Re: possible idea for backscatter problem
On Sun, 2008-05-11 at 15:32 -0700, Tech Color printer wrote:
> so how am I supposed to get this vbounce to work on backscatter's ?
http://wiki.apache.org/spamassassin/FrequentlyAskedQuestions
http://wiki.apache.org/spamassassin/VBounceRuleset
Set whitelist_bounce_relays properly. Without knowing about legitimate
bounces, there are no illegitimate.
Also, as has been mentioned previously, do note that VBounce does NOT
block or otherwise raise the spam score significantly. You can do hat
yourself, or just filter as per the docs.
$ grep -A 2 procmail /usr/share/spamassassin/20_vbounce.cf
# If you use this, set up procmail or your mail app to spot the
# "ANY_BOUNCE_MESSAGE" rule hits in the X-Spam-Status line, and move
# messages that match that to a 'vbounce' folder.
guenther
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: triplets.txt
Theo Van Dinter wrote: On Fri, May 09, 2008 at 08:16:29AM -0400, Matt Kettler wrote: Hi, could someone kindly tell me what the file "triplets.txt" is used for, and if I need to have it in my rules directory or not? It's used for the TextCat plugin (which provides the ok_languages option). While you should have it in your rules directory, it won't break anything if you've got TextCat disabled. Just to be more specific -- it needs to be in the default rules directory. You don't need it in the local state dir, site rules dir, user preferences dir, etc. If it's not there already, your install would seem to have some issues. Theo, It would appear that triplets.txt is not included with 3.2.4, and probably isn't in any 3.2.x release. Looking at the code, triplets.txt is still used by HeaderEval.pm:word_is_in_dictionary(), which in turn is used in HeaderEval.pm:check_for_unique_subject_id(). However, no rules in the standard set utilize that eval in 3.2.4. It was used by SUBJ_HAS_UNIQ_ID in 3.1.x, but that rule isn't present anymore in 3.2.4. It would appear triplets.txt was removed because nothing is actually using it anymore, however I would expect the eval functions using it should have been removed at the same time. After a bit more research, TextCat appears to actually use the "languages" file instead of triplets.txt. (as far back as 2.50).
Re: possible idea for backscatter problem
Well I am confused. # locate vbounce /usr/share/spamassassin/updates_spamassassin_org/20_vbounce.cf /usr/share/spamassassin/20_vbounce.cf /var/lib/spamassassin/3.002000/updates_spamassassin_org/20_vbounce.cf # locate VBounce /usr/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/Plugin/VBounce.pm both init.pre and v320.pre have the line loadplugin Mail::SpamAssassin::Plugin::VBounce yet in backscatter email, there is no mention of VBounce: X-Spam-Status: Yes, score=4.1 required=3.9 tests=AWL,DATE_IN_PAST_96_XX, FB_QUALITY_REPLICA, MSGID_FROM_MTA_HEADER shortcircuit=no autolearn=disabled version=3.2.4 X-Spam-Report: * 1.0 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date * 3.9 FB_QUALITY_REPLICA BODY: Phrase: quality replica * 1.5 MSGID_FROM_MTA_HEADER Message-Id was added by a relay * -2.3 AWL AWL: From: address is in the auto white-list --- Below this line is a copy of the message. Received: (qmail 6691 invoked from network); 2 May 2008 05:23:01 +0200 Received: from ppp254.stat120.pacific.net.ph (221.121.120.254) by sd-1146.dedibox.fr with SMTP; 2 May 2008 05:23:00 +0200 Message-ID: <[EMAIL PROTECTED]> so how am I supposed to get this vbounce to work on backscatter's ? ___ Sent by ePrompter, the premier email notification software. Free download at http://www.ePrompter.com.
