On Thursday 26 October 2006 09:10, Daryl C. W. O'Shea wrote:
> John Andersen wrote:
> > Everytime my SA-Update runs the output from the cron job shows these
> > lines:
>
> Only from cron?
Nope, not only from cron, also when manually run.
Other machines with later versions of Perl do not do
this s
On Thursday, October 26, 2006, 2:01:55 PM, robert robert wrote:
> So my shell account may be disappearing soon and I'm looking for a
> recommendation for an ISP that provides SA but also allows me to apply my own
> perl filter for any mail that arrives. The latter isn't crucial but it's very
> pref
What does the IO usage look like on the
server? We ran a couple of our backup SA instances on VMWare but they
database is on a remote SQL server. So the only IO is logging. We have
several VM Instances for a variety of things. Did you pre-allocate the
disk space? If not you might consid
On Thu, 26 Oct 2006 15:52:17 -0700 (PDT)
Sammy Anderson <[EMAIL PROTECTED]> wrote:
We recently migrated our SpamAssassin installation from a
physical 3.6 GHz system running RHEL 4 and SA 3.0.4 to a
VMware VM (ESX 2.5.4) with RHEL 4 as the guest OS and SA
3.1.7. Each user has their own Baye
I'm running a system called MailCleaner. www.mailcleaner.org
The system works great, but it's new and not a lot of docs yet.
Figured I'd help a little with devel if I can, but I'm new to mail gateways
and don't have a gigantic amount of Linux experience.
Ramprasad wrote:
>
> On Mon, 2006-10
On 26.10.2006 16:15, * Dylan Bouterse wrote:
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 26, 2006 9:58 AM
> To: Dylan Bouterse
> Cc: users@spamassassin.apache.org
> Subject: Re: spamassassin --lint fails with rules in local.cf
>
> Dylan Bou
>
> > I would like to know howto automatically remove detected
> Spam? I don't
> > want spamassassin to deliver the spam with a [SPAM] tag at
> the begining of
> > the message but preffer to send it (the spam) directly to
> something like
> > /dev/null
>
> Why don't you use amavisd-new ( http://w
Sammy Anderson wrote:
We recently migrated our SpamAssassin installation from a physical 3.6
GHz system running RHEL 4 and SA 3.0.4 to a VMware VM (ESX 2.5.4) with
RHEL 4 as the guest OS and SA 3.1.7. Each user has their own Bayes
files (Berkeley DB) and these were copied from the old to the n
On Thursday 26 October 2006 3:06 am, Giampaolo Tomassoni wrote:
> >
> > I'm using the server at 82.94.255.100:24441 and have not had any
> > problems since I switched back in March of this year.
>
> Ok. You're right. I'm wrong. :)
>
> I checked it "the right way" and it seems that Pyzor do infact
We recently migrated our SpamAssassin installation from a physical 3.6 GHz system running RHEL 4 and SA 3.0.4 to a VMware VM (ESX 2.5.4) with RHEL 4 as the guest OS and SA 3.1.7. Each user has their own Bayes files (Berkeley DB) and these were copied from the old to the new server. Now whenev
Or, easier and faster, use the milter-regex (if you are using sendmail as
you MTA). You can then build a regex to drop beyond a certain level.
Or, if you're feeling braver, you can use the patches at the following page
to set discard ranges directly on the spamass-milter:
http://www.jmaimon.com/s
Thanks for the suggestion,
But should I run "spamassassin --revoke" or "/usr/lib/razor-revoke" on folder
containing such a ham?
spamassassin --revoke /ham_folder/*
or
/usr/lib/razor-revoke /ham_folder/*
Are these tools interchangeable?
And again, it seems very strange that a regular message wit
On 26-okt-2006, at 23:01, [EMAIL PROTECTED] wrote:
So my shell account may be disappearing soon and I'm looking for a
recommendation for an ISP that provides SA but also allows me to
apply my own
perl filter for any mail that arrives. The latter isn't crucial but
it's very
prefered.
