> Loren, which ruleset are you refering to in this case?
Sorry, don't know. I would guess one of the html files though.
Hum, maybe I lied. I just went looking and didn't find it.
I just resubmitted it to test. Maybe I skipped over it before.
Loren
I have been seeing hundreds of "Postmaster" messages a day, that are bounced
to bogus sender addresses, in my domain.
There have been a trickle of them coming in for a long time, but lately, the
volume has skyrocketed.
I am running Mimedefang 2.37 and Spamassassin 2.63 (ya I know I should up
On Tue, 22 Feb 2005, Nate wrote:
> Hello,
>
> I'm using spamassassin 2.64 on Debian Woody.
>
> My clients emails are getting clobbered by "Pharma" spam. The messages seem
> to be using different encoding on words like Viagra, Cialis and sa is not
> picking them up.
[snip..]
> Here is the typical
At 05:29 PM 2/22/2005, Arie Kachler wrote:
Can SQL user preferences be accomplished with a milter like Mimedefang? I
don't
see the option in the SA documentation. The only way, apparently, to use SQL
user prefs is with spamd, which is not used with Mimedefang or other milters.
Is there a way aroun
Hello,
Can SQL user preferences be accomplished with a milter like Mimedefang? I don't
see the option in the SA documentation. The only way, apparently, to use SQL
user prefs is with spamd, which is not used with Mimedefang or other milters.
Is there a way around this?
Any help will be greately app
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
>
> Joe Kletch wrote:
> >> header __PORN_WORD12 Subject =~/(?:d(?:ic|ci)k|c(?:|oc|co)k/i
> >>
> >> Unfortunately I don't understand regexp, any suggestions for
> >> fixing this? If I remove the lint test report is good.
> >>
> >
> > Through
At 03:24 PM 2/22/2005, Terry Poperszky wrote:
What exactly am I losing when I use the -L switch on spamd?
That disables two groups of tests:
1) Anything DNS based: RBLs, URIBLs, MX checks, SPF
2) Any other network add-ons you may have installed: razor, dcc, pyzor
What exactly am I losing when I use the -L switch on spamd?
Terry Poperszky
Joe Kletch wrote:
>> header __PORN_WORD12 Subject =~/(?:d(?:ic|ci)k|c(?:|oc|co)k/i
>>
>> Unfortunately I don't understand regexp, any suggestions for fixing
>> this? If I remove the lint test report is good.
>>
>
> Through trial and error I found that removing the third '(' made lint
> happy
On Feb 22, 2005, at 1:49 PM, Joe Kletch wrote:
Thanks Evan. I joined the lines and now spamassassin -D --lint is
almost happy. I get this error:
Failed to run header SpamAssassin tests, skipping some: Unmatched ( in
regex; marked by <-- HERE in m/( <-- HERE ?:d(?:ic|ci)k|c(?:|oc|co)k/
at /usr/
On Feb 22, 2005, at 1:38 PM, Evan Platt wrote:
At 11:30 AM 2/22/2005, you wrote:
I'd like to try these rules as below--but suspect line breaks from the
email may be a problem. Can you point me to a file to download or
attach a text doc?
Thanks and glad I finally joined this list. Been using SA for
So what's so attractive about "Stupid girls bowling", anyway?
Well, OK, I guess there's more than one way to unscramble "bolwing"...
but why "stupid"?
Hello:
I've attempted to follow instructions here to upgrade my Exim 3.x and
SA 2.6 installation to the current revs of each.
So far no luck on the SA at all. and have not had much success with
Exim either.
What I'm looking for at this point is someone who would be willing to
do the process for
At 11:30 AM 2/22/2005, you wrote:
I'd like to try these rules as below--but suspect line breaks from the
email may be a problem. Can you point me to a file to download or
attach a text doc?
Thanks and glad I finally joined this list. Been using SA for a couple
years now and now have had to get seri
At 02:30 PM 2/22/2005, Jim Willsher wrote:
But SA doesn't seem to be checking the RBLs.
