Re: sa-learn spam and Bayes_50

2009-10-28 Thread Matus UHLAR - fantomas
> Benny Pedersen wrote: > > On tir 27 okt 2009 18:44:28 CET, John Hardin wrote > > > >>> 0.000 0 112532 0 non-token data: nspam > >>> 0.000 0844 0 non-token data: nham > > > > try to get them more equal numbered in your trains > > > >> reflect yo

Re: sa-learn spam and Bayes_50

2009-10-28 Thread RW
On Tue, 27 Oct 2009 23:09:10 -0400 Alex wrote: > In either case, is there a way to exclude mails with USER_IN_WHITELIST > altogether? I have my ham level set at -0.3, but the USER_IN_WHITELIST > (and there are quite a few) adds -100.0, automatically making it ham. > I'm concerned that a spoofed m

Re: How to reject spam where sender = receiver

2009-10-28 Thread Adam Katz
Benny Pedersen wrote: > On ons 28 okt 2009 00:36:10 CET, rpc1 wrote > >> My spamassassin plug doesn't check mail where sender address and receiver >> address are equal. Like this > > http://www.nabble.com/postfwd-stop-equal-sender-recipient-spams-td21164908.html > > or setup spf for your domain

Re: How to reject spam where sender = receiver

2009-10-28 Thread Benny Pedersen
On ons 28 okt 2009 15:42:19 CET, Adam Katz wrote [snip] forging one of them. My plugin maches userna...@domain1 to userna...@domain2 if username1 == username2 regardless of domain. legit users can not use smtp auth ?, hmm :) -- xpoint

Re: How to reject spam where sender = receiver

2009-10-28 Thread Jari Fredriksson
28.10.2009 16:42, Adam Katz kirjoitti: > > I scored that 0.1 ... rejecting based on sender==recipient would > effectively be scoring it far higher, and would most certainly reject > legitimate mail (lots of people send announcements via Bcc or Cc while > addressing the message back to themselves

Re: Error from sa-update script

2009-10-28 Thread fugtruck
John Hardin wrote: > > > The error message indicates the problem. If you use "@" in a RE, you need > to escape it (e.g. "\@"). > > Try changing that and see if SA passes a --lint check. > > _ALWAYS_ do a --lint check after editing your rules! > > -- > John Hardin KA7OHZ

edir/techwebresources spam

2009-10-28 Thread Alex
Hi, I haven't previously thought it to be much of an issue because the volume has been low, but lately, the volume of spam from us.edir1.com, relayed through edmta.net, is now high enough that I need some advice. The relay is whitelisted by JMF_W, has GOODMAIL, IADB, SPF, and DKIM signed, yet it'

Re: Auth questions

2009-10-28 Thread J.D. Falk
Adam Katz wrote: Messages2 and/or mkt058.com have been thorough in working to ensure their mail gets delivered cleanly, using SPF, DKIM, and Habeas (which are all sender verification tools, the last of which is a sort of "we promise this isn't spam" tool). The message also has a List-Unsubscrib

RE: Geocities closed

2009-10-28 Thread Michael Hutchinson
> -Original Message- > From: Mike Cardwell [mailto:spamassassin-us...@lists.grepular.com] > Sent: Tuesday, 27 October 2009 11:54 p.m. > To: users@spamassassin.apache.org > Subject: Re: Geocities closed > > Alex wrote: > > > Thought I would pass along that geocities closed up and went home

Spam with my company domain

2009-10-28 Thread Jeremy Davila
Hi all, I'm getting Spam which is addressed to another person in my company , but it getting sent to me . So in my inbox the To Field is Kristin , but in Jeremy's inbox.

Re: Spam with my company domain

2009-10-28 Thread John Hardin
On Wed, 28 Oct 2009, Jeremy Davila wrote: I'm getting Spam which is addressed to another person in my company , but it getting sent to me . So in my inbox the To Field is Kristin , but in Jeremy's inbox. The information in the To: header has nothing to do with who actually receives the messa

Re: Spam with my company domain

2009-10-28 Thread Jari Fredriksson
28.10.2009 22:07, Jeremy Davila kirjoitti: > > Hi all, > > I'm getting Spam which is addressed to another person in my company , > but it getting sent to me . So in my inbox the To Field is Kristin , but > in Jeremy's inbox. Hello. That is possible, the email is sent to whoever is in the RCPT-

Re: How to reject spam where sender = receiver

2009-10-28 Thread Adam Katz
Jari Fredriksson wrote: > 28.10.2009 16:42, Adam Katz kirjoitti: >> I scored that 0.1 ... rejecting based on sender==recipient would >> effectively be scoring it far higher, and would most certainly reject >> legitimate mail (lots of people send announcements via Bcc or Cc while >> addressing the m

RE: Geocities closed

2009-10-28 Thread Michael Hutchinson
> -Original Message- > From: rich...@buzzhost.co.uk [mailto:rich...@buzzhost.co.uk] > Sent: Wednesday, 28 October 2009 3:00 a.m. > Cc: users@spamassassin.apache.org > Subject: Re: Geocities closed > > I just found this one working: > > http://uk.geocities.com/midsomerland/midsomerland_ind

Re: Spam with my company domain

2009-10-28 Thread Jeremy Davila
Thanks John , How can I prevent this from Happening. I'm currently using Exim for the SMTP relay then passing to Lotus Domino. Any suggestions will be appreciated. John Hardin 10/28/2009 04:21 PM To users@spamassassin.apache.org cc Subject Re: Spam with my company domain On Wed,

Re: Spam with my company domain

2009-10-28 Thread Evan Platt
What do you want to prevent from happening? Mail that isn't specifically addressed "To" you not to get to you? Look at the mail on this list: To: users@spamassassin.apache.org Subject: Re: Spam with my company domain From: Jeremy Davila You realize, that would mean you wouldn't get this list

Re: Spam with my company domain

2009-10-28 Thread Jeremy Davila
I should have clarified that. I meant mail that isn't specifically addressed to me . Thanks for your response. Evan Platt 10/28/2009 05:34 PM Please respond to users@spamassassin.apache.org To users@spamassassin.apache.org cc Subject Re: Spam with my company domain What do you wa

Re: Spam with my company domain

2009-10-28 Thread Evan Platt
As John and a few others pointed out, you need to explain what SPECIFICALLY you mean. Or, give an example. In your original example, you said the mail gets to you, but it says To: Kirstin. This is because the 'To" field that is shown in your mail client is - well, can be anything. I can sen

Re: How to reject spam where sender = receiver

2009-10-28 Thread rpc1
Thanks for useful answers !!! -- View this message in context: http://www.nabble.com/How-to-reject-spam-where-sender-%3D-receiver-tp26086971p26103651.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Spam with my company domain

2009-10-28 Thread John Hardin
On Wed, 28 Oct 2009, Jeremy Davila wrote: How can I prevent this from Happening. As far as the "my address isn't in the To: header", you can't. That would break lots of legitimate email, like BCCs and (as Evan pointed out) mail from this mailing list. I'm currently using Exim for the SMTP

Re: Spam with my company domain

2009-10-28 Thread Adam Katz
Evan Platt wrote: > What do you want to prevent from happening? > > Mail that isn't specifically addressed "To" you not to get to you? > > Look at the mail on this list: Hm. It might be interesting to consider a meta connecting the lack of a Precedence: of bulk or list with a test noting an abs