On Wed, Aug 20, 2003 at 07:28:00PM +0300, Angel Gabriel wrote:
> (I know how to export stuff to a txt file, I was just
> wondering if it's a good idea?)
Does the exporting put all the headers in the text file when
it exports the mail? Some only seem to put the "important"
headers like who sent th
I found these installaions and installed spamassassin via these:
#ssh into raq
su -
mkdir /tmp/spamassassin
cd /tmp/spamassin
wget
http://spamassassin.taint.org/released/Mail-SpamAssassin-2.31.tar.gz
wget http://www.cpan.org/modules/by-module/Pod/podlators-1.22.tar.gz
wget http://www.cpan.org/au
I just upgraded to FreeBSD 4.8 and everything was working fine before I
upgraded, now for some reason spamass-milter/spamassassin doesn't seem to be
catching the test mail that you can send:
/usr/sbin/sendmail root <
/usr/local/share/doc/p5-Mail-SpamAssassin/sample-spam.txt
But it seemed to tag a
Hello,
On Thursday 21 August 2003 16:42, Landy wrote:
> [EMAIL PROTECTED]:~> spamassassin -r < Mail/virustrack
> razor2 report failed: No such file or directory Razor2 report requires
> authentication at
> /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Reporter.pm line 99.
> Warning, unable to
I use expire_mail.pl
I sort spam into users spam folders so they don't have to download via
pop
They can access with a web interface (or imap) to see the spam folder
and then every week I run a cron job to expire mail from every users
spam folders
It gives a summary of what was erased, showing t
OK, this is 2.60 release candidate 2; it should work pretty excellently,
but we want to give it a day or two before it gets an official thumbs-up.
You can download it from http://SpamAssassin.org/released/ -- note:
the release candidates are not listed on the SA Download page and will
not be availa
At 8/22/03 08:42 AM , Chris Santerre wrote:
I'm having a brain freeze right now. Does /w+ match :
ONLY , b, c, ect
or will it also match
abcds, dfgdfg, dsfgrgr, ect.
The latter. (And I assume you mean \w+, not /w+ .) The \w character is a
special character that matches any of [
At 8/22/03 04:31 PM , Jonathan Nichols wrote:
ARGH
I want to SHOOT this spammer. Repeatedly. These ALWAYS pop in at 4.9,
always using "jnichols@(faked.com)" too. Grrr
Hmmm looks like you could add a rule or two to stop seeing it. Like:
D0wn 0n the farm, a g1rl can rea11y get a nice full l
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Orbital,
Friday, August 22, 2003, 1:32:12 PM, you wrote:
OO> Hello,
OO> I am new to SA and would like to know if catching 160 spam from 8000
OO> mails in a day is normal or not? I suspect this is not normal so any
OO> ideas where i should look
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello landy,
Friday, August 22, 2003, 5:12:15 AM, you wrote:
l> me to i think someone has stolen the emails from SA list and used us
as
l> fish baits. i am pist...
l> for last 3 days got tons of emails as if i send spam or virus to
people
I've got
On Fri, 22 Aug 2003, Chris Santerre wrote:
> opps sorry, this was typoed by my big fingers:
>
> header MY_HEADER_TAG6 List-Unsubscribe =~ /^\/i
>
> Ah that's better :-)
Er, that's a standard RFC2369 mailing list header, which the RFC
recommends should contain a mailto: URL. Why are you ta
On 08/22/03 07:53 AM, Theodore Heise sat at the `puter and typed:
>
>
> On Thu, 21 Aug 2003, Louis LeBlanc wrote:
>
> > My new method of stopping the spam . . .
> >
> >
> > Good day sir.
> >
> > I am writing to inform you that I would like to be removed from every
> > bulk email list your pro
I'm having a brain freeze right now. Does /w+ match :
ONLY , b, c, ect
or will it also match
abcds, dfgdfg, dsfgrgr, ect.
I may have been staring at the rules for too long :) I told my wife this
morning that most of her sentances contain the terms "go" and "stairs"!!
