Today I received two messages with a kinds of new(?) spam.
The messages, html ones, contained the word viagra made by colouring cells
in a table.
The message also contained a link to a blog (live.com). The rest of the
message contained a text to mislead the bayes filtering.
How to stop these m
On Wed, March 25, 2009 01:59, jcput...@centreweb.co.za wrote:
> i am receiving spam all the time from windows live accounts,
> spamassassin doesnt even have one hit.. i am using sought rule with
> openprotects sare rules with dcc,pyzor,razor2 and iXhash.
>
> i create a rule to stop spam containing
On Wed, 25 Mar 2009 01:35:53 +0100 (CET)
"Benny Pedersen" wrote:
>
> On Tue, March 24, 2009 03:34, dsh979 wrote:
>
> > whitelist_from *...@whitelist3.com
>
> forged senders welcome :)
>
> hope *_from will be removed in next sa, its the badest check in
> current sa of all tests :/
>
> change
On Wed, 2009-03-25 at 02:59 +0200, jcput...@centreweb.co.za wrote:
> i am receiving spam all the time from windows live accounts, spamassassin
> doesnt even have one hit.. i am using sought rule with openprotects sare
> rules with dcc,pyzor,razor2 and iXhash.
>
> i create a rule to stop spam con
i am receiving spam all the time from windows live accounts, spamassassin
doesnt even have one hit.. i am using sought rule with openprotects sare rules
with dcc,pyzor,razor2 and iXhash.
i create a rule to stop spam containing windows live spaces but spam like this
one doesnt even get a hit.
h
On Tue, March 24, 2009 03:34, dsh979 wrote:
> blacklist_from *...@blacklist1.com
> blacklist_from *...@blacklist2.com
> blacklist_from *...@blacklist3.com
> required_score 100
> whitelist_from *...@whitelist1.com
> whitelist_from *...@whitelist2.com
> whitelist_from *...@whitelist3.com
forged se
John Hardin wrote:
What is AWL rule? Why it gives so different amount of points?
"Auto Whitelist" is a misleading name. It is actually a score averager.
Since the points it applies are based on the historical scoring from
that sender, the score will vary by who the sender is and when the
m
On Tue, March 24, 2009 01:54, mouss wrote:
> if you want to fight spam, ask open questions. SA is a good filter.
> Bayes isn't as perfect as you might think.
reminds me of 3660 secs for one hour :)
--
http://localhost/ 100% uptime and 100% mirrored :)
JC Putter wrote:
> where can i find more rulesets? using openprotect sare rules and
> sought rulesets
>
That's about all there are... A few folks have odds and ends rules
posted on their webpages/blogs/etc, but they're of mixed quality.
Is there a particular reason your looking for more rulesets?
On Tue, 24 Mar 2009, Dennis German wrote:
It seems to me that the default score of from 1.2 to 1.9,
for messages originating from URIs which are Black listed
in any of the various JP, AB, OB, PH, SC, ... lists,
should be significantly higher, perhaps nearly the default
required score of 5.0
S
It seems to me that the default score of from 1.2 to 1.9,
for messages originating from URIs which are Black listed
in any of the various JP, AB, OB, PH, SC, ... lists,
should be significantly higher, perhaps nearly the default
required score of 5.0
Some information is at http://ruleqa.spamass
Brian J. Murrell wrote:
> On Tue, 2009-03-24 at 08:10 -0500, Bowie Bailey wrote:
> >
> > Your assessment sounds right to me. I would make two suggestions.
> >
> > 1) Memory is cheap these days. Add some more RAM.
>
> That's a mitigation strategy, yes, but it doesn't really answer OP's
> questi
On Tue, 2009-03-24 at 16:30 +0100, Guido wrote:
> > > - How can I convince spamassassin (used by amavisd-new) to care
> > >about my user_prefs in the database?
> >
> > Amavisd-new scans everything as a single user. It has no concept of
> > per-user settings
You probably need to read the sql
hi --
This would indeed be possible -- just take the contents of the ruleset
dir in /usr/share/spamassassin , throw out most of it, and keep just
23_bayes.cf . Then when you run spamd, tell it to use that rules dir
instead of the default.
You should probably also add a 99_local.cf which contains
On Tue, 2009-03-24 at 08:10 -0500, Bowie Bailey wrote:
>
> Your assessment sounds right to me. I would make two suggestions.
>
> 1) Memory is cheap these days. Add some more RAM.
That's a mitigation strategy, yes, but it doesn't really answer OP's
question about how to make spamd stop trying t
That was indeed the case. Thank you.
