On Saturday 11 March 2006 04:25, NW7US, Tomas wrote:
My scripts are really buttoned down, those that I have written myself.
The perl scripts do use the CGI code, latest. And I do my own regex
stuff. I'll double-check my tests. I just don't yet see how the messages
are getting through. If
Hi,
I've a question about sa-learn which has been included in 3.1.1.
sa-learn by default install rules in
/var/lib/spamassassin/3.001001/updates_spamassassin_org/.
I wonder why it doesn't copy them in /usr/share/spamassassin/ ?
Is it for safety reason (ie avoid automaticly use of new rules).
Hello,
The following Message ID causes a '+3.78' (bayes+network) score for
hitting a meta rule MSGID_DOLLARS_RANDOM, SA Version 3.1.x
Message-ID: [EMAIL PROTECTED]
X-Mailer: Intrapop 1.4 SMTP Component 1.0
It is a regular mail and the sender appears to be using a mailserver
developed by
hi all, i upgrade my version of spamassassin in freebsd from 2.x to 3.x
and now when a e-mail has detected like spam in body of message i have
this
[-- Attachment #1 --]
[-- Type: text/plain, Encoding:
I don't even understand how the following message works (let alone how
to block it).
It simply has a chunk of what looks like encoded binary; and yet,
thunderbird renders it as a stock announcement (as I write this, I
wonder whether the good readers of this list are likely to the ascii
block, or
James Long wrote:
James Long wrote:
In my SpamAssassin-3.1.0 (p5-Mail-SpamAssassin-3.1.0_6) local.cf, I
use:
...
trusted_networks 127.0.0.0/8 65.75.198.48/28 63.105.30.37/32
^^
Your IP for the ns.museum.rain.com comes back as
Hi Eric,
The text there is encoded with base64, which is decoded into the proper
text by the mail client. SpamAssassin will also decode it before running its
rules against it, for body or rawbody rules, which means SpamAssassin
will be able to filter it out whether the text was encoded with
Without being able to decode that block of stuff myself and thus see what
it says
It's a stock spam for some oil company.
Decoding anything base64 encoded is pretty easy if you have perl installed
somewhere:
cut
#!/usr/bin/perl
use MIME::Base64;
print decode_base64(put the encoded
Thanks all. I'm test driving the below-listed rule and it seems to be
good and fast as you suggest.
I'm a bit jittery on the multi-line rules right now due to an
"incident" with what I thought was a brilliant RE that ended up gumming
up our system really bad a few weeks back.
Thanks again.
Jeremy Fairbrass wrote:
Hi Eric,
The text there is encoded with base64, which is decoded into the proper
text by the mail client. SpamAssassin will also decode it before running its
rules against it, for body or rawbody rules, which means SpamAssassin
will be able to filter it out whether
Greets.
I've seen this under both SA 3.1.0 and 3.1.1 and I have IP::Country 2.20
installed. If I enable debug mode in spamd I see
Mail::SpamAssassin::Plugin::RelayCountry load. When processing a message
through spamd I also see metadata: X-Relay-Countries: US ** US US ** US
US US DE SK SK SK
On Mon, Mar 13, 2006 at 12:01:01PM +0100, Cedric Foll wrote:
sa-learn by default install rules in
/var/lib/spamassassin/3.001001/updates_spamassassin_org/.
I wonder why it doesn't copy them in /usr/share/spamassassin/ ?
Is it for safety reason (ie avoid automaticly use of new rules).
sa-learn
On Mon, Mar 13, 2006 at 11:14:43AM -0300, Pablo Allietti wrote:
hi all, i upgrade my version of spamassassin in freebsd from 2.x to 3.x
and now when a e-mail has detected like spam in body of message i have
this
(no report template found)
and no scores show me.
i miss any file?
On Mon, 13 Mar 2006, Theo Van Dinter wrote:
On Mon, Mar 13, 2006 at 07:45:47PM +0100, Cedric Foll wrote:
So by default, spamassassin read /usr/share/spamassassin and next /var/lib.
And rules of /var/lib overwright the ones of /usr/share/spamassassin.
I'm right ?
Not really. For rules,
sa-learn doesn't install any rules. Perhaps you mean sa-update? There's
yes sorry.
Nope. Once the files are installed in the /var/lib area, you're fine.
When you next run spamassassin (or restart spamd, etc,) it will use
the new rule files.