"Honey c
At 03:40 PM 8/22/03 -0500, Zionsville Autosport wrote:
hello
i've made a cursory look around and read the FAQ files and i don't see any
mention of how to change the message sent in the bounce messages for spam that
reaches the set limit of points. i'd like to put something a little more
explanator
> OK, this is 2.60 release candidate 1;
I notice that the spam test message is some new standard GTUBE
and includes a 'Precedence: junk' header.
I call Spamassassin from Amavisd-new, and this header affects
the notification system, supressing it. I think that normal (?)
spam tends not to have thi
Does SA-lean learn where an email originates, and give that domain a
higher score?
--
*
Not everyone is touched by an Angel
Those that are, never forget the experience
*
---
This SF.net email is sponsored by: VM Ware
With VMwa
On Fri, 2003-08-22 at 19:31, Jonathan Nichols wrote:
> ARGH
> I want to SHOOT this spammer. Repeatedly. These ALWAYS pop in at 4.9,
> always using "jnichols@(faked.com)" too. Grrr
4.7 seems to catch those and still no effect on good mails
On Fri, Aug 22, 2003 at 04:11:45PM -0700, Justin Mason is rumored to have said:
>
> Tim Buck writes:
> > I installed 2.60 rc1 (upgraded from 2.55) yesterday afternoon. Two
> > of my users today reported several very obvious spam messages got
> > through; none has on my account. I looked at the off
I've noticed that too, the problem is that over the last two days I got more
virus emails in a couple of hours than I was getting spams in a whole day (and
the virus messages were bigger), never got infected though. I can't believe
that I'm actually looking forward to going back to plain old sp
Hello Paul,
Wednesday, August 20, 2003, 8:37:30 PM, you wrote:
PA> This has happened a few times: when a message is retrieved from the
PA> upstream POP server with a large attachment (100K), my local copy of SA
PA> takes 50 seconds or so to process it. I am using Procmail to filter
PA> deliver
ARGH
I want to SHOOT this spammer. Repeatedly. These ALWAYS pop in at 4.9,
always using "jnichols@(faked.com)" too. Grrr
-- Forwarded message --
Return-Path: <[EMAIL PROTECTED]>
Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87])
by mail.pbp.net (Postfix)
From: jennifer >>>Our spam has been relatively light
over the past few days. The spammers must
>be busy dealing with the onslaught of meaningless unwanted emails
from
>sobig.f. H. I wonder what that feels like??? A
bit of poetic justice
>when I look at it in that light.
Just wait
I've been feeding sa-learn the following way for months now, but even
though I've changed nothing, I can no longer do it. I now get:
su-2.05a# sa-learn --spam --mbox ~up/mail/SPAM
Cannot open bayes_path /usr/local/etc/mail/spamassassin/ R/O:
Inappropriate file type or format
Cannot open bayes_pa
Tim Buck writes:
> I installed 2.60 rc1 (upgraded from 2.55) yesterday afternoon. Two
> of my users today reported several very obvious spam messages got
> through; none has on my account. I looked at the offending messages,
> and they had no SpamAssassin headers whatsoever; they, for whatever
> r
On Fri, 2003-08-22 at 08:54, Amnon wrote:
> Here it comes again. For those of you who may have a better idea, what rule
> would you use to catch this "pic.gif".
>
that pic.gif is pissing me off
---
This SF.net email is sponsored by: VM Ware
Has anyone inquired about the troubles of this list? Is it normal to see
your messages the day after you post them? Is it normal to see messages
appear out of order? Why does it take so long to see your own post?
I've only been on this list for 3 weeks, but the past 3 days have shown a
real slow
On Thursday 21 August 2003 21:26 CET Jim wrote:
> In SA 2.55, it was working fine. DCC still works in this version.
This might be a symptom of bug 2314 [1]. Please check out if you have an old
version of Digest::SHA1 dangling in your Perl include path.
Cheers,
Malte
[1]http://bugzilla.spamassa
On Thursday 21 August 2003 20:02 CET Landy wrote:
> i have noticed big delays between sending to the list and recieving it?
Yeah. The SourceForge Mailinglists are slow. I received your mail a few
minutes ago. Hopefully we'll have a chance to change the list server in a
not too far future...
