Re: configure question

2015-01-17 Thread Daniel Staal
--As of January 17, 2015 4:20:36 PM -0700, Michael Williamson is alleged to have said: to both /etc/mail/spamassassin/local.cf and /home/username/.spamassassin/user_prefs, I check the file permissions to be readable by all. I restart it # service spamassassin restart --As for the rest, it

Re: regex: chars to escape bsides @

2015-01-05 Thread Daniel Staal
--As of January 5, 2015 4:38:03 PM -0800, John Hardin is alleged to have said: On Mon, 5 Jan 2015, Bowie Bailey wrote: On 1/5/2015 4:13 PM, John Hardin wrote: On Mon, 5 Jan 2015, Bowie Bailey wrote: You can avoid having to escape the slash (/) by using a different separator for the

Re: BAYES_999=0.2 how to set this score higher?

2014-11-04 Thread Daniel Staal
--As of November 4, 2014 10:39:56 AM -0800, motty cruz is alleged to have said: Hello, I would like to set BAYES_999=0.2 score higher than 0.2; I searching for file but I can't find it in /usr/local/etc/mail/spamassassin (am using FreeBSD) --As for the rest, it is mine. Another poster

Re: procmail (was Re: Spam messages bypassing SA)

2014-10-27 Thread Daniel Staal
--As of October 27, 2014 8:29:52 PM +0100, Robert Schetterer is alleged to have said: by the way http://www.exploit-db.com/exploits/34896/ always have a shellshock patched system these days with postfix/procmail --As for the rest, it is mine. Interesting. I dug a bit further out of

Re: .link TLD spammer haven?

2014-10-24 Thread Daniel Staal
--As of October 25, 2014 12:45:31 AM +0200, Reindl Harald is alleged to have said: Am 25.10.2014 um 00:42 schrieb RW: On Fri, 24 Oct 2014 21:31:51 +0200 Reindl Harald wrote: Am 24.10.2014 um 21:20 schrieb Quanah Gibson-Mount: --On Thursday, October 23, 2014 11:56 PM +0100 Martin Gregorie

Re: Spam messages autolearned as ham

2014-09-25 Thread Daniel Staal
--As of September 25, 2014 11:13:16 AM -0400, Deeztek Support is alleged to have said: You *did* keep your initial Bayes training corpora, right? I have an account that I have used to sign up for everything under the sun over the past 10 years. It's a goldmine for spam. I figured I use

Re: Valid TLDs (was: Re: Custom rule not hitting suddenly?)

2014-09-08 Thread Daniel Staal
--As of September 9, 2014 3:45:33 AM +0200, Karsten Bräckelmann is alleged to have said: This incidence is part of the initial round of IANA accepting generic TLDs. There's hundreds in this wave, and some are abused early. This is moonshine registration, nothing like new TLDs being accepted in

Re: drop of score after update tonight

2014-08-25 Thread Daniel Staal
--As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond that yes, but given that the intention is to flag message above 5 with [SPAM] and reject messages above 7 which is the intention

Re: drop of score after update tonight

2014-08-25 Thread Daniel Staal
--As of August 25, 2014 7:49:39 PM +0200, Reindl Harald is alleged to have said: Am 25.08.2014 um 19:35 schrieb Daniel Staal: --As of August 25, 2014 7:06:32 PM +0200, Reindl Harald is alleged to have said: masscheck ties to ensure spams score at least 5 points, but doesn't care beyond

Re: [Spam] Re: Bayes training via inotify (incron)

2014-08-24 Thread Daniel Staal
--As of August 25, 2014 4:00:15 AM +, Eric Wong is alleged to have said: Daniel Staal dst...@usa.net wrote: Good points, but inotify might still be overkill. `ls maildir/cur/ | grep ',.*S` will give you all messages that have been seen in the mailbox, so you can run on a periodic schedule

Re: Bayes training via inotify (incron)

2014-08-22 Thread Daniel Staal
--As of August 23, 2014 3:22:13 AM +0200, Karsten Bräckelmann is alleged to have said: On Fri, 2014-08-22 at 17:32 -0700, Ian Zimmerman wrote: Isn't inotify a bit of overkill for this? If you have a dedicated maildir for training, you know that anything in maildir/new is, uh, new. So you

Re: Second step with SA

2014-08-15 Thread Daniel Staal
--As of August 15, 2014 1:23:37 PM +0200, Antony Stone is alleged to have said: On Friday 15 August 2014 at 13:05:26 (EU time), Timothy Murphy wrote: 1) What is the simplest way to reject mail in chinese, russian and turkish?

Re: Opinions needed on what to consider spam

2014-08-13 Thread Daniel Staal
--As of August 13, 2014 11:25:26 AM -0400, David F. Skoll is alleged to have said: I believe that unsubscribing is safe. If the list owner is legitimate, unsubscribing will work. If the list owner is a spammer, he/she already has your email address and I don't believe spammers track the

Re: Spam Assassin - does it work or not?

