Re: List From and Reply-To

2018-05-31 Thread Antony Stone
On Thursday 31 May 2018 at 17:35:11, Rupert Gallagher wrote: > Beware of the GDPR. If a current or former subscriber wants their address > deleted, you are in hell. The mailing-list server can cleanup before > itself with a reply-to the list only, and obfuscating the addresses, and > deleting

Re: Fwd: List From and Reply-To

2018-05-31 Thread Antony Stone
On Thursday 31 May 2018 at 12:16:04, Palvelin Postmaster wrote: > > Begin forwarded message: > > > > From: Ian Zimmerman > Are you and Bill Cole doing something different from other list members > because your emails appear to have a Reply-To header? Anyone is free to set a Reply-To header in

Re: [Offtopic] List From and Reply-To

2018-05-30 Thread Antony Stone
On Wednesday 30 May 2018 at 15:33:13, Palvelin Postmaster wrote: > > On 30 May 2018, at 16:06, Matus UHLAR - fantomas > > wrote: > > > > On 30.05.18 15:49, Palvelin Postmaster wrote: > >> Hitting reply sends the response to poster directly > > > > get a mail client that supports mailing lists.

Re: MSGID_SPAM_CAPS fp's hitting messages from The Pension Regulator in UK

2018-04-07 Thread Antony Stone
On Saturday 07 April 2018 at 18:10:18, Sebastian Arcus wrote: > On 07/04/18 16:52, Reindl Harald wrote something. > Thank you for answering, but really, in effect you haven't answered at > all my question. > And the way I customise the scores are based on the type of emails > received at this

Re: The "goo.gl" shortner is OUT OF CONTROL (+ invaluement's response)

2018-04-03 Thread Antony Stone
On Tuesday 03 April 2018 at 16:43:09, Leandro wrote: > 2018-04-03 11:35 GMT-03:00 RW: > > On Tue, 3 Apr 2018 11:09:38 -0300 Leandro wrote: > > > 2018-04-03 10:34 GMT-03:00 Antony Stone: > > > > "IMPORTANT: Current limit is 100 ms per IP block. Lower frequ

Re: The "goo.gl" shortner is OUT OF CONTROL (+ invaluement's response)

2018-04-03 Thread Antony Stone
On Tuesday 03 April 2018 at 16:09:38, Leandro wrote: > 2018-04-03 10:34 GMT-03:00 Antony Stone: > > On Tuesday 03 April 2018 at 15:27:11, Leandro wrote: > > > Hey guys. We just created an URL signature algorithm to be able to > > > query an entire URL at our URIBL: >

Re: The "goo.gl" shortner is OUT OF CONTROL (+ invaluement's response)

2018-04-03 Thread Antony Stone
On Tuesday 03 April 2018 at 15:27:11, Leandro wrote: > Hey guys. We just created an URL signature algorithm to be able to query an > entire URL at our URIBL: > > https://spfbl.net/en/uribl/ I don't think I understand the following statement on that page: "IMPORTANT: Current limit is 100 ms per

Re: Blacklist for reply-to?

2018-02-18 Thread Antony Stone
On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote: > Question time! You receive spam with a reply-to your own address. What do > you do? I take it that this is now a rather different question that the one you originally asked in this thread, where the reply-to address was clearly

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Antony Stone
On Sunday 11 February 2018 at 23:04:52, Bill Cole wrote: > On 11 Feb 2018, at 16:20 (-0500), Antony Stone wrote: > > Strange that I can't find SMTP under > > www.rfc-editor.org/rfc/std/std-index.txt > > ‎though, other than STD0060 and STD0071, which are both extensions. >

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Antony Stone
On Sunday 11 February 2018 at 19:15:59, Rupert Gallagher wrote: > Who is the ignorant here? > > Rfc 822, standard: usa https://tools.ietf.org/html/rfc822 "Obsoleted by: 2822" What do you mean by "Standard: USA"? I know what an IETF Standard is, and it's quite different from an RFC, which we

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Antony Stone
On Sunday 11 February 2018 at 08:35:42, Rupert Gallagher wrote: > We are not in USA, where RFC loopholes are written Er, RFCs are written by IETF Working Groups, which are open to *anyone* to contribute to, have members from many different countries and companies around the world, and are not

Re: Maxium URL acceptable length

2018-01-23 Thread Antony Stone
On Tuesday 23 January 2018 at 09:11:06, Pedro David Marco wrote: > Hi, > What is, in your opinion, the maximum URL acceptable length? Acceptable for what? Acceptable for a human to be able to remember? Acceptable for pasting into an email? Acceptable for expecting someone to type? > I am not

Re: From name containing a spoofed email address

2018-01-19 Thread Antony Stone
On Friday 19 January 2018 at 07:40:07, Rupert Gallagher wrote: > See my post of 25/20/2017 to this list. My calendar doesn't go that far :( Antony. -- I wasn't sure about having a beard at first, but then it grew on me. Please reply to the

Re: moving spam to junk folder

2018-01-13 Thread Antony Stone
On Saturday 13 January 2018 at 09:35:47, Matthew Broadhead wrote: > i am using CentOS 7, spamassassin-3.4.0-2.el7.x86_64, > postfix-2.10.1-6.el7.x86_64, with amavisd. > > i set my local.cf to use MySQL as a bayes store and it seems to work > fine setting ham and spam in the database when a

Re: Malformed spam email gets through.