On Friday 22 August 2003 01:01 CET S.M.C Butler wrote:
> i've been running SA for about 4 months now and have to say that it is
> an awesome app. i get less than 5 spams a month now compared to the 8-10
> i used to get.. its made a massive impact on my producitivity. thx alot!!
Thanks. It's alway
On Friday 22 August 2003 21:07 CET Justin Mason wrote:
> Michael Bell writes:
> > 1. Sys:Syslog warning when doing perl makefile.pl. Remember Win32
> > doesn't use SpamD [nor does Sys::Syslog exist for Win32], hence this
> > warning shouldn't appear.
>
> Michael -- could you open a bug for #1? #2
Hi
In our server Cobalt raq4r Spamassassin 2.55 is running smoothly with spamc/spamd with sendmail/procmail.
Yesterday we configured it with *mysql* database..Now i am seeing that database is unable to connect. But database is running in a different server and it has no problem to conne
Same here. This, I feel offers the best protection because it makes it the
end user's responsibility for what they do with the messages.
On 8/19/03 7:21 PM, "Chad Leigh -- Shire.Net LLC" <[EMAIL PROTECTED]> wrote:
> We send all email through spamassassin but do no actual filtering. ALL
> email i
I installed 2.60 rc1 (upgraded from 2.55) yesterday afternoon. Two
of my users today reported several very obvious spam messages got
through; none has on my account. I looked at the offending messages,
and they had no SpamAssassin headers whatsoever; they, for whatever
reason, were not even process
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theo Van Dinter wrote:
> it'll be fixed in rc2 due out in the near future.
You (guys) rock. I've been using SA for a while now, and I'm always
amazed at the speed at which fixes are implemented. The developers
are always two steps ahead of us, wel
On Fri, Aug 22, 2003 at 03:31:45PM -0500, Mike Loiterman wrote:
> My mistake. Its actually reported as 0, not 1. All tokens are
> listed below, but all the counts are listed as 0.
The previously available check_bayes_db won't work with the new DB format.
It'll get VERY confused. The "new" one t
On Fri, 22 Aug 2003 10:30:35 -0700, you wrote:
>> I personally have been putting in private procmail rules to scrape
>> them off into a virus bounce folder. But there are a lot of different
>> patterns out there and I am only partially affective.
>
>yes, I did also find an SA rule that will at le
Hi,
FWIW, I've been seeing several (4) false positives flagged by
mercury.thesuttons.force9.co.uk, apparently with SA 2.55 installed
site-wide under Postfix with the (IMHO) ridiculouly low threshold of 2.2.
Yes, to some extent it's my fault they're being flagged as false positives
here since I tr
On Fri, Aug 22, 2003 at 03:40:43PM -0500, Zionsville Autosport wrote:
> i've made a cursory look around and read the FAQ files and i don't see any
> mention of how to change the message sent in the bounce messages for spam that
> reaches the set limit of points. i'd like to put something a little
On Fri, Aug 22, 2003 at 04:23:36PM -0500, Mike Loiterman wrote:
> Ok. I understand now. Would it be possible to add this to the
> release notes...or is it already in there? I couldn't find anything
> about it. I'm sure a lot of other folks will be seeing the same
> thing.
There wasn't really me
At 01:07 PM 8.20.2003 -0700, Abigail Marshall wrote:
>Hello Daniel,
>
>Wednesday, August 20, 2003, 9:09:09 AM, you wrote:
>
>DK> I am looking for documentation on how to configure
>DK> Spamassassin to delete all messages marked as spam
>DK> instead of the header change. I spoke to the partners in
>
On Fri, Aug 22, 2003 at 03:34:56PM -0500, Mike Loiterman wrote:
> > I checked my mail this morning and there were about twenty spam
> > messages that were not even looked at by SA. The SA headers were
> > not included. This was a false negative, it simply wasn't even
> > considered by SA. There
Hello,
I am new to SA and would like to know if catching
160 spam from 8000 mails in a day is normal or not? I suspect this is not normal
so any ideas where i should look to tighten things up? I am using SA in
conjunction with Mailscanner
Thanks
Darren--
This message has been scanned for
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theo Van Dinter wrote:
> On Fri, Aug 22, 2003 at 03:31:45PM -0500, Mike Loiterman wrote:
>> My mistake. Its actually reported as 0, not 1. All tokens are
>> listed below, but all the counts are listed as 0.
