On Mon, 2006-10-23 at 14:36 -0700, jasonegli wrote:
I'm running multiple domains on one SPAM cleaning server. I'm wondering if
there's a way in spamassassin to build a separate whitelist for each domain.
If not, can you build a whitelist based on BOTH To and From addresses.
For example
On 10/25/2006 7:15 PM, Mark Martinec wrote:
For envelope sender there is a standard header: Return-Path
Return-Path is supposed to be added when the message is placed in the
mailstore (ie, last hop, after the transfer network). Since I do scanning
at the MTA level before delivery, I don't have
You might also get better response from the server at
82.94.255.100:24441
How does it cames that reported spam wouldn't cause a further
test to include pyzor's score with this server?
Even worse: I don't get a PYZOR score at all from this server.
giampaolo
Odd, I do:
Where do these guys all get on the same kick at the same time?
Or is it really ONE spammer who just got fired?
Do they hold meetings about what topics to use next month
or what?
I'd lay odds that it is either one spammer, or more likely one spam program.
Back in the days of 900 porn phone
On Thu, 26 Oct 2006 02:25:37 -0700, Loren Wilton
[EMAIL PROTECTED] wrote:
Where do these guys all get on the same kick at the same time?
Or is it really ONE spammer who just got fired?
Do they hold meetings about what topics to use next month
or what?
I'd lay odds that it is either one
On Thu, 26 Oct 2006 02:25:37 -0700, Loren Wilton
[EMAIL PROTECTED] wrote:
Where do these guys all get on the same kick at the same time?
Or is it really ONE spammer who just got fired?
Do they hold meetings about what topics to use next month
or what?
I'd lay odds that it is either one
For envelope sender there is a standard header: Return-Path
Return-Path is supposed to be added when the message is placed in the
mailstore (ie, last hop, after the transfer network). Since I do scanning
at the MTA level before delivery, I don't have Return-Path yet.
If scanning at the MTA
This feels like a series of FAQs, but previous frequent answers don't
seem to answer my questions directly...
With Spamassassin 3.1.4 I'm running spamd. and my global procmail uses
spamc to process mail. Individual users train/report with spamc too.
In an end-user account there's a
Hi all,
I'm running a Spamassassin on a Debian Etch System in a Server, located
in a computer center behind a mail relay server. Every incoming mail has
to pass this mailrelay. So, I believe (maybe it's not the problem?) that
my spamassasin now thinks that all that mail is not spam, because
Daryl C. W. O'Shea writes:
Justin Mason wrote:
(In the meantime, I'm just going back to removing the BL, using
SpamAssassin instead, and using the Shortcircuit plugin to reduce CPU load
if RCVD_IN_SBL or RCVD_IN_XBL fires.)
Can you selectively short-circuit based on the user's prefs (ie.
I have added some rules in my local.cf file (for adding scores for some
SARE rules) but when I run spamassassin -lint (or when I run
rules_du_jour which does the same) it says the rules in my local.cf file
are non-existent, but spamassassin ultimately runs fine. What am I doing
wrong?
Dylan
spamassassin --lint is quiet. no output.
Thank you for replying and assisting; I look forward to other suggestions
also.
Regards,
Brian
On Wed, October 25, 2006 22:07, Matt Kettler wrote:
Brian S. Meehan wrote:
I upgraded spamassassin from 3.0.4 to 3.1.7 and now no spam is getting
caught. My
Hello All,
I've a mail system running Cyrus+Postfix+Amavisd-new+ClamAV+Spamassassin on
SuSE Linux Ent. Server 9.
The problem is that non-encoded 8bit data is not allowed in message headers and
Cyrus-IMAPd prevents from any problem by replacing those chars with X (mail
program should do
Title: RE: How to avoid spamassassin checks in Subject header?
-Original Message-
From: Leon Kolchinsky [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 26, 2006 9:09 AM
To: users@spamassassin.apache.org
Subject: How to avoid spamassassin checks in Subject header?
Title: RE: spamassassin --lint fails with rules in local.cf
-Original Message-
From: Dylan Bouterse [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 26, 2006 8:35 AM
To: users@spamassassin.apache.org
Subject: spamassassin --lint fails with rules in local.cf
I have added
Title: RE: spamassassin --lint fails with rules in local.cf
From: Chris Santerre
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 26, 2006
9:31 AM
To: Dylan Bouterse;
users@spamassassin.apache.org
Subject: RE: spamassassin --lint
fails with rules in local.cf
I received a spam today where the text was only a base64-encoded blob.
