Re: Integrate Spamassassin in linux

2007-07-02 Thread Per Jessen
Paul Hurley wrote: > I've just moved my laptop to Ubuntu Feisty 7.04 and am very happy. > I'm still using Thunderbird as I'm happy, but am unsure on how to > integrate > Spamassassin into things. It's just me, although I get mail from > multiple pop accounts on different domains / servers. > Ide

Re: SA on iPhone yet?

2007-07-02 Thread Loren Wilton
Anyone get Spamassassin installed on their iPhone yet? And does it filter junk phone calls too, or just spam email? :-) Loren

SA on iPhone yet?

2007-07-02 Thread Robert - eLists
Anyone get Spamassassin installed on their iPhone yet? :-) - rh

Re: Integrate Spamassassin in linux

2007-07-02 Thread Bob Proulx
Paul Hurley wrote: > I realise this is a funny question, but here goes... Funny "Ha-Ha" or funny "strange"? :-) > but am unsure on how to integrate Spamassassin into things. It's > just me, although I get mail from multiple pop accounts on different > domains / servers. Since you are asking a

Re: *****SPAM***** Re: DNS list service to detect the registrar barrier

2007-07-02 Thread Lindsay Haisley
Nope, you're not. Marc's first example line quoted by Mouss hit 4 different spam rules for the same error, for a total of 9.3 points. Odd that the original post by Marc did't get flagged. The reference to perkel.com.rb . outht to flag 1 hit, not 4 for the same line in the email! If any on

Re: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Theo Van Dinter
On Mon, Jul 02, 2007 at 01:28:27PM -0700, Jo Rhett wrote: > Both of these assume I know every person who needs to e-mail me, and > everything they will send me. Theo, you're active in enough open > source projects to know better. Well, you just said you were receiving a large amount of "syste

Integrate Spamassassin in linux

2007-07-02 Thread Paul Hurley
I realise this is a funny question, but here goes... I usually run Spamassassin as part of SA Proxy for Win32, a pop3 proxy on Windows, where it works well, although a bit slow. I've just moved my laptop to Ubuntu Feisty 7.04 and am very happy. I'm still using Thunderbird as I'm happy, but a

Re: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Jo Rhett
On Jul 2, 2007, at 1:22 PM, Theo Van Dinter wrote: If these are from known good sources, just whitelist them (or skip SA altogether). Otherwise, if the names are specific, you could always use uridnsbl_skip_domain to bypass URIDNSBL checks on the parsed domains. Both of these assume I know e

Re: Error spamd in maillog

2007-07-02 Thread Theo Van Dinter
On Mon, Jul 02, 2007 at 03:49:30PM -0300, Niggas wrote: > >> Jul 2 15:16: 56 to mailserver spamc [19271]: connect you spamd on > >> 127.0.0.1failed, retrying (#1 of 3): Connection refused > > spamd_enable="YES" > spamd_flags="-u qscand -D -P -x -q -c -d -r /var/run/spamd.pid > --socketpath=/var/ru

Re: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Theo Van Dinter
On Mon, Jul 02, 2007 at 01:05:17PM -0700, Jo Rhett wrote: > I need to completely disable this over-opportunistic behavior. 90% > of my e-mails have either system output, or are concerning code > segments or router interfaces, etc, etc. I need these mails to get > through. > > At the very le

Re: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Jo Rhett
From: Jo Rhett [mailto:[EMAIL PROTECTED] I need to completely disable this over-opportunistic behavior. 90% of my e-mails have either system output, or are concerning code segments or router interfaces, etc, etc. I need these mails to get through. At the very least, common collisions like scri

RE: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Rosenbaum, Larry M.
> From: Jo Rhett [mailto:[EMAIL PROTECTED] > > > SA doesn't just look for full URLs, it looks for things that could be > > hostnames ala "copy www.example.com into your browser". > > This is fairly nonfunctional. I've been chasing around all sorts of > FPs that seem to hit pretty much every mess

Re: *****SPAM***** Re: DNS list service to detect the registrar barrier

2007-07-02 Thread arni
am i the only one getting a pretty solid false positive on the previous post? X-Spam-Report: * 0.0 DKIM_POLICY_SIGNSOME Domain Keys Identified Mail: policy says domain * signs some mails * 2.5 SARE_SPOOF_COM2COM URI: a.com.b.com * 2.0 SPOOF_COM2OTH URI: URI co

Re: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Jo Rhett
On Jun 30, 2007, at 6:23 PM, Theo Van Dinter wrote: On Sat, Jun 30, 2007 at 12:07:04PM -0700, Jo Rhett wrote: There's no URL in this message. What is it mis-matching against? When in doubt, run through "spamassassin -D": [9710] dbg: uridnsbl: domains to query: sync.pl svcolo.com Thanks for

Re: Error spamd in maillog

2007-07-02 Thread Duane Hill
On Mon, 2 Jul 2007 at 15:49 -0300, [EMAIL PROTECTED] confabulated: 2007/7/2, Duane Hill <[EMAIL PROTECTED]>: On Mon, 2 Jul 2007 at 15:22 -0300, [EMAIL PROTECTED] confabulated: > Good afternoon, > In my server of email it is appears the following error in maillog: > > Jul 2 15:16: 56 to mailse

Re: ClamAV in SA( was: SaneSecurity)

2007-07-02 Thread OliverScott
Is the following easy to do? I am a bt of a Linux novice I'm afraid... I have tried discarding at SMTP with ClamAV and Exim, and scanning in SA using the ClamAV plugin, but wasn't 100% happy with either solution (for the reasons you give). Any pointers would be greatfully accepted! >We do, an I

RE: Which version fuzzyocr

2007-07-02 Thread Gary V
Hello, On the fuzzyocr site I see 3.5.1 version is not SA 3.2.X compatible ? Is this true, or can I safely ignore :-) We have an older server with SA 3.2.0 and Fuzzyocr 2.3b and it works. Greetings.. Richard http://marc.info/?l=spamassassin-users&m=118254092310213 Gary V ___

URI & Redirects

2007-07-02 Thread Matt
I am seeing quite a few spams slip through that use a redirect at sites such as tinyurl, tripod, geocities, etc as a way to get around the URI filters. Any fix for this? Matt

Re: Blacklist a mailing list

2007-07-02 Thread Per Jessen
dougp23 wrote: > I am a member of a mailing list, and I can't get them to reply to me > to remove me from the list. > I have tried sending 'unsubscribe' to the list, to no avail. How about a postfix header check to reject all mails from this list? That should eventually get you unsubscribed. /

Re: A different approach to scoring spamassassin hits

2007-07-02 Thread Nix
On 2 Jul 2007, Justin Mason spake thusly: > > Tom Allison writes: >> For some years now there has been a lot of effective spam filtering >> using statistical approaches with variations on Bayesian theory, some >> of these are inverse Chi Square modifications to Niave Bayes or even >> CRM114

Re: Error spamd in maillog

2007-07-02 Thread Niggas
2007/7/2, Duane Hill <[EMAIL PROTECTED]>: On Mon, 2 Jul 2007 at 15:22 -0300, [EMAIL PROTECTED] confabulated: > Good afternoon, > In my server of email it is appears the following error in maillog: > > Jul 2 15:16: 56 to mailserver spamc [19271]: connect you spamd on > 127.0.0.1failed, retrying

Re: Error spamd in maillog

2007-07-02 Thread Duane Hill
On Mon, 2 Jul 2007 at 15:22 -0300, [EMAIL PROTECTED] confabulated: Good afternoon, In my server of email it is appears the following error in maillog: Jul 2 15:16: 56 to mailserver spamc [19271]: connect you spamd on 127.0.0.1failed, retrying (#1 of 3): Connection refused Jul 2 15:16: 56 to mai

Error spamd in maillog

2007-07-02 Thread Niggas
Good afternoon, In my server of email it is appears the following error in maillog: Jul 2 15:16: 56 to mailserver spamc [19271]: connect you spamd on 127.0.0.1failed, retrying (#1 of 3): Connection refused Jul 2 15:16: 56 to mailserver spamd [15754]: prefork: child states: II Jul 2 15:16: 57 to m

bayes for users with mysql

2007-07-02 Thread Bruno Henrique
Good day, I use an installation of the Spam assassin that it together with records the archives of bayes in the bank mysql the configurations of local.cf. How I make for each user of my server to have its separate archive bayes of excessively? Thz.

ClamAV in SA( was: SaneSecurity)

2007-07-02 Thread Jonas Eckerman
Craig Carriere wrote: Perhaps more a clamav question, but does anyone use the additional definitions for clam from SaneSecurity and are they helpful in the Spam Wars? We do, an I think they are. Currently I run two instances of clamd in our mail gateway. One instance has only the official Cl

Which version fuzzyocr

2007-07-02 Thread R.Smits
Hello, On the fuzzyocr site I see 3.5.1 version is not SA 3.2.X compatible ? Is this true, or can I safely ignore :-) We have an older server with SA 3.2.0 and Fuzzyocr 2.3b and it works. Greetings.. Richard

Re: Botnet problem

2007-07-02 Thread John Rudd
John D. Hardin wrote: On Mon, 2 Jul 2007, John Rudd wrote: What this option says is "do you trust your trusted networks to identify Botnet submitted messages before giving them to you?" In normal cases, you should be able to ... because, really, that's the point of _trusting_ them, isn't it?

