They no longer hit enough spam to be worth keeping, so they were removed.
Just remove the scores when you upgrade.
Loren
Thanks,
I've suspected that :)
Leon
At 19:22 12-08-2007, Gene Heskett wrote:
And why not? They've been announced as available, so one would assume a
simple run of sa-update would pull them.
The PDFInfo plugin is available from SARE. There is a
non-spamassassin.org channel to get the updates using
sa-update. Note that
From: Evan Platt [EMAIL PROTECTED]
At 08:19 PM 8/12/2007, lynk wrote:
I'm totally confused re this spamassassin thingy... i can't seem to get MS
outlook to read the email i received (spam/ham) after spamassassin(3.1.9)
scanned the message.
You posted this 2 days ago. If no one answers
Tangaish.en wrote on Mon, 13 Aug 2007 10:22:45 +0800:
I want use rewrite_header To rewrite the spam mail rcpt to: address
to one accont named [EMAIL PROTECTED],
This won't work because rewriting a header doesn't change where the mail
goes. You have to do the redirection in the program that
i managed to find out what the problems are (or so i thought), but i could
not get a fix.. it seems that the parsed email get an extra newline char on
almost every message header:value pairs. (i.e. from:value
newlinenewline, tonewlinenewline , subjectnewlinenewline...). if
anyone can help me out
It looks like your message gets scanned twice as the report header is
added twice. As a first you may want to stop adding the spam report, then
the body won't get rewritten anymore.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Lynk wrote on Mon, 13 Aug 2007 01:43:21 -0700 (PDT):
if
anyone can help me out here, i'll be grateful
You seem to be using the same software that Nigel's company is using. Read
his posting. You will need to change that software. I don't know what this
spamc for Exchange is or if it is part
hi,
i already clear off the spam reports using clear_headers in my local.cf
still getting the same results... outlook still won't read my msg properly..
still came with the extra newline char at the end of each message
headers I'm searching for Nigel's posting as suggested by you.. but
i managed to find out what the problems are (or so i thought), but i could
not get a fix.. it seems that the parsed email get an extra newline char
on
almost every message header:value pairs. (i.e. from:value
newlinenewline, tonewlinenewline , subjectnewlinenewline...).
if
anyone can help me
On Monday 13 August 2007 07:12, Nigel Frankcom wrote:
[20:35] !JamesDR man, who ever wrote this ExchangeSpamC NEVER use
option explicit, therefore almost all of his vars (that he didn't
copy/paste from) weren't dimensioned
Sounds like Visual Basic... ;-P
--
Magnus Holmgren[EMAIL
Loren Wilton wrote:
i managed to find out what the problems are (or so i thought), but i
could
not get a fix.. it seems that the parsed email get an extra newline char
on
almost every message header:value pairs. (i.e. from:value
newlinenewline, tonewlinenewline ,
lynk, your comments are indistinguishable from Loren's quoted text. A
means quoted text, please do not put before your own answer!
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Hi,
I want to be able to make SA rotate DNS servers. SA even now probes my
DNS for availability every now and then, so it could react to server
failrues, ie change active DNS server. It could even query another
server when the active one timed out while answering a
(single/several) requests.
Pawel Sasin writes:
Hi,
I want to be able to make SA rotate DNS servers. SA even now probes my
DNS for availability every now and then, so it could react to server
failrues, ie change active DNS server. It could even query another
server when the active one timed out while answering a
output file. Then i followed instructions and installed Exchange SMTP
Transport Event Sink provided by christopher
lewis(http://www.christopherlewis.com/ESA/ExchangeSpamAssassin.htm). OE
is
stilll able to read the output from the sample-spam.txt when i tested it
Ok. Here's a theory. The
Loren Wilton wrote on Mon, 13 Aug 2007 05:28:09 -0700:
Short of managing to get in touch with the author of the sink and getting
him to fix it
I would surely contact the author as he seems to maintain this program. On
top of that page there is:
6/17/2007 ESA and SpamAssassin have been tested
Bug 5581 / patch attachment 4081 seems to solve my problem
BTW Mark, very nice DNS timings in debug output :)
Thanks for trying it out!
