Re: Wwird flagging of emails to Spam

Rops wrote on Tue, 20 Jan 2009 17:04:37 -0800 (PST): > Subject: Re: ***SPAM*** This was *not* tagged as spam. This is a reply to your reply to a spam- tagged message where you didn't remove the tag. Or a reply to your message that got tagged on the *other* side (and without removal of the tag).

Re: Wwird flagging of emails to Spam

Hi Roberta, I think the problem lies in just this snippet: >> X-SMTP-Auth-NETI-Businesmail: no >> Received: from ...mada30 (xx.175.190.90.dyn.estpak.ee [xx.190.175.78]) >> by Relayhost2.neti.ee (Postfix) with SMTP id CE2621F9E65 >> for <.@online.ee>; Tue, 20 Jan 2009 23:29:07 +0200

RE: Free-test russian xxx site

At 07:46 PM 1/20/2009, you wrote: michael, how are you filtering the nabble stuff? in SA or special tools? please share - rh SpamAssassin won't 'filter'. I was dropping nabble at one point: Drop via your MTA on message id... message-id=<1232502706304-2190037.p...@n2.nabble.com> or anyt

RE: Free-test russian xxx site

> Thanks. I filter out all email from nabble groups because I > find their users are less than intelligent (they tend to > compliant about spamassassin group posters INFRINGING ON > THEIR NABBLE GROUP) > > If it were not for kind people like you who repost the crap > nabble posted, my fil

Re: Fwd: Some questions on sa-learn

Nelson Serafica wrote: > > Does sa-learn understand format other than mbox and maildir format? > Can I use save emails such as .eml in my Mozilla Thunderbird and have > it learn by sa-learn both in ham and spam? The default format (ie: with no parameters modifying the input type) is one of the foll

Re: Regular expression help

On Wed, 2009-01-21 at 01:04 +, rje...@vzw.blackberry.net wrote: > I am attempting to create a regular expression to give a negative score > for purchase orders. > I have not been able to get this to work correctly. I have the following: *flashback* 8 weeks passed. Did you read and understand

Re: Regular expression help

In an older episode (Wednesday, 21. January 2009), rje...@vzw.blackberry.net wrote: > I am attempting to create a regular expression to give a negative > score for purchase orders. I need to match the following: PO > PO: > PO# > P.O. > P.O. # > PO # > > I have not been able to get this to work cor

Re: Regular expression help

On Wed, 21 Jan 2009, rje...@vzw.blackberry.net wrote: I am attempting to create a regular expression to give a negative score for purchase orders. I need to match the following: PO PO: PO# P.O. P.O. # PO # I have not been able to get this to work correctly. I have the following: /\bP\.?O\.?[:

Re: Wwird flagging of emails to Spam

I pretty much get the impression, we're not talking about the same. That is, mail server admins versus a general user. On Tue, 2009-01-20 at 17:00 -0800, John Hardin wrote: > On Tue, 20 Jan 2009, Rops wrote: > > May it be the result of outgoing and incoming servers being the same?? > > (mail.net

Re: [Trac] Re: filter own TRAC bug mail

I see, http://trac-hacks.org/wiki/NeverNotifyUpdaterPlugin is something one must ask each trac maintainer to install, at each trac where we have reported bugs. I will rather just filter the mail myself with my SpamAssassin stanza version 2: header __J_TRAC_COMMENT X-Trac-Ticket-URL =~/\#comment/ r

Regular expression help

I am attempting to create a regular expression to give a negative score for purchase orders. I need to match the following: PO PO: PO# P.O. P.O. # PO # I have not been able to get this to work correctly. I have the following: /\bP\.?O\.?[:#]? [#]?/i Any ideas? Thanks in advance. Ray

Re: Filter from *and* to

On Wed, January 21, 2009 01:40, Martin Gregorie wrote: > describe LOCSRS Sender same as recipient > header__LOCSR1 To =~ /\...@example.com/i > header__LOCSR2 From =~ /\...@example.com/i > meta LOCSRS (__LOCSR1 && __LOCSR2) > score LOCSRS 6.0 meta LOCSRS (__LOCSR1