Re: msrbl.com disappeared
On Sun, 11 May 2008 at 22:45 +0200, [EMAIL PROTECTED] confabulated: Frank Bures wrote: Hi, I could not update SANE Security signatures in the last couple of days. It looks like domain msrbl.com disappeared. Could please anyone shed some light on this? $ host msrbl.com msrbl.com has address 64.22.86.210 msrbl.com mail is handled by 20 newton.8086.net. msrbl.com mail is handled by 30 mxuk.camelnetwork.com. msrbl.com mail is handled by 90 mxus.camelnetwork.com. msrbl.com mail is handled by 1000 mx.fakemx.net. It is back up now. The update script I've been using (which is one found off the site) was getting this error: rsync: getaddrinfo: rsync.mirror.msrbl.com 873: hostname nor servname provided, or not known
Re: msrbl.com disappeared
mouss wrote: Frank Bures wrote: I could not update SANE Security signatures in the last couple of days. It looks like domain msrbl.com disappeared. Could please anyone shed some light on this? $ host msrbl.com msrbl.com has address 64.22.86.210 msrbl.com mail is handled by 20 newton.8086.net. msrbl.com mail is handled by 30 mxuk.camelnetwork.com. msrbl.com mail is handled by 90 mxus.camelnetwork.com. msrbl.com mail is handled by 1000 mx.fakemx.net. Actually it's rsync.mirror.msrbl.com (alias to same address), but it has been working fine so the original problem must be something else. Regards. -- René Berber
Re: msrbl.com disappeared
Frank Bures wrote: Hi, I could not update SANE Security signatures in the last couple of days. It looks like domain msrbl.com disappeared. Could please anyone shed some light on this? $ host msrbl.com msrbl.com has address 64.22.86.210 msrbl.com mail is handled by 20 newton.8086.net. msrbl.com mail is handled by 30 mxuk.camelnetwork.com. msrbl.com mail is handled by 90 mxus.camelnetwork.com. msrbl.com mail is handled by 1000 mx.fakemx.net.
Re: trusted mailing list subscriber spam
Benny Pedersen wrote: On Sun, May 11, 2008 03:07, [EMAIL PROTECTED] wrote: All I know is that I don't use SPF anymore for my domain as there are just too many problems... e.g., forwarded messages. and you usely dont know where you forwards going from, :/( unless you receive spam from his domain, you have nothing to say. if you have a problem with forwarding, contact the IETF. In the mean time, please stop your SPF crusade. come on, please :-) $ host -t txt junc.org junc.org descriptive text "v=spf1 ip4:80.166.47.252/30 ip4:80.166.75.16/29 ip4:77.232.64.0/19 +all" a +all and you are annoying us about forwarding and SPF?
msrbl.com disappeared
Hi, I could not update SANE Security signatures in the last couple of days. It looks like domain msrbl.com disappeared. Could please anyone shed some light on this? Thanks Frank -- <[EMAIL PROTECTED]>
Re: How do I Test SpamAssassin
On Sunday 11 May 2008 09:13:28 Marc Ferguson wrote: > Hi, > > I looked on the wiki to see how do I test my installation of > spamassassin. I'm confused because it's not really giving me a method > that works right out-of-the-box. It looks like the preferred method is > The GTUBE. Based on that page it looks like I would use an external > mail client, such as Gmail, Yahoo, or anything else besides my local > desktop email client - and send mail to myself making sure a specific > 68-byte string is in the body of the email. > > My results have been that Gmail won't send it because their spam filter > recognizes it. I've tried Yahoo and they did the same thing. I'm a > regular user and I'm trying to apply this to my evolution application. > Thanks for any clarification. > > Marc F. just use spamc and feed a message manually, unless you want to test your MTA, in which case you need to check the manual of your mta. You can as well just send a message to yourself using telnet from your home computer. a properly setup spamfilter will match XBL, no matter the content of your message. -- best regards/Mit freundlichen Grüßen Arvid Ephraim Picciani
How do I Test SpamAssassin
Hi, I looked on the wiki to see how do I test my installation of spamassassin. I'm confused because it's not really giving me a method that works right out-of-the-box. It looks like the preferred method is The GTUBE. Based on that page it looks like I would use an external mail client, such as Gmail, Yahoo, or anything else besides my local desktop email client - and send mail to myself making sure a specific 68-byte string is in the body of the email. My results have been that Gmail won't send it because their spam filter recognizes it. I've tried Yahoo and they did the same thing. I'm a regular user and I'm trying to apply this to my evolution application. Thanks for any clarification. Marc F.