Matt
Matus UHLAR - fantomas wrote:
>
>
> you apparently have a "score" line in user_prefs, or in system-wide
> directory, which prevails over those in SA rules dirs.
>
>
--
View this message in context:
http://www.nabble.com/Trying-to-understand-sco
> > - How can I convince spamassassin (used by amavisd-new) to care
> >about my user_prefs in the database?
>
> Amavisd-new scans everything as a single user. It has no concept of
> per-user settings.
>
What I mean is per recipient settings.
And if that's the case, at least the default se
From: Matus UHLAR - fantomas
Date: Tue, 24 Mar 2009 15:30:23 +0100
On 23.03.09 21:58, dsh979 wrote:
> I did not realise that items listed on the white list or the black list
> would still be subject to the operation/analysis of the SpamAssassin
Rules.
all rules are pro
Guido wrote:
> Hi,
>
> I am trying to configure my system that it can assign user specific
> scores. I therefore set up a table like described in [1]. This runs
> fine, as long as I use spamc to scan mails.
>
> But actually I want to use Amavisd-new using spamassassin. Here
> spamassassin complet
On Mon, 23 Mar 2009, dsh979 wrote:
Q:How can I list items/users on a "white list" or a "black list" without
the lists (and items) being the subject of further analysis by the
SpamAssassin Rules
That has to be done outside SA. Basically (modulo shortcuts, which you
shouldn't be playing with)
Thank you Matt!
Your letter helped me to understand my problem better.
I`m not using sa-spamc, my exim using ACL spam, that connects directly
to spamd ip/port.
My founded solution was described in Exim FAQ:
A0512: Envelope-To: is added at delivery time, by the transport.
Therefore, the header
Randy J. Ray wrote:
> filtering on other content, filtering that isn't the same as spam-testing. In
> a
> nutshell, we currently use the "bogofilter" application to classify messages,
> and invoke it with different word-list files to represent different filtering
> requirements. But this isn't
On 24.03.09 15:59, JC Putter wrote:
> where can i find more rulesets? using openprotect sare rules and sought
> rulesets
build your own rulesets? SARE rulesets aren't updated anymore afaik (and
thus number of false-positives is increasing).
Do you have any problem that can't be solved by fine-tu
On 23.03.09 21:58, dsh979 wrote:
> I did not realise that items listed on the white list or the black list
> would still be subject to the operation/analysis of the SpamAssassin Rules.
all rules are processed unless you play with ShortCircuit plugin. Beware of
that: It may render the SA useless
On 23.03.09 09:43, mkellogg wrote:
> Running spamc from the command line and generating the full report.
> 0.0 TVD_RCVD_IP4 TVD_RCVD_IP4
> 0.0 TVD_RCVD_IPTVD_RCVD_IP
> However, my score file has the following lines:
> score TVD_RCVD_IP4 4.099 3.344 2.901 3.183 # n=2
> scor
Hi,
I am trying to configure my system that it can assign user specific
scores. I therefore set up a table like described in [1]. This runs fine, as
long as I use spamc to scan mails.
But actually I want to use Amavisd-new using spamassassin. Here
spamassassin complety ignores the sql settings. O
where can i find more rulesets? using openprotect sare rules and sought rulesets
__ Information from ESET NOD32 Antivirus, version of virus signature
database 3957 (20090324) __
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
--
This message has been
On Sat, Mar 21, 2009 at 07:20:52AM -0700, Monky wrote:
>
> What I make of this is that when my server is using his maximum of 5 spamd
> children he hits the RAM limit and starts paging (the explosion of scanning
> time). Is this a sensible assessment?
How can we assess anything if you keep the cr
Monky wrote:
> Hallo list,
> receiving a bunch of obvious spam emails without the SA tags in it
> made me look at my logfiles and I found out - thats what I guess -
> that for a short time my server was reaching his limits.
> Short grep extracts from my logfile:
> Mar 21 11:14:48 h1306680 spamd[92
Bug wrote:
> Dear users !
>
> I`m using exim + spamd + user_prefs in mysql. All works fine.
>
> But I found a bug, when I`m using whitelist, and header rcpt to: have
> address with character description, whitelist failed to catch it in
> database. For example:
>
> 1st message:
> spamd: clean messa
Dear users !
I`m using exim + spamd + user_prefs in mysql. All works fine.
But I found a bug, when I`m using whitelist, and header rcpt to: have
address with character description, whitelist failed to catch it in
database. For example:
1st message:
spamd: clean message (-91.7/10.0) for t...@loc
31 matches
Mail list logo
