investigate doing this for this specific user only. Thanks for the info. Thanks, Alex

results in languages other than english

2009-10-08 Thread ahattarki
The spamassassin report comes back in English. Is this configurable to return results in languages other than english. Also can a single spamassassin handle returning results in different languages. One user gets the results back in English, while another gets the results back in Korean all on

Re: Harvested Fresh .cn URIBL

2009-10-08 Thread Mike Cardwell
Warren Togami wrote: http://ruleqa.spamassassin.org/20091006-r822170-n/T_CN_URL/detail A very sizeable amount of spam (currently 50%) contains .cn domains that were registered very recently. They keep registering new domains in order to keep ahead of the URIBL's. I have an account here

Re: spam from noave.net 74.63.109.*

2009-10-08 Thread mouss
Steve Prior a écrit : I started getting spam that was distinctive for having two boxes - one Email Security Information and one Privacy Policy and viewing source indicated the mails came from a server at noave.net 74.63.109.*. I blocked 74.63.109.* and the spam stopped for a while, but I

Valid mail from blacklisted dynamic IPs

2009-10-08 Thread MySQL Student
Hi, I have a set of users that are authorized to use the mail server via pop-before-smtp, but SA catches the mail they send through the system as spam because they are on blacklisted Verizon or Comcast IPs: X-Spam-Status: Yes, hits=5.4 tag1=-300.0 tag2=5.0 kill=5.0 use_bayes=1 tests=BAYES_50,

Re: Valid mail from blacklisted dynamic IPs

2009-10-08 Thread Matt Kettler
MySQL Student wrote: Hi, I have a set of users that are authorized to use the mail server via pop-before-smtp, but SA catches the mail they send through the system as spam because they are on blacklisted Verizon or Comcast IPs: X-Spam-Status: Yes, hits=5.4 tag1=-300.0 tag2=5.0 kill=5.0

Re: results in languages other than english

2009-10-08 Thread Matt Kettler
ahattarki wrote: The spamassassin report comes back in English. Is this configurable to return results in languages other than english. Also can a single spamassassin handle returning results in different languages. One user gets the results back in English, while another gets the results

Re: Valid mail from blacklisted dynamic IPs

2009-10-08 Thread MySQL Student
Hi, Does your pop-before-smtp method cause your MTA to indicate they've been authed in the Received: header? I don't believe so. There doesn't appear to be anything additional in the header relating to pop-b4-smtp. I'm using postfix. Perhaps off-topic, but ideas on how to do this, if you think

Re: Valid mail from blacklisted dynamic IPs

2009-10-08 Thread John Hardin
On Thu, 8 Oct 2009, MySQL Student wrote: Does your pop-before-smtp method cause your MTA to indicate they've been authed in the Received: header? I don't believe so. There doesn't appear to be anything additional in the header relating to pop-b4-smtp. I'm using postfix. Perhaps off-topic,

Re: spam from noave.net 74.63.109.*

2009-10-08 Thread Chip M.
mouss wrote: snowshoe. block both ... the network: 74.63.64.0/18 (74.63.64.0 - 74.63.127.255) +1 That entire block belongs to FDCservers.net, which, from personal experience, AND based on regular discussions on Spam-L, is considered a snowshoe host (could be by conscious choice, could be by