So by default, spamassassin read
On Mon, Mar 13, 2006 at 07:45:47PM +0100, Cedric Foll wrote:
So by default, spamassassin read /usr/share/spamassassin and next /var/lib.
And rules of /var/lib overwright the ones of /usr/share/spamassassin.
I'm right ?
Not really. For rules, /var/lib/spamassassin overrides the use of
Robert Menschel wrote:
I'm not familiar enough with the newsletters below to know whether
they should be whitelisted. Can anyone confirm that these newsletters
(which apparently do get flagged as spam, at least from time to time)
should be whitelisted? Does anyone have any objections to
Steven Manross wrote:
X-Spam-Status: No, score=-2.6 required=5.0
tests=AWL=0.023,BAYES_00=-2.599
autolearn=failed version=3.1.1
It seems that since upgrading to 3.11 last night, the
autolearn=yes|no|failed always shows up as failed (on all messages).
Did I miss something?
Generally
I'm still working on
my server that is having problems with running spamassassin 3.10 and exim
4.60. Currently the command I run is spamd -d -c -m 5 to have it use 5
child processes. Is there some sort of recommended ratio to amount of
processed email to how many max child processes I
I'm still working on my server that is having problems with running
spamassassin 3.10 and exim 4.60. Currently the command I run is
spamd -d -c
-m 5 to have it use 5 child processes. Is there some sort of recommended
ratio to amount of processed email to how many max child processes I
should
I have forgotten the setting that tells SA to
include the point value for each of the hits the incoming message was flagged
on. I searched the web and looked in my book, but can't seem to find
it. Could someone please jog my memory?
Thanks
Shane
On Fri, 10 Mar 2006, Dan Mahoney, System Admin wrote:
Okay. SpamAssassin 3.1.1 -- same problems. Uninitialized values, bad
match strings, and the ever popular spamd uses all its children and the
spam keeps flowing.
http://www.gushi.org/maillogAGAIN.txt (warning, 20 megs)
The user in
On Mon, Mar 13, 2006 at 12:29:49PM -0800, jdow wrote:
Received: from smtp.earthlink.net [209.86.93.205]
by localhost with POP3 (fetchmail-6.2.5.5)
for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39
-0800 (PST)
Received: from amazon.com ([80.33.31.58])
by
-Original Message-
From: Steven Manross
Sent: Monday, March 13, 2006 12:46 PM
To: users@spamassassin.apache.org
Subject: autolearn=failed after upgrade to 3.11
X-Spam-Status: No, score=-2.6 required=5.0
tests=AWL=0.023,BAYES_00=-2.599
autolearn=failed version=3.1.1
It
Steven Manross wrote:
_TESTSSCORES(,)_
From: Shane Mullins [mailto:[EMAIL PROTECTED]
I have forgotten the setting that tells SA to include the point
value for each of the hits the incoming message was flagged on. I
searched the web and looked in my book, but can't seem to find it.
On Mon, 13 Mar 2006, Shane Mullins wrote:
hI,
I have forgotten the setting that tells SA to include the point value
for each of the hits the incoming message was flagged on. I searched
the web and looked in my book, but can't seem to find it. Could someone
please jog my memory?
add_header
Sorry to rehash what must be an old question...
I can't find LMAP/CID2SPF on CPAN or FreeBSD ports. I found an old list
item suggesting that there was a download link at:
http://www.openspf.org/downloads.html
This link appears to be gone at the moment.
Should I just ignore the errors in the log;
Actually my server logs don't show server reached messages. Rather I'm
still fighting a nasty battle of getting SpamAssassin to work in conjunction
with Exim. I've posted numerous times on this issue only to get no
resolution. The whole problem lies with SpamAssassin it seems. As soon as
I run
jdow wrote:
===8---
Return-Path: [EMAIL PROTECTED]
Received: from smtp.earthlink.net [209.86.93.205]
by localhost with POP3 (fetchmail-6.2.5.5)
for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39
-0800 (PST)
Received: from amazon.com ([80.33.31.58])
by
Steven Manross wrote:
It looks like the autolearn is working now.
Does anyone have any ideas on the misplaced headers? Or is that a new
de facto standard?