Fwd: Some questions on sa-learn

Does sa-learn understand format other than mbox and maildir format? Can I use save emails such as .eml in my Mozilla Thunderbird and have it learn by sa-learn both in ham and spam? I tried to man sa-learn and there is an option of -f. Could I do this : sa-learn --no-sync --spam -f <.eml directory>

Re: Wwird flagging of emails to Spam

Hi I add almost full header of these 3 message, if it helps to explain. All samples had a subject Spam added and my OL was the receipent. Return-Path: <@.ee> Received: from MXR-12.estpak.ee ([88.196.174.176]) by mbox1-1 (Cyrus v2.3.13) with LMTPA; Tue, 20 Jan 2009 2

Re: Wwird flagging of emails to Spam

On Tue, 20 Jan 2009, Rops wrote: What means Outlook shoudn't send directly to MX? It means that rather than having your Outlook mail client directly contact the mail servers (MX hosts) at, say, Microsoft, you should instead send your email via the mail servers at your ISP and have *them* rel

Re: Wwird flagging of emails to Spam

At 04:41 PM 1/20/2009, you wrote: and thanks for a multitude of replies. Isn't there any weblist with these abbreviations explanation with some simple samples? Google's a good starting point. So is spamassassin.org What means Outlook shoudn't send directly to MX? Not to be rude, but if you

Re: Wwird flagging of emails to Spam

All sample messages had been flagged as spam and sent with Outlook 2003. espak.ee is one of isp servers, while Outlook sends and receives from mail.neti.ee server. Karsten Bräckelmann-2 wrote: > > On Tue, 2009-01-20 at 16:08 -0800, John Hardin wrote: >> On Wed, 21 Jan 2009, Karsten Brckelmann w

Re: bayes autolearn off but journal updated

Theo Van Dinter wrote: > On Tue, Jan 20, 2009 at 04:49:12PM +0100, Matus UHLAR - fantomas wrote: > >> Why does it update the journal? Why does it try to open journal in R/W mode? >> > > $ man sa-learn > [...] >bayes_journal >While SpamAssassin is scanning mails, it needs

Re: Wwird flagging of emails to Spam

Hi and thanks for a multitude of replies. Isn't there any weblist with these abbreviations explanation with some simple samples? What means Outlook shoudn't send directly to MX? I guess that's how it always has worked here with Outlook, even when I don't know right now what is MX :-) May it be

Re: Filter from *and* to

On Fri, 2009-01-16 at 18:51 +, Rik wrote: > On Fri, 2009-01-16 at 19:25 +0100, Matus UHLAR - fantomas wrote: > > On 16.01.09 11:26, Helmut Schneider wrote: > > > can I (and if how) create a filter that catches mails _from_and_to_ > > > specific email addresses? It should only apply if a specif

Re: Wwird flagging of emails to Spam

On Tue, 2009-01-20 at 16:08 -0800, John Hardin wrote: > On Wed, 21 Jan 2009, Karsten Brckelmann wrote: > > > All in all, your problem is that your mail client (is it really > > Outlook?) is sending mail directly to the MX. Instead, you should be > > using your ISPs SMTP. > > Were these indeed mes

Re: Filter from *and* to

On Fri, 2009-01-16 at 19:25 +0100, Matus UHLAR - fantomas wrote: > On 16.01.09 11:26, Helmut Schneider wrote: > > can I (and if how) create a filter that catches mails _from_and_to_ > > specific email addresses? It should only apply if a specific sender sendw > > an email to a specific recipient

Re: Spam hitting Bayes_99?

