word doc spam

2009-06-02 Thread Jean-Paul Natola
Hi all, Is there a rule to catch these messages with no body and a 550 bite word attachment? thx The only rule its triggering is the RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address

RE: word doc spam

2009-06-02 Thread Jean-Paul Natola
Correction they are rtf not doc ftp://ftp.fcimail.org/IT/SA_Sample/shambling.rtf -Original Message- From: John Hardin [mailto:jhar...@impsec.org] Sent: Tuesday, June 02, 2009 9:47 AM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: word doc spam On Tue, 2 Jun

unclosed if error

2009-06-22 Thread Jean-Paul Natola
Can someone help me out here I copied this rule from someone here on the list header __CTYPE_MULTIPART_ANY Content-Type =~ /multipart\/\w/i ifplugin Mail::SpamAssassin::Plugin::MIMEHeader mimeheader __ANY_TEXT_ATTACH Content-Type =~ /text\/\w+/i meta MIME_NO_TEXT

RE: unclosed if error

2009-06-22 Thread Jean-Paul Natola
At 08:32 22-06-2009, Jean-Paul Natola wrote: I copied this rule from someone here on the list header __CTYPE_MULTIPART_ANY Content-Type =~ /multipart\/\w/i ifplugin Mail::SpamAssassin::Plugin::MIMEHeader mimeheader __ANY_TEXT_ATTACH Content-Type =~ /text\/\w+/i meta MIME_NO_TEXT

TIMEOUT

2007-09-24 Thread Jean-Paul Natola
Hi all I was just checking headers on messages that were flagged ( by my own rules in outlook) and I'm curious as to what exactly it means _cbl.abuseat.org_TIMEOUT , __dnsbl.njabl.org_TIMEOUT , __sbl.spamhaus.org_TIMEOUT ' Now these emails are by no means spam- they are from the

RE: TIMEOUT

2007-09-26 Thread Jean-Paul Natola
Jean-Paul Natola wrote: Hi all I was just checking headers on messages that were flagged ( by my own rules in outlook) and I'm curious as to what exactly it means I dono, what do your outlook rules do? _cbl.abuseat.org_TIMEOUT , __dnsbl.njabl.org_TIMEOUT

russian spam

2007-12-05 Thread Jean-Paul Natola
Hi all, Is there a plugin and/or rule to block russian spam? Here's a sample Новейшие базы данных * Физические лица Москвы и М О 2006 г. (телефоны, прописка, собственность) 2000 р. * ГАИ Москвы и М О и Р Ф (авто, владельцы, вод/уд, ДТП, ПДД, розыск) 2007 г. 2000 руб. *

RE: russian spam

2007-12-05 Thread Jean-Paul Natola
Jean-Paul Natola schrieb: Hi all, Is there a plugin and/or rule to block russian spam? Here's a sample [...] Jean-Paul I think the key is to give special score for cyrillic chars (unless this doesnt affect your regular mails). Perhaps: ok_locales e.g: ok_locales en But i dont

RE: Exchange Question - OT

2008-02-05 Thread Jean-Paul Natola
I have * I think* what you are looking for, SMTP traffic goes to my bsd then after cleaning, scoring, AV checking , it the hands it to Exchange , However, I use sitewide configs so u would have to setup individual prefs if necessary. Jean-Paul Natola Network Administrator

RE: How to Know

2008-02-19 Thread Jean-Paul Natola
From: Tarak Ranjan [mailto:[EMAIL PROTECTED] Sent: Tue 2/19/2008 7:23 To: Spamassassin Subject: How to Know Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. / Tarak For incoming, look at the

Plugin eval failed

2008-03-13 Thread Jean-Paul Natola
Hi all, I upgraded to sa 3.2.4 And I've been restarting spamd every 15 minutes just to keep mail coming in, This is what is constantly coming up in the maillog plugin: eval failed: child processing timeout at /usr/local/bin/spamd line 1259. Any help would be appreciated Running Freebsd

