Re: SA-Update not updating DB

2017-11-16 Thread Rafael Leiva-Ochoa
Updated mine, it seems to be working so far. On Wed, Nov 15, 2017 at 5:39 AM, Kevin A. McGrail wrote: > On 11/15/2017 8:27 AM, David Jones wrote: > >> >> We are getting closer to having complete rulesets working again. >> >> NOTE: The latest ruleset generated hours

Re: SA-Update not updating DB

2017-11-16 Thread Chris
On Thu, 2017-11-16 at 09:06 -0600, David Jones wrote: > On 11/16/2017 08:57 AM, Chris wrote: > > > > On Thu, 2017-11-16 at 07:22 -0600, David Jones wrote: > > > > > > Great news!  Last night's run finally produced a full > > > 72_scores.cf. > > > Big > > > thanks to Merijn van den Kroonenberg

Re: The rise of highly targeted spam emails

2017-11-16 Thread Martin Gregorie
> Thank you for the info. I haven't considered it before, but it makes  > sense to store large mail archives in SQL databases. I suppose it is > one of the few ways to efficiently search such a large volume of data > - much faster than searching Maildir or MBOX archives. > ... and it lets you

Re: The rise of highly targeted spam emails

2017-11-16 Thread Sebastian Arcus
On 16/11/17 12:16, Martin Gregorie wrote: On Thu, 2017-11-16 at 09:15 +, Sebastian Arcus wrote: On 15/11/17 18:11, Martin Gregorie wrote: On Wed, 2017-11-15 at 14:44 +, Sebastian Arcus wrote: I initially decided that an archive was A Good Thing to have, simply because retrieving

Re: all recipients with the same first character

2017-11-16 Thread RW
On Thu, 16 Nov 2017 11:56:03 + MAYER Hans wrote: > Dear All, > > Analyzing some e-mails which are not caught by SA I see sometime the > following scenario: Such an e-mail is sent to a lot of people ( not > only to the own domain ) and all e-mail addresses start with the same > first

Re: SA-Update not updating DB

2017-11-16 Thread Matthew Broadhead
Hi, I downloaded and applied the update on CentOS 7 3.10.0-693.2.2.el7.x86_64.  spamassassin-3.4.0-2.el7.x86_64. everything seems to be working fine so far.  I will let you know if there are any issues Thanks for all the work on the update, Matthew On 16/11/2017 14:22, David Jones wrote:

Re: SA-Update not updating DB

2017-11-16 Thread Dave Wreski
REV=1815298 wget http://sa-update.ena.com/${REV}.tar.gz wget http://sa-update.ena.com/${REV}.tar.gz.sha1 wget http://sa-update.ena.com/${REV}.tar.gz.asc sa-update -v --install ${REV}.tar.gz (reload/restart whatever is calling SA -- spamd, amavis-new, mimedefang, MailScanner, etc.) I have

Re: SA-Update not updating DB

2017-11-16 Thread David Jones
On 11/16/2017 08:57 AM, Chris wrote: On Thu, 2017-11-16 at 07:22 -0600, David Jones wrote: Great news!  Last night's run finally produced a full 72_scores.cf. Big thanks to Merijn van den Kroonenberg for helping track down the remaining issues!  There were about 3 rules difference which could

Re: SA-Update not updating DB

2017-11-16 Thread Chris
On Thu, 2017-11-16 at 07:22 -0600, David Jones wrote: > Great news!  Last night's run finally produced a full 72_scores.cf. > Big  > thanks to Merijn van den Kroonenberg for helping track down the  > remaining issues!  There were about 3 rules difference which could > be  > expected with 8 months

Re: potential new SA feature: Direct DNS Querying Per DNSBL Zone

2017-11-16 Thread RW
On Wed, 15 Nov 2017 12:03:58 -0500 Rob McEwen wrote: > Why is this "Direct DNS Querying Per DNSBL Zone" feature > needed/important? In most of these cases you'd be better-off simply setting "dns_server" in the SA configuration. This eliminates the effect of changes to resolv.conf, and the

Re: SA-Update not updating DB

2017-11-16 Thread David Jones
Great news!  Last night's run finally produced a full 72_scores.cf. Big thanks to Merijn van den Kroonenberg for helping track down the remaining issues!  There were about 3 rules difference which could be expected with 8 months difference. # cat disappeared_rules.txt ADVANCE_FEE_4_NEW

Re: all recipients with the same first character

2017-11-16 Thread hamann . w
>> >> Dear All, >> >> Analyzing some e-mails which are not caught by SA I see sometime the >> following scenario: >> Such an e-mail is sent to a lot of people ( not only to the own domain ) and >> all e-mail addresses start with the same first character. >> If I see this I know immediately

Re: The rise of highly targeted spam emails

2017-11-16 Thread Martin Gregorie
On Thu, 2017-11-16 at 09:15 +, Sebastian Arcus wrote: > On 15/11/17 18:11, Martin Gregorie wrote: > > On Wed, 2017-11-15 at 14:44 +, Sebastian Arcus wrote: > > > > > > I initially decided that an archive was A Good Thing to have, > > simply because retrieving mail from it should be a

all recipients with the same first character

2017-11-16 Thread MAYER Hans
Dear All, Analyzing some e-mails which are not caught by SA I see sometime the following scenario: Such an e-mail is sent to a lot of people ( not only to the own domain ) and all e-mail addresses start with the same first character. If I see this I know immediately this is spam. Is there

Re: The rise of highly targeted spam emails

2017-11-16 Thread Sebastian Arcus
On 15/11/17 18:11, Martin Gregorie wrote: On Wed, 2017-11-15 at 14:44 +, Sebastian Arcus wrote: I initially decided that an archive was A Good Thing to have, simply because retrieving mail from it should be a lot faster than searching through huge mail folders. This turned out to be

Re: The rise of highly targeted spam emails

2017-11-16 Thread Sebastian Arcus
On 15/11/17 15:16, Reindl Harald wrote: Am 15.11.2017 um 15:47 schrieb Sebastian Arcus: On 15/11/17 09:56, Reindl Harald wrote: Am 15.11.2017 um 09:41 schrieb Sebastian Arcus: I can't really train the bayesian filter on these emails, as it would start to affect ham emails classification