2014-08-11 Thread Daniel Staal
--As of August 11, 2014 10:00:34 AM -0400, David F. Skoll is alleged to have said: On Mon, 11 Aug 2014 06:45:24 -0700 Andy a...@opticaltoys.com wrote: If I'm sounding like a leech, that's because in this case I would very much like to be. :o) I have fired paying customers for behaving

Re: I need professional help

2014-07-13 Thread Daniel Staal
--As of July 13, 2014 7:56:38 PM +0200, Antony Stone is alleged to have said: On Sunday 13 July 2014 at 19:52:57, Pat Traynor wrote: On Sun, 13 Jul 2014, Antony Stone wrote: Have you been able to identify whether the unsolicited mail which has been thus detected is: - genuine email

Re: More text/plain questions

2014-07-07 Thread Daniel Staal
--As of July 7, 2014 5:20:01 PM -0400, Kevin A. McGrail is alleged to have said: On 7/7/2014 5:09 PM, Philip Prindeville wrote: On Jul 7, 2014, at 7:15 AM, Kevin A. McGrail kmcgr...@pccc.com wrote: On 7/7/2014 2:28 AM, John Wilcock wrote: Le 05/07/2014 19:08, Philip Prindeville a écrit :

Re: getting tons of SPAM

2014-07-01 Thread Daniel Staal
--As of July 1, 2014 7:39:43 PM -0500, Steve Bergman is alleged to have said: On 07/01/2014 05:07 PM, motty cruz wrote: If it needs to be *instant*, have them visit a web page to enter service requests. Because there's not way that web-based email forms can be abused. Please. The whole

Re: getting tons of SPAM

2014-07-01 Thread Daniel Staal
--As of July 1, 2014 9:40:05 PM -0500, Steve Bergman is alleged to have said: 95+% of the time, email is immediate, true. More like 99%+ of the time. When it's not, I hear about it. But it is not uncommon for mail to be delayed for hours or days either, It's uncommon enough that when it

Re: SA without procmail?

2014-06-20 Thread Daniel Staal
--As of June 20, 2014 2:05:04 PM +0100, Timothy Murphy is alleged to have said: On Thursday, June 19, 2014 11:52:59 PM Ian Zimmerman wrote: Axb Dovecot's Sieve is your friend. (replaces procmail) Not really, not in this context. OP is using procmail merely as a LDA. And in that

Re: Bareword found where operator expected at /usr/local/bin/sa-heatu line 227, near s/... //r

2014-06-15 Thread Daniel Staal
our updated mailsystem changed something. So directly to you and may be somebody can post it, if it's useful. On Fri, 13 Jun 2014, Tom Robinson wrote: ...[errormessage]... and Daniel Staal ...[tied split into four lines, which will work]... Try changing 227 {printf %s, ((localtime

Rule Update!

2014-06-15 Thread Daniel Staal
I just wanted to say that my sa-update cronjob finally succeeded in updating the rules tonight. Congrats and thanks to everyone who's been working on getting the update server back up and running; it appears you've succeeded. ;) Daniel T. Staal

Re: Bareword found where operator expected at /usr/local/bin/sa-heatu line 227, near s/... //r

2014-06-13 Thread Daniel Staal
--As of June 13, 2014 8:21:50 AM -0400, Joe Quinn is alleged to have said: On 6/12/2014 10:27 PM, Tom Robinson wrote: Hi, Sorry to bother you with this. As referenced on the ApacheSpamAssassin Wiki for AutoWhiteList (https://wiki.apache.org/spamassassin/AutoWhitelist) I downloaded the Truxoft

Re: Bareword found where operator expected at /usr/local/bin/sa-heatu line 227, near s/... //r (fwd)

2014-06-13 Thread Daniel Staal
Got this off-list, might be helpful. Forwarded Message Date: June 13, 2014 9:22:21 PM +0200 From: Christoph (Stucki) von Stuckrad stu...@math.fu-berlin.de To: Tom Robinson tom.robin...@motec.com.au, Daniel Staal dst...@usa.net Subject: Re: Bareword found where operator

Re: Operations on headers in UTF-8

2014-06-11 Thread Daniel Staal
--As of June 11, 2014 4:25:31 AM +0200, Karsten Bräckelmann is alleged to have said: On Tue, 2014-06-10 at 21:22 -0400, Daniel Staal wrote: --As of June 11, 2014 2:45:25 AM +0200, Karsten Bräckelmann is alleged to have said: Worse, enabling charset normalization completely breaks UTF-8

Re: Operations on headers in UTF-8

2014-06-10 Thread Daniel Staal
--As of June 11, 2014 2:45:25 AM +0200, Karsten Bräckelmann is alleged to have said: Worse, enabling charset normalization completely breaks UTF-8 chars in the regex. At least in my ad-hoc --cf command line testing. --As for the rest, it is mine. This sounds like something where