RE: Plugin eval failed

2008-03-13 Thread Jean-Paul Natola
What other info should I post? -Original Message- From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] Sent: Thursday, March 13, 2008 7:16 PM To: Jean-Paul Natola Cc: SpamAssassin Subject: Re: Plugin eval failed On 13/03/2008 7:08 PM, Jean-Paul Natola wrote: Hi all, I upgraded to sa

RE: Plugin eval failed

2008-03-13 Thread Jean-Paul Natola
: SpamAssassin Subject: Re: Plugin eval failed On 13/03/2008 8:02 PM, Jean-Paul Natola wrote: What other info should I post? The output of vmstat while this is happening. A definition of constantly. Every message, some % of messages? For some common size of messages? Whether it happens when

RE: Plugin eval failed

2008-03-14 Thread Jean-Paul Natola
how to set this either-- 6) Pray that some botnet doesn't latch on to you and obliterate your server! But that's me. I am assuming your system had a working configuration with a stock SA installation. Good luck. Jean-Paul Natola wrote: 1.We have a sitewide config 2

languages

2008-03-18 Thread Jean-Paul Natola
Hi all, I seem to have forgotten where to put acceptable languages in SA We just got a slew of our colleagues from Spain complaining, and when I looked the headers I saw 2.8 UNWANTED_LANGUAGE_BODY BODY: Message written in an undesired language I guess when I had my little SA

RE: Spamassassin Database Question

2008-03-19 Thread Jean-Paul Natola
Hi everyone, I've tried looking this up and i dunno if i missed the part about the explanation or not but i couldn't find it. When training spamassassin with new spam and ham mails does the database need an existing copy of the emails you trained it with in order to work? For instance: i

russian?

2008-03-21 Thread Jean-Paul Natola
I just started getting a rush of these, Coincidentally after adding the 50_blogspot and the 30_software rules and running sa-update ftp://ftp.fcimail.org/samples/russian.txt the second one is in its original Unicode ftp://ftp.fcimail.org/samples/russ.txt J

back hair rule

2008-03-26 Thread Jean-Paul Natola
Hi all, Our president was unable to communicate with one of her colleagues After reviewing the logs , I saw her messages were hitting the backhair rule What exactly is it ? tia j

-2.6 bayes_00

2008-03-28 Thread Jean-Paul Natola
Why does this hit on the most OBVIOUS messages? Its almost an oxymoron How can all these rules get triggered 0.6 J_CHICKENPOX_34BODY: 3alpha-pock-4alpha 0.6 J_CHICKENPOX_64BODY: 6alpha-pock-4alpha 0.6 J_CHICKENPOX_82BODY: 8alpha-pock-2alpha -2.6

RE: -2.6 bayes_00

2008-03-30 Thread Jean-Paul Natola
i've trained SA with about 12000 messages that have made it through the filters , i last trained 1 week ago Jean-Paul From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Sun 3/30/2008 19:22 To: Jean-Paul Natola Cc: users@spamassassin.apache.org

RE: -2.6 bayes_00

2008-03-30 Thread Jean-Paul Natola
i have site-wide config, as I only filter the mail and pass it on to exchange- no ind users setup I run sa-learn --spam --showdots J From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Sun 3/30/2008 21:11 To: Jean-Paul Natola Cc: users

office rule

2008-04-02 Thread Jean-Paul Natola
Hi all, I'd like to create a rule that scores 4 points if the word office is in the From field, or in the subject line Can someone help me there? thx J

RE: office rule

2008-04-02 Thread Jean-Paul Natola
Subject: Re: office rule On Wed, 2008-04-02 at 11:07 -0400, Jean-Paul Natola wrote: Hi all, I'd like to create a rule that scores 4 points if the word office is in the From field, or in the subject line On 02.04.08 21:07, ram wrote: Are you sure want to give 4 ?? Any way YSYR ( your