2018-01-03 Thread Antony Stone
On Wednesday 03 January 2018 at 02:39:54, Alex wrote: > Hi, > > Is it possible to at least enforce that the message-ID has a valid domain? If by "enforce" you mean "require" (in other words, you look at whatever message-ID the incoming email has, and you decide that if it doesn't contain a

Re: Malformed spam email gets through.

2018-01-02 Thread Antony Stone
On Tuesday 02 January 2018 at 11:12:57, Rupert Gallagher wrote: > This is the normative reference. I've picked out the significant parts from your email... > RFC 5322, pg. 27, section 3.6.4 > --- > > << The message identifier

Re: Mailsploit

2017-12-13 Thread Antony Stone
On Wednesday 13 December 2017 at 21:41:04, Groach wrote: > Is there any suggestions on a rule or procedure to implement that will > help defend against the MAILSPLOIT type of spoofing? See https://marc.info/?l=spamassassin-users=151265708616825=2 and follow- ups? Antony. -- "Linux is going

Re: Rule to detect mailsploit

2017-12-06 Thread Antony Stone
On Wednesday 06 December 2017 at 18:15:55, John Hardin wrote: > On Wed, 6 Dec 2017, Kevin A. McGrail wrote: > > > > Something like this: > > > > header__KAM_MAILSPLOIT1 From =~ /[\0]/ > > describe__KAM_MAILSPLOIT1RFC2047 Exploit > > https://www.mailsploit.com/index > > > > And a

Re: Off-topic, was: [Re: MailChimp with link to javascript/zip malware]

2017-10-20 Thread Antony Stone
On Friday 20 October 2017 at 19:54:08, Anne P. Mitchell Esq. wrote: > > On Friday 20 October 2017 at 19:29:31, Anne P. Mitchell Esq. wrote: > >> Anne P. Mitchell, > >> Attorney at Law > > > > I'm intrigued as to what the "Esq." in your From address indicates? > > In the U.S., Esq. (short for

Off-topic, was: [Re: MailChimp with link to javascript/zip malware]

2017-10-20 Thread Antony Stone
On Friday 20 October 2017 at 19:29:31, Anne P. Mitchell Esq. wrote: > Anne P. Mitchell, > Attorney at Law I'm intrigued as to what the "Esq." in your From address indicates? Please feel free to reply offlist if appropriate. Thanks, Antony. -- 90% of networking problems are routing

Re: USER_IN_WHITELIST shortcircuits VBOUNCE, please help...

2017-10-07 Thread Antony Stone
On Saturday 07 October 2017 at 16:27:00, djkraz wrote: > I have a user that is getting thousands of backscatter a minute for a > couple days now. I've tried everything I can find on the web to get > vbounce working with no luck as the user is obviously in the whitelist > since they exist on the

Re: Test

2017-08-02 Thread Antony Stone
On Wednesday 02 August 2017 at 13:17:42, Jari Fredriksson wrote: > Just testing, as the list has been silent for me for a week or so. See https://mail-archives.apache.org/mod_mbox/spamassassin-users/ Antony. -- I conclude that there are two ways of constructing a software design: One way is

Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?

2017-07-17 Thread Antony Stone
On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote: > > On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas wrote: > >> Robert Kudyba wrote: > >>> Over the past few days sending mail via SquirrelMail has become > >>> glacial. The load on the server

Re: ramsonware URI list

2017-07-15 Thread Antony Stone
On Saturday 15 July 2017 at 11:19:54, mastered wrote: > Hi Nicola, > > I'm not good at SHELL script language, but this might be fine: > > 1 - Save file into lista.txt > > 2 - trasform lista.txt in spamassassin rules: > > cat lista.txt | sed s'/http:\/\///' | sed s'/\/.*//' | sed s'/\./\\./g'

Re: low scoring spam

2017-07-14 Thread Antony Stone
On Friday 14 July 2017 at 15:29:38, Charles Amstutz wrote: > Hello, > > I keep having spam come through that hits on almost zero rules, (or very > few) . I get this is definitely possibly, but it's annoying as its > obviously spam. I guess my question is, if what we have in place isn't >

Re: sa-learn won't read db created via MSTOR

2017-07-08 Thread Antony Stone
On Saturday 08 July 2017 at 22:55:36, RW wrote: > I had a spillage and most of the punctuation characters > on my keyboard aren't working at the moment. Oh dear, my sympathies - but what a splendid quote on a mailing list :) Antony. -- Salad is what food eats.

