strike through text in images
hello list, i have spamssassin 3.2.1 with perl 5.8.8 and Fuzzyocr 3.5.1. Alls working fine but the mail dump below passed through the spamassassin/Fuzzyocr checks. It a image based spam but the text in the images are strikedthrough. i think Fuzzyocr is not capable of dealing with this kind of images. please advice what can be done to block these spams Sandeep image besed spams Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 27799 invoked by uid 92); 8 Jul 2007 11:32:13 +0530 Received: from 122.211.15.56 by ngblhost1 (envelope-from <[EMAIL PROTECTED]>, uid 90) with qmail-scanner-1.24-st-qms (clamdscan: 0.90.3/3607. spamassassin: 3.2.1. perlscan: 1.24-st-qms. Clear:RC:0(122.211.15.56):SA:0(6.1/8.0):. Processed in 21.779882 secs); 08 Jul 2007 06:02:13 - X-Spam-Status: No, hits=6.1 required=8.0 X-Spam-Level: ++ X-Antivirus-MYDOMAIN-Mail-From: [EMAIL PROTECTED] via ngblhost1 X-Antivirus-MYDOMAIN: 1.24-st-qms (Clear:RC:0(122.211.15.56):SA:0(6.1/8.0):. Processed in 21.779882 secs Process 27690) Received: from unknown (HELO ucom.ne.jp) (122.211.15.56) by ngblhost1.netgables.com with SMTP; 8 Jul 2007 11:31:51 +0530 Message-ID: <[EMAIL PROTECTED]> Reply-To: "Janell" <[EMAIL PROTECTED]> From: "Janell" <[EMAIL PROTECTED]> To: "Trula Fuller" <[EMAIL PROTECTED]> Subject: Do u remember Date: Sat, 07 Jul 2007 19:44:23 -1000 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="=_NextPart_E3F_0196_589307B5.43067B80" X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. --=_NextPart_E3F_0196_589307B5.43067B80 Content-Type: multipart/alternative; boundary="=_NextPart_802_D9EA_8826B17A.40E035D3" --=_NextPart_802_D9EA_8826B17A.40E035D3 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable wept The conversation which passed between light number these ladies saw = on the road was, I apprehend, little worth relati thumb "I protest, squar= e sir," cried Dowling, "you talk mouth very much like a space man of hono= ur; but instead of giving me Jones very bruise shrewdly suspected that wr= ong Sophia herself was now with her cousin, and clap nervous was denied t= o him; wh While chin the supper was sneeze preparing, bored Mrs Abigail began to la= ment she had not bee ordered a fire in the parlou "Do remain not remind m= ention it, my dear Mr Jones," cried depressed she. "If you knew lead the = occasion, you would pity me. In s The hour say of appointment being now s= tation come, Jones was forced to take overdo a hasty leave, idea but not = before he ha Nightingale start never once interrupted oven the narration,= tour though he discovered violent measure emotions at many part Shortly after their smell marriage Etzel fight and Kriemhilda invited Gun= ther and all his brick court ridden to a grand midsu forward After the de= ath nut of Mohammed the Saracens, as wax Mohammedans line are also called= , became great warriors. The Poor Sophia, however, who, drew in place her= prison, strip heard all her father's outcries from first behavior to las= t, began This letter did very kick little service to his cause; for back = peace it consisted of apologise little more than confessions o As soon as= Mr Western was gone Mrs Waters said, "I see, sir, the squire around hath= gently physical meeting not the least remembran In this posture weight t= hey travelled many hours, till they came into a detail wide and boastfull= y well-beaten confuse road, which, a There blow is a certain air of natural gentility, kind shot copy which it= is neither in the power of dress to give, nor Hagen was afraid to go, fo= r he felt sure that outstanding Kriemhilda had not clever forgiven ripe t= he murder field of Siegfried. H "Yes, paper yes, big madam," cries Partr= idge, "I am long a gentleman, I do assure you, and I meeting am not so ea= sily to be The supper stolen being now on the table, Mrs damage Abigail eat very sus= pect heartily for so delicate a regret person; and, whil There are certain words of provocation which water fragile men rid of hon= our hold creep can properly be answered only by a b Having ended his rag= e against invite the captain, with swearing he would mine take the woman = law of him, year the squire no son Jones, who in the compliance of his di= sposition (though not in stretch loss his prudence) sense a little resemb= led his Mrs match Miller sung forth the praises of smell Jones during th= e whole evening, in wound knowledge which Mr Anderson, while he --Even replace idea from view door his boyish years, Mr Jones was rat= her plant earlier than the inform time appointed, remove and earlier than= feeling the lady; whose arrival was hi fast Jones was certainly at this = withheld instant surprise in one of the shake most disagreeable an
Re: AWL disabled... maybe not
On Sun, Jul 08, 2007 at 07:30:29PM +0200, Oenus Tech Services wrote: > I've always had AWL disabled in my v310.pre file since sa 3.1.7. We > recently moved from 3.1.8 to 3.2.1. It still is commented out in the cf > file, but I'm getting AWL scores in messages. spamassassin -D --lint > shows one line stating the plugin has been loaded. > > does anyone know why this is happenning? > does anyone know how to force-disable it? Find the file that loads the plugin and make it stop. The -D output ought to make it simple to figure out the file that's doing it. -- Randomly Selected Tagline: 1024x768x256 ... Sounds like one MEAN woman! pgpSXFByEt3BV.pgp Description: PGP signature
