Matt Kettler said:
> I just got yet another worldreach spam. However a couple of the headers in
> the message are so wildly malformed it's quite funny...
> Such as this one:
>
> X-MAILER: Excite InboxJuno 4.0.11mail.comMicrosoft Internet Mail
> 4.70.1155Microsoft Outlook 8.5, Build 4.71.2173.
Doug Crompton said:
> I just picked up Razor SDK 2.03 and 2.14 agents from the the razor site.
> I am using SuSe 7.3 - intalled SDK with no problems. All tests passed.
>
> When I try to make the 2.14 agents I get all kinds of errors. In
> particuliar it says the net::dns is missing. But it see
Florin Andrei said:
> Has anyone compared spampd and spamproxyd in terms of speed and
> reliability under high load?
From what I hear, spampd is much better.
> What is the best solution for interfacing Postfix and SpamAssassin for
> servers under high load? (seems to me like spampd/spamproxyd
OK -- for folks who want to test-drive the 2.42 code pre-release, I've
tarred it up at
http://spamassassin.taint.org/devel/Mail-SpamAssassin-2.42.tar.gz
No need to muck around with CVS now. ;)
PS: latest change explanation:
OK, I just found a red hat box whose version of (stock) perl had
a
Hi,
Having received several complaints from customers this morning I was shocked
to discover that several of our mail servers are blacklisted on
relays.osirusoft.com and spews.relays.osirusoft.com. Further investigation
showed that not only is our entire block of IPs (20 or so Class Cs) listed,
On Thu, 26 Sep 2002, Darren Coleman wrote:
> Has anyone had any experience of dealings with Osirusoft and can
> comment/suggest a course of action? Their website doesn't seem to provide
> any specific contact information and - and this would be funny if it weren't
> tragic - attempting to email
Don't mean to parrot but I've duplicated this problem on another system.
This is from using the rpm below (which rpm may be irrelevant, but the SA
rev is). I've also found the problem is somewhere in &do_awl_tests in
PerMsgStatus.pm but my perl isn't good enough to figure out what's going on
here
I found my culprit. Am I ok with leaving this uncommented? My AWL really
isn't that interesting.
DBBasedAddrList.pm:
# tell AnyDBM_File to prefer DB_File, if possible.
BEGIN { @AnyDBM_File::ISA = qw(DB_File GDBM_File NDBM_File SDBM_File); }
# off until 3.0; there's lots of existing AWLs out the
Good afternoon,
Just looking through all the spamassassin tests, I was wondering if there is
any way to combine rules, so that spamassassin could search the recipient
address AND the body for a certain word combination... For example, if a
certain domain (perhaps vegans.co.uk) doesn't want any e-
Osirusoft is very good because it includes info from many RBLs. The
only problem is that they mirror SPEWS which is surprising that they
still do considering all the complaints about SPEWS.
-Original Message-
From: Darren Coleman [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 26
> "FA" == Florin Andrei <[EMAIL PROTECTED]> writes:
FA> (i'll describe my situation first, the questions are at the end)
FA> I managed to make SpamAssassin talk to my Postfix MTA. Brief description
FA> of the method:
FA> 1. Get & install SpamAssassin (obvious)
FA> 2. Get spampd
[ ... ]
FA
I'm having a problem after having upgraded to 2.41 with my latest Debian
testing update. It seems like whitelist entries in local.cf may not be
honored in certain circumstances.
I have an entry in /etc/spamassassin/local.cf:
whitelist_from [EMAIL PROTECTED]
But then I'm getting messages like
On Wed, Sep 25, 2002 at 05:08:46PM -0500, Doug Dempsey wrote:
> It works properly during the tests.
But what about running "spamassassin < message"? I'm likely to point
at qmail-scanner since it seems to put in a different set of headers
than usual. If spamassassin (or spamc) doesn't work by it
When I run the spamd/c combo it works but I get a message in the log that
spamd is running as root, can't determine who the client is, and is
falling back to nobody.
I am a single user. All mail is processed to one account - procmail in the
.forward there,it runs spamc and then processses the mai
As far as trustworthy goes, I trust osirusoft to pretty much list everyone
that's questionable and all their neighbors. I don't trust it to be low
collateral damage, hence I don't use them as a flat-out blocklist, and I
generally assign them fewer SA points than the default.
