Re: Certain types of spam seem to get through SA

2014-08-29 Thread Martin Gregorie
On Fri, 2014-08-29 at 16:55 -0600, LuKreme wrote: > On 28 Aug 2014, at 17:38 , Martin Gregorie wrote: > > http://www.libelle-systems.com/free/portmanteau/portmanteau.tgz > > > > This file is a compressed source archive that includes documentation for > > the tool and the definition file format. >

Re: Give a penalty to messages with non latin UTF-8 characters?

2014-08-29 Thread jdebert
On Fri, 29 Aug 2014 11:41:48 +0200 Michael Opdenacker wrote: > > I find it hard to believe I'm the only one getting spam in Chinese > characters ;) > And "legitimate" messages as well. (Here, at least.) BLocking merely messages have more than just the Roman alphabet in them is a bit too much.

Re: Outlook, we do love to hate you....

2014-08-29 Thread Jason Haar
while we're having a grizzle... how about the Outlook/MAPI "feature" where if you copy/move an Exchange mail message onto an IMAP folder, what arrives can barely be described as a legitimate mail message: it has no "Received:" headers, and it's To/From lines consist of "Jason Haar" instead of "Jas

Re: How to report spam to mailspike

2014-08-29 Thread Linda Walsh
Dave Warren wrote: On 2014-08-29 02:38, Marcin Mirosław wrote: So what should I do in your opinion? I'm getting spam to my private spamtrap so I can't fill fields about company - it doesn't matter where I'm hired for reporting spam. What if I would be unemployed? Then I would have to lie about c

Re: Certain types of spam seem to get through SA

2014-08-29 Thread LuKreme
On 28 Aug 2014, at 17:38 , Martin Gregorie wrote: > http://www.libelle-systems.com/free/portmanteau/portmanteau.tgz > > This file is a compressed source archive that includes documentation for > the tool and the definition file format. Any reason not to include your dataset? -- If at first you

Re: no subject tagging in case of "X-Spam-Status: Yes"

2014-08-29 Thread Reindl Harald
Am 30.08.2014 um 00:35 schrieb Karsten Bräckelmann: > On Fri, 2014-08-29 at 12:02 +0200, Reindl Harald wrote: >> Am 29.08.2014 um 04:03 schrieb Karsten Bräckelmann: > >>> Now, moving forward: I've had a look at the message diffs. Quite >>> interesting, and I honestly want to figure out what's ha

Re: no subject tagging in case of "X-Spam-Status: Yes"

2014-08-29 Thread Karsten Bräckelmann
On Fri, 2014-08-29 at 12:02 +0200, Reindl Harald wrote: > Am 29.08.2014 um 04:03 schrieb Karsten Bräckelmann: > > Now, moving forward: I've had a look at the message diffs. Quite > > interesting, and I honestly want to figure out what's happening. > > it looks really like spamass-milter is respon

Re: Give a penalty to messages with non latin UTF-8 characters?

2014-08-29 Thread Dave Warren
On 2014-08-29 02:41, Michael Opdenacker wrote: I find it hard to believe I'm the only one getting spam in Chinese characters;) I get a fair amount in my spamtraps, but only because my trap addresses are very permissive. None of it would have been accepted for normal delivery. -- Dave Warren

Re: How to report spam to mailspike

2014-08-29 Thread Dave Warren
On 2014-08-29 02:38, Marcin Mirosław wrote: So what should I do in your opinion? I'm getting spam to my private spamtrap so I can't fill fields about company - it doesn't matter where I'm hired for reporting spam. What if I would be unemployed? Then I would have to lie about company? IMHO it is t

Re: Spam info headers

2014-08-29 Thread Karsten Bräckelmann
On Fri, 2014-08-29 at 00:30 -0400, Alex wrote: > Regarding report_safe, the docs say it can only be applied to spam. Is > that correct? Yes, it only applies to spam. It defines whether classified spam will be attached to a newly generated reporting message, or only modified by adding some X-Spam h

Re: remove_header not working?

2014-08-29 Thread Karsten Bräckelmann
On Fri, 2014-08-29 at 11:46 +0200, Axb wrote: > Those reports are "added" by Exim's interface which does not seem to > respect the local.cf directives. Exim accessing SA template tags? > On 08/29/2014 11:29 AM, Fürtbauer Wolfgang wrote: > > unfortunatelly not, X-Spam-Reports are still there If

Re: Add spamassassin triggered rules in logs when email is blocked

2014-08-29 Thread Karl Johnson
On Fri, Aug 29, 2014 at 3:11 PM, Karsten Bräckelmann wrote: > On Fri, 2014-08-29 at 11:27 -0400, Karl Johnson wrote: > > I'm using amavisd-new-2.9.1 and SpamAssassin v3.3.1. I would like to > > know if it's possible to add Spamassassin triggered rules when an > > email is blocked because I discar

Re: Advice on how to block via a mail domain in maillog

2014-08-29 Thread Karsten Bräckelmann
On Fri, 2014-08-29 at 12:43 -0600, Philip Prindeville wrote: > On Aug 29, 2014, at 6:45 AM, Kevin A. McGrail wrote: > > On 8/29/2014 5:48 AM, emailitis.com wrote: > > > I have a lot of Spam getting into our mail servers where the common > > > thread is cloudapp You guys realize cloudapp.net is M

Re: Add spamassassin triggered rules in logs when email is blocked

2014-08-29 Thread Karsten Bräckelmann
On Fri, 2014-08-29 at 11:27 -0400, Karl Johnson wrote: > I'm using amavisd-new-2.9.1 and SpamAssassin v3.3.1. I would like to > know if it's possible to add Spamassassin triggered rules when an > email is blocked because I discard the email when it's spam and I want > to know why it's blocked (whic

