Re: X-Spam headers placement issue

"jdow" <[EMAIL PROTECTED]> writes: > Don't bother to try to report spam with that header placement if you > expect outfits that use DCC to respond. Placing the headers at the > bottom that way will screw up the DCC hash they can use to identify > the message details as "truth". But does spamassas

Re: Learning at an MTA

* mouss <[EMAIL PROTECTED]> [2005-12-06 14:32]: > Alan Gutierrez a écrit : > >Am I correct in assuming that the user puts mail in the "Ham" folder > >only if it has been incorrectly marked as "Spam"? Then I suppose > >you're running auto-learn maybe, and the "Ham" folder corrects? > > I use 4 IMA

Re: OKAY I'am the black man !!!

From: "saurabh.bhasin" <[EMAIL PROTECTED]> Alan Gutierrez wrote: * Duncan Findlay <[EMAIL PROTECTED]> [2005-12-06 02:27]: On Mon, Dec 05, 2005 at 01:20:28PM +0100, Christian Eichert wrote: Duncan Findlay wrote: I guess the moral of the story is don't use national cultural references on

Re: seeing a few new spams with low SA scoring

From: "Loren Wilton" <[EMAIL PROTECTED]> so SA does not trap it, should i be looking at a procmail rule to dump the emails. Not a bad idea. If for some reason you really want to keep them around but detect them, sare_specific or one of the similar files should catch these. I forget what I d

Re: ISP relay /whitelist question

Send the email through Prodigy's smarthost according to Prodigy's rules. The log line quoted indicates a rejection of a dialup ID without proper authentication. Most properly setup email systems prohibit the relaying. Note that what you see there is not a SpamAssassin issue. Expertise may exist h

Re: X-Spam headers placement issue

From: "SickBoy" <[EMAIL PROTECTED]> I believe the answer is to change this line in PerMsgStatus.pm: $new_hdrs_pre .= "X-Spam-$header: $line\n"; to $new_hdrs_post .= "X-Spam-$header: $line\n"; I haven't tested it or anything, just reading the code. Well Theo, thank God there are peop

Re: OKAY I'am the black man !!!

Alan Gutierrez wrote: > * Duncan Findlay <[EMAIL PROTECTED]> [2005-12-06 02:27]: > >>On Mon, Dec 05, 2005 at 01:20:28PM +0100, Christian Eichert wrote: >> >>>Duncan Findlay wrote: > > >>I guess the moral of the story is don't use national cultural >>references on international mailing lists. ;-)

Re: OKAY I'am the black man !!!

* Duncan Findlay <[EMAIL PROTECTED]> [2005-12-06 02:27]: > On Mon, Dec 05, 2005 at 01:20:28PM +0100, Christian Eichert wrote: > > Duncan Findlay wrote: > I guess the moral of the story is don't use national cultural > references on international mailing lists. ;-) What a dreadfully boring communi

Re: seeing a few new spams with low SA scoring

> so SA does not trap it, should i be looking at a procmail rule to dump the > emails. Not a bad idea. If for some reason you really want to keep them around but detect them, sare_specific or one of the similar files should catch these. Loren

Re: ISP relay /whitelist question

At 09:06 PM 12/6/2005, Jean-Paul Natola wrote: I have a user in Mexico that uses prodigy broadband, she claims that if she tries to send email with her outlook using our SMTP they wont let her, I she tried using their SMTP but then I get this in the log 2005-12-05 13:48:59 H=dsl-201-128-150-

SpamAssassin 3.0.5 RELEASED

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (NOTE: this is a maintainance release of the 3.0.x branch. If you are already running the more up-to-date, stable 3.1.0, pay no attention! This is only for people who are stuck on 3.0.x for some reason.) We got enough votes for those tarballs we vot

ISP relay /whitelist question

I have a user in Mexico that uses prodigy broadband, she claims that if she tries to send email with her outlook using our SMTP they wont let her, I she tried using their SMTP but then I get this in the log 2005-12-05 13:48:59 H=dsl-201-128-150-16.prod-infinitum.com.mx (acerL1) [201.128.150.16

Re: X-Spam headers placement issue

> I believe the answer is to change this line in PerMsgStatus.pm: > > $new_hdrs_pre .= "X-Spam-$header: $line\n"; > > to > > $new_hdrs_post .= "X-Spam-$header: $line\n"; > > I haven't tested it or anything, just reading the code. Well Theo, thank God there are people like you around. ;) T

Re: Load issue

I think I figured it out already. Another helpful user explained that spamc passes the info to spamd. So it would stand to reason that if I have 10 spamd children (each sucking resources) then spamc is going to accept more mail, and queue more mail and suck mor resources as you mention. I lowere

Re: Load issue

[EMAIL PROTECTED] wrote: So a few times a day I end up having to stop my sendmail on my linux mail server. Here is the back story. I was running 2.64, with procmail and recently upgraded to 3.1. I started the 3.1 with /usr/bin/spamd -d -c -m10 Which works great, but I think the old spamassass

Re: OKAY I'am the black man !!!