In your case, don'
Look into the meta rules of SpamAssassin 2.40 and higher. You should be
able to do what you want with those.
For example:
meta CASHCASHCASH (!__ISO_2022_JP_DELIM && __THREE_DOLLARS)
Allows SA to tag anything with $$$ in it, but skips anything matching a
Japanese delimiter that com
I worked through a mini-howto on spamassassin which used the '-F 0'
option when invoking spamd, which is supposted to disable rewriting the
'From' header. I can't find this option on the manpage though. Is it
not available in the spamd/c option?
Jeremy
-
On Thu, 26 Sep 2002, Matt Kettler wrote:
> As far as trustworthy goes, I trust osirusoft to pretty much list everyone
> that's questionable and all their neighbors. I don't trust it to be low
> collateral damage, hence I don't use them as a flat-out blocklist, and I
> generally assign them fewer
On Thursday 26 September 2002 04:31, Darren Coleman wrote:
> Hi,
>
> Having received several complaints from customers this morning I was
> shocked to discover that several of our mail servers are blacklisted on
> relays.osirusoft.com and spews.relays.osirusoft.com. Further investigation
> showed
On Thu, Sep 26, 2002 at 10:40:57AM -0500, Jeremy Turner wrote:
> I worked through a mini-howto on spamassassin which used the '-F 0'
> option when invoking spamd, which is supposted to disable rewriting the
> 'From' header. I can't find this option on the manpage though. Is it
> not available in
Does anyone think it's possible to petition Osirusoft to remove SPEWS
from their mirroring? Or would it just be a waste of time? I would
think that anyone who would want to use SPEWS still could but separately
from the larger osirusoft listings.
-Original Message-
From: Miles Fidelman [
On Thu, 26 Sep 2002, Rose, Bobby wrote:
> Does anyone think it's possible to petition Osirusoft to remove SPEWS
> from their mirroring? Or would it just be a waste of time? I would
> think that anyone who would want to use SPEWS still could but separately
> from the larger osirusoft listings.
Hey all. I've got a spamassassin/postfix mail gateway up and running
(thanks again Tony!) and while watching the log I keep noticing a
warning. Spamd reports handle_user is unable to find the user, but it
continues along anyhow. Is this due to it being a gateway, and
therefore not having any lo
I'd vote for separation. Having a choice is a good thing. Even if they are
non-co-operative Matt Kettler [[EMAIL PROTECTED]] mentioned
>If you're not listed as a 127.0.0.2 or 127.0.0.3 please don't
bother the administrator of relays.osirusoft.com
>You're listed 127.0.0.4
Maybe SA c
I know it sounds unlikely, but it really seems to happen. Here's
an example. First, some of the header/envelope info from an
email that got through SA (recipient address and domain altered):
Received: from mail1.somecompany.com ([127.0.0.1]) by localhost
(mail1.somecompany.com [127.0.0.1]) (ama
"zeek" said:
> I found my culprit. Am I ok with leaving this uncommented? My AWL really
> isn't that interesting.
> DBBasedAddrList.pm:
>
> # tell AnyDBM_File to prefer DB_File, if possible.
> BEGIN { @AnyDBM_File::ISA = qw(DB_File GDBM_File NDBM_File SDBM_File); }
> # off until 3.0; there's lo
"Rose, Bobby" said:
> Osirusoft is very good because it includes info from many RBLs. The
> only problem is that they mirror SPEWS which is surprising that they
> still do considering all the complaints about SPEWS.
Can SpamAssassin use Osirusoft without the SPEWS results? If not,
I recomme
On Thu, Sep 26, 2002 at 12:25:26PM -0400, Randy Rodriguez wrote:
> Hey all. I've got a spamassassin/postfix mail gateway up and running
> (thanks again Tony!) and while watching the log I keep noticing a
> warning. Spamd reports handle_user is unable to find the user, but it
> continues along an
Scott Henderson said:
> I know it sounds unlikely, but it really seems to happen. Here's
> an example. First, some of the header/envelope info from an
> email that got through SA (recipient address and domain altered):
We don't use this format:
> Sep 25 14:27:25 mail1 amavis[5169]: (05169-04
On Thursday 26 September 2002 17:56 CET Justin Mason wrote:
> "Rose, Bobby" said:
> > Osirusoft is very good because it includes info from many RBLs. The
> > only problem is that they mirror SPEWS which is surprising that they
> > still do considering all the complaints about SPEWS.
