Check the values of $SendmailMacros{'auth_authen'},
$SendmailMacros{'auth_type'}, and $SendmailMacros{'auth_author'} and
then skip the call to spam_assassin_check(). We only check
$SendmailMacros{'auth_type'} here.
--
Matt
The question is, how can I have SpamAssassin NOT check messages
-Original Message-
From: Jon Fullmer
body PORN_SPAM /(?:porn.com|porn-site.com|pr0n.com)/I
describe PORN_SPAM Some jerk sending me porn spam
score PORN_SPAM 10.0
I've noticed that when I do this, though, if the e-mail is a multipart
MIME message (with, say, one
--On Wednesday, October 26, 2005 22:38 -0600 Jon Fullmer
[EMAIL PROTECTED] wrote:
Some jerk has been sending me spam that has consistently triggered these
messages within sendmail:
Truncated long MIME Content-Transfer-Encoding header (length = 435)
(possible attack)
I haven't seen
--On Wednesday, October 26, 2005 22:42 -0600 Jon Fullmer
[EMAIL PROTECTED] wrote:
John Rudd asked this question two months ago, but I didn?t get to see the
final answer.
The question is, how can I have SpamAssassin NOT check messages that have
been properly authenticated using SMTP AUTH?
--On Wednesday, October 26, 2005 22:33 -0600 Jon Fullmer
[EMAIL PROTECTED] wrote:
body PORN_SPAM /(?:porn.com|porn-site.com|pr0n.com)/I
describe PORN_SPAM Some jerk sending me porn spam
score PORN_SPAM 10.0
I've noticed that when I do this, though, if the e-mail is a
--On Thursday, October 27, 2005 9:24 AM -0400 Joseph Brennan
[EMAIL PROTECTED] wrote:
You can identify smtp-auth'd mail by whether you have a value for
the variable $SendmailMacros{auth_type}.
I copied your explanation to the wiki for my own future reference:
Joseph Brennan wrote:
Where does this appear? Syslog? If so, we did not see any all day
yesterday (1.6 million), for what it's worth. I've never heard of
this either.
It's in headers.c in the Sendmail source. There is a sendmail.cf option
MaxMimeHeaderLength that might not be set in your
You could try using #35;
___
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list
MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
(Anyone know how to escape the pound sign so the wiki doesn't
see it as its own comment character?)
See http://www.kwiki.org/?KwikiFormattingRules
# a comment works
Gavin
PLEASE READ: The information contained in this email is confidential and
intended for the named recipient(s) only. If
I've been noticing SPAM coming in tagged with the date of like 1/29/2003
has anyone else been seeing this??
So I thought it might be prudent to have a rule in mimedefang that bounces a
message older than
what most queues would have long since given up on..like a month.
Does this info (the
--On Thursday, October 27, 2005 12:02 PM -0400 Video Game Junkie
[EMAIL PROTECTED] wrote:
You could try using #35;
Alas, kwiki escapes the ampersand internally so it just shows all 5
characters when rendered.
___
Visit http://www.mimedefang.org
I was checking a few mail servers that I recently moved behind my spam
filters that I had not yet blocked them with a firewall.
When I first started doing spam filtering, spammers would ignore changes
in MX records for a long time. These two new servers are not seeing any
direct connections
David F. Skoll wrote:
t/Entity.FAILED test 5
Failed 1/30 tests, 96.67% okay
I saw this problem on my Solaris 10 x86 with Perl 5.8.7. Is it okay?
Could you try running a verbose test, please:
make test TEST_VERBOSE=1
and e-mailing me the output (off-list)?
Hi, Ken.
I've just seen this identical error, on my RedHat ES3.0 system. (It tested
fine, on my RH8.0-based hosts). Would you like the output of make test
TEST_VERBOSE=1 on my system as well? Or have you already determined
possible causes that a reply here on-list would make sense at this
I get the same error with Solaris 9 SPARC as well. I tried the locale
settings as below, and the error still comes up.
Thanks
David
[EMAIL PROTECTED]
I compiled this on a new mail server I'm building also on SPARC Solaris 9,
and it ran fine. The only difference I see between the two boxes is one is
running perl 5.8.0 and the other 5.8.7.
David
[EMAIL PROTECTED]
David Koski wrote:
I get the same error with Solaris 9 SPARC as well. I tried the locale
settings as below, and the error still comes up.
Can you (or anyone else on the list who can reproduce the error) get
me a shell account and SSH access on a system where it fails?
Please drop me a line
David F. Skoll wrote:
I suspect it's a locale-related bug. On your ES3.0 system, do you
still get errors if you do:
LANGUAGE=C LANG=C LC_ALL=C make test
Tried the sugestion, but no change to the results, David.
Ken
___
Visit
My ES3 box, unfortunately, is too deep inside the environment to get
approvals to open inbound ssh. It's not my outward-facing mail server (it's
my internal mail relay).
-Original Message-
From: David F. Skoll [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 27, 2005 2:39 PM
To:
David F. Skoll wrote:
Grr... I can't get it to fail on ES3.0 either...
Might it perhaps be related to either my perl version, or the version
numbers of other dependent perl modules that the tests might be relying on?
I have several non-RHES3-default versions of modules on my box. I'd be
happy
Mystery solved!
Two people let me on their machines. Thank you!
The tests succeed if you have Mail::Header version 1.62, but fail if
you have Mail::Header 1.17. I do not know at which point the
changeover occurred. Old versions of Mail::Header would write the
MIME-Version header thus:
Hi,
I recently upgraded from mimedefang 2.43 to 2.53 and modified my
mimedefang-filter file accordingly. When I set the following line as follows
so that the rules that are hit will be placed in the log via syslog. Since I
upgraded the rules are being placed in the log with a %2C between
Bill wrote:
Since I upgraded the rules are being placed in the log with a
%2C between the rules. It used to be a comma. How can I change it
back to a comma?
Oct 27 16:52:24 server mimedefang.pl[17172]:
MDLOG,j9RLq1PW020946,reject -
Right, and I'm wondering if I could use this to my advantage. This
original poster is a spammer (as he appears to be), how could I reject all
messages that have this truncated long MIME Content-Transfer-Encoding
header?
- Jon
on 10/27/05 9:01 AM, David F. Skoll at [EMAIL PROTECTED] wrote:
24 matches
Mail list logo