RE: office rule

2008-04-03 Thread Jean-Paul Natola
ram wrote: On Wed, 2008-04-02 at 10:23 -0700, Kelson wrote: ram wrote: header __FROMOFFICE From =~/office/i header __SUBOFFICE Subject =~/office/i meta OFFICERULE (__FROMOFFICE || __SUBOFFICE ) score OFFICERULE 4.0 And don't forget to add word boundaries. You probably

use_bayes 0 Clarification

2008-04-14 Thread Jean-Paul Natola
If I set the use_bayes 0 Will that negate the training of spam? I've trained sa with approx 7000 spam messages , yet I still get the -2.6 BAYES_00

RE: use_bayes 0 Clarification

2008-04-14 Thread Jean-Paul Natola
Jean-Paul Natola wrote: If I set the use_bayes 0 Will that negate the training of spam? this will disable the use of bayes completely. After setting that, no BAYES_* rules should match any email. I've trained sa with approx 7000 spam messages , yet I still get the -2.6 BAYES_00

netstat info-blacklist IP

2008-04-29 Thread Jean-Paul Natola
I was running in major overloads on my box and I kept noticing entries such as these enewsletter11.ru.2500 TIME_WAIT enewsletter11.ru.2353 ESTABLISHED enewsletter11.ru.2371 TIME_WAIT enewsletter11.ru.2350 ESTABLISHED half of them would eventually time out- SMTP command timeout on

RE: netstat info-blacklist IP

2008-04-29 Thread Jean-Paul Natola
How do I go about shunning the IP - via Exim or via SA? And where if possible -Original Message- From: Jack Pepper [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 29, 2008 11:48 AM To: users@spamassassin.apache.org Subject: Re: netstat info-blacklist IP Quoting Jean-Paul Natola [EMAIL

RE: Connection timed out

2008-05-01 Thread Jean-Paul Natola
OPTIONS=--create-prefs --max-children 5 --helper-home-dir \ --username=mail --socketpath=/var/run/spamd/socket I'm running on a Pentium 4 with hyperthreading, which appears as 2 CPU's to the OSs. There's really only 1 CPU. I wonder if that could have something to do with the trouble.

RE: Connection timed out

2008-05-01 Thread Jean-Paul Natola
-Original Message- From: Ross Boylan [mailto:[EMAIL PROTECTED] Sent: Thursday, May 01, 2008 3:33 PM To: Jean-Paul Natola Cc: [EMAIL PROTECTED]; SpamAssassin Subject: RE: Connection timed out On Thu, 2008-05-01 at 13:54 -0400, Jean-Paul Natola wrote: OPTIONS=--create-prefs --max

traveling user unable to email

2006-07-25 Thread Jean-Paul Natola
are set to ebrazier So Forged MUA appeaers to be due to the fact that something is registering her as ekb not ebrazier but what is the invalidity in the MSGID? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone

RE: traveling user unable to email

2006-07-25 Thread Jean-Paul Natola
-Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 4:01 PM To: Jean-Paul Natola; users@spamassassin.apache.org Subject: Re: traveling user unable to email Jean-Paul Natola wrote: Hi all I have a user that is now in Africa and she is unable

RE: traveling user unable to email

2006-07-25 Thread Jean-Paul Natola
-Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 4:19 PM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: traveling user unable to email Jean-Paul Natola wrote: I'm really getting frustrated here I whitelisted all

RE: traveling user unable to email

2006-07-25 Thread Jean-Paul Natola
-Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 4:53 PM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: traveling user unable to email Jean-Paul Natola wrote: -Original Message- From: Stuart Johnston

KAM_UNIV

2006-08-01 Thread Jean-Paul Natola
2.2 RCVD_IN_WHOIS_INVALID RBL: CompleteWhois: sender on invalid IP block [149.120.224.3 listed in combined-HIB.dnsiplists.completewhois.com] 3.5 KAM_UNIV Diploma Mill Rule Jean-Paul Natola Network Administrator Information Technology Family Care

RE: How can I (we) get rid of this?