Looki
On 26-okt-2006, at 20:07, Chris St. Pierre wrote:
On Thu, 26 Oct 2006, san wrote:
Hi, How to write a rules to avoid below type of mails or is there
a rule
already which marks this as spam. Everday i get 3 to 4 mails of
this type
with one picture image which says GDKI No.1 Entertainment
On Thu, 2006-10-26 at 16:01 -0500, [EMAIL PROTECTED] wrote:
> So my shell account may be disappearing soon and I'm looking for a
> recommendation for an ISP that provides SA but also allows me to apply my own
> perl filter for any mail that arrives. The latter isn't crucial but it's very
> prefered
So my shell account may be disappearing soon and I'm looking for a
recommendation for an ISP that provides SA but also allows me to apply my own
perl filter for any mail that arrives. The latter isn't crucial but it's very
prefered.
Looking basically for webmail (https) imap4 and the ability to la
Have you restarted spamd? Is it running?
Brian S. Meehan wrote:
I know y'all are smart, just looking for a little help on this one.
In addition to the below info, spamassassin -lint works fine and quietly.
Thanks,
Brian
Original Message -
At 11:48 AM 10/26/2006, you wrote:
I know y'all are smart, just looking for a little help on this one.
In addition to the below info, spamassassin -lint works fine and quietly.
I'm sorta a newbie too, but..
Have you tried sending yourself a gtube message?
http://spamassassin.apache.org/gtube
I know y'all are smart, just looking for a little help on this one.
In addition to the below info, spamassassin -lint works fine and quietly.
Thanks,
Brian
Original Message
Subject: upgraded, now no spam is caught
From:"Brian S. Meeh
Check out the SARE rulesets, ImageInfo, FuzzyOcr, ...
Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University
On Thu, 26 Oct 2006, san wrote:
>
>Hi, How to write a rules to avoid below type of mails or is there a rule
>already which marks this as spam. Everday i get 3 to 4 mails
Hi, How to write a rules to avoid below type of mails or is there a rule
already which marks this as spam. Everday i get 3 to 4 mails of this type
with one picture image which says GDKI No.1 Entertainment industry.
Your help is much appreciated and i started using spam assassin recently and
still
"Daryl C. W. O'Shea" writes:
>Justin Mason wrote:
>> Jason Haar writes:
>
>>> Obviously you have to have over-speced your mail servers to be able to
>>> do this - something poor old Justin can't manage I think :-)
>>
>> Yeah. If I could persuade someone to donate a server just for *my*
>> person
John Andersen wrote:
Everytime my SA-Update runs the output from the cron job shows these lines:
Only from cron?
Use of uninitialized value in eval "string" at /usr/bin/sa-update line 91.
Use of uninitialized value in eval "string" at /usr/bin/sa-update line 91.
Use of uninitialized value in
[EMAIL PROTECTED] wrote:
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64
Probably a message in base64 that does not contain any single 8bit code should
be
considered as an attempt to hide the message from scanners
That's a good idea, Wolfgang. The mess
Actually this server is hosting lots of different domains that I do not
control, I do not choose whether there is a backup MX or not. However I
noted that some (most) of those backups MX already had a working
spamassassin configuration and that it would be a waste of time to re-scan
those mails. I
Mark Martinec wrote:
If scanning at the MTA level with amavisd-new, a synthetic Return-Path
is prepended to a copy of a message that is given to SA for examination.
Much like David B Funk says a sendmail-SA-milter does.
MIMEDefang does this as well. It synthesizes Received and Return-Path
whe
Greetings,
If anyone on the list is using latest SA, clamav & qmail-scanner with the
Qmail MTA can you please hit me with an email offlist?
I will be glad to share a synopsis of what I am trying to find out and
implement once I get there with this list.
I haven't been able to find it anywhere af
On Thu, 26 Oct 2006, Renaud Drousies wrote:
>Hello,
>
>Is there a way to prevent Spamassasssin to double-scan the mails that have
>already been scanned by the backup MX but still having him to autolearn
>what it receives through it (based on the score given by the backup mx,
>but according to its
Theo Van Dinter wrote:
On Thu, Oct 26, 2006 at 09:46:28AM -0400, Peter H. Lemieux wrote:
Does SA convert the blob into text before scanning? It contains a number
of drug-related words and a URI that points to "pharmconnect.org".