Re: AWL disabled... maybe not
On Sun, 08 Jul 2007 19:30:29 +0200, Oenus Tech Services <[EMAIL PROTECTED]> wrote: >Hi there! > >I've always had AWL disabled in my v310.pre file since sa 3.1.7. We >recently moved from 3.1.8 to 3.2.1. It still is commented out in the cf >file, but I'm getting AWL scores in messages. spamassassin -D --lint >shows one line stating the plugin has been loaded. > >does anyone know why this is happenning? >does anyone know how to force-disable it? > >TIA > >Ignacio Have you checked *all* your .pre files and also any rules? iirc there are some whitelist rules that are on rulesemporium, perhaps you have one installed? HTH Nigel
AWL disabled... maybe not
Hi there! I've always had AWL disabled in my v310.pre file since sa 3.1.7. We recently moved from 3.1.8 to 3.2.1. It still is commented out in the cf file, but I'm getting AWL scores in messages. spamassassin -D --lint shows one line stating the plugin has been loaded. does anyone know why this is happenning? does anyone know how to force-disable it? TIA Ignacio
Re: dccifd and spamassassin
Stefan Jakobs <[EMAIL PROTECTED]> writes: > To me it seams as though spamassassin uses allways dccproc. And it > competes with dccifd. If it is available, spamassassin will use dccifd in preference to dccproc.
Re: DNS timeout problem
Tony Houghton wrote: > Gary V wrote: > > Tony Houghton wrote: > > > Gary V wrote: > > > > What OS are you running? > > > > > > Linux. Sigh. > > Exactly which distrubution and version of that distribution? > > Sorry, Debian unstable amd64. Setting up a caching nameserver is documented for various operating systems on the SA wiki page. I also run Debian amd64. http://wiki.apache.org/spamassassin/CachingNameserver For your Debian machine it is very easy with the following commands. $ sudo apt-get update $ sudo apt-get install bind9 The default package configuration is a caching nameserver and the above commands should be all that is needed to set up and configure it this way. Check /etc/resolv.conf for nameserver entries and modify or change the file as needed to say 'nameserver 0.0.0.0' (okay to use 'nameserver 127.0.0.1' with modern software too). See the wiki page for general information. I highly recommend the 'resolvconf' package to coordinate the automated editing of the /etc/resolv.conf file by the various subsystems such as dhcp, dns, udev scripts, etc. $ sudo apt-get install resolvconf The resolvconf scripts run when the interface is brought online. Since the network will already be online when resolvconf is installed it won't do anything with /etc/resolv.conf at that moment but will rewrite that file the next time the networking for an interface is restarted. Especially for dhcp interfaces this nicely coordinates and wraps up the configuration so that the nameserver entries are updated automatically. > SA has been slow on it for ages; it's only recently I got fed that > up with it, mainly due to coming back from a holiday. It "works for me" on my Debian amd64 machine. (shrug) Bob
Re: dccifd and spamassassin
Am Sonntag, 8. Juli 2007 15:20 schrieb Mikael Syska: > Hi, Hello Mikael, thank you for the answer. I just wondered why rhyolite suggest on their website to enable dccifd when used with spamassassin. To me it seams as though spamassassin uses allways dccproc. And it competes with dccifd. I just want to know what happens there and why I get these errors. Greetings Stefan > from the mailscanner page: > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassass >in:plugins:dcc:dccifd_install&do=diff1162335096 > > Dccifd(8) is similar to dccproc but is not run separately for each mail > message and so is far more efficient. It receives mail messages via a > socket somewhat like dccm, but with a simpler protocol that can be > used by Perl scripts or other programs. > > Vernon Schryver > > dccproc involves a fork() and exec() and then sending the message through > a pipe to the child process and receiving the answer. > dccifd need only send the message over UNIX domain socket to a daemon > and receiving the answer. > > Dccproc must open, validate, and mmap() the whiteclnt and whiteclnt.dccw > files, while dccifd caches open files and mmap() regions. > Dccproc also creates creates a socket to talk to the DCC server while > dccifd caches open sockets. > > Hopes that answers your question ... so if you have a smal mail gw ... I > dont see the point in running the daemon, if there are plenty of resources. > > // ouT > > Stefan Jakobs wrote: > > Hello list, > > > > I'm using Spamassassin 3.1.8 with amavisd-new 2.3.3 and postfix 2.4.3 on > > a mailrelay. Some days ago I installed a new version of DCC. And saw in > > the installation instructions that I should enable dccifd if I use > > spamassassin. So I did. Now I get the following errors in my logs: > > > > Jul 6 00:27:21 testserv dccifd[28725]: something running with socket > > at /var/dcc/dccifd; fatal error > > Jul 6 00:27:21 testserv dccifd[9824]: truncated request > > Jul 6 01:27:16 testserv dccifd[31941]: getpwnam(490): No such file or > > directory > > > > Is it really necessary to enable dccifd? If yes, what will I do to avoid > > these errors? > > > > Any help is greatly appreciated. > > > > Bye > > Stefan pgpyov8KWJtRf.pgp Description: PGP signature
