SpamAssassin with SQL (userpref table), still get emails

2016-05-26 Thread wma
Hi, I use SpamAssassin-3.4.1p2 on OpenBSD 5.9. I also use sauserprefs plugin (v1.15-git) in Roundcube 1.1.4. I have a database 'mail' with the table 'userpref'. Through the sauserprefs, i can fill the userpref table. Below a sample : | username | preference | value

Re: PHP eval()'d code

2016-05-26 Thread David B Funk
On Thu, 26 May 2016, John Hardin wrote: On Thu, 26 May 2016, Reindl Harald wrote: Am 26.05.2016 um 20:50 schrieb RW: I noticed that Bayes is picking-up on very strong tokens from "eval" and "code" in headers like this: X-PHP-Originating-Script: 1013:global.php(1938) : eval()'d

Re: PHP eval()'d code

2016-05-26 Thread John Hardin
On Thu, 26 May 2016, Reindl Harald wrote: Am 26.05.2016 um 20:50 schrieb RW: I noticed that Bayes is picking-up on very strong tokens from "eval" and "code" in headers like this: X-PHP-Originating-Script: 1013:global.php(1938) : eval()'d code The "eval()'d code" part is in just

Re: spamass-milter: orphaned?

2016-05-26 Thread Andy Balholm
Yes, I eventually discovered -a in the help text. But it’s not in the man page. I sent a mail to the spamass-milt mailing list (and the maintainers) first, and got no response. It was the first post to that list since September 2014. Andy

Re: PHP eval()'d code

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 20:50 schrieb RW: I noticed that Bayes is picking-up on very strong tokens from "eval" and "code" in headers like this: X-PHP-Originating-Script: 1013:global.php(1938) : eval()'d code The "eval()'d code" part is in just over 2% of my spam, but it's never occurred in a

Re: spamass-milter: orphaned?

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 23:26 schrieb Andy Balholm: I know about the 0.4.0 release in 2014 (almost two years ago). But nothing has happened since then, except the filing of a couple of issues that have not been responded to. The only real issue I have run into is that the -a flag is not documented

Re: spamass-milter: orphaned?

2016-05-26 Thread Andy Balholm
I know about the 0.4.0 release in 2014 (almost two years ago). But nothing has happened since then, except the filing of a couple of issues that have not been responded to. The only real issue I have run into is that the -a flag is not documented on the man page. If it looked like the project

Re: spamass-milter: orphaned?

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 23:12 schrieb Andy Balholm: Where are those updates? There is nothing less than 20 months old at http://cvs.savannah.gnu.org/viewvc/spamass-milt/?root=spamass-milt Is this the Fedora changelog? It talks about upstream, and mentions Fedora 22 guess from where the Fedora

Re: spamass-milter: orphaned?

2016-05-26 Thread Andy Balholm
Where are those updates? There is nothing less than 20 months old at http://cvs.savannah.gnu.org/viewvc/spamass-milt/?root=spamass-milt Is this the Fedora changelog? It talks about upstream, and mentions Fedora 22. Andy

Re: spamass-milter: orphaned?

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 20:37 schrieb sha...@shanew.net: I hope he means a mechanism by which spamass-milter will allow specified (in the config, not in the code) SA headers to actually get added when they pass through spamass-milter. The current behavior is that four(?) SA headers are kept, but

Re: PHP eval()'d code

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 20:50 schrieb RW: I noticed that Bayes is picking-up on very strong tokens from "eval" and "code" in headers like this: X-PHP-Originating-Script: 1013:global.php(1938) : eval()'d code The "eval()'d code" part is in just over 2% of my spam, but it's never occurred in a

PHP eval()'d code

2016-05-26 Thread RW
I noticed that Bayes is picking-up on very strong tokens from "eval" and "code" in headers like this: X-PHP-Originating-Script: 1013:global.php(1938) : eval()'d code The "eval()'d code" part is in just over 2% of my spam, but it's never occurred in a single ham in my corpus. The spams

Re: spamass-milter: orphaned?

2016-05-26 Thread shanew
I hope he means a mechanism by which spamass-milter will allow specified (in the config, not in the code) SA headers to actually get added when they pass through spamass-milter. The current behavior is that four(?) SA headers are kept, but everything else is discarded. I've wanted something

Re: spamass-milter: orphaned?

2016-05-26 Thread Andy Balholm
> ...some other headers to be pushed to mail SA generates What do you mean? Andy

Re: Odd results when using whitelisting

2016-05-26 Thread Nick Howitt
On 26/05/2016 13:19, Nick Howitt wrote: OK, I've been heavily shot at for my set up which is totally irrelevant to the question I posed and not a pleasant experience. Is there any possibility of some help with the problem I posted about? Matus snuck in the most likely answer a while back

Re: spamass-milter: orphaned?

