RE: Regex help

2011-04-21 Thread Karsten Bräckelmann
On Thu, 2011-04-21 at 14:55 -0800, Kevin Miller wrote: I did get it to work from the CLI, and wrote the following rule: body CBJ_GiveMeABreak /\[br]{5,}/ This still is wrong. Something that has been mentioned, but not properly explained to you is the char class, denoted by square

RE: Regex help

2011-04-21 Thread Kevin Miller
Adam Katz wrote: On 04/21/2011 03:55 PM, Kevin Miller wrote: Thanks (also to Martin who replied). I posted one of the spams here: http://pastebin.com/9aBAxR7m You can see the long series of break codes in it. Yes I can. I can also see several other diagnostic bits in it, such as the

RE: Regex help

2011-04-21 Thread Martin Gregorie
On Thu, 2011-04-21 at 14:55 -0800, Kevin Miller wrote: I know it may trigger on some ham which is why I set the initial score to 0.01. Better ideas are most welcome though! It may be a good idea to look at the headers, especially From, From: and Message-ID: and at body URIs to see if there

RE: Regex help

2011-04-21 Thread Kevin Miller
Stupid Outlook. Meant to reply to the list again. Sigh. Karsten Bräckelmann wrote: What you want. The string 'br', repeated five times (or more). For the quantifier, you need to group the string. /(?:br){5}/ Besides the above, do not use {5,} as a quantifier, UNLESS there is

RE: Regex help

2011-04-21 Thread Karsten Bräckelmann
On Thu, 2011-04-21 at 15:47 -0800, Kevin Miller wrote: Karsten Bräckelmann wrote: What you want. The string 'br', repeated five times (or more). For the quantifier, you need to group the string. /(?:br){5}/ Great. I've changed my rule to that, and am going to look at Adam's

RE: Regex help

2011-04-21 Thread Kevin Miller
Karsten Bräckelmann wrote: On Thu, 2011-04-21 at 15:47 -0800, Kevin Miller wrote: Karsten Bräckelmann wrote: What you want. The string 'br', repeated five times (or more). For the quantifier, you need to group the string. /(?:br){5}/ Great. I've changed my rule to that, and am going

Re: Regex help

2011-04-21 Thread John Hardin
On Thu, 21 Apr 2011, Adam Katz wrote: rawbody LOCAL_5X_BR_TAGS /(?:br\/?[\s\r\n]{0,4}){5}/mi ...when does \s{0,4} not match the same text as [\s\r\n]{0,4} ? (i.e. \r and \n are whitespace, no?) -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: Regex help

2011-04-21 Thread Karsten Bräckelmann
On Thu, 2011-04-21 at 16:08 -0800, Kevin Miller wrote: Karsten Bräckelmann wrote: That should do the trick indeed. After this, I strongly suggest to carefully re-read the entire thread, and read some docs specifically about the points raised. That includes RE peculiarities [1] you used

Regex Rule Help?

2011-03-21 Thread Terry Carmen
I'm trying to match any URL that points to a URL shortener. They typically consist of http(s) followed by a domain name, a slash and a small series of alphanumeric characters, *without a trailing / or file extension*. I seem to be having pretty good luck matching the URL, however I can't

Re: Regex Rule Help?

2011-03-21 Thread Bowie Bailey
On 3/21/2011 1:07 PM, Terry Carmen wrote: I'm trying to match any URL that points to a URL shortener. They typically consist of http(s) followed by a domain name, a slash and a small series of alphanumeric characters, *without a trailing / or file extension*. I seem to be having pretty good

Re: Regex Rule Help?

2011-03-21 Thread Martin Gregorie
On Mon, 2011-03-21 at 13:07 -0400, Terry Carmen wrote: I'm trying to match any URL that points to a URL shortener. They typically consist of http(s) followed by a domain name, a slash and a small series of alphanumeric characters, *without a trailing / or file extension*. I seem to be

Re: Regex Rule Help?

