Re: False Positive on SUBJECT_FUZZY_TION rule

John Hardin wrote: On Tue, 30 Sep 2008, Ned Slider wrote: header SUBJECT_FUZZY_TION Subject =~ /P3>(?!tion)/i is hitting on ham from a mailing list with the following subject line: Subject: Re: [CentOS] mount UFS partition on CentOS 5. A test email containing just the text "partition"

Re: Identifying headers for users@spamassassin.apache.org

Don Saklad wrote: It would be better to have the header something like Subject: [EMAIL PROTECTED] No. It is more efficient to use better mail software. This has already been discussed here and on other lists (search the archives). See also: http://www.w3.org/Mail/subject-tagging http://too

Re: Identifying headers for users@spamassassin.apache.org

Thank you! I'm looking for a workaround, a kludge so that for my subscription to users@spamassassin.apache.org the header line of messages would appear for example something like Subject: [usersspamassassin] identifying headers with the bracketed name of the list inserted into every list message

Re: Identifying headers for users@spamassassin.apache.org

Regarding your Subject, that would be these *existing* identifying headers, as already pointed out: List-Post: List-Id: See RFC 2919 [1]. On Wed, 2008-10-01 at 06:39 -0400, Don Saklad wrote: > I'm looking for a workaround, a kludge so that for my subscrip

Re: Identifying headers for users@spamassassin.apache.org

Of the many many subscriptions this is the only subscription that doesn't have a bracketed list name inserted in the header subject. Programming solutions don't work for users not programmers!

Re: Identifying headers for users@spamassassin.apache.org

On Wednesday 01 October 2008 14:05:11 Don Saklad wrote: > Of the many many subscriptions this is the only subscription that > doesn't have a bracketed list name inserted in the header subject. > > Programming solutions don't work for users not programmers! Discussing this further might just lead t

Re: Identifying headers for users@spamassassin.apache.org

Don Saklad wrote: > Of the many many subscriptions this is the only subscription that > doesn't have a bracketed list name inserted in the header subject. > > Programming solutions don't work for users not programmers! > > This shouldn't be a programing solution. It's the RFC standardized way to

Re: Identifying headers for users@spamassassin.apache.org

What do the jargon terms mean?... in On Wed, Oct 1, 2008 at 8:35 AM, Arvid Ephraim Picciani <[EMAIL PROTECTED]> wrote: > On Wednesday 01 October 2008 14:05:11 Don Saklad wrote: >> Of the many many subscriptions this is the only subscription that >> doesn't have a bracketed list name inserted in t

RE: Identifying headers for users@spamassassin.apache.org

Don Saklad wrote: > What do the jargon terms mean?... in MTA = Mail Transfer Agent (aka mail server) MUA = Mail User Agent (aka Outlook, Thunderbird, etc) -- Bowie

Re: New free blacklist: BRBL - Barracuda Reputation Block List

On 30.09.08 15:12, Rasmus Haslund wrote: > > I'd like answers to many of the same questions, although I've > > already implemented the list. So far, I've only had one > > complaint though it wasn't much of a false positive. I'd > > started receiving junk from a legitimate server that normally

Re: Identifying headers for users@spamassassin.apache.org

Matt Kettler wrote: Don Saklad wrote: Of the many many subscriptions this is the only subscription that doesn't have a bracketed list name inserted in the header subject. Programming solutions don't work for users not programmers! This shouldn't be a programing solution. It's the RFC stand

Problems with some obvious spam mails

Hello! System: Debian 4.0 SpamAssassin version: 3.2.2 MTA: Postfix with Amavis and ClamAV - - - - - - - - - - - - We have the problem that some very obvious spam mail come through (example: http://pastebin.com/m606b1420). Now I thougt bayes is on (see here the local.cf: http://pastebin.com/m55b

Re: SBL false positives?

James Wilkinson wrote: mouss wrote: in which sublist? xbl, sbl or pbl? and when you say "a lot", how many? can you show an example of an IP that you consider as an FP? Well, since you asked… I’m not the Original Poster, but I consider most of http://www.spamhaus.org/sbl/sbl.lasso?query=SBL60

Re: Identifying headers for users@spamassassin.apache.org

On Wed, 2008-10-01 at 08:05 -0400, Don Saklad wrote: > Of the many many subscriptions this is the only subscription that > doesn't have a bracketed list name inserted in the header subject. Please, not again. This topic has been discussed to death before. Try using a search-engine. Starting this y

Re: False Positive on SUBJECT_FUZZY_TION rule

John Hardin <[EMAIL PROTECTED]> wrote: header SUBJECT_FUZZY_TION Subject =~ / P3>(?!tion)/i is hitting on ham from a mailing list with the following subject line: Subject: Re: [CentOS] mount UFS partition on CentOS 5. A test email containing just the text "partition" in the subject lin

Re: Problems with some obvious spam mails

On Wed, October 1, 2008 16:34, dawa wrote: > Now I thougt bayes is on (see here the local.cf: > http://pastebin.com/m55ba168) but I think it didn't work correctly. add_header all DCC_DCCB_: _DCCR_ change to add_header all DCC_DCCB _DCCR_ -- Benny Pedersen Need more webspace ? http://www.serv

Re: SBL false positives?

On Wed, October 1, 2008 16:34, mouss wrote: > we have other things to do than watch if a > $reverse-ip-pattern.dialup.domain is a responsible mail source. eg sending mails both cc and to maillists or calc how much one hour is in secs ? policyd 1.80 with innodb works well here, it even got facebo

Re: Problems with some obvious spam mails

dawa wrote: Hello! System: Debian 4.0 SpamAssassin version: 3.2.2 MTA: Postfix with Amavis and ClamAV - - - - - - - - - - - - We have the problem that some very obvious spam mail come through (example: http://pastebin.com/m606b1420). it now hits URIBL_BLACK. Here, RCVD_IN_PBL is set to 4.0.

RE: New free blacklist: BRBL - Barracuda Reputation Block List

>> For us, the only FP we have seen are some servers in Argentina, Brazil >> and 2 legit fish newsletters from Russia. >> Otherwise it is looking very good here. >maybe if you received more mail from argentina, brazil or russia, you'd see more FPs. The problem is, while spam >spews everywhere, so