Re: Procmail for site wide usage

2005-07-22 Thread jdow
There generally is no specific procmail log file. It is generally in one of the mail log files in /var/log/wherever. {^_^} - Original Message - From: Thomas Arend [EMAIL PROTECTED]

Re: Procmail for site wide usage

2005-07-22 Thread jdow
You are developing a severe stutter. {o.o} - Original Message - From: Thomas Arend [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: 2005 July, 21, Thursday 20:40 Subject: Re: Procmail for site wide usage

Re: URIDNSBL and subdomains

2005-07-22 Thread Charles Sprickman
On Thu, 21 Jul 2005, Loren Wilton wrote: Sounds like an surbl problem if spamsite.com isn't listed. That's just an example I made up... :) The leading subdomains are supposed to be trimmed off, since they are usually identifying strings for a given spam target rather than an actual part of

Re: Procmail for site wide usage

2005-07-22 Thread jdow
Never mind - Earthlink had an email stick in its craw or else Fetchmail did not like it at all. {^_^} - Original Message - From: jdow [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: 2005 July, 21, Thursday 23:16 Subject: Re: Procmail for site wide usage You are developing a

Re: URIDNSBL and subdomains

2005-07-22 Thread Loren Wilton
OK, so that's supposed to happen. Is there any way to have the entire host checked? I've seen a good volume of junk where the domain is clean, but if I do a manual lookup on the entire hostname in the spam it is indeed listed. I *suspect* what is happening here is that the domain isn't in

Re: Procmail for site wide usage

2005-07-22 Thread Thomas Arend
Am Freitag, 22. Juli 2005 08:15 schrieb jdow: There generally is no specific procmail log file. It is generally in one of the mail log files in /var/log/wherever. Yes. But you can create user user specific lof file with LOGFILE=$HOME/.procmail.log Thomas -- icq:133073900

Bayes poisoning ?

2005-07-22 Thread Ramprasad A Padmanabhan
Hi We are using Spamassassin + Postfix + Mailscanner on our SMTP servers. Of late I have noticed that a lot of ham mails are getting a high BAYES score. I have overriden bayes with lower scores in order to avoid false postives ( and possibly mail loss ) How do I de-poison the bayes database,

Re: Bayes poisoning ?

2005-07-22 Thread Loren Wilton
The best thing to do is probably throw the current database away and start over. As you seem to have several users, you should have bayes working again within a very few hours, or less. You should delete the current database, reset the scores to normal (and increase the bayes_99 score to

Re: URIDNSBL and subdomains

2005-07-22 Thread List Mail User
... On Thu, 21 Jul 2005, Loren Wilton wrote: Sounds like an surbl problem if spamsite.com isn't listed. That's just an example I made up... :) ... Bad choice of example: spamsite. com is an actual spamsite. The domain example.com is reserved for exactly this type of usage and should

Detecting ISO Encoded Subjects

2005-07-22 Thread Joseph D. Wagner
A lot of my spam lately has had an ISO encoded subject line, like: =?iso-8859-1?B?T2ZmaWNlIHNvZnR3YXJlIC0gNzUlIE9GRg==?= Since none of my friends ever use ISO encoded subject lines, I wanted to create a rule to flags those messages. However, everything I've found indicates that Spamassassin

Re: Detecting ISO Encoded Subjects

2005-07-22 Thread Duane Hill
On Friday, July 22, 2005 at 12:32:34 PM, [EMAIL PROTECTED] confabulated: A lot of my spam lately has had an ISO encoded subject line, like: =?iso-8859-1?B?T2ZmaWNlIHNvZnR3YXJlIC0gNzUlIE9GRg==?= Since none of my friends ever use ISO encoded subject lines, I wanted to create a rule to flags

Re: Procmail for site wide usage

2005-07-22 Thread Chris Barnes
Mark Williams [EMAIL PROTECTED] wrote: (Q) Given that this RH machine runs only POP3 (management will not allow anything else) This is really the key - from a SA standpoint, the best you can do is mark the message as spam and let the MUA (Outlook) deal with putting things into the proper

behavior with amavisd-new-20030616-p10

2005-07-22 Thread Jonathan Gonzalez
Hi, i would like to know if there's some special feature that needs to be enabled/disabled in order to work 100% compliant with amavis. I'm my actual installation (Exim 4.50 + amavisd-new-20030616-p10 + ClamAV 0.86 + SpamAssassin 3.0 on a Debian Sarge platform) the MTA passes the email to

Re: behavior with amavisd-new-20030616-p10

2005-07-22 Thread Matt Kettler
Jonathan Gonzalez wrote: Hi, i would like to know if there's some special feature that needs to be enabled/disabled in order to work 100% compliant with amavis. I'm my actual installation (Exim 4.50 + amavisd-new-20030616-p10 + ClamAV 0.86 + SpamAssassin 3.0 on a Debian Sarge platform)

Re: behavior with amavisd-new-20030616-p10

2005-07-22 Thread Matt Kettler
Matt Kettler wrote: Amavis does it's own message tagging, and does not keep SA's markups. It consults spamassassin merely as a scanner. I'm not an amavis expert, so I can't tell you how, but I can tell you that it's amavis you need to reconfigure if you want these added, as only amavis

Re: behavior with amavisd-new-20030616-p10 - SOLVED!

2005-07-22 Thread Jonathan Gonzalez
:-) Funny! I have been reading, quite quick :) and have found the error. Was a error of mine. I didn't populate a variable with my domains, because such variable indicates amavis to put or not put the X headers. The variable is @local_domains_acl = qw( .example.com .example2.com ); Once

Re: Procmail for site wide usage

2005-07-22 Thread Kelson
Chris Barnes wrote: This is really the key - from a SA standpoint, the best you can do is mark the message as spam and let the MUA (Outlook) deal with putting things into the proper folders on the user's machine (in the .pst file). I don't know OL well enough, but I suspect that there is

Verify using SARE updates

2005-07-22 Thread Curtis Vaughan
I used an update script from SARE (www.rulesemporium.com) and subscribed to the following lists: TRIPWIRE, EVILNUMBERS, SARE_RANDOM, SARE_FRAUD, SARE_ADULT, ANTIDRUG Now the update seems to work just fine. And I find the rules in /etc/ spamassassin. But how can be sure they are working? I

www.rulesemporium.com unreachable

2005-07-22 Thread wolfgang
Hi, http connections to www.rulesemporium.com are timing out here. Maybe someone in charge is reading this and can fix it ... regards, wolfgang

Re: www.rulesemporium.com unreachable

2005-07-22 Thread Ed Kasky
At 12:58 PM Friday, 7/22/2005, wolfgang wrote -= Hi, http connections to www.rulesemporium.com are timing out here. Maybe someone in charge is reading this and can fix it ... This seems to happen once in a a while... I wonder if it's ISP related? Ed Kasky ~ Randomly Generated Quote

Re: www.rulesemporium.com unreachable

2005-07-22 Thread Chris Thielen
wolfgang wrote: Hi, http connections to www.rulesemporium.com are timing out here. Maybe someone in charge is reading this and can fix it ... regards, wolfgang There seems to be an issue with the filesystem on that box. Email sent to the appropriate people, but it looks like a