>
> The previously available check_bayes
>The best solution is to reject the mail at the smtp level, and then save
>it to a central queue. This is the method I use, perhaps 1 in a few
>thousand messages I have to recover. I just delete messages from the queue
>after 2 weeks.
>Don't just delete.
>At the very worse, reject the message at t
You would need to enter the following info in your local.cf:
user_scores_dsn DBI:mysql:$databasename:$databasehost
user_scores_sql_username $sadb_user
user_scores_sql_password $sabd_pwd
user_scores_sql_table $tablename
You would need to enter your info for the the variables startin
I am getting this when I run debug with debug enabled:
debug: mkdir /root/.spamassassin failed: mkdir /root/.spamassassin:
Permission denied at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm
line 1181
Permission denied
debug: bayes: 12514 untie-ing
debug: auto-learning failed: lock: 12514
On Thu, Aug 21, 2003 at 07:12:00PM +0300, Jim Knuth wrote:
> How can I updating my system? (Debian 3.*)
> Just in time I use V 2.55 (SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp))
>
> with << apt-get install spamassassin >> ?
> I need no problems! ;-)
Once the debian package's maintainer makes i
At 04:09 PM 8/20/2003 -0400, K Old wrote:
Can anyone offer advice on this? Any good arguments I can bring to the
table against getting the appliance?
You'd really have to be specific as to which appliance..
I've seen a lot of products out there (ie: trend's "sensitive content"
blocker) which bl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
>> One other thing that I noticed with RC1 is that the sample spam
>> packaged with 2.55 and lower is not caught. It dosen't get tagged
>> at all. I'm wondering if it is timing on one of the RBL test. If
>> so, does it just pass through without an
Hi spamassassin-talk,
This is a bit tricky to explain so here I go..
I am using spamassassing through postfix by using the following entry
in master.cf
smtp inetn - n - - smtpd -o content_filter=filter:
filterunix - n n - -
hello
i've made a cursory look around and read the FAQ files and i don't see any
mention of how to change the message sent in the bounce messages for spam that
reaches the set limit of points. i'd like to put something a little more
explanatory than "Congratulations!". thanks.
jason
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Mike Loiterman wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> I upgraded to RC1 a few minutes ago. First, it wasn't seeing my
> previous database. So I blew it away and started clean.
>
> Problem 1: I sent the sample spam through b
Hello,
I am new to SA and would like to know if catching 160 spam from 8000 mails
in a day is normal or not? I suspect this is not normal so any ideas where i
should look to tighten things up? I am using SA in conjunction with
Mailscanner
Thanks
Darren
--
This message has been scanned for viru
This has happened a few times: when a message is retrieved from the
upstream POP server with a large attachment (100K), my local copy of SA
takes 50 seconds or so to process it. I am using Procmail to filter
deliver the messages locally -- not passing them on to another MDA.
During the 50-second p
yes I have added it today , but it doesnot change anything
here is exactly what I have
# ==
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (50)
# ==
> I personally have been putting in private procmail rules to scrape
> them off into a virus bounce folder. But there are a lot of different
> patterns out there and I am only partially affective.
yes, I did also find an SA rule that will at least make sure the bounce was
sent in response to a me
TopPost: Correction to my list below. "spamd" should be "spamass-milter"
for the threshold blocking. Sorry.
>Date: Fri, 22 Aug 2003 10:32:21 -0500
>To: Abigail Marshall <[EMAIL PROTECTED]>, "Daniel
Kaliel" <[EMAIL PROTECTED]>
>From: "Jack L. Stone" <[EMAIL PROTECTED]>
>Subject: Re: [SAtalk] Deleti
Martin,
Look for a file called check_bayes_db in the tools directory of
Mail-SpamAssassin.
Run it and pipe into head.
./check_bayes_db |head
Look for the number of nspam and nham. Both numbers must be over 200
for bayes to work. See below.
Jimmy
0.000000 non-token d
Anyone have the URL to sign up with the SAProxy mailing list? This program
is driving me nuts. Runs like a champ, then just stops.
