Is there a header size limit on To: header rules?

2012-04-20 Thread cyboc
We have been receiving 419 spam with extremely long lists of email addresses in the To: header. I'm talking hundreds of addresses. I've noticed that the same email addresses keep on appearing near my user's email address in the To: header. I have created a rule to check for those particular

calling Mail::SpamAssassin-new() within my perl script

2012-04-20 Thread bacon
I'm working on a project where I'm trying to use spamassassin to recognize and tag a set of incoming mail messages. I'm using SA 3.3.1 at the moment with perl 5.10.1 on a Red Hat 6.2 system. I've written a set of rules which work with my corpus of messages, but I'm having trouble calling

Re: Is there a header size limit on To: header rules?

2012-04-20 Thread cyboc
I have been systematically testing this to see what the limit is. Specifically, I have been adding characters and addresses to the list of email addresses in the To: header to see at what point my rule stops being hit. As far as I can tell, it is a byte limit, not a number of email addresses

Re: Is there a header size limit on To: header rules?

2012-04-20 Thread Axb
On 04/20/2012 08:00 PM, cyboc wrote: I have been systematically testing this to see what the limit is. Specifically, I have been adding characters and addresses to the list of email addresses in the To: header to see at what point my rule stops being hit. As far as I can tell, it is a byte

Re: Is there a header size limit on To: header rules?

2012-04-20 Thread cyboc
Axb wrote: Please put a sample on pastebin. There may be other traits to catch these Hi Axb, please forgive me: What is pastebin? (Newbie poster here.) -- View this message in context: http://old.nabble.com/Is-there-a-header-size-limit-on-To%3A-header-rules--tp33721936p33722246.html

Re: Is there a header size limit on To: header rules?

2012-04-20 Thread Axb
On 04/20/2012 08:07 PM, cyboc wrote: Axb wrote: Please put a sample on pastebin. There may be other traits to catch these Hi Axb, please forgive me: What is pastebin? (Newbie poster here.) http://lmgtfy.com/?q=pastebin

Re: Pill spams

2012-04-20 Thread Ned Slider
On 16/04/12 04:56, John Hardin wrote: On Tue, 10 Apr 2012, John Hardin wrote: On Tue, 10 Apr 2012, Thomas Johnson wrote: On Tue, Apr 10, 2012 at 7:08 AM, Bowie Bailey bowie_bai...@buc.com wrote: That sounds like it might be good rule-fodder. subject, Subject, and SUBJECT are possibly

Re: Is there a header size limit on To: header rules?

2012-04-20 Thread Michael Parker
On Apr 20, 2012, at 12:17 PM, cyboc wrote: We have been receiving 419 spam with extremely long lists of email addresses in the To: header. I'm talking hundreds of addresses. I've noticed that the same email addresses keep on appearing near my user's email address in the To: header. I

use_bayes=0 completly disables report function

2012-04-20 Thread Marcin Mirosław
Hello, i've notice when i set use_bayes 0 then spamc -C report stops to work. I've got in log: spamd: Can't call method learn on an undefined value at /usr/lib64/perl5/vendor_perl/5.12.4/Mail/SpamAs sassin/PerMsgLearner.pm line 111, GEN187 line 117. Whay i've to use bayes when i want to report

Re: Pill spams

2012-04-20 Thread Ned Slider
On 20/04/12 20:17, Ned Slider wrote: On 16/04/12 04:56, John Hardin wrote: On Tue, 10 Apr 2012, John Hardin wrote: On Tue, 10 Apr 2012, Thomas Johnson wrote: On Tue, Apr 10, 2012 at 7:08 AM, Bowie Bailey bowie_bai...@buc.com wrote: That sounds like it might be good rule-fodder. subject,

Re: Pill spams

2012-04-20 Thread Ned Slider
On 20/04/12 23:24, Ned Slider wrote: On 20/04/12 20:17, Ned Slider wrote: On 16/04/12 04:56, John Hardin wrote: On Tue, 10 Apr 2012, John Hardin wrote: On Tue, 10 Apr 2012, Thomas Johnson wrote: On Tue, Apr 10, 2012 at 7:08 AM, Bowie Bailey bowie_bai...@buc.com wrote: That sounds like it

Re: Pill spams

2012-04-20 Thread John Hardin
(examples on pastebin below). I wonder if this could also be leveraged into a rule? Already there. http://ruleqa.spamassassin.org/20120420-r1328260-n/T_HDRS_MISSP It's not doing too well at the moment given corpus starvation. I don't think it's in the last update either. Again, having those

Re: Pill spams

2012-04-20 Thread John Hardin
On Fri, 20 Apr 2012, Ned Slider wrote: John - please could you explain the closing /sm as I'm unfamiliar with it's usage? Multiline matching. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key:

Re: use_bayes=0 completly disables report function

2012-04-20 Thread darxus
On 04/20, Marcin Mirosław wrote: Hello, i've notice when i set use_bayes 0 then spamc -C report stops to work. I've got in log: spamd: Can't call method learn on an undefined value bayes_learn_during_report 0 -- Safe is anywhere a hungry person can't walk in three days. - John Titor

Re: use_bayes=0 completly disables report function

2012-04-20 Thread Marcin Mirosław
W dniu 2012-04-21 04:58, dar...@chaosreigns.com pisze: On 04/20, Marcin Mirosław wrote: Hello, i've notice when i set use_bayes 0 then spamc -C report stops to work. I've got in log: spamd: Can't call method learn on an undefined value bayes_learn_during_report 0 Hi darxus, thanks for

Re: use_bayes=0 completly disables report function

2012-04-20 Thread Marcin Mirosław
W dniu 2012-04-21 07:38, Marcin Mirosław pisze: I'm guessing, as for now, it's the best to set connection to non existent database (disadvantage is high number of error messages in log). I tried, it looks none rror messages appears in logs. Fine for me:) Regards, Marcin