Regards
Mark
On 13/08/07 14:50, Mark Martinec wrote:
Bug 5581 / patch attachment 4081 seems to solve my problem
BTW Mark, very nice DNS timings in debug output :)
Thanks for trying it out!
Regards
Mark
welcome, though I obviously meant Bug 5589 (for the benefit of others
trying to find out what
Hello,
I've got this problem, empty messages (with attachments of course, and
existing subject) are hit pretty hard by SA rules, namely:
RAZOR2_CF_RANGE_51_100=0.5,
RAZOR2_CF_RANGE_E4_51_100=1.5,
RAZOR2_CHECK=0.5,
TVD_SPACE_RATIO=2.219
With treshold set at 4.5 points, most of these messages
I didn't see a header for a listowner contact.. I did see a 'help',
but not sure if that goes to a human or not.
I'm getting a OOO e-mail for every post to the list (yes, 3 so far,
this will make 4) from Tom Stockton. I can e-mail the headers if
there's no Tom Stockton subscribed.. But can
On Tue, Aug 07, 2007 at 04:13:03PM +0530, Chaitu wrote:
Bayesian Poisoning..
On 07.08.07 13:46, Henrik Krohns wrote:
...is a myth.
do spammers care if it's a myth?
--
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
-Original Message-
From: McDonald, Dan [mailto:[EMAIL PROTECTED]
Sent: Friday, August 03, 2007 6:40 PM
To: Jean-Paul Natola
Subject: Re: what happend after 3.1.8?
On Fri, 2007-08-03 at 18:30 -0400, Jean-Paul Natola wrote:
Hi all,
this is sort of a re-post , as I never saw a reply.
On Monday 13 August 2007, Kai Schaetzl wrote:
Evan Platt wrote on Mon, 13 Aug 2007 06:33:04 -0700:
Tom Stockton
Ah, it's coming from this list, I put his domain in my access.db one or
two days ago.
Those people subscribing from subject-to-autoreply messages are definitely
annoying me :-(
Kai
On Monday 13 August 2007, SM wrote:
At 19:22 12-08-2007, Gene Heskett wrote:
And why not? They've been announced as available, so one would assume a
simple run of sa-update would pull them.
The PDFInfo plugin is available from SARE. There is a
non-spamassassin.org channel to get the updates
I would not use ExchangeSpamC (I had to mod it HEAVLY to make it work,
after I get done testing the mods I did, I'm going to let the author
know of the issues I found) it is not viable at this point in time for
production use.
If the OP would like to test my mods, contact me off list and I will
The fix is in 3.2.3.
Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
-Original Message-
From: Jean-Paul Natola [mailto:[EMAIL PROTECTED]
Sent: 13 August 2007 14:49
Cc: users@spamassassin.apache.org
Subject: RE: what happened after 3.1.8?
Evan Platt wrote on Mon, 13 Aug 2007 06:33:04 -0700:
Tom Stockton
Ah, it's coming from this list, I put his domain in my access.db one or
two days ago.
Those people subscribing from subject-to-autoreply messages are definitely
annoying me :-(
Kai
--
Kai Schätzl, Berlin, Germany
Get your
Since its not in the ports tree yet- ( that's how I usually upgrade)
Do I just fetch the file, unzip it in the p5-Mail-SpamAssassin directory,
and run make deinstall; make reinstall?
-Original Message-
From: Randal, Phil [mailto:[EMAIL PROTECTED]
Sent: Monday, August 13, 2007 10:02
I've been working on a new way to auto-generate body rules recently -- I
discussed it on my blog at http://taint.org/2007/03/05/134447a.html and
http://taint.org/2007/08/04/200125a.html . Anyway, the results are
checked into SVN trunk daily in the rulesrc/sandbox/jm/20_sought.cf
file.
We haven't
At 06:49 AM 8/13/2007, Matus UHLAR - fantomas wrote:
On 07.08.07 13:46, Henrik Krohns wrote:
...is a myth.
do spammers care if it's a myth?
It seems it would also do something to the AWL (the automatic
NOT_A_WHITELIST list).
--
Jerry Durand, Durand Interstellar, Inc.
