Re: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread mouss
not007 wrote: I am using cpanel 11 and being told that I can't get spamassassin to rewrite the subject of emails that are spam. Spam assassin IS adding info in the header like: X-Spam-Subject: [SPAM] test message X-Spam-Status: Yes, score=1002.4 X-Spam-Score: 10024 X-Spam-Bar:

Another low scoring obvious spam message

2008-09-18 Thread Skip
What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 -- Get my PGP Public key here: http://pelorus.org/[EMAIL PROTECTED]

user_prefs brilliant indenting mode invented by me

2008-09-18 Thread jidanni
Gentlemen, I save wads of space in my user_prefs with header J_YAHOO_CAL X-Yahoo-Newman-Property=~/calendar-invite/ score J_YAHOO_CAL 11 header J_MEDIAWIKI_MAILER X-Mailer=~/MediaWiki mailer/ score J_MEDIAWIKI_MAILER -10 instead of the traditional header J_YAHOO_CAL

Re: user_prefs brilliant indenting mode invented by me

2008-09-18 Thread jidanni
Oh no oh no, man Mail::SpamAssassin::Conf says Whitespace in the files is not significant, but please note that starting a line with whitespace is deprecated, as we reserve its use for multi-line rule definitions, at some point in the future. OK, sorry. I regret my previous message. Wait.

Re: Another low scoring obvious spam message

2008-09-18 Thread mouss
Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 maybe header _CTYPE_PLAIN Content-Type =~ m|text/plain| header _CTRANSFER_B64 Content-Transfer-Encoding =~ m|base64| ...

Re: user_prefs brilliant indenting mode invented by me

2008-09-18 Thread mouss
[EMAIL PROTECTED] wrote: Oh no oh no, man Mail::SpamAssassin::Conf says Whitespace in the files is not significant, but please note that starting a line with whitespace is deprecated, as we reserve its use for multi-line rule definitions, at some point in the future. OK, sorry. I regret my

Re: How to integrate spamassassin in a web app?

2008-09-18 Thread xdmx
Hi, yep, i'm sorry about the 3 posts, wasn't because an edit, but because the nabble site which went timeout :( btw, i tried your solution and it works, thanks :) -- View this message in context: http://www.nabble.com/How-to-integrate-spamassassin-in-a-web-app--tp19542249p19552374.html Sent

RE: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread Bowie Bailey
mouss wrote: not007 wrote: I am using cpanel 11 and being told that I can't get spamassassin to rewrite the subject of emails that are spam. Spam assassin IS adding info in the header like: X-Spam-Subject: [SPAM] test message X-Spam-Status: Yes, score=1002.4 X-Spam-Score: 10024

RE: user_prefs brilliant indenting mode invented by me

2008-09-18 Thread Bowie Bailey
[EMAIL PROTECTED] wrote: Oh no oh no, man Mail::SpamAssassin::Conf says Whitespace in the files is not significant, but please note that starting a line with whitespace is deprecated, as we reserve its use for multi-line rule definitions, at some point in the future. OK, sorry. I regret my

Re: Another low scoring obvious spam message

2008-09-18 Thread John Hardin
On Thu, 18 Sep 2008, Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 (1) train your bayes with it (2) try the sought fraud ruleset that Justin is generating

RE: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread not007
header tests were not available in Outlook Express That's what I am seeing also that seems like a big deal - cpanel is used in lots of web hosting and spam assassin is needed these days. Not everyone uses outlook and OE is a free app that comes with windows (yeah, I guess you get what you

Re: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread not007
a rule based on the header text is doable in outlook, but not outlook express. mouss-2 wrote: not007 wrote: I am using cpanel 11 and being told that I can't get spamassassin to rewrite the subject of emails that are spam. Spam assassin IS adding info in the header like:

RE: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread John Hardin
On Thu, 2008-09-18 at 06:36 -0700, not007 wrote: But this WAS usable with OE before. Taking away a critical feature for the sake of new and improved is hard to push on clients, right? See .sig -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]

RE: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread SM
At 06:19 18-09-2008, Bowie Bailey wrote: This works on Outlook, but header tests were not available in Outlook Express the last time I checked. In Outlook Express, you can have a rule for the Subject line. Regards, -sm

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
On Thu, September 18, 2008 8:55 am, mouss wrote: Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 maybe header _CTYPE_PLAIN Content-Type =~ m|text/plain| header _CTRANSFER_B64 Content-Transfer-Encoding =~ m|base64| I wonder if

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
On Thu, September 18, 2008 9:33 am, John Hardin wrote: On Thu, 18 Sep 2008, Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 (1) train your bayes with it I am using bayes, but it didn't catch it. I was quite surprised at that.