--
Jack Gostl [EMAIL PROTECTED]
---
This SF.net email is sponsored by: VM Ware
With VMware you can run m
I feed my SA box
about twice a week with untagged spam that I collect. I ha dit forget
everything for the past few weeks today, and then ran sa-learn on all the
messages.
Learned from 407 in
25 seconds. Is that slower or faster than what people in here
expect?
Just wanting to get
an
*BIG SNIP*
>
> header MY_HEADER_TAG6 List-Unsubscribe =~ /^\ describe MY_HEADER_TAG6 Possible spam tag in list unsub, Mailto:
> score MY_HEADER_TAG6 0.01
>
opps sorry, this was typoed by my big fingers:
header MY_HEADER_TAG6 List-Unsubscribe =~ /^\/i
Ah that's better :-)
--Chris Sante
I seen this too, but make sure you run --lint on your config file to ensure
it's good!
See also:
http://www.exit0.us/index.php/Win32Install26
It does not appear that all tests are working on my install of 2.6, --lint
returns as normal but
as in my other post, I am seeing misses where I know there
On Fri, 2003-08-22 at 19:47, AltGrendel wrote:
> Sorry folk, this is a continuing saga. I can't email Yorkshire Dave
> directly.
>
> YD:
>
> This is the latest trace that I have when attpempting to get to your
> site.
>
>
You're getting all the way except the last hop, me.
Heading back in the
> You can create the configuration directory with automatically generated user
> ID / password by using 'razor-admin -create' under the same user ID that you
> also use for 'spamassassin -r'.
thanks
---
This SF.net email is sponsored by:
Well I have a bunch I'm testing out. Some great ones here. Working very
nice, so I figure I would share them out. Keep in mind that some of these
WORKSTATION rules are for observation purposes. I'm well aware some of the
headers could be legit.
I will score these small as usual so they just say,
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=87682
Dave
>
> I'm encountering make problems with both the perl Makefile.PL and
> the CPAN shell installation approaches.
>
> CPAN shell tells me that it cannot find pod2man in my path even
> though it's in /usr/bin and runs when I type po
Michael Bell writes:
> Sorry about accidental send of last
>
> Anyway
>
> 1. Sys:Syslog warning when doing perl makefile.pl. Remember Win32
> doesn't use SpamD [nor does Sys::Syslog exist for Win32], hence this
> warning shouldn't appear.
>
> 2 At very end of running spamassassin -D < sample-sp
At 8/22/03 11:06 AM , Kris Deugau wrote:
I've seen legit mail on the default SA rules score 12-15.
Personally, I've never seen a legitimate mail score over about 4.5, and
those were from a couple of folks I know who overuse HTML in their emails.
The vast bulk of my ham scores below -5.0. I auto-
While we have discussed catching random letters, I wanted to go over a
finding. If you use my OBFU rules, or change Fred's to rawbody, there is one
instance of FPs you can watch out for. (Both sets found on the wiki
http://www.exit0.us)
Emails written in Word will tend to hit these rawbody rules d
Sorry folk, this is a continuing saga. I can't email Yorkshire Dave
directly.
YD:
This is the latest trace that I have when attpempting to get to your
site.
< internal subnets deleted>
3 64.83.78.1 (64.83.78.1) 4.255 ms 3.697 ms 3.650 ms
4 64.83.72.1.PHI-7507.cavtel.net (64.83.72.1) 9
On 08/21/03 09:15 AM, Louis LeBlanc sat at the `puter and typed:
> I've gotten a couple interesting spams lately. Well, interesting in
> the sense that I am perplexed by them.
>
> Here's a couple attached. They are from two different domains,
> watchmeandlearn.com and ofcourseitwill.com. They h
On Wed, 20 Aug 2003, Bob Proulx wrote:
> Erick Calder wrote:
> > I'm getting a bunch of mails from MAILER-DAEMONs around the world
> > complaining mostly that [EMAIL PROTECTED] does not exist.