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: base64
Subject: feel young and strong again
PGh0bWw+DQpTdG9wIG92ZXJwYXlpbmcgZm9yIHlvdXIgcHJlc2NyaXB0aW9uIG1lZGljYXRpb25z
Martin Kolb wrote:
Hi all,
I'm running a Spamassassin on a Debian Etch System in a Server, located
in a computer center behind a mail relay server. Every incoming mail has
to pass this mailrelay. So, I believe (maybe it's not the problem?) that
my spamassasin now thinks that all that mail is
Dylan Bouterse wrote:
*From:* Chris Santerre [mailto:[EMAIL PROTECTED]
*Sent:* Thursday, October 26, 2006 9:31 AM
*To:* Dylan Bouterse; users@spamassassin.apache.org
*Subject:* RE: spamassassin --lint fails
Peter H. Lemieux wrote:
I received a spam today where the text was only a base64-encoded blob.
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: base64
Subject: feel young and strong again
PGh0bWw+DQpTdG9wIG92ZXJwYXlpbmcgZm9yIHlvdXIgcHJlc2NyaXB0aW9uIG1lZGljYXRpb25z
news [EMAIL PROTECTED] wrote on 10/25/2006 08:36:11 AM:
Thanks Chris I'll do that.. can someone please remind me where I set the
max_child limit?? Like I said I could not find it last night I want to
see
what it is set to now and adjust accordingly.
It's the -m parameter you specify
On Wed, Oct 25, 2006 at 12:57:52PM -0400, Joe Flowers wrote:
I'd prefer to use M::SA-check_message_text(), but if I do a
M::SA-check_message_text('This is a programmer's nightmare.'), then
M::SA-check_message_text() will choke because of the (') in the middle
of the string. How do I
Title: RE: How to avoid spamassassin checks in Subject header?
Thanks Chris,
I should read more about score rules J
Another thing:
There is a legitimate e-mail with empty
body message but with .doc attachment (filename is in hebrew) that marked as a spam
-
X-Spam-Status: Yes,
Hi,
I have a problem whereby spamc sometimes times out while scanning mail
and consequently spam e-mail passes through unchecked straight to my inbox.
It is being called from Simscan but I don't think this is the problem as
the same thing happens on the command line.
If I run spamc
On Thu, Oct 26, 2006 at 09:46:28AM -0400, Peter H. Lemieux wrote:
Does SA convert the blob into text before scanning? It contains a number
of drug-related words and a URI that points to pharmconnect.org.
Yes.
Also is there an SA rule that scores messages that contain only a single
base64
On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote:
There is a legitimate e-mail with empty body message but with .doc attachment
(filename is in hebrew) that marked as a spam -
X-Spam-Status: Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_44,
FROM_ENDS_IN_NUMS,
On Thu, Oct 26, 2006 at 12:40:55PM +0100, Steve [Spamassasin] wrote:
All of which makes sense... Over time, however, there is a build-up of
bayes_toks.expire files (where $ is a decimal digit) and I'm unclear
about these.Anecdotally, when there are lots of these
They're the temporary
On Wed, Oct 25, 2006 at 02:35:07PM -0400, Joe Flowers wrote:
If I pre-pend a message's Envelope to it's Body, can Spamassassin do
anything useful with it?
It depends what you mean by a message's envelope. If you mean add in
standard headers for MAIL FROM and RCPT TO, then sure, go ahead and
Hello All,
I've a mail system running Cyrus+Postfix+Amavisd-new+ClamAV+Spamassassin =
on SuSE Linux Ent. Server 9.
The problem is that non-encoded 8bit data is not allowed in message =
headers and Cyrus-IMAPd prevents from any problem by replacing those =
chars with X (mail program
On Tue, Oct 24, 2006 at 08:26:09PM -0800, John Andersen wrote:
Use of uninitialized value in eval string at /usr/bin/sa-update line 91.
eval { use Net::DNS; };
Just curious, what version of perl are you using?
5.8.0
Interesting. I have no idea what would cause perl to generate that
I received a spam today where the text was only a base64-encoded blob.
