Anders Norrbring wrote:
Sorry, I've been missing quite a lot of this thread... Can I please
get an example of the complete ruleset, and a hint on where to place
it?
That was it. I copy-pasted those rules from
/etc/mail/spamassassin/misc.cf on one of the servers I maintain;
they're just
McDonald, Dan skrev:
On Fri, 2008-02-22 at 10:19 +0100, Anders Norrbring wrote:
Anders Norrbring wrote:
That was it. I copy-pasted those rules from
/etc/mail/spamassassin/misc.cf on one of the servers I maintain;
they're just rules I've created to try to keep as much spam as possible
out
Randal, Phil skrev:
body NICE_GIRL_03 /Email me at .{,74} only, because I am writing
not from my personal email\./
Would do nicely.
No need to be too clever here.
Cheers,
Phil
Apparently that won't work on all systems... (And that's why I ran into
problems before..)
On my SUSE
I've actually been running this set of 5 rules on several of the ISP
mail systems I've got my fingers in (watch for line wrap, sorry):
# Nice girl wants to send pics, but only if you email the address
in
the body
# start scoring at .5, see how that whacks'em.
body NICE_GIRL_01
arni skrev:
Igor Chudov schrieb:
I am receiving a lot of spams from bored girls, that ask me to email
to some .info email addresses. Just curious what these spams are
promoting, what is the scam behind them?
i
probably to verify the addresses they tried because then they gain a lot
of
arni skrev:
Anders Norrbring schrieb:
arni skrev:
Igor Chudov schrieb:
I am receiving a lot of spams from bored girls, that ask me to email
to some .info email addresses. Just curious what these spams are
promoting, what is the scam behind them?
i
probably to verify the addresses
Matt Kettler skrev:
Tarak Ranjan wrote:
greetings,
i'm getting pdf attached spam. please help me stop that using
spamassassin...
Horacio_FILE_506292_6906.pdf
/tarak
The PDFInfo plugin from rulesemporium is designed for this kind of thing.
http://www.rulesemporium.com/plugins.htm
Yet Another Ninja skrev:
On 7/19/2007 1:10 PM, Anders Norrbring wrote:
Matt Kettler skrev:
Tarak Ranjan wrote:
greetings,
i'm getting pdf attached spam. please help me stop that using
spamassassin...
Horacio_FILE_506292_6906.pdf
/tarak
The PDFInfo plugin from rulesemporium is designed
Gene Heskett skrev:
On Thursday 19 July 2007, R.Smits wrote:
Matt Kettler wrote:
Tarak Ranjan wrote:
greetings,
i'm getting pdf attached spam. please help me stop that using
spamassassin...
Horacio_FILE_506292_6906.pdf
/tarak
The PDFInfo plugin from rulesemporium is designed for this kind
Henrik Krohns skrev:
On Wed, Jul 11, 2007 at 07:44:37PM -0400, Phil Barnett wrote:
We can't be the first people to come up against this problem. How have others
solved it?
Bunch'o'Mirrors? Crude and effective.
*raise a hand* I volonteer to mirror, I have lots of both hd and bw
capacity to
I just noticed this in my lint;
[3425] warn: config: warning: score set for non-existent rule SARE_GIF_STOX
And I can't find the source for the SARE_GIF_STOX rule, any hints please?
Also, I've updated my SUSE builds to SpamAssassin 3.2.1 for SUSE 10.1
and 10.2, found at
guenther skrev:
On Thu, 2007-06-07 at 17:45 +0200, Anders Norrbring wrote:
Anyone else getting 404 errors from RDJ lately?
Yes, this topic came up just a few hours ago. Probably a dDOS attack.
Please disable all RDJ till further notice.
guenther
Now it's at least partly working, I
Anyone else getting 404 errors from RDJ lately?
The following rules had errors:
Tim Jackson's (et al) bogus virus warnings had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
TripWire had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
Daryl C. W. O'Shea skrev:
For anyone who's not aware of it, I should mention that Michael Monnerie
has been maintaining a German spam ruleset for quite some time and has
been as of late updating it often.
# Home: http://sa.zmi.at/rulesets/70_zmi_german.cf
# SpamAssassin Channel:
I just ran into a big problem..
[25735] warn: bayes: database version is different than we understand
(3), aborting! at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/BayesStore/SQL.pm
line 136
Any ideas please?
Anders
Craig Carriere skrev:
I receive the exact same error on
I have a setup with Postfix, Amavis-new and SpamAssassin on one server,
and the IMAP server on another.
What's the best / easiest way(s) to enable users to report spam mails
for training the Bayes DB?
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic
Micke Andersson wrote:
Anders Norrbring wrote:
I have a setup with Postfix, Amavis-new and SpamAssassin on one
server, and the IMAP server on another.
What's the best / easiest way(s) to enable users to report spam mails
for training the Bayes DB?
I would say that the easiest way would
resolve this problem.
Regards,
First I'd like to say that it's good.. ;) They're probably sending spam,
so it should get tagged. But if you don't want it, just configure to not
scan outgoing mails originating from localhost.
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S
Hoover Chan skrev:
I just upgraded SA from 3.1.0 to the current 3.1.7 via CPAN and am
finding that a huge increase in the amount of spam that's coming in. On
the order of almost 10 times the number that leaked into my inbox.
Has anyone else run into this behavior? If so, what can I do?
Federico Giannici skrev:
Rick Macdougall wrote:
Anders Norrbring wrote:
I have a slight problem.. I thought I'd finally start using
sa-learn to train the Bayes, the catch is that I have Cyrus and its
mailboxes on another server.. I transport the mail via LMTP to Cyrus.
So, is there a smooth
it as a NFS share (or similar) to be able to run it?
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic Signature
abortion
case in six years.
