procmail config remove no spamed mail

2008-07-01 Thread Philippe Couas
Hi, I have add procmail to my config to avoid most spam, but il delete others mails too. Do you have an idea ? Regards Philippe My /etc/procmailrc file [EMAIL PROTECTED] etc]# cat procmailrc # Spamassassin utilise le daemon spamd :0 fw | /usr/bin/spamc # si echec :0e {

Re: Lots of spam with the following snip

2008-07-01 Thread Matus UHLAR - fantomas
On 30.06.08 19:04, Steven W. Orr wrote: pGod dag,strong /strong/pspan /span a name=#qppp /abrbr***br Warning!br This letter contains a virus which has beenbr successfully detected and cured. br***br The part that's noteworthy is this: br***br Warning!br This letter contains a

Re: Spam Rate

2008-07-01 Thread Martin Gregorie
1. How many Spam detection rate if I am using default 3.2 configuration you would expect? I run the default configuration with language filtering (DE FR GB are OK_Languages) plus some personally developed rules. Bayes is purely auto-learn. %non-spam varies from day to day, within the range

Re: ways to check reason/error of rejected/bounced emails with calling customers

2008-07-01 Thread Matus UHLAR - fantomas
Please teach your mailer to wrap lines in a sane way... On 01.07.08 11:46, NGSS wrote: Many of our clients started to have problem sending emails to us after I inserted more strict SA rules . Previously our system was flooded with spams. So I decided to inserted them to the Existing

Re: Spam Rate

2008-07-01 Thread Matus UHLAR - fantomas
On 01.07.08 12:51, howard chen wrote: I am new to SA, I have read through some of the faq and wiki, so far can't find the average spam rate % detected by SA. I know it is not the same for everyone, but I want to get the feel of general statistics (If you don't mind to share) 1. How many

Re: procmail config remove no spamed mail

2008-07-01 Thread Matus UHLAR - fantomas
On 01.07.08 08:48, Philippe Couas wrote: I have add procmail to my config to avoid most spam, but il delete others mails too. Do not drop spam below some sane score (8 or 10). Configure spamassassin and teach bayes filter properly. -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ;

Re: Spam Rate

2008-07-01 Thread howard chen
Hi On Tue, Jul 1, 2008 at 3:42 PM, Matus UHLAR - fantomas [EMAIL PROTECTED] wrote: What do you mean spam rate? the amount of spam your mailservers will receive is quite independent on version of spamassassin. Yes, I would like to know if somewhere can find these info or anyone can share?

Re: Spam Rate

2008-07-01 Thread Matt Kettler
howard chen wrote: Hello, I am new to SA, I have read through some of the faq and wiki, so far can't find the average spam rate % detected by SA. I know it is not the same for everyone, but I want to get the feel of general statistics (If you don't mind to share) 1. How many Spam detection

Re: Lots of spam with the following snip

2008-07-01 Thread Justin Mason
Matus UHLAR - fantomas writes: On 30.06.08 19:04, Steven W. Orr wrote: pGod dag,strong /strong/pspan /span a name=#qppp /abrbr***br Warning!br This letter contains a virus which has beenbr successfully detected and cured. br***br The part that's noteworthy is this:

Avoid spam 'La Sante Est Bonne'

2008-07-01 Thread Philippe Couas
Hi, How could i avoid theses spam ? i have replace my company name by 'societe' Regards Philippe De : David Lxxx [mailto:[EMAIL PROTECTED] Envoyé : mardi 1 juillet 2008 13:36 À : 'Philippe Cxxx' Objet : TR: Maintenant, je Suis Encore en Bonne Sante. Un exemple de spam reçu en début

Re: Lots of spam with the following snip

2008-07-01 Thread Matus UHLAR - fantomas
On 30.06.08 19:04, Steven W. Orr wrote: pGod dag,strong /strong/pspan /span a name=#qppp /abrbr***br Warning!br This letter contains a virus which has beenbr successfully detected and cured. br***br The part that's noteworthy is this: br***br

Re: Spam Rate

2008-07-01 Thread Alex Woick
the same for everyone, but I want to get the feel of general statistics (If you don't mind to share) 1. How many Spam detection rate if I am using default 3.2 configuration you would expect? 2. If fine tuned according to the wiki, e.g. running sa-update, more rules set, how many % you would

Re: Lots of spam with the following snip

2008-07-01 Thread Justin Mason
Matus UHLAR - fantomas writes: On 30.06.08 19:04, Steven W. Orr wrote: pGod dag,strong /strong/pspan /span a name=#qppp /abrbr***br Warning!br This letter contains a virus which has beenbr successfully detected and cured. br***br The part that's

Re: Rules in local.cf are not read?

