Re: Another form of obfuscation email.

2019-01-27 Thread Bill Cole
On 26 Jan 2019, at 23:43, Mark London wrote: Does anyone have any rules that can catch this type of obfuscated spam? https://pastebin.com/qi8dsREW Thanks. - Mark I've been playing with a suite of rules around a concept that hits this example for a while, but haven't gotten around to doing

Re: Another form of obfuscation email.

2019-01-27 Thread Bill Cole
On 27 Jan 2019, at 0:46, John Hardin wrote: why would legitimate emails include invisible text? Probably the same reason legitimate emails for an almost exclusively US audience (from "America's Text Kitchen") contain "Zero Width Non-Joiners" both in plain text parts as UTF-8 characters and a

Re: problem with perl Net Patricia

2019-01-27 Thread Bill Cole
On 27 Jan 2019, at 14:28, Rick Gutierrez wrote: Hi list , I am using spamassassin 3.4.2 with centos 6.10, and when restart spamassassin it shows me the following message: Starting spamd: Use of uninitialized value $ 3 in concatenation (.) Or string at /usr/lib64/perl5/vendor_perl/Net/Patricia.p

Re: adding _SCORE_ to all messages

2019-01-27 Thread John Hardin
On Sun, 27 Jan 2019, LegendGamesMaster wrote: Yep - i've just finished examining the logs and the size was over our default (256k on our system for some reason). Limit increased, and it appears to have solved the issue. Will keep checking. Also added zen.spamhaus.org as a blacklist checker, a

Re: Another form of obfuscation email.

2019-01-27 Thread John Hardin
On Sat, 26 Jan 2019, John Hardin wrote: On Sat, 26 Jan 2019, Mark London wrote: Does anyone have any rules that can catch this type of obfuscated spam? https://pastebin.com/qi8dsREW There's some "invisible font" subrules in my sandbox that this hits (__STY_INVIS_MANY, __FONT_INVIS_MANY) bu

problem with perl Net Patricia

2019-01-27 Thread Rick Gutierrez
Hi list , I am using spamassassin 3.4.2 with centos 6.10, and when restart spamassassin it shows me the following message: Starting spamd: Use of uninitialized value $ 3 in concatenation (.) Or string at /usr/lib64/perl5/vendor_perl/Net/Patricia.pm line 34. some idea that may be causing that mess

Re: adding _SCORE_ to all messages

2019-01-27 Thread LegendGamesMaster
Yep - i've just finished examining the logs and the size was over our default (256k on our system for some reason). Limit increased, and it appears to have solved the issue. Will keep checking. Also added zen.spamhaus.org as a blacklist checker, as this wasnt enabled. Need to check that SA is using

Re: adding _SCORE_ to all messages

2019-01-27 Thread RW
On Sun, 27 Jan 2019 06:04:09 -0700 (MST) LegendGamesMaster wrote: i can twork out how to add a _SCORE_ to the subject line of ham as > well > > Im asking this as some spam appears to be getting through unchecked - > im trouble shooting and wanted a quick way to see when a message was > unchecked

Re: adding _SCORE_ to all messages

2019-01-27 Thread LegendGamesMaster
yeah - i already went through that - I was under the impression that the subject rewrite only works for spam, not ham. i can twork out how to add a _SCORE_ to the subject line of ham as well Im asking this as some spam appears to be getting through unchecked - im trouble shooting and wanted a qu

Re: adding _SCORE_ to all messages

2019-01-27 Thread Duane Hill
Sunday, January 27, 2019, 5:45:13 AM, you wrote: > I've searched and searched - and cant find an answer! > can I add the _SCORE_ to all message subjects not JUST spam? > I have SA set to add X-Spam headers to all (and thats working), but i'd like > to see the score in all the subjects. Check out

adding _SCORE_ to all messages

2019-01-27 Thread LegendGamesMaster
I've searched and searched - and cant find an answer! can I add the _SCORE_ to all message subjects not JUST spam? I have SA set to add X-Spam headers to all (and thats working), but i'd like to see the score in all the subjects. -- Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssa

Re: mail with HUNDREDS of links not being checked

2019-01-27 Thread LegendGamesMaster
Thanks - i'll work through your comments. MUCH APPRECIATED. -- Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Users-f3.html

Re: mail with HUNDREDS of links not being checked

2019-01-27 Thread Antony Stone
On Sunday 27 January 2019 at 12:20:02, LegendGamesMaster wrote: > Hi Folks - i've tried to post this several times with no success. Have you had any indication of what the failure is (eg: any error messages, bounces back to you), or have you simply not seen your mail appear on the list? > 1) m

mail with HUNDREDS of links not being checked

2019-01-27 Thread LegendGamesMaster
Hi Folks - i've tried to post this several times with no success. 1) my cf file is set to add X-Spam headers to all. 2) it is clearly doing this for most email 3) is is NOT doing this for the following: email with a hidden DIV containing HUNDREDS of links in succession. i'm assuming SA is timing