Re: Another low scoring obvious spam message

2008-09-18 Thread Rick Macdougall
Skip Morrow wrote: On Thu, September 18, 2008 9:33 am, John Hardin wrote: On Thu, 18 Sep 2008, Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 (1) train your bayes with it I am using bayes, but it didn't catch it. I was quite

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
I am using bayes, but it didn't catch it. I was quite surprised at that. Doesn't look to me like you are using bayes. There is no bayes score in the headers. Oh. I thought I was. I do get reports in some messages. Here's the debug from this particular message: [12541] dbg: config: read

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
I am using bayes, but it didn't catch it. I was quite surprised at that. Doesn't look to me like you are using bayes. There is no bayes score in the headers. Oh. I thought I was. I do get reports in some messages. Here's the debug from this particular message: [12541] dbg: config: read

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
Sorry about the double post--operator error.

RE: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread RobertH
header tests were not available in Outlook Express This might be the wrong question in the wrong place yet in this day and age, why in the world is anyone using outlook express? Stop do it! ;- There are many other good choices. - rh

force Bayes DB to expire

2008-09-18 Thread Stefan Jakobs
Hello list, first I'm wondering why I got the following error, because in my local.cf I set 'bayes_auto_expire 1' to prevent SpamAssassin from expire the bayes-db (or did amavis the expire?): Sep 18 13:15:48 server amavis[19655]: (19655-04) (!)SA TIMED OUT, backtrace: at

Re: Another low scoring obvious spam message

2008-09-18 Thread John Hardin
On Thu, 18 Sep 2008, Skip Morrow wrote: Doesn't look to me like you are using bayes. There is no bayes score in the headers. Oh. I thought I was. I do get reports in some messages. Here's the debug from this particular message: [12541] dbg: config: read file

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
Silly question, but is peloruso the user that spamd is running as? user/database mismatch is a common problem. I'm not using spamd, I call spamassassin from procmail. I'm on a shared host that doesn't allow users to run their own daemons (although they are running their own spamd, but not

Re: Another low scoring obvious spam message

2008-09-18 Thread mouss
Skip Morrow wrote: On Thu, September 18, 2008 8:55 am, mouss wrote: Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 maybe header _CTYPE_PLAIN Content-Type =~ m|text/plain| header _CTRANSFER_B64 Content-Transfer-Encoding =~

Re: Another low scoring obvious spam message

2008-09-18 Thread mouss
Skip Morrow wrote: On Thu, September 18, 2008 9:33 am, John Hardin wrote: On Thu, 18 Sep 2008, Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 (1) train your bayes with it I am using bayes, but it didn't catch it. I was quite

Re: Another low scoring obvious spam message

2008-09-18 Thread mouss
Skip Morrow wrote: Sorry about the double post--operator error. fire operator :)

Re: force Bayes DB to expire

2008-09-18 Thread Michael Scheidell
Hello list, first I'm wondering why I got the following error, because in my local.cf I set 'bayes_auto_expire 1' to prevent SpamAssassin from expire the bayes-db (or did amavis the expire?): Ah? Bayes will auto expire if you set it for 'true' (1). Amavis doesn't do anything, with

sa-learn

2008-09-18 Thread Lars Ebeling
Is it possible to forward spam sent to me to an other user eg spam and run sa-learn on that mailbox? I will then be sender. -- Regards Lars Ebeling http://leopg9.no-ip.org Hobbithobbyist I am not young enough to know everything. -- Oscar Wilde

RE: spamassassin can't rewrite subject in cpanel 11?

