* 4.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* 1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
* 2.9 KAM_LOTTO1 Likely to be a e-Lotto Scam Email
Is your header formatted like this in Thunderbird or are you using a
different MUA?
* 4.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* 1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
* 2.9 KAM_LOTTO1 Likely to be a e-Lotto Scam Email
Is your header formatted like this in Thunderbird or are you using a
different MUA? If
So what I want is to get a list of all performed check and the score of this
check.
If you want to see the scores of the successful checks in all emails,
put this in your cf file:
add_header all Report _REPORT_
--
Dan Schaefer
Application Developer
Performance Administration Corp.
any idea why this rule never works for domain1 or domain2 but only domain3
header whitelist_from_luser From =~ /domain1\.com/i
header whitelist_from_luser From =~ /domain2\.com/i
header whitelist_from_luser From =~ /domain3\.com/i
score whitelist_from_luser -2.5
How do I log the score for
Second, I don't want to keep adding/modifying rules/scores in
/.spamassassin/user_prefs if it's not the correct way. As I am
constantly tweaking my spam scores, can I add scores to a config file
and make them become active without having to restart SA? Right now,
adding them to
I'm running SA daemonized. I know that it reads
/.spamassassin/user_prefs (not a typo), /etc/mail/spamassassin/local.cf,
and /usr/share/spamassassin/ for configuration. I know I don't have
something set right, because /.spamassassin/user_prefs is being read
because spamd is run with
David Lomax wrote:
Did ANYONE read Evan's response?
--
Dan Schaefer
Application Developer
Performance Administration Corp.
boogybren wrote:
Any suggestions would be greatly appreciated. Attached is my local.cf
Simple solution, but you may not have tried it...restart spamassassin
--
Dan Schaefer
Application Developer
Performance Administration Corp.
McDonald, Dan wrote:
Yes, remove the outer parentheses.
Here are the rules I am using:
bodyAE_MEDS35 /w{2,4}\s(?:meds|shop)\d{1,4}\s(?:net|com|org)/
describe AE_MEDS35 obfuscated domain seen in spam
score AE_MEDS35 3.00
bodyAE_MEDS38
Gerry Maddock wrote:
McDonald, Dan wrote:
Since we're sharing rules for this recent Spam outbreak, here is my
rule:
body DRUG_SITE /www(\.|\
)*(med|meds|gen|pill|shop|via|cu|co|ba|da|bu|ba)[0-9]{2}(\.|\ )*(net|
com)/
You should avoid the use of *, as it allows
John Hardin wrote:
On Fri, 10 Jul 2009, Daniel Schaefer wrote:
Gerry Maddock wrote:
McDonald, Dan wrote:
body DRUG_SITE /www(\.|\
) *(med|meds|gen|pill|shop|via|cu|co|ba|da|bu|ba)[0-9]{2}(\.|\
) )*(net|com)/
You should avoid the use of *, as it allows spammers to consume
all
John Hardin wrote:
On Fri, 10 Jul 2009, Daniel Schaefer wrote:
Doesn't the . (period) need escaped in this? [.\s]{1,3}
Nope. [] means explicit set of characters, and . = any
character conflicts with that context.
Thanks for the clarification. I'm still learning REs.
--
Dan Schaefer
Mike Cardwell wrote:
Steve Bertrand wrote:
Hi everyone,
I aggregate my work and personal email accounts within the same email
client. All accounts are IMAP-based.
My $work employs a Barracuda cluster, and of course my box runs SA.
From time-to-time, I'll get a SPAM message come through the
Now that I have a SA Daily Summary report for the rule hits, now I'm
looking for a command(s) to run that will show me the end score that
will be applied to a successful hit after reading all cf files and
user_prefs files. For example:
/usr/share/spamassassin/50_scores.cf may contain: score
Forgot reply all.
Ok, when all I have is 1 score, is that used for all four scenarios?
Dan Schaefer
Application Developer
Performance Administration Corp.
Bowie Bailey wrote:
Daniel Schaefer wrote:
Also, can someone explain or send me a link to a *full* explanation
of the 4 different
I just installed that and it works nicely. However, we're getting off
track a little... My second question was answered with RTFMP, but my
first question about a script that will show me the ending score after
all config files have been read, has not been answered. If anyone knows
of any kind
I have searched far and wide for a good Spamassassin report using
numerous keywords in Google searches, but I can't find the one that fits
my needs. I am looking for a script that can be run via cron job on a
daily basis. I would pass the script the location of the mail log. The
output will
Yes, actually it is exactly what I'm looking for. I saw another sa-stats
script that only showed the %'s for HAM and SPAM and the average score
and what not. Thank you sir for sending me this.
Dan Schaefer
Application Developer
Performance Administration Corp.
Rick Macdougall wrote:
Daniel
I guess there's one thing missing. I can't enter a date range...(today,
yesterday, etc).
Dan Schaefer
Application Developer
Performance Administration Corp.
Daniel Schaefer wrote:
Yes, actually it is exactly what I'm looking for. I saw another
sa-stats script that only showed the %'s
community, or would you ask for some sort of compensation?
Dan Schaefer
Application Developer
Performance Administration Corp.
Martin Gregorie wrote:
On Fri, 2009-07-03 at 12:03 -0400, Daniel Schaefer wrote:
If you have found something similar to this, good. If you have created
your own script
20 matches
Mail list logo