2006-08-21 Thread Jean-Paul Natola
-Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Monday, August 21, 2006 11:05 AM To: users@spamassassin.apache.org Subject: Re: How can I (we) get rid of this? Anders Norrbring wrote: Hiya all! I'm getting really sick on recieving 10-100 of the attached mails

RE: SA-LEARN Question

2006-08-22 Thread Jean-Paul Natola
Wouldnt forwarding strip away header info that is used to train spam? From: Christopher Mills [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 22, 2006 9:22 AM To: users@spamassassin.apache.org Subject: SA-LEARN Question Hi, We have over 100 domains on a server, all of

RE: How can I (we) get rid of this?

2006-08-22 Thread Jean-Paul Natola
-Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Monday, August 21, 2006 12:50 PM To: users@spamassassin.apache.org Subject: Re: How can I (we) get rid of this? On Mon, Aug 21, 2006 at 11:52:04AM -0400, Jean-Paul Natola wrote: I'm getting an error when

RE: How can I (we) get rid of this?

2006-08-22 Thread Jean-Paul Natola
-Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 22, 2006 2:07 PM To: users@spamassassin.apache.org Subject: Re: How can I (we) get rid of this? On Tue, Aug 22, 2006 at 02:01:38PM -0400, Jean-Paul Natola wrote: Ok I have installed the indicated

RE: Train from Outlook?

2006-08-23 Thread Jean-Paul Natola
IMAP2MBOX You take the mail from the junk folder , run imap2mbox, take that mbox file and use it to train SA But Im not sure what you are referring to as far as the web server From: Christopher Mills [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 8:07 AM To:

RE: Train from Outlook?

2006-08-23 Thread Jean-Paul Natola
: Steven Manross [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 1:35 PM To: Jean-Paul Natola; Christopher Mills; users@spamassassin.apache.org Subject: RE: Train from Outlook? Matt Yackley wrote/co-authored (not sure which), a plugin for Outlook that moves the messages to a public folder

RE: Train from Outlook?

2006-08-23 Thread Jean-Paul Natola
SLOW DOWN!! Thats sounds like an awful lot when you can just let imap2mbox do it all. Imap2mbox does everything for you , except moving the messages to the folder http://www.byteplant.com/support/nospamtoday/howtolearnexchange.html

RE: Train from Outlook?

2006-08-23 Thread Jean-Paul Natola
solution works. If you are running SA on a windows box your solution works. From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 12:24 PM To: users@spamassassin.apache.org Subject: RE: Train from Outlook? SLOW DOWN!! Thats sounds like an awful lot when

accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
Hi all , I recently upgraded to sa-3.3.0 and I think my blacklists aren't working, I'm getting nailed from servers around the globe that are on the DNSBL list, I did run sa-update after the upgrade How can I confirm that the BL rules are working

RE: accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
From: Jean-Paul Natola [mailto:jnat...@familycareintl.org] Sent: Tuesday, April 13, 2010 2:05 PM To: 'users@spamassassin.apache.org' Subject: accepted connection from DNSBL's Hi all , I recently upgraded to sa-3.3.0  and I think my blacklists aren't

RE: accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
-Original Message- From: Jason Bertoch [mailto:ja...@i6ix.com] Sent: Tuesday, April 13, 2010 2:27 PM To: users@spamassassin.apache.org Subject: Re: accepted connection from DNSBL's On 2010/04/13 2:11 PM, Jean-Paul Natola wrote: ... I think my blacklists aren't working... ...I'm

RE: accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
-Original Message- From: Jason Bertoch [mailto:ja...@i6ix.com] Sent: Tuesday, April 13, 2010 2:53 PM To: users@spamassassin.apache.org Subject: Re: accepted connection from DNSBL's On 2010/04/13 2:38 PM, Jean-Paul Natola wrote: Well just to confirm I have taken the IP addresses

applying patch

2010-05-18 Thread Jean-Paul Natola
How do apply an SA patch, Running SA on FreeeBSD thx Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 136 Fax: 212-941-5563 Mailto: jnat...@familycareintl.org