>
> Can SpamA
The attached email did not get any hits from body checks in SA 2.31.
Anyone care to take a look at it?
Mutated_nigerian_2.gz
Description: GNU Zip compressed data
It hits plenty of body rules in 2.41. Of course, some of the scores are a
lil weird in 2.41, but 2.42 should fix some of that (I *think* the rule
pruning and new GA results are going into 2.42)
But since it is positive-hit in 2.31, and positive hit in 2.41, I think
it's a more-or-less moot poi
I am a little reluctant to upgrade to 2.41 since it appears that 2.42 may
be in the wings. Any idea how long before this becomes available for
upgrade? Thanks much!
--
Regards,
Eric Mings
---
This sf.net email is sponsored by:ThinkGeek
Welc
"Eric Mings" said:
> I am a little reluctant to upgrade to 2.41 since it appears that 2.42 may
> be in the wings. Any idea how long before this becomes available for
> upgrade? Thanks much!
I'm going to leave it stew for the weekend, let a few folks who found
serious problems test out the 2.42
Hi,
I wanted to have a more granular control over the spam tagging of
spamassassin. Basically what I want to do is something like this
1. If score < 4 do nothing
2. If 4 < score < 6 tag mail as low spam this should deliver to the
default mailbox, but tagged as spam
3. If 6 < score < 15 tag a
On Thu, 2002-09-26 at 10:52, Theo Van Dinter wrote:
> On Thu, Sep 26, 2002 at 10:40:57AM -0500, Jeremy Turner wrote:
> > I worked through a mini-howto on spamassassin which used the '-F 0'
> > option when invoking spamd, which is supposted to disable rewriting the
> > 'From' header. I can't find
[EMAIL PROTECTED] said:
> I wanted to have a more granular control over the spam tagging of
> spamassassin. Basically what I want to do is something like this
>
> 1. If score < 4 do nothing
> 2. If 4 < score < 6 tag mail as low spam this should deliver to the
> default mailbox, but tagged a
On Thu, Sep 26, 2002 at 03:32:16PM -0500, [EMAIL PROTECTED] wrote:
> Is there any way to modify the header that spam assassin puts out so that
> there is a key word like "low", "medium", "high" based on the score, so
> that rules can be set up in the .mailfilterrc accordingly?
There should be a F
Where is the default score and definition for this test?
The scoring looks off. I know I can change the score but, all the
'non-spam MUA' entries seem to being scored as 1.0 instead of -0.nnn.
The install went fine and things seem to be working, could something be
in the wrong place?
Thanks,
On Thu, Sep 26, 2002 at 04:57:42PM -0400, Michael J. Huber wrote:
> Where is the default score and definition for this test?
Typically in /usr/share/spamassassin/*, but it depends on your installation.
> tests=__EVITE_CTYPE,X_ACCEPT_LANG,REFERENCES,
> USER_AGENT_MOZILLA_XM,SUPE
On Thu, 26 Sep 2002, Justin Mason wrote:
>> I know it sounds unlikely, but it really seems to happen. Here's
>> an example. First, some of the header/envelope info from an
>> email that got through SA (recipient address and domain altered):
>
>We don't use this format:
>
>> Sep 25 14:27:25 mail1
I am looking to integrate Spamassassin with Postfix. Reading the postfix
documentation the best way seems to be by forwarding to an smtp server.
Is anyone running this code?
http://spamassassin.taint.org/doc/Mail_SpamAssassin_SMTP_SmartHost.html
Is there a better way to do this? I am interested
Justin Mason" <[EMAIL PROTECTED]> wrote:
> Can SpamAssassin use Osirusoft without the SPEWS results? If not,
> I recommend we stop using it. SPEWS just has too many FPs for
> my taste.
The various X_OSIRU... rules separate out the different return values from the
Osirusoft DNS check. The RCVD_I
I believe there was a post about this a while back. Using procmail to check
the level and then determine just what you are asking. I haven't played with
it yet. Try a quick search of the archives. I think it was less then 2
months ago.
The basic answer is what Theo said. SA doesn't do this, your
Max Clark wrote:
> I am looking to integrate Spamassassin with Postfix. Reading the postfix
> documentation the best way seems to be by forwarding to an smtp server.