2011-03-21 Thread Adam Katz
On 03/21/2011 10:07 AM, Terry Carmen wrote: I'm trying to match any URL that points to a URL shortener. They typically consist of http(s) followed by a domain name, a slash and a small series of alphanumeric characters, *without a trailing / or file extension*. I seem to be having pretty

Re: Trying to help friend NOT get caught by spamassassin

2011-03-10 Thread Martin Gregorie
On Wed, 2011-03-09 at 18:50 -0500, Robert Moskowitz wrote: Open Office might be worth it for him. It is what I use most of the time In that case one of you should suck a plain text newsletter body into oowriter, make it look tidy, save it as HTML and then run it through a validatoy, such

Re: Trying to help friend NOT get caught by spamassassin

2011-03-10 Thread John Hardin
On Thu, 10 Mar 2011, Martin Gregorie wrote: On Wed, 2011-03-09 at 18:50 -0500, Robert Moskowitz wrote: Open Office might be worth it for him. It is what I use most of the time In that case one of you should suck a plain text newsletter body into oowriter, make it look tidy, save it as

Re: Trying to help friend NOT get caught by spamassassin

2011-03-10 Thread Michael Scheidell
On 3/9/11 6:50 PM, Robert Moskowitz wrote: On 03/09/2011 06:33 PM, Martin Gregorie wrote: On Wed, 2011-03-09 at 17:33 -0500, Robert Moskowitz wrote: It is almost better to build the html and have OE send it than to let OE do its own HTML building. I couldn't agree more - provided he uses

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Robert Moskowitz
On 03/09/2011 01:12 AM, John Hardin wrote: On Tue, 8 Mar 2011, Robert Moskowitz wrote: I have a friend that puts out a 'barter' list. He acts as a clearinghouse for some equipment wholesalers. He has been fighting getting tagged as spamming for some time and finally came to me for help

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Robert Moskowitz
On 03/09/2011 12:37 AM, haman...@t-online.de wrote: I have a friend that puts out a 'barter' list. He acts as a clearinghouse for some equipment wholesalers. He has been fighting getting tagged as spamming for some time and finally came to me for help. I had helped some, but finally told

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Martin Gregorie
On Wed, 2011-03-09 at 16:45 -0500, Robert Moskowitz wrote: His content is strictly text, coming from Outlook Express. So the culprit might be OE putting the text into an HTML mime part. Historically, any HTML generated by any MS program has been terrible, what with proprietary attributes and

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Robert Moskowitz
On 03/09/2011 01:12 AM, John Hardin wrote: On Tue, 8 Mar 2011, Robert Moskowitz wrote: I have a friend that puts out a 'barter' list. He acts as a clearinghouse for some equipment wholesalers. He has been fighting getting tagged as spamming for some time and finally came to me for help

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Robert Moskowitz
On 03/09/2011 05:22 PM, Martin Gregorie wrote: On Wed, 2011-03-09 at 16:45 -0500, Robert Moskowitz wrote: His content is strictly text, coming from Outlook Express. So the culprit might be OE putting the text into an HTML mime part. Historically, any HTML generated by any MS program has been

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Martin Gregorie
On Wed, 2011-03-09 at 17:33 -0500, Robert Moskowitz wrote: It is almost better to build the html and have OE send it than to let OE do its own HTML building. I couldn't agree more - provided he uses something that generates valid HTML, which doesn't mean MS Office. I agree that sending plain

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread Robert Moskowitz
On 03/09/2011 06:33 PM, Martin Gregorie wrote: On Wed, 2011-03-09 at 17:33 -0500, Robert Moskowitz wrote: It is almost better to build the html and have OE send it than to let OE do its own HTML building. I couldn't agree more - provided he uses something that generates valid HTML, which

Re: Trying to help friend NOT get caught by spamassassin

2011-03-09 Thread John Hardin
On Wed, 9 Mar 2011, Robert Moskowitz wrote: On 03/09/2011 01:12 AM, John Hardin wrote: On Tue, 8 Mar 2011, Robert Moskowitz wrote: MANY_SPAN_IN_TEXT=2.7, Tell him to clean up his HTML. Actually, I am telling him to turn off sending HTML. ...even better. :) -- John Hardin KA7OHZ

Trying to help friend NOT get caught by spamassassin

2011-03-08 Thread Robert Moskowitz
I have a friend that puts out a 'barter' list. He acts as a clearinghouse for some equipment wholesalers. He has been fighting getting tagged as spamming for some time and finally came to me for help. I had helped some, but finally told him to add me to his distribution (he uses BCC lists

