Re: Can I drop ****** SPAM ******** not send it on?
On 3/6/2016 1:35 AM, rob...@chalmers.com.au wrote: I'm trying to drop such messages, not have them still appear in my mailbox, but can't find a way? Any ideas? Setup a procmail recipe to move the messages to /dev/null. https://wiki.apache.org/spamassassin/UsedViaProcmail -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a full century (100 miles) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://gmanesig.diabetessucks.net. My goal is $6000 but any amount is appreciated. See where I get my donations from ... visit http://gmanesig.diabetessucks.net/map for an interactive map (it's a geeky thing).
Re: any reason not to block every Softlayer allocation?
On 10/5/2015 9:33 PM, Jo Rhett wrote: Looking at my spam block statistics, not a single IP I’ve reported to SoftLayer over the last two years has been shut down. Is there any reason I shouldn’t just block all their allocations and save myself some effort? Maybe just add a rule to increase the score for mail from their IP blocks? -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 100 miles (a full century) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://gmanesig.diabetessucks.net. My goal is $6000 but any amount is appreciated. See where I get my donations from ... visit http://gmanesig.diabetessucks.net/map for an interactive map (it's a geeky thing).
Re: Bogus day old domains from RRPPROXY.NET
On 3/10/2015 5:08 PM, Reindl Harald wrote: for postfix there is "check_sender_ns_access hash:/etc/postfix/blacklist_ns.cf" with the advantage of logging and a proper reject cat /etc/postfix/blacklist_ns.cf ns1.sedoparking.com REJECT Domain is parked at sedo.com ns2.sedoparking.com REJECT Domain is parked at sedo.com Has anyone come up with a SA rule or plugin that does the same thing? I'd love to block mail from parked domains, but I use sendmail and can't find a way to block like postfix can. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2015 American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://email.diabetessucks.net. My goal is $5800 but any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: Multiple subject headers - most blank
On 12/5/2014 11:25 AM, John Hardin wrote: FWIW: here's the rule I came up with ... seems to work adequately. header __COUNT_SUBJ Subject =~ /.*/ You might want to be a little bit more paranoid and explicitly anchor that: header __COUNT_SUBJ Subject =~ /^.*$/ I know .* is greedy and shouldn't overlap on multiple matches, but this helps make sure. I tried that originally, but it didn't end up matching. Oddly, when I put the original rule "/.*/" in place, and ran a message with multiple subject lines through in debug ... I got the following relevant output: Dec 5 12:09:52.032 [2459] dbg: rules: ran header rule __COUNT_SUBJ ==> got hit: " The Hottest Smartphones - Details Inside " Dec 5 12:09:52.032 [2459] dbg: rules: ran header rule __COUNT_SUBJ ==> got hit: "negative match" Dec 5 12:09:52.032 [2459] dbg: rules: ran header rule __COUNT_SUBJ ==> got hit: "negative match" Dec 5 12:09:52.032 [2459] dbg: rules: ran header rule __COUNT_SUBJ ==> got hit: "negative match" Dec 5 12:09:52.033 [2459] dbg: rules: ran header rule __COUNT_SUBJ ==> got hit: "The Hottest Smartphones - Details Inside" Dec 5 12:09:52.033 [2459] dbg: rules: ran header rule __COUNT_SUBJ ==> got hit: "negative match" I'm assuming "negative match" means that the rule didn't match. The message in question has 4 subject lines, the first appears to be encoded, 2 more that are blank, the 4th one is plain text. Example: http://code.midrange.com/4c731ced97.html Not sure why the rule is being applied 6 times. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2015 American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://email.diabetessucks.net. My goal is $5500 but any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: Multiple subject headers - most blank
On 12/4/2014 10:22 AM, Gibbs, David wrote: I've seen a number of spam messages come through with multiple header lines ... some of them are blank. Any suggestions for a rule to trap this? FWIW: here's the rule I came up with ... seems to work adequately. header __COUNT_SUBJ Subject =~ /.*/ tflags __COUNT_SUBJ multiple meta DMG_MULT_SUBJ (__COUNT_SUBJ > 2) score DMG_MULT_SUBJ 1.0 describe DMG_MULT_SUBJ Message has more than one subject header Although the __COUNT_SUBJ rule isn't behaving as I would expect it. If the meta rule says > 1, and the message only has one subject, the rule is activated. That's why I have it set to > 2 instead. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2015 American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://email.diabetessucks.net. My goal is $5500 but any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Multiple subject headers - most blank
Folks: I've seen a number of spam messages come through with multiple header lines ... some of them are blank. Subject: =?ISO-8859-1?Q?=20The=20Hotte?==?ISO-8859-1?Q?st=20Sm?==?ISO-8859-1?Q?ar?==?ISO-8859-1?Q?tpho?==?ISO-8859-1?Q?nes=20?==?ISO-8859-1?Q?-=20Det?==?ISO-8859-1?Q?ails=20In?==?ISO-8859-1?Q?side=20?= Subject: Subject: Subject: The Hottest Smartphones - Details Inside Any suggestions for a rule to trap this? Thanks! david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2015 American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://sa.diabetessucks.net. My goal is $5500 but any amount is appreciated. See where I get my donations from ... visit http://sa.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: Slightly OT- nolisting