Re: Botnet problem

2007-07-02 Thread John D. Hardin
On Mon, 2 Jul 2007, John Rudd wrote: > What this option says is "do you trust your trusted networks to > identify Botnet submitted messages before giving them to you?" > In normal cases, you should be able to ... because, really, that's > the point of _trusting_ them, isn't it? You trust them n

Re: Botnet problem

2007-07-02 Thread John Rudd
Jari Fredriksson wrote: Jari Fredriksson wrote: Somehow it seems to work, if I set botnet_pass_trusted in Botnet.cf to an *unknown* value. I used "none" here, but any unknown value will do. # If there are trusted relays, then look to see if there's a # public IP address; if so, then pass the

Re: A different approach to scoring spamassassin hits

2007-07-02 Thread Justin Mason
Tom Allison writes: > For some years now there has been a lot of effective spam filtering > using statistical approaches with variations on Bayesian theory, some > of these are inverse Chi Square modifications to Niave Bayes or even > CRM114 and other "languages" have been developed to impro

Re: Botnet problem

2007-07-02 Thread Jari Fredriksson
Jari Fredriksson wrote: > Somehow it seems to work, if I set botnet_pass_trusted in Botnet.cf > to an *unknown* value. > I used "none" here, but any unknown value will do. > > > # If there are trusted relays, then look to see if there's a > # public IP address; if so, then pass the message throu

Re: Botnet problem

2007-07-02 Thread Jari Fredriksson
Somehow it seems to work, if I set botnet_pass_trusted in Botnet.cf to an *unknown* value. I used "none" here, but any unknown value will do. # If there are trusted relays, then look to see if there's a # public IP address; if so, then pass the message through. botnet_pass_trusted n

Re: Confused about which bayes db gets used with spamc?

2007-07-02 Thread Matt Kettler
CptanPanic wrote: > Hello, > I run spamc from my procmail on incoming messages. Does this mean that all > messages are using root bayes_db? spamd/spamc will *NEVER* use root's bayes db. If spamd finds itself running as root it will setuid itself to nobody for safety. > If so why do the clients h

Re: USER_IN_SPF_WHITELIST missing for some mails

2007-07-02 Thread Matt Kettler
ram wrote: > I find the spamassassin's SPF checks extremely unreliable. A lot of > times I get SPF Fail of SPF Neutral for the same sender domain and IP > address. While it is supposed to pass > > The same mail shows SPF pass when I run SA on commandline > > Is there something wrong with my config

Re: Botnet problem

2007-07-02 Thread Jari Fredriksson
Matthias Keller wrote: > Jari Fredriksson wrote: >> I have an address, which has it's mx in external trusted network, >> which then hands it over to my own server. >> >> (...) >> >> Can I fix this problem somehow with configuration, or does it need >> something in the Botnet.pm? I'm not very goo

Re: Botnet problem

2007-07-02 Thread Matthias Keller
Jari Fredriksson wrote: I have an address, which has it's mx in external trusted network, which then hands it over to my own server. (...) Can I fix this problem somehow with configuration, or does it need something in the Botnet.pm? I'm not very good at perl.. Hi What have you got exact

Botnet problem

2007-07-02 Thread Jari Fredriksson
I have an address, which has it's mx in external trusted network, which then hands it over to my own server. Headers: Return-Path: <[EMAIL PROTECTED]> X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from localhost (localhost [127.0.0.1]) by pena.example.com (Postfix)

Re: Blacklist a mailing list

2007-07-02 Thread Matthias Haegele
Bob Proulx schrieb: dougp23 wrote: I am a member of a mailing list, and I can't get them to reply to me to remove me from the list. Because of what you are saying it is making me think this is matching a very common error pattern. Unfortunately it is human error and not a machine error. I as

Re: URIBL_BLACK matching on messages with no URLs in them...

2007-07-02 Thread Chris Lear
Jo Rhett wrote: Note: yes, uribl has their own mailing list. That server has been down for quite some time, so I gave up and posted it here in case someone is dual listed and can fix it. There's no URL in this message. What is it mis-matching against? This has been answered, but, if you're