Re: Trying to help friend NOT get caught by spamassassin

2011-03-08 Thread hamann . w
I have a friend that puts out a 'barter' list. He acts as a clearinghouse for some equipment wholesalers. He has been fighting getting tagged as spamming for some time and finally came to me for help. I had helped some, but finally told him to add me to his distribution (he uses

Re: Trying to help friend NOT get caught by spamassassin

2011-03-08 Thread John Hardin
On Tue, 8 Mar 2011, Robert Moskowitz wrote: I have a friend that puts out a 'barter' list. He acts as a clearinghouse for some equipment wholesalers. He has been fighting getting tagged as spamming for some time and finally came to me for help. Oh, and I am looking at setting up a mailman

Help updating my spam assassin forum

2011-01-30 Thread simonmason
are clear instructions on upgrading under Windows. I am concerned that I will mess up one of the configuration files so any help in this area would be appreciated! Thanks. -- View this message in context: http://old.nabble.com/Help-updating-my-spam-assassin-forum-tp30799793p30799793.html Sent

Re: Help with new install

2011-01-30 Thread James Lay
On 1/29/11 5:15 PM, Mark Martinec mark.martinec...@ijs.si wrote: On Saturday January 29 2011 15:51:25 James Lay wrote: Just did a new install and I'm seeing the below when spamassassin is checking an email: Jan 29 07:47:42 gateway spamd[15540]: dns: sendto() failed: Connection refused at

Help with new install

2011-01-29 Thread James Lay
Hey all Just did a new install and I'm seeing the below when spamassassin is checking an email: Jan 29 07:47:42 gateway spamd[15540]: dns: sendto() failed: Connection refused at /usr/lib64/perl5/site_perl/5.10.1/Mail/SpamAssassin/DnsResolver.pm line 411, GEN408 line 158. Jan 29 07:47:42

Re: Help with new install

2011-01-29 Thread Mark Martinec
On Saturday January 29 2011 15:51:25 James Lay wrote: Just did a new install and I'm seeing the below when spamassassin is checking an email: Jan 29 07:47:42 gateway spamd[15540]: dns: sendto() failed: Connection refused at /usr/lib64/perl5/site_perl/5.10.1/Mail/SpamAssassin/DnsResolver.pm

help: bayes failed

2010-11-30 Thread Tom Kinghorn
Good morning List. Apologies for this post but I do not know what else to try. I am new to Suse Amavisd-new. (inherited system) As such, I appear to have a problem getting bayes to learn. I keep getting the errors autolearn=failed I have a feeling its a permission problem due to amavis but

Re: help: bayes failed: update

2010-11-30 Thread Tom Kinghorn
On 2010/11/30 10:07 AM, Tom Kinghorn wrote: Good morning List. Apologies for this post but I do not know what else to try. I am new to Suse Amavisd-new. (inherited system) As such, I appear to have a problem getting bayes to learn. Hi List. Further to my post, when using amavis, the

Re: help: bayes failed: RESOLVED

2010-11-30 Thread Tom Kinghorn
Further to my post, when using amavis, the autolearn fails, when i pass the same mail via spamassassin -t -D message, it shows autolearn=spam, so it looks like an amavis issue. I know its now OT, but any advice would be appreciated. Thanks Tom Hi List Please ignore. Problem

custom rule help

2010-11-24 Thread Tom Kinghorn
:_Stands_in_a_Pristine_West_Coast_Beachside_Security_Village?= I would like to match _Stands_in_a_Pristine_West_Coast_Beachside_Security_Village My last attempt was: header VM_WESTCOAST_SUB Subject =~ /.*:_Stands_in_a_Pristine_West_Coast_Beachside_Security_Village/ any help would be appreciated. Thanks Tom

RE: custom rule help

2010-11-24 Thread Randal, Phil
260160 From: Tom Kinghorn [mailto:thomas.kingh...@gmail.com] Sent: 24 November 2010 08:51 To: users@spamassassin.apache.org Subject: custom rule help Morning List. Firstly, apologies for posting this here. I have tried dozens of times to get this rule working, without success. I need to write