Hi, I'm wondering ... this is spam right or ? Its score like this here: 1.5 RCVD_IN_SPAMCANNIBAL RBL: www.spamcannibal.org [72.55.156.38 listed in bl.spamcannibal.org] 1.8 BARRACUDA_BRBL RBL: Listed: Barracuda Reputation Block List (BRBL)

Re: Wwird flagging of emails to Spam

On Wed, 21 Jan 2009, Karsten Br?ckelmann wrote: All in all, your problem is that your mail client (is it really Outlook?) is sending mail directly to the MX. Instead, you should be using your ISPs SMTP. Were these indeed messages sent by the OP? I don't recall seeing that in his post (which I

Re: Wwird flagging of emails to Spam

On Wed, 2009-01-21 at 00:55 +0100, Karsten Bräckelmann wrote: > On Tue, 2009-01-20 at 15:27 -0800, Rops wrote: > > available to find out what means DOS_OE_TO_MX_IMAGE=3 > > The message has been generated by Outlook (or claims to be), has been > sent directly from the client (MUA), Outlook, t

Re: Wwird flagging of emails to Spam

On Tue, 2009-01-20 at 15:27 -0800, Rops wrote: > Message 1. > From a decent mail header, there is following entry, but there is no source > available to find out what means DOS_OE_TO_MX_IMAGE=3 The message has been generated by Outlook (or claims to be), has been sent directly from the clien

Re: Wwird flagging of emails to Spam

On Tue, 20 Jan 2009, Rops wrote: I have been surfing around for a while to find out why a lot of mails are considered spam by my ISP, when these aren't. How much do you think is reasonable level to flag as spam? The default is 5, and all the base rules are scored with that threshold in mind

Re: Wwird flagging of emails to Spam

At 03:27 PM 1/20/2009, you wrote: I have been surfing around for a while to find out why a lot of mails are considered spam by my ISP, when these aren't. Good question for your ISP I'm guessing you don't have access to the SA Configs? Searching this forum didn't help :-( I'd very happy,

Wwird flagging of emails to Spam

Hi I have been surfing around for a while to find out why a lot of mails are considered spam by my ISP, when these aren't. Searching this forum didn't help :-( I'd very happy, if someone could enlight me a little. How much do you think is reasonable level to flag as spam? Message 1. >From a d

Can't locate object method "new" via package "Net::DNS::RR::TXT"

I seem to be getting a lot of these in the last 36h: 12:02:26 spamd Can't locate object method "new" via package "Net::DNS::RR::TXT" at /usr/lib/perl5/Net/DNS/RR.pm line 305. 12:02:26 spamd caught at /usr/share/perl5/Mail/SpamAssassin/DnsResolver.pm line 419 Any ideas why? b.

Re: Free-test russian xxx site

At 11:36 AM 1/20/2009, Michael Scheidell wrote: Thanks. I filter out all email from nabble groups because I find their users are less than intelligent (they tend to compliant about spamassassin group posters INFRINGING ON THEIR NABBLE GROUP) If it were not for kind people like you who repost

Re: Free-test russian xxx site

> At 11:24 AM 1/20/2009, you wrote: > > > Nabble: The Google Groups of e-mail. > > Yeah... Free test - of your computer's Anti-Virus Capabilities. > Thanks. I filter out all email from nabble groups because I find their users are less than intelligent (they tend to compliant about spamassassin

Re: Free-test russian xxx site

At 11:24 AM 1/20/2009, you wrote: Free-test russian xxx site http://xxx.SPAMgamapa.ru http://xxx.SPAMgamapa.ru Nabble: The Google Groups of e-mail. Yeah... Free test - of your computer's Anti-Virus Capabilities.

Re: Spam hitting Bayes_99?

On Jan 20, 2009, at 9:39, Karsten Bräckelmann wrote: On Tue, 2009-01-20 at 16:52 +0100, Matus UHLAR - fantomas wrote: On 20-Jan-2009, at 08:04, Karsten Bräckelmann wrote: You should also train low scoring (tagged) spam. Or, even better, train those identified spam with a "low" Bayes score

Re: Need help wityh reverse mortgages for seniors.

On Tue, Jan 20, 2009 at 11:16:34AM -0500, Steven W. Orr wrote: > I'm getting a lot of spam that gets through that's trying to sell > reverse mortages to seniors. I put a baker's dozen samples at > > http://steveo.syslang.net/sen.txt > > The samples are raw, but a text rendered example looks rough

filter own TRAC bug mail

Gentlemen, the TRAC bug tracker is not as smart as bugzilla. It insists on sending one acknowledgements even for one's own actions. It was me doing the clicking, no acknowledgement needed. But if it was someone else changing/commenting on one of my bugs, well yes, I want mail about it. So to ge

Re: Need help wityh reverse mortgages for seniors.

