ClamAVPlugin for windows

2006-10-11 Thread Suhas \(QualiSpace\)
Hello, I am running SA on windows platform. From where do I get ClamAVPlugin for SA to run on Win32 environment? Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 -

How to disable this?

2006-10-12 Thread Suhas \(QualiSpace\)
I dont want all this to be displayed in the email. From where do I remove it? FYI I am running SA 3.0.1 on windows platform. Spam detection software, running on the system mirackle1, has identified this incoming email as possible spam.The original message has been attached to this

RE: How to disable this?

2006-10-13 Thread Suhas \(QualiSpace\)
this? Suhas (QualiSpace) wrote: I don't want all this to be displayed in the email. From where do I remove it? FYI I am running SA 3.0.1 on windows platform. Spam detection software, running on the system mirackle1, has identified this incoming email as possible spam. The original message has

RE: How to disable this?

2006-10-13 Thread Suhas \(QualiSpace\)
12, 2006 10:54 PM To: users@spamassassin.apache.org Subject: RE: How to disable this? Suhas (QualiSpace) wrote: I don't want all this to be displayed in the email. From where do I remove it? FYI I am running SA 3.0.1 on windows platform. Spam detection software, running on the system

Message not flagged as spam

2006-10-13 Thread Suhas \(QualiSpace\)
Hello, Can anybody explain me why SA did not flagged this message as spam? X-Spam-Status: No, score=-81.0 required=4.5 tests=BAYES_40,HELO_DYNAMIC_HCC, HELO_DYNAMIC_IPADDR2,HTML_90_100,HTML_FONT_BIG,HTML_IMAGE_ONLY_08,

RE: Message not flagged as spam

2006-10-13 Thread Suhas \(QualiSpace\)
@spamassassin.apache.org Subject: Re: Message not flagged as spam On Oct 13, 2006, at 4:11 AM, Suhas (QualiSpace) wrote: Can anybody explain me why SA did not flagged this message as spam? X-Spam-Status: No, score=-81.0 required=4.5 tests=BAYES_40,HELO_DYNAMIC_HCC, HELO_DYNAMIC_IPADDR2,HTML_90_100

RE: Increase in Spam

2006-10-13 Thread Suhas \(QualiSpace\)
wrote: On Fri, Oct 13, 2006 at 09:35:33PM +0530, Suhas (QualiSpace) wrote: I have added those to the local.cf but doesn't seems to be working, what could be the reason? These rule score adjustments depend on having added some of the SARE rules; I'm not sure which set they're from

BOGUS_ATTACH_SCAN

2006-10-14 Thread Suhas \(QualiSpace\)
Anyone aware of BOGUS_ATTACH_SCAN , how it helps? From where to get it? I need a rule which will scan zip attachment and report if it is password protected. Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India:

Disable ALL_TRUSTED

2006-10-14 Thread Suhas \(QualiSpace\)
How to disable ALL_TRUSTED ? Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com

senders domain has MX or not?

2006-10-14 Thread Suhas \(QualiSpace\)
Hello, Which rule will help me in checking if senders domain has MX record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule should check whether domain.com has an MX record or not. Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages

ALL_TRUSTED creating a problem

2006-10-16 Thread Suhas \(QualiSpace\)
Hello, Most of the spam emails are getting through due to ALL_TRUSTED. If ALL_TRUSTED (is reducing the score) was not there then they might have caught by SA. What can be the solution on this; I havent declared any trusted networks yet and using the default setting. I am using SA 3.0.1.

RE: ALL_TRUSTED creating a problem

2006-10-16 Thread Suhas \(QualiSpace\)
Subject: Re: ALL_TRUSTED creating a problem On Monday 16 October 2006 13:32, Suhas (QualiSpace) took the opportunity to say: Most of the spam emails are getting through due to ALL_TRUSTED. If ALL_TRUSTED (is reducing the score) was not there then they might have caught by SA. What can

RE: [Sare-users] ImageInfo.pm and config files

2006-10-17 Thread Suhas \(QualiSpace\)
From where do I obtain imageinfo.cf? Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any

RE: This image is turning frequent..

2006-10-17 Thread Suhas \(QualiSpace\)
Even I am getting lot of those. Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any

RE: This image is turning frequent..

2006-10-18 Thread Suhas \(QualiSpace\)
Even I did the same thing and it worked pretty well. Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com

Spam and Virus attacks on my server

2006-10-19 Thread Suhas \(QualiSpace\)
Hi friends, I am getting lot of virus/spam mails with the subject Mail server report. Have any body cracked any rules for such spam? Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel

RE: Spam and Virus attacks on my server

2006-10-19 Thread Suhas \(QualiSpace\)
@spamassassin.apache.org Subject: Re: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Hi friends, I am getting lot of virus/spam mails with the subject Mail server report. Have any body cracked any rules for such spam? They're viruses.. I'd suggest clamav.

RE: Spam and Virus attacks on my server

2006-10-19 Thread Suhas \(QualiSpace\)
forum: http://forum.qualispace.com -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 5:35 PM To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Hi

FW: Spam and Virus attacks on my server

2006-10-19 Thread Suhas \(QualiSpace\)
Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Suhas (QualiSpace) [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 5:45 PM To: 'Giampaolo Tomassoni' Cc: users@spamassassin.apache.org

RE: FW: Spam and Virus attacks on my server

2006-10-19 Thread Suhas \(QualiSpace\)
-Original Message- From: David f. [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 6:21 PM Cc: users@spamassassin.apache.org Subject: Re: FW: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Waiting for it. Very urgent Warm Regards, Suhas System Admin QualiSpace

RE: Spam and Virus attacks on my server

2006-10-19 Thread Suhas \(QualiSpace\)
: Spam and Virus attacks on my server Suhas (QualiSpace) wrote: Can anybody help me in writing a rule to score the mails with subject Mail Server Report? I am using SA 3.0.1 (windows version) Here's a rule for ya: header L_SUBJ_SRV_RPT Subject =~ /Mail Server Report/i describe

How to block these

2006-10-20 Thread Suhas \(QualiSpace\)
I am getting lots of mails like this. How to block it? Subject: Good day The message contains Unicode characters and has been sent as a binary attachment. Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India:

RE: How to block these

2006-10-20 Thread Suhas \(QualiSpace\)
Even it is getting slipped thru the AV Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For

MSGID_SPAM_LETTERS

2006-10-29 Thread Suhas \(QualiSpace\)
What does MSGID_SPAM_LETTERS mean? Can I increase the core for this? Will it lead to false positives? Since last two weeks we are getting lot of spam emails. I found that all these mails has one thing in common which hits MSGID_SPAM_LETTERS. Warm Regards, Suhas System

FW: MSGID_SPAM_LETTERS

2006-10-30 Thread Suhas \(QualiSpace\)
=== For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com From: Suhas (QualiSpace) [mailto:[EMAIL PROTECTED] Sent: Monday, October 30, 2006 12:29 PM To: users

RE: FW: MSGID_SPAM_LETTERS

2006-10-30 Thread Suhas \(QualiSpace\)
-Original Message- From: nick [mailto:[EMAIL PROTECTED] Sent: Monday, October 30, 2006 10:07 PM To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: FW: MSGID_SPAM_LETTERS Suhas (QualiSpace) wrote: Expecting some feedback on this. Thanks Warm Regards

RE: FW: MSGID_SPAM_LETTERS

2006-10-30 Thread Suhas \(QualiSpace\)
MSGID_SPAM_LETTERS /var/log/maillog* or whatever your log is, and see what it's hitting. If it's not hitting any ham, then you might be okay raising the score a bit. Note this isn't a scientific, nor thourough check, so ymmv.. Ken A Pacific.Net Suhas (QualiSpace) wrote: Hi friends, I just wanted

How do i catch this

2006-11-01 Thread Suhas \(QualiSpace\)
Hi, How do I catch these types of mails? Received: from wk-2022 [125.92.211.28] by ourdomain.com (SMTPD-8.22) id AF800E44; Wed, 01 Nov 2006 01:32:32 -0500 Received: (qmail 1474 invoked by uid 0); Wed, 1 Nov 2006 14:30:22 -) Received: from unknown (HELO evmneyumjf) (192.168.1.7)

RE: How do i catch this

2006-11-01 Thread Suhas \(QualiSpace\)
@spamassassin.apache.org Subject: Re: How do i catch this On Wed, November 1, 2006 09:27, Suhas \(QualiSpace\) wrote: How do I catch these types of mails? Received: from wk-2022 [125.92.211.28] by ourdomain.com Don't accept mail from non-fully-qualified HELOs ?

RE: Simple script that rejects mail from spammers

2006-11-01 Thread Suhas \(QualiSpace\)
Even I'd be interested in something for postfix and iptables. Warm Regards, Suhas System Admin QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com

Forged_Hotmail_Rcvd

2006-11-03 Thread Suhas \(QualiSpace\)
I am wondering why this mail failed in 2.5 FORGED_HOTMAIL_RCVD Forged hotmail.com 'Received:' header found test? Can anyone help me out in understanding why? Received: from bay0-omc3-s8.bay0.hotmail.com [65.54.246.208] by qualispace.com with ESMTP (SMTPD-8.22) id ADCC0278; Fri,

OT : MailScanner

2006-11-11 Thread Suhas \(QualiSpace\)
Hi, Need some inputs from the experts. I am planning to switch to postfix + mailscanner + sa + clamav. Just want to know one thing before doing that. I have kaspersky linux edition. Can I create two antivirus scanning layers in mailscanner? Warm Regards, Suhas System