Re: SpamAssassin Integration

2010-06-17 Thread Gnanam
Jari Fredriksson wrote: You need to prepare a valid looking email message from the text the web app produces. It needs all the required headers before the actual body of text to work. You may need to study SMTP RFC's to get it right, the simple looking headers like Date: and Received:

Re: SpamAssassin Integration

2010-06-17 Thread Gnanam
Frank Heydlauf-2 wrote: Would this really help? Could you tell us a bit more about your problem itself? The reason I ask is: the mailbody is a very small part of what is commonly used for antispam measures. Header is added afterwards, IP is not yet known, HELO is not known, no

Re: SpamAssassin Integration

2010-06-17 Thread Frank Heydlauf
On Thu, Jun 17, 2010 at 12:17:10AM -0700, Gnanam wrote: Can SpamAssassin be used to test spam score of .html, .txt file extension types, that is email body/content part of the email message? that will not give you the output you'd expect. Just create a complete mail with header and

Re: SpamAssassin Integration

2010-06-17 Thread Gnanam
Frank Heydlauf-2 wrote: that will not give you the output you'd expect. Just create a complete mail with header and mime-encoded multipart etc and feed this into SA. How do I create a complete mail with header, etc.? Is there any standard/rule for creating a complete email message that

Re: SpamAssassin Integration

2010-06-17 Thread Matus UHLAR - fantomas
Frank Heydlauf-2 wrote: that will not give you the output you'd expect. Just create a complete mail with header and mime-encoded multipart etc and feed this into SA. On 17.06.10 05:02, Gnanam wrote: How do I create a complete mail with header, etc.? Is there any standard/rule for

Re: SpamAssassin Integration

2010-06-17 Thread Matt Kettler
On 6/17/2010 8:02 AM, Gnanam wrote: Frank Heydlauf-2 wrote: that will not give you the output you'd expect. Just create a complete mail with header and mime-encoded multipart etc and feed this into SA. How do I create a complete mail with header, etc.? Is there any standard/rule

Re: SpamAssassin Integration

2010-06-17 Thread Martin Gregorie
On Thu, 2010-06-17 at 05:02 -0700, Gnanam wrote: Frank Heydlauf-2 wrote: that will not give you the output you'd expect. Just create a complete mail with header and mime-encoded multipart etc and feed this into SA. How do I create a complete mail with header, etc.? Is there any

NO_RELAYS spam

2010-06-17 Thread Randy Ramsdell
We are getting a ton of this type and it scores low because there are no received headers. What is this type of mail? I do not recall seeing these in the past. Thanks, RCR

Re: SpamAssassin Integration

2010-06-17 Thread SM
At 05:18 17-06-10, Matt Kettler wrote: The best docs would be the RFC standards: RFC 2822 Internet Message Format RFC 822 (obsoleted by above, but sometimes useful for understanding the history of the format, making intent clearer.) RFC 2822 obsoleted by RFC 5322. Regards, -sm

Re: NO_RELAYS spam

2010-06-17 Thread Michael Scheidell
On 6/17/10 10:38 AM, Randy Ramsdell wrote: We are getting a ton of this type and it scores low because there are no received headers. What is this type of mail? I do not recall seeing these in the past. its coming from you then :-( or, your mail server is stripping out or not adding

Re: NO_RELAYS spam

2010-06-17 Thread Randy Ramsdell
Michael Scheidell wrote: On 6/17/10 10:38 AM, Randy Ramsdell wrote: We are getting a ton of this type and it scores low because there are no received headers. What is this type of mail? I do not recall seeing these in the past. its coming from you then :-( or, your mail server is stripping

Re: NO_RELAYS spam

2010-06-17 Thread Randy Ramsdell
Michael Scheidell wrote: On 6/17/10 10:38 AM, Randy Ramsdell wrote: We are getting a ton of this type and it scores low because there are no received headers. What is this type of mail? I do not recall seeing these in the past. its coming from you then :-( or, your mail server is stripping

Re: NO_RELAYS spam

2010-06-17 Thread Michael Scheidell
On 6/17/10 11:31 AM, Randy Ramsdell wrote: I just checked our spam reports and this rule never hits. It is not locally generated email either or I can not find any coming from us. This is an strange issue and I am not where to begin to determine what is doing this. if you have an insecure

Re: NO_RELAYS spam

2010-06-17 Thread Randy Ramsdell
Michael Scheidell wrote: On 6/17/10 11:31 AM, Randy Ramsdell wrote: I just checked our spam reports and this rule never hits. It is not locally generated email either or I can not find any coming from us. This is an strange issue and I am not where to begin to determine what is doing this.

Re: NO_RELAYS spam

2010-06-17 Thread Charles Gregory
On Thu, 17 Jun 2010, Randy Ramsdell wrote: The original email did not hit the NO_RELAYS rule but subsequent runs through do hit this rule and it isn't on all email. This sounds to me like you are 'resending' the mail from a local address to your mail server, rather than 'feeding' the original

Re: NO_RELAYS spam

2010-06-17 Thread Randy Ramsdell
Charles Gregory wrote: On Thu, 17 Jun 2010, Randy Ramsdell wrote: The original email did not hit the NO_RELAYS rule but subsequent runs through do hit this rule and it isn't on all email. This sounds to me like you are 'resending' the mail from a local address to your mail server, rather

Re: SpamAssassin Integration

2010-06-17 Thread Jari Fredriksson
On 17.6.2010 9:19, Gnanam wrote: BTW, what does PGP mean that I found from your signature? http://en.wikipedia.org/wiki/Pretty_Good_Privacy -- http://www.iki.fi/jarif/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. O, it is excellent To have

Re: NO_RELAYS spam

2010-06-17 Thread Charles Gregory
On Thu, 17 Jun 2010, Randy Ramsdell wrote: Hmmm, this mail came in and went straight to the users inbox. 1. Postfix --- 2. Amavis ( Spamd/Clamd) --- 3. Postfix --- 4. Dovecot-deliver So the problem is somewhere during the 2 --- 3 or step 3 or 4. Step 4 it is unlikely since Deliver simply

Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-17 Thread gwilodailo
Hello all, I've discovered that some mail between two of my clients (on separate hosts) is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm not at all an expert with spamassassin, and I'm having some difficulty finding what this rule is about and what to do about it. Any

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-17 Thread Charles Gregory
On Thu, 17 Jun 2010, gwilodailo wrote: I've discovered that some mail between two of my clients (on separate hosts) is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm not at all an expert with spamassassin, and I'm having some difficulty finding what this rule is about

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-17 Thread Lee Dilkie
the rule is flagging the fact that the servers are using non-assigned address space. On 6/17/2010 2:19 PM, gwilodailo wrote: Hello all, I've discovered that some mail between two of my clients (on separate hosts) is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA).

Re: NO_RELAYS spam

2010-06-17 Thread David B Funk
On Thu, 17 Jun 2010, Randy Ramsdell wrote: get us added to lists, but Michael stated then, check the blacklists to see how to get removed. as if we are already on a list. We are not. Back to the main issue. Here is an example pastbin. http://pastebin.com/mJqRPzkv I found this message in

Re: NO_RELAYS spam

2010-06-17 Thread Michelle Konzack
Hello Randy Ramsdell, Am 2010-06-17 10:38:08, hacktest Du folgendes herunter: We are getting a ton of this type and it scores low because there are no received headers. What is this type of mail? I do not recall seeing these in the past. Hehehe... sounds like a new customer of me... His