RE: applying patch

2010-05-18 Thread Jean-Paul Natola
I setup this box YEARS ago, and only updated the versions of sa exim and clamav, (this only filters my mail before it hands it off to my exchange server. But lately its been timing out a lot, and I read there's a patch to address this issue Freebsd exim clam and sa sw config 3.3

RE: Spamassasin as a gateway filter for Exchange

2010-05-19 Thread Jean-Paul Natola
Can anybody point me in the diretion of a document or place where I could find information about setting up a solo Linux Debian server running spamassassin as a gateway spam filter that sends the mail along to an exchange server? I have that exact setup , but I have it running on

RE: Spamassasin as a gateway filter for Exchange

2010-05-19 Thread Jean-Paul Natola
The only real problem, validating recipients at the front MX, based on the data in the backend Exchange servers. I think it would be easier to just accept only emails for your domain(s) at your mta (postfix or exim), then enable the antispam filter on exchange and configure it drop (not

RE: Spamassasin as a gateway filter for Exchange

2010-05-20 Thread Jean-Paul Natola
You can use Postfix's probing (or Exim's callout) to query the Exchange 'server' provided it is set up to reject invalid recipients. As pointed out if this is not done Exchange will happily take any old rubbish and bounce it some time later. Alternatively have the MTA make an LDAP callout to AD.

RE: Spamassasin as a gateway filter for Exchange

2010-05-20 Thread Jean-Paul Natola
-Original Message- I think it would be easier to just accept only emails for your domain(s) at your mta (postfix or exim), then enable the antispam filter on exchange and configure it drop (not reject / bounce) any messages to invalid addresses. That's a very bad idea-- legitimate

remmonded max children settings

2010-05-21 Thread Jean-Paul Natola
Hi all, I am constantly getting the server reached --max children setting entries in my log I started with 10 max children and have been raising it by 2. I am now at 40 , but still getting the messages (though not as often) how high can I go given these specs: sa 3.3 on freebsd ,

RE: remmonded max children settings

2010-05-21 Thread Jean-Paul Natola
On Fri, 21 May 2010, Bowie Bailey wrote: Jean-Paul Natola wrote: Hi all, I am constantly getting the server reached --max children setting entries in my log I started with 10 max children and have been raising it by 2. I am now at 40 , but still getting the messages (though

removing old/stale rules

2010-06-11 Thread Jean-Paul Natola
Hi all, Since my upgrade to 3.3.1, I see when running, sa -lint -D that there's a bunch of stuff, I assume are no longer used? Like the entry below Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for non-existent rule AXB_HELO_LH_HOME Is there a way to just start clean?

RE: removing old/stale rules

2010-06-11 Thread Jean-Paul Natola
] Sent: Friday, June 11, 2010 3:03 PM To: users@spamassassin.apache.org Subject: Re: removing old/stale rules On 6/11/10 1:00 PM, Jean-Paul Natola wrote: Hi all, Since my upgrade to 3.3.1, I see when running, sa –lint –D that there’s a bunch of stuff, I assume are no longer used? Like

where rule resides/ and scored

2006-11-07 Thread Jean-Paul Natola
Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: where rule resides/ and scored-Clarification

2006-11-07 Thread Jean-Paul Natola
tolerating me folks :) -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 1:54 PM To: users@spamassassin.apache.org Subject: Re: where rule resides/ and scored On Tue, Nov 07, 2006 at 01:38:56PM -0500, Jean-Paul Natola wrote: I want

test

2006-11-08 Thread Jean-Paul Natola
disregard Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

