Hi
Running SA 3.03-1
Sendmail 8.12.11-4
RHEL 3
Configured using MailScanner 4.41.3
Can anyone tell me the name of the SA test (if there is one) that can check for
a valid PTR in the sender IP? Sendmail can be configured to delay/reject sender
IP's with invalid/missing PTR's but this will
On 6/6/2005 10:50 PM +0200, Raul Dias wrote:
Ok, I findout some stuff here:
1 - This is not the only message this happens. Other messages that
should have triggered SPF rules did not.
2 - This is happening when using spamd.
3 - When running these messages by hand against spamassassin
Hi
i small question on SPamAssassin 3.0.3:
Jun 7 10:07:07 gw spamd[3329]: connection from gw.srv2.schevingt.org
[127.0.0.1] at port 45929
Jun 7 10:07:07 gw spamd[3329]: handle_user: unable to find user
'[EMAIL PROTECTED]'!
Jun 7 10:07:07 gw spamd[3329]: Still running as root: user not
I get a lot of med-spams lately that look the same, short, 2 lines with
one url, below that some text (from a book?).
Often it gets marked as spam because of the url, but not always because
bayes has no real grip on this mail.
Maybe there is a way to recognise them in the second receive-line
Hello,
I'm unable to download/view the gpg/md5/sha1 signature from the website
eg.
http://www.apache.org/dist/spamassassin//Mail-SpamAssassin-3.0.4.tar.bz2.md5
had to be
http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.0.4.tar.bz2.md5
With kind regards,
Met vriendelijke groet,
There is nothing is the qmail-scanner config file for this nor in the
documentation. The documentation does mention changing your local.cf
file.
Any other ideas?
Thanks!
Scott
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Monday, June 06, 2005 2:45 PM
To:
Yes multiple times.
-Original Message-
From: Vinayak Royadu [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 07, 2005 8:38 AM
To: Proctor, Scott
Cc: Matt Kettler; users@spamassassin.apache.org
Subject: RE: Local.cf settings seem to be ignored
On Tue, 2005-06-07 at 17:52, Proctor, Scott
On Tue, 2005-06-07 at 09:12 +0200, Niek wrote:
On 6/6/2005 10:50 PM +0200, Raul Dias wrote:
Ok, I findout some stuff here:
1 - This is not the only message this happens. Other messages that
should have triggered SPF rules did not.
2 - This is happening when using spamd.
3
On Tue, Jun 07, 2005 at 01:07:49PM +0200, Maurice Lucas wrote:
I'm unable to download/view the gpg/md5/sha1 signature from the website
eg.
http://www.apache.org/dist/spamassassin//Mail-SpamAssassin-3.0.4.tar.bz2.md5
had to be
On Tue, Jun 07, 2005 at 09:14:52AM -0400, Theo Van Dinter wrote:
http://www.apache.org/dist/spamassassin//Mail-SpamAssassin-3.0.4.tar.bz2.md5
http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.0.4.tar.bz2.md5
Yes, under source/ is the correct path. Is there something pointing
Hi,
since a lot of spam nowadays tries to get past the filters
by multiplying random letters, wouldn't it make sense to
introduce normalization plugins to spamassassin?
These would run over the mail once before the actual scanning
starts, and perform transformations on the decoded mail body.
At 04:13 AM 6/7/2005, Phibee Network operation Center wrote:
Hi
i small question on SPamAssassin 3.0.3:
Jun 7 10:07:07 gw spamd[3329]: connection from gw.srv2.schevingt.org
[127.0.0.1] at port 45929
Jun 7 10:07:07 gw spamd[3329]: handle_user: unable to find user
'[EMAIL PROTECTED]'!
Jun 7
At 04:13 AM 6/7/2005, Phibee Network operation Center wrote:
Hi
i small question on SPamAssassin 3.0.3:
Jun 7 10:07:07 gw spamd[3329]: connection from gw.srv2.schevingt.org
[127.0.0.1] at port 45929
Jun 7 10:07:07 gw spamd[3329]: handle_user: unable to find user
'[EMAIL PROTECTED]'!
Matt Kettler a écrit :
At 04:13 AM 6/7/2005, Phibee Network operation Center wrote:
Hi
i small question on SPamAssassin 3.0.3:
Jun 7 10:07:07 gw spamd[3329]: connection from gw.srv2.schevingt.org
[127.0.0.1] at port 45929
Jun 7 10:07:07 gw spamd[3329]: handle_user: unable to find user
At 09:44 AM 6/7/2005, Phibee Network operation Center wrote:
Ok i thinks that it's qmail-scanner for start with -u ... i put verbose
into the config .. if i put Fast_SpamAssassin, only -u are removed ?
