Re: RP_MATCHES_RCVD letting in SPAM

2013-08-21 Thread Joe Acquisto-j4
. . . >> I find a lot of references, for example, to BAYES_99 in >> /usr/share/spamassassin/blah.cf. I certainly don't know if these would >> override the setting in /etc/mail/spamassassin/local.cf. > > Local settings should override standard settings, so no. OK. That's what I thought. How

Re: RP_MATCHES_RCVD letting in SPAM

2013-08-21 Thread John Hardin
On Wed, 21 Aug 2013, Joe Acquisto-j4 wrote: Bear in mind, that will tell you whether those configuration files are syntactically correct; that does not tell you anything about whether or not those are the files the spamd daemon is using. Take a look at the script that starts spamd. It may ha

Re: skipped due to message size

2013-08-21 Thread Axb
On 08/21/2013 03:47 PM, Joe Acquisto-j4 wrote: I find a few of those 3 link (sudden craving for an IHOP breakfast spams, that contain mass quantities of non printable text in the body. This causes spamc to skip them. Cannot find where to change the message size, tho I must have, as it tells

Re: skipped due to message size

2013-08-21 Thread Matus UHLAR - fantomas
On 21.08.13 09:47, Joe Acquisto-j4 wrote: I find a few of those 3 link (sudden craving for an IHOP breakfast spams, that contain mass quantities of non printable text in the body. This causes spamc to skip them. Cannot find where to change the message size, tho I must have, as it tells me the l

skipped due to message size

2013-08-21 Thread Joe Acquisto-j4
I find a few of those 3 link (sudden craving for an IHOP breakfast spams, that contain mass quantities of non printable text in the body. This causes spamc to skip them. Cannot find where to change the message size, tho I must have, as it tells me the limit is 512000 where I understand the de

Re: RP_MATCHES_RCVD letting in SPAM

2013-08-21 Thread Joe Acquisto-j4
> > Bear in mind, that will tell you whether those configuration files are > syntactically correct; that does not tell you anything about whether or > not those are the files the spamd daemon is using. > > Take a look at the script that starts spamd. It may have a hardcoded path > to the conf

Re: reject unverified sender with infut from spamassassin

2013-08-21 Thread Robert Schetterer
Am 21.08.2013 11:41, schrieb Per-Erik irt Persson: > On 08/21/2013 10:22 AM, Robert Schetterer wrote: >> Am 21.08.2013 09:59, schrieb Per-Erik irt Persson: >>> Or is smtpverification just a path that you don't want to walk down? >> please read i.e >> >> http://www.postfix.org/ADDRESS_VERIFICATION_R

Re: reject unverified sender with infut from spamassassin

2013-08-21 Thread Per-Erik irt Persson
On 08/21/2013 10:22 AM, Robert Schetterer wrote: > Am 21.08.2013 09:59, schrieb Per-Erik irt Persson: >> Or is smtpverification just a path that you don't want to walk down? > please read i.e > > http://www.postfix.org/ADDRESS_VERIFICATION_README.html > > > > Sender address verification for al

Re: SUBJ_ALL_CAPS

2013-08-21 Thread RW
On Tue, 20 Aug 2013 18:37:08 -0400 Joe Sniderman wrote: > On 08/20/2013 12:35 PM, Andrew Talbot wrote: > > Hey all - > > > > > > > > Does anybody know how long the string needs to be to trigger > > SUBJ_ALL_CAPS? I know it has to be multi-word and over a certain > > length. Was wondering the s

Re: reject unverified sender with infut from spamassassin

2013-08-21 Thread Robert Schetterer
Am 21.08.2013 09:59, schrieb Per-Erik irt Persson: > Or is smtpverification just a path that you don't want to walk down? please read i.e http://www.postfix.org/ADDRESS_VERIFICATION_README.html Sender address verification for all email Unfortunately, sender address verification cannot sim

reject unverified sender with infut from spamassassin

2013-08-21 Thread Per-Erik irt Persson
I have used spamassassin as one of my tools to fight phishing for a while. Recently this idea which involves smtpverification and logmonitoring emerged. Monitoring the syslog for certain phishy tags such as EMAIL_URI_PHISH or similar and connecting this to a trigger that extracts the senders email