Re: updates.spamassassin.org gone?

2017-07-06 Thread Antony Stone
On Thursday 06 July 2017 at 18:59:19, Rainer Sokoll wrote: > > Am 06.07.2017 um 18:55 schrieb Antony Stone: > > > > "apt-get policy spamassassin" should show you which one really is > > installed > > apt-cache ;-) Oops :) Yeah, I knew it was one of t

Re: updates.spamassassin.org gone?

2017-07-06 Thread Antony Stone
On Thursday 06 July 2017 at 18:53:10, Rainer Sokoll wrote: > > Am 06.07.2017 um 18:50 schrieb David Jones : > > > > What version of SA are you running? > > 3.4.0, shipped with Debian 8. But I cannot guarantee that this is in fact > 3.4.1, because I've never understood Debian's

Re: FORGED_MUA_MOZILLA & FORGED_YAHOO_RCVD

2017-05-25 Thread Antony Stone
On Thursday 25 May 2017 at 18:35:34, Abhishek Tiwari wrote: > Hello, > > I have no backgroud about . About what? > I am working on product which is mailserver What sort of mailserver (or, which product)? > I see a complaint online about a false positive, > > 1.FORGED_MUA_MOZILLA: 2.309,

Re: Bayes refuses to work despite best efforts

2017-03-31 Thread Antony Stone
On Friday 31 March 2017 at 00:07:56, David wrote: > I'm getting no bayes score on any email and there appears to be no bayes > filtering despite my best efforts. > sa-learn --dump magic > 0.000 0 3 0 non-token data: bayes db version > 0.000 0 1727

Re: Filtering outbound mail

2017-02-17 Thread Antony Stone
On Friday 17 Feb 2017 at 21:51, David Jones wrote: > Not all compromised accounts these days blast out at a high rate like we > used to see years ago. True, but also, some still do. > I have had a few sneaky ones recently trickle spam through to stay below > the radar so rate-limiting is not

Re: Custom rule problem

2017-01-31 Thread Antony Stone
On Tuesday 31 January 2017 at 16:45:34, Zinski, Steve wrote: > Hello, I have a problem that I hope someone can help me with. > > I’m trying to write a custom rule to block a certain type of spam. When I > view the message source, the very last lines of the spam look like this: How are you

Re: Ignore third-party SA headers

2017-01-24 Thread Antony Stone
On Monday 23 January 2017 at 23:43:02, Ruga wrote: > spam that already includes SA headers is getting through without local SA > filtering. Is it posible to tell the local SA to always add its own > headers, possibly taking note of the existence of former SA headers while > rewriting them out of

Re: Testing Spamminess of Own Mail

2017-01-11 Thread Antony Stone
On Wednesday 11 January 2017 at 16:22:13, Michael B Allen wrote: > On Wed, Jan 11, 2017 at 10:03 AM, Antony Stone wrote: > > On Wednesday 11 January 2017 at 15:57:20, Michael B Allen wrote: > >> Is it possible to send a message to myself to see what SA thinks of my > >>

Re: Testing Spamminess of Own Mail

2017-01-11 Thread Antony Stone
On Wednesday 11 January 2017 at 15:57:20, Michael B Allen wrote: > Is it possible to send a message to myself to see what SA thinks of my mail > rig? > If I just send a message from one account to another, of course it > never leaves the server and thus dodges SA. Is there a clever way to >

Re: Detecting Valid Message Replies

2017-01-03 Thread Antony Stone
On Tuesday 03 January 2017 at 12:11:35, Rob Gunther wrote: > The other day I was thinking it would be cool if you could detect > legitimate replies to mail I send. > I came up with a concept called 'Authenticated Reply Detection'. > > It uses the Message-ID header to encode some information

Re: rbldnsd

2016-10-17 Thread Antony Stone
On Monday 17 October 2016 at 17:14:18, Bill Cole wrote: > On 17 Oct 2016, at 9:04, Antony Stone wrote: > > DNS runs over UDP, not TCP. > > True AND false. Agreed; thanks for the detailed clarification, however I was answering a question specifically about rbldnsd. > A DN

Re: rbldnsd

2016-10-17 Thread Antony Stone
On Monday 17 October 2016 at 15:00:08, Nicola Piazzi wrote: > Someone use dnsrbld to create personal rbl ? > I am unable to bind to port 53 (and other ports) Oh? > I start and it tell that bind : > > [root@EFALIST rbldnsd]# ./start.sh > rbldnsd: listening on ::1/53 > rbldnsd: listening on

