Hi,
I just came across a nice spam with forged received lines.
It is normal for a meswsage with multiple hops that the machine sending out a
mail is not
exactly the one receiving it, but they usually should be in the same domain (or
at least related,
like the t-online hop which receives with a
On 8/18/2006 9:22 PM, Matt Adair wrote:
We recently upgraded our spamassassin from 2.64 to 3.1.4, upgrading to
Perl 5.8.4 in the process. We also run PHP 4.4.1.
Everything seems to be running OK, except for email that is sent
through PHP's mail command to local user accounts. In this situation
We recently upgraded our spamassassin from 2.64 to 3.1.4, upgrading to
Perl 5.8.4 in the process. We also run PHP 4.4.1.
Everything seems to be running OK, except for email that is sent
through PHP's mail command to local user accounts. In this situation,
the email in our clients shows up with
Hamish wrote:
On Thursday 17 August 2006 20:53, Bowie Bailey wrote:
Hamish wrote:
Daryl C. W. O'Shea wrote:
Hello all,
For those of you interested in SpamAssassin's sa-update, I've
created sa-update channels for all of the rules found at the
SpamAssassin Rules Emporium website
(http://www.rul
On Thursday 17 August 2006 20:53, Bowie Bailey wrote:
> Hamish wrote:
> > > > Daryl C. W. O'Shea wrote:
> > > > > Hello all,
> > > > >
> > > > > For those of you interested in SpamAssassin's sa-update, I've
> > > > > created sa-update channels for all of the rules found at the
> > > > > SpamAssassi
On Fri, 18 Aug 2006, Jeremy Fairbrass wrote:
> It seems to be a valid URL
> I actually didn't know you could use <>[] characters in a domain
> name
> I dunno what the RFCs say about the usage of such characters in a
> sub-domain...
*boggle*
I am going to have to re-read the RFCs as well - I, t
A quick note,
also these 2 options need to be configured:
local_tests_only 0
skip_rbl_checks 0
Mimedefang for example uses local_tests_only 1 by default.
HTH
Oliver
Oliver Schulze L. wrote:
Hi Chris,
thanks for that tip!
I will use your rule and also I have done this:
Incremented the score o
On Friday 18 August 2006 07:10, Raymond Wan took the opportunity to say:
> Hi Gary,
>
> On Thu, 17 Aug 2006, Gary V wrote:
> > I would suggest installing a newer version from backports.org.
>
>Thanks for the suggestion! I was not aware of backports.org at
> all.
>
>I could also go up to t
In this case its my local IP range, is the range where I put "RELAY" in
sendmail's access.
Thanks
Oliver
Benny Pedersen wrote:
newer list non routelble ip as internal networks, exept if internal network is
localhost or your own ip range
--
Oliver Schulze L.
Get my e-mail after a captcha t
On Fri, 18 Aug 2006, Magnus Holmgren wrote:
> You could install just spamassassin (but not spamc) from testing, without
> having to pull in anything else.
There's also a spamassassin on dabian 'volatile'
under 'volatile-sloppy' (from sources.list):
deb http://ftp2.de.debian.org/debian-volatile
On Friday 18 August 2006 07:10, Raymond Wan took the opportunity to say:
> Hi Gary,
>
> On Thu, 17 Aug 2006, Gary V wrote:
> > I would suggest installing a newer version from backports.org.
>
> Thanks for the suggestion! I was not aware of backports.org at
> all.
>
> I could also go up
Josh Trutwin wrote:
I've recently had a server experience some really slow spam
processing - I'm not sure what's going on but I notice a lot of
timeouts in the mail log:
Aug 18 09:20:21 www spamd[27673]: timeout with empty $@
at /usr/local/share/perl/5.8.4/Mail/SpamAssassin/Timeout.pm line
182,
On Fri, Aug 18, 2006 at 04:38:05PM +0100, Jonathan Allen wrote:
> Thank you for that. Having started checking the log, I now find that I
> also have this error reported during startup:
>
>spamd[23037]: rules: meta test DIGEST_MULTIPLE has undefined dependency
> 'DCC_CHECK'
That's not an err
hi,
pls im trying to work sare plugin against image spam from
http://www.rulesemporium.com/plugins.htm
after a long time of moving files of plugins ImageInfo.pm and Logger.pm
to different folders. I think that plugin works, postfix isnt show any
error/warning messages in log when starting.
i tr
Theo,
> It's an issue with Text::Wrap. A ticket was opened with them on CPAN, but
> here's the best line:
>
> "The problem comes from an unintended use of a feature."
> - http://rt.cpan.org/Public/Bug/Display.html?id=20657
Thank you for that. Having started checking the log, I now find
Well let's see if my setup can help.
1) Use your MTA's lookup function to query exchange. In Exim I use
lookup verify.
2) I use exim's filters to look at the message after SA marks it up to
do this.
3) In exim I just setup a router for all e-mail to be passed to my
exchange server.
4) Why would
> 1) if message is marked as SPAM and mail address doesn't exist - delete it
> or move to a local folder on SA_MACHINE,
> 3) if message is not marked as SPAM and mail address exist - pass it to the
> Exchange mail server,
> 4) if message is not marked as SPAM and mail address doesn't exist - pass
Bill Landry wrote:
- Original Message - From: "Marc Perkel" <[EMAIL PROTECTED]>
wrote:
| Here's how you might use the lists if you have Exim:
| | # Mark it White | warn dnslists =
hostkarma.junkemailfilter.com=127.0.0.1
| set acl_c1 = white - dnswl - $sender_fullhost
| #
- Original Message -
From: "Marc Perkel" <[EMAIL PROTECTED]>
wrote:
| Here's how you might use the lists if you have Exim:
| | # Mark it White | warn dnslists =
hostkarma.junkemailfilter.com=127.0.0.1
| set acl_c1 = white - dnswl - $sender_fullhost
| # Mark it Yellow | warn
Theo Van Dinter wrote:
On Thu, Aug 17, 2006 at 09:59:34AM -0700, Marc Perkel wrote:
First - for those who want to use it I have a dns list at
hostkarma.junkemailfilter.com. If you do a lookup it will return one of
3 values.