I hadn't run across this blacklist before, seems our ISP is on it
(guess I have to contact them)...
Recipient address: [EMAIL PROTECTED]
Reason: Remote SMTP server has rejected address
Diagnostic code: smtp;550 5.7.1 [EMAIL PROTECTED]... Your
domain does not have a working abuse
Gene Heskett wrote on Mon, 13 Aug 2007 10:24:15 -0400:
All copies of the same exact file, by hand. Should I delete the one
in /var/lib/perl5?
You can and should delete all that are not in use. The ones loaded with a
.pre file is in use, the others aren't.
[28645] dbg: rules: meta test
On Mon, 13 Aug 2007 06:33:04 -0700, Evan Platt
[EMAIL PROTECTED] wrote:
I didn't see a header for a listowner contact.. I did see a 'help',
but not sure if that goes to a human or not.
I'm getting a OOO e-mail for every post to the list (yes, 3 so far,
this will make 4) from Tom Stockton. I
i use sa-update to update/maintain three separate source channels of rules,
sudo -u spam sa-update --channelfile DIST-ch.conf
sudo -u spam sa-update --channelfile SARE-ch.conf --gpgkey 856AA88A
sudo -u spam sa-update --channelfile JMAS-ch.conf --gpgkey 6C6191E3
where,
i use sa-update to update/maintain three separate source channels of rules,
sudo -u spam sa-update --channelfile DIST-ch.conf
sudo -u spam sa-update --channelfile SARE-ch.conf --gpgkey 856AA88A
sudo -u spam sa-update --channelfile JMAS-ch.conf --gpgkey 6C6191E3
where,
At 09:23 AM 8/13/2007, Nigel Frankcom wrote:
I just blacklisted him at the MTA, as I do with all auto-responders
that hit me more than once. As I believe Lauren once said it makes me
want to crawl back up the line and hit them in the face with a spade
though I'm not certain the comment was aimed
At 09:31 AM 8/13/2007, Kai Schaetzl wrote:
Better ask the other side for whitelisting you or abandon that obscure
RBL.
The other side is somebody on THIS list.
--
Jerry Durand, Durand Interstellar, Inc. www.interstellar.com
tel: +1 408 356-3886, USA toll free: 1 866 356-3886
Skype:
Hi Gene,
At 07:24 13-08-2007, Gene Heskett wrote:
Ok, but the above spamassassin check also reports this, near the end of the
report:
[28645] dbg: rules: meta test DIGEST_MULTIPLE has undefined
dependency 'DCC_CHECK'
This meta test depends on the DCC plugin. You can ignore the
warning. The
Jerry Durand wrote on Mon, 13 Aug 2007 08:47:13 -0700:
I hadn't run across this blacklist before,
it's an obscure list that lists whole TLDs and makes up their own rules.
seems our ISP is on it
(guess I have to contact them)...
snowcrash+sa writes:
i (think i) can simply cobble up a script to only re-compile rules for
those channel files that HAVE been updated/changed, but though i'd ask
here first ...
*is* there an already available/clever script or process already
available that would only re-compile those
hi jason,
If I understand correctly, part of the recompile process includes removing
redundant regexps. It can only do this if all rulesets are available at
compile
time for comparison.
hm. if that *is* the case, then you've got a point.
just seems that if we're sa-update'ing multiple
Unfortunately -- not yet. It'll take code changes to sa-compile,
specifically to cache the base strings somewhere so they don't have to
be re-extracted next time.
could you open an enhancement request on the bugzilla for this?
will do.
thanks!
could you open an enhancement request on the bugzilla for this?
fyi: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5594
snowcrash+sa writes:
hi jason,
If I understand correctly, part of the recompile process includes removing
redundant regexps. It can only do this if all rulesets are available at
compile
time for comparison.
hm. if that *is* the case, then you've got a point.
That is indeed the
At 09:35 13-08-2007, Evan Platt wrote:
I prefer (yeah, maybe it's stupidity) to let someone know I drop
them by bouncing (not dropping).
I assume you mean rejecting and not bouncing.