I've looked at the page at
http://wiki.apache.org/spamassassin/UsingNetworkTests
But my /etc/rc.d/init.d/spamassassin file doesn't cntain the -L or --local
entries anywhere
Do you have Net::DNS installed?
try r
Hi,
I have a Suse Linux Open Exchange 4.0 running SA version 2.64.
Has anyone upgraded the SA on SLOX to version 3?
Thx,
Cip
I'd like to try these rules as below--but suspect line breaks from the
email may be a problem. Can you point me to a file to download or
attach a text doc?
Thanks and glad I finally joined this list. Been using SA for a couple
years now and now have had to get serious about using it well.
J
Hi all,
SA 3.0.2 on CentOs 3.3, running Sendmail and procmail.
I'm getting lots of emails getting past SpamAssassing from senders who are
on the various blacklists. I know this, because when I get similar messages
on a webmail acocunt with another ISP I see:
X-RBL-Warning: 218.64.141.207 is list
Howdy,
I'm having an issue which may be with SpamAssassin or may be with
amavisd-new -- feel free to point me elsewhere if this isn't a SA
problem.
I'm using:
FreeBSD 5-STABLE from 20050213
Relevent ports:
perl-5.8.6_2
amavisd-new-2.2.1_1,1
p5-Mail-SpamAssassin-3.0.2_1
postfix-2.1.5_1,1
General
Kelson <[EMAIL PROTECTED]> wrote on 02/22/2005
11:30:46 AM:
> Jay Levitt wrote:
> > I have SA 3.01 running under mimedefang 2.43 with sendmail 8.13.1.
At
> > some point, SA seems to stop doing lookups on the DNSBLs; spam
gets
> > through that is listed in multiple BLs; if I check manually with
Jay Levitt wrote:
I have SA 3.01 running under mimedefang 2.43 with sendmail 8.13.1. At
some point, SA seems to stop doing lookups on the DNSBLs; spam gets
through that is listed in multiple BLs; if I check manually with
spamassassin -t, it detects the BL entry, even if I run it moments after
On Tue, Feb 22, 2005 at 02:27:27PM +0100, Milos Prudek wrote:
> i just installed spamassassin 3.0.2 and it works but always complains
> about razor2. Here's what it prints when I test spamassassin:
On Tue, Feb 22, 2005 at 05:47:04PM +0100, Milos Prudek wrote:
> > What version of razor2 do you have
Yes it does exist I checked and I am running the command as root.
Carinus
> What version of razor2 do you have?
perl-razor-agents 2.34
SuSE 9.0
--
Milos Prudek
_
Most websites are
confused chintzy gaudy conflicting tacky unpleasant... unusable.
Learn how usable YOUR website is! http://www.spoxdesign.com
At 11:27 AM 2/22/2005, Carinus Carelse wrote:
When I try to run the command I get the following error. Am i doing
something wrong.
bash-2.05# ./check_whitelist
/var/spool/MailScanner/spamassassin/bayes/auto-whitelist
Cannot open file /var/spool/MailScanner/spamassassin/bayes/auto-whitelist: No
suc
At 10:58 AM 2/22/2005, Marc Perkel wrote:
First I would recomment you upgrade to Spam Assassin 3.x - It's much better.
Good point Marc, that's a better solution in general. I do recommend that
over my previous advice of just adding antidrug.cf.
However, if they are stuck on 2.64 due to perl versi
At 10:34 AM 2/22/2005, Nate wrote:
I'm using spamassassin 2.64 on Debian Woody.
My clients emails are getting clobbered by "Pharma" spam. The messages seem
to be using different encoding on words like Viagra, Cialis and sa is not
picking them up.
Looks like a job for antidrug.cf:
http://mywebpages
Paul Crittenden wrote on Tue, 22 Feb 2005 10:12:52 -0600:
> I ran spamassassin --lint -D and am attaching the output.
