jdow wrote:
> > 2.2. Header Fields
> > Header fields are lines composed of a field name, followed by a
> > colon (":"), followed by a field body, and terminated by CRLF.
> > A field name MUST be composed of printable US-ASCII characters
> > (i.e., characters that have values between 33 and 126,
>
Hi Ralph,
now if most software is sending a message with 0 or 1 whitespace after the
colon,
it might be an idea to consider 2 or more whitespaces there as an indicator of
an unusual
mail program.
Now if it could be confirmed that certain often used mailers always trim the
subject
specified by t
From: "Ralph Seichter" <[EMAIL PROTECTED]>
> jdow wrote:
>
> > > 2.2. Header Fields
> > > Header fields are lines composed of a field name, followed by a
> > > colon (":"), followed by a field body, and terminated by CRLF.
> > > A field name MUST be composed of printable US-ASCII characters
>
So this should tell something. I'm not sure what.
{^_-}
- Original Message -
From: <[EMAIL PROTECTED]>
> Hi Ralph,
>
> now if most software is sending a message with 0 or 1 whitespace after the
colon,
> it might be an idea to consider 2 or more whitespaces there as an
indicator of an unus
Tells me that dovecot normalizes headers to include exactly one space.
(I did a little more testing with zero spaces squeezed through procmail
to my mail folder. It came through that just fine. But it lost the
customized spacing in dovecot.)
{^_^}
- Original Message -
From: "jdow" <[EMAIL
Dear All
I am newbie in spamassassin. I want to block the email based
on custom rules like for matching “Viagra, Penis Enlarment” etc.
Can any body help me in its deployment? As I tried with the following setting
but it did not score 4.0 for that email
header USER_TEST_SUBJECT
At 07:45 AM 8/6/2005, Muhammad Farooq Bhatti wrote:
Dear
All
I am newbie in spamassassin. I want to block the email based on custom
rules like for matching Viagra, Penis Enlarment etc. Can any body help
me in its deployment? As I tried with the following setting but it did
not score 4.0 for t
Muhammad Farooq Bhatti skrev:
> Dear All
>
> I am newbie in spamassassin. I want to block the email based on custom
> rules like for matching “Viagra, Penis Enlarment” etc. Can any body help
> me in its deployment? As I tried with the following setting but it did
> not score 4.0 for that email
>
First of all, rules for things like what you've mentioned already exist.
You may add some extra rules to fortify against such things by
including some rule sets from http://www.rulesemporium.com (go to
their rules page) and you want to at least take
70_sare_adult.cf
The rule you wrote seems OK t
jdow wrote:
> zero or more spaces are ignored with the first real character
> being "!" through "~". For the rest of the message the space
> character is allowed.
I can't see this defined in the RFC (or is it?), but it seems to be
the approach of many programmers.
Postfix and Cyrus IMAP leave e
I run a crojob every six hours to shutdown and restart spamassassin. The below
has appeared twice in the past week, on the fourth and this morning. What I
see as odd is that SA is apparently still running as spam is still being
tagged. Is it possible that on a previous shutdown command that al
I have seen this before as well. I think that it assumes that the
process is dead after it tries to kill and but in reality it's not
because it's still processing an email. I put a sleep 10 in right after
the $RETVAL=$? in the SA init script.
I think the reason is that the init script tries to d
Chris wrote:
I run a crojob every six hours to shutdown and restart spamassassin. The below
has appeared twice in the past week, on the fourth and this morning. What I
see as odd is that SA is apparently still running as spam is still being
tagged. Is it possible that on a previous shutdown c
On Sat, Aug 06, 2005 at 09:42:48AM -0500, Chris wrote:
> I run a crojob every six hours to shutdown and restart spamassassin. The
> below
> has appeared twice in the past week, on the fourth and this morning. What I
> see as odd is that SA is apparently still running as spam is still being
> t
Yea...here is an example. They are getting through here to and I have
everything turned on except dcc and razor. Here is an example. Hopefully
they will use up all their spam IPs and start getting blocked by RBLs. These
type break-throughs usually don't last too long.
-start-
It looks like that rule hit. However, the score for
that rule was likely offset by the BAYES_00 hit which has a negative score. The
same may be true for the AWL hit. Try setting the score for your custom rule
higher. Also try training bayes to better recognize your SPAM. See the
Spamassasin
Hello Muhammad,
Saturday, August 6, 2005, 4:45:14 AM, you wrote:
MFB> I am newbie in spamassassin. I want to block the email
MFB> basedon custom rules like for matching Viagra, Penis Enlarment
MFB> etc.Can any body help me in its deployment? As I tried with the
MFB> following settingbut it did
Odd, I sent out the below about 6hrs ago and it has yet to hit the list, so
I'll try again.
