Re: Low scores

2008-02-23 Thread Loren Wilton
I'm looking for people to have a look over these spams and give me some ideas of some possible areas for improvement (either score adjustments, configuration tweaks, plugins that I should try, etc.). The spams can be pulled from here: http://micah.riseup.net/spams It appears to me you have just

Re: mysql userpref not fetching whitelist_from

2008-02-23 Thread Daryl C. W. O'Shea
On 23/02/2008 9:46 AM, Mike wrote: > A clue perhaps is that for some reason the default config file > /etc/mail/spamassassin/local.cf is being read despite the use of -C. (I > know this since it has custom rules not present in the config I am using > to test the mysql userprefs). I'd resolve the t

Re: ALL_TRUSTED and DOS_OE_TO_MX

2008-02-23 Thread Daryl C. W. O'Shea
On 23/02/2008 8:34 PM, giga328 wrote: > I'm testing SpamAssassin and I'm getting false positives. Both tests > ALL_TRUSTED and DOS_OE_TO_MX are firing for emails sent by Outlook Express > for local clients and it seems like I have something wrong in *_networks. > Here is my setup: > All my servers

ALL_TRUSTED and DOS_OE_TO_MX

2008-02-23 Thread giga328
I'm testing SpamAssassin and I'm getting false positives. Both tests ALL_TRUSTED and DOS_OE_TO_MX are firing for emails sent by Outlook Express for local clients and it seems like I have something wrong in *_networks. Here is my setup: All my servers and my clients IP are in trusted_networks First

Re: Low scores

2008-02-23 Thread Matthias Leisi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Micah Anderson schrieb: | [surprisingly low scores] | The spams can be pulled from here: http://micah.riseup.net/spams Most (all?) of the samples are forwarded through some debian.org mechanism. In order for blacklists to take full effect, you sho

Low scores

2008-02-23 Thread Micah Anderson
I feel like a lot of pretty obvious spams are getting through my system with appallingly low scores. I'm starting to wonder if something may be wrong with my setup. Looking at what spam tests did fire, I'm frequently surprised that more rules didn't fire (obvious lotto scams and nigerian inher

Re: BAYES_00 and FN

2008-02-23 Thread Matus UHLAR - fantomas
> On 22.02.08 14:04, Robert Fitzpatrick wrote: > > I see a lot of messages hitting BAYES_00 and reducing enough to make it > > a FN. After some learning, problem solved, but still an issue for new > > message types. Is there a way to protect from this sort of thing? Like a > > recipe not to add the

Re: BAYES_00 and FN

2008-02-23 Thread Matus UHLAR - fantomas
On 22.02.08 14:04, Robert Fitzpatrick wrote: > I see a lot of messages hitting BAYES_00 and reducing enough to make it > a FN. After some learning, problem solved, but still an issue for new > message types. Is there a way to protect from this sort of thing? Like a > recipe not to add the bayes sco

Re: Pbl.spamhaus.org down?

2008-02-23 Thread Michael Scheidell
If you don't know what you are talking about, don't prove what an idiot you are. We have more than 100,000 users. We are a commercial service. They don't post the prices. Read the post again. -- Michael Scheidell, CTO >|SECNAP Network Security Winner 2008 Network Products Guide Hot Companies

Re: Pbl.spamhaus.org down?

2008-02-23 Thread Karsten Bräckelmann
On Sat, 2008-02-23 at 08:58 -0500, Michael Scheidell wrote: > > http://www.spamhaus.org/organization/dnsblusage.html > Maybe a link from pbl/zen pages to that would have helped. There is. Right there in the PBL main text. There are only two links, the second one reads 'Spamhaus DNSBL usage criter

RE: Pbl.spamhaus.org down?