2008-09-18 Thread Bowie Bailey
RobertH wrote: header tests were not available in Outlook Express This might be the wrong question in the wrong place yet in this day and age, why in the world is anyone using outlook express? Because it comes installed with every Windows computer. Quite a few (most?) people will

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
I am using bayes, but it didn't catch it. I was quite surprised at that. h... Content analysis details: (6.3 points, 5.0 required) pts rule name description -- -- 3.5 BAYES_99

More spam after disabling local BIND ?

2008-09-18 Thread Jules Yasuna
Configuration (maybe more than you care to see, sorry) -- 1) platform: kubuntu 8.04 2) SA version:3.2.4 3) options: add_header spam BB score=_SCORE_ report_safe 0 lock_method flock 4) using qmail - procmail - spamc - spamd ps ea | grep spam shows ...

Re: Another low scoring obvious spam message

2008-09-18 Thread John Hardin
On Thu, 18 Sep 2008, mouss wrote: (2) try the sought fraud ruleset that Justin is generating http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_sough t_fraud.cf I'm using that too, and again no joy there. It may be time for an sa-update though. sa-update and jm

Re: More spam after disabling local BIND ?

2008-09-18 Thread Jules Yasuna
Ok - that explains it - thank you very much. Really, many thanks ! But, is there a way to still not run BIND locally, and continue to benefit from the RBL filters? Perhaps there is a timeout associated with the RBL filters that can be increased? I understand that if such a timout option

Re: More spam after disabling local BIND ?

2008-09-18 Thread Blaine Fleming
Jules Yasuna wrote: Configuration (maybe more than you care to see, sorry) -- 1) platform: kubuntu 8.04 2) SA version:3.2.4 3) options: add_header spam BB score=_SCORE_ report_safe 0 lock_method flock 4) using qmail - procmail - spamc - spamd ps ea | grep spam shows

Re: sa-learn

2008-09-18 Thread John Hardin
On Thu, 18 Sep 2008, Lars Ebeling wrote: Is it possible to forward spam sent to me to an other user eg spam and run sa-learn on that mailbox? I will then be sender. Possible, yes. Recommended, no, for the reason you note: forwarding alters the message. Probably the best way is to set up an

Re: Another low scoring obvious spam message

2008-09-18 Thread mouss
Skip Morrow wrote: I am using bayes, but it didn't catch it. I was quite surprised at that. h... Content analysis details: (6.3 points, 5.0 required) pts rule name description -- -- 3.5 BAYES_99

Re: More spam after disabling local BIND ?

2008-09-18 Thread David B Funk
On Thu, 18 Sep 2008, Jules Yasuna wrote: [snip..] SA has been working great! Very few spam messages get through. Then, we made ONE change to the machine. We turned off BIND, and just resolve to the ISP name servers. After that, lots and lots of spam gets through ? Not everything, just a lot

Re: More spam after disabling local BIND ?

2008-09-18 Thread DAve
Jules Yasuna wrote: Ok - that explains it - thank you very much. Really, many thanks ! But, is there a way to still not run BIND locally, and continue to benefit from the RBL filters? Take a look at djbdns. We run dnscache on all servers that require the ability to do a DNS lookup and have

Re: Another low scoring obvious spam message

2008-09-18 Thread mouss
John Hardin wrote: On Thu, 18 Sep 2008, mouss wrote: (2) try the sought fraud ruleset that Justin is generating http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_sough t_fraud.cf I'm using that too, and again no joy there. It may be time for an sa-update

Re: How to integrate spamassassin in a web app?

2008-09-18 Thread Evan Platt
Bob Proulx wrote: Nabble! Bad Nabble! Let me be yet another voice complaining about how terrible Nabble is for mailing lists. AFAIK Nabble allows the user to modify sent messages. Every time they modify the message it sends the message again using the same Message-Id: as before. Grr... Nabble

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
sought != sought_fraud. Whoops! Thanks! Got it now, but still no hits in that rule set either.

Re: More spam after disabling local BIND ?