PENSACOLA, Fla. (CNN) -- President Bush tried to rally Republican
supporters in Florida at an event the state's GOP candidate for governor
skipped Monday, raising the hackles of a top White House aide in the
final hours before the midterm elections.
--
Anders
James Lay skrev:
On Tue, 07 Nov 2006 14:51:01 +0100
Anders Norrbring [EMAIL PROTECTED] wrote:
I don't get any points or hits on the following mail (source code)
[8]
I don't even see any SpamAssassin headers on this thing saying one way
or the otherdid this actually get piped through
Martin Hepworth skrev:
Anders Norrbring wrote:
snip
Anders
heres my analysis
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
--
--
0.7 HOST_EQ_D_D_D_D
Anders Norrbring skrev:
James Lay skrev:
On Tue, 07 Nov 2006 14:51:01 +0100
Anders Norrbring [EMAIL PROTECTED] wrote:
I don't get any points or hits on the following mail (source code)
[8]
I don't even see any SpamAssassin headers on this thing saying one way
or the otherdid
these mails over the kill limit. Now we don't
have to see them at all.. :)
Anders.
-Original Message-
From: Anders Norrbring [mailto:[EMAIL PROTECTED]
Sent: 07 November 2006 13:51
To: users@spamassassin.apache.org
Subject: No hit on this..
I don't get any points or hits on the following
something else causing it.
--
Anders Norrbring
Norrbring Consulting
Sammy Anderson skrev:
I'm pretty sure it is that, because when I turn of bayes altogether, the
spikes go away. I also ran sa-learn --force-expire and it PEGS the VM.
With bayes debugging enabled, I see lines like this in my
greatest task of all is to solve a puzzle that escaped
Eriksson until the very end.match. He joined Ray Wilkins (1986) and
David Beckham (1998) who also saw a
If Chris Kirkland can stay fit for three games he might get his chance
with Norwich's
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Darn, that came out as text only.. Find the orginal with html and image
attached! Not the same, but the image is the same at least..
Anders.
Anders Norrbring skrev:
The below found junk didn't even trigger my spamassassin to tag it at
all, yet my lower level is set to 1.6 points in Amavis
This type of image spam is getting more common, and is not detected.. At
least not here..
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic Signature
I've made new builds for SUSE 10.1 of SpamAssassin 3.1.5, please test
them if you have a chance, and send me any relevant feedback.
You'll find them at http://www.norrbring.com/SuSE
--
Anders Norrbring
Norrbring Consulting
.cf *pre30.cf, like 99_sare_fraud_pre25x.cf
is it that simple?
Yep, it's almost as simple as that.. :) Also edit your RulesDuJour
config file so it doesn't download those rulesets again.
Then when you've deleted the rules, do a 'spamassassin --lint' to
actualize the settings.
--
Anders
1/3 test programs. 9/32 subtests failed.
make: *** [test_dynamic] Error 255
--
Anders Norrbring
Norrbring Consulting
Nigel Frankcom skrev:
On Fri, 01 Sep 2006 12:43:36 +0200, Anders Norrbring
[EMAIL PROTECTED] wrote:
I'm trying to get IO::Socket::INET6 to install since I actually use
IPv6.. But so far no luck, and I haven't found any cure when Googling
around on the subject either.
Anyone on the list who
often returns no
results, or even pages without relevance.
--
Anders Norrbring
Norrbring Consulting
Matt Kettler skrev:
Anders Norrbring wrote:
*sigh*.. do we really need to start a SpamAssassin-Users mailing list
drinking game?
For those not familiar, when you get home for the evening, sit down,
with a beverage of your choice (milk, soda, coffee, wine, beer) and read
the days mail
Shouldn't SA try to contact MySQL as username and not as vscan? The
processes runs as the user vscan.
--
Anders Norrbring
Norrbring Consulting
Benny Pedersen skrev:
On Tue, August 29, 2006 08:16, Anders Norrbring wrote:
[6204] dbg: bayes: unable to initialize database for vscan user, aborting!
from a new sql database this is default error, means that there is no data to
work with so far
Well, there actually IS one post in the DB
Anders Norrbring skrev:
Benny Pedersen skrev:
On Tue, August 29, 2006 08:16, Anders Norrbring wrote:
[6204] dbg: bayes: unable to initialize database for vscan user,
aborting!
from a new sql database this is default error, means that there is no
data to
work with so far
Well
Anders Norrbring skrev:
Anders Norrbring skrev:
Benny Pedersen skrev:
[..snip..]
After some more error-message-surfing on Google, it looks like it's SA
itself that doesn't allow any other username than root to use the Bayes
SQL plugin.
So, maybe I need to tell SA that vscan is authorized
?
--
Anders Norrbring
Norrbring Consulting
jdow skrev:
From: Anders Norrbring [EMAIL PROTECTED]
Stuart Johnston skrev:
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them
Stuart Johnston skrev:
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
FuzzyOCR, ImageInfo, SARE, sa
Is there any effective rule set for blocking off all these chronometer
and wrist watch spams?
Preferably one that I can add into my rules_du_jour..
--
Anders Norrbring
Norrbring Consulting
?id=04
Briefmarken
http://ebay.de.mediaplex.com/ad/ck/1066-24214-7834-45?id=05
small part of e-mail
Thanks for checking.
mfg zmi
Nope. It's a scam, all eBay e-mails originates from ebay.com ebay.co.uk
ebay.de etc...
The e-mail you copied originates from easynet.de
--
Anders Norrbring
Take a look at this message source, it doesn't get tagged at all!
Return-Path: [EMAIL PROTECTED]
Received: from mail.the-server.net ([unix socket])
by iris (Cyrus v2.1.15) with LMTP; Tue, 30 Aug 2005 10:06:37 +0200
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost
46 matches
Mail list logo