Yes.
I was pretty sure this was the case but wanted to confirm
Hello,
Is there a way to prevent Spamassasssin to double-scan the mails that have
already been scanned by the backup MX but still having him to autolearn
what it receives through it (based on the score given by the backup mx,
but according to its own auto learn threshold rules)? The goal being to
Well, I figured that, but why. It never did this before. Is it possible that a rule causes a loop and forces SA to shutdown?On 10/26/06, Daryl C. W. O'Shea
<[EMAIL PROTECTED]> wrote:
Juan Mas wrote:> Im getting this odd behavior where spamd shuts itself down out of> nowhere. I cant really pinpoi
Nick Gilbert wrote:
[20193] dbg: bayes: first pass decided on 1382400 for atime delta
[20193] dbg: locker: refresh_lock: refresh
/home/nick/.spamassassin/bayes.lock
[20193] dbg: locker: refresh_lock: refresh
/home/nick/.spamassassin/bayes.lock
[20193] dbg: locker: refresh_lock: refresh
/home/
Juan Mas wrote:
Im getting this odd behavior where spamd shuts itself down out of
nowhere. I cant really pinpoint what makes it shutdown just what Ive
found in the logs.
spamd[27466]: [spamd] fork: Cannot allocate memory at /usr/bin/spamd
I'd say that's a pretty good reason for it to stop
On Wed, Oct 25, 2006 at 10:18:44AM -0500, Bill wrote:
> Ok, if the image spams all have a different hash wouldn't that make the
> Hash function built into Fuzzy OCR useless as well? I'm not sure I buy into
> that thinking. The hash option in my Fuzzy OCR setup runs pretty well.
I know nothing
>> I received a spam today where the text was only a base64-encoded blob.
>>
>> Content-Type: text/html;
>> charset="us-ascii"
>> Content-Transfer-Encoding: base64
>> Subject: feel young and strong again
>>
>> PGh0bWw+DQpTdG9wIG92ZXJwYXlpbmcgZm9yIHlvdXIgcHJlc2NyaXB0aW9uIG1lZGljYXRpb25z
>>
On Tue, Oct 24, 2006 at 08:26:09PM -0800, John Andersen wrote:
> > > Use of uninitialized value in eval "string" at /usr/bin/sa-update line 91.
> > > eval { use Net::DNS; };
> > Just curious, what version of perl are you using?
>
> 5.8.0
Interesting. I have no idea what would cause perl to gener
>>
>> Hello All,
>>
>> I've a mail system running Cyrus+Postfix+Amavisd-new+ClamAV+Spamassassin =
>> on SuSE Linux Ent. Server 9.
>>
>> The problem is that non-encoded 8bit data is not allowed in message =
>> headers and Cyrus-IMAPd prevents from any problem by replacing those =
>> chars with X
On Wed, Oct 25, 2006 at 02:35:07PM -0400, Joe Flowers wrote:
> If I pre-pend a message's Envelope to it's Body, can Spamassassin do
> anything useful with it?
It depends what you mean by "a message's envelope". If you mean add in
standard headers for MAIL FROM and RCPT TO, then sure, go ahead an
On Thu, Oct 26, 2006 at 12:40:55PM +0100, Steve [Spamassasin] wrote:
> All of which makes sense... Over time, however, there is a build-up of
> bayes_toks.expire files (where $ is a decimal digit) and I'm unclear
> about these.Anecdotally, when there are lots of these
They're the temporar
On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote:
> There is a legitimate e-mail with empty body message but with .doc attachment
> (filename is in hebrew) that marked as a spam -
>
> X-Spam-Status: Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_44,
> FROM_ENDS_IN_NUMS,
On Thu, Oct 26, 2006 at 09:46:28AM -0400, Peter H. Lemieux wrote:
> Does SA convert the blob into text before scanning? It contains a number
> of drug-related words and a URI that points to "pharmconnect.org".