This is Postfix, and I generally add a header check, and Reject, ie
/[EMAIL PROTECTED]/ Reject
Jerry Durand wrote on Mon, 13 Aug 2007 09:37:16 -0700:
The other side is somebody on THIS list.
Well, then they know what to do ;-)
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Over the past few days, I’ve been seeing a ton of spam with every second letter
replace with punctuation or other symbol that are getting past SA. Are there
any Rulesets out there that can take care of this? I am using SARE and most of
the SA plugins. You can see a sample here:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including zen?
I tried this in local.cf:
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including zen?
I
On Mon, Aug 13, 2007 at 03:55:52PM -0500, Fletcher Mattox wrote:
But it seems not to work. I still see lots of outgoing queries with
tcpdump, and I still get these debug messages:
[30474] dbg: dns: checking RBL zen.spamhaus.org., set zen
[30474] dbg: dns: launching DNS A query for
On Mon, 13 Aug 2007, Fletcher Mattox wrote:
score RCVD_IN_SBL 0
score RCVD_IN_XBL 0
score RCVD_IN_PBL 0
[30474] dbg: dns: timeout for zen, __RCVD_IN_ZEN,
-^
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
[EMAIL
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including zen?
I
At 13:42 13-08-2007, Jason Bennett wrote:
Over the past few days, I've been seeing a ton of spam with every
second letter replace with punctuation or other symbol that are
getting past SA. Are there any Rulesets out there that can take
care of this? I am using SARE and most of the SA
Thanks.. The message I get is actually text, I put it in an image for
simplicity for myself.
-Original Message-
From: SM [mailto:[EMAIL PROTECTED]
Sent: Monday, August 13, 2007 3:18 PM
To: users@spamassassin.apache.org
Subject: Re: Punctuation Spam Lately
At 13:42 13-08-2007, Jason
Jason Bennett wrote:
Over the past few days, I’ve been seeing a ton of spam with every second
letter replace with punctuation or other symbol that are getting past SA.
Are there any Rulesets out there that can take care of this? I am using SARE
and most of the SA plugins. You can see a
On Mon, 13 Aug 2007, Bill Landry wrote:
Jason Bennett wrote:
Over the past few days, I've been seeing a ton of spam with every second
letter replace with punctuation or other symbol that are getting past SA.
Are there any Rulesets out there that can take care of this? I am using
Theo Van Dinter wrote:
On Mon, Aug 13, 2007 at 03:55:52PM -0500, Fletcher Mattox wrote:
But it seems not to work. I still see lots of outgoing queries with
tcpdump, and I still get these debug messages:
[30474] dbg: dns: checking RBL zen.spamhaus.org., set zen
[30474] dbg: dns: launching
Theo Van Dinter writes:
Alternately, add a spamhaus.org zone to your name server w/ no entries so
that queries return instantly.
Perfect! Thanks, Theo.
Fyi, even with
score __RCVD_IN_ZEN 0
score RCVD_IN_SBL 0
score RCVD_IN_XBL 0
score RCVD_IN_PBL 0
I still see
John Rudd wrote:
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus
Fletcher Mattox wrote:
John Rudd wrote:
Fletcher Mattox wrote:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop
Sorry for jumping in late to this thread.. But, I currently run SA3.18
with a similar yet different Exchange Sink and have no such problems as
the original poster.
Steven
-Original Message-
From: Loren Wilton [mailto:[EMAIL PROTECTED]
Sent: Monday, August 13, 2007 5:28 AM
To:
James MacLean wrote, on 15/07/07 05:05 PM:
Subject:
Re: PDFText Plugin for PDF file scoring - PDFText2.pm for ver 3.2
From:
James MacLean [EMAIL PROTECTED]
Date:
Sun, 15 Jul 2007 17:05:38 -0300
To:
users@spamassassin.apache.org
To:
users@spamassassin.apache.org
Theo Van Dinter wrote, on
Fletcher,
In the meantime, while you are waiting on finalizing the spamhaus contract, you
are welcome to test drive my ivmSIP.com DNSBL for free. I mention this
because, while my dnbsl is not meant to replace SpamHaus, it would probably
take the edge off the pain of you not having SpamHaus for
Jean-Paul Natola wrote:
Since its not in the ports tree yet- ( that's how I usually upgrade)
FWIW: The devs are working on rolling a 3.1.10 release, although it
isn't a rush project at the moment.