FWIW, I took 10k messages (5k ham/spam each
wrote:
| Here's how you might use the lists if you have Exim:
|
| # Mark it White
| warn dnslists = hostkarma.junkemailfilter.com=127.0.0.1
| set acl_c1 = white - dnswl - $sender_fullhost
| # Mark it Yellow
| warn dnslists = hostkarma.junkemailfilter.com=127.0.0.3
| set acl_
I've recently had a server experience some really slow spam
processing - I'm not sure what's going on but I notice a lot of
timeouts in the mail log:
Aug 18 09:20:21 www spamd[27673]: timeout with empty $@
at /usr/local/share/perl/5.8.4/Mail/SpamAssassin/Timeout.pm line
182, line 1126. Aug 18 09:
28 15 * * * /usr/bin/sa-update && /usr/bin/spamassassin --lint &&
/etc/init.d/spamd restart
Sorry, that should have been:
[...] /etc/init.d/spamassassin restart
Gary V
_
Is your PC infected? Get a FREE online computer virus scan
Title: RE: FuzzyOcr mailing list
> -Original Message-
> From: jdow [mailto:[EMAIL PROTECTED]]
> Sent: Friday, August 18, 2006 5:43 AM
> To: users@spamassassin.apache.org
> Subject: Re: FuzzyOcr mailing list
>
>
> From: "Jonathan Allen" <[EMAIL PROTECTED]>
>
> > Chris wrote:
> >> b
Hi Gary,
On Thu, 17 Aug 2006, Gary V wrote:
I would suggest installing a newer version from backports.org.
Thanks for the suggestion! I was not aware of backports.org at all.
I could also go up to testing or *gasp* unstable, but I really don't want
to. I'm not a very good system a
On Fri, Aug 18, 2006 at 11:58:20AM +0100, Jonathan Allen wrote:
>[spamd] (?:(?<=[\s,]))* matches null string many times in regex; marked by
> <-- HERE in m/\G(?:(?<=[\s,]))* <-- HERE \Z/ at
> /usr/local/lib/perl5/5.8.7/Text/Wrap.pm line 46.
>
> This is a vanilla (but up-to-date) 3.1.4 with n
Raymond Wan wrote:
> I could also go up to testing or *gasp* unstable, but I really don't
> want to. I'm not a very good system admin and don't really know how to
> fix some things when they break. Also would rather have a working
> system than a up-to-the-minute system.
>
> I was wonder
David B Funk writes:
> On Fri, 18 Aug 2006, Daryl C. W. O'Shea wrote:
>
> > On 8/17/2006 8:24 PM, David B Funk wrote:
> >
> > > Is there some documentation about how those pseudo headers work?
> > > some way to print out their values or debug their usage?
> >
> > You can see them by adding header
Daryl C. W. O'Shea writes:
> On 8/17/2006 8:24 PM, David B Funk wrote:
>
> > Is there some documentation about how those pseudo headers work?
> > some way to print out their values or debug their usage?
>
> You can see them by adding headers that display them using the following
> template tags
On Thursday 17 August 2006 13:41, Alex Bramley wrote with regard to - Re:
Using a ramdisk :
> Hi Bjorn,
>
> Bjorn Jensen wrote:
> > Ramprasad wrote:
> >> On Wed, 2006-08-09 at 10:27 +0200, Bjorn Jensen wrote:
> >>> Can spamassassin benefit in any way from a ramdisk ?
> >>> The server we have for s
Hi All,
I have this strange error report that turns up in /var/log/messages:
[spamd] (?:(?<=[\s,]))* matches null string many times in regex; marked by
<-- HERE in m/\G(?:(?<=[\s,]))* <-- HERE \Z/ at
/usr/local/lib/perl5/5.8.7/Text/Wrap.pm line 46.
This is a vanilla (but up-to-date) 3.1.4 w
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Randal, Phil wrote:
> It didn't take the spammers long to break this, by using interlaced
> GIFs:
>
> "GifFix: cannt fix interlaced images"
>
> Cheers,
>
> Phil
> --
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
Please send me
It didn't take the spammers long to break this, by using interlaced
GIFs:
"GifFix: cannt fix interlaced images"
Cheers,
Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
From: "Jonathan Allen" <[EMAIL PROTECTED]>
Chris wrote:
because I feel that the spamassassin mailing list shouldn't be
spammed/bothered with further help requests to install FuzzyOcr or to
solve problems with it, I created a mailing list for it (and possibly
other small tools that I write). It
decoder wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
decoder wrote:
Hello there,
I have improved the original OcrPlugin (found at
http://wiki.apache.org/spamassassin/OcrPlugin), so it contains
fuzzy matching. Like that, mistakes made by the OCR recognition or
intentional obfuscation
I'm not sure it's actually obfuscated though?? It seems to be a valid URL, I
mean in terms of it existing in DNS as-is, and in terms of it working (click
on it and it takes you to the spammer's site). I actually didn't know you
could use <>[] characters in a domain name, but I guess you can - this
36 matches
Mail list logo
