Re: Google Drive/Docs spam

Alex kirjoitti 18.2.2016 2:16: Hi, On Wed, Feb 17, 2016 at 4:29 PM, Jari Fredriksson wrote: pts rule name description -- -- 1.5 BOTNET Relay might be a spambot or virusbot

Re: Google Drive/Docs spam

Am 18.02.2016 um 01:16 schrieb Alex: Reindl Harald wrote: 7.5 BAYES_99 BODY: Bayes spam probability is 99 to 100% I can't even imagine almost doubling the bayes score from the default, basically making it a poison pill, when the default score is

Re: Google Drive/Docs spam

Hi, On Wed, Feb 17, 2016 at 4:29 PM, Jari Fredriksson wrote: > Alex kirjoitti 17.2.2016 18:49: >> >> Hi all, >> >> I recall some rules that were written years ago to address these, but >> it appears they're back. We've been hit with a few, including users >> actually following the

Re: Allow User Rules problem

Bowie that was an excellent and definitive explanation of unix user and virtual user. My google searches did not come close to presenting that information. I can set up a few more more domains and associated "virtual" users along with multiples of users associated with any one domain. Also I

Re: Google Drive/Docs spam

Alex kirjoitti 17.2.2016 18:49: Hi all, I recall some rules that were written years ago to address these, but it appears they're back. We've been hit with a few, including users actually following the link. I was hoping someone had some recommendations on how to stop them.

Re: Allow User Rules problem

On 2/17/2016 2:08 PM, Amanda Giarla wrote: Please note that I am working on Training Server not a working server. My mission is to learn how all of the packages work together. There are many - spamassassin, exim, dovecot, clamav, roundcube to name a few It was suggested that I set up a

Re: Google Drive/Docs spam

Am 17.02.2016 um 17:49 schrieb Alex: Hi all, I recall some rules that were written years ago to address these, but it appears they're back. We've been hit with a few, including users actually following the link. I was hoping someone had some recommendations on how to stop them.

Re: Allow User Rules problem

Please note that I am working on Training Server not a working server. My mission is to learn how all of the packages work together. There are many - spamassassin, exim, dovecot, clamav, roundcube to name a few It was suggested that I set up a spamassassin user_prefs file. AND so I have been

Re: Allow User Rules problem

On Tue, 16 Feb 2016 15:47:33 -0800 Amanda Giarla wrote: > > On Tue, Feb 16, 2016 at 3:39 PM, RW > wrote: > > > On Tue, 16 Feb 2016 14:17:02 -0800 > > Amanda Giarla wrote: > > > > > > > I looked at the permission of the user_prefs file and for > > > ownership and

Re: Google Drive/Docs spam

On Wed, 17 Feb 2016, Alex wrote: Hi all, I recall some rules that were written years ago to address these, but it appears they're back. We've been hit with a few, including users actually following the link. I was hoping someone had some recommendations on how to stop them.

Re: Allow User Rules problem

On 16.02.16 15:36, Amanda Giarla wrote: THEN I took the rule:*"blacklist_from *@gmail.com "* out and placed in the rule: *"allow_user_rules 1"* I feel you have missed this: "blacklist_from" is not a rule, it's configuration directive. You do NOT need "allow_user_rules 1" to

Re: Google Drive/Docs spam

Oh, please note I just noticed bayes wasn't consulted for this. It's a new system and was having some database problems, but bayes hasn't always been effective on these anyway. Thanks, Alex On Wed, Feb 17, 2016 at 11:49 AM, Alex wrote: > Hi all, > > I recall some rules

Google Drive/Docs spam

Hi all, I recall some rules that were written years ago to address these, but it appears they're back. We've been hit with a few, including users actually following the link. I was hoping someone had some recommendations on how to stop them. http://pastebin.com/zKWUUQ0Q Obviously they're coming

Re: Allow User Rules problem

You should put all of your changes in /etc/spamassassin/local.cf. All of the files under /var/lib/spamassassin are subject to being replaced when you update the rules. You probably have either a freshclam process running that does periodic updates, or there may be a cron job that calls it on