2008-02-23 Thread Robert - elists
> Can't find commercial pricing, but 'corporate' pricing is $168,000 per > year > for unlimited use. (100,000 per year is only $10,000 per year) Michael Corporate up to 100 users is $500 a year http://www.spamhaus.org/datafeed/index.html click on the service price check button then select appr

mysql userpref not fetching whitelist_from

2008-02-23 Thread Mike
Hi, I have setup the mysql userprefs and it is working with one exception, From: addresses listed as being whitelisted in mysql are not triggering the SA whitelist scores. Other values like required_hits are being properly returned, so SA is able to connect and query mysql. I do not have the

Re: Pbl.spamhaus.org down?

2008-02-23 Thread Michael Scheidell
> From: mouss <[EMAIL PROTECTED]> > Date: Sat, 23 Feb 2008 14:48:04 +0100 > Cc: "users@spamassassin.apache.org" > Subject: Re: Pbl.spamhaus.org down? > > Michael Scheidell wrote: >>> From: Bob Amen <[EMAIL PROTECTED]> >>> Organization: O'Reilly Media, Inc. >>> Date: Fri, 22 Feb 2008 17:02:11 -08

Re: Pbl.spamhaus.org down?

2008-02-23 Thread Michael Scheidell
> From: mouss <[EMAIL PROTECTED]> > Date: Sat, 23 Feb 2008 14:48:04 +0100 > Cc: "users@spamassassin.apache.org" > Subject: Re: Pbl.spamhaus.org down? > > Michael Scheidell wrote: >>> From: Bob Amen <[EMAIL PROTECTED]> >>> Organization: O'Reilly Media, Inc. >>> Date: Fri, 22 Feb 2008 17:02:11 -08

Re: Pbl.spamhaus.org down?

2008-02-23 Thread mouss
Michael Scheidell wrote: From: Bob Amen <[EMAIL PROTECTED]> Organization: O'Reilly Media, Inc. Date: Fri, 22 Feb 2008 17:02:11 -0800 To: "users@spamassassin.apache.org" Subject: Re: Pbl.spamhaus.org down? Quite possibly. I think they're getting stricter regarding their fair use po

Re: Pbl.spamhaus.org down?

2008-02-23 Thread Michael Scheidell
> From: Bob Amen <[EMAIL PROTECTED]> > Organization: O'Reilly Media, Inc. > Date: Fri, 22 Feb 2008 17:02:11 -0800 > To: "users@spamassassin.apache.org" > Subject: Re: Pbl.spamhaus.org down? > > Quite possibly. I think they're getting stricter regarding their > fair use policy. One of my ser

Re: Pbl.spamhaus.org down?

2008-02-23 Thread Michael Scheidell
> From: SM <[EMAIL PROTECTED]> > Date: Fri, 22 Feb 2008 15:06:23 -0800 > To: Michael Scheidell <[EMAIL PROTECTED]>, > Subject: Re: Pbl.spamhaus.org down? > > This is odd. A query to zen.spamhaus.org returned two answers. You don't want to query .zen... Since it is a subzone. You want to query

Calling sambas did you firewall me? was: Pbl.spamhaus.org down?

2008-02-23 Thread Michael Scheidell
Sambas folks: (sorry, if someone knows someone, please fwd this. I didn't see any 'technical' contacts on their web site and I don't want to 'spam' them. Technical contact via whois says: [EMAIL PROTECTED] lets try that. Hey, google me. Go back to fdma.com days. I fought (hard) the usenet spam

Please help integrate spamassasin to ezmlm lists.

2008-02-23 Thread Mohan2005
Hello I have spamassasin work under qmail (qmailrocks.org). But there are lots of spams coming into the ezmlm mailing lists which are not filtered by spamassasin as they are not user accounts. Can someone please advice me on how to integrate Spamassasin to ezmlm lists please. Regards Mohan --

Re: "Nice girl like to chat" spam

2008-02-23 Thread Yet Another Ninja
On 2/23/2008 4:35 AM, [EMAIL PROTECTED] wrote: Say, if we're all getting the same spam, isn't that what we're paying sa-update to catch? :-) paying? who's charging you? what software/appliance/antispam device are you using?