Re: The real spoofing issue

2016-10-16 Thread Antony Stone
On Monday 17 October 2016 at 00:08:20, Ruga wrote: > > From: "Dianne Skoll " > > In my servers, the above string is not RFC compliant, > and therefore the whole mail is automatically > rejected as SPAM. I think you misunderstood. The suggestion

Re: The real spoofing issue

2016-10-16 Thread Antony Stone
On Sunday 16 October 2016 at 17:30:19, Dianne Skoll wrote: > Oh, and one more thing... > > ... every email reader I've ever used shows neither the From: address nor > the envelope sender by default. They all default to showing the full name > on the From: line, which naturally is impossible to

Re: How to get spam assassin to detect spoofed mails as SPF is clearly useless

2016-10-15 Thread Antony Stone
On Saturday 15 October 2016 at 20:30:25, Axb wrote: > On 10/15/2016 08:13 PM, Petr Bena wrote: > > > > What I was hoping for was, that as someone who does bother checking, to > > find out a solution that would help me prevent from receiving spoofed > > e-mails > There is no publicly available

Re: FROM_WORDY rule is a false-positive

2016-10-07 Thread Antony Stone
On Friday 07 October 2016 at 18:24:27, Yves Goergen wrote: > Hello, > > I received a message from a friend today and it was rated this, among > others: > > 2.5 FROM_WORDY From address looks like a sentence > > I have no idea what the author of this rule considers a sentence, but >

Re: RelayCountryPlugin - bad country when sasl_authenticated?

2016-09-27 Thread Antony Stone
On Tuesday 27 September 2016 at 12:19:23, Thomas Barth wrote: > Am 27.09.2016 um 11:29 schrieb Antony Stone: > > > Where's the actual SA processing happening, though? Is it possible the > > plugin may be responding to the 127.0.0.1 or 192.168.178.156 addresses > > (w

Re: RelayCountryPlugin - bad country when sasl_authenticated?

2016-09-27 Thread Antony Stone
On Tuesday 27 September 2016 at 11:16:33, Thomas Barth wrote: > Hello, > > I ve installed RelayCountryPlugin as described on this page: > > https://wiki.apache.org/spamassassin/RelayCountryPlugin > > The package libgeo-ip-perl (Debian 8.5) is installed. (Note at the end > of the page) > > I

Re: R: R: postfix reject_unverified_recipient and Exchange 2016

2016-09-07 Thread Antony Stone
On Wednesday 07 September 2016 at 11:00:57, Nicola Piazzi wrote: > I am off topici f you think that postfix is not spamassassin Postfix is not spamassassin. Antony. -- The Royal Society for the Prevention of Cruelty to Animals was formed in 1824. The National Society for the Prevention of

Re: Matching infinite sets

2016-08-22 Thread Antony Stone
On Monday 22 August 2016 at 18:00:35, Marc Perkel wrote: > On 08/22/16 07:37, Antony Stone wrote: > > > > So what makes "cheapest Viagra online" a token, such that "cheapest" and > > "online" are not tokens? > > They would a

Re: Matching infinite sets

2016-08-22 Thread Antony Stone
On Monday 22 August 2016 at 16:45:09, Dianne Skoll wrote: > On Mon, 22 Aug 2016 07:34:00 -0700 Marc Perkel wrote: > > > So. What percentage of emails using your algorithm are actually > > > decidable? > > > > Almost 100% if you look at a wide variety of tokens from multiple > > attributes. > >

Re: Matching infinite sets

2016-08-22 Thread Antony Stone
On Monday 22 August 2016 at 16:34:00, Marc Perkel wrote: > On 08/22/16 07:28, Dianne Skoll wrote: > > > What percentage of emails using your algorithm are actually > > decidable? > > Almost 100% if you look at a wide variety of tokens from multiple > attributes. Subject, body, content flags,

Re: Matching infinite sets

2016-08-22 Thread Antony Stone
On Monday 22 August 2016 at 16:34:09, Marc Perkel wrote: > OK - Trying to make the really simple. Just talking about concept now. > > Let's say I get an email where the subject is "I have aednocarsonoma of > the lung". > > Right off you know it's ham because spammers never use the word >

Re: Matching infinite sets

2016-08-22 Thread Antony Stone
On Monday 22 August 2016 at 15:46:41, Dianne Skoll wrote: > On Mon, 22 Aug 2016 06:04:49 -0700 > > Marc Perkel wrote: > > Set A - a finite set - has some members, > > Set B - an infinite set - is everything that is NOT in Set A > > Set B is a very special case of