I don't know, I'm no expert on qmail-scanner.
However, it looks like trying to pass -u is
-Original Message-
From: Sven Riedel [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 07, 2005 8:58 AM
To: users@spamassassin.apache.org
Subject: Would a normalization plugin make sense?
Hi,
since a lot of spam nowadays tries to get past the filters
by multiplying random letters, wouldn't
Vivek Khera wrote:
and the idiot mail system that did such neutering should be banned
from the earth. there's absolutely no reason to strip a virus from
an email then let the rest of the message through.
Actually, it's occasionally the virus itself that misfires and forgets
to attach a copy
pardon my complete unix ignorance, I have been trying to figure
out how to get debug output to a file so I can go back and look
at it. I also want to look at the marked up email w/ report so
I am using this:
spamassassin -D -t test2.txt test2.out
How could I also redirect the debug output to
test2.out spamassassin -D.
-Original Message-
From: Mike Schrauder [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 07, 2005 10:42 AM
To: users@spamassassin.apache.org
Subject: debug output to file?
pardon my complete unix ignorance, I have been trying to figure
out how to get debug
Hi,
I just downgraded from a svn version to 3.0.4
I've noticed SA only utilized spamhaus for uridnsbl's.
I check my /usr/share/spamassassin/25_uribl.cf it has all the surbl.org
zones listed + I enabled multi.uribl.com in local.cf.
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL is turn on in
Or one could do like Theo, and strip all HTML content from
the emails. :)
Or do that. I'd love to do that. But unfortunately, some users
actually like html mails. No accounting for taste :)
The problem with the normalization, is like anything else.
One mans ham,
anothers spam. Repetitive
Spamassassin -D -t test2.txt 2test2.out would work. In *nix
environments you just choose the level by putting the number in front of
the redirect.
This should help you get up to speed on Linux I/O redirection:
http://www.cpqlinux.com/redirect.html
Kris
-Original Message-
From: Mike
But I'm not so sure yet so my question is do you know of any HAM that uses
receive lines like this?
Not sure, but running some mass-checks now to see.
Loren
pardon my complete unix ignorance, I have been trying to figure
out how to get debug output to a file so I can go back and look
at it. I also want to look at the marked up email w/ report so
I am using this:
spamassassin -D -t test2.txt test2.out
How could I also redirect the debug
Would this make sense? Can this be included into spamassassin, or
are the current internals structured in way that makes the introduction
of such plugins hard/impossible?
The concept of normalization has been discussed under various names over
time. My personal impression is nobody really
-Original Message-
From: Niek [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 07, 2005 10:48 AM
To: users@spamassassin.apache.org
Subject: uridnsbl only spamhaus in 3.0.4 ?
Hi,
I just downgraded from a svn version to 3.0.4
*snip*
And that's it, no surbl.org or uribl.com lookups.
At
On Tue, Jun 07, 2005 at 10:42:07AM -0400, Mike Schrauder wrote:
pardon my complete unix ignorance, I have been trying to figure
out how to get debug output to a file so I can go back and look
at it. I also want to look at the marked up email w/ report so
I am using this:
spamassassin -D -t
Hello,
I've tried to find an answer to this, but couldn't.
I'm using SA 3.0.3, invoked by Amavisd-New (latest version), on Fedora Core 3.
I've installed the Mail::SPF::Query module, and it works fine.
My question is, how can I disable it from being used by SA?
I'm looking for another way
On 6/7/2005 5:39 PM +0200, Chris Santerre wrote:
URIBL has not officially requested to be included yet. We are doing some
behind the scenes beef ups. Our front end seems to be ever improving. :)
I know, but that doesn't matter in this case.
The ip listed in multi.surbl.org too, but SA seems
On Tue, Jun 07, 2005 at 06:11:18PM +0200, Niek wrote:
On 6/7/2005 5:39 PM +0200, Chris Santerre wrote:
URIBL has not officially requested to be included yet. We are doing some
behind the scenes beef ups. Our front end seems to be ever improving. :)
I know, but that doesn't matter in this
Ronny Nussbaum wrote:
Hello,
I've tried to find an answer to this, but couldn't.
I'm using SA 3.0.3, invoked by Amavisd-New (latest version), on Fedora
Core 3.
I've installed the Mail::SPF::Query module, and it works fine.
My question is, how can I disable it from being used by SA?
I'm
Ronny Nussbaum wrote:
Hello,
I've tried to find an answer to this, but couldn't.
