Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Gene Heskett
On Monday 15 March 2010, Daryl C. W. O'Shea wrote: On 15/03/2010 11:07 PM, j wrote: I've been having the same problem from several locations/ISPs, since mid-Saturday. 500 Can't connect to yerp.org:80 (connect: timeout) Dave Anyone figure this out? I have received the same yerp.org down

Re: [sa] Re: ruleset for German Bettchen and Schlafzimmer spam

2010-03-16 Thread Henrik K
On Mon, Mar 15, 2010 at 11:17:09PM +0100, Karsten Bräckelmann wrote: On Mon, 2010-03-15 at 11:15 -0400, Charles Gregory wrote: H. I guess this goes back to my inquiry about the Brazilian spam I'm still looking for a way (hopefully) to simply identify the *language* of the mail

Whitelist isn't working

2010-03-16 Thread Phill Edwards
I'm running Spamassassin 3.2.5. I'm getting masses and masses of false positives. I trashed my Bayes DB the other day and rebuilt it from scratch with sa-learn but I'm still getting false positives. One particularly troublesome one is a Freecycle mailing list that I subscribe to. I have put this

Re: Whitelist isn't working

2010-03-16 Thread Yet Another Ninja
QUICK FIX! borked FH_DATE_PAST_20XX is your problem. set in local.cf score FH_DATE_PAST_20XX 0 and then read up about this rule in the list archive On 2010-03-16 12:26, Phill Edwards wrote: I'm running Spamassassin 3.2.5. I'm getting masses and masses of false positives. I trashed my Bayes

Re: Whitelist isn't working

2010-03-16 Thread Matus UHLAR - fantomas
On 16.03.10 22:26, Phill Edwards wrote: I'm running Spamassassin 3.2.5. I'm getting masses and masses of false positives. I trashed my Bayes DB the other day and rebuilt it from scratch with sa-learn but I'm still getting false positives. One particularly troublesome one is a Freecycle mailing

Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Toralf
At my stable Gentoo I see this : n22 /var/lib/spamassassin/3.002005 # head -n 1 updates_spamassassin_org.cf # UPDATE version 895075 and now I'm wondering whether I can compare that string with sth. at http://spamassassin.apache.org/ ? -- View this message in context:

Re: Whitelist isn't working

2010-03-16 Thread Mark Martinec
Phill, def_whitelist_from_rcvd *...@posts.freecycle.org posts.freecycle.org Received: from bulkmail2.freecycle.org ([95.172.20.170]) by mscip02.mailsentry.net.au with ESMTP; 16 Mar 2010 17:51:21 +1100 From: frances.dejong 2890...@posts.freecycle.org Can anyone explain why the whitelist

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread RW
On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) Toralf toralf.foers...@gmx.de wrote: At my stable Gentoo I see this : n22 /var/lib/spamassassin/3.002005 # head -n 1 updates_spamassassin_org.cf # UPDATE version 895075 and now I'm wondering whether I can compare that string with sth. at

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Matt Kettler
On 3/16/2010 8:27 AM, RW wrote: On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) Toralf toralf.foers...@gmx.de wrote: At my stable Gentoo I see this : n22 /var/lib/spamassassin/3.002005 # head -n 1 updates_spamassassin_org.cf # UPDATE version 895075 and now I'm wondering whether I can compare

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Toralf
Matt Kettler-3 wrote: On 3/16/2010 8:27 AM, RW wrote: And more to the point, you can manually look it up if you like. dig txt 5.2.3.updates.spamassassin.org Thx, that was what I'm looking for :-) -- View this message in context:

Re: Where's can I find the current version of the rules at the wep page?

