Re: turning off autolearn

2007-02-20 Thread Chris
On Monday 19 February 2007 10:44 pm, Theo Van Dinter wrote: On Mon, Feb 19, 2007 at 10:32:18PM -0600, Chris wrote: bayes_auto_learn 0 Maybe I should be a bit more clear, I had the above in my local.cf and whenever a message whether it ham or spam came in it was tagged

Custom To: rule variant to exclude matches?

2007-02-20 Thread John Minnihan
SA Team, I have a fully functional SA installation that is serving me very well. I use Mailscanner and a few custom rules, and am generally very pleased with the results. There’s one more rule that I’d like to run, but haven’t figured out how to implement it. I want to use a header rule that

Re: Custom To: rule variant to exclude matches?

2007-02-20 Thread Loren Wilton
You might be able to make something work with !~, but the easy way is to use a meta rule to reverse the sense. header __TO_TESTTo =~ /my name/i metaTO_TEST!__TO_TEST score TO_TEST 5 I'm going to assume you know the FP consequences of something like this, and not bother with the

Re: Custom To: rule variant to exclude matches?

2007-02-20 Thread hamann . w
SA Team, I have a fully functional SA installation that is serving me very well. I use Mailscanner and a few custom rules, and am generally very pleased with the results. There?s one more rule that I?d like to run, but haven?t figured out how to implement it. I want to use a header rule that

Re: Custom To: rule variant to exclude matches?

2007-02-20 Thread Matt Kettler
John Minnihan wrote: SA Team, I have a fully functional SA installation that is serving me very well. I use Mailscanner and a few custom rules, and am generally very pleased with the results. There’s one more rule that I’d like to run, but haven’t figured out how to implement it. I want

[ semi OT ] Bounced Mails

2007-02-20 Thread Luis Hernán Otegui
Hi, List, my users are getting increasing amounts of Mail Delivery Subsystem mails, and I suspect spammers are using their addresses as senders. I have my servers registered with SPF, but now I wonder how could I stop this mails from getting to their accounts? I've tried to explain to them that

Re: [ semi OT ] Bounced Mails

2007-02-20 Thread Jeff Chan
On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote: Hi, List, my users are getting increasing amounts of Mail Delivery Subsystem mails, and I suspect spammers are using their addresses as senders. I have my servers registered with SPF, but now I wonder how could I stop this mails from

Re: [ semi OT ] Bounced Mails

2007-02-20 Thread Richard Frovarp
Jeff Chan wrote: On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote: Hi, List, my users are getting increasing amounts of Mail Delivery Subsystem mails, and I suspect spammers are using their addresses as senders. I have my servers registered with SPF, but now I wonder how could I

Re: [ semi OT ] Bounced Mails

2007-02-20 Thread Justin Mason
Jeff Chan writes: On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote: Hi, List, my users are getting increasing amounts of Mail Delivery Subsystem mails, and I suspect spammers are using their addresses as senders. I have my servers registered with SPF, but now I wonder how

Re: [ semi OT ] Bounced Mails

2007-02-20 Thread Luis Hernán Otegui
OK, I'll give it a try. Thanks a lot Luis 2007/2/20, Justin Mason [EMAIL PROTECTED]: Jeff Chan writes: On Tuesday 20 February 2007 06:08, Luis Hernán Otegui wrote: Hi, List, my users are getting increasing amounts of Mail Delivery Subsystem mails, and I suspect spammers are using their

Re: Custom To: rule variant to exclude matches?

2007-02-20 Thread John Minnihan
Thanks for the quick reply bonus suggestion, Matt. I'll continue modeling this now that I know !~ should function as expected, i.e. return true if the pattern is not matched. John Minnihan wrote: SA Team, I have a fully functional SA installation that is serving me very well. I use

Odd score

2007-02-20 Thread Scott Lockwood
X-Spam-Status: No, score=-79.4 required=5.0 tests=BAYES_99,HELO_DYNAMIC_HCC, HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_XBL,SPF_SOFTFAIL,UPPERCASE_25_50,USER_IN_WHITELIST autolearn=no version=3.1.1 I keep getting these messages with really low scores that

Re: Odd score

2007-02-20 Thread Raymond Dijkxhoorn
Hi! X-Spam-Status: No, score=-79.4 required=5.0 tests=BAYES_99,HELO_DYNAMIC_HCC, HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_XBL,SPF_SOFTFAIL,UPPERCASE_25_50,USER_IN_WHITELIST autolearn=no version=3.1.1 I keep getting these messages with really low scores

RE: Odd score

2007-02-20 Thread Dan Barker
Display the scores too! Put tests=_TESTSSCORES(,)_ in your local.cf and you won't scratch your head so hard next time. It puts in lines like: X-Spam-Status: No, score=-100.0 required=5.0 tests=AWL=0.009,BAYES_50=0.001,SPF_PASS=-0.001,USER_IN_WHITELIST=-100 autolearn=no version=3.1.7 when coded

Re: Odd score

2007-02-20 Thread Magnus Holmgren
On Tuesday 20 February 2007 17:35, Scott Lockwood wrote: X-Spam-Status: No, score=-79.4 required=5.0 tests=BAYES_99,HELO_DYNAMIC_HCC, HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_XBL,SPF_SOFTFAIL,UPPERCASE_25_50,USER_IN_WHITELIST autolearn=no version=3.1.1