Re: Matching infinite sets

2016-08-22 Thread Antony Stone
On Monday 22 August 2016 at 15:04:49, Marc Perkel wrote: > I'm confused by the confusion here. > > Set A - a finite set - has some members, > Set B - and infinite set - is everything that is NOT in Set A > > So you match a test item to Set A and if it matches it's a member of A. > If it

Re: Matching infinite sets

2016-08-21 Thread Antony Stone
On Sunday 21 August 2016 at 21:22:38, Damian wrote: > Am 21.08.2016 um 18:47 schrieb Marc Perkel: > > Actually - you can match an infinite set. And maybe this is what it's > > hard for some people to wrap their head around. > > > > Suppose set A contains 2 items, apples and oranges. > > So we

Re: Unsubscribe

2016-08-18 Thread Antony Stone
On Thursday 18 August 2016 at 17:07:31, Axb wrote: > On 08/18/2016 05:05 PM, Joe Quinn wrote: > > On 8/18/2016 10:57 AM, Benjamin E. Nichols wrote: > >> Benjamin E. Nichols > >> > >> http://www.squidblacklist.org > >> > >> > >> 1-405-397-1360 > > > > Documentation on how to unsubscribe

Re: R: A domain category that all need

2016-08-18 Thread Antony Stone
On Thursday 18 August 2016 at 14:21:27, Nicola Piazzi wrote: > I made a plugin that watch if someone answer us, i watch if in header there > is a reference of a message id that we sent in the past > > So when I receive a mail from j...@cocacola.it and it have a reference I > whitelist

Re: R: A domain category that all need

2016-08-18 Thread Antony Stone
On Thursday 18 August 2016 at 14:21:27, Nicola Piazzi wrote: > I made a plugin that watch if someone answer us, i watch if in header there > is a reference of a message id that we sent in the past > > So when I receive a mail from j...@cocacola.it and it have a reference I > whitelist

Re: I have some bad news

2016-08-17 Thread Antony Stone
On Wednesday 17 August 2016 at 05:06:50, Marc Perkel wrote: > What I'm doing is looking for fingerprints in email that intersect HAM > and not in SPAM - which would be a HAM result. > If it matches SPAM and does NOT match HAM - then it's SPAM. > > The magic is in the NOT matching on the other

Re: Anyone else just blocking the ".top" TLD?

2016-07-16 Thread Antony Stone
On Saturday 16 July 2016 at 16:43:00, Max Watkins aka Maciej Hryckiewicz wrote: > What will be best approach to block it in EXIM ? > Ack rule with lookup in text file ? Good plan. Here's what I found from a Google search for "exim block domain":

Re: USER_IN_WHITELIST

2016-07-07 Thread Antony Stone
On Thursday 07 July 2016 at 15:08:44, Lorenzo Thurman wrote: > > On Jul 7, 2016, at 7:15 AM, Reindl Harald wrote: > >> Am 07.07.2016 um 14:12 schrieb Joe Quinn: > >> In addition to the above, it's easy for a spammer to register something > >> like

Re: Corpus of Spam/Ham headers(Source IP) for research

2016-06-29 Thread Antony Stone
On Wednesday 29 June 2016 at 17:38:35, Shivram Krishnan wrote: > There has been enough research which has been done in this field were the > authors have obtained the data from network operators. This > eports> for instance is

Re: Corpus of Spam/Ham headers(Source IP) for research

2016-06-29 Thread Antony Stone
On Wednesday 29 June 2016 at 17:35:28, Shivram Krishnan wrote: > We could solve this problem , If you could submit the set of IP's by > anonymising the last octet of the IP addresses. What good is that going to do you in your research project? > Also we could sign an NDA (if you are willing to

Re: Corpus of Spam/Ham headers(Source IP) for research

2016-06-29 Thread Antony Stone
On Wednesday 29 June 2016 at 12:42:02, Reindl Harald wrote: > Am 29.06.2016 um 12:35 schrieb Olivier: > > Reindl Harald writes: > >> > >> he asked *exactly the same* with "dataset of source IP addresses of > >> emails received" but for a ton of relations you just need

Re: RCVD_IN_SBL_CSS and "deep headers"

2016-06-08 Thread Antony Stone
On Wednesday 08 June 2016 at 12:28:00, Reindl Harald wrote: > Am 08.06.2016 um 12:15 schrieb Antony Stone: > > On Wednesday 08 June 2016 at 11:54:07, Reindl Harald wrote: > >> Am 08.06.2016 um 11:35 schrieb Michael H: > >>> I am a member of many mailing lists and

Re: RCVD_IN_SBL_CSS and "deep headers"

2016-06-08 Thread Antony Stone
On Wednesday 08 June 2016 at 11:54:07, Reindl Harald wrote: > Am 08.06.2016 um 11:35 schrieb Michael H: > > > I am a member of many mailing lists and your actions would have caused you > > to be removed on all of the others by now. > > compared with some other *really* personal attacks i got on

