MNot that I'm aware of. To my knowledge the URI rule always
Mmatches the full URL. There are several SA and/or SARe rules
Mwhich depend upon this.
M
MOr do you mean something different by URI and URL than I do.
MI generally use the definitions found at
I notice this upgraded itself yesterday, today I notice I am getting the
following error.
The following rules had 404 (not found) errors:
SARE Adult Content Ruleset not found (404) at
http://67.67.32.202/rules/70_sare_adult.cf
SARE HEADER Ruleset 2 for SpamAssassin not found (404) at
From: Stefan Ewert [EMAIL PROTECTED]
On another paw, more memory is generally a good way to speed up the
spamassassin operation. A good DNS setup is also required so that you
do not get delays in DNS lookups. Do not select DNS tests for sites
that no longer exist. That is a major slow
hello,
i failed to locate this in the FAQ or docs.
my setup:
debian 3.1
spamassassin 3.0.4-2
via procmail-spamc
on some mails, the spamd process hangs forever never times out. it
creates a lot of load has to be killed ev. since it is alsways on
certain mail accounts, i suspect it beeing
Ron McKeating wrote:
I notice this upgraded itself yesterday, today I notice I am getting the
following error.
The following rules had 404 (not found) errors:
SARE Adult Content Ruleset not found (404) at
http://67.67.32.202/rules/70_sare_adult.cf
SARE HEADER Ruleset 2 for SpamAssassin not
[EMAIL PROTECTED] wrote:
Nate Kroll wrote:
something in spamassassin or amavis that sets a score lower since
it's from inside our own domain
ALL_TRUSTED
I don't find this variable defined anywhere in my configuration for
amavis or spamassassin. Is there any way to stop
At 08:32 AM 6/14/2005, Nicki de Wet wrote:
I have the following test in local.cf:
body LOCAL_OBFUS_SPAN /SPAN style\=3DDISPLAY: none/i
score LOCAL_OBFUS_SPAN 0.5
That's an HTML tag, you have to use rawbody, not body. body rules are run
after all HTML tags are removed from the message.
...on Tue, Jun 14, 2005 at 01:55:54PM +0200, Gert Brantner wrote:
on some mails, the spamd process hangs forever never times out. it
creates a lot of load has to be killed ev. since it is alsways on
certain mail accounts, i suspect it beeing some malformed mail but i
could not find
The following rules had 404 (not found) errors:
SARE Adult Content Ruleset not found (404) at
http://67.67.32.202/rules/70_sare_adult.cf
SARE HEADER Ruleset 2 for SpamAssassin not found (404) at
http://67.67.32.202/rules/70_sare_header2.cf
Has anybody else seen this or I have we got
At 11:06 AM 6/13/2005, Stefan Ewert wrote:
does anyone know about a option which speeds up spamassassin extremly:
order the tests: fastest first, getting slower , slowest is the last test in
the list (dns perhaps, razor, pyzor, dcc).
and now: stop testing the mail, as soon as spamscore is
Thanks, I also saw it in the docs now. I've changed it, and will see if the
problem persists.
Regards,
Nicki de Wet
- Original Message -
From: Matt Kettler [EMAIL PROTECTED]
To: Nicki de Wet [EMAIL PROTECTED]; users@spamassassin.apache.org
Sent: Tuesday, June 14, 2005 4:12 PM
Subject:
Title: MTA Stats
Is there anything out there to help with log file analysis in a site qmail/qmail-scanner/spamd/multilog environment?
Thanks
Scott
On Tue, Jun 14, 2005 at 02:32:11PM +0200, Nicki de Wet wrote:
body LOCAL_OBFUS_SPAN /SPAN style\=3DDISPLAY: none/i
The email below does not match this rule, although I don't know why. Does SA
stop executing tests after a certain point, or when certain tests are
positive?
Body rules are
Hi all,
running 2 spamd servers and want to share the BAYES DB between
them... so that one never gets too swayed and that both the servers are
contantly synced etc...
anybody currently running an SQL backend off multiple Spamd servers??
and if so care to part with some knowledge???
Ronan,
Care to explain how you've come to set this up? We run an ISP-type
solution w/ two identical qmail-scanner/SA/clamav servers set up for
load-balancing purposes (network edge device decides which server to use
at all times). We'd like to consolidate bayes db, auto-whitelist
settings, and
running 2 spamd servers and want to share the BAYES DB between
them... so that one never gets too swayed and that both the servers are
contantly synced etc...
anybody currently running an SQL backend off multiple Spamd servers??
and if so care to part with some knowledge???
SpamAssassin
Cami wrote:
running 2 spamd servers and want to share the BAYES DB between
them... so that one never gets too swayed and that both the servers
are contantly synced etc...
anybody currently running an SQL backend off multiple Spamd servers??
and if so care to part with some knowledge???