> Does this help
>
No, looks fine. Run a *message* which you think should have been detected
as spam thru sa -D and look at the outcome. (And please stay in thread
instead of s
When I try to run the command I get the following error. Am i doing
something wrong.
bash-2.05# ./check_whitelist
/var/spool/MailScanner/spamassassin/bayes/auto-whitelist
Cannot open file /var/spool/MailScanner/spamassassin/bayes/auto-whitelist: No
such file or directory
Good morning, I am running SA 3.0.2 and have been running SpamAssassin for
about a year now. Things were working great until this weekend. For some
reason over the weekend spam that had been getting caught is now getting
through and not marked as spam. It doesn't seem to matter what the subject
Nate,
I'm sure there are some good SARE rules for this. Go to
http://www.rulesemporium.com for some good custom made rules. I know
there is antidrug.cf which contains many Pharm phrases.
Kris
-Original Message-
From: Nate [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 22, 2005 9:35
--On Tuesday, February 22, 2005 9:23 AM -0500 Cris Fuhrman
<[EMAIL PROTECTED]> wrote:
I've a hunch that "null" links, strange parsing, etc. will be handled
correctly by the DOM parser for HTML, but I've never done any tests
for lack of time. Java API could be called under linux, but IE's? Just
an
"Nate" <[EMAIL PROTECTED]> wrote on
02/22/2005 09:34:51 AM:
> Hello,
>
> I'm using spamassassin 2.64 on Debian Woody.
>
> My clients emails are getting clobbered by "Pharma" spam.
The messages seem
> to be using different encoding on words like Viagra, Cialis and sa
is not
> picking them up.
>
Hi,
required_hits 7
report_safe 0
rewrite_header Subject [SPAM]
bayes_auto_learn 1
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 0
dns_available yes
I think I may have just sust this. I just found a bayes db in
/home/root/.spamassassin, whereas I have been testing things logged in a
root an
First I would recomment you upgrade to Spam Assassin 3.x - It's much
better.
Nate wrote:
Hello,
I'm using spamassassin 2.64 on Debian Woody.
My clients emails are getting clobbered by "Pharma" spam. The messages seem
to be using different encoding on words like Viagra, Cialis and sa is n
Hello,
I'm using spamassassin 2.64 on Debian Woody.
My clients emails are getting clobbered by "Pharma" spam. The messages seem
to be using different encoding on words like Viagra, Cialis and sa is not
picking them up.
I've tried setting up header and body tests, but the bastards at "Pharma"
ke
At 10:31 AM 2/22/2005, Carinus Carelse wrote:
How can see what is in the Auto-Whitelist
In the tools sub-directory of the SA tarball is a tool called
"check-whitelist". This will dump your AWL contents, although you'll need
to manually tell it what AWL db to dump.
It's also got a --clean option
Hi all,
How can see what is in the Auto-Whitelist and how can I selectively
delete from there is it possible.
Carinus
At 08:27 AM 2/22/2005, Milos Prudek wrote:
i just installed spamassassin 3.0.2 and it works but always complains
about razor2.
What version of razor2 do you have?
Here's what it prints when I test spamassassin:
razor2 check skipped: Illegal seek Insecure dependency in connect while
running setuid a
Thanks. I am running 'sa-learn' as root. But you've given me an idea.
Maybe it's looking in home\spamd for them when running user that user
and in /root/./spamassassin when I'm running as root? I've just
specified the path to bayes in local.cf, so we'll see if that makes any
difference.
__
"Paul J. Smith" <[EMAIL PROTECTED]>
wrote on 02/22/2005 01:41:28 AM:
> Still nothing. I set the owner on the bayes dbs to 'spamd' which
is
> the user the process is running under. I also set og+rw. Left
> overnight, no change. Only 2 hams, depsite the autolearn having
> picked loads of hams
Can you post your local.cf?
Paul J. Smith wrote:
Still nothing. I set the owner on the bayes dbs to 'spamd' which is the user
the process is running under. I also set og+rw. Left overnight, no change.