SA-STATS on BSD

2006-11-08 Thread Jean-Paul Natola
Hi everyone, I've tried on apache and SARE and bsd sites to find the documentation on installing sa-stats , I have found the the actual sa-stats.pl but I dont know how to go about installing it on BSD any guidance would be appreciated. Freebsd 5.4 exim sa 3.1.7 Jean-Paul

RE: SA-STATS on BSD

2006-11-09 Thread Jean-Paul Natola
-Original Message- From: Odhiambo WASHINGTON [mailto:[EMAIL PROTECTED] Sent: Thursday, November 09, 2006 9:30 AM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: SA-STATS on BSD * On 08/11/06 19:15 -0500, Jean-Paul Natola wrote: | Hi everyone, | | I've tried

MAILLOG

2006-11-09 Thread Jean-Paul Natola
Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: MAILLOG

2006-11-09 Thread Jean-Paul Natola
Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED] From: Kris Deugau [mailto:[EMAIL PROTECTED

RE: MAILLOG

2006-11-10 Thread Jean-Paul Natola
I see that spamstats as well as sa-stats both read/process/parse/examine only maillog files I do not have a maillog file. Thats one way to it. A better way would be to use exim and the eximstats package. That way you can count all the mail that exim blocks via RBL, sender verify and other

different threshold for one address

2006-11-15 Thread Jean-Paul Natola
an email to [EMAIL PROTECTED] with the word bounced in the subject line Or something along those lines, I thought of whitelisting the address but that's will kill my machines. Any thoughts/ideas/suggestions would be greatly appreciated Jean-Paul Natola Network Administrator Information

RE: different threshold for one address

2006-11-15 Thread Jean-Paul Natola
-Original Message- My goal is to is have one email address bounces@ , which can have a different score threshold than the system- in other words , anything that now comes in and scores higher than 6.0 is considered spam and rejected- I would like to have bounces@ set to lets say

RE: different threshold for one address

2006-11-15 Thread Jean-Paul Natola
-Original Message- From: Peter H. Lemieux [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 15, 2006 2:24 PM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: different threshold for one address Jean-Paul Natola wrote: My goal is to is have one email address bounces

RE: different threshold for one address

2006-11-16 Thread Jean-Paul Natola
Jean-Paul Natola wrote: My goal is to is have one email address bounces@ , which can have a different score threshold than the system- Create a file /etc/mail/spamassassin/whitelist.cf that contains this rule: header TO_BOUNCES To =~ /bounces\@/i description TO_BOUNCES Whitelist mail

RE: different threshold for one address

2006-11-16 Thread Jean-Paul Natola
Jean-Paul Natola wrote: My goal is to is have one email address bounces@ , which can have a different score threshold than the system- Create a file /etc/mail/spamassassin/whitelist.cf that contains this rule: header TO_BOUNCES To =~ /bounces\@/i description TO_BOUNCES Whitelist mail

RE: different threshold for one address

2006-11-16 Thread Jean-Paul Natola
Jean-Paul Natola wrote: header TO_BOUNCES To =~ /bounces\@/i description TO_BOUNCESWhitelist mail to bounces mailbox score TO_BOUNCES -6 I really hate to be a pain, but how would a add a criteria for the subject line as well, so that ONLY messages sent to bounces

webg bug

2006-11-30 Thread Jean-Paul Natola
-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: webg bug

2006-11-30 Thread Jean-Paul Natola
I was wondering if there is a way to either strip away, or totally block messages that have web bugs that report back to servers like www.readnotify.com plug type=shameless http://www.impsec.org/email-tools/procmail-security.html /plug Can someone help a newbie find some info on

spamstats incomplete

2006-12-05 Thread Jean-Paul Natola
: 20.42 Average clean message score :-16.28 Total spam volume : 6 Mbytes Total clean volume :38 Mbytes Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway

RE: spamstats incomplete

2006-12-05 Thread Jean-Paul Natola
As you can see its still reading from /var/log/maillog but data is not complete. File /var/log/maillog : from Dec 5 00:00:00 to Dec 5 11:33:44 Total number of emails processed by the spam filter : 0 Number of spams : n/a Number of clean messages:

deny messageID

2006-12-07 Thread Jean-Paul Natola
] rejectlog:I Message-Id: [EMAIL PROTECTED] rejectlog:I Message-Id: [EMAIL PROTECTED] rejectlog:I Message-Id: [EMAIL PROTECTED] Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941

RE: New to Spamassassin

2006-12-07 Thread Jean-Paul Natola
I would like to know if it is possible to use spamassassin on one server to filter mail and then deliver it to a seperate mail server on the network running exchange, groupwise, etc? YES I use it to filter my mail - then pass it to exchange- But the server that has SA must have an MTA and

blacklist messagID ?

2006-12-07 Thread Jean-Paul Natola
Apparently a remote server is having issues- It keeps sending this message here- [EMAIL PROTECTED] Can I blacklist a message without blacklisting the sender? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012

RE: blacklist messagID ?

2006-12-07 Thread Jean-Paul Natola
Subject: Re: blacklist messagID ? On Thu, 2006-12-07 at 16:00 -0500, Jean-Paul Natola wrote: Apparently a remote server is having issues- It keeps sending this message here- [EMAIL PROTECTED] Can I blacklist a message without blacklisting the sender? Is the sending host someone that you

RE: blacklist messagID ?

2006-12-07 Thread Jean-Paul Natola
Apparently a remote server is having issues- It keeps sending this message here- [EMAIL PROTECTED] Can I blacklist a message without blacklisting the sender? Sure. Write a rule for that message-ID header and give it a score of 1000 or so (adding insult to injury). I'm not exactly well

RE: blacklist messagID ?

2006-12-07 Thread Jean-Paul Natola
On Thu, 7 Dec 2006, Jean-Paul Natola wrote: Apparently a remote server is having issues- It keeps sending this message here- [EMAIL PROTECTED] Can I blacklist a message without blacklisting the sender? Sure. Write a rule for that message-ID header

RE: blacklist messagID ?

2006-12-08 Thread Jean-Paul Natola
Can I blacklist a message without blacklisting the sender? Sure. Write a rule for that message-ID header and give it a score of 1000 or so (adding insult to injury). I'm not exactly well versed, scratch that , I DO NOT KNOW how to write rules :( Any help please? header

TMDA SA

2006-12-08 Thread Jean-Paul Natola
Is anyone on here using , or have any comments/feedback regarding the use of TMDA SA ? http://wiki.tmda.net/SpamAssassin?highlight=%28spamassassin%29 Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone

RE: TMDA SA

2006-12-08 Thread Jean-Paul Natola
Jean-Paul Natola wrote: Is anyone on here using , or have any comments/feedback regarding the use of TMDA SA ? http://wiki.tmda.net/SpamAssassin?highlight=%28spamassassin%29 Yes. Don't use challenge response. Here is a good write-up/rant about the evils of it. http://linuxmafia.com/faq

RE: TMDA SA

2006-12-08 Thread Jean-Paul Natola
Jean-Paul Natola wrote: I'm a bit confused here (what else is new) is there a difference between Challenge-Response and Sender address Verification? Some articles say they are two -different animals other say yes they are the same They are completely different animals. In terse summary

RE: This seen on Dice

2006-12-08 Thread Jean-Paul Natola
From: Philip Prindeville [mailto:[EMAIL PROTECTED] Any takers? ;-) http://seeker.dice.com/seeker.epl?rel_code=1102op=5type=14docke y=xml/7/a/[EMAIL PROTECTED]bb=0source=15 Aaaah! I need a telecommuter and I don't even know what's it... g Maybe they are setting a trap for spammers?