Cami wrote:
running 2 spamd servers and want to share the BAYES DB between
them... so that one never gets too swayed and that both the servers
are contantly synced etc...
anybody currently running an SQL backend off multiple Spamd servers??
and if so care to part with some knowledge???
[EMAIL PROTECTED] wrote:
Cami wrote:
running 2 spamd servers and want to share the BAYES DB between
them... so that one never gets too swayed and that both the servers
are contantly synced etc...
anybody currently running an SQL backend off multiple Spamd servers??
and if so care to part
Matthew Yette wrote:
Care to explain how you've come to set this up? We run an ISP-type
solution w/ two identical qmail-scanner/SA/clamav servers set up for
load-balancing purposes (network edge device decides which server to use
at all times). We'd like to consolidate bayes db, auto-whitelist
Great stuff. Thank you Michael, I'll let you know how it goes.
--
Matthew Yette
Senior Engineer - NOC/Operations
MA Polce Consulting, Inc.
[EMAIL PROTECTED]
315-838-1644 (w)
315-356-0597 (f)
AIM/Yahoo: MAPolceNOC
MSN: [EMAIL PROTECTED]
-Original Message-
From: Michael Parker
Ronan McGlue wrote:
Hi all,
running 2 spamd servers and want to share the BAYES DB between them...
so that one never gets too swayed and that both the servers are
contantly synced etc...
anybody currently running an SQL backend off multiple Spamd servers??
and if so care to part with some
Hi All,
It's 5 SA actually :-D - and I've not noted any problems that didn't
come down to slight differences in config between SA servers, once
standardised they run much the same.
The single MySQL is working well, my only concern being that I still
haven't managed to eliminate a potential
I would think this would just involve modifying the db connection
functions inside the SA code to verify the primary connection is
established, and if not , roll onto a second (backup) server.
--
Matthew Yette
Senior Engineer - NOC/Operations
MA Polce Consulting, Inc.
[EMAIL PROTECTED]
Matthew Yette wrote:
I would think this would just involve modifying the db connection
functions inside the SA code to verify the primary connection is
established, and if not , roll onto a second (backup) server.
There are several perl DBD:: modules that can help facilitate
Yep - been after that for a while. To date I've found nothing within
my capabilities that can do it; to be fair I've not seen anything bar
MySQL server farms that will do it - and the memory requirements for
that exclude it from realistic options.
Which seems to leave the answer, as you suggest,
Take a look. I think this is the highest I've seen in a
while. Fraud is a terrible thing.
The message has been quarantined as:
spam-bJacn2m5vocT.gz
SpamAssassin report:
Spam detection software, running on the system
rodan.vipstructures.com, has identified this incoming
email as possible
Take a look. I think this is the highest I've seen in a
while. Fraud is a terrible thing.
Then when you realize that 214 points are due to SARE forged ebay rules,
it's not quite as impressive.
Bret
The message has been quarantined as:
spam-bJacn2m5vocT.gz
SpamAssassin report:
Spam
Not sure what I'm doing wrong, but noone has responded to my question -
If Bayes is working properly, am I supposed to have a Bayes_ entry in the
X-Spam_Status header info for every email? I think that's the way it used
to be - Bayes_00 - Bayes_99 etc. Lately it seems that only the spam emails
Subject: RE: Whoa! 258.0 points score
Take a look. I think this is the highest I've seen in a
while. Fraud
is a terrible thing.
Then when you realize that 214 points are due to SARE
forged
ebay rules, it's not quite as impressive.
Bret
You can call me easily amused, as I
Toll, Eric wrote:
You can call me easily amused, as I haven't seen these rules
kick in before. Ok so 44 points isn't impressive when your
kill is at 7.1 ?
Let's see some of _your_ high point hall-of-famers then,
after all caring means sharing :)
I'm on a semi-conservative scoring
Bret Miller wrote:
Take a look. I think this is the highest I've seen in a
while. Fraud is a terrible thing.
Then when you realize that 214 points are due to SARE forged ebay rules,
it's not quite as impressive.
Agreed. The SARE forged rules intentionally have absurdly high scores to
John Fleming wrote:
Not sure what I'm doing wrong, but noone has responded to my question -
If Bayes is working properly, am I supposed to have a Bayes_ entry in the
X-Spam_Status header info for every email?
In 3.x, I think you should, but I can't speak with any authority here.
In 2.6x,
martin smith wrote:
For those thinking of upgrading who have patched earlier versions of 3.0.
you will need to do it again after upgrading.
I was disappointed to see the fix for the above bug was not included in
3.0.4, just had to apply the fix again to get the surbl to work with caps in
Ugo Bellavance wrote:
Hi,
I want to interact with this list via nntp (gmane),
but since this list is member-only, I must subscribe to
post. I didn't find the way to set the option not to
receive messages from the list.
