Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Martin Hochreiter
Hi! Since I upgraded to Spamassassin 3.20 I get this (amavis) messages in my logfiles (for each incoming mail): May 29 08:21:05 linux1.rk /usr/sbin/amavisd[4365]: (04365-01) extra modules loaded: Mail/SpamAssassin/Locales.pm, Mail/SpamAssassin/Plugin/Bayes.pm,

Re: Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Mark Martinec
Martin, Since I upgraded to Spamassassin 3.20 I get this (amavis) messages in my logfiles (for each incoming mail) Amavis New 2.4.3 May 29 08:21:05 linux1.rk /usr/sbin/amavisd[4365]: (04365-01) extra modules loaded: Mail/SpamAssassin/Locales.pm, Mail/SpamAssassin/Plugin/Bayes.pm,

Re: Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Martin Hochreiter
@additional_perl_modules = qw( /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Locales.pm, /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Bayes.pm, /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/BodyEval.pm, /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Check.pm,

AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
I am using spamassassin 3.1.7 (even now) on SLES 9 (64-bit). I am having configuring the AutoWhitelist to work properly. Any help will be appreciated. Many thanks -- Sujit Choudhury ISLS University of Westminster Ext 3851 / 1779

Re: AutoWhitelist

2007-05-29 Thread Matt Kettler
Sujit Acharyya-Choudhury wrote: I am using spamassassin 3.1.7 (even now) on SLES 9 (64-bit). I am having configuring the AutoWhitelist to work properly. Any help will be appreciated. What are you trying to configure about it? It should be enabled by default, if not, uncomment this line

RE: AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
How about in local.cf setting use_auto_whitelist 1 -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: 29 May 2007 13:22 To: Sujit Acharyya-Choudhury Cc: users@spamassassin.apache.org Subject: Re: AutoWhitelist Sujit Acharyya-Choudhury wrote: I am using spamassassin

Re: SpamAssassin 3.2 compatiblity

2007-05-29 Thread Matthias Keller
decoder wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 after I saw that there are incompatiblities with SA 3.2 and FuzzyOcr, I decided to try to fix them although I'm still very busy (preparing for Bachelor thesis). There is still another problem though, the formatting of the rule

RE: AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
Sorry, my mistake. I have to set use_auto_whitelist 1. Thanks -Original Message- From: Sujit Acharyya-Choudhury [mailto:[EMAIL PROTECTED] Sent: 29 May 2007 13:37 To: Matt Kettler Cc: users@spamassassin.apache.org Subject: RE: AutoWhitelist How about in local.cf setting

RE: [3.2] BlackBerry Emails Being Tagged as Spam

2007-05-29 Thread Dan Barker
whitelist_from_rcvd *blackberry.com blackberry.com Dan -Original Message- From: sumnicexNY [mailto:[EMAIL PROTECTED] Sent: Monday, May 28, 2007 8:49 PM To: users@spamassassin.apache.org Subject: [3.2] BlackBerry Emails Being Tagged as Spam Hello, My hosting provider recently

RE: [3.2] BlackBerry Emails Being Tagged as Spam

2007-05-29 Thread AbbaComm.Net
whitelist_from_rcvd *blackberry.com blackberry.com Dan Dan, Is this valid and does it truly take care of ALL blackberry cases? - rh -- Abba Communications Spokane, WA www.abbacomm.net

RE: AutoWhitelist

2007-05-29 Thread AbbaComm.Net
I purposely set use_auto_whitelist 0 are any ISP's out there using AWL and finding it extremely effective to the zillionth power? - rh -- Abba Communications Spokane, WA www.abbacomm.net

RE: AutoWhitelist

2007-05-29 Thread Duane Hill
On Tue, 29 May 2007, AbbaComm.Net wrote: I purposely set use_auto_whitelist 0 are any ISP's out there using AWL and finding it extremely effective to the zillionth power? I have it shut off as well at the server level (local.cf). However, I do provide the option to be turned on at the per

what scores do you get on this

2007-05-29 Thread ram
This is a very intelligently written scam mail http://ecm.netcore.co.in/tmp/missed.txt I set my servers to pretty aggressive custom rules , but I am not able to catch this spam Bayes has messed up agreed but even not counting bayes almost no other rules hit. Notwithstanding using custom

RE: AutoWhitelist

2007-05-29 Thread Sujit Acharyya-Choudhury
I was interested in the following plugin and hence AutoWhitelist: SAGrey SAGrey is two-phased, in that it first looks to see if the current score of the current message exceeds the user-defined threshold value (as set in one of the cf files), and then looks to see if the message sender's email and