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: base64
Subject: feel young and strong again
PGh0bWw+DQpTdG9wIG92ZXJwYXlpbmcgZm9yIHlvdXIgcHJlc2NyaXB0aW9uIG1lZGljYXRpb25z
On Wed, Oct 25, 2006 at 10:18:44AM -0500, Bill wrote:
Ok, if the image spams all have a different hash wouldn't that make the
Hash function built into Fuzzy OCR useless as well? I'm not sure I buy into
that thinking. The hash option in my Fuzzy OCR setup runs pretty well.
I know nothing
Juan Mas wrote:
Im getting this odd behavior where spamd shuts itself down out of
nowhere. I cant really pinpoint what makes it shutdown just what Ive
found in the logs.
spamd[27466]: [spamd] fork: Cannot allocate memory at /usr/bin/spamd
I'd say that's a pretty good reason for it to stop
Nick Gilbert wrote:
[20193] dbg: bayes: first pass decided on 1382400 for atime delta
[20193] dbg: locker: refresh_lock: refresh
/home/nick/.spamassassin/bayes.lock
[20193] dbg: locker: refresh_lock: refresh
/home/nick/.spamassassin/bayes.lock
[20193] dbg: locker: refresh_lock: refresh
Well, I figured that, but why. It never did this before. Is it possible that a rule causes a loop and forces SA to shutdown?On 10/26/06, Daryl C. W. O'Shea
[EMAIL PROTECTED] wrote:
Juan Mas wrote: Im getting this odd behavior where spamd shuts itself down out of nowhere.I cant really pinpoint
Hello,
Is there a way to prevent Spamassasssin to double-scan the mails that have
already been scanned by the backup MX but still having him to autolearn
what it receives through it (based on the score given by the backup mx,
but according to its own auto learn threshold rules)? The goal being to
Theo Van Dinter wrote:
On Thu, Oct 26, 2006 at 09:46:28AM -0400, Peter H. Lemieux wrote:
Does SA convert the blob into text before scanning? It contains a number
of drug-related words and a URI that points to pharmconnect.org.
Yes.
I was pretty sure this was the case but wanted to confirm
On Thu, 26 Oct 2006, Renaud Drousies wrote:
Hello,
Is there a way to prevent Spamassasssin to double-scan the mails that have
already been scanned by the backup MX but still having him to autolearn
what it receives through it (based on the score given by the backup mx,
but according to its own
Greetings,
If anyone on the list is using latest SA, clamav qmail-scanner with the
Qmail MTA can you please hit me with an email offlist?
I will be glad to share a synopsis of what I am trying to find out and
implement once I get there with this list.
I haven't been able to find it anywhere
Mark Martinec wrote:
If scanning at the MTA level with amavisd-new, a synthetic Return-Path
is prepended to a copy of a message that is given to SA for examination.
Much like David B Funk says a sendmail-SA-milter does.
MIMEDefang does this as well. It synthesizes Received and Return-Path
Actually this server is hosting lots of different domains that I do not
control, I do not choose whether there is a backup MX or not. However I
noted that some (most) of those backups MX already had a working
spamassassin configuration and that it would be a waste of time to re-scan
those mails. I
[EMAIL PROTECTED] wrote:
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: base64
Probably a message in base64 that does not contain any single 8bit code should
be
considered as an attempt to hide the message from scanners
That's a good idea, Wolfgang. The
John Andersen wrote:
Everytime my SA-Update runs the output from the cron job shows these lines:
Only from cron?
Use of uninitialized value in eval string at /usr/bin/sa-update line 91.
Use of uninitialized value in eval string at /usr/bin/sa-update line 91.
Use of uninitialized value in
Daryl C. W. O'Shea writes:
Justin Mason wrote:
Jason Haar writes:
Obviously you have to have over-speced your mail servers to be able to
do this - something poor old Justin can't manage I think :-)
Yeah. If I could persuade someone to donate a server just for *my*
personal mail, that'd
Hi, How to write a rules to avoid below type of mails or is there a rule
already which marks this as spam. Everday i get 3 to 4 mails of this type
with one picture image which says GDKI No.1 Entertainment industry.
Your help is much appreciated and i started using spam assassin recently and
still
Check out the SARE rulesets, ImageInfo, FuzzyOcr, ...
Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University
On Thu, 26 Oct 2006, san wrote:
Hi, How to write a rules to avoid below type of mails or is there a rule
already which marks this as spam. Everday i get 3 to 4 mails
I know y'all are smart, just looking for a little help on this one.
In addition to the below info, spamassassin -lint works fine and quietly.
