Arabic Spam

2010-05-24 Thread Jason Bertoch
A user reported the following FN to me which is written in an Arabic character set. I have ok_locales en set, but I don't see any rules hitting that appear language related. I also found the normalize_charset option, but don't know if it will help or hurt my ability to detect these

Re: Arabic Spam

2010-05-24 Thread Charles Gregory
On Mon, 24 May 2010, Jason Bertoch wrote: A user reported the following FN to me which is written in an Arabic character set. I have ok_locales en set, but I don't see any rules hitting that appear language related. I also found the normalize_charset option, but don't know if it will help or

RE: Arabic Spam

2010-05-24 Thread Giampaolo Tomassoni
On Mon, 24 May 2010, Jason Bertoch wrote: At a guess I would say the bulk of your score is attributed to the URI in the body that has been flagged as being on the SURBL blocklist. Beyond that, the issue seems to be that they have used a body 'type' of text/html without actually using HTML.

databse questions

2010-05-24 Thread Daniel Iserhard
I got two questions that I can't find an answer: 1- Is it possible to distribute antispam database among different servers (4 in my case) and how can I distribute? 2- Users can retrain database? If yes, how can they do that easily and transparent? We got 4 Ubuntu Lucid (10.4) servers Thanks

Re: databse questions

2010-05-24 Thread Jari Fredriksson
I got two questions that I can't find an answer: 1- Is it possible to distribute antispam database among different servers (4 in my case) and how can I distribute? Using an SQL database. it is also possible to share whole /etc/spamassassin/* via NFS but that does not work out so well, is my

Re: Arabic Spam

2010-05-24 Thread Jason Bertoch
On 2010/05/24 1:50 PM, Giampaolo Tomassoni wrote: Jason was speaking about a FN, not an FP. Am I missing something? Yes, this was a FN. These are the findings with one of my setup (SA 3.3.1, all locales allowed): Content analysis details: (11.8 points, 5.0 required) pts rule name

Re: Arabic Spam

2010-05-24 Thread RW
On Mon, 24 May 2010 16:21:15 -0400 Jason Bertoch ja...@i6ix.com wrote: I was really more interested in the language aspect, though. I expected to see more rules match because of my ok_locales setting. To be honest, I really don't know which rules look at that setting. AFAIK the point of

Re: Arabic Spam

2010-05-24 Thread Jason Haar
On 05/25/2010 09:47 AM, RW wrote:. My guess is that none of of these is being hit because there's enough English mixed-in with the Arabic. I think the FARAWAY rules and other locale checks are dependent on email using the old, pre-Unicode charset formatting. Yesterday I had some Greek

Re: yahoo X-YMail-OSG

2010-05-24 Thread Adam Katz
My original rule: header SINGLE_HEADER_2K ALL:raw =~ /^(?=.{2048,3071}$)/m Karsten Bräckelmann noted: It does not match a single header, let alone a *specific* header as the one mentioned, but ALL headers. It effectively checks the entire headers' size. Karsten then corrected himself:

creating a spam tester.

2010-05-24 Thread aquero
I posted this thread in spam-assassin developer thread and as suggested by Sidney Markowitz , I am moving this thread to spam-assassin user forum . Hi, I I would like to create a spam tester , which specifies a spam score and suggestions for the user to reduce the spam score , so that the