Hi,
Jeff Portwine wrote:
Hi everybody,
For the past couple of weeks, spamassassin has all but completely
stopped blocking email.I am running spamassassin 3.1.0 with
exim 3.35.I haven't added any custom rules or anything, it's pretty
much a vanilla SA install.In the past, som
Hello,
SA have not blocked an email with this headers:
Microsoft Mail Internet Headers Version 2.0
Received: from posta.sttspa.it ([80.74.176.144]) by srv5.stt.loc with
Microsoft SMTPSVC(6.0.3790.1830);
Wed, 14 Mar 2007 07:14:08 +0100
Received: by posta.sttspa.it (Postfix, from userid 7
> If you can post the full email (headers and body), I'll run it over my
> system which has lots and lots of third party add on rules from
> www.rulesemporium.com and others and see if I can make SA
> score it high
> enough for Amavisd-new to block the email..
Thanks.
http://www.rocsca.it/INBOX
Hi,
SA marked message from root as SPAM :) nice, he's the biggest SPAMmer in my
box, as one guy said.
Anyway, all I have is message ID, not the message itself, since SPAM action
is to delete.
How could I:
1) make SA forget this message(s) and re-learn them as ham,
2) make SA skip messages from
http://www.spec.org/auto/cpu2006/Docs/400.perlbench.html
400.perlbench SPEC CPU2006 Benchmark Description:
The primary component of the [benchmark] workload is the Open Source spam
checking software SpamAssassin. SpamAssassin is used to score a couple of
known corpora of both spam and ham
>Justin was only mentioning it because a particular deficiency in the
>*documentation* that came up in this thread was fixed in 3.2.0
>(currently in devel).
OK. I had misunderstood. If it is only the *documentation* which is fixed in
3.2.0 then do we understand why the email in my original posting
The securitysage rhsbl has been giving too many false positives since
morning today,
Anyone else seen this
Thanks
Ram
> -Original Message-
> From: ram [mailto:[EMAIL PROTECTED]
> Sent: 14 March 2007 11:36
> To: users@spamassassin.apache.org
> Subject: anyone using securitysage
>
> The securitysage rhsbl has been giving too many false
> positives since morning today,
>
I have had one bounce from them--
Hi Ram,
On Wed, Mar 14, 2007 at 05:05:57PM +0530, ram told us:
> The securitysage rhsbl has been giving too many false positives
> since morning today,
>
> Anyone else seen this
not personally, but you might want to take a look at this posting
earlier this day on the amavis-user mailing list:
> http://www.rocsca.it/INBOX
Could someone give me an hint on how to block email like the one above?
Thanks,
rocsca
> I get the following score:
>
> From [EMAIL PROTECTED] Wed Mar 14 07:13:02 2007
> Return-Path: <[EMAIL PROTECTED]>
> X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on a
Hi,
Rocco Scappatura wrote:
http://www.rocsca.it/INBOX
Could someone give me an hint on how to block email like the one above?
Thanks,
rocsca
I get the following:
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
--
> I get the following:
>
> Content analysis details: (5.7 points, 5.0 required)
>
> pts rule name description
> --
> --
> 0.1 FORGED_RCVD_HELO Received: contains a forged HELO
> 1.7 SARE_PROLOSTOCK
Ok, I've got one; apparently from a gmail user to my gmail account, then
forwarded from my gmail account to an external account. The html links
go to a blogspot.com site, then redirect to some Pharmacy Express site.
