Re: are you doing sender address verification?

2008-06-18 Thread Matus UHLAR - fantomas
> At 19:10 17-06-2008, Sahil Tandon wrote: > >Just conjecture at this point, but it seems as though whenever I send an > >email to the SA mailing list, I receive sender address verification > >requests > >from: > > > >chlothar.bnv-bamberg.de > >sam.metaphysis.net On 17.06.08 23:47, SM wrote: > I

Re: sa-update and location of rules

2008-06-18 Thread Helmut Schneider
"Theo Van Dinter" <[EMAIL PROTECTED]> wrote: On Tue, Jun 17, 2008 at 09:56:49PM +0200, Helmut Schneider wrote: >FWIW, the directories and their order are well documented in the >spamassassin >POD. Could you please point me to the exact location? Thanks. (you could also use "man") $ perldoc

Re: are you doing sender address verification?

2008-06-18 Thread mouss
Sahil Tandon wrote: Just conjecture at this point, but it seems as though whenever I send an email to the SA mailing list, I receive sender address verification requests from: chlothar.bnv-bamberg.de This one is listed at backscatterer.org. sam.metaphysis.net

Re: [Rule Set proposal] French Rules

2008-06-18 Thread Justin Mason
John GALLET writes: > Hi, > > This is my first post on this list and first ruleset, so please point me > to the right place/documents if I am doing anything wrong. > > According to a search of this list on markmail.org, there have been few > subjects about spam in French and (no disrespect mea

Re: Header Analysis Problem

2008-06-18 Thread Carlos Velasco
Matus UHLAR - fantomas escribió: However the headers do not contain any information about using SMTP auth, so the SA does not know about it. Yes, that's the problem. "owa1.cnio.es" is a MS Exchange, I don't know how to do for it to put authentication information in the headers. I searched f

Header Analysis Problem

2008-06-18 Thread Carlos Velasco
Hello, I am getting these hits with the email below: AWL, FH_HELO_ALMOST_IP, HELO_DYNAMIC_SPLIT_IP, RCVD_IN_PBL Problem is in this "Received": Received: from 80.Red-88-31-96.staticIP.rima-tde.net ([88.31.96.80]) by owa1.cnio.es with Microsoft SMTPSVC(6.0.3790.3959); Tue, 17 Jun 2008

Re: are you doing sender address verification?

2008-06-18 Thread Jonas Eckerman
Sahil Tandon wrote: email to the SA mailing list, I receive sender address verification requests from: chlothar.bnv-bamberg.de sam.metaphysis.net Looking in our recent logs I can't see any SAV checks from them, but I do see connections from both hos

skip inbox ?

2008-06-18 Thread almaren
Is it possible to somehow tell spamassassin to move all messages marked as spam directly into the spam/ham/trash folders ? The thing is I'm running backups on my mailbox and although I omit spam/ham/trash I do collect the mails from my inbox, and in most cases there are 40-50 messages with subjec

Re: skip inbox ?

2008-06-18 Thread Randy Ramsdell
almaren wrote: Is it possible to somehow tell spamassassin to move all messages marked as spam directly into the spam/ham/trash folders ? The thing is I'm running backups on my mailbox and although I omit spam/ham/trash I do collect the mails from my inbox, and in most cases there are 40-50 mes

Re: Hotmail and Gmail spam getting through

2008-06-18 Thread Jonas Eckerman
Joseph Brennan wrote: But-- how do you count consecutive lines of raw /^=0A=$/ with the tool we are using? Not counting, but triggering on 5 or more: fullFRUKT_EMPTY_QP /\r?\n(?:=0A=\r?\n){5}/s (I'm not a rule guru, so it wouldn't suprise me if there are better ways.) Regards /Jonas -

Re: skip inbox ?

2008-06-18 Thread John Hardin
On Wed, 2008-06-18 at 07:20 -0700, almaren wrote: > Is it possible to somehow tell spamassassin to move all messages marked as > spam directly into the spam/ham/trash folders ? No. The only thing SpamAssassin does is assign a score to the message. Some other tool looks at that score and decides

Re: skip inbox ?

2008-06-18 Thread Duane Hill
On Wed, 18 Jun 2008, almaren wrote: Is it possible to somehow tell spamassassin to move all messages marked as spam directly into the spam/ham/trash folders ? The thing is I'm running backups on my mailbox and although I omit spam/ham/trash I do collect the mails from my inbox, and in most case

Re: skip inbox ?

2008-06-18 Thread almaren
well first of all - thanks for the quick response :) John Hardin wrote: > > You didn't explain your MTA tool chain, so we have no idea how to > recommend configuring it to change where messages scored as "spammy" get > saved. > > Tell us what does delivery (e.g. procmail) in your environment

Re: skip inbox ?

2008-06-18 Thread John Hardin
On Wed, 2008-06-18 at 07:45 -0700, almaren wrote: > > John Hardin wrote: > > > > Tell us what does delivery (e.g. procmail) in your environment and > > someone may be able to tell you how to configure delivery of spammy > > messages to a spam folder. > > I'm running qmail as MTA and courier-ima

OT: Re: skip inbox ?

