Re: Mail Marked Spam For VPN Users

2010-04-12 Thread John Hardin
On Mon, 12 Apr 2010, Carlos Mennens wrote: When users are on the LAN, their client IP is in range of 'mynetworks' parameter via Postfix. When they're home and VPN into my network, they fire up Outlook / Thunderbird & send email as they would if they were sitting in the office. However their clie

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Kelson
On 4/12/2010 4:26 PM, Bob O'Brien wrote: Other media references, too: 90210, 4100, I'm sure there are more which have been chosen by fans of one theme or another. Back in the late 1990s, I remember hearing that some site (maybe Hotmail?) was restricted to US residents, but didn't check very t

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Jason Bertoch
On 4/12/2010 4:58 PM, Martin Gregorie wrote: I had quite a bit to do with phone numbers en mass a while back. My initial reaction is that its not easy: not only do phone numbers vary in length between locales, but even such things as the 'international dialing' and non-local-call prefix vary from

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Bob O'Brien
Martin Gregorie wrote: However, there is one fairly straight forward question that can be easily answered: has anybody ever seen an all-number mailbox/user id in circumstances where it *isn't* a phone number? Yes. I have seen personal addresses with all-digit LHS. It's almost always been "

Re: New log errors on upgrading

2010-04-12 Thread Mark Martinec
Micah, > More new errors that I am getting from an upgrade to spamassassin 3.3: 3.3.0 ? > Use of uninitialized value $start_time in addition (+) at > /usr/sbin/spamd line 1382, That was fixed in 3.3.1 . > and also the following: > > spf: lookup failed: Can't locate object method "new_from_st

Re: Country Relay Filter on SA 3.3.1

2010-04-12 Thread RW
On Mon, 12 Apr 2010 21:05:25 +0100 RW wrote: > On Mon, 12 Apr 2010 14:25:36 -0400 > Kaleb Hosie wrote: > > > Hey Everyone, > > I'm having an issue with the Country Relay filter. I've realized > > that it hasn't been effecting the score rating at all since I've > > upgraded from version 2.6.5. >

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Ted Mittelstaedt
On 4/12/2010 1:58 PM, Martin Gregorie wrote: On Mon, 2010-04-12 at 16:29 -0400, Jason Bertoch wrote: I just received a FP report on a message sent from a phone via their text-to-email gateway. FROM_STARTS_WITH_NUMS matched because the sender's address is [10-digit phone numb...@somecarrier.co

New log errors on upgrading

2010-04-12 Thread Micah Anderson
More new errors that I am getting from an upgrade to spamassassin 3.3: Use of uninitialized value $start_time in addition (+) at /usr/sbin/spamd line 1382, and also the following: spf: lookup failed: Can't locate object method "new_from_string" via package "Mail::SPF::Mech::All" at /usr/share/

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Martin Gregorie
On Mon, 2010-04-12 at 16:29 -0400, Jason Bertoch wrote: > I just received a FP report on a message sent from a phone via their > text-to-email gateway. FROM_STARTS_WITH_NUMS matched because the > sender's address is [10-digit phone numb...@somecarrier.com. > > My initial instinct was to file a

dcc: [26896] terminated: exit 241

2010-04-12 Thread Micah Anderson
I'm getting a lot of these log entries ever since I've upgraded: Apr 9 22:31:14 spamd2 spamd[2774]: dcc: [26896] terminated: exit 241 Obviously this is related to dcc, but I am not finding anything about what 'exit 241' is, and how I can adjust things so I no longer get them (or maybe they are

FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Jason Bertoch
I just received a FP report on a message sent from a phone via their text-to-email gateway. FROM_STARTS_WITH_NUMS matched because the sender's address is [10-digit phone numb...@somecarrier.com. My initial instinct was to file a bug suggesting there be a check in the rule to see if there ar

Re: skipping dynamic tests for ISP's own dynamic networks?