2010-03-16 Thread Toralf
RW-15 wrote: On Tue, 16 Mar 2010 05:10:26 -0700 (PDT) If you are looking for a way determine whether sa-update needs to be run, you don't need to; sa-update already does this through DNS. Thx, I've already a sa-update cron job but I' was wondering whether it works - b/c the last update

Re: Whitelist isn't working

2010-03-16 Thread Matt Kettler
On 3/16/2010 8:14 AM, Mark Martinec wrote: Phill, def_whitelist_from_rcvd *...@posts.freecycle.org posts.freecycle.org Received: from bulkmail2.freecycle.org ([95.172.20.170]) by mscip02.mailsentry.net.au with ESMTP; 16 Mar 2010 17:51:21 +1100 From: frances.dejong

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Bowie Bailey
j wrote: I've been having the same problem from several locations/ISPs, since mid-Saturday. 500 Can't connect to yerp.org:80 (connect: timeout) Dave Anyone figure this out? I have received the same yerp.org down errors and it's screwing up my SA royally. I guess this is what we

Re: Hijacked thread :) (was: ruleset for German...)

2010-03-16 Thread Charles Gregory
On Mon, 15 Mar 2010, Karsten Bräckelmann wrote: The TextCat plugin. Even part of stock SA, though not enabled by default. Supports per-user settings. (nod) For reasons specific to my MTA, I can't run SA 'per user', but I can choose the most common languages (en fr) in our system's mail and

Re: Whitelist isn't working

2010-03-16 Thread Lee Dilkie
Curious that SPF_FAIL is reported... X-Spam-Report: * 1.9 TVD_RCVD_IP TVD_RCVD_IP * 3.2 FH_DATE_PAST_20XX The date is grossly in the future. * 1.5 FROM_STARTS_WITH_NUMS From: starts with many numbers * 1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date *

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
hi sir, yes i am using vchkpw to auth users. are you talking about using whitelist_auth? i have tried using that coz i have spf defined on my domain, but i am not sure if whitelist_auth is for that. dig -t TXT pinoyonthego.net ;; QUESTION SECTION: ;pinoyonthego.net. IN TXT

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: On 3/16/2010 12:51 AM, John Hardin wrote: Are you authenticating your users in any way? There are ways to whitelist users who have authenticated against your MTA. Please check the list archives and the Wiki. yes i am using vchkpw to auth users. are you

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
thank you sir, please see attached file. test header set score to 15 just to be able to send out, i have setup report_safe to but x-spam-report does not show up on the header, i can't tell what's causing all the points to increase. regards Ron On 3/16/2010 11:16 PM, John Hardin wrote: On

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Jason Bertoch
On 2010/03/16 9:30 AM, Bowie Bailey wrote: How is this messing you up? This should not affect any of your other channels. The only effect is that the sought rules don't get updated. I'm not sure how everyone else is doing it, but my script checks for updates using --channelfile, then runs

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Mark Martinec
On Tuesday 16 March 2010 19:37:02 Jason Bertoch wrote: On 2010/03/16 9:30 AM, Bowie Bailey wrote: How is this messing you up? This should not affect any of your other channels. The only effect is that the sought rules don't get updated. I'm not sure how everyone else is doing it, but my

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Jason Bertoch
On 2010/03/16 2:44 PM, Mark Martinec wrote: On Tuesday 16 March 2010 19:37:02 Jason Bertoch wrote: On 2010/03/16 9:30 AM, Bowie Bailey wrote: How is this messing you up? This should not affect any of your other channels. The only effect is that the sought rules don't get updated. I'm not

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Mark Martinec
Jason, In order to properly open a feature request, I'd like to get a better idea where you're going with this. It seems to me that a new exit code from sa-update would be more appropriate than running sa-compile every time just in case. Maybe I misunderstand? Yes, that's what I had in

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: please see attached file. Is mail.pinoyonthego.net your MTA? If so, try this: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ score POGO_CUSTOMER -1 Run in test for a while, if you only get hits on

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, John Hardin wrote: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ Watch the line wrap on that... -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174

Re: What happened to SOUGHT rules' server?

2010-03-16 Thread Karsten Bräckelmann
How is this messing you up? This should not affect any of your other channels. The only effect is that the sought rules don't get updated. I'm not sure how everyone else is doing it, but my script checks for updates using --channelfile, then runs sa-compile if sa-update returns 0.