Raw Message: http://bubba.org/spam/spam_lowscore.txt
Message renders like t
> > Content analysis details: (5.7 points, 5.0 required)
> >
> > pts rule name description
> > --
> > --
> > 0.1 FORGED_RCVD_HELO Received: contains a forged HELO
> > 1.7 SARE_PROLOSTOCK_SYM3 BODY
Hi,
Rocco Scappatura wrote:
I get the following:
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
--
--
0.1 FORGED_RCVD_HELO Received: contains a forged HELO
1.7 SA
> Assuming this is your score line:
>
> > X-Spam-Status: No, score=2.5 required=5.0 >
> tests=AWL,BAYES_50,HTML_30_40, >
> HTML_MESSAGE,HTML_TEXT_AFTER_BODY,MIME_HTML_ONLY,SARE_PROLOSTOCK_SYM3
> > autolearn=no version=3.1.8
>
> Then the biggest difference is that my Bayesian scoring
Rocco Scappatura wrote:
Assuming this is your score line:
> X-Spam-Status: No, score=2.5 required=5.0 >
tests=AWL,BAYES_50,HTML_30_40, >
HTML_MESSAGE,HTML_TEXT_AFTER_BODY,MIME_HTML_ONLY,SARE_PROLOSTOCK_SYM3
> autolearn=no version=3.1.8
Then the biggest difference is that my Bayes
I haven't seen an sa-update for version 3.18 since Feb 23? Is that
right? I'm not sure how to check other than with sa-update -D which
reports "current version is 507739, new version is 507739, skipping
channel." I use Gentoo and I'm up-to-date with the latest version in
portage which is mai
Can anyone tell me why, when I run sa-update on Spamassassin 3.1.8
(installed on Gentoo from portage) I get this message:
Can't locate object method "finish" via package
"Mail::SpamAssassin::Timeout" at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/PluginHandler.pm line
187.
Hello,
a co-worker recently got a reply from a customer's mailserver stating
that his e-mail was SPAM and therefore has not been delivered.
I've analysed the scores and fixed most of them in our mail-application,
but the biggest one is FUZZY_OCR.
Here's a link to the image which is embedded into
Hi,
SA marked message from root as SPAM :) nice, he's the biggest SPAMmer in my
box, as one guy said.
Anyway, all I have is message ID, not the message itself, since SPAM action
is to delete.
How could I:
1) make SA forget this message(s) and re-learn them as ham,
If you no longer have the me
Hi All,
I have been using postfix 2.1.5/courier/spamassassin 3.0.0 on suse happily
for a couple of years.
Recently I decided to upgrade the mail server, which is a really old
machine, to a new one, and so I set about a fresh installation.
I installed opensuse 10.2, which comes with postfix 2.3.2
CPTeam Hostmaster wrote:
> Hi,
>
> SA marked message from root as SPAM :) nice, he's the biggest SPAMmer in my
> box, as one guy said.
>
> Anyway, all I have is message ID, not the message itself, since SPAM action
> is to delete.
>
Well, there's a reason they don't recommend doing this. The who
On Tue, 13 Mar 2007, Eric A. Hall wrote:
> Assuming you mean "X-Greylist" instead of "X Greylist", something
> like the following will either work or get you close:
>
> header L_MILTER_GREY X-Greylist =~ /^Sender succeeded SMTP Authentication/
> score L_MILTER_GREY -100
Be aware: unless milter-
Matt Kettler wrote:
> CPTeam Hostmaster wrote:
> > SA marked message from root as SPAM :) nice, he's the biggest
> > SPAMmer in my box, as one guy said.
> >
> > How could I:
> > 2) make SA skip messages from localhost
>
> Don't call it? Seriously, this question is best dealt with at that
> layer, s
On Wed, Mar 14, 2007 at 09:59:57AM -0400, Andy Figueroa wrote:
> I haven't seen an sa-update for version 3.18 since Feb 23? Is that
> right?
What makes you think it isn't the case?
> I'm not sure how to check other than with sa-update -D which
> reports "current version is 507739, new version
> > So you are saying that I have to train SA?
>
> That would be how you would improve your Bayes accuracy, yes.
I have trained SA on my server but I still get a score lower than 5.0..
Content analysis details: (4.3 points, 5.0 required)
pts rule name description
--
It's not hist word list, it's the list of the party he is sending his mail to.
Unfortunately the words 'service' and 'software' whih appear in his image are
in FuzzyOCR's standard word list.
