user_prefs not working

2005-04-19 Thread Marcel Hochuli
Hi I have a user_prefs file in the home-dir of one user. In that file are these two lines: use_dma_spam_mailbox = true spam_mailbox_name = MYSPAM In the system-prefs are these two lines: # use_dma_spam_mailbox = false # spam_mailbox_name = SPAM The Spammail don't get to the MYSPAM mailbox. When I

Whoa-new spam today

2005-04-19 Thread John Fleming
I got 4-5 spams overnight that scored very low, and one didn't hit a single rule. 2 of them hit either SARE_MSGID_D10D4 or SARE_MSGID_IP, but one didn't hit anything. They are just a mixture of nonsense and misspelled words, with a single URL. They all came through the Debian mailing list,

Re: Whoa-new spam today

2005-04-19 Thread Jeff Chan
On Tuesday, April 19, 2005, 4:07:28 AM, John Fleming wrote: I got 4-5 spams overnight that scored very low, and one didn't hit a single rule. 2 of them hit either SARE_MSGID_D10D4 or SARE_MSGID_IP, but one didn't hit anything. They are just a mixture of nonsense and misspelled words, with

Re: user_prefs not working

2005-04-19 Thread Matt Kettler
At 06:15 AM 4/19/2005, Marcel Hochuli wrote: Hi I have a user_prefs file in the home-dir of one user. In that file are these two lines: use_dma_spam_mailbox = true spam_mailbox_name = MYSPAM In the system-prefs are these two lines: # use_dma_spam_mailbox = false # spam_mailbox_name = SPAM The

Fixing Incorrect ATIME Values

2005-04-19 Thread Gustafson, Tim
Hello I know that this is a persistent issue, and I can't seem to get a good resolution to it. I am running SpamAssassin 2.64 on FreeBSD 4.11. I cannot upgrade to SpamAssassin 3.0. My sa-learn --dump magic looks like this: 0.000 0 2 0 non-token data: bayes db

Postfix+SA+MySQL

2005-04-19 Thread ricker
Hello all, Was wondering if anyone can point me in the right directions here. I'm running the following system; Mandrake 10.1 Spamassassin 3.0.2 Postfix 2.1.4-2 MySQL 4.0.20 So far all is working well with scan/detection of spam. I'm able to pull user_pref via MySQL for the $GLOBAL settings, but

RE: Fixing Incorrect ATIME Values

2005-04-19 Thread Gray, Richard
Title: Fixing Incorrect ATIME Values I posted a fix to this problem a while back. Check the archives From: Gustafson, Tim [mailto:[EMAIL PROTECTED]Sent: Tue 19/04/2005 15:33To: users@spamassassin.apache.orgSubject: Fixing Incorrect ATIME Values HelloI know that this is a persistent

Re: Postfix+SA+MySQL

2005-04-19 Thread bruno . delladucata
[EMAIL PROTECTED] wrote on 19.04.2005 16:42:40: Hello all, Was wondering if anyone can point me in the right directions here. I'm running the following system; Mandrake 10.1 Spamassassin 3.0.2 Postfix 2.1.4-2 MySQL 4.0.20 So far all is working well with scan/detection of spam.

Re: Postfix+SA+MySQL

2005-04-19 Thread bruno . delladucata
[EMAIL PROTECTED] wrote on 19.04.2005 16:42:40: Hello all, Was wondering if anyone can point me in the right directions here. I'm running the following system; Mandrake 10.1 Spamassassin 3.0.2 Postfix 2.1.4-2 MySQL 4.0.20 So far all is working well with scan/detection of spam.

Re: user_prefs not working

2005-04-19 Thread Marcel Hochuli
ahh! - thanks for the hint Then it's CGPSA which transports mails to and from SpamAssassin. I have to set these parameters in CGPSAs user-config-files. I'll try that next, thank you Marcel x-tad-bigger___ /x-tad-bigger Am 19.04.2005 um 15:59 schrieb

Re: Whoa-new spam today

2005-04-19 Thread Kelson
John Fleming wrote: I got 4-5 spams overnight that scored very low, and one didn't hit a single rule. Hmm, the message looked familiar, and I checked my spam folder. Sure enough, there was one in there. The first 6 lines were identical to the one you posted, though the pithy saying, closing,

globbing in user_prefs whitelist not working

2005-04-19 Thread Rich Winkel
Hi, I'm using SA 2.63 on freebsd 4.10. It seems that whitelist_from [EMAIL PROTECTED] in user_prefs isn't working, I have to fully specify the userid. Does anyone have any ideas? Thanks! Rich

New(?) URL obfuscation technique

2005-04-19 Thread Kelson
Spotted this one in a message that only scored about 2.5. It was image-only spam with word salad below, and the link was...unorthodox, to say the least: A href=h t tp:/ /pfzxrwamqed.orgzunrs7d3ebsqfla9okv%2Egua cofk nhb%2Ecom/ This is the first time I've noticed the protocol broken up by line

Re: New(?) URL obfuscation technique

2005-04-19 Thread Kelson
Kelson wrote: This is the first time I've noticed the protocol broken up by line breaks! Forgot to mention: SA 3.0.2. -- Kelson Vibber SpeedGate Communications www.speed.net

Scoring for domain from Received header

2005-04-19 Thread Rafal Jankowski
Hello, I am using SA 3.0.2 from Debian Sarge, it is invoked from exiscan. I am wondering if it is possible to score for a domain from the last Received header. For example: *.pl -2 *.co.uk -3 .ru +1 no rDNS +3 I have searched through Mail::SpamAssassin::Conf documentation and thought

Re: Scoring for domain from Received header

2005-04-19 Thread Matt Kettler
Rafal Jankowski wrote: Hello, I am using SA 3.0.2 from Debian Sarge, it is invoked from exiscan. I am wondering if it is possible to score for a domain from the last Received header. For example: *.pl -2 *.co.uk -3 .ru +1 no rDNS +3 I have searched through Mail::SpamAssassin::Conf

Re: globbing in user_prefs whitelist not working

2005-04-19 Thread Rich Winkel
I should mention that the address in question is the user's own address; he's cc:ing mail to himself. I have to fully specify his address. According to Rich Winkel: Hi, I'm using SA 2.63 on freebsd 4.10. It seems that whitelist_from [EMAIL PROTECTED] in user_prefs isn't working, I have to

Re: New(?) URL obfuscation technique

2005-04-19 Thread Loren Wilton
This is the first time I've noticed the protocol broken up by line breaks! Standard hack, been around for a month or two now. I think we may have a SARE rule for this, if not we will soon. The trick is that breaking http up with cr characters (not actually newlines) causes SA to not spot it,

Re: Scoring for domain from Received header

2005-04-19 Thread Rafal Jankowski
Tuesday, April 19, 2005, 9:21:06 PM, you wrote: You'll almost certainly have to do this with a custom rule. You can't have multiple scores for whitelist, as the all get implemented as a single rule. To make your life easier, look at writing a rule that examines the fake header

Re: Scoring for domain from Received header

2005-04-19 Thread Matt Kettler
Rafal Jankowski wrote: I have written a rule like that: header DOMAIN_PLReceived =~/\.pl/ describe DOMAIN_PL Received From Poland lang pl describe DOMAIN_PL E-mail z Polski score DOMAIN_PL -2.5 but it checks each