-- Forwarded Message --
I run a crojob every six hours to shutdown and restart spamassassin. The
below has appeared twice in the past week, on the fourth and this morning.
What I see
On Saturday 06 August 2005 03:32 pm, you wrote:
> Hi Chris,
>
> On Sat, Aug 06, 2005 at 03:26:38PM -0500, Chris wrote:
> > Odd, I sent out the below about 6hrs ago and it has yet to hit the list,
> > so I'll try again.
>
> I saw it and replied to it. If you don't see this resend on the list,
> you
On Saturday 06 August 2005 10:13 am, Bob McClure Jr wrote:
> > Shutting down spamd: [ OK ]
> > Starting spamd: Could not create INET socket on 127.0.0.1:783: Address
> > already in use (IO::Socket::INET: Address already in use) [FAILED]
> >
> > --
--On Saturday, August 06, 2005 3:23 AM -0700 jdow <[EMAIL PROTECTED]>
wrote:
Tells me that dovecot normalizes headers to include exactly one space.
(I did a little more testing with zero spaces squeezed through procmail
to my mail folder. It came through that just fine. But it lost the
customiz
On Sat, Aug 06, 2005 at 04:24:55PM -0500, Chris wrote:
> On Saturday 06 August 2005 10:13 am, Bob McClure Jr wrote:
>
> > > Shutting down spamd: [ OK ]
> > > Starting spamd: Could not create INET socket on 127.0.0.1:783: Address
> > > already in use (IO::Socket::INET: Address already in use) [F
From: "Chris" <[EMAIL PROTECTED]>
> > Shutting down spamd: [ OK ]
> > Starting spamd: Could not create INET socket on 127.0.0.1:783: Address
> > already in use (IO::Socket::INET: Address already in use) [FAILED]
> >
> > ---
>
> Here's some an
From: "Kenneth Porter" <[EMAIL PROTECTED]>
> --On Saturday, August 06, 2005 3:23 AM -0700 jdow <[EMAIL PROTECTED]>
> wrote:
>
> > Tells me that dovecot normalizes headers to include exactly one space.
> > (I did a little more testing with zero spaces squeezed through procmail
> > to my mail folder
Thanks Matt, looks like there's a few to choose from - I'll put aside
some time to check them out.
- steve
-Original Message-
From: Matt Linzbach [mailto:[EMAIL PROTECTED]
Sent: Saturday, 6 August 2005 1:28 a.m.
To:
Subject: RE: sa-stats.pl generates a zero report
> -Original Mes
On Saturday 06 August 2005 06:16 pm, jdow wrote:
> into my cronjob folder. I thought I'd try the 'reload' instead of
> 'restart' however, however it seems like 'reload' is not an option:
>
> << jdow: edit /etc/init.d/spamassassin and make it an option. For FC4 this
> works when placed between the
Has anyone sucessfully implemented SPF scoring? I have it working with 3.0.4,
but everything is a "trusted relay" -- From debug:
debug: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xa26763c))
debug: SPF: message was delivered entirely via tru
It works for me. If the message only went through relays listed in
"internal_networks" and "trusted_networks" per your configuration, it
won't do the tests since you have explicitly told it that those
relays are trusted.
You should be seeing "ALL_TRUSTED" as one of the rules that fired on
On Sat, Aug 06, 2005 at 09:39:24PM -0500, Steve Martin wrote:
> It works for me. If the message only went through relays listed in
> "internal_networks" and "trusted_networks" per your configuration, it
> won't do the tests since you have explicitly told it that those
> relays are trusted.
From: "Chris" <[EMAIL PROTECTED]>
On Saturday 06 August 2005 06:16 pm, jdow wrote:
> into my cronjob folder. I thought I'd try the 'reload' instead of
> 'restart' however, however it seems like 'reload' is not an option:
>
> << jdow: edit /etc/init.d/spamassassin and make it an option. For FC4 t
From: "Clay Irving" <[EMAIL PROTECTED]>
> On Sat, Aug 06, 2005 at 09:39:24PM -0500, Steve Martin wrote:
>
> > It works for me. If the message only went through relays listed in
> > "internal_networks" and "trusted_networks" per your configuration, it
> > won't do the tests since you have exp
31 matches
Mail list logo