2008-07-01 Thread Simone Morandini
mouss-2 wrote: then maybe you are using the wrong expression. show the rule and a sample message that slips... The following message has been delivered to my inbox: Subject: Royal luxury of high-rank watches Body: Rep1!c@ watches presented at our store are available at the most

Re: Rules in local.cf are not read?

2008-07-01 Thread Anthony Peacock
Hi, Simone Morandini wrote: mouss-2 wrote: then maybe you are using the wrong expression. show the rule and a sample message that slips... The following message has been delivered to my inbox: Subject: Royal luxury of high-rank watches Body: Rep1!c@ watches presented at our store are

Re: IP country plugin - can we look for two countries?

2008-07-01 Thread McDonald, Dan
On Mon, 2008-06-30 at 17:17 -0500, McDonald, Dan wrote: On Mon, 2008-06-30 at 22:04 +0200, mouss wrote: McDonald, Dan wrote: On Sat, 2008-06-28 at 01:40 +0200, mouss wrote: mouss wrote: Is there some way to grab the metadata from IPCountry to count the number of

Re: MODERATION REQUEST: how to stop SPF checks from going past trusted host?

2008-07-01 Thread Michelle Konzack
Am 2008-06-27 08:17:11, schrieb Richard Frovarp: The list is setup without a reply to field. Look at the headers. Anyone hitting reply will get the individual who sent who sent the message, not the list. I'm guessing people are taking the shortcut of hitting reply all (so that they get the

Re: Avoid spam 'La Sante Est Bonne'

2008-07-01 Thread mouss
Philippe Couas wrote: Hi, How could i avoid theses spam ? i have replace my company name by 'societe' Block it in your postfix. here are some hints (that you may or may not be able to use): - its helo is not fqdn. so it can be blocked by reject_non_fqdn_helo_hostname - the PTR for

Re: IP country plugin - can we look for two countries?

2008-07-01 Thread mouss
McDonald, Dan wrote: On Mon, 2008-06-30 at 17:17 -0500, McDonald, Dan wrote: On Mon, 2008-06-30 at 22:04 +0200, mouss wrote: McDonald, Dan wrote: On Sat, 2008-06-28 at 01:40 +0200, mouss wrote: mouss wrote: Is there some way to grab the metadata

Re: Avoid spam 'La Sante Est Bonne'

2008-07-01 Thread SM
Hi Philippe, At 04:44 01-07-2008, Philippe Couas wrote: How could i avoid theses spam ? i have replace my company name by 'societe' [snip] X-Spam-Level: X-Spam-Status: No, score=4.7 required=6.2 tests=BAYES_50,HTML_MESSAGE, MR_NOT_ATTRIBUTED_IP,NO_RDNS,RCVD_IN_DYNABLOCK,RCVD_IN_SORBS,

Re: IP country plugin - can we look for two countries?

2008-07-01 Thread McDonald, Dan
On Tue, 2008-07-01 at 18:18 +0200, mouss wrote: McDonald, Dan wrote: On Mon, 2008-06-30 at 17:17 -0500, McDonald, Dan wrote: On Mon, 2008-06-30 at 22:04 +0200, mouss wrote: McDonald, Dan wrote: On Sat, 2008-06-28 at 01:40 +0200, mouss wrote: mouss

Re: Lots of spam with the following snip

2008-07-01 Thread mouss
Justin Mason wrote: [snip] On 01.07.08 10:50, Justin Mason wrote: no -- this is real spam, not a bounce in any way. same here. not a bounce in any way. Are you sure it's not just virus message sent by someone and cured by intermediate relay? Yes, seeing lots of this

Day Old Bread/Spammers

2008-07-01 Thread Mailing Lists
I'm getting dozens of emails daily from a few different spammers. The emails consistently are graphic based, but the graphics are html img refs and not consistent names - the last image in each one is their send mail to this address to be removed (or actually to guarantee even MORE spam).

Re: Day Old Bread/Spammers

2008-07-01 Thread Rob McEwen
Could you give an example? Are these newly registered top level domains spotted in the body of the spams? Rob McEwen Mailing Lists wrote: I'm getting dozens of emails daily from a few different spammers. The emails consistently are graphic based, but the graphics are html img refs and not

Re: Spam Rate

2008-07-01 Thread jdow
From: Matt Kettler [EMAIL PROTECTED] Sent: Tuesday, 2008, July 01 01:55 Certainly. Using an older release of SA against recent spam will result in significantly lower detection rates. The code really does matter quite a lot to detection rate. Things like tweaks to the HTML parser that deal

bad rules that likely to result in more false positives

2008-07-01 Thread NGSS
Thanks for the response. Yah I think it is just too aggressive, I included a handful of rules Is there any forum or website that discuss about (lists of ) rules that is likely to result in more false positives ? -Original Message- From: Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED]