Re: Disable Botnet? (enquiry about fixing IPv6 problem)

2011-07-13 Thread Yves Goergen
On 12.07.2011 10:39 CE(S)T, Kārlis Repsons wrote: > There is the other thread about some patching for IPv6, but could someone > post > the current status with this problem or some idea what should be done for now > better than just not loading Botnet? I think botnet works well with those IPv6 p

Re: DecodeShortURLs plugin

2011-07-13 Thread Axb
On 2011-07-13 23:35, Jezz wrote: "Axb" wrote in message news:4e1df659.2070...@gmail.com... On 2011-07-13 20:23, Jezz wrote: "Axb" wrote in message news:4e1c820d.3000...@gmail.com... On 2011-07-12 15:21, Jezz wrote: So even commenting out those lines doesn't help, as the plugin still requi

Re: DecodeShortURLs plugin

2011-07-13 Thread Jezz
"Axb" wrote in message news:4e1df659.2070...@gmail.com... On 2011-07-13 20:23, Jezz wrote: "Axb" wrote in message news:4e1c820d.3000...@gmail.com... On 2011-07-12 15:21, Jezz wrote: So even commenting out those lines doesn't help, as the plugin still requires the Syslog module which I don

Re: DecodeShortURLs plugin

2011-07-13 Thread Axb
On 2011-07-13 20:23, Jezz wrote: "Axb" wrote in message news:4e1c820d.3000...@gmail.com... On 2011-07-12 15:21, Jezz wrote: So my question is this: is there any way I can get the DecodeShortURLs plugin working without the Syslog module requirement? Eg. can I get this plugin to only view Syslo

Re: FuzzyOCR

2011-07-13 Thread John Hardin
On Wed, 13 Jul 2011, David F. Skoll wrote: On Wed, 13 Jul 2011 08:01:51 -0700 (PDT) John Hardin wrote: All I can think of at this point is permissions issues somehow. The FuzzyOcr/Misc.pm might be masking the real exit code. It evals a bunch of Perl code in the child process and then:

Re: DecodeShortURLs plugin

2011-07-13 Thread Jezz
"Axb" wrote in message news:4e1c820d.3000...@gmail.com... On 2011-07-12 15:21, Jezz wrote: So my question is this: is there any way I can get the DecodeShortURLs plugin working without the Syslog module requirement? Eg. can I get this plugin to only view Syslog as an optional and not mandatory

Re: DecodeShortURLs plugin

2011-07-13 Thread Jezz
wrote in message news:20110712164439.gc20...@chaosreigns.com... On 07/12, Jezz wrote: So my question is this: is there any way I can get the DecodeShortURLs plugin working without the Syslog module requirement? Eg. can I get this plugin to only view Syslog as an optional and not mandatory prere

Re: DecodeShortURLs plugin

2011-07-13 Thread Jezz
"Axb" wrote in message news:4e1c820d.3000...@gmail.com... On 2011-07-12 15:21, Jezz wrote: So my question is this: is there any way I can get the DecodeShortURLs plugin working without the Syslog module requirement? Eg. can I get this plugin to only view Syslog as an optional and not mandatory

Re: Skipping header lines

2011-07-13 Thread Axb
On 2011-07-13 18:44, Jason Ede wrote: Can I get SA to be a bit more verbose about what it considers to be trusted networks? -Original Message- From: dar...@chaosreigns.com [mailto:dar...@chaosreigns.com] Sent: 13 July 2011 17:32 To: users@spamassassin.apache.org Subject: Re: Skipping

RE: Skipping header lines

2011-07-13 Thread Jason Ede
Can I get SA to be a bit more verbose about what it considers to be trusted networks? > -Original Message- > From: dar...@chaosreigns.com [mailto:dar...@chaosreigns.com] > Sent: 13 July 2011 17:32 > To: users@spamassassin.apache.org > Subject: Re: Skipping header lines > > On 07/13, Ja

RE: Skipping header lines

2011-07-13 Thread Jason Ede
> -Original Message- > From: Axb [mailto:axb.li...@gmail.com] > Sent: 13 July 2011 16:27 > Cc: users@spamassassin.apache.org > Subject: Re: Skipping header lines > > On 2011-07-13 17:06, Jason Ede wrote: > > I'm running 3.3.2 and I'd like to ignore the first received header as I > > rec

Re: Skipping header lines

2011-07-13 Thread darxus
On 07/13, Jason Ede wrote: >I’m running 3.3.2 and I’d like to ignore the first received header as I >receive the email on one postfix instance and then pass it along to Oh, another possibility is that the first postfix instance is, for some reason, inserting a header that SA is failing to

Re: Skipping header lines

2011-07-13 Thread darxus
On 07/13, Jason Ede wrote: >I’m running 3.3.2 and I’d like to ignore the first received header as I >receive the email on one postfix instance and then pass it along to >another to do the scanning. So far all the emails are showing up as >trusted as it sees the email as coming from

Re: Skipping header lines

2011-07-13 Thread Axb
On 2011-07-13 17:06, Jason Ede wrote: I'm running 3.3.2 and I'd like to ignore the first received header as I receive the email on one postfix instance and then pass it along to another to do the scanning. So far all the emails are showing up as trusted as it sees the email as coming from 127.