You mean this:
As well, the headers added by SA (and me [through SA] for MsgID) are now
showing at the top of the headers from the
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Monday, March 13, 2006 1:35 PM
To: Steven Manross
Cc: users@spamassassin.apache.org
Subject: Re: autolearn=failed after upgrade to 3.11
Steven Manross wrote:
It looks like the autolearn is working now.
On Mon, 13 Mar 2006, Eric W. Bates wrote:
Sorry to rehash what must be an old question...
I can't find LMAP/CID2SPF on CPAN or FreeBSD ports. I found an old list
item suggesting that there was a download link at:
http://www.openspf.org/downloads.html
This link appears to be gone at the
It seems that since upgrading to 3.11 last night, the
autolearn=yes|no|failed always shows up as failed (on all messages).
Did I miss something?
Generally Failed means that SA somehow can't access the
bayes database to write to it.
Have you tried sa-learn --sync and then
_TESTSSCORES(,)_
From: Shane Mullins [mailto:[EMAIL PROTECTED]
Sent: Monday, March 13, 2006 1:22 PM
To: users@spamassassin.apache.org
Subject: X-Spam-Status settings
I have forgotten the setting that
===8---
Return-Path: [EMAIL PROTECTED]
Received: from smtp.earthlink.net [209.86.93.205]
by localhost with POP3 (fetchmail-6.2.5.5)
for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39 -0800 (PST)
Received: from amazon.com ([80.33.31.58])
by mx-pigeons.atl.sa.earthlink.net (EarthLink
X-Spam-Status: No, score=-2.6 required=5.0
tests=AWL=0.023,BAYES_00=-2.599
autolearn=failed version=3.1.1
It seems that since upgrading to 3.11 last night, the
autolearn=yes|no|failed always shows up as failed (on all messages).
Did I miss something?
As well, the headers added by SA (and
From: Matt Kettler [EMAIL PROTECTED]
jdow wrote:
===8---
Return-Path: [EMAIL PROTECTED]
Received: from smtp.earthlink.net [209.86.93.205]
by localhost with POP3 (fetchmail-6.2.5.5)
for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39
-0800 (PST)
Received: from amazon.com
I'm using an internal URIBL, configured like so:
urirhssub SAFF_EXAMPLE rbl.example.com. A 127.0.0.8
body SAFF_EXAMPLE eval:check_uridnsbl('SAFF_EXAMPLE')
describe SAFF_EXAMPLE Example RBL hit 8
Running with the above configuration causes spamd to log:
warn: Argument
I am trying to train spamassassin using spam and ham I've collected. My
problem is the sa-learn script is using too many resources on the server
(my spam folder had ~1000 messages).
Is there a way I can run sa-learn on my PC and then merge the results with
the server?
--
--
[EMAIL PROTECTED]
Hi there!
I am trying to get SPF to work with my spamassassin installation.
So far when I receive an email, SA logs the following:
spamd[874]: spf: cannot get Envelope-From, cannot use SPF
spamd[874]: spf: def_spf_whitelist_from: could not find useable envelope
sender
spamd[874]: spf:
Xavier Sudre wrote:
I am trying to get SPF to work with my spamassassin installation.
So far when I receive an email, SA logs the following:
spamd[874]: spf: cannot get Envelope-From, cannot use SPF
...
The email goes through postfix then spamc then spamd.
What version of postfix?
See
John Davis wrote:
I am trying to train spamassassin using spam and ham I've collected. My
problem is the sa-learn script is using too many resources on the server
(my spam folder had ~1000 messages).
Is there a way I can run sa-learn on my PC and then merge the results with
the server?
Matt Kettler wrote:
John Davis wrote:
I am trying to train spamassassin using spam and ham I've collected. My
problem is the sa-learn script is using too many resources on the server
(my spam folder had ~1000 messages).
Is there a way I can run sa-learn on my PC and then merge the results
John Davis wrote:
I am trying to train spamassassin using spam and ham I've collected. My
problem is the sa-learn script is using too many resources on the server
(my spam folder had ~1000 messages).
Is there a way I can run sa-learn on my PC and then merge the results with
the server?
[EMAIL PROTECTED] wrote:
Xavier Sudre wrote:
I am trying to get SPF to work with my spamassassin installation.
So far when I receive an email, SA logs the following:
spamd[874]: spf: cannot get Envelope-From, cannot use SPF
...
The email goes through postfix then spamc then spamd.