Am Dienstag, 6. Dezember 2005 20:27 schrieb Chris Santerre: > --Chris (A lazy american wondering when the heck the second advent > is? ) last sunday. advent: the four last sundays before christmas eve. so, coming sunday will be 3rd advent. bye, MH -- gpg key fingerprint: 5F64 4C92 9B7

Re: URIBL False positive

Brian Leyton wrote: > I'm relatively new to SpamAssassin, but I've managed to get it working well > in conjunction with MimeDefang. I'm having a strange problem though, which > I hope someone can help me figure out. > > I'm on a hobby mailing list, and occasionally emails to this list are being >

URIBL False positive

I'm relatively new to SpamAssassin, but I've managed to get it working well in conjunction with MimeDefang. I'm having a strange problem though, which I hope someone can help me figure out. I'm on a hobby mailing list, and occasionally emails to this list are being tagged as spam by SpamAssassin,

RE: submit to spamcop

>>> "Jean-Paul Natola" <[EMAIL PROTECTED]> 12/6/2005 10:01 AM >>> > I would like to report the IP this one came from BUT , I would like to make > sure its not some innocent person, that was used as a relay vicitm You mean some poor "innocent person", who has not kept their PC up to date, hasn'

Re: Learning at an MTA

Alan Gutierrez a écrit : Yes, it helps. I'm fortunate in that the Domino mangement will be performed by someone who's particularly good at Notes development. I need to get a fix on what Domino can do, and that's why I ask. Apparently, there's already a "Spam" box on these Domino clients and a m

RE: OKAY I'am the black man !!!

> > it is the opposit to the krisskind, hwo visits good children, > he wisits the bad children on the scond advent, and hits them ... Who's got the email addy for DCYF? :) Well I just learned something today! --Chris (A lazy american wondering when the heck the second advent is? )

Re: X-Spam headers placement issue

On Tue, Dec 06, 2005 at 08:08:54PM +0100, SickBoy wrote: > Well, I've searched thru archives before posting (vide > http://www.nabble.com/SA-Headers-Moved-t365404.html#a1011617 as a decent > example), and still my question HOW to do it remains unanswered. What you're looking for is a patch, which

Re: X-Spam headers placement issue

> I don't want to be one of those jerks who tells you to read the list > archives for an answer, but I know this subject has been raised several > times since the release of 3.1.0. Well, I've searched thru archives before posting (vide http://www.nabble.com/SA-Headers-Moved-t365404.html#a1011617

Re: X-Spam headers placement issue

When mail is processed by SA ( spamc/spamd from procmail in this example), it adds all the X-Spam headers at the beginning of the mail (prepend). I don't want to be one of those jerks who tells you to read the list archives for an answer, but I know this subject has been raised several times s

X-Spam headers placement issue

Hi there. After installing the brand new SA 3.1.0 I've spotted one small thing. When mail is processed by SA ( spamc/spamd from procmail in this example), it adds all the X-Spam headers at the beginning of the mail (prepend). I've submitted a bug [ http://issues.apache.org/SpamAssassin/show_bug.

RE: New spam/phising

I was going to update a while ago but I think qmail-scanner would have broken or something, I'll have to look into it again. Thanks again Jason -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 06, 2005 11:53 AM To: Jason Staudenmayer Cc: users@spam

RE: seeing a few new spams with low SA scoring

From: Obantec Support [mailto:[EMAIL PROTECTED] > > ok so its a virus on some else's PC but i see quite a few incoming > in the last week. my AV dropped the attached zip. > > so SA does not trap it, should i be looking at a procmail rule to > dump the emails. SA does not intentionally try to cat

Re: seeing a few new spams with low SA scoring

On Tue, Dec 06, 2005 at 05:27:07PM -, Obantec Support wrote: > ok so its a virus on some else's PC but i see quite a few incoming in the > last week. my AV dropped the attached zip. I call my anti-virus (ClamAV via clamassassin, BTW) from /etc/procmailrc. If it says it's a virus, it goes stra

Load issue

So a few times a day I end up having to stop my sendmail on my linux mail server. Here is the back story. I was running 2.64, with procmail and recently upgraded to 3.1. I started the 3.1 with /usr/bin/spamd -d -c -m10 Which works great, but I think the old spamassassin is still running because