> Maybe Justin nees to set up a SOUGHT_LOANS corpus and ruleset? :) Already part of JM_SOUGHT_FRAUD, which ships with the general sought update channel. And no, it is no fun reading these to provide a specialized high quality corpus for fraud... *sigh* guenther -- char *t="\10pse\0r\0dtu...

Re: Richmond H Dyes/mchhosp.gov is out of the office.

On Tuesday 20 January 2009, rd...@monroehosp.org wrote: >I will be out of the office starting 01/20/2009 and will not return until >01/26/2009. > >If it is an emergency, the help line at 760-6277 > > > >-- Confidentiality Notice -- >This email message, including all the attachments, is for the sol

Re: bayes autolearn off but journal updated

On Tue, Jan 20, 2009 at 04:49:12PM +0100, Matus UHLAR - fantomas wrote: > Why does it update the journal? Why does it try to open journal in R/W mode? $ man sa-learn [...] bayes_journal While SpamAssassin is scanning mails, it needs to track which tokens it uses in its cal-

Re: Richmond H Dyes/mchhosp.gov is out of the office.

On Tue, January 20, 2009 16:28, rd...@monroehosp.org wrote: > If it is an emergency, the help line at 760-6277 oh will you pay my phonebill ? > -- Confidentiality Notice -- > This email message, including all the attachments, is for the sole > use of the intended recipient(s) and contains confi

Re: Need help wityh reverse mortgages for seniors.

On Tue, 20 Jan 2009, Steven W. Orr wrote: I'm getting a lot of spam that gets through that's trying to sell reverse mortages to seniors. I put a baker's dozen samples at http://steveo.syslang.net/sen.txt The samples are raw, but a text rendered example looks roughly like one I put below. Does

Re: Spam hitting Bayes_99?

On Tue, 2009-01-20 at 16:52 +0100, Matus UHLAR - fantomas wrote: > > On 20-Jan-2009, at 08:04, Karsten Bräckelmann wrote: > > >You should also train low scoring (tagged) spam. Or, even better, train > > >those identified spam with a "low" Bayes score. Similar for ham. > > On 20.01.09 08:19, LuKrem

Re: Spam hitting Bayes_99?

LuKreme wrote on Tue, 20 Jan 2009 08:19:34 -0700: > I thought tagged spam was automatically learned by bayes? Only above certain thresholds and if it got enough hits in header and body respectively. I don't know the values by heart. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactiv

Re: Spam hitting Bayes_99?

LuKreme wrote on Tue, 20 Jan 2009 07:56:20 -0700: > Ah.. OK, so it's the other way around. Then the problem is, I guess, > Bayes_99 scoring too low. That at least I can fix. > > Still, I am surprised this didn't get caught by other rules. I'm not. This type of message is usually not caught b

Re: Setting up VBounce... ...correctly

On Tue, 2009-01-20 at 15:29 +, Arthur Dent wrote: > On Tue, Jan 20, 2009 at 03:48:55PM +0100, Karsten Bräckelmann wrote: > > I explained it slightly more detailed in Bug 6008. > > https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6008 > > Ahhh.. I see (er I think...) > > Tell me; when

Re: Spam hitting Bayes_99?

> manual training on any FPs/FNs that were not correctly autolearned from is a > good idea. Also, it does no harm to re-learn messages that have already been learned, so it's perfectly acceptable to set up a cron job to learn the contents of a folder as spam and then just drop FNs-- or even accura

Re: Spam hitting Bayes_99?

> On 20-Jan-2009, at 08:04, Karsten Bräckelmann wrote: > >You should also train low scoring (tagged) spam. Or, even better, train > >those identified spam with a "low" Bayes score. Similar for ham. On 20.01.09 08:19, LuKreme wrote: > I thought tagged spam was automatically learned by bayes? > > I

bayes autolearn off but journal updated

Hello, on my systems I turned bayes filter off by default: cd /etc/mail/spamassassin/ grep bayes * local.cf:use_bayes 0 local.cf:bayes_auto_learn 0 local.cf:bayes_auto_expire 0 local.cf:bayes_learn_to_journal 1 ...I keep the journal default so any user who turns on bayes, would use journalling

Richmond H Dyes/mchhosp.gov is out of the office.

