Re: Help with new rule, and local.cf

2010-06-04 Thread Matus UHLAR - fantomas
On 03.06.10 20:45, cviebrock wrote: Thanks for the link. That'll help. In general, though, can I write a SA rule that looks at the raw message body with trying to decode attachments, etc.? I thought that would be the easiest way to catch these messages (and some other spam that comes in as

Re: Problems with spamass-milter, postfix, spamassassin

2010-06-04 Thread Tarvo Kurm
Bug 6403 comment 19 [1]? [cut] You are aware you still will have to add the macros to the postfix conf, as stated in that bug report and [1]? Did you do that? No, i was not aware of that. Can't understand how i missed it - it's even plainly stated in spamass-milter docs. *bonk* Just for

Re: Problems with spamass-milter, postfix, spamassassin

2010-06-04 Thread Robert Schetterer
Am 03.06.2010 16:42, schrieb Kris Deugau: Tarvo Kurm wrote: Mails coming in thru postfix+spamass-milter+spamassassin have drastically lower scores than those checked manually with spamassasin or spamc. Specifically, mails taking the milter path will not have RCVD_IN rules matched _almost_

Re: Help with new rule, and local.cf

2010-06-04 Thread Martin Gregorie
On Thu, 2010-06-03 at 19:44 -0700, cviebrock wrote: I'm trying to write a rule to catch a bunch of spam I'm getting recently that contain only an .RTF file. The filename, subject line, and other details vary, but the raw message body is always the same i.e. the base64 encoded RTF file. See

Re: Clean Mandriva runs SA3.2.5 but not 3.3.1

2010-06-04 Thread Mark Martinec
On Friday June 4 2010 07:09:25 Scot Meyer wrote: I am unable to get a clean install using the directions in INSTALL from working. I have a VM of the Mandriva image prior to installing any version of spamassassin. Then I downloaded 3.3.1 and followed the directions including running sa-update

Re: Clean Mandriva runs SA3.2.5 but not 3.3.1

2010-06-04 Thread Scot Meyer
Whoa, thanks I completely missed that.  Apparenlty Mandriva 2010 free includes perl-Mail-SpamAssassin and spamassassin rpms by default even though I am pretty sure I unselected mail server from the list of install options.   Scot --- On Fri, 6/4/10, Mark Martinec mark.martinec...@ijs.si wrote:

Re: Help with new rule, and local.cf

2010-06-04 Thread cviebrock
You're right in that it *could* be a common RTF header, but a bit of decoding of the attachments on my end seems to indicate that it isn't. All these spam RTFs are practically identical except for a different URL link in the document, and a different (probably forged) generator Msftedit

Re: Help with new rule, and local.cf

2010-06-04 Thread Benny Pedersen
On Fri 04 Jun 2010 04:44:46 AM CEST, cviebrock wrote http://pastebin.com/xFddVaX8 http://sanesecurity.org/ dont know what clamav rules helps for this, but this is another way to stop spam attachements remember to make good choice of official sigs in clamd if using clamav milter, only

Will spam-assassin check the mail content?

2010-06-04 Thread aquero
Hi, I have installed spam assassin in my server and its working perfectly. I have included the following parameters in the local.cf file rewrite_header Subject [* SPAM _SCORE_ *] required_score 2.0 #to be able to use _SCORE_ we need report_safe set to 0 #If this option is

spam score limit adivse

2010-06-04 Thread aquero
Hi, What is the maximum allowed spam score value for a legitimate mail? What value should i set as the spam score limit? -- View this message in context: http://old.nabble.com/spam-score-limit-adivse-tp28781886p28781886.html Sent from the SpamAssassin - Users mailing list archive at

Re: spam score limit adivse

2010-06-04 Thread Jari Fredriksson
On 4.6.2010 18:53, aquero wrote: Hi, What is the maximum allowed spam score value for a legitimate mail? What value should i set as the spam score limit? The default is 5 and that value works best for any installation, as the stock rules are configured using that value. You have it at 2

Re: Will spam-assassin check the mail content?

2010-06-04 Thread Jari Fredriksson
On 4.6.2010 18:40, aquero wrote: I want to know whether spam-assassin will check the mail content also for finding spam score , in its default settings. If not what changes should I make in the configurations for, the spam-assassin to include the mail content , for its spam check. Please

Re: spam score limit adivse

2010-06-04 Thread aquero
Jari Fredriksson wrote: On 4.6.2010 18:53, aquero wrote: Hi, What is the maximum allowed spam score value for a legitimate mail? What value should i set as the spam score limit? The default is 5 and that value works best for any installation, as the stock rules are configured

spam assassin custom rule sets

2010-06-04 Thread aquero
Hi, When i checked the third party softwares for spam-assassin i found many custom rule sets. Do I have to install these rule sets manually? If I perform sa-update, will it will include all these rule sets into my spam-assassin rules list? -- View this message in context:

Re: spam score limit adivse

2010-06-04 Thread NFN Smith
aquero wrote: Hi, What is the maximum allowed spam score value for a legitimate mail? What value should i set as the spam score limit? On my own servers, I lean towards being a little extra conservative. I don't tag subject lines until the score reaches 6. However, if the score gets to

Re: spam assassin custom rule sets

2010-06-04 Thread Jari Fredriksson
On 4.6.2010 19:33, aquero wrote: Hi, When i checked the third party softwares for spam-assassin i found many custom rule sets. Do I have to install these rule sets manually? If I perform sa-update, will it will include all these rule sets into my spam-assassin rules list? sa-update can

Extracting text form .rtf and .doc attachments using Extracttext.pm on SA 3.3.1

2010-06-04 Thread Scott Ostrander
I am using Extracttext from http://whatever.frukt.org/spamassassin.text.shtml#ExtractText.pm It extracts text from attached .rtf .doc and some other formats. Then feeds the results to BAYES and normal body testing. My issues are that it works great with SA 3.2.5, However on the same server it

Re: spam assassin custom rule sets

2010-06-04 Thread Bowie Bailey
aquero wrote: Hi, When i checked the third party softwares for spam-assassin i found many custom rule sets. Do I have to install these rule sets manually? If I perform sa-update, will it will include all these rule sets into my spam-assassin rules list? Before you start adding a bunch of

Re: Updated rules are not regarded

2010-06-04 Thread Adam Katz
On 05/29/2010 05:03 AM, Yves Goergen wrote: Stepping away from the ZMI issue and headig towards the larger picture, what kind of spam are you trying to nail down with this ruleset? What goals did you hope to meet with the ZMI rules? If it's a specific type of spam, can you pastebin an

What are these errors: DNS_FROM_OPENWHOIS RBL FH_DATE_PAST_20XX??

2010-06-04 Thread aquero
Hi, I have installed spam-assassin in my mail server and when i sent mails from my gmail accout i always get these errors. * 2.4 DNS_FROM_OPENWHOIS RBL: Envelope sender listed in bl.open-whois.org. * 3.4 FH_DATE_PAST_20XX The date is grossly in the future. Because of these errors my