RE: This seen on Dice

2006-12-08 Thread Jean-Paul Natola
Any takers? ;-) http://seeker.dice.com/seeker.epl?rel_code=1102op=5type=14dockey=xml/7/a /[EMAIL PROTECTED]bb=0source=15 I guess we know who is job hunting :)

Spamd error

2006-12-12 Thread Jean-Paul Natola
out Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

non existant directory errors

2006-12-20 Thread Jean-Paul Natola
- Here's the excerpt from the page- If you're not doing per-user configs, create yourself a spamd user, and pass that to spamd's -u, then use that user for your sa-learning, and housing your user_prefs, etc. if this is the resolution for me- how do I pass to spamd -u Jean-Paul Natola

RE: non existent directory errors

2006-12-21 Thread Jean-Paul Natola
On Wed, Dec 20, 2006 at 04:32:41PM -0500, Jean-Paul Natola wrote: I'm noticing a lot of entries in my maillog regarding a non-existent directory It means that some user calling spamd has a homedir set to /nonexistant. I do not have per-user config- and spamd runs as root- So you're running

RE: non existent directory errors

2006-12-21 Thread Jean-Paul Natola
On Thu, Dec 21, 2006 at 10:26:16AM -0500, Jean-Paul Natola wrote: No I have not modified the AWL path- actually that's where I'm really confused I see that spamd's home dire is spamd:*:58:58:SpamAssassin user:/var/spool/spamd:/sbin/nologin is that what I need to change? No, that's

RE: non existent directory errors

2006-12-21 Thread Jean-Paul Natola
On Thu, Dec 21, 2006 at 11:50:02AM -0500, Jean-Paul Natola wrote: trying to access the calling user's home directory, so you need to set things like bayes_path and auto_whitelist_path when running in a site-wide config. So now where do I make these adjustments, is the local.cf ? Yes. Can

-u spamd syntax

2006-12-28 Thread Jean-Paul Natola
Is this the correct syntax for my rc.conf spamd_enable=YES spamd_flags=-c -u spamd -H /var/spool/spamd/spamassassin freebsd 5.4 sa 3.1.7 Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941

test

2006-12-28 Thread Jean-Paul Natola
disregard Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: Features exist???

2007-02-02 Thread Jean-Paul Natola
SpamAssassin v3.1.7 I would like to know how to either use Regex on a subject line or to ban an IP range. Not sure I follow you but - if you want to deny an IP range you could do that at the MTA level - why even let it get to SA? Possible?? If not, why not? These would be great features...

RE: spamd child processing timeout

2007-03-15 Thread Jean-Paul Natola
-Original Message- From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] Sent: Thursday, March 15, 2007 11:51 AM To: Sandeep Agarwal Cc: users@spamassassin.apache.org Subject: Re: spamd child processing timeout Sandeep Agarwal wrote: On 3/7/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote:

RE: Just a general question

2007-03-23 Thread Jean-Paul Natola
maillist wrote: I've been on this mail list only for a few months now, and am wondering if I am the smallest guy here. I often have questions, and usually find the answer just by browsing in past mails, which is really cool. I see most of the folks that are questioning/replying are

RE: Anyone else seeing a large rise in spam?

2007-03-27 Thread Jean-Paul Natola
Nigel Frankcom wrote: Hi All, As per the title, I'm seeing a pretty big rise this last week. So far this week has seen the most spam I've ever had to deal with in over 10 years. RBLs and SA are catching more, as is greylisting. That said, yesterday saw double my 'usual' amount of spam.

spamhaus / whitelist

2007-03-27 Thread Jean-Paul Natola
://www.spamhaus.org/SBL/sbl.lasso?query=SBL52368 What fix can I do to enable him to send to us again Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: Sunday Morning Email Geek

2007-04-01 Thread Jean-Paul Natola
Here it is Sunday morning and I'm playing with the email server!!! lol! Oh well! Anyways, here's a question: I edited my local.cf to change the spam score from 7.5 to 5.0 When I tail maillog, I still see required score 7.5. I am using sendmail, spamd, spamass-milter. When I make a change, is

  1   2   >