Re: Odd score

2007-02-20 Thread Scott Lockwood
Is that per user? So, if I nuke the whitelist, this should go away? On Tue, 2007-02-20 at 17:37 +0100, Raymond Dijkxhoorn wrote: Hi! X-Spam-Status: No, score=-79.4 required=5.0 tests=BAYES_99,HELO_DYNAMIC_HCC, HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,INVALID_DATE,RCVD_IN_BL_SPAMCOP_NET,

Re: Odd score

2007-02-20 Thread Raymond Dijkxhoorn
Hi! Is that per user? So, if I nuke the whitelist, this should go away? Anyone have any ideas??? USER_IN_WHITELIST ! Thats a bit depending on your setup. But trashing it would be a nice idea, most people dont use the whitelist anyway. I dont... Bye, Raymond.

RE: Odd score

2007-02-20 Thread Bowie Bailey
Scott Lockwood wrote: Is that per user? So, if I nuke the whitelist, this should go away? On Tue, 2007-02-20 at 17:37 +0100, Raymond Dijkxhoorn wrote: USER_IN_WHITELIST ! Keep in mind that this is not referring to the auto whitelist. This is a hit from one of the whitelist_from or

v3.2-dev error if Rule2XSBody plugin loaded ...

2007-02-20 Thread snowcrash+spamassassin
hi, intrigued by some of the forthcoming features of v3.2, i've built up a test-isntance of, spamassassin --version SpamAssassin version 3.2.0-pre1-r499012 running on Perl version 5.8.8 currently, on launch of sa, i see @ console, [21402]

Re: v3.2-dev error if Rule2XSBody plugin loaded ...

2007-02-20 Thread Justin Mason
snowcrash+spamassassin writes: hi, intrigued by some of the forthcoming features of v3.2, i've built up a test-isntance of, spamassassin --version SpamAssassin version 3.2.0-pre1-r499012 running on Perl version 5.8.8 currently, on launch of sa, i

Re: v3.2-dev error if Rule2XSBody plugin loaded ...

2007-02-20 Thread snowcrash+spamassassin
hi, that's to be expected until you actually run sa-compile to compile the ruleset... ah. i'd misunderstood (ok, presumed ...) that that was automatically done ... thanks! now, % /usr/local/spamassassin/bin/sa-compile --sudo -D [21503] dbg: logger: adding facilities: all

Re: v3.2-dev error if Rule2XSBody plugin loaded ...

2007-02-20 Thread Justin Mason
snowcrash+spamassassin writes: hi, that's to be expected until you actually run sa-compile to compile the ruleset... ah. i'd misunderstood (ok, presumed ...) that that was automatically done ... thanks! now, % /usr/local/spamassassin/bin/sa-compile --sudo -D

Re: v3.2-dev error if Rule2XSBody plugin loaded ...

2007-02-20 Thread snowcrash+spamassassin
or possibly a bug :( Worth opening a bug on bugzilla. You could try strace'ing the process to see exactly what it's seeing... i'll open a bug, but i'm useless -- without a little guidance -- as to what to do re: strace-ing, as i'm on a mac. thanks.

Re: Using ^ and $ in SA Rules

2007-02-20 Thread Mark Martinec
Theo Van Dinter writes: body rules aren't run on lines, they're run on paragraphs, so that text is in the middle of a string. Matt Kettler writes: Use rawbody for this. Body rules have CR/LF stripped out. Giving whole paragraphs to regexp is fine, but why are newlines stripped out in 'body'

FuzzyOcr - how do I teach it?

2007-02-20 Thread Robert S
I have just installed FOCR 3.5.1 with the hashdb option. I have been receiving image spams about China Fruits Corporation which are cleverly designed not to contain words in the words list. How do I insert the hash into the database and label this image as spam? I have tried - unsuccessfully:

Re: Using ^ and $ in SA Rules

2007-02-20 Thread Matt Kettler
Mark Martinec wrote: Theo Van Dinter writes: body rules aren't run on lines, they're run on paragraphs, so that text is in the middle of a string. Matt Kettler writes: Use rawbody for this. Body rules have CR/LF stripped out. Giving whole paragraphs to regexp is fine,

Re: SpamAssassin and Horde

2007-02-20 Thread JP Kelly
regarding the problem where mail from horde gets hit with HELO_DYNAMIC_DHCP rule due to sender's IP address. see below... do you mean SA 3.1? On Apr 14, 2005, at 3:08 PM, Justin Mason wrote: check the bugzilla -- I'm pretty sure this is fixed for 3.1.0. - --j. This is the IP from

Re: [ semi OT ] Bounced Mails

2007-02-20 Thread Claude Frantz
Luis Hernán Otegui wrote: Hi, List, my users are getting increasing amounts of Mail Delivery Subsystem mails, and I suspect spammers are using their addresses as senders. I have my servers registered with SPF, but now I wonder how could I stop this mails from getting to their accounts? I've

Re: [ semi OT ] Bounced Mails

2007-02-20 Thread Loren Wilton
The BOGUS_VIRUS_WARNINGS ruleset will filter out a huge amount of this junk. I think Justin has some new sandbox rules that also work well, but I don't know which versions of SA they will work on. Loren