Best thing to do in this case is either remove the image from you mails, or
request to be put on the whi
Brian Wilson wrote:
Ok, I've got one; apparently from a gmail user to my gmail account, then
forwarded to an external account. The html links go to a blogspot.com
site, then redirect to some Pharmacy Express site.
Raw Message: http://bubba.org/spam/spam_lowscore.txt
Message renders like th
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
Brian Wilson wrote:
Ok, I've got one; apparently from a gmail user to my gmail account, then
forwarded to an external account. The html links go to a blogspot.com
site, then redirect to some Pharmacy Express site.
Raw Message: http://bubba.o
Brian Wilson wrote:
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
Brian Wilson wrote:
Ok, I've got one; apparently from a gmail user to my gmail account,
then forwarded to an external account. The html links go to a
blogspot.com site, then redirect to some Pharmacy Express site.
Raw Me
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
> Anyway... this is the redirect code they're using:
>
>
> yvxj = "ef=";kacm = "ttp://";apgy = "fe";ioo = "'h";usf =
> "ershikin";uos = ".";iaswx = "inj";bdj = "com'";rpul = "l";fgbww =
> "nhu";wnx = "ocation.
> hr";jftrg = rpul + wnx + yv
Hi Guys,
Eric: Thank you for your response. I am trying what you suggested. Yes I
did mean X-Greylist and not X Greylist.
Of course after implementing it I also thought of testing what John warned
about below. And indeed milter-greylist does not purge pre existing
X-Greylist headers - I tested t
On Wed, 14 Mar 2007, John D. Hardin wrote:
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
Anyway... this is the redirect code they're using:
yvxj = "ef=";kacm = "ttp://";apgy = "fe";ioo = "'h";usf =
"ershikin";uos = ".";iaswx = "inj";bdj = "com'";rpul = "l";fgbww =
"nhu";wnx = "ocati
John D. Hardin wrote:
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
Anyway... this is the redirect code they're using:
yvxj = "ef=";kacm = "ttp://";apgy = "fe";ioo = "'h";usf =
"ershikin";uos = ".";iaswx = "inj";bdj = "com'";rpul = "l";fgbww =
"nhu";wnx = "ocation
Brian Wilson wrote:
On Wed, 14 Mar 2007, John D. Hardin wrote:
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
Anyway... this is the redirect code they're using:
yvxj = "ef=";kacm = "ttp://";apgy = "fe";ioo = "'h";usf =
"ershikin";uos = ".";iaswx = "inj";bdj = "com'";rpul = "l";fgbww
On Mar 14, 2007, at 7:08 PM, Daryl C. W. O'Shea wrote:
Brian Wilson wrote:
On Wed, 14 Mar 2007, John D. Hardin wrote:
On Wed, 14 Mar 2007, Daryl C. W. O'Shea wrote:
Anyway... this is the redirect code they're using:
yvxj = "ef=";kacm = "ttp://";apgy = "fe";ioo =
"'h";us
On Wednesday 14 March 2007 5:49 am, Rocco Scappatura wrote:
> > If you can post the full email (headers and body), I'll run it over my
> > system which has lots and lots of third party add on rules from
> > www.rulesemporium.com and others and see if I can make SA
> > score it high
> > enough for A
Theo, thanks for confirming that. My reason for asking is that through
Feb 23 I'd been seeing an update very roughly about once a week. That
was about the same time Gentoo provided 3.18-r1. So, now after three
weeks I was wondering if I'd broken something. (For those that don't
use Gentoo,
The perl process(es) initiated by amavisd + spamassassin
to handle email(s) are very often running up to 100 percent
of both CPUs, and staying there until killed. Then amavisd (master)
spawns another one or two, which each handle perhaps 10 to 20 emails
before
getting stuck once again.
A perl
hi,
i have my userpref in SQL db (postgres) on a remote machine am using SA 3.1.8.
the defination for userpref is:
Table "public.userpref"
Column | Type | Modifiers
-+--+--
41 matches
Mail list logo