Re: seeing a few new spams with low SA scoring

ok so its a virus on some else's PC but i see quite a few incoming in the last week. my AV dropped the attached zip. so SA does not trap it, should i be looking at a procmail rule to dump the emails. - Original Message - From: "Bowie Bailey" <[EMAIL PROTECTED]> To: Sent: Tuesday, Decemb

RE: seeing a few new spams with low SA scoring

From: Obantec Support [mailto:[EMAIL PROTECTED] > [ Example Spam (trimmed to the basics) ] > > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: You visit illegal websites > > Dear Sir/Madam, > > we have logged your IP-address on more than 30 illegal Websites. > > Important: > Plea

RE: seeing a few new spams with low SA scoring

Obantec Support wrote: > SA3.0.0 lowest seen 1.5 > (virus snipped) That's not spam, it's a virus... -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

Re: Problems with the Spamd Daemon

What I'm triyng to do is to monitor the Spamd port with telnet (Ipmonitor is the software that we are using and it's ip is 200.189.68.194. I didn't read the entire spamd man page =-P Thanks Jeff [EMAIL PROTECTED] wrote: Jeferson Pessoa Santana wrote: Hy Matthew, I tried to start the d

RE: Problems with the Spamd Daemon

> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >... > Because -i is ignored, as it has no interface IP... Actually, the documentation says: -i [*ipaddress*], --listen-ip[=*ipaddress*], --ip-address[=*ipaddress*] Tells spamd to listen on the specified IP address (defaults to

Re: New spam/phising

Alternative explanaation: bugs in the particular variant of sober caused it to generate a message without the attachment. Broken and missing attachments are both fairly common bugs in mailworms. Sidenote: if you're using SA 2.63 you are vulnerable to a remotely exploitable DoS attack. Upgrade to

RE: New spam/phising

Huh, I guess some AV is stripping the attachment or they are using a site to distribute. Thanks Jason -Original Message- From: Loren Wilton [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 06, 2005 10:31 AM To: users@spamassassin.apache.org Subject: Re: New spam/phising Haven't see t

RE: Problems with the Spamd Daemon

Jeferson Pessoa Santana wrote: > Hy Matthew, > > I tried to start the daemon in the way that you said in your e-mail > but the result are the same. For some reason, the daemon goes back to > the command line /usr/bin/spamd -d -u nobody. > > Thanks anyway for all the help provided by you and the e

RE: Problems with the Spamd Daemon

Jeferson Pessoa Santana wrote: > Hy Matthew, > > I tried to start the daemon in the way that you said in your e-mail > but the result are the same. For some reason, the daemon goes back to > the command line /usr/bin/spamd -d -u nobody. > > Thanks anyway for all the help provided by you and the e

Re: New spam/phising

Haven't see those like that. But that subject line is a standard header for the recent run of Sober viruses. So I assume that is probably a virus. Loren

Re: Some Perl Modules Not Loading

On Mon, Dec 05, 2005 at 03:44:26PM +, Pete typed : > Hello all, > > If I can just say first of all that I have SpamAssassin working on my system > and I'm very happy with it. However, I am curious as to why I can't get > every optional module installed as well. I probably don't need them all,

New spam/phising

I'm starting to see a lot of bluebottle email come through. They are scoring either right under my limit or really low. Anyone else see this? SpamAssassin version 2.63 RH 8 Qmail + qmail-scanner Here's the header: Microsoft Mail Internet Headers Version 2.0 Received: from mail2.adventureaquarium.

RE: submit to spamcop

I received another one of those HTML messages about stock quotes Here's the scoring Content analysis details: (4.6 points, 5.0 required) pts rule name description -- -- 0.6 NO_REAL_NA

Re: submit to spamcop

Jean-Paul Natola wrote: How does one, if possible, submit a domain/IP address to spamcop? Did you try this page ? http://www.spamcop.net/fom-serve/cache/125.html -- François Conil Administrateur Systèmes et Réseaux Oh man... my mom just asked me to rewind the dvd for her

RE: submit to spamcop

Jean-Paul Natola said on 06 December 2005 14:36: > How does one, if possible, submit a domain/IP address to spamcop? Spamcop lists Ips - SURBL lists URIs You can sign up for a reporting account at spamcop.net HTH Michele Mr Michele Neylon Blacknight Solutions Qualit

submit to spamcop

How does one, if possible, submit a domain/IP address to spamcop? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

Re: Problems with the Spamd Daemon

Hy Matthew, I tried to start the daemon in the way that you said in your e-mail but the result are the same. For some reason, the daemon goes back to the command line /usr/bin/spamd -d -u nobody. Thanks anyway for all the help provided by you and the entire list Jeff =) Obs: I'm still looki