I'm using SA 3.0.3, invoked by Amavisd-New (latest version), on Fedora
Core 3.
I've installed the Mail::SPF::Query module, and it works fine.
My question is, how can I disable it from being used by SA?
On Tue, 7 Jun 2005, Bob McClure Jr wrote:
On Tue, Jun 07, 2005 at 10:42:07AM -0400, Mike Schrauder wrote:
pardon my complete unix ignorance, I have been trying to figure
out how to get debug output to a file so I can go back and look
[snip..]
i've also tried spamassassin -D -t test2.txt
On 6/7/2005 6:13 PM +0200, Theo Van Dinter wrote:
The debug output specified what happened. The domains were all in the
skip list, and SURBL and such doesn't have IPs looked up. SBL does do
IPs, so it was queried.
debug: uri found: http://pics.ebaystatic.com/aw/pics/x.gif
debug: uri found:
Hello,
I have just installed a mail gateway box to soften the load on our
internal mail server. Both servers are running SpamAssassin (details
below) and I noticed that the internal mail server is scanning messages
from our mail gateway eventhough they have already been scanned and
marked
Paul Porter wrote:
Hello,
I have just installed a mail gateway box to soften the load on our
internal mail server. Both servers are running SpamAssassin (details
below) and I noticed that the internal mail server is scanning messages
from our mail gateway eventhough they have already been
HELP! I cant get this figured out for the life of me. Here is what I
have...
I have SA 3.0.2, using a Postgres database to store user preferences. When
I run a test instance and pass a test message to it (using spamc and spamd)
and the blacklist_from entries never get read...
Here is my
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kevin Marvin wrote:
debug: Conf::SQL: executing SQL: SELECT preference, value FROM
userpref WHERE username = '[EMAIL PROTECTED]' OR username =
'$GLOBAL' OR username = '%'||'architel.com' ORDER BY username ASC
If you run the query above in psql
preference| value
-+
required_score | 4.0
blacklist_from | [EMAIL PROTECTED]
blacklist_from | [EMAIL PROTECTED]
score USER_IN_BLACKLIST | 100
required_score | 3.0
report_safe
On Tue, 7 Jun 2005, Raul Dias wrote:
SPF would never work if not there, right?
Note that it does work, but not always.
I have never see it fail from calling the spamassassin form the command
line, just as spamd.
It has enough permission for spamd to read it.
Could it be that it happens
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kevin Marvin wrote:
preference | value
-+ required_score
| 4.0 blacklist_from | [EMAIL PROTECTED]
blacklist_from | [EMAIL PROTECTED] score USER_IN_BLACKLIST |
100 required_score | 3.0 report_safe |
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kevin Marvin wrote:
spamd -x -q -C /etc/mail/test/ --siteconfigpath=/etc/mail/test -p
Are you sure you mean -C /etc/mail/test/? Normally that would be
something like /usr/share/spamassassin, which is where all of the
default .cf/rules files are
You, sir, are a GENIUS!
That fixed it perfectly. Thank you very much! Name the brand of e-beer and
I will send it your way.
- Kevin
On 6/7/05 1:00 PM, Michael Parker [EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kevin Marvin wrote:
spamd -x -q -C
Kevin Marvin wrote:
HELP! I cant get this figured out for the life of me. Here is what I
have...
I have SA 3.0.2, using a Postgres database to store user preferences. When
I run a test instance and pass a test message to it (using spamc and spamd)
and the blacklist_from entries never get
Hi
Sometimes, don't know exactly when... When people receive email through our
mail mta Linux Redhat AS 3.0 Taroon update 3 2.4.21-27.0.2.ELsmp (Postfix +
Trend(IMSS 5.5) + SA 3.0.3 then third party mail server with attachment of
about 2Mo, the attachment is "destroyed" when passed over
JamesDR wrote:
Kevin Marvin wrote:
Sorry list,
Michael set me straight on allow_user_rules :-D
--
Thanks,
James
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
JamesDR wrote:
Kevin Marvin wrote:
HELP! I cant get this figured out for the life of me. Here is
what I have...
I have SA 3.0.2, using a Postgres database to store user
preferences. When I run a test instance and pass a test message
to it
On Tue, 2005-06-07 at 12:49 -0500, David B Funk wrote:
On Tue, 7 Jun 2005, Raul Dias wrote:
SPF would never work if not there, right?
Note that it does work, but not always.
I have never see it fail from calling the spamassassin form the command
line, just as spamd.