2010-04-12 Thread Kris Deugau
Royce Williams wrote: From the documentation, msa_networks designates those servers that accept only authenticated messages, regardless of type. I'm the new guy on the list, and have some catching up to do with learning how the *_networks directives work, but the evidence is mounting that if MSA

Re: Country Relay Filter on SA 3.3.1

2010-04-12 Thread RW
On Mon, 12 Apr 2010 14:25:36 -0400 Kaleb Hosie wrote: > Hey Everyone, > I'm having an issue with the Country Relay filter. I've realized that > it hasn't been effecting the score rating at all since I've upgraded > from version 2.6.5. > >.. > decrease or increase the score. I also have made sure

Country Relay Filter on SA 3.3.1

2010-04-12 Thread Kaleb Hosie
Hey Everyone, I'm having an issue with the Country Relay filter. I've realized that it hasn't been effecting the score rating at all since I've upgraded from version 2.6.5. Here is a sample of what I have in the local.cf file: header RELAYCOUNTRY_CA X-relay-countries =~ /CA/ describe RELAYCOUNTRY

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread David Morton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 4/12/10 12:11 PM, Carlos Mennens wrote: > On Mon, Apr 12, 2010 at 1:02 PM, Michael Scheidell > wrote: >> then read this part if I somehow confused you. >> >> On 4/12/10 12:55 PM, Carlos Mennens wrote: > other option is set up submit port

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Michael Scheidell
On 4/12/10 1:11 PM, Carlos Mennens wrote: (amavisd-new can add credit for smtp-auth users) How would I credit -100 points for someone who is using smtp auth? User's should be using TLS and SASL authentication so that should be fine. I just need to know how I would configure somet

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Carlos Mennens
On Mon, Apr 12, 2010 at 1:02 PM, Michael Scheidell wrote: > then read this part if I somehow confused you. > > On 4/12/10 12:55 PM, Carlos Mennens wrote: >>> >>> >  other option is set up submit port that only available via vpn, or use >>> > smtp >>> >  auth and give anyone coming in via that -100

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Michael Scheidell
then read this part if I somehow confused you. On 4/12/10 12:55 PM, Carlos Mennens wrote: > other option is set up submit port that only available via vpn, or use smtp > auth and give anyone coming in via that -100 points. > (amavisd-new can add credit for smtp-auth users) -- Michael

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Carlos Mennens
On Mon, Apr 12, 2010 at 12:43 PM, Michael Scheidell wrote: > are they not authenticating through, and sending out via (forgive me) an > exchange server? > if outlook is authenticating direct to  the exchange server, then the > exchange server would be the source ip, and you would eliminate lots of

file locking errors and general fyi

2010-04-12 Thread R-Elists
greetings, :-) coupla days ago upgraded from 3.2.5 to 3.3.1 on a production centos4 machine all 3.2.5 old files and dirs and all conflicting/duplicate rules removed from machine. it appears that overall things went quite well 2 days later doing some normal log parsing i noticed this spamd[24

Re: Mail Marked Spam For VPN Users

2010-04-12 Thread Michael Scheidell
On 4/12/10 12:38 PM, Carlos Mennens wrote: On my Postfix server, when my co-workers VPN from their laptops from home, they then send mail via Outlook and their ISP IP address. When the message gets to it's recipient, it's marked ***SPAM*** by SA. are they not authenticating through, and sendi

Mail Marked Spam For VPN Users

2010-04-12 Thread Carlos Mennens
On my Postfix server, when my co-workers VPN from their laptops from home, they then send mail via Outlook and their ISP IP address. When the message gets to it's recipient, it's marked ***SPAM*** by SA. User's are complaining that email from internal users are being marked as 'spam' and they don't

Re: How to configure spamassassin

2010-04-12 Thread Kai Schaetzl
HateSpam wrote on Mon, 12 Apr 2010 07:12:36 -0700 (PDT): > I wanted to ask that forum but there was not any contact or registration > option, so I wonder if anyone else has done the same configuration. You should not use it if you don't know how it works and it is not supported anymore. Kai --

Re: How to filter emails in a text file

2010-04-12 Thread yongke
Ok thanks, I will give this a try. Daniel Lemke wrote: > > > yongke wrote: >> >> Hi guys >> >> Is it possible to just run spamassassin on a text file? I don't have a >> mailsever or anything. Is it possible to have like a totally standalone >> spamassassin to just check emails I generate b

Re: How to filter emails in a text file

2010-04-12 Thread Per Jessen
yongke wrote: > > Hi guys > > Is it possible to just run spamassassin on a text file? I don't have > a mailsever or anything. Is it possible to have like a totally > standalone spamassassin to just check emails I generate but haven't > sent out yet? Yep, just run 'spamassassin

Re: How to filter emails in a text file

2010-04-12 Thread Daniel Lemke
yongke wrote: > > Hi guys > > Is it possible to just run spamassassin on a text file? I don't have a > mailsever or anything. Is it possible to have like a totally standalone > spamassassin to just check emails I generate but haven't sent out yet? > Uhm, not sure what you mean with "totall