A hint?
Thanks,
Ugo
I'm curious ... How will you read the
Martin G. Diehl wrote:
I'm curious ... How will you read the replies to your messages?
Most people who nomail lists use one of the web archives as their primary
means of accessing messages. Works quite well.
- Original Message -
From: Matt Kettler [EMAIL PROTECTED]
To: John Fleming [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Sent: Tuesday, June 14, 2005 2:48 PM
Subject: Re: Bayes?
John Fleming wrote:
Not sure what I'm doing wrong, but noone has responded to my question -
If
- Original Message -
From: Matt Kettler [EMAIL PROTECTED]
To: John Fleming [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Sent: Tuesday, June 14, 2005 2:48 PM
Subject: Re: Bayes?
John Fleming wrote:
Not sure what I'm doing wrong, but noone has responded to my question -
If
Ron
maybe a conf issue - from memory I don't the ip-address, just the DNS
name in the URL when I get a problem...but memory isn't always a good
thing rely on :-)
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Ron McKeating wrote:
I notice this
Martin G. Diehl mailto:[EMAIL PROTECTED] wrote:
Ugo Bellavance wrote:
Hi,
I want to interact with this list via nntp (gmane), but since
this
list is member-only, I must subscribe to post. I didn't find the way
to set the option not to
receive messages from the list.
A hint?
Jonathan Nichols wrote:
I have POP/IMAP/SMTP on a seperate box from the spamassassin/amavis
box, and I'm trying to come up with a script to take stuff out of the
shared-maildir where users deposit spam that slipped through, tar it
up, and move it to the other box, where yet another script
Hi,
for i in `ls /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur`; do
sudo rm /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur/$i; done
Although imapsalearn is easier.
Regards,
Rick
I should get an extra shot of espresso when I hit up the coffee shop in
the morning. That worked
Jonathan Nichols wrote:
I should get an extra shot of espresso when I hit up the coffee shop
in the morning. That worked fine. thanks :D
but, what is this imapsalearn you speak of? Google tells me Your
search - imapsalearn - did not match any documents.
:(
Hi,
Glad it worked. I
Jonathan Nichols wrote:
Hi,
for i in `ls /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur`; do
sudo rm /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur/$i; done
Although imapsalearn is easier.
Regards,
Rick
I should get an extra shot of espresso when I hit up the coffee shop in
Matt Kettler wrote:
Jonathan Nichols wrote:
Hi,
for i in `ls /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur`; do
sudo rm /home/vmail/shared-maildirs/Spamdrop/.Incoming/cur/$i; done
Although imapsalearn is easier.
Regards,
Rick
I should get an extra shot of espresso when I
Thanks Sean. That was exactly the help I needed. When I changed
FORGED_RCVD_HELO from a zero score, the forgery is detected.
Based on the default weighting, should I assume that FORGED_RCVD_HELO is not
a reliable spam indicator?
-Jim
On Mon, 13 Jun 2005 16:48:28 -0700, Sean Sowell
Jim Schueler wrote:
Thanks Sean. That was exactly the help I needed. When I changed
FORGED_RCVD_HELO from a zero score, the forgery is detected.
Based on the default weighting, should I assume that FORGED_RCVD_HELO is not
a reliable spam indicator?
-Jim
Some clips from
This is the trick for drawing from imap via a script directly for salearn
purposes. It might be slower than my way but it's more kosher.
{^_^}
- Original Message -
From: Rick Macdougall [EMAIL PROTECTED]
Jonathan Nichols wrote:
I should get an extra shot of espresso when I hit
On Tue, Jun 14, 2005 at 07:39:59PM -0400, Jim Schueler wrote:
Based on the default weighting, should I assume that FORGED_RCVD_HELO is not
a reliable spam indicator?
According to the statistics files (see STATISTICS* in the tarball rules
dir), it's more a reliable ham indicator, but generally
Bleah - meant to forward it and sent it to the list. Me sorry.
{o.o}
- Original Message -
From: jdow [EMAIL PROTECTED]
To: users@spamassassin.apache.org
Sent: 2005 June, 14, Tuesday 17:21
Subject: imapsalearn for SpamAssassin
This is the trick for drawing from imap via a script
Hello martin,
Monday, June 13, 2005, 11:37:03 PM, you wrote:
ms Thanks for the reply Bob, it's a rule of my own, and yes I was using the
ms same definition of URL and URI, I just didn't notice any FP when I first
ms wrote it but wasn't sure if the uri rule behaviour had changed, since its
ms not
Hi,
I flunked the IQ test so I need some help. I want to match all domains
in the body that are not in .com,.org.us,.edu,.gov and .mil. But there's
more. I need to match some characters at the end of the URI that can
often be found there such as .?)*!';
The rule would match http://www.go.za
52 matches
Mail list logo