Re: custom rule help

2010-11-24 Thread Martin Gregorie
On Wed, 2010-11-24 at 10:50 +0200, Tom Kinghorn wrote: My last attempt was: header VM_WESTCOAST_SUB Subject =~ /.*:_Stands_in_a_Pristine_West_Coast_Beachside_Security_Village/ any help would be appreciated. How are you testing your rules? If you want to test and/or develop

Re: custom rule help

2010-11-24 Thread John Wilcock
Le 24/11/2010 09:50, Tom Kinghorn a écrit : Subject: =?windows-1252?Q?100%_Finance_with_No_Deposit_Required_:_Stands_in_a_Pristine_West_Coast_Beachside_Security_Village?= I would like to match _Stands_in_a_Pristine_West_Coast_Beachside_Security_Village By default, header rules work on the

Re: custom rule help

2010-11-24 Thread Tom Kinghorn
On 2010/11/24 02:55 PM, John Wilcock wrote: Le 24/11/2010 09:50, Tom Kinghorn a écrit : By default, header rules work on the *decoded* subject, not the raw quoted-printable-encoded subject you've quoted. So you need to replace the underscores with spaces in your regex. Alternatively

Re: Help! Filter spam with less than symbol in recipient

2010-10-16 Thread John Hardin
On Fri, 15 Oct 2010, Bowie Bailey wrote: header TO1To =~ /^\s*/ This will work with or without the space (or multiple spaces, or tabs...). You don't need to escape anything in this regex. None of those are special characters. I just got one of these spams too. Added to sandbox. --

Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Niente0
TO1 To:name =~ /EuroPrime Casino/i in particular (to filter the less than symbol): header TO1 To:name =~ /\/i but it seems no to work... Could you please help me? I'm desperate! Thanks :-) -- View this message in context: http://old.nabble.com/Help%21-Filter-spam

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Giles Coochey
any documentation about it): header TO1 To:name =~ /EuroPrime Casino/i in particular (to filter the less than symbol): header TO1 To:name =~ /\/i but it seems no to work... Could you please help me? I'm desperate! Thanks :-) Have you tried escaping it with \x3c ? -- Best

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Niente0
in context: http://old.nabble.com/Help%21-Filter-spam-with-%22less-than%22-symbol-in-recipient-tp29970215p29970540.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Yet Another Ninja
On 2010-10-15 12:58, Niente0 wrote: Giles Coochey wrote: Have you tried escaping it with \x3c ? Thanks for your suggestion, I tried it now but with no success. Here's my rule: header TO1 To:name =~ /\x3c/i score TO1 100 I have received other less than spam

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Niente0
this message in context: http://old.nabble.com/Help%21-Filter-spam-with-%22less-than%22-symbol-in-recipient-tp29970215p29971041.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Yet Another Ninja
On 2010-10-15 14:18, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 12:58, Niente0 wrote: pls post a spam sample on pastebin.com and send the link to the list Hi, I tried with 3 different browsers but pastebin.com shows only a blank page after submitting text. So I posted it here:

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Niente0
to an alias of my email. I sent him (myself) a test message and it passed. I examined the header of the incoming message and there are spamassassin infos, so it passed through SA rules and ignored the less than filtering rule... -- View this message in context: http://old.nabble.com/Help%21-Filter

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Yet Another Ninja
On 2010-10-15 14:49, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 14:18, Niente0 wrote: Untested: # To: i...@aags.com header TO1 To =~ /^/ Thank you! I tested it but it still doesn't work. :-( For testing purposes, I created a fake user in my Outlook address book,

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Martin Gregorie
On Fri, 2010-10-15 at 05:18 -0700, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 12:58, Niente0 wrote: pls post a spam sample on pastebin.com and send the link to the list Hi, I tried with 3 different browsers but pastebin.com shows only a blank page after submitting text.

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread John Hardin
On Fri, 15 Oct 2010, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 14:18, Niente0 wrote: Untested: # To: i...@aags.com header TO1 To =~ /^/ Thank you! I tested it but it still doesn't work. :-( For testing purposes, I created a fake user in my Outlook address book,

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread John Hardin
On Fri, 15 Oct 2010, Niente0 wrote: header TO1 To:name =~ /\/i but it seems no to work... Could you please help me? I'm desperate! Thanks :-) That probably means the parser has a bug. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Niente0
: header TO1 To =~ /^/ score TO1 100 header TO2 To =~ /^\\\ \/ score TO2 100 (the second one has the space inside!) A HUGE THANK YOU :handshake: -- View this message in context: http://old.nabble.com/Help%21-Filter-spam

Re: Help! Filter spam with less than symbol in recipient

2010-10-15 Thread Bowie Bailey
On 10/15/2010 10:00 AM, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 14:49, Niente0 wrote: works for me After some more tests, it seems to work for me too! I discovered that in my tests the server added a space after the second quote: (space) while in real spam it was not

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-08 Thread Benny Pedersen
On fre 08 okt 2010 03:18:35 CEST, John Hardin wrote But I believe we already crossed the line from meta to OT. ;) This braindead message munging won't happen on this list. Oh, agreed. one could change it to be more helpfull signatures :) To unsubscribe from this mailing list see the

RE: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-08 Thread Giampaolo Tomassoni
I was going to suggest the footer should read: To unsubscribe from this mailing list see the list-unsubscribe: header Ahaha! I vote yes to it. ;)

OT (Was: Unsubscribe / help footer at the bottom of messages to this list.)

2010-10-08 Thread mouss
Le 07/10/2010 23:28, John Hardin a écrit : On Thu, 7 Oct 2010, Karsten Br�ckelmann wrote: On Thu, 2010-10-07 at 11:11 +0200, Shlomi Fish wrote: before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Benny Pedersen
On tor 07 okt 2010 11:11:09 CEST, Shlomi Fish wrote before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom of their messages. http://tools.ietf.org/html/rfc2919 eg using squirrelmail, roundcube, horde imp

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Matus UHLAR - fantomas
On 07.10.10 11:11, Shlomi Fish wrote: before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom of their messages. They have standardized header: list-unsubscribe: mailto:users-unsubscr

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Mathias Homann
On Thursday 07 October 2010 11:46:58 Matus UHLAR - fantomas wrote: On 07.10.10 11:11, Shlomi Fish wrote: before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom of their messages. They have

RE: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Giampaolo Tomassoni
Furthermore, I suggest having a footer with unsubscription / help information in addition to the header because the header may not be visible, not all E- mail clients may display it, and people may otherwise be unaware of it. I have often seen some unsubscribe messages sent to mailing lists

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Matus UHLAR - fantomas
Furthermore, I suggest having a footer with unsubscription / help information in addition to the header because the header may not be visible, not all E-mail clients may display it, and people may otherwise be unaware of it. I have often seen some unsubscribe messages sent to mailing

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Mark Martinec
On 07.10.10 13:28, Giampaolo Tomassoni wrote: I see what you mean, but, well, I personally would vote no to this. I'm really tired of all that mailing lists which can't stay from attaching their own banners and general hints at the message tail. I fully agree. not mentioning breakage

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Karsten Bräckelmann
On Thu, 2010-10-07 at 11:11 +0200, Shlomi Fish wrote: before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom of their messages. Please tell me I am not the only one to see the irony. I can't even

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Benny Pedersen
On tor 07 okt 2010 22:19:29 CEST, Karsten Bräckelmann wrote It's not a matter of missing information forced onto each and any post. Ultimately, it boils down to the subscribers' clue level, in particular understanding email and mailing lists. i see it as subscribers missing buttoms in there

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread John Hardin
On Thu, 7 Oct 2010, Karsten Br?ckelmann wrote: On Thu, 2010-10-07 at 11:11 +0200, Shlomi Fish wrote: before I unsubscribe I should note that the incoming messages from this list should have an Unsubscribe / How-to-get-help footer at teh bottom of their messages. It's not a matter of missing

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread Karsten Bräckelmann
On Thu, 2010-10-07 at 14:28 -0700, John Hardin wrote: On Thu, 7 Oct 2010, Karsten Bräckelmann wrote: It's not a matter of missing information forced onto each and any post. Ultimately, it boils down to the subscribers' clue level, in particular understanding email and mailing lists. I

Re: [Meta] Unsubscribe / help footer at the bottom of messages to this list.