What
Xavier Sudre wrote:
[EMAIL PROTECTED] wrote:
See http://wiki.apache.org/spamassassin/EnvelopeSenderInHeaders
My postfix version is compatible.
Is there a Return-Path header on the file that spamc is told to scan?
--
Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902
Hispanic
[EMAIL PROTECTED] wrote:
Xavier Sudre wrote:
[EMAIL PROTECTED] wrote:
See http://wiki.apache.org/spamassassin/EnvelopeSenderInHeaders
My postfix version is compatible.
Is there a Return-Path header on the file that spamc is told to scan?
That was the trouble! The transport that I used in
Hi List,
After upgraded SA from 3.10 to 3.11, ran spamassassin --lint, encountered
the error as follows:-
[21824] warn: config: SpamAssassin failed to parse line, SARE_MLB_Stock3
.794 is not valid for score, skipping: scoreSARE_MLB_Stock3 .794
[21824] warn: config: SpamAssassin
Leading zeros are required for values between (-1,1).
On 3/13/2006 9:27 PM, Spamassassin List wrote:
Hi List,
After upgraded SA from 3.10 to 3.11, ran spamassassin --lint,
encountered the error as follows:-
[21824] warn: config: SpamAssassin failed to parse line,
SARE_MLB_Stock3 .794 is
Leading zeros are required for values between (-1,1).
Thanks. After examine all the rules, found out that 70_sare_stocks.cf is
causing it.
It contains lines like:-
body SARE_MLB_Stock3 /Last[ _](?:Trade|Price)[ :]/i
scoreSARE_MLB_Stock3 .794
bodySARE_LWSAFEH
I believe you're using an old version of 70_sare_stocks.cf. This issue
was located and corrected a couple of weeks ago if I'm not mistaken.
Current version is # Version: 01.00.14
HTH,
M
Spamassassin List wrote:
Leading zeros are required for values between (-1,1).
Thanks. After examine
Spamassassin List wrote:
Leading zeros are required for values between (-1,1).
Thanks. After examine all the rules, found out that 70_sare_stocks.cf is
causing it.
It contains lines like:-
body SARE_MLB_Stock3 /Last[ _](?:Trade|Price)[ :]/i
scoreSARE_MLB_Stock3 .794
body
Jason Parsons wrote:
I'm using an internal URIBL, configured like so:
urirhssub SAFF_EXAMPLE rbl.example.com. A 127.0.0.8
body SAFF_EXAMPLE eval:check_uridnsbl('SAFF_EXAMPLE')
describe SAFF_EXAMPLE Example RBL hit 8
Running with the above configuration causes spamd to
FM_NO_FROM_OR_TO=,FM_NO_TO=,MISSING_SUBJECT=,NO_RECEIVED=,TO_CC_NONE=
Something seems a little odd here. On my system those rules would add up to
quite a few points, and they don't seem to add up to anything for you.
Loren
However after about 2-3 hours mail randomly starts getting returned to the
sender with 421 BSMTP timeout errors. It doesn't matter if the sender is
a
client on my server, or someone using a Yahoo account, about 50-75% of
mail
that is sent is returned undeliverable with that 421 BSMTP timeout
You have an older version of the stock rules. Doc fixed this one a week or
two ago, since we knew it was going to come up.
Loren
You have an older version of the stock rules. Doc fixed this one a week
or
two ago, since we knew it was going to come up.
Weird. rules_du_jour did not grab the newer version.
Hello Kelson,
Monday, March 13, 2006, 11:30:07 AM, you wrote:
K Robert Menschel wrote:
I'm not familiar enough with the newsletters below to know ...
whitelist_from_rcvd [EMAIL PROTECTED]
...
K I can confirm this one as both legit and a frequent false positive (in
K part because of the 7
Hello John,
Monday, March 13, 2006, 2:53:33 PM, you wrote:
JD I am trying to train spamassassin using spam and ham I've collected. My
JD problem is the sa-learn script is using too many resources on the server
JD (my spam folder had ~1000 messages).
JD Is there a way I can run sa-learn on my
Thanks Tim,
I'm going to do a yum remove on SA and reinstall if required. At the
time of the original post I didn't have a spare failover box for SA,
that situation is now resolved.
My concern stems from the fact that the original Yum updates done
before 3.1.0 was installed didn't mention 3.0.5;
60 matches
Mail list logo