>
> Is anyone running this code?
> http://spamassassin.taint.org/doc/Mail_SpamAssassin_SMTP_SmartHost.html
>
> Is there a better
I've gotten SA configured on my server to scan messages
server-wide w/ exim. The headers are going into the messages
but I'm having a hard time figuring out the "easy" part which
is how Outlook can flag those messages for me. I've tried
putting in a custom field for X-Spam-Flag, but don't appear
[EMAIL PROTECTED] (Justin Mason) writes:
> Can SpamAssassin use Osirusoft without the SPEWS results? If not, I
> recommend we stop using it. SPEWS just has too many FPs for my taste.
That would be fine with me. SPEWS catches a lot of spam, but they
intentionally list entire netblocks to press
On Thu, Sep 26, 2002 at 03:19:37PM -0700, Bob Amen wrote:
> We quit using this and are currently running sendmail with spamass-milter
> as a relay.
Uh, Amen!
We use sendmail with MIMEdefang (another milter), which also has the
advantage that you can scan for viruses at the same time.
Dan
Create a folder in Outlook where you want to place tagged messages. Then
click on Tools/Rules Wizard and follow the instructions there to create a
filter that will move messages with your subject line tag or header flag
into the folder you created.
HTH,
St-
| -Original Message-
| From:
I know how to do that, but I'm having a hard time figuring out
what to tell outlook to look for in terms of a header flag. I've
tried
X-Spam-Flag
Spam-Flag
Spam Flag
X Spam Flag
All setup as a Yes/No field. None of these appears to adequately
work.
Thanks,
Jay
--
Jay Strickl
I use a subject rule here at work (procmail filters at home). I just changed
it to a header rule, and it looks like capitalization counts.
X-Spam-Flag: Yes
didn't work, but
X-Spam-Flag: YES
did. The header it triggered on matched that exactly. I don't know if you
can use wildcards in Outlo
> I know how to do that, but I'm having a hard time figuring out
> what to tell outlook to look for in terms of a header flag. I've
> tried
>
> X-Spam-Flag
> Spam-Flag
> Spam Flag
> X Spam Flag
I had a heck of a time getting Outlook to reliably detect the X-Spam-Flag
header. I had the best resul
> Being listed in SPEWS will trigger these rules:
>
> RCVD_IN_OSIRUSOFT_COM - generic rule
> X_OSIRU_SPAM_SRC - SPEWS specific?
According to osirusoft, this is not SPEWS specific:
>127.0.0.4 Confirmed Spam Source
>A site has been identified as a constant source of spam, and is manually
Daniel Quinlan wrote:
>> Being listed in SPEWS will trigger these rules:
>>
>> RCVD_IN_OSIRUSOFT_COM - generic rule
>> X_OSIRU_SPAM_SRC - SPEWS specific?
Michael Moncur <[EMAIL PROTECTED]> writes:
> According to osirusoft, this is not SPEWS specific:
| 127.0.0.4 Confirmed Spam Source
| A
On Thu, 2002-09-26 at 14:35, Max Clark wrote:
> I am looking to integrate Spamassassin with Postfix. Reading the postfix
> documentation the best way seems to be by forwarding to an smtp server.
>
> Is anyone running this code?
> http://spamassassin.taint.org/doc/Mail_SpamAssassin_SMTP_SmartHost.
On Thu, 2002-09-26 at 06:42, Vivek Khera wrote:
> > "FA" == Florin Andrei <[EMAIL PROTECTED]> writes:
>
> FA> (i'll describe my situation first, the questions are at the end)
> FA> I managed to make SpamAssassin talk to my Postfix MTA. Brief description
> FA> of the method:
> FA> 1. Get & ins
I'm admittedly new to this stuff, so please bear with me. I just got a message with
the following explanations:
SPAM: Start SpamAssassin results --
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or blo
* Florin Andrei ([EMAIL PROTECTED]) wrote this on 09 26, 02 at 23:43:
> On Thu, 2002-09-26 at 06:42, Vivek Khera wrote:
> > > "FA" == Florin Andrei <[EMAIL PROTECTED]> writes:
> >
> > FA> (i'll describe my situation first, the questions are at the end)
> > FA> I managed to make SpamAssassin
58 matches
Mail list logo
