Re: NO_RELAYS spam

2010-06-18 Thread Matus UHLAR - fantomas
On Thu, 17 Jun 2010, Randy Ramsdell wrote: The original email did not hit the NO_RELAYS rule but subsequent runs through do hit this rule and it isn't on all email. Charles Gregory wrote: This sounds to me like you are 'resending' the mail from a local address to your mail server, rather

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-18 Thread Matus UHLAR - fantomas
On 6/17/2010 2:19 PM, gwilodailo wrote: I've discovered that some mail between two of my clients (on separate hosts) is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm not at all an expert with spamassassin, and I'm having some difficulty finding what this rule is

Re: SpamAssassin Integration

2010-06-18 Thread Gnanam
Martin Gregorie-2 wrote: How are you assembling the message? About the best you can do is to grab it as a text string when the message is ready to be sent to the mail server. At thius point it should contain the headers your program has added and the assembled MIME format body, The string

difference between checking and processing?

2010-06-18 Thread Raphael Bauduin
HI, Can someone explain or point me to a documentation about the difference between checking and processing a message? The two methods are available as you can see in the code here:

Re: difference between checking and processing?

2010-06-18 Thread Daniel Lemke
Raphael Bauduin wrote: Can someone explain or point me to a documentation about the difference between checking and processing a message? Have a look at http://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Client.html#process I'm not exactly sure what the process call works

Re: Writing Spamassassin plugin.

2010-06-18 Thread Karsten Bräckelmann
On Fri, 2010-06-18 at 09:38 +0200, Massimiliano Giovine wrote: Hi all. I'm writing a simple spamassassin plugin that eval just subject but it does not. $self-register_eval_rule (check_header_token); It's an eval() rule. So you also need to define a SA rule, that calls the function. Please

Re: difference between checking and processing?

2010-06-18 Thread RW
On Fri, 18 Jun 2010 03:48:21 -0700 (PDT) Daniel Lemke le...@jam-software.com wrote: Raphael Bauduin wrote: Can someone explain or point me to a documentation about the difference between checking and processing a message? Have a look at

Re: Writing Spamassassin plugin.

2010-06-18 Thread Massimiliano Giovine
Thanks for the answer: I also put 25_myplugin.cf where other plugin's confs are. I wrote on it: if loadplugin myplugin header MY_RULE eval:check_header_token() endif but it does not change spamassassin behaviour. My plugin will be more complex and will do analysis of mail customized headers.

Re: Writing Spamassassin plugin.

2010-06-18 Thread Michael Parker
These might be starting to get dated a little but I think that if you look at the Extending Apache SpamAssassin Using Plugin slides and notes from here: http://people.apache.org/~parker/presentations/index.html That will give you a good idea on what you need to accomplish for your plugin.

Re: Writing Spamassassin plugin.

2010-06-18 Thread Massimiliano Giovine
I read also the first part of that slides with the attached notes. I did exacly the same steps except the configuration parsing (i thought i don't need it, was i wrong?) I logged 2 messages 1 in the new funcion and one in eval rule function: It prints all mesages at spamd restart but not when i

Re: Writing Spamassassin plugin.

2010-06-18 Thread Karsten Bräckelmann
On Fri, 2010-06-18 at 16:38 +0200, Massimiliano Giovine wrote: Thanks for the answer: I also put 25_myplugin.cf where other plugin's confs are. Don't. This will be lost on the next successful sa-update run. Instead, use your site config dir for the custom cf file. if loadplugin myplugin

Re: NO_RELAYS spam

2010-06-18 Thread Randy Ramsdell
Michelle Konzack wrote: Hello Randy Ramsdell, Am 2010-06-17 10:38:08, hacktest Du folgendes herunter: We are getting a ton of this type and it scores low because there are no received headers. What is this type of mail? I do not recall seeing these in the past. Hehehe... sounds like

Re: NO_RELAYS spam

2010-06-18 Thread Randy Ramsdell
David B Funk wrote: On Thu, 17 Jun 2010, Randy Ramsdell wrote: get us added to lists, but Michael stated then, check the blacklists to see how to get removed. as if we are already on a list. We are not. Back to the main issue. Here is an example pastbin. http://pastebin.com/mJqRPzkv I

Re: NO_RELAYS spam

2010-06-18 Thread Randy Ramsdell
Matus UHLAR - fantomas wrote: On Thu, 17 Jun 2010, Randy Ramsdell wrote: The original email did not hit the NO_RELAYS rule but subsequent runs through do hit this rule and it isn't on all email. Charles Gregory wrote: This sounds to me like you are 'resending' the

Re: Writing Spamassassin plugin.

2010-06-18 Thread Massimiliano Giovine
Well. That sounds more clear. Now, where is mysite config dir for the custom cf file? I have to specify one to my spamassassin installation? Can i assign to my rule a so high score to don let the message delivery? OK then. However, is the custom header analysis going to be that complex, that a

Re: Writing Spamassassin plugin.

2010-06-18 Thread Karsten Bräckelmann
On Fri, 2010-06-18 at 17:47 +0200, Massimiliano Giovine wrote: Well. That sounds more clear. Now, where is mysite config dir for the custom cf file? I have to specify one to my spamassassin installation? man spamassassin Your site config dir (since you're on Ubuntu) is /etc/spamassassin,

Re: [sa] Re: NO_RELAYS spam

2010-06-18 Thread Charles Gregory
On Fri, 18 Jun 2010, Randy Ramsdell wrote: I have no problem going over there but I am not convinced that the Amavis program is the problem. The header field is changed by spamassassin. Doesn't the email simply get handed to Spamassasin by Amavis where the headers are modified by spam report

Re: [sa] Re: NO_RELAYS spam

2010-06-18 Thread Randy Ramsdell
Charles Gregory wrote: On Fri, 18 Jun 2010, Randy Ramsdell wrote: I have no problem going over there but I am not convinced that the Amavis program is the problem. The header field is changed by spamassassin. Doesn't the email simply get handed to Spamassasin by Amavis where the headers are

Re: Writing Spamassassin plugin.

2010-06-18 Thread Martin Gregorie
To the OP: here are a couple of, hopefully, useful ideas: 1) If all your new plug-in is intended to do is fish a set of patterns out of the database and run them against the subject line, you may want to look at my 'portmanteau' script, which will probably run faster since the patterns don't need

Re: NO_RELAYS spam

2010-06-18 Thread Karsten Bräckelmann
On Fri, 2010-06-18 at 13:33 -0400, Randy Ramsdell wrote: Charles Gregory wrote: On Fri, 18 Jun 2010, Randy Ramsdell wrote: I have no problem going over there but I am not convinced that the Amavis program is the problem. The header field is changed by spamassassin. Doesn't the email