Re: FuzzyOCR

2011-07-13 Thread David F. Skoll
On Wed, 13 Jul 2011 08:01:51 -0700 (PDT) John Hardin wrote: > All I can think of at this point is permissions issues somehow. The FuzzyOcr/Misc.pm might be masking the real exit code. It evals a bunch of Perl code in the child process and then: # couldn't open file descriptors or exe

Skipping header lines

2011-07-13 Thread Jason Ede
I'm running 3.3.2 and I'd like to ignore the first received header as I receive the email on one postfix instance and then pass it along to another to do the scanning. So far all the emails are showing up as trusted as it sees the email as coming from 127.0.0.1 I'm guessing this is simple, but

Re: FuzzyOCR

2011-07-13 Thread John Hardin
On Wed, 13 Jul 2011, David F. Skoll wrote: On Wed, 13 Jul 2011 07:40:26 -0700 (PDT) John Hardin wrote: I took a quick look at the sources for jpegtopnm and could not see anything that would return an error code of 2048. What OS is this on? FuzzyOCR is returning $? as the "retcode", which is

Re: FuzzyOCR

2011-07-13 Thread David F. Skoll
On Wed, 13 Jul 2011 07:40:26 -0700 (PDT) John Hardin wrote: > I took a quick look at the sources for jpegtopnm and could not see > anything that would return an error code of 2048. What OS is this on? FuzzyOCR is returning $? as the "retcode", which is not the exit code. It's the exit _status_,

Re: FuzzyOCR

2011-07-13 Thread John Hardin
On Wed, 13 Jul 2011, polloxx wrote: Mail through mail server does does not recognise the spam image and generates an error. Through manual test works fine. That strongly suggests something in the environment of mail delivery is different than during manual testing. The most likely problem i

Re: improving the score for specific types of spam

2011-07-13 Thread Martin Gregorie
On Wed, 2011-07-13 at 15:29 +0200, J4K wrote: > On 07/13/2011 02:43 PM, Martin Gregorie wrote: > > On Wed, 2011-07-13 at 14:06 +0200, J4K wrote: > > > > I assume you tested it as well as running it through lint ("spamassassin > > > > > Comments: As written the rule won't work because __PR2 assumes

Re: improving the score for specific types of spam

2011-07-13 Thread J4K
On 07/13/2011 02:43 PM, Martin Gregorie wrote: > On Wed, 2011-07-13 at 14:06 +0200, J4K wrote: > > I assume you tested it as well as running it through lint ("spamassassin > > Comments: As written the rule won't work because __PR2 assumes that the > domain name starts at the beginning of the URI b

Re: improving the score for specific types of spam

2011-07-13 Thread Martin Gregorie
On Wed, 2011-07-13 at 14:06 +0200, J4K wrote: > I put this in to deter the wealth of job advertisments we get: > > describe PRIVATE_RULE1 English language job opportunity > body __PR1/(Employment opportunity|Job offer match, respond > to apply|Employment you've been searching|Job

Re: improving the score for specific types of spam

2011-07-13 Thread J4K
On 07/13/2011 01:23 PM, Martin Gregorie wrote: > On Wed, 2011-07-13 at 09:44 +0200, Geert Mak wrote: >> recently we had two specific types of spam getting very low score >> (about 3) and going through - >> >> a) one was about Armbanduhren (wrist watches in German) or >> Edelarmbanduhren (luxury wri

Re: FuzzyOCR

2011-07-13 Thread polloxx
On Mon, Jul 11, 2011 at 8:40 PM, John Hardin wrote: > On Mon, 11 Jul 2011, polloxx wrote: > >>> Okay, no error with the test message. >>> >>> So far we haven't been able to reproduce the error. >>> >>> Is it still occurring in the live mail stream? >> >> Yes. > > Ok. > >>> Was this test message me

Re: improving the score for specific types of spam

2011-07-13 Thread Martin Gregorie
On Wed, 2011-07-13 at 09:44 +0200, Geert Mak wrote: > recently we had two specific types of spam getting very low score > (about 3) and going through - > > a) one was about Armbanduhren (wrist watches in German) or > Edelarmbanduhren (luxury wrist watches) - all in that direction. > > b) the othe

Re: problem with spamassassin and sql

2011-07-13 Thread Kristian Kirilov
Ok, now my local.cf looking as follow: ifplugin Mail::SpamAssassin::Plugin::Shortcircuit rewrite_header Subject [* SPAM _SCORE_ *] required_score 5.0 report_safe 0 use_bayes 1 use_bayes_rules 1 bayes_auto_learn1 skip_rbl_checks 0 use_r

Re: problem with spamassassin and sql

2011-07-13 Thread Duane Hill
Wednesday, July 13, 2011, 3:14:53 AM, Kristian wrote: > Is it nessacary needed? When i start spamd in debug mode saw the > /usr/share/spamassassin/10_default_prefs.cf is proceeded. You shouldn't make any changes in the /usr/share/spamassassin directory as they could be overwritten when you upgrad

Re: problem with spamassassin and sql

2011-07-13 Thread Kristian Kirilov
Is it nessacary needed? When i start spamd in debug mode saw the /usr/share/spamassassin/10_default_prefs.cf is proceeded. > Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote: > >> Hello im using spamassassin and user prefs in mysql database, i have >> successfully setting up mysql table and al

Re: problem with spamassassin and sql

2011-07-13 Thread Duane Hill
Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote: > Hello im using spamassassin and user prefs in mysql database, i have > successfully setting up mysql table and all about correct work of > squirelmail plugin and from client site everything is ok. The problem is > spamassassin can't handle us

improving the score for specific types of spam

2011-07-13 Thread Geert Mak
hello, recently we had two specific types of spam getting very low score (about 3) and going through - a) one was about Armbanduhren (wrist watches in German) or Edelarmbanduhren (luxury wrist watches) - all in that direction. b) the other was about all kind of Job offers as i could not figur