2016-05-26 Thread Matus UHLAR - fantomas
On 26.05.16 10:53, Andy Balholm wrote: Spamass-milter or spamass-milt (http://savannah.nongnu.org/projects/spamass-milt/) seems to be the de-facto standard for using SpamAssassin as a milter for Sendmail or Postfix, but it is woefully under-maintained. (The security problem mentioned on

spamass-milter: orphaned?

2016-05-26 Thread Andy Balholm
Spamass-milter or spamass-milt (http://savannah.nongnu.org/projects/spamass-milt/) seems to be the de-facto standard for using SpamAssassin as a milter for Sendmail or Postfix, but it is woefully under-maintained. (The security problem mentioned on

Re: SA Concepts - plugin for email semantics

2016-05-26 Thread Matus UHLAR - fantomas
On Thu, 26 May 2016 12:20:35 +0200 Matus UHLAR - fantomas wrote: you apparently mistook razor to DCC, the DCC is here to measure bulkiness, but not (necessarily) spamminess. On 26.05.16 09:46, Dianne Skoll wrote: Yes, you are correct. Thanks for the clarification! And

Re: FSL_HELO_HOME: deep headers again

2016-05-26 Thread John Hardin
On Thu, 26 May 2016, Reindl Harald wrote: Am 13.05.2016 um 18:18 schrieb John Hardin: On Fri, 13 May 2016, RW wrote: > On Fri, 13 May 2016 15:42:07 +0200 > Reindl Harald wrote: > > > WTF - Received: from daves-air.home ([1.125.7.92]) is another time a > > DEEP HEADER Inspection - > >

Re: FSL_HELO_HOME: deep headers again

2016-05-26 Thread Reindl Harald
Am 13.05.2016 um 18:18 schrieb John Hardin: On Fri, 13 May 2016, RW wrote: On Fri, 13 May 2016 15:42:07 +0200 Reindl Harald wrote: WTF - Received: from daves-air.home ([1.125.7.92]) is another time a DEEP HEADER Inspection - This looks like a simple mistake rather than a deliberate

Re: SA Concepts - plugin for email semantics

2016-05-26 Thread Dianne Skoll
On Thu, 26 May 2016 12:20:35 +0200 Matus UHLAR - fantomas wrote: > you apparently mistook razor to DCC, the DCC is here to measure > bulkiness, but not (necessarily) spamminess. Yes, you are correct. Thanks for the clarification! And also, just to clarify another thing:

Re: Odd results when using whitelisting

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 14:19 schrieb Nick Howitt: I'm finding it hard here. I am using preconfigured distro where Postfix, amavis and SA are all supplied as a working set up as is dnsmasq. There is no expectation that the users need to "go under the hood" to fix or change things. In my case I've

Re: Odd results when using whitelisting

2016-05-26 Thread Nick Howitt
OK, I've been heavily shot at for my set up which is totally irrelevant to the question I posed and not a pleasant experience. Is there any possibility of some help with the problem I posted about? Matus snuck in the most likely answer a while back - message size. In Amavis it look as if the

Re: Odd results when using whitelisting

2016-05-26 Thread Reindl Harald
Am 26.05.2016 um 12:22 schrieb Nick Howitt: On 2016-05-26 10:08, Reindl Harald wrote: how often where you asked to stop post HTML mails? and yes, rules are made by people asked for help I try lol - so you don't see the message you compose before hit "send"? but I use multiple machines

Re: Odd results when using whitelisting

2016-05-26 Thread Nick Howitt
On 2016-05-26 10:08, Reindl Harald wrote: how often where you asked to stop post HTML mails? and yes, rules are made by people asked for help I try, but I use multiple machines and don't always remember which I've set explicitly to use plain text. In theory I've set up something in the

Re: Odd results when using whitelisting

2016-05-26 Thread Reindl Harald
how often where you asked to stop post HTML mails? and yes, rules are made by people asked for help Am 26.05.2016 um 08:17 schrieb Nick Howitt: On 26/05/2016 00:29, Reindl Harald wrote: Am 25.05.2016 um 21:58 schrieb Nick Howitt: and what is the problem run a local unbound on port 1053 and

Re: Odd results when using whitelisting

2016-05-26 Thread Nick Howitt
On 26/05/2016 00:29, Reindl Harald wrote: Am 25.05.2016 um 21:58 schrieb Nick Howitt: and what is the problem run a local unbound on port 1053 and just add "dns_server [127.0.0.1]:1053" to