Re: Bayes filter marking everything as ham

2016-06-02 Thread Antony Stone
On Thursday 02 June 2016 at 15:12:58, Reindl Harald wrote: > Am 02.06.2016 um 15:07 schrieb Matus UHLAR - fantomas: > > On 02.06.16 14:48, Reindl Harald wrote: > >> that typically happens only when one is using a forwarding resolver > >> get it finally As you said yourself, "typically". That's

Re: Bayes filter marking everything as ham

2016-06-02 Thread Antony Stone
On Thursday 02 June 2016 at 13:16:57, Martin Gregorie wrote: > On Thu, 2016-06-02 at 12:28 +0200, Matus UHLAR - fantomas wrote: > > > Therefore I agree that there could be better way of noticing admins > > > of a [URIBL_BLOCKED] issue. > > create and install a logwatch service that scans

Re: Spamassassin not capturing obvious Spam

2016-05-31 Thread Antony Stone
On Tuesday 31 May 2016 at 20:11:14, Shivram Krishnan wrote: > In the glue - like spamass-mailer, there would be two folders which are > created. One would be the mailbox and the other would be a spambox(dont > know the term). Cant you access the spambox to extract the mail? It sounds to me that

Re: Spamassassin not capturing obvious Spam

2016-05-31 Thread Antony Stone
On Tuesday 31 May 2016 at 15:47:56, Shivram Krishnan wrote: > I am using SA as an oracle for Blacklisting. Our research concerns with > combining multiple sources of blacklist and also consider the historical > importance of an IP in a blacklist to create a very effective master > blacklist. > >

Re: Spamassassin not capturing obvious Spam

2016-05-31 Thread Antony Stone
On Tuesday 31 May 2016 at 17:02:26, Reindl Harald wrote: > Am 31.05.2016 um 16:59 schrieb Antony Stone: > > > > I had read SA documentation such as > > https://spamassassin.apache.org/full/3.1.x/doc/sa-learn.html > that's all based on opinions - the only question is t

Re: Spamassassin not capturing obvious Spam

2016-05-31 Thread Antony Stone
On Tuesday 31 May 2016 at 15:32:49, Reindl Harald wrote: > Am 31.05.2016 um 15:28 schrieb Antony Stone: > > 2. You should be aware (*especially* if using this stuff as the basis of > > a research project - any competent referee should pick up on something > > like this) th

Re: Spamassassin not capturing obvious Spam

2016-05-31 Thread Antony Stone
On Tuesday 31 May 2016 at 15:21:19, Shivram Krishnan wrote: > Here is my scenario. I am using SA as a oracle/ground truth for a research > project. Okay. > It is generally hard to get hold of a real time mail corpus Er, what?? > I opted for a service provided by mailinator. > I have also

Re: VERY_LONG_REPTO_SHORT_MSG

2016-02-26 Thread Antony Stone
On Friday 26 February 2016 at 18:14:53, Axb wrote: > On 02/26/2016 06:04 PM, John Hardin wrote: > > On Fri, 26 Feb 2016, Reindl Harald wrote: > >> score VERY_LONG_REPTO_SHORT_MSG 3.999 3.999 3.999 3.999 > >> header__VERY_LONG_REPTO Reply-To =~ /[^\s\@]{20,}\@/ > >> >

Re: Error when trying to re-use Bayes database from one server to another

2016-02-13 Thread Antony Stone
On Saturday 13 February 2016 at 16:50:56, Reindl Harald wrote: > a different company with it's own infrastructure has no business to > ssh-tunneling or access *my server* in any other way directly > > DIFFERENT NETWORKS > DIFFERENT INFRASTRUCTURES > DIFFERENT OWNERS > DIFFERENT ADMINS > > NO

Re: Error when trying to re-use Bayes database from one server to another

2016-02-12 Thread Antony Stone
On Friday 12 February 2016 at 17:29:23, Sebastian Arcus wrote: > As per advice from this list, I have been re-using my bayes databases on > several different servers running SA. On one of the servers though, the > database is not accepted. Are the servers all the same distro, release and

Re: how to fix this issue-spam

2016-02-04 Thread Antony Stone
On Thursday 04 February 2016 at 10:58:42, Reindl Harald wrote: > Am 04.02.2016 um 10:55 schrieb Antony Stone: > > On Thursday 04 February 2016 at 10:47:18, Chandran Manikandan wrote: > >> 1. Our users received some spam emails which is showing our domain email > >&

Re: how to fix this issue-spam

2016-02-04 Thread Antony Stone
On Thursday 04 February 2016 at 10:47:18, Chandran Manikandan wrote: > 1. Our users received some spam emails which is showing our domain email > account in From address. Nothing unusual in that - forged From addresses have been common for many years. > But those email account don't have

Re: Looking for a way to dump spam assassin modified mail

2016-01-21 Thread Antony Stone
On Thursday 21 January 2016 at 13:31:29, Reindl Harald wrote: > > On 01/21/2016 01:25 PM, Robert Chalmers wrote: > >> I’m looking for a way to just dump mail that has the header modified > >> with the * SPAM * assignment. > >> > >> I mean, not have the Client mail reader do it,

Re: Can your bayes do this?