AFAIK, they have all the blocking bugs fixed, and sometime soonish I'd
expect they'll roll a
On Mon, 13 Aug 2007 at 17:02 -0400, [EMAIL PROTECTED] confabulated:
You need to find the source rules and set them to zero, ala:
$ grep spamhaus.org
/var/lib/spamassassin/3.001008/updates_spamassassin_org/*.cf | awk '/check_rbl/
{ print $2 }'
__RCVD_IN_ZEN
RCVD_IN_XBL
RCVD_IN_PBL
Set those
On Tue, Aug 14, 2007 at 02:07:20AM +, Duane Hill wrote:
Wouldn't these changes get overwritten by the next sa-update performed?
I'm just asking to solidify my thoughts.
Nope. You set the score in your site config dir
(/etc/mail/spamassassin/local.cf), which doesn't change via sa-update.
Never mind. I understand. Set the scores to zero within local.cf. Forgive
the noise.
On Tue, 14 Aug 2007 at 02:07 -, [EMAIL PROTECTED] confabulated:
On Mon, 13 Aug 2007 at 17:02 -0400, [EMAIL PROTECTED] confabulated:
You need to find the source rules and set them to zero, ala:
$ grep
Sorry for jumping in late to this thread.. But, I currently run SA3.18
with a similar yet different Exchange Sink and have no such problems as
the original poster.
Steven
So which sink do you use? Maybe he should use it instead?
Loren
Kestutis wrote:
Hello,
I've got this problem, empty messages (with attachments of course, and
existing subject) are hit pretty hard by SA rules, namely:
RAZOR2_CF_RANGE_51_100=0.5,
RAZOR2_CF_RANGE_E4_51_100=1.5,
RAZOR2_CHECK=0.5,
TVD_SPACE_RATIO=2.219
With treshold set at 4.5 points, most
so I have to make two calls to learn?
ie. one to forget and another to relearn?
never is learning combined with forgetting right?
Kai Schaetzl wrote:
Jo Rhett wrote on Sat, 11 Aug 2007 09:31:05 -0700:
No, I didn't. I asked where a given rule was. I was given a reference
to a page that described how to set up sa-update.
You were given the exact name of the rule, that reference to sa-update was
an additional courtesy
FYI I'd like to point out that this quoted reply is very insulting in
tone. Golly gee wonder, Bob, there might be information on web page?
No kidding.
Now, why do you think I didn't understand the reference? Because he
didn't explain it. He send me the opening page to a very large topic
On Monday 13 August 2007, Kai Schaetzl wrote:
Gene Heskett wrote on Mon, 13 Aug 2007 10:24:15 -0400:
All copies of the same exact file, by hand. Should I delete the one
in /var/lib/perl5?
You can and should delete all that are not in use. The ones loaded with a
.pre file is in use, the others
On Tue, Aug 14, 2007 at 10:32:56AM +0700, Robert Nicholson wrote:
ie. one to forget and another to relearn?
never is learning combined with forgetting right?
One call is sufficient. If the message was previously learned the wrong way,
it'll be forgotten for you, then learned the way you
-Original Message-
From: Loren Wilton [mailto:[EMAIL PROTECTED]
Sent: Monday, August 13, 2007 8:02 PM
To: users@spamassassin.apache.org
Subject: Re: MS outlook can't read parsed email... HELP!!
Sorry for jumping in late to this thread.. But, I currently run
SA3.18 with a
I can understand this but also consider another approach that if
_you_ don't use bayes.. ie. this is the error that is shown when it's
turned off but you still call learn
possibly it would be nicer to fail gracefully instead of assuming a
reference to bayes exist if learn is called?
Can't call method learn on an undefined value at Mail/SpamAssassin/
PerMsgLearner.pm line 133.
at Mail/SpamAssassin/PerMsgLearner.pm line 133
I can understand this but also consider another approach that if
_you_ don't use bayes.. ie. this is the error that is shown when it's
turned off
77 matches
Mail list logo