RE: what scores do you get on this

2007-05-29 Thread Koopmann, Jan-Peter
On Tuesday, May 29, 2007 4:53 PM ram wrote: This is a very intelligently written scam mail http://ecm.netcore.co.in/tmp/missed.txt I set my servers to pretty aggressive custom rules , but I am not able to catch this spam Bayes has messed up agreed but even not counting bayes almost no

sa-update - max children

2007-05-29 Thread Jean-Paul Natola
I just ran sa-supdate Now I see my perl going through the roof and my maillog now says prefork: child states: BB May 29 11:11:03 milter spamd[20122]: prefork: server reached --max-children setting, consider raising it This was not happening prior to sa-update I ran this morning These

RE: what scores do you get on this

2007-05-29 Thread ram
On Tue, 2007-05-29 at 17:09 +0200, Koopmann, Jan-Peter wrote: On Tuesday, May 29, 2007 4:53 PM ram wrote: This is a very intelligently written scam mail http://ecm.netcore.co.in/tmp/missed.txt I set my servers to pretty aggressive custom rules , but I am not able to catch this

Re: AutoWhitelist

2007-05-29 Thread Kris Deugau
AbbaComm.Net wrote: are any ISP's out there using AWL and finding it extremely effective to the zillionth power? I saw no reason to disable it when I first set up a spamfilter server for the small ISP I started working for originally. This was ~SA2.4, so there were no DNS-based URI tests and

RE: sa-update - max children

2007-05-29 Thread Jean-Paul Natola
I just ran sa-supdate Now I see my perl going through the roof and my maillog now says prefork: child states: BB May 29 11:11:03 milter spamd[20122]: prefork: server reached --max-children setting, consider raising it This was not happening prior to sa-update I ran this morning

check_main error in 3.20

2007-05-29 Thread Wilson A. Galafassi Jr.
Hello. I having this error at my spamassassin. check: no loaded plugin implements 'check_main': cannot scan! at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line 164 how i can fix this? Thanks Wilson Galafassi

RE: what scores do you get on this

2007-05-29 Thread Koopmann, Jan-Peter
On Tuesday, May 29, 2007 5:15 PM ram wrote: bayes_99 = 7.0. Oops dont you get FPs on that. Maybe once or twice a month. Other negative rules usually get the mails below 6 which is my spam threashold. Using MailScanner those mails are still delivered to my Junk Mail Folder in Outlook.

RE: sa-update - max children

2007-05-29 Thread Duane Hill
On Tue, 29 May 2007, Jean-Paul Natola wrote: I just ran sa-supdate Now I see my perl going through the roof and my maillog now says prefork: child states: BB May 29 11:11:03 milter spamd[20122]: prefork: server reached --max-children setting, consider raising it This was not

blocklist

2007-05-29 Thread Euroka
Hi, I just received a reply telling me my mail was recognised as spam. As I can tell from the header in the reply he is using an old version of SA and the following: URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist * [URIs: sovoxxx.be] Does this mean I'm blacklisted

AWL file permissions

2007-05-29 Thread Alex Howansky
Hello, I'm running SA 3.2.0 on FC6 via spamd. I'm using AWL with per-user configuration. I invoke spamd with: --virtual-config-dir=/whatever/%d/%l Thus, when a message arrives for [EMAIL PROTECTED], SA creates: /whatever/domain.com/ /whatever/domain.com/joe/

Re: Malformed UTF-8 character errors

2007-05-29 Thread Henry Kwan
Doc Schneider wrote: I just now committed more fixes for 70_sare_obfu.cf, obfu0 and obfu1. These should be available within the hour. Please folks if you have a problem with a rule set from SARE please let us know what rule it is and what rule set it is in. Hi Doc, I just updated my

Re: Malformed UTF-8 character errors

2007-05-29 Thread Doc Schneider
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Henry Kwan wrote: Doc Schneider wrote: I just now committed more fixes for 70_sare_obfu.cf, obfu0 and obfu1. These should be available within the hour. Please folks if you have a problem with a rule set from SARE please let us know what rule

Re: German Spam

2007-05-29 Thread Alex Woick
Apart from the imageshack stuff just seem to generally have a lot of spam in the german langauge getting through the filters, has anyone else experienced the same. Certainly. It's getting through, because there are almost no german language specific rules in the default rules of SpamAssassin,

RE: German Spam

2007-05-29 Thread Dan Barker
snip Interesting is the spelling. It seems to me the author of the spam messages isn't german or of very low education, since his spelling and style is really awful - like a child of 15 years. And the spam sending software doesn't seem to be able to handle german Umlauts (äöüßÄÖÜ). Well, perhaps

Re: German Spam

2007-05-29 Thread hamann . w
Hi Alex, thank you for this nice collection ... I had started to add a few of them. I agree with you that this spammer probably is not german, but I would guess that the person uses a dictionary / translator and is composing the message on a keyboard without umlauts. As for the imageshack:

Re: German Spam

2007-05-29 Thread Daryl C. W. O'Shea
For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf # SpamAssassin Channel:

Re: German Spam

2007-05-29 Thread Alex Woick
snip Well, perhaps that is a more generic spam indicator: german text but not a single Umlaut. I must think about that. /snip You'd want a length qualifier on that test. An email of simply Danke would contain a very small number of umlautsg. Perhaps, such a rule should look for frequently used

Re: German Spam

2007-05-29 Thread Alex Woick
For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf Interesting, it contains a collection of stock spam rules

problems with sa-update returning NXDOMAIN

2007-05-29 Thread bjquinn
Hi, I'm trying to get sa-update working with the default channel. It seems that no matter what I try I always get something like the following if I do a debug output on sa-update [30900] dbg: dns: query failed: 8.1.3.updates.spamassassin.org = NXDOMAIN This applies to SA version 3.1.8 and

What score do you get on this Nigerian Scam?