2016-01-21 Thread Antony Stone
On Thursday 21 January 2016 at 13:11:15, RW wrote: > On Wed, 20 Jan 2016 22:21:49 -0800 Marc Perkel wrote: > > OK - Just to show you this isn't Bayesian - see if you can do this. > > > > Here is a list of 5505874 words and phrases used in the subject line > > of HAM and never seen in the subject

Re: My new method for blocking spam - REVEALED!

2016-01-20 Thread Antony Stone
On Wednesday 20 January 2016 at 17:52:05, Marc Perkel wrote: > Suppose I get an email with the subject line "Let's get some lunch". I > know it's a good email because spammers never say "Let's go to lunch". > In fact there are an infinite number of words and phrases that are used > in good email

Re: My new method for blocking spam - REVEALED!

2016-01-20 Thread Antony Stone
On Wednesday 20 January 2016 at 19:50:23, Reindl Harald wrote: > DELIVERED 32943 91.46 % > > BLOCKED 3679 10.21 % Why don't those add up to 100%? Or am I misunderstanding the labelling? Antony. -- Python is executable pseudocode. Perl is executable line noise.

Re: Newbie - Stuck on installation

2016-01-19 Thread Antony Stone
On Tuesday 19 January 2016 at 18:49:41, Sarang Shrivastava wrote: > Hey, > > I was trying to install SA on my system for which i needed postfix to be > preinstalled on my system. > > https://www.digitalocean.com/community/tutorials/how-to-install-and-setup-s > pamassassin-on-ubuntu-12-04 > >

Re: Newbie - Stuck on installation

2016-01-19 Thread Antony Stone
On Tuesday 19 January 2016 at 19:15:44, Sarang Shrivastava wrote: > Thanx for your reply, > > Actually the thing is I am a final year CSE student at NIT Allahabad, > India. I am trying to add a new statistical plugin in SA. Till date it > only has a Bayesian classifier , I wanted to extend it a

Re: Prevent 'on behalf of' showing internal but really from external domain

2016-01-11 Thread Antony Stone
On Monday 11 January 2016 at 19:57:28, Justin Edmands wrote: > We have seen a few messages that were allowed to be sent "on be half of" a > user within our network. How are you authenticating which users are allowed to send through your relay? > The external users domain was able to send

Re: Matches non RFC headers that not begin with X-

2016-01-06 Thread Antony Stone
On Wednesday 06 January 2016 at 11:48:12, Axb wrote: > paste.swordarmor.fr uses an invalid security certificate. The > certificate is not trusted because it was signed using a signature > algorithm that was disabled because that algorithm is not secure. My browser doesn't complain about the

Re: Is BAYES filtering working? Having doubts.

2015-12-28 Thread Antony Stone
On Monday 28 December 2015 at 20:27:32, Peter L. Berghold wrote: > I've been noticing a lot of SPAM emails coming to my account > How do I figure out where the issue is or if the learning is even > working? Show us the headers of the delivered email/s? Antony. -- "Once you have a panic,

Re: question re/ RDNS_NONE

2015-11-21 Thread Antony Stone
On Saturday 21 November 2015 at 17:31:31, Matthias Apitz wrote: > > It's also on a lot of RBLs so your outbound mail delivery is > > going to be very unreliable: > > > > http://multirbl.valli.org/lookup/93.104.16.254.html > > There is not much I can do when the dynamic IP addr which the ISP

Re: Debian jessie - new setup, missing data directory

2015-11-09 Thread Antony Stone
On Monday 09 November 2015 at 14:23:04, Phil Reynolds wrote: > I have recently transferred all of my email system to a new machine, > but spamassassin is not yet fully functional. > > It seems that it is trying to use /var/mail/.spamassassin as a data > directory - this is fine, but it does not

Re: Debian jessie - new setup, missing data directory

2015-11-09 Thread Antony Stone
On Monday 09 November 2015 at 16:23:52, Phil Reynolds wrote: > On Mon, 9 Nov 2015 15:11:16 +0100 Antony Stone wrote: > > > > What are the ownership & permissions on: > > > > /var/mail/,spamassassin > > Tried root.root and debian-spamd.debian

Re: Warning while running spam assasin on the message

2015-10-29 Thread Antony Stone
On Thursday 29 October 2015 at 18:01:04, j...@lexoncom.com wrote: > I get this warning while running spam assassin from the command line Please tell us the exact command you are running. Please also tell us which user you are running it as. I'm also going to assume that you're saying you get