How to filter emails in a text file

2010-04-12 Thread yongke
Hi guys Is it possible to just run spamassassin on a text file? I don't have a mailsever or anything. Is it possible to have like a totally standalone spamassassin to just check emails I generate but haven't sent out yet? -- View this message in context: http://old.nabble.com/How-to-filter-em

Re: How to configure spamassassin

2010-04-12 Thread hateSpam
I wanted to ask that forum but there was not any contact or registration option, so I wonder if anyone else has done the same configuration. Matus UHLAR - fantomas wrote: > > On 12.04.10 06:16, hateSpam wrote: >> I used instruction for http://onetforum.com/fourm/viewtopic.php?f=2&t=34 > > Wh

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread Daniel Lemke
RW-15 wrote: > > On Mon, 12 Apr 2010 04:25:13 -0700 (PDT) > Daniel Lemke wrote: > >> >> >> RW-15 wrote: >> > >> > >> > The default is learn, not noautolearn - either prevents autoleaning. >> > >> > >> >> Hmm, so it's not possible to use a tflag for telling bayes to learn >> the message?

Re: How to configure spamassassin

2010-04-12 Thread Matus UHLAR - fantomas
On 12.04.10 06:16, hateSpam wrote: > I used instruction for http://onetforum.com/fourm/viewtopic.php?f=2&t=34 Why don't you ask on that forum for help then? > and reloaded the postfix now when I receive any email I have [SPAM] added > on subject turn subject rewriting off. > all emails even it

Re: How to configure spamassassin

2010-04-12 Thread hateSpam
I used instruction for http://onetforum.com/fourm/viewtopic.php?f=2&t=34 and reloaded the postfix now when I receive any email I have [SPAM] added on subject all emails even it is not a spam. hateSpam wrote: > > Dear All, > I have Spamassassin on my Centos 5.4. For send and receive email I use

Re: Increase in image/zip spam?

2010-04-12 Thread Per Jessen
Alex wrote: > Hi, > > Just wondering if others are also seeing an increase in image spam in > the last week or so, some of which contain zip attachments? The body > contains random "bayes killer?" text with an image or zip attachment. Yep, been seeing quite a few of those. Usually one image as

Re: Increase in image/zip spam?

2010-04-12 Thread --[ UxBoD ]--
- Original Message - > Hi, > > Just wondering if others are also seeing an increase in image spam in > the last week or so, some of which contain zip attachments? The body > contains random "bayes killer?" text with an image or zip attachment. > I can't otherwise find something to trigger

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread RW
On Mon, 12 Apr 2010 04:25:13 -0700 (PDT) Daniel Lemke wrote: > > > RW-15 wrote: > > > > > > The default is learn, not noautolearn - either prevents autoleaning. > > > > > > Hmm, so it's not possible to use a tflag for telling bayes to learn > the message? What else can I do? I'm not famil

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread Daniel Lemke
RW-15 wrote: > > > The default is learn, not noautolearn - either prevents autoleaning. > > Hmm, so it's not possible to use a tflag for telling bayes to learn the message? What else can I do? -- View this message in context: http://old.nabble.com/Enable-autolearn-for-certain-shortcircuits

Re: Enable autolearn for certain shortcircuits

2010-04-12 Thread RW
On Mon, 12 Apr 2010 00:30:18 -0700 (PDT) Daniel Lemke wrote: > > Hi, > > I'd like to enable bayes auto learn for a specific shortcircuit rule. > This is what I've got: > > shortcircuit BAYES_00 on > score BAYES_00 -50 > tflags BAYES_00 learn > > It's declared in site wide local.cf. A test sho

Re: AWL

2010-04-12 Thread Matt Kettler
On 4/9/2010 4:33 PM, Dennis B. Hopp wrote: > I have AWL enabled and it seems to be ok with helping out legitimate > senders that occasionally send a "spammy" type message, but lately I > have seen an increase where AWL is adding a negative score to a very > blatant spam. > As long as it's not

Re: Quarantine Management

2010-04-12 Thread Lucio Chiappetti
On Sat, 10 Apr 2010, Dennis B. Hopp wrote: What are people using for quarantine management with spamassassin? We use an homegrown arrangement. I've forgotten the details since it's running without problems since ages, but in the nutshell we have this: - spam is quarantined system-wide (not

Enable autolearn for certain shortcircuits

2010-04-12 Thread Daniel Lemke
Hi, I'd like to enable bayes auto learn for a specific shortcircuit rule. This is what I've got: shortcircuit BAYES_00 on score BAYES_00 -50 tflags BAYES_00 learn It's declared in site wide local.cf. A test showed that SA does consider changes to the score but ignors removing the "noautolearn"