> > these are generated by dictionary spammers who are using my e-mail address
> > for the reply-to hea
I'm trying to create a script that periodically emails a report to a user with the
sender and subjects of the emails that got flagged as spam. The snippet below is from
my spamlog. Does anyone know how to extract just the "From: somesender <[EMAIL
PROTECTED]>" and "Subject: details of transact
Hi,
I've run sa-learn over 300 spam emails (quite few, I know) und much more
ham emails.
ls -al .spamassassin/ looks good:
insgesamt 3772
drwx--4096 2003-08-22 19:39 .
drwxr-xr-x8192 2003-08-22 19:31 ..
-rw---2016 2003-08-22 19:39 bayes_msgcount
-rw--- 667648 2003-08-22 1
"Carl R. Friend" wrote:
>I'll concur that auto-deletion is not the wisest path to follow
> but I, too, am being lead down that path at the ISP
*wibble* Is this a Management path, or a "Users flooding the support
lines with requests" path?
> I volunteer time
> to (non-profit, so don't get you
>-Original Message-
>From: Martin Radford
>I'd suggest that you get them to put this in writing, explicitly
>acknowledging that there is a risk of non-spam being tagged as spam
>and being deleted inadvertently. (Perhaps someone could suggest
>suitable wording to go in a FAQ item :-) Wi
On Fri, Aug 22, 2003 at 11:41:40AM -0500, Patrick Bores is rumored to have said:
>
> I'd like to add spamassassin rules to match certain attachment
> filenames, but I can't seem to get it right. I'm trying things like:
>
> rawbody SOBIG_VIRUS
> /filename="?application.pif|document_all.pif|t
Hi
i have sent one email asking for - that i am unable to connect mysql databasefrom my server. The database is under a different host but is *spamassassin* istrying to connect only the database at the local server?
Here is again i am giving the snapshot of the log file for first few lines..
Sorry about accidental send of last
Anyway
1. Sys:Syslog warning when doing perl makefile.pl. Remember Win32
doesn't use SpamD [nor does Sys::Syslog exist for Win32], hence this
warning shouldn't appear.
2 At very end of running spamassassin -D < sample-spam.txt output
debug: RBL: success for 3
--- [EMAIL PROTECTED] wrote:
> Send Spamassassin-talk mailing list submissions to
> [EMAIL PROTECTED]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> or, via email, send a message with subject or body 'he
At 09:20 AM 8/22/2003 -0500, Mike Vanecek wrote:
have some rejects in my maillog. Was sourceforge having problems or ???
[EMAIL PROTECTED] admin]$ host 66.35.250.206
206.250.35.66.in-addr.arpa is an alias for 206.0/24.250.35.66.in-addr.arpa.
206.0/24.250.35.66.in-addr.arpa domain name pointer list
On Thu, 2003-08-21 at 20:42, Carl R. Friend wrote:
>Hello,
>
> > >I added a section to the main page of the wiki www.exito.us :)
> > >One can't repeat this enough, it is NOT a good idea to automatically delete
> > >emails marked spam. Then again, it isn't a good idea to date your cousin,
> > >
Ok, I grabbed the script I wrote. Quick and dirty but seems to save a LOT of
time. The idea is simple.
Basically grep your spamtrap for all lines that have 'http://' in them. You
lose a small percent because of line breaks but they repeat so much it
doesn't matter.
Next you just strip away all th
Hi all,
Would anyone use SPAMPD ?
And if so, once SA is installed , I donot understand how to start SPAMPD.
It is said on "http://www.worlddesign.com/Content/rd/mta/spampd/spampd.html";
that SPAMPD REPLACES SPAMD but what does it mean?
Thanx for help...
CR
-
At 8/21/03 05:14 PM , Jennifer Fountain wrote:
http://sylvestre.ledru.info/howto/howto_qmail_spamassassin.php
http://www.magma.com.ni/~jorge/spamassassin.html
Does anyone have any pointers or recommend which doc I should follow?
Those two both seem to involve setting up SA filtering site-wide, whi
Hello,
I'd like to add spamassassin rules to match certain attachment
filenames, but I can't seem to get it right. I'm trying things like:
rawbody SOBIG_VIRUS
/filename="?application.pif|document_all.pif|thank_you.pif"?/
Any ideas on how to match attachment filenames?
Patrick
-
> Has anyone come up with a solution to this yet?
>
> Regards,
> /Jeff
If you search the archives I think you'll find the answer, as I'm sure
it's been discussed and solved some months ago.