2007-05-29 Thread Ben Wylie
Can people scan the attached spam for me and let me know what scores they get? I got the following hits: ADVANCE_FEE_1, BAYES_00, HTML_MESSAGE Thanks Ben Received: from hood.systems.pipex.net (hood.systems.pipex.net [62.241.163.20]) by twilight.systems.pipex.net (Postfix) with ESMTP

RE: What score do you get on this Nigerian Scam?

2007-05-29 Thread Michael Scheidell
I wish you people would stop that crap. You are phucking up the AWL scored for users@spamassassin.apache.org If your SA doesn't pick that up, and you want to post a spam, post it to a web site and post a link. If you have a problem with yahoo, fwd that copy to yahoo. Or blacklist them. --

Re: Spamassassin 3.20 and Amavis-New

2007-05-29 Thread Mark Martinec
Martin, You got the syntax wrong, remove the commas, the qw Perl operator splits on whitespace and commas remain part of a filename. Removing the commas has one effect: Starting virus-scanner (amavisd-new):Subroutine is_charset_ok_for_locales redefined at

Re: problems with sa-update returning NXDOMAIN

2007-05-29 Thread Daryl C. W. O'Shea
bjquinn wrote: Hi, I'm trying to get sa-update working with the default channel. It seems that no matter what I try I always get something like the following if I do a debug output on sa-update [30900] dbg: dns: query failed: 8.1.3.updates.spamassassin.org = NXDOMAIN This applies to SA

Re: AutoWhitelist

2007-05-29 Thread Matt Kettler
Sujit Acharyya-Choudhury wrote: How about in local.cf setting use_auto_whitelist 1 Redundant, as it defaults to 1. It won't hurt anything, but it is not needed. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: 29 May 2007 13:22 To: Sujit

Re: What score do you get on this Nigerian Scam?

2007-05-29 Thread Richard Frovarp
Michael Scheidell wrote: I wish you people would stop that crap. You are phucking up the AWL scored for users@spamassassin.apache.org If your SA doesn't pick that up, and you want to post a spam, post it to a web site and post a link. If you have a problem with yahoo, fwd that copy to yahoo.

Re: Malformed UTF-8 character errors

2007-05-29 Thread Henry Kwan
Doc Schneider wrote: Not sure how you're using SA but I commented out every reference to CIALIS2 and just committed 1.00.11 so should be available within the hour. Also running CentOS 4.4 you know you can upgrade to perl 5.8.8 by doing a 'yum --enablerepo=centosplus update perl' as

How To Kill Spam Dead?

2007-05-29 Thread Eric Lemings
How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book, and the closest thing to an answer that I've found is the chapter in

Re: How To Kill Spam Dead?

2007-05-29 Thread Michele Neylon :: Blacknight
Eric Lemings wrote: How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book, and the closest thing to an answer that I've found

Re: How To Kill Spam Dead?

2007-05-29 Thread jdow
From: Michele Neylon :: Blacknight [EMAIL PROTECTED] Eric Lemings wrote: How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book,

Re: check_main error in 3.20

2007-05-29 Thread Theo Van Dinter
On Tue, May 29, 2007 at 12:36:32PM -0300, Wilson A. Galafassi Jr. wrote: I having this error at my spamassassin. check: no loaded plugin implements 'check_main': cannot scan! at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line 164 how i can fix this? Make sure that

Re: How To Kill Spam Dead?

2007-05-29 Thread SM
At 18:12 29-05-2007, Eric Lemings wrote: How do I use SpamAssassin (along with any other necessary mail software) to kill spam dead? I mean so that it doesn't even reach my mail spool directory. I've looked in FAQ after FAQ, site after site, book after book, and the closest thing to an

Re: German Spam

2007-05-29 Thread Anders Norrbring
Daryl C. W. O'Shea skrev: For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf # SpamAssassin Channel:

Broken perl module?

2007-05-29 Thread Simon Avery
Sometime yesterday, without me knowingly changing anything (maybe an apt-get upgrade), SA started throwing the following warnings on nearly every message. It still seems to be working okay and spam is being correctly ID'd, but the logfile's now full of these. I've tried copying a fresh copy