Re: Warning while running spamassassin on the message

2015-10-29 Thread Antony Stone
On Thursday 29 October 2015 at 18:29:27, j...@lexoncom.com wrote: > I use procmail > > :0fw: spamassassin.lock > * < 256000 > | spamassassin > > I run > sudo spamassassin -t -d --mbox /home/user/mail/INBOX.spamtest > > sudo spamassassin --mbox /home/user/mail/INBOX.spamtest > > there is only

Re: Permissions for home dir .spamassassin

2015-09-22 Thread Antony Stone
On Tuesday 22 September 2015 at 22:35:55, David Niklas wrote: > Hello, I decided to store users personal filter rules in .spamassassin > in their home dir, but I'm not sure how to set the perms. How does spamassassin get invoked for each user's email? Is it a single system-wide process, are you

Re: Live upgrade safe?

2015-09-16 Thread Antony Stone
On Wednesday 16 September 2015 at 10:32:55, Reindl Harald wrote: > Am 16.09.2015 um 04:25 schrieb Nick Edwards: > > - and no that is not rude, you have no idea how i sound > > if i start to get rude > > the fact you don't feel being rude does not mean you are not. > >>> > >>>

Re: Fwd: Large volume of 0.0 scores suddenly

2015-09-11 Thread Antony Stone
> On 09/11/2015 01:17 PM, Peter Kelly wrote: > > - Are you using a local, non forwarding, DNS resolver/caching server ? > > > > No > > - Are you handling mail for a company, personal email, ISP, one domain, > > many domains, etc? > > > > Handling mail for thousands of different companies - we

Re: SA gone mad

2015-09-09 Thread Antony Stone
On Wednesday 09 September 2015 at 13:08:45, Farkas Zsolt wrote: > Content analysis details: (13.1 points, 15.0 required) > > pts rule name description > -- > -- 3.5 BAYES_99 >BODY: Bayes spam

Re: SA gone mad

2015-09-09 Thread Antony Stone
problems now: > -messages marked as SPAM but they are below limit (limit at 15 but at > 13.1 marked as spam) this has no connection with disabled or enabled > badword -if badword rule is enabled badword points added but there is no > badword match in regex > > 2015.09.09. 13:1

Re: SA gone mad

2015-09-09 Thread Antony Stone
efault, which is 1, therefore Bayes remains enabled. Antony. > # Bayesian classifier auto-learning (default: 1) > # > #bayes_auto_learn 1 > ... > > KR, Zsolt > > 2015.09.09. 13:49 keltezéssel, Antony Stone írta: > > On Wednesday 09 September 2015 at 13:42:31, Farkas Zs

Re: SA gone mad

2015-09-09 Thread Antony Stone
On Wednesday 09 September 2015 at 13:52:31, RW wrote: > On Wed, 9 Sep 2015 13:14:04 +0200 > > Antony Stone wrote: > > On Wednesday 09 September 2015 at 13:08:45, Farkas Zsolt wrote: > > > Content analysis details: (13.1 points, 15.0 required) > > > >

Re: non-English sender and body

2015-07-12 Thread Antony Stone
On Sunday 12 July 2015 at 23:25:04 (EU time), James wrote: Am 12.07.2015 um 21:40 schrieb Bill Cole: On 12 Jul 2015, at 11:28, James wrote: I put this in my /etc/spamassassin/local.cf: bayes_path /var/spamassassin/bayes_db/bayes bayes_file_mode 0777 It's heartwarming (in a

Re: non-English sender and body

2015-07-12 Thread Antony Stone
On Sunday 12 July 2015 at 11:07:30 (EU time), Reindl Harald wrote: Am 12.07.2015 um 10:59 schrieb Antony Stone: On Sunday 12 July 2015 at 10:48:28 (EU time), Reindl Harald wrote: the root of all evil is when people start calling tools as root Since this appears to be such a common

Re: non-English sender and body

2015-07-12 Thread Antony Stone
On Sunday 12 July 2015 at 10:48:28 (EU time), Reindl Harald wrote: the root of all evil is when people start calling tools as root Since this appears to be such a common problem, would it perhaps be a good idea to include a warning in sa-learn if it is run as UID=0, along the lines of You are

Re: What version of SPAMAssassin to use?

2015-07-03 Thread Antony Stone
On Friday 03 July 2015 at 19:02:27 (EU time), ClaudeWSmith wrote: I am an OLD time user of SPAMPal. But, SPAMPal does not work in my new 64 Bit machine. I have Windows 7, and Thunderbird. What version of SPAMAssassin do I use? I don't think you understand what SpamAssassin is, or how

  1   2   >