2008-09-18 Thread mouss
Jules Yasuna wrote: Ok - that explains it - thank you very much. Really, many thanks ! But, is there a way to still not run BIND locally, and continue to benefit from the RBL filters? Perhaps there is a timeout associated with the RBL filters that can be increased? I understand that if such

Re: Another low scoring obvious spam message

2008-09-18 Thread Skip Morrow
anyway, if your SA only misses few spam, there's no need to try to improve that with new rules. Yeah, this is the first spam I've gotten in about a month or maybe two. Still, I let it bug me too much. That, and it's slow at work today. I guess I'll just let it go.

Re: Another low scoring obvious spam message

2008-09-18 Thread John Hardin
On Thu, 18 Sep 2008, mouss wrote: John Hardin wrote: sought != sought_fraud. ah. missed that. just tried it, but I get the same results. That's not *too* surprising. At the moment the corpus for it is manually-collected fraud spams sent to me personally, and I don't necessarily see all

Re: How to integrate spamassassin in a web app?

2008-09-18 Thread Evan Platt
xdmx wrote: Hi, yep, i'm sorry about the 3 posts, wasn't because an edit, but because the nabble site which went timeout :( All the more reason to not use a web interface to a e-mail group. btw, i tried your solution and it works, thanks :) Who's solution? Who are you replying to?

Re: How to integrate spamassassin in a web app?

2008-09-18 Thread mouss
Evan Platt wrote: Bob Proulx wrote: Nabble! Bad Nabble! Let me be yet another voice complaining about how terrible Nabble is for mailing lists. AFAIK Nabble allows the user to modify sent messages. Every time they modify the message it sends the message again using the same Message-Id: as

testing spam gives warn config error

2008-09-18 Thread Kate Kleinschafer
Hi all, I have a new install of MailScanner / Postfix / Spamassassin when I run sudo -u postfix spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf -t message.MAI I get the following error: warn config path /root/ .spamassassin is inaccessible permission denied How can I resolve this

Re: testing spam gives warn config error

2008-09-18 Thread mouss
Kate Kleinschafer wrote: Hi all, I have a new install of MailScanner / Postfix / Spamassassin when I run sudo -u postfix spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf -t message.MAI I get the following error: warn config path /root/ .spamassassin is inaccessible permission denied

Re: testing spam gives warn config error

2008-09-18 Thread Kate Kleinschafer
I don't think I want to run it as root do I? (MailScanner is set to use user postfix) Which config file sets it to use /root/ directory? Thanks Kate mouss wrote: Kate Kleinschafer wrote: Hi all, I have a new install of MailScanner / Postfix / Spamassassin when I run sudo -u postfix

Re: testing spam gives warn config error

2008-09-18 Thread mouss
Kate Kleinschafer wrote: I don't think I want to run it as root do I? run the test command as root, not mailscanner. you have the error while running the test command. you don't have an error while running mailscanner. (MailScanner is set to use user postfix) I Don't use MS so I have no

Re: testing spam gives warn config error

2008-09-18 Thread Kate Kleinschafer
I am almost 100% certain that I need to be able to run this command as postfix. Kate mouss wrote: Kate Kleinschafer wrote: I don't think I want to run it as root do I? run the test command as root, not mailscanner. you have the error while running the test command. you don't have an error

what's the trick with sa-compile?

2008-09-18 Thread Len Conrad
FreeBSD 6.2 re2c-0.13.5 SpamAssassin version 3.2.5 running on Perl version 5.8.8 Wdeclaration-after-statement -I/usr/local/include -O2 -fno-strict-aliasing -pipe-DVERSION=\1.0\ -DXS_VERSION=\1.0\ -DPIC -fPIC -I/usr/local/lib/perl5/5.8.8/mach/CORE body_0.c cc -c

Re: More spam after disabling local BIND ?

2008-09-18 Thread Sahil Tandon
mouss [EMAIL PROTECTED] wrote: and if you don't want bind, try one of the available alternatives. but a local DNS is recommended on a mail server or spam filter that uses DNS. Regarding alternatives, we use djbdns here; highly recommended. -- Sahil Tandon [EMAIL PROTECTED]