2010-10-07 Thread John Hardin
On Thu, 7 Oct 2010, Karsten Br�ckelmann wrote: On Thu, 2010-10-07 at 14:28 -0700, John Hardin wrote: On Thu, 7 Oct 2010, Karsten Bräckelmann wrote: It's not a matter of missing information forced onto each and any post. Ultimately, it boils down to the subscribers' clue level, in particular

Help installing spamassassin on ubuntu

2010-08-25 Thread Sabiha Fathima
web form. Am trying to build a tool which accepts a email message and checks it. Any help with the installation instructions and the details regarding the set up and modules will be appreciated. -- Thanks and Regards, Sabiha Fathima

Re: Help installing spamassassin on ubuntu

2010-08-25 Thread Dominic Benson
is under someone else's control, then you could use e.g. fetchmail to send it on through a local mailserver. Any help with the installation instructions and the details regarding the set up and modules will be appreciated. -- Thanks and Regards, Sabiha Fathima Dominic

Re: Help installing spamassassin on ubuntu

2010-08-25 Thread Martin Gregorie
On Wed, 2010-08-25 at 16:00 +0530, Sabiha Fathima wrote: Hi All, Am trying to install spamassassin on unbuntu without a smtp running on it. Is it mandatory to have a smtp server to run spam assassin. No. I run two copies of SA - one on my main mail server for normal production mail

Initial setup of SA - please help.

2010-08-15 Thread Marc Richter
Hello, I'm using SA since 5 years now. Yesterday I was switching my Debian system to a gentoo Server and had to reinstall SA this way. I thought I transfered the config nearly identical, but it seems to not be the case, since I get results in filtering, which I dont understand:

Re: Initial setup of SA - please help.

2010-08-15 Thread Wolfgang Zeikat
In an older episode, on 2010-08-15 15:57, Marc Richter wrote: http://pastebin.com/Rhj2UMLS I don't understand 3 things: 1) Why is it recognized as not beeing spam, although the required score is 3.0 and the actual score is 101.0? It says score=-101.0, that is *not* the same as score=101.0.

Re: Initial setup of SA - please help.

2010-08-15 Thread John Hardin
On Sun, 15 Aug 2010, Marc Richter wrote: http://pastebin.com/Rhj2UMLS I don't understand 3 things: 1) Why is it recognized as not beeing spam, although the required score is 3.0 and the actual score is 101.0? Look a little closer. The actual score is -101.0 (negative). Is this because

Re: Initial setup of SA - please help.

2010-08-15 Thread Marc Richter
Hi @all, I just had a chat with wolfgang by phone, and we discovered, that a Webformular on my own site seems to deliver this spam to my GMX - Account richter_marc -at- gmx.net . This would explaid this result: When my own server is the initial sender, it's clear why the USER_IN_WHITELIST -

Re: Initial setup of SA - please help.

2010-08-15 Thread Benny Pedersen
On søn 15 aug 2010 15:57:57 CEST, Marc Richter wrote Could anybody please give me a hint with this? do you send spam to your own email address ? to solve it, remove any instance of whitelist_from or if you like to track this change score on user_in_whitelist to something that is not -100

Re: Initial setup of SA - please help.

2010-08-15 Thread Josef Karliak
If it looks like you send spam to you, I've simple solution. SPF record in your domain zone and you tell in your SPF record that for your domain could send email your servers and any others are possibly spammers - see http://www.openspf.org/ For example for my domain could send emails

Re: Initial setup of SA - please help.

2010-08-15 Thread Marc Richter
Hi J.K. No, it seemes as if my server really sent it, not only that the from - matched. Seems as if an open Webformular sent it. But thank you anyway. Am 15.08.2010 18:54, schrieb Josef Karliak: If it looks like you send spam to you, I've simple solution. SPF record in your domain zone

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-18 Thread Matus UHLAR - fantomas
On 6/17/2010 2:19 PM, gwilodailo wrote: I've discovered that some mail between two of my clients (on separate hosts) is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm not at all an expert with spamassassin, and I'm having some difficulty finding what this rule is

Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-17 Thread gwilodailo
help would be greatly appreciated. Thanks! -- View this message in context: http://old.nabble.com/Please-Help-with-SA-Rule%3A-FH_HOST_IN_ADDRARPA-tp28917943p28917943.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-17 Thread Charles Gregory
On Thu, 17 Jun 2010, gwilodailo wrote: I've discovered that some mail between two of my clients (on separate hosts) is getting flagged as spam, because of this rule (FH_HOST_IN_ADDRARPA). I'm not at all an expert with spamassassin, and I'm having some difficulty finding what this rule is about

Re: Please Help with SA Rule: FH_HOST_IN_ADDRARPA

2010-06-17 Thread Lee Dilkie
). I'm not at all an expert with spamassassin, and I'm having some difficulty finding what this rule is about and what to do about it. Any help would be greatly appreciated. Thanks!

Re: Help with new rule, and local.cf

2010-06-04 Thread Matus UHLAR - fantomas
On 03.06.10 20:45, cviebrock wrote: Thanks for the link. That'll help. In general, though, can I write a SA rule that looks at the raw message body with trying to decode attachments, etc.? I thought that would be the easiest way to catch these messages (and some other spam that comes

Re: Help with new rule, and local.cf

2010-06-04 Thread Martin Gregorie
On Thu, 2010-06-03 at 19:44 -0700, cviebrock wrote: I'm trying to write a rule to catch a bunch of spam I'm getting recently that contain only an .RTF file. The filename, subject line, and other details vary, but the raw message body is always the same i.e. the base64 encoded RTF file. See

Re: Help with new rule, and local.cf

2010-06-04 Thread cviebrock
#.##.##.### line. I guess my question is more general: how do I write a rule that looks at the undecoded content of the emails, versus one that looks at the decoded parts? - Colin -- View this message in context: http://old.nabble.com/Help-with-new-rule%2C-and-local.cf-tp28775147p28780895.html Sent

Re: Help with new rule, and local.cf

2010-06-04 Thread Benny Pedersen
On Fri 04 Jun 2010 04:44:46 AM CEST, cviebrock wrote http://pastebin.com/xFddVaX8 http://sanesecurity.org/ dont know what clamav rules helps for this, but this is another way to stop spam attachements remember to make good choice of official sigs in clamd if using clamav milter, only

Help with new rule, and local.cf

2010-06-03 Thread cviebrock
to help. Thanks, and sorry if I'm being a newb! - Colin -- View this message in context: http://old.nabble.com/Help-with-new-rule%2C-and-local.cf-tp28775147p28775147.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Help with new rule, and local.cf

2010-06-03 Thread Mikael Syska
/xFddVaX8 Any suggestions? Actually, I'm not sure if any of my rules in local.cf are firing. I'm running SA 3.3.0 via spampd 2.30-22 and Postfix 2.5.5, Perl 5.10.0 on Debian Lenny.  I'll post any config settings needed to help. Thanks, and sorry if I'm being a newb! - Colin -- View

Re: Help with new rule, and local.cf

2010-06-03 Thread cviebrock
Thanks for the link. That'll help. In general, though, can I write a SA rule that looks at the raw message body with trying to decode attachments, etc.? I thought that would be the easiest way to catch these messages (and some other spam that comes in as PNG files). - Colin -- View

Re: SA-3.2 need help

2010-04-26 Thread Anshul Chauhan
This rule is in my /etc/mail/spamassassin/local.cf as FH_DATE_PAST_20XX 0 and in /var/lib/spmassassin//3.002004/updates_spamassassin_org as #score FH_DATE_PAST_20XX 2.075 3.384 3.554 3.188 # n=2 i've commented the line in /var/lib/spamassassin. How can i set spamassassin as to not check my local

Re: SA-3.2 need help

2010-04-26 Thread Bowie Bailey
Anshul Chauhan wrote: This rule is in my /etc/mail/spamassassin/local.cf http://local.cf as FH_DATE_PAST_20XX 0 and in /var/lib/spmassassin//3.002004/updates_spamassassin_org as #score FH_DATE_PAST_20XX 2.075 3.384 3.554 3.188 # n=2 i've commented the line in /var/lib/spamassassin. How