Yes.
> Also is there an SA rule that scores messages that contain only a single
> ba
Hi,
I have a problem whereby spamc sometimes times out while scanning mail
and consequently spam e-mail passes through unchecked straight to my inbox.
It is being called from Simscan but I don't think this is the problem as
the same thing happens on the command line.
If I run spamc manually
Title: RE: How to avoid spamassassin checks in Subject header?
Thanks Chris,
I should read more about score rules J
Another thing:
There is a legitimate e-mail with empty
body message but with .doc attachment (filename is in hebrew) that marked as a spam
-
X-Spam-Status: Ye
On Tue, Oct 24, 2006 at 06:06:11PM +0100, Justin Mason wrote:
> > Hrm. I would normally suggest running $msg->finish(), but in this case, I
> > believe that the $status->finish() should handle it.
>
> well, I wouldn't recommend assuming it will be supported in future...
> definitely a better idea
On Wed, Oct 25, 2006 at 12:57:52PM -0400, Joe Flowers wrote:
> I'd prefer to use M::SA->check_message_text(), but if I do a
> M::SA->check_message_text('This is a programmer's nightmare.'), then
> M::SA->check_message_text() will choke because of the (') in the middle
> of the string. How do I p
news <[EMAIL PROTECTED]> wrote on 10/25/2006 08:36:11 AM:
> Thanks Chris I'll do that.. can someone please remind me where I set the
> max_child limit?? Like I said I could not find it last night I want to
see
> what it is set to now and adjust accordingly.
>
It's the -m parameter you specif
Title: RE: spamassassin --lint fails with rules in local.cf
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 26, 2006 9:58 AM
To: Dylan Bouterse
Cc: users@spamassassin.apache.org
Subject: Re: spamassassin --lint fails with rules in local.cf
D
Peter H. Lemieux wrote:
> I received a spam today where the text was only a base64-encoded blob.
>
> Content-Type: text/html;
> charset="us-ascii"
> Content-Transfer-Encoding: base64
> Subject: feel young and strong again
>
> PGh0bWw+DQpTdG9wIG92ZXJwYXlpbmcgZm9yIHlvdXIgcHJlc2NyaXB0aW9uIG1lZGljY
Dylan Bouterse wrote:
>
>
>
>
>
>
>
> *From:* Chris Santerre [mailto:[EMAIL PROTECTED]
> *Sent:* Thursday, October 26, 2006 9:31 AM
> *To:* Dylan Bouterse; users@spamassassin.apache.org
> *Subject:* RE: spamassassin --lint
Martin Kolb wrote:
Hi all,
I'm running a Spamassassin on a Debian Etch System in a Server, located
in a computer center behind a mail relay server. Every incoming mail has
to pass this mailrelay. So, I believe (maybe it's not the problem?) that
my spamassasin now thinks that all that mail is
I received a spam today where the text was only a base64-encoded blob.
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64
Subject: feel young and strong again
PGh0bWw+DQpTdG9wIG92ZXJwYXlpbmcgZm9yIHlvdXIgcHJlc2NyaXB0aW9uIG1lZGljYXRpb25z
IHRvZGF5Lg0KPGJyPg0KPGJyP
Title: RE: spamassassin --lint fails with rules in local.cf
From: Chris Santerre
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 26, 2006
9:31 AM
To: Dylan Bouterse;
users@spamassassin.apache.org
Subject: RE: spamassassin --lint
fails with rules in local.cf
>
-
Title: RE: spamassassin --lint fails with rules in local.cf
> -Original Message-
> From: Dylan Bouterse [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 26, 2006 8:35 AM
> To: users@spamassassin.apache.org
> Subject: spamassassin --lint fails with rules in local.cf
>
>
> I have
Title: RE: How to avoid spamassassin checks in Subject header?
> -Original Message-
> From: Leon Kolchinsky [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 26, 2006 9:09 AM
> To: users@spamassassin.apache.org
> Subject: How to avoid spamassassin checks in Subject header?