On 10/20/2014 3:00 PM, Dave Warren wrote: > I did some experimentation a few weeks ago and found that a nolisting > style "dead first MX" didn't make anywhere near as much an impact as > I hoped, while in some cases it did cause delays (although only a few > lost messages that we could find, and all from small home-grown > systems that really deserved to feed to a proper mail relay) There are, apparently, some MTA's that do _not_ use backup MX's properly ... I tried using the "Dead first MX" technique and found that some people were unable to send me mail because the mail server they were using didn't try the next (live) server on my MX list. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2015 American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://email.diabetessucks.net. My goal is $5500 but any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: SA 3.4 'make test' fails in 't/sa_sompile.t' with "Not found: able-to-use"
On 4/24/2014 11:59 AM, Kevin A. McGrail wrote: >> https://qtemp.net/sa-compile-test-fail-log-1.txt > But now you appear to be failing > > Checking FOO not the able-to-use That's what has been failing from the beginning, as far as I can tell. > Can you try this as root? Yes, and it worked. Permissions problem then? david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2014 Chicagoland Tour de Cure to raise money for diabetes research, education, and advocacy. Sponsor me by visiting http://email.diabetessucks.net. Any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: SA 3.4 'make test' fails in 't/sa_sompile.t' with "Not found: able-to-use"
On 4/24/2014 11:25 AM, Kevin A. McGrail wrote: > On the sa_compile.t, there is a line that says: > > system_or_die "$instdir/foo/$temp_binpath/sa-compile --keep-tmps"; # > --debug > > Can you turn on --debug and run prove -v t/sa_compile again. Then > hopefully sa-compile throws a hint... Nothing useful that I can see :( https://qtemp.net/sa-compile-test-fail-log-1.txt david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2014 Chicagoland Tour de Cure to raise money for diabetes research, education, and advocacy. Sponsor me by visiting http://email.diabetessucks.net. Any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: SA 3.4 'make test' fails in 't/sa_sompile.t' with "Not found: able-to-use"
On 4/24/2014 9:47 AM, Kevin A. McGrail wrote: > Bizarre... The non-replicatable behavior is very confusing. > > And you were able to replicate this on a modern CentOS box? Yep. Even tried it on another system that's running Centos 5. OK, I just tried it on yet another box ... this one is more 'virgin', as it's ONLY used as a XEN virtual host. This time all the tests passed. So it's got to be something in the other systems configuration or environment ... but the question is what. It's clearly focused on the "able-to-use" test. Are there any external dependencies related to that test? Maybe some of my modules are out of date & need to be updated? I did have a bunch of modules that wanted upgrades, so I upgraded a handful of them but no difference. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2014 Chicagoland Tour de Cure to raise money for diabetes research, education, and advocacy. Sponsor me by visiting http://email.diabetessucks.net. Any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: SA 3.4 'make test' fails in 't/sa_sompile.t' with "Not found: able-to-use"
On 4/23/2014 11:25 AM, Kevin A. McGrail wrote: > Can you run prove -v t/sa_compile.t and send that output? I think something else is going wrong here ... $prove -v t/sa_compile.t t/sa_compile.t .. re2c version (001203) new enough? yes 1..5 # Running under perl version 5.01 for linux # Current time local: Wed Apr 23 11:30:07 2014 # Current time GMT: Wed Apr 23 16:30:07 2014 # Using Test.pm version 1.25 cd .. && make tardist make: *** No rule to make target `/usr/lib/perl5/Config.pm', needed by `Makefile'. Stop. 'cd .. && make tardist' failed: exit 2 at t/SATest.pm line 987. Dubious, test returned 2 (wstat 512, 0x200) Failed 5/5 subtests Test Summary Report --- t/sa_compile.t (Wstat: 512 Tests: 0 Failed: 0) Non-zero exit status: 2 Parse errors: Bad plan. You planned 5 tests but ran 0. Files=1, Tests=0, 1 wallclock secs ( 0.06 usr 0.01 sys + 0.15 cusr 0.40 csys = 0.62 CPU) Result: FAIL > Also, what version of re2c are you using? $re2c -v re2c 0.12.3 Thanks! david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2014 Chicagoland Tour de Cure to raise money for diabetes research, education, and advocacy. Sponsor me by visiting http://email.diabetessucks.net. Any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
SA 3.4 'make test' fails in 't/sa_sompile.t' with "Not found: able-to-use"
Folks: I'm trying to upgrade from 3.3.2 to 3.4, but I'm running into a roadblock when I run the test suite on the package I downloaded from apache.org. I ran a general "make && make test" and the tests failed in sa_compile.t So I ran 'make test TEST_VERBOSE=1 TEST_FILES="t/sa_compile.t"' and got the following... - Apr 21 10:47:26.904 [26989] info: generic: base extraction starting. this can take a while... Apr 21 10:47:26.905 [26989] info: generic: extracting from rules of type body_0 100% [===] 41.64 rules/sec 00m00s DONE 100% [===] 46.17 bases/sec 00m00s DONE Apr 21 10:47:27.089 [26989] info: body_0: 4 base strings extracted in 1 seconds Not found: able-to-use = able to use 1/1 'body_0' compiled rules at t/sa_compile.t line 148. # Failed test 4 in t/SATest.pm at line 751 Output can be examined in: log/d.sa_compile/3 Failed 1/1 test programs. 1/5 subtests failed. make: *** [test_dynamic] Error 255 - The full output of the test can be found here: https://qtemp.net/sa-compile-test-fail.txt The log file can be seen here: https://qtemp.net/sa-compile-test-fail-log.txt I am running a rather old version of Fedora, but have perl 5.10.0 installed. I ran the same test on a Centos 6 system and encountered the exact same failure. Any suggestions? Thanks! david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2014 Chicagoland Tour de Cure to raise money for diabetes research, education, and advocacy. Sponsor me by visiting http://email.diabetessucks.net. Any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