I will be out of the office starting 01/20/2009 and will not return until 01/26/2009. If it is an emergency, the help line at 760-6277 -- Confidentiality Notice -- This email message, including all the attachments, is for the sole use of the intended recipient(s) and contains confidential in

Re: Setting up VBounce... ...correctly

On Tue, Jan 20, 2009 at 03:48:55PM +0100, Karsten Bräckelmann wrote: > On Tue, 2009-01-20 at 14:18 +, Arthur Dent wrote: > > p.s. > > I have also just discovered that notifications of submissions to the Fedora > > bugzilla that I recently submitted also hit ANY_BOUNCE_MESSAGE. Why??? > > Becau

Re: Spam hitting Bayes_99?

On 20-Jan-2009, at 08:04, Karsten Bräckelmann wrote: You should also train low scoring (tagged) spam. Or, even better, train those identified spam with a "low" Bayes score. Similar for ham. I thought tagged spam was automatically learned by bayes? Isn't that what bayes_auto_learn does? --

Re: Spam hitting Bayes_99?

On Mon, 2009-01-19 at 20:03 -0700, LuKreme wrote: > > > Gotten a few like this in the last day or two. I have no idea why > they are hitting Bayes_99. Err, you are seriously confusing me. :) It is intended. BAYES_99 means, the Bayesian probability is 99% or

Re: Spam hitting Bayes_99?

On 19-Jan-2009, at 23:31, Kai Schaetzl wrote: LuKreme wrote on Mon, 19 Jan 2009 20:03:18 -0700: Gotten a few like this in the last day or two. I have no idea why they are hitting Bayes_99. I don't understand, what's the problem? The problem? Am I misrem

Re: Setting up VBounce... ...correctly

On Tue, 2009-01-20 at 14:18 +, Arthur Dent wrote: > p.s. > I have also just discovered that notifications of submissions to the Fedora > bugzilla that I recently submitted also hit ANY_BOUNCE_MESSAGE. Why??? Because this evaluates to true. __HAVE_BOUNCE_RELAYS && !__MY_SERVERS_FOUND && __BOU

Setting up VBounce... ...correctly

Hello all, Some time ago I had a nasty rash of backscatter so I installed and configured the VBounce plugin. Coincidentally the backscatter stopped at the same time and I haven't had much of a problem since. I kind of forgot about it - until just now when I genuinely sent a message which bounced b

Re: Some questions on sa-learn

On Tue, 20 Jan 2009, Simone Morandini wrote: Er.. isn't it bayes_auto_learn 1 ?? Actually, I do have "auto_learn 1"... is it something meaningless? By default is turned on. Therefore, one doesn't even have it configured.

Re: Some questions on sa-learn

Simone Morandini wrote on Tue, 20 Jan 2009 01:59:39 -0800 (PST): > Actually, I do have "auto_learn 1"... is it something meaningless? This page lists all conf options: http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html Kai -- Kai Schätzl, Berlin, Germany Get your web at

Re: Some questions on sa-learn

On Tue, January 20, 2009 10:59, Simone Morandini wrote: >> Er.. isn't it >> bayes_auto_learn 1 >> ?? > Actually, I do have "auto_learn 1"... is it something meaningless? no we need autolearn perldoc Mail::SpamAssassin::Conf also or was it perldoc Mail::SpamAssassin::Plugin::Bayes i lost it :) >

Re: Some questions on sa-learn

>Er.. isn't it >bayes_auto_learn 1 >?? Actually, I do have "auto_learn 1"... is it something meaningless? -- Advance and attack! Attack and destroy! Destroy and rejoice! -- View this message in context: http://www.nabble.com/Some-questions-on-sa-learn-tp21541965p21560085.html Sent from