Re: Advice on how to block via a mail domain in maillog

2014-08-29 Thread Philip Prindeville
On Aug 29, 2014, at 6:45 AM, Kevin A. McGrail wrote: > On 8/29/2014 5:48 AM, emailitis.com wrote: >> I have a lot of Spam getting into our mail servers where the common thread >> is cloudapp >> >> /root/weeklymail/Thumaillog:Aug 27 11:58:15 plesk3 qmail-scanner-queue.pl: >> qmail-scanner[120

Add spamassassin triggered rules in logs when email is blocked

2014-08-29 Thread Karl Johnson
Hello, I'm using amavisd-new-2.9.1 and SpamAssassin v3.3.1. I would like to know if it's possible to add Spamassassin triggered rules when an email is blocked because I discard the email when it's spam and I want to know why it's blocked (which rules). For now I only have the score (hits) in mail

Re: Advice on how to block via a mail domain in maillog

2014-08-29 Thread Axb
On 08/29/2014 02:45 PM, Kevin A. McGrail wrote: On 8/29/2014 5:48 AM, emailitis.com wrote: I have a lot of Spam getting into our mail servers where the common thread is cloudapp /root/weeklymail/Thumaillog:Aug 27 11:58:15 plesk3 qmail-scanner-queue.pl: qmail-scanner[12013]: Clear:RC:0(216.170.

Re: Advice on how to block via a mail domain in maillog

2014-08-29 Thread Kevin A. McGrail
On 8/29/2014 5:48 AM, emailitis.com wrote: I have a lot of Spam getting into our mail servers where the common thread is cloudapp /root/weeklymail/Thumaillog:Aug 27 11:58:15 plesk3 qmail-scanner-queue.pl: qmail-scanner[12013]: Clear:RC:0(216.170.115.184):SA:0(0.9/4.0): 4.409458 6225 comp..

Re: no subject tagging in case of "X-Spam-Status: Yes"

2014-08-29 Thread Reindl Harald
Am 29.08.2014 um 04:26 schrieb Karsten Bräckelmann: > On Fri, 2014-08-29 at 02:15 +0200, Reindl Harald wrote: >> look at the attached zp-archive [...] > > Since I already had a closer look at the contents including your local > cf, and I am here to offer help and didn't mean no harm, some commen

Re: no subject tagging in case of "X-Spam-Status: Yes"

2014-08-29 Thread Reindl Harald
Am 29.08.2014 um 04:03 schrieb Karsten Bräckelmann: > On Fri, 2014-08-29 at 02:15 +0200, Reindl Harald wrote: >> look at the attached zp-archive and both messages >> produced with the same content before you pretend >> others lying damned - to make it easier i even >> added a config-diff > > But

Advice on how to block via a mail domain in maillog

2014-08-29 Thread emailitis.com
I have a lot of Spam getting into our mail servers where the common thread is cloudapp /root/weeklymail/Thumaillog:Aug 27 11:58:15 plesk3 qmail-scanner-queue.pl: qmail-scanner[12013]: Clear:RC:0(216.170.115.184):SA:0(0.9/4.0): 4.409458 6225 comp...@franking-expert.co.uk u...@domain.com Saving_b

Re: remove_header not working?

2014-08-29 Thread Axb
please keep list mail on the list. Those reports are "added" by Exim's interface which does not seem to respect the local.cf directives. Maybe some Exim user can help you further, either on the SA or if not on the Exim list. Sorry, can't help further... On 08/29/2014 11:29 AM, Fürtbauer W

Re: Give a penalty to messages with non latin UTF-8 characters?

2014-08-29 Thread Michael Opdenacker
Hi, On 08/25/2014 05:17 PM, Michael Opdenacker wrote: > > Is there a simple way to give a penalty to messages containing non latin > UTF-8 characters? > > I'm asking because we are receiving quite a lot of Chinese junk mail > with subjects in Chinese (or more generally non-latin) characters, but:

Re: How to report spam to mailspike

2014-08-29 Thread Marcin Mirosław
W dniu 28.08.2014 o 11:20, Reindl Harald pisze: > > Am 28.08.2014 um 11:11 schrieb Marcin Mirosław: >> I've noticed growing volume of emails listed by mailspike. Usually it's >> spam listed as "good reputation". On his webpage I can see only page >> http://mailspike.org/contact.html , they want to

Re: remove_header not working?

2014-08-29 Thread Fürtbauer Wolfgang
Hi, I'm trying to remove "my own" X-Spam-Report for ham mails leaving my organisation in order not to bother the other party. I had serveral mails returned because of the X-Spam-Reports Improper folded header field made up entirely of whitespace (char 20 hex): X-Spam-Report: ... postmast

Re: remove_header not working?

2014-08-29 Thread Axb
On 08/29/2014 10:29 AM, Fürtbauer Wolfgang wrote: Dear all, I'd like to remove the X-Spam-Report header for mails in case of ham therefore I added remove_header ham Report to my local.cf But still ham messages have the X-Spam-Report header?! What am I doing wrong? SpamAssassin Server versi

remove_header not working?

2014-08-29 Thread Fürtbauer Wolfgang
Dear all, I'd like to remove the X-Spam-Report header for mails in case of ham therefore I added remove_header ham Report to my local.cf But still ham messages have the X-Spam-Report header?! What am I doing wrong? SpamAssassin Server version 3.4.0 running on Perl 5.10.0 with SSL suppor