>
>
>
Hello All,
I've a mail system running Cyrus+Postfix+Amavisd-new+ClamAV+Spamassassin on
SuSE Linux Ent. Server 9.
The problem is that non-encoded 8bit data is not allowed in message headers and
Cyrus-IMAPd prevents from any problem by replacing those chars with X (mail
program should do encodi
spamassassin --lint is quiet. no output.
Thank you for replying and assisting; I look forward to other suggestions
also.
Regards,
Brian
On Wed, October 25, 2006 22:07, Matt Kettler wrote:
> Brian S. Meehan wrote:
>> I upgraded spamassassin from 3.0.4 to 3.1.7 and now no spam is getting
>> caught.
I have added some rules in my local.cf file (for adding scores for some
SARE rules) but when I run spamassassin -lint (or when I run
rules_du_jour which does the same) it says the rules in my local.cf file
are non-existent, but spamassassin ultimately runs fine. What am I doing
wrong?
Dylan
"Daryl C. W. O'Shea" writes:
>Justin Mason wrote:
>
>> (In the meantime, I'm just going back to removing the BL, using
>> SpamAssassin instead, and using the Shortcircuit plugin to reduce CPU load
>> if RCVD_IN_SBL or RCVD_IN_XBL fires.)
>
>Can you selectively short-circuit based on the user's pre
Hi all,
I'm running a Spamassassin on a Debian Etch System in a Server, located
in a computer center behind a mail relay server. Every incoming mail has
to pass this mailrelay. So, I believe (maybe it's not the problem?) that
my spamassasin now thinks that all that mail is not spam, because it
This feels like a series of FAQs, but previous frequent answers don't
seem to answer my questions directly...
With Spamassassin 3.1.4 I'm running spamd. and my global procmail uses
spamc to process mail. Individual users train/report with spamc too.
In an end-user account there's a .spamassasin
> > For envelope sender there is a standard header: Return-Path
>
> Return-Path is supposed to be added when the message is placed in the
> mailstore (ie, last hop, after the transfer network). Since I do scanning
> at the MTA level before delivery, I don't have Return-Path yet.
If scanning at the
On Thu, 26 Oct 2006 02:25:37 -0700, "Loren Wilton"
<[EMAIL PROTECTED]> wrote:
>> Where do these guys all get on the same kick at the same time?
>> Or is it really ONE spammer who just got fired?
>>
>> Do they hold meetings about what topics to use next month
>> or what?
>
>I'd lay odds that it is
On Thu, 26 Oct 2006 02:25:37 -0700, "Loren Wilton"
<[EMAIL PROTECTED]> wrote:
>> Where do these guys all get on the same kick at the same time?
>> Or is it really ONE spammer who just got fired?
>>
>> Do they hold meetings about what topics to use next month
>> or what?
>
>I'd lay odds that it is
Where do these guys all get on the same kick at the same time?
Or is it really ONE spammer who just got fired?
Do they hold meetings about what topics to use next month
or what?
I'd lay odds that it is either one spammer, or more likely one spam program.
Back in the days of 900 porn phone numb
> > > > You might also get better response from the server at
> > >
> > > 82.94.255.100:24441
> > >
> > > How does it cames that reported spam wouldn't cause a further
> > > test to include pyzor's score with this server?
> >
> > Even worse: I don't get a PYZOR score at all from this server.
> >
>
On 10/25/2006 5:46 PM, Ken A wrote:
> It should be mentioned that envelope To: is not there for a reason. :-(
> Including it in the header will remove the privacy enabled by Bcc
This is true--BCC will be made entirely pointless if the envelope
recipients are irreversibly pasted into the message
On 10/25/2006 7:15 PM, Mark Martinec wrote:
> For envelope sender there is a standard header: Return-Path
Return-Path is supposed to be added when the message is placed in the
mailstore (ie, last hop, after the transfer network). Since I do scanning
at the MTA level before delivery, I don't have
67 matches
Mail list logo