Spamd not scoring messages

2014-05-23 Thread Daniel Staal
--As of May 22, 2014 3:04:04 PM +0200, Tom Hendrikx is alleged to have said: Hi, After checking the results of sa-update and doing some manual dns queries, it seems that last rule updates were done more than a month ago. This used to be an almost daily process, even when there were only score

Re: Unexpected missing rule name, failure of spams/spamd to output X-Spam headers

2014-05-23 Thread Daniel Staal
--As of May 23, 2014 11:23:44 PM +0100, Martin Gregorie is alleged to have said: This morning SA 3.3.2 was working as expected on my SA test box when I amended a rule to recognise a new spam variant. The test box is running a fully patched (as of last Friday) copy of Fedora 20. Then I did my

Re: sa-learn from a cronjob?

2014-04-20 Thread Daniel Staal
--As of April 20, 2014 12:14:37 PM -0700, Dan Mahoney, System Admin is alleged to have said: Most of my users aren't command-line friendly. I'd like to basically have my IMAP server default to handing out two imap mailboxes that get auto-crontabbed to training bayes. Ideally, I'd also like

Re: BAYES_999 strange behavior

2014-02-20 Thread Daniel Staal
--As of February 20, 2014 1:56:18 PM -0500, Kevin A. McGrail is alleged to have said: People have hard_coded BAYES_999 entries as well. I recommend forwarding the announcement from John to the other mailing lists you are aware of these discussions. --As for the rest, it is mine. I intend

Re: BAYES_999 of score 1.0 (default)

2014-02-17 Thread Daniel Staal
--As of February 17, 2014 2:54:11 PM +, RW is alleged to have said: On Mon, 17 Feb 2014 09:09:33 -0500 Kevin A. McGrail wrote: On 2/17/2014 8:43 AM, Matus UHLAR - fantomas wrote: Hello, seems after last rule update we've got new rule BAYES_99 in 72_scores.cf but without score (and

Re: New expensive Regexps

2014-02-06 Thread Daniel Staal
--As of February 6, 2014 5:32:47 PM -0800, Dave Warren is alleged to have said: On 2014-02-06 17:17, John Hardin wrote: On Thu, 6 Feb 2014, Kevin A. McGrail wrote: I've discussed it with Alex a bit but one of my next ideas for the Rules QA process is the following: - we measure and report

RE: Rules always triggering.

2007-01-13 Thread Daniel Staal
--As of January 13, 2007 7:17:46 AM -0500, Dave Koontz is alleged to have said: Just a wild stab here, run a lint check on all your rules. I once fat fingered a rule in my local.cf file and got similar hit results as you are describing here. --As for the rest, it is mine. I fixed a couple

Re: Rules always triggering.

2007-01-12 Thread Daniel Staal
--As of January 12, 2007 12:40:00 PM -0800, John D. Hardin is alleged to have said: On Fri, 12 Jan 2007, Daniel T. Staal wrote: I am scanning mail via a procmail recipe Anything in that configuration that you can think of that would mess up those headers? I can post a set if you would

Re: Rules always triggering.

2007-01-12 Thread Daniel Staal
--As of January 12, 2007 7:08:18 PM -0600, Shane Williams is alleged to have said: System is Darwin, running Postfix. The sign-up message for this list got those rules triggered. (_Everything_ triggers them.) This is just a guess, but is it possible that OS X's use of carriage returns is

Skipping Resent-From for blacklist.

2006-10-18 Thread Daniel Staal
I've got a problem where one of the message boards I was on has been hijacked and taken over by spammers. They are sending out short notifications of new board topics, all of which contain nothing but spam. Bayes hits these, but at the moment nothing else is. They do have the nice

Re: sa-learn and Caught spams

2006-10-01 Thread Daniel Staal
--As of September 28, 2006 11:05:35 AM -0700, Kelson is alleged to have said: Daniel Staal wrote: Depends on the setup. For instance, given the explanations above, I'll start a system to automatically learn from my 'checkspam' folder, but not my 'highspam' folder. I have procmail

Re: SpamAssassin MX Gateway Server

2006-09-30 Thread Daniel Staal
--As of September 30, 2006 12:32:41 PM -0500, Russ B. is alleged to have said: Basically, anything that arrives over 15 in score, will have that SPAM-STATUS header embedded, so it does NOT run SpamAssassin on this server, and just puts it in the Caught-Spam. If it has LOWER than a score of 15

Re: sa-learn and Caught spams

2006-09-27 Thread Daniel Staal
--As of September 27, 2006 5:43:28 PM -0700, Kelson is alleged to have said: Daniel T. Staal wrote: True. So... Optimal is obviously to train, once and correctly, on all messages. Sending a message through that has been trained will consume *some* resources, but less then one that still