Thanks,
Brian
Original Message
Subject: upgraded, now no spam is caught
From:Brian S.
At 11:48 AM 10/26/2006, you wrote:
I know y'all are smart, just looking for a little help on this one.
In addition to the below info, spamassassin -lint works fine and quietly.
I'm sorta a newbie too, but..
Have you tried sending yourself a gtube message?
Have you restarted spamd? Is it running?
Brian S. Meehan wrote:
I know y'all are smart, just looking for a little help on this one.
In addition to the below info, spamassassin -lint works fine and quietly.
Thanks,
Brian
Original Message
So my shell account may be disappearing soon and I'm looking for a
recommendation for an ISP that provides SA but also allows me to apply my own
perl filter for any mail that arrives. The latter isn't crucial but it's very
prefered.
Looking basically for webmail (https) imap4 and the ability to
On Thu, 2006-10-26 at 16:01 -0500, [EMAIL PROTECTED] wrote:
So my shell account may be disappearing soon and I'm looking for a
recommendation for an ISP that provides SA but also allows me to apply my own
perl filter for any mail that arrives. The latter isn't crucial but it's very
prefered.
On 26-okt-2006, at 20:07, Chris St. Pierre wrote:
On Thu, 26 Oct 2006, san wrote:
Hi, How to write a rules to avoid below type of mails or is there
a rule
already which marks this as spam. Everday i get 3 to 4 mails of
this type
with one picture image which says GDKI No.1 Entertainment
On 26-okt-2006, at 23:01, [EMAIL PROTECTED] wrote:
So my shell account may be disappearing soon and I'm looking for a
recommendation for an ISP that provides SA but also allows me to
apply my own
perl filter for any mail that arrives. The latter isn't crucial but
it's very
prefered.
Thanks for the suggestion,
But should I run spamassassin --revoke or /usr/lib/razor-revoke on folder
containing such a ham?
spamassassin --revoke /ham_folder/*
or
/usr/lib/razor-revoke /ham_folder/*
Are these tools interchangeable?
And again, it seems very strange that a regular message with
Or, easier and faster, use the milter-regex (if you are using sendmail as
you MTA). You can then build a regex to drop beyond a certain level.
Or, if you're feeling braver, you can use the patches at the following page
to set discard ranges directly on the spamass-milter:
We recently migrated our SpamAssassin installation from a physical 3.6 GHz system running RHEL 4 and SA 3.0.4 to a VMware VM (ESX 2.5.4) with RHEL 4 as the guest OS and SA 3.1.7. Each user has their own Bayes files (Berkeley DB) and these were copied from the old to the new server. Now
On Thursday 26 October 2006 3:06 am, Giampaolo Tomassoni wrote:
I'm using the server at 82.94.255.100:24441 and have not had any
problems since I switched back in March of this year.
Ok. You're right. I'm wrong. :)
I checked it the right way and it seems that Pyzor do infact is
Sammy Anderson wrote:
We recently migrated our SpamAssassin installation from a physical 3.6
GHz system running RHEL 4 and SA 3.0.4 to a VMware VM (ESX 2.5.4) with
RHEL 4 as the guest OS and SA 3.1.7. Each user has their own Bayes
files (Berkeley DB) and these were copied from the old to the
I would like to know howto automatically remove detected
Spam? I don't
want spamassassin to deliver the spam with a [SPAM] tag at
the begining of
the message but preffer to send it (the spam) directly to
something like
/dev/null
Why don't you use amavisd-new (
On 26.10.2006 16:15, * Dylan Bouterse wrote:
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 26, 2006 9:58 AM
To: Dylan Bouterse
Cc: users@spamassassin.apache.org
Subject: Re: spamassassin --lint fails with rules in local.cf
Dylan Bouterse
On Thu, 26 Oct 2006 15:52:17 -0700 (PDT)
Sammy Anderson [EMAIL PROTECTED] wrote:
We recently migrated our SpamAssassin installation from a
physical 3.6 GHz system running RHEL 4 and SA 3.0.4 to a
VMware VM (ESX 2.5.4) with RHEL 4 as the guest OS and SA
3.1.7. Each user has their own Bayes
On Thursday, October 26, 2006, 2:01:55 PM, robert robert wrote:
So my shell account may be disappearing soon and I'm looking for a
recommendation for an ISP that provides SA but also allows me to apply my own
perl filter for any mail that arrives. The latter isn't crucial but it's very
62 matches
Mail list logo