I can't remember for sure, but off the top of my head, I think its caused
by a version mismatch, either by
I'm running 2.55 and rules from
http://www.exit0.us/index.php/VirusBounceRules are not working
either. In fact I can't catch any mail re: Wicked scrensaver, thank
you...
Body rules seem to be working, but not header rules???
>>> "Fred" <[EMAIL PROTECTED]> 8/22/2003 10:19:01 AM >>>
What versio
I have not tried that install myself. I have heard of others on the list
have good success. I use RH so I use Theo's RPMs.
--Larry
>-Original Message-
>From: Jennifer Fountain
>I found these installaions and installed spamassassin via these:
>
>#ssh into raq
>su -
>mkdir /tmp/spama
Greetings All,
Having escaped a problem with spam until this week (thanks Sobig!!!), we haven't
had a need to filter email. Nonetheless, that has now changed. Currently I have a
quick and dirty perl filter running but it is just cutting on subject lines. Because
the subject lines hit a li
On Thu, Aug 21, 2003 at 01:07:33PM -0700, Robert E. Shelton wrote:
> CPAN shell tells me that it cannot find pod2man in my path even though
> it's in /usr/bin and runs when I type pod2man to my shell. I've
> installed all of the other modules listed in INSTALL hoping to fix the
> problem, and reloa
SpamAssassin-2.53. Guess I should upgrade...
On Friday, August 22, 2003, at 07:19 AM, Fred wrote:
What version of SA are you using?
I noticed this issue yesterday with RC1 of 2.6, I sent a message to the
list, no response yet.
Frederic Tarasevicius
Internet Information Services, Inc.
culley harr
On Thu, Aug 21, 2003 at 01:40:00PM +0300, landy wrote:
> is there a way to have SA report avg scores of all incoming emails and
> and avg socre of those detected as spam?
If you run spamd on the system, you can see it adds log entries if
configured properly. You can parse the logs for those entri
Hi there,
which config do I have to use: local.cf or user_prefs ?
In /etc/mail/spamassassin there is a local.cf - and in
/home/mail/.spamassassin/ there is an user_prefs.
Are both needed for spamassassin running as daemon (spamd/spamc) ?
--
Regards,
Jens Strohschnitter
--
[EMAIL PROTECTED] wrote:
Hi,
I have a problem with SpamAssassin where it would get (from postfix) an
email sent by someone on the internet, and that email already have a
X-Spam-Flag: YES and all the other SpamAssassin headers before I do my
own SpamAssassin tests.
How can I remove all SpamAssa
Hi,
Thomas Skaret Larsen wrote:
anyone know how to enable spamassassin PER domain. in an easy way. and
how can i use spamassassin without using qmail-scanner and not need to
recompile my qmail install with the qmailqueue patch.,
Add the followng to the .qmail-default file if you are using vpopm
landy wrote:
On Fri, 2003-08-22 at 03:34, mikea wrote:
On Wed, Aug 20, 2003 at 07:30:23PM -0600, Bob Proulx wrote:
me to i think someone has stolen the emails from SA list and used us as
fish baits. i am pist...
for last 3 days got tons of emails as if i send spam or virus to people
Sobig.F
I have some rejects in my maillog. Was sourceforge having problems or ???
[EMAIL PROTECTED] admin]$ host 66.35.250.206
206.250.35.66.in-addr.arpa is an alias for 206.0/24.250.35.66.in-addr.arpa.
206.0/24.250.35.66.in-addr.arpa domain name pointer lists.sourceforge.net.
grep -i Aug 21 /var/log/ma
What version of SA are you using?
I noticed this issue yesterday with RC1 of 2.6, I sent a message to the
list, no response yet.
Frederic Tarasevicius
Internet Information Services, Inc.
culley harrelson wrote:
> I just put these in /etc/mail/spamassassin/local.cf and spamassassin
> doesn't seem
I’m encountering make problems with both the perl Makefile.PL and the CPAN shell installation
approaches.
CPAN shell tells me that it cannot find pod2man in my path
even though it’s in /usr/bin and runs when I
type pod2man to my shell. I’ve installed all of the other modules listed
in
1 - 100 of 148 matches
Mail list logo