Only 2 hams, depsite the autolearn having picked loads of hams out of the feed
with 'autole
Good morning, I am running SA 3.0.2 and have been running SpamAssassin for
about a year now. Things were working great until this weekend. For some
reason over the weekend spam that had been getting caught is now getting
through and not marked as spam. It doesn't seem to matter what the subject
On Tue, 22 Feb 2005 04:35:51 -0600 (CST), David B Funk
<[EMAIL PROTECTED]> wrote:
> I'm seeing a new spam varient that is clearly designed to get
> past SURBL. It is an HTML message that contains many (50~100)
> 'invisible' links; links that have no target text, just:
> http://garbage.sitename.tld"
David B Funk wrote:
I'm seeing a new spam varient that is clearly designed to get
past SURBL. It is an HTML message that contains many (50~100)
'invisible' links; links that have no target text, just:
http://garbage.sitename.tld";>
Is it time to create rules to penalize large numbers of 'invisible
Loren Wilton wrote:
We have a SARE rule to catch the first one, and I've just created a rule for
the second one that will show up soon if it passes testing.
Rules are your friend...
Loren, which ruleset are you refering to in this case?
Thank you
/ Martin
Johann Spies wrote:
> On Fri, Feb 18, 2005 at 11:02:15AM -0500, Chris Santerre wrote:
>>
>> Absolutely! But without knowing how you are blocking, I can't say
>> anymore.
>
> I am using exim4 with exiscan and refuse to accept mail identified as
> spam.
>
> Regards
> Johann
So, don't run those
Hi,
i just installed spamassassin 3.0.2 and it works but always complains
about razor2. Here's what it prints when I test spamassassin:
razor2 check skipped: Illegal seek Insecure dependency in connect while
running setuid at
/usr/lib/perl5/5.8.1/i586-linux-thread-multi/IO/Socket.pm line 114,
line
On Fri, Feb 18, 2005 at 11:02:15AM -0500, Chris Santerre wrote:
>
> Absolutely! But without knowing how you are blocking, I can't say anymore.
I am using exim4 with exiscan and refuse to accept mail identified as
spam.
Regards
Johann
--
Johann Spies Telefoon: 021-808 4036
Informasiete
We have a SARE rule to catch the first one, and I've just created a rule for
the second one that will show up soon if it passes testing.
Rules are your friend...
Loren
I'm seeing a new spam varient that is clearly designed to get
past SURBL. It is an HTML message that contains many (50~100)
'invisible' links; links that have no target text, just:
http://garbage.sitename.tld";>
The intention is clear, they want to fill up the 20 'slots' of
the spamcop_uri_limit w
I use spamassassin version 2.64, SuSE 8.2 and qmail.
I get the following problem:
Argument_"\010862517M->U^TB"_isn't_numeric_in_numeric_gt_(>)_a
t_/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm_line_1260.
The relevant Code of
/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Baye
Hans-Georg Gloeckler wrote:
Am Donnerstag, 17. Februar 2005 09:47 schrieb Hans-Georg Gloeckler:
I use spamassassin version 2.64, SuSE 8.2 and qmail.
I get the following problem:
Argument_"\010862517M->U^TB"_isn't_numeric_in_numeric_gt_(>)_a
t_/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Ba
Am Donnerstag, 17. Februar 2005 09:47 schrieb Hans-Georg Gloeckler:
I use spamassassin version 2.64, SuSE 8.2 and qmail.
I get the following problem:
Argument_"\010862517M->U^TB"_isn't_numeric_in_numeric_gt_(>)_a
t_/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm_l
Still nothing. I set the owner on the bayes dbs to 'spamd' which is the user
the process is running under. I also set og+rw. Left overnight, no change.
Only 2 hams, depsite the autolearn having picked loads of hams out of the feed
with 'autolearn=spam/ham'. I've just deleted the databases w
At 12:01 AM 2/22/2005, Ciprian wrote:
Now, I would like to copy the filters from my desktop to the email server so
all users can benefit from them. How can I do this?
0) as a prestep, run sa-learn --dump magic and roughly note the spam and
ham counts
1) find you home directory, find the .spamassa
Hello,
I have installed spamassassin on my email server. It is working, but it is not
picking up too much spam.
I have also installed spamassassin on my desktop, and I've been "training" it
by reporting spam as it came in to my account. Now, my desktop picks up
almost all spam.
Now, I would
57 matches
Mail list logo