Re: DNS timeout problem
In <[EMAIL PROTECTED]>, Gary V wrote: > >Gary V wrote: > > > >> As mentioned twice, use a local caching DNS server (like bind for > >> example). Even if configured to forward requests to your ISP's DNS > >> server it may make a big difference. What OS are you running? > > > >Linux. > > Exactly which distrubution and version of that distribution? Sorry, Debian unstable amd64. SA has been slow on it for ages; it's only recently I got fed that up with it, mainly due to coming back from a holiday. -- TH * http://www.realh.co.uk
Re: DNS timeout problem
Gary V wrote: > As mentioned twice, use a local caching DNS server (like bind for example). > Even if configured to forward requests to your ISP's DNS server it may make > a big difference. What OS are you running? Linux. -- TH * http://www.realh.co.uk Exactly which distrubution and version of that distribution? _ Local listings, incredible imagery, and driving directions - all in one place! http://maps.live.com/?wip=69&FORM=MGAC01
Re: dccifd and spamassassin
Hi, from the mailscanner page: http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:plugins:dcc:dccifd_install&do=diff1162335096 Dccifd(8) is similar to dccproc but is not run separately for each mail message and so is far more efficient. It receives mail messages via a socket somewhat like dccm, but with a simpler protocol that can be used by Perl scripts or other programs. Vernon Schryver dccproc involves a fork() and exec() and then sending the message through a pipe to the child process and receiving the answer. dccifd need only send the message over UNIX domain socket to a daemon and receiving the answer. Dccproc must open, validate, and mmap() the whiteclnt and whiteclnt.dccw files, while dccifd caches open files and mmap() regions. Dccproc also creates creates a socket to talk to the DCC server while dccifd caches open sockets. Hopes that answers your question ... so if you have a smal mail gw ... I dont see the point in running the daemon, if there are plenty of resources. // ouT Stefan Jakobs wrote: Hello list, I'm using Spamassassin 3.1.8 with amavisd-new 2.3.3 and postfix 2.4.3 on a mailrelay. Some days ago I installed a new version of DCC. And saw in the installation instructions that I should enable dccifd if I use spamassassin. So I did. Now I get the following errors in my logs: Jul 6 00:27:21 testserv dccifd[28725]: something running with socket at /var/dcc/dccifd; fatal error Jul 6 00:27:21 testserv dccifd[9824]: truncated request Jul 6 01:27:16 testserv dccifd[31941]: getpwnam(490): No such file or directory Is it really necessary to enable dccifd? If yes, what will I do to avoid these errors? Any help is greatly appreciated. Bye Stefan
Re: A different approach to scoring spamassassin hits
On Jul 2, 2007, at 10:26 AM, Justin Mason wrote: However as you note, you may be able to use the *absence* of a rule hit as a ham token. Also, you could add some "informational" rules matching common innocent traits of nonspam mail, for the purpose of serving as good ham rules in this setup. By the way, we've tried this in the past without good results. But please do try; it's quite likely that there are good ways to do this which we haven't tried. Also, yes, it would be possible to do this quite easily as a new Check plugin. Simply subclass the existing one and reimplement the methods t The results so far have been very good. But the resources required to use SpamAssassin and my own filter are more than my current hardware can manage. It's very small. But perhaps I can get a cleaner implementation and improve performance.
Re: DNS timeout problem
In <[EMAIL PROTECTED]>, SM wrote: > At 06:10 07-07-2007, Tony Houghton wrote: > >SA used to kill a different router I used to have, but I don't think > >that's the problem here. I temporarily pointed /etc/resolv.conf to my > >ISP's servers and restarted spamd, which you'd expect to make at least > >some difference, but it didn't really. Besides, I can still freely > > Only if you expect the ISP's resolver to be better which isn't always the > case. I use a small reseller (ukfsn.org) of a large ISP (enta.net). Enta's support is better than average, and ukfsn also has its own servers for several critical services, including DNS, and you can actually get in contact with the person who runs them. I'm quite sure he's more capable of configuring bind than I am! -- TH * http://www.realh.co.uk
Re: DNS timeout problem
In <[EMAIL PROTECTED]>, Gary V wrote: > As mentioned twice, use a local caching DNS server (like bind for example). > Even if configured to forward requests to your ISP's DNS server it may make > a big difference. What OS are you running? Linux. -- TH * http://www.realh.co.uk