2008-06-18 Thread Randy Ramsdell
almaren wrote: well first of all - thanks for the quick response :) John Hardin wrote: You didn't explain your MTA tool chain, so we have no idea how to recommend configuring it to change where messages scored as "spammy" get saved. Tell us what does delivery (e.g. procmail) in your enviro

Re: skip inbox ?

2008-06-18 Thread almaren
alright, thanks one more time :) -- View this message in context: http://www.nabble.com/skip-inbox---tp17983749p17985758.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: blocking country domains.

2008-06-18 Thread raulbe
Thanks i guess. I found a solution that has helped me reduce the amount of spam my sever was getting from .de domains. It has been around 80% effective but it works. I find this mailing list very useful. being a sort of newbie to spam assassin I had asked a general question but I did not expect

Re: blocking country domains.

2008-06-18 Thread Jack Pepper
Quoting raulbe <[EMAIL PROTECTED]>: Thanks i guess. ... sarcastic responses this question recieved. A simple "this is not a good idea and here is why.." would of suffice but thanks again to those who were helpful. Think of it as "hazing the new guy" or "good natured ribbing". especially

Re: Lint failed...how to fix?

2008-06-18 Thread Karsten Bräckelmann
> >> So here's what I have with rulesdujour: > >> > >>> Lint output: [5993] warn: config: failed to parse line, skipping, in > >>> "/etc/mail/spamassassin/70_sare_random.cf": >>> HTTP-EQUIV="Refresh" CONTENT="0.1"> > > > > You got a web page instead of the actual rules. Remove that file as > >

Re: skip inbox ?

2008-06-18 Thread Jari Fredriksson
> almaren wrote: >> Is it possible to somehow tell spamassassin to move all >> messages marked as spam directly into the spam/ham/trash >> folders ? >> The thing is I'm running backups on my mailbox and >> although I omit spam/ham/trash I do collect the mails >> from my inbox, and in most cases th

prefork error

2008-06-18 Thread raulbe
i started getting these errors recently spamd[28248]: prefork: child states: BBB spamd[28248]: prefork: server reached --max-children setting, consider raising it spamd[9708]: spamd: connection from localhost [127.0.0.1] at port 47029 spamd[9708]: spamd: setuid to parts succeeded

Re: skip inbox ?

2008-06-18 Thread Randy Ramsdell
Jari Fredriksson wrote: almaren wrote: Is it possible to somehow tell spamassassin to move all messages marked as spam directly into the spam/ham/trash folders ? The thing is I'm running backups on my mailbox and although I omit spam/ham/trash I do collect the mails from my inbox, and in

Re: prefork error

2008-06-18 Thread Benny Pedersen
On Wed, June 18, 2008 20:36, raulbe wrote: > What I did was edit etc/sysconfig/spamassassin and up the max from 8 to 10 > now that worked for a while but now the error has returned. What could be > causing the server not to be able to handle all the processes? problem might be that you mta acce

Re: trusted_networks

2008-06-18 Thread Benny Pedersen
On Sat, June 14, 2008 02:09, Jari Fredriksson wrote: >> Thank you, now my trusted_networks line looks like this: >> trusted_networks 192.168/16 208.47.184.3 208.47.184.2 >> Is that correct? Do I need the 192.168/16 entry? > I don't have it, my 10/8 lan network.. in my trusted. > I think your can t

Re: trusted_networks

2008-06-18 Thread Benny Pedersen
On Sat, June 14, 2008 02:42, Chris wrote: > Thanks, I'll discard it then, appreciate the help. so one more time, you now test remote servers ip that use rfc1918 servers pools waste Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: Spam getting scored but not tagged -- redux

2008-06-18 Thread Benny Pedersen
On Fri, June 13, 2008 17:56, Chris St. Pierre wrote: > Unfortunately, I really _liked_ Pyzor, and would like to be able to > run it. Thoughts? pyzor and pyzord is stable here more stable then razor, but i maked pyzord install here since i was tired of timeout on official pyzord servers, now wa

Re: blocking country domains.

2008-06-18 Thread mouss
raulbe wrote: Thanks i guess. I found a solution that has helped me reduce the amount of spam my sever was getting from .de domains. It has been around 80% effective but it works. There are more effective and safer ways. - configure your MTA to use zen.spamhaus.org. This blocked about 90%

Re: blocking country domains.

2008-06-18 Thread Michael Monnerie
On Donnerstag, 19. Juni 2008 mouss wrote: > - add selected SARE rules to SA. Incidentally, there is a german rule > file. And if you add them and ZMI_GERMAN and you STILL get german spam through, please contact me and we'll work on it. I maintain the ZMI_GERMAN ruleset, and in combination with S

Opera users please stand up -- call for help

2008-06-18 Thread Karsten Bräckelmann
I recently noticed some Opera MUA fakes in spam. Some very brief investigation already yielded some results. However, I want to back them up with as much correct data as possible. For that, I need Opera Mailer generated Message-Ids and the Opera headers including the version. How can you help?