It has enough
Hi,
I ran a diff on the scores between 3.0.3 and 3.0.4 and it looks like
RCVD_IN_SORBS_MISC, RCVD_IN_SORBS_SOCKS and RCVD_IN_SORBS_SMTP scores
played some musical chairs or am I not seeing this correctly?
Pete
[EMAIL PROTECTED] diff -u Mail-SpamAssassin-3.0.3/rules/50_scores.cf
On Tue, Jun 07, 2005 at 04:13:48PM -0400, Pete O'Hara wrote:
I ran a diff on the scores between 3.0.3 and 3.0.4 and it looks like
RCVD_IN_SORBS_MISC, RCVD_IN_SORBS_SOCKS and RCVD_IN_SORBS_SMTP scores
played some musical chairs or am I not seeing this correctly?
Yes, they did. The SORBS
Hello at SA list.
I am a new subscriber - don't get angry if I did
something wrong :-)
1. Is there any place and/or are there
any tools that are available for updating SA rules automatically (on
FreeBSD)?
2. What can I use to check onSA
configurationfrom aPerl program (spamassassin
Irina wrote:
Hello at SA list.
I am a new subscriber - don't get angry if I did something wrong :-)
1. Is there any place and/or are there any tools that are available
for updating SA rules automatically (on FreeBSD)?
http://www.exit0.us/index.php?pagename=RulesDuJour
Note: this
In an older episode (Tuesday 07 June 2005 22:17), Theo Van Dinter wrote:
On Tue, Jun 07, 2005 at 04:13:48PM -0400, Pete O'Hara wrote:
I ran a diff on the scores between 3.0.3 and 3.0.4 and it looks like
RCVD_IN_SORBS_MISC, RCVD_IN_SORBS_SOCKS and RCVD_IN_SORBS_SMTP scores
played some
On Wed, Jun 08, 2005 at 12:50:59AM +0200, wolfgang wrote:
sorry, not being an native english speaker, Isimply don't understand what
this
is about, could someone re-phrase that?
Per the Changes file, the full information is in Bugzilla bug 4367:
Thank you all for answering me.
I found one link that may be very interesting
(http://wiki.apache.org/spamassassin/CustomRulesets)
I first should mention, I am a new SUBSCRIBER, not a new user to SA. I have
been using it for a couple of years. Over that period I have created
thousands of
Irina wrote:
Thank you all for answering me.
I found one link that may be very interesting
(http://wiki.apache.org/spamassassin/CustomRulesets)
I first should mention, I am a new SUBSCRIBER, not a new user to SA. I have
been using it for a couple of years. Over that period I have created
I keep getting spam with url's of know spammers but i never see the email
tagged or blocked.
i'm running sa 2.63(yeah, i know i gotta upgrade) and i block the mail with a
score of 4 and tag at 3.
spamcop_uri's score is 4 by default and yet nothing gets blocked or even tagged.
here's a sample
In an older episode (Wednesday 08 June 2005 00:54), Theo Van Dinter wrote:
On Wed, Jun 08, 2005 at 12:50:59AM +0200, wolfgang wrote:
Per the Changes file, the full information is in Bugzilla bug 4367:
http://bugzilla.spamassassin.org/show_bug.cgi?id=4367
The short version is that the
Hi,
I have read ResendingMailWithHeaders document and I couldn't find is there a
plug-in available for
Outlook so you can provide a feedback to Bayes just by pressing 'Spam' or 'Ham'
buttons? Thank
you.
Sincerely,
Vadym Chepkov
Kern, Tom wrote:
I keep getting spam with url's of know spammers but i never see the email
tagged or blocked.
i'm running sa 2.63(yeah, i know i gotta upgrade)
Yeah, really soon. You've got a remote DoS vulnerability in your mime parser.
(2.64 and higher are immune)
and i block the mail
From: Rick Macdougall [EMAIL PROTECTED]
Irina wrote:
Thank you all for answering me.
I found one link that may be very interesting
(http://wiki.apache.org/spamassassin/CustomRulesets)
I first should mention, I am a new SUBSCRIBER, not a new user to SA. I
have
been using it for a
On Wed, Jun 08, 2005 at 01:39:46AM +0200, wolfgang wrote:
thanks. I understand this
- was only a labelling problem
- has been fixed in 3.0.4.
Yes.
--
Randomly Generated Tagline:
No, I do not know what the Schadenfreude is. Please tell me, because
I'm dying to know.
--
Vadym Chepkov wrote:
Hi,
I have read ResendingMailWithHeaders document and I couldn't find is there a
plug-in available for
Outlook so you can provide a feedback to Bayes just by pressing 'Spam' or
'Ham' buttons? Thank
you.