Re: SA-3.2 need help

2010-04-23 Thread Bowie Bailey
blacklist checks and such. If a local user sends a spammy message, it will still be caught (although the ALL_TRUSTED rule gives a -1 to the score, to help prevent false positives from your own network). Take an example mail and run in through SA manually to see exactly what is happening. $ spamassassin

Re: SA-3.2 need help

2010-04-23 Thread Karsten Bräckelmann
On Fri, 2010-04-23 at 11:16 +0530, Tux Techie wrote: I've inserted score FH_DATE_PAST_20XX 0 without the quotes to the end of your local.cf file to disable the rule for 2010 bug. According to the timestamps the samples are older than your mail. Assuming you restarted spamd, these hits should

SA-3.2 need help

2010-04-22 Thread Tux Techie
hi, I'm new to linux and Need help in configuring spamassassin on my mail server,I'm using spamassassin-3.2.4-1.el4.1 on CentOS4 with sendmail-8.13.1-3.3.el4 This is my local.cf # This is the right place to customize your installation of SpamAssassin. # # See 'perldoc Mail

Re: SA-3.2 need help

2010-04-22 Thread Bowie Bailey
Tux Techie wrote: hi, I'm new to linux and Need help in configuring spamassassin on my mail server,I'm using spamassassin-3.2.4-1.el4.1 on CentOS4 with sendmail-8.13.1-3.3.el4 This is my local.cf http://local.cf/ bayes_ignore_header X-Spam-Flag

Re: SA-3.2 need help

2010-04-22 Thread Karsten Bräckelmann
On Thu, 2010-04-22 at 21:15 +0530, Tux Techie wrote: I'm new to linux and Need help in configuring spamassassin on my mail server,I'm using spamassassin-3.2.4-1.el4.1 on CentOS4 with sendmail-8.13.1-3.3.el4 [ massive snip ] This is my /etc/procmailrc DROPPRIVS=yes :0fw | /usr/bin/spamc

Re: SA-3.2 need help

2010-04-22 Thread David Morton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 4/22/10 10:45 AM, Tux Techie wrote: I'm new to linux and Need help in configuring spamassassin on my mail server,I'm using spamassassin-3.2.4-1.el4.1 on CentOS4 with My first guess without seeing real samples would be that you

Re: SA-3.2 need help

2010-04-22 Thread Tux Techie
I've inserted score FH_DATE_PAST_20XX 0 without the quotes to the end of your local.cf file to disable the rule for 2010 bug. If i'm upgrading SA to 3.3.1, my mail processing is very slow and my server load average is going up. I've googled all the stuff in my local.cf its not inherited from

Re: Freemail Rule help

2010-04-07 Thread Ned Slider
John Hardin wrote: On Tue, 6 Apr 2010, Ned Slider wrote: John Hardin wrote: On Tue, 6 Apr 2010, Ned Slider wrote: uriLOCAL_URI_BITLY m{https?://bit\.ly/\w{6}} describe LOCAL_URI_BITLY contains bit.ly link bit.ly is a legitimate URL-shortening service. Are you sure

Freemail Rule help

2010-04-06 Thread Alex
Hi, I'm having a problem with emails that are from a freemail domain with simply a shorturl in them, like this: bra href=http://bit.ly/aqI4o1http://bit.ly/aqI4o1/Benjamin/abrbrbrlovee yabr rawbodyLOC_BITLY /href\=http:\/\/bit\.ly\/.+\w{1,8}http:\/\/bit\.ly\/.+\w{1,15}\/.+\w{1,15}\/abrbr/

Re: Freemail Rule help

2010-04-06 Thread Ned Slider
Alex wrote: Hi, I'm having a problem with emails that are from a freemail domain with simply a shorturl in them, like this: bra href=http://bit.ly/aqI4o1http://bit.ly/aqI4o1/Benjamin/abrbrbrlovee yabr rawbodyLOC_BITLY

Re: Freemail Rule help

2010-04-06 Thread John Hardin
On Tue, 6 Apr 2010, Ned Slider wrote: uri LOCAL_URI_BITLY m{https?://bit\.ly/\w{6}} describeLOCAL_URI_BITLY contains bit.ly link bit.ly is a legitimate URL-shortening service. Are you sure you want to penalize them? -- John Hardin KA7OHZ

<    2   3   4   5   6   7   8   9   10   11   >