Not that I'm aware of.
Rick, nice to hear good words about NetAccess. I will definitely say hello
to Gary and Tim. You must have left long ago (I have been with NetAccess
with more than for 5 years).
As of SA we use.
I will look into using RDJ rulesets since nobody minds :-) And Bayes as
well.
We don't use SURBL
Hello Joanne,
I am not really sure what you meant by
kibitz the SARE process
Sorry, English is not my native language and some words don't go together.
If you mean I would share my rules? I don't mind at all. But first I would
like to rewrite them as I mentioned in my previous email, so
Irina wrote:
I also have NOT used Bayes. Don't know how safe it is. Would I just submit
a spam message and I don't have to anything else, or ham the same way? Not
sure.
Some people have problems with Bayes, but many find that it does help a
lot. It does require you to train it with both
Irina wrote:
We don't use SURBL network tests because we use RBL lists from mail server
itself.
SURBL works differently. Most RBLs are designed to check the sending
server (usually by IP address). SURBLs look at links embedded in the
messages themselves.
For example, if I include a link
Hi
It's Outlook XP. FreeBSD server runs SpamAssassin-3.0.1, access to the
mailboxes through
qpopper-4.0.5 (POP).
--- Matt Yackley [EMAIL PROTECTED] wrote:
Vadym Chepkov said:
Hi,
I have read ResendingMailWithHeaders document and I couldn't find is there
a plug-in
available for
Vadym Chepkov wrote:
I have read ResendingMailWithHeaders document and I couldn't find is there a
plug-in available for
Outlook so you can provide a feedback to Bayes just by pressing 'Spam' or 'Ham'
buttons? Thank
you.
Nothing I've found yet.
This page comes close:
I keep getting spam with url's of know spammers but i never see the email
tagged or blocked.
i'm running sa 2.63(yeah, i know i gotta upgrade) and i block the mail with a
score of 4 and tag at 3.
spamcop_uri's score is 4 by default and yet nothing gets blocked or even tagged.
here's a sample
From: Irina [EMAIL PROTECTED]
Hello Joanne,
I am not really sure what you meant by
kibitz the SARE process
Sorry, English is not my native language and some words don't go together.
Kibitz is what onlookers do behind the chess player's backs second
guessing their efforts. I think it
Hallo und guten Morgen jdow,
Heute (am 08.06.2005 - 03:42 Uhr)
schriebst Du:
I think it comes from Yiddish.
maybe ;) ... long time ago
kiebitzen = in German = ueber die Schulter schauen - jemand was
abgucken
--
Viele Grüße, Kind regards,
Jim Knuth
[EMAIL PROTECTED]
ICQ #277289867
Steven Dickenson said:
Vadym Chepkov wrote:
I have read ResendingMailWithHeaders document and I couldn't find is there a
plug-in available for
Outlook so you can provide a feedback to Bayes just by pressing 'Spam' or
'Ham'
buttons? Thank
you.
Nothing I've found yet.
This page comes
It wants to query the domain: 212.203.31.2 It does so here:
debug: URIDNSBL: query for 212.203.31.2 took 1 seconds to
look up (sbl.spamhaus.org.:2.31.203.212)
debug: URIDNSBL: queries completed: 1 started: 0
debug: URIDNSBL: queries active: at Tue Jun 7 18:10:32 2005
So, why is
Irina said:
Hi Irina,
Thank you all for answering me.
I found one link that may be very interesting
(http://wiki.apache.org/spamassassin/CustomRulesets)
Next, I thought if there is a place for automatic uploading rules, then may
be notifying me and I would reload SA. That is what I asked
Dallas L. Engelken wrote:
I'm running a more recent snapshot and URI's that are dotted-decimal are
not being reversed and checked properly against uridnsbl lists. For
example, a test on '202.99.223.139'.
You mean they ARE being lookup up, right? Not are not?
Daryl
...
went to this barn on the weekend and was shocked by what goes on inside
http://kwiktera.com/maui/five/oh.html its pretty messed up
I'm running sa with amavis-new
Thanks a lot
Don't even have to check - kwiktera. com - Brazilian porn - name
servers currently in foracyntro34.
I'd be happy to beta that one.. :)
Steven
snip
I've got something like that in the works. :)
Hopefully I can get a beta release put out soon, management has OK'ed us
to release
it as GPL software, so I need to do a little documentation and get my
dev to clean
up a few errors and build a
78 matches
Mail list logo
