Hello list.
I want to start using URIBL tests, so I added
urirhssub URIBL_BLACK multi.uribl.com.A 2
bodyURIBL_BLACK eval:check_uridnsbl('URIBL_BLACK')
describeURIBL_BLACK Contains an URL listed in the URIBL blacklist
tflags URIBL_BLACK net
score
DAve escribió:
We have had good luck by setting the email clients of *trusted* users
to leave their mail on the server for 1 day. The users can then login
to their webmail and move the spam to a SPAM folder and a selection of
ham to a HAM folder. I train bayes on those folders each night.
By
DAve escribió:
Diego Pomatta wrote:
Heh, in my case I really don't like having to re-train anything. I
like to be sure when I train that if I tell sa-learn that a mail is
spam, it is 100% spam. That's why I weekly collect spammy mail from a
bunch of trusted users and re filter it myself
andys escribió:
Hi,
for a mail server running email for multiple domains what is the
typical/recommended way to collect emails which arent detected as spam
to be processed by sa-learn? Users are downloading mail via POP3, so
once a users sees a mail and decides that it is in fact spam its
Marcin Praczko escribió:
Would like to have:
- if emails are going from Internet - SPAM filter is ON
- if I sending legitimate emails (from some account) SPAM filter should be OFF.
Is it possible have this kind of configuration, I believe yes.
I am using following setting to mail server.
Marc Ferguson escribió:
Hi,
I'm a linux noob and a spam assassin noob so please reply in
simplified language. Thanks.
I saw on the wiki a trick to use fake mx records in order to weed out
spam (http://wiki.apache.org/spamassassin/OtherTricks). I'm using
Evolution at home and on my laptop
(again as new mail)
Hey list,
I get lots of these errors while passing a mbox file to sa-learn for
spam learning:
Malformed UTF-8 character (unexpected non-continuation byte 0x72,
immediately after start byte 0xf3) in transliteration (tr///) at
Hey list,
I get lots of these errors while passing a mbox file to sa-learn for
spam learning:
Malformed UTF-8 character (unexpected non-continuation byte 0x72,
immediately after start byte 0xf3) in transliteration (tr///) at
/usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Message.pm line
Diego Pomatta escribió:
For more info on usage, etc --
http://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Plugin_TextCat.html
Make that
http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_TextCat.html
for the 3.2.x version.
Diego Pomatta escribió:
Try adding
loadplugin Mail::SpamAssassin::Plugin::TextCat
to your /etc/mail/spamassassin/init.pre, to enable the TextCat plugin
Or better yet, edit your /etc/mail/spamassassin/v310.pre file and
uncomment #loadplugin Mail::SpamAssassin::Plugin::TextCat
It's
Roman Serbski escribió:
How do I configure SA to whitelist particular recipient's
email address? I mean if someone is sending a message to my local
email address I want SA to either not scan it or give it less score
(whitelisting?). At the same time, the scoring for the whole domain
will remain
Benny Pedersen escribió:
On Tue, April 1, 2008 20:17, Diego Pomatta wrote:
Roman Serbski escribió:
How do I configure SA to whitelist particular recipient's
email address? I mean if someone is sending a message to my local
email address I want SA to either not scan it or give it less
Matthias Schmidt escribió:
Hello,
my mac os x leopard (10.5.2 with updated amavis-new and spamassassin)
runs a script, which calls sa-learn with sudo and user _amavis.
In the config files for amavis and clamAV the user is set to _amavis.
Now sa-learn always tries to open
Hello list.
Does the bayes system use a separate db for the autolearn mode?
Today I noticed that my SA bayes has 50 spam and 45 ham mails learned,
when I thought the db had a lot more, because bayes IS being used.
# sa-learn --dump magic
0.000 0 3 0 non-token
Luis Hernán Otegui escribió:
Hola, Diego
2008/2/21, Diego Pomatta [EMAIL PROTECTED]:
Hello list.
Does the bayes system use a separate db for the autolearn mode?
Today I noticed that my SA bayes has 50 spam and 45 ham mails learned,
when I thought the db had a lot more, because bayes
Tarak Ranjan escribió:
Hi List,
how do i come to know that each and every incoming
outgoing mail is
massing through SA.
/
Tarak
You can check spamd logs.
I also see it in my qmail smtpd logs.
Also, in every incoming mail's header you should see some added lines, like:
Paul Douglas Franklin of Union Gospel Mission escribió:
I'm the only one in the organization whose system is configured to
input into the SA bayesian filter, and I faithfully send those
messages which I have marked in Thunderbird as junk to the spam
learning folder for SA. Nonetheless, SA
John Thompson escribió:
On 2008-01-23, Diego Pomatta [EMAIL PROTECTED] wrote:
I use Thunderbird. There are two files for that folder: Junk.msf (7k)
and Junk (53.172k). The msf file must be some kind of index. I just feed
the biggest one to sa-learn?
Yup. Use sa-learn --spam --mbox
Anthony Peacock escribió:
Can I feed a plain text file representing just the body
of a message to sa-learn?
/Diego
Yes you can, who to stop it?
I just sent your message body as --ham, and it told it learned one
message.
I meant without the headers, just the body.
ok thanks
Anthony Peacock escribió:
Well the short answer is, yes you can.
The slightly longer answer is that you won't get as good results
doing this, as the Bayes system uses tokens found in the complete
message. By only learning on the body you will not gain any
advantage for tokens found in
Hey list,
Can I feed a plain text file representing just the body of a message to
sa-learn?
/Diego
Jari Fredriksson escribió:
Hey list,
Can I feed a plain text file representing just the body
of a message to sa-learn?
/Diego
Yes you can, who to stop it?
I just sent your message body as --ham, and it told it learned one message.
I meant without the headers, just the body.
ok
Sg escribió:
Hi
After modifying the configurations and scores should we restart
the SA. How to start the SA-3.2.3?
--
Sg
Yes, you should restart SA after modifying configuration or rules/scores.
SA comes with several control scripts that you can use to start, stop or
restart the
Lars Ippich escribió:
Diego Pomatta schrieb:
Ok, but then why is auto-learn learning spam, but not ham?
Diego
Have a look at this, maybe it explains what you are wondering about:
http://wiki.apache.org/spamassassin/AutolearningNotWorking
Lars
Yup. I'd read that already
Matthias Leisi escribió:
Is there any way to tweak the score used to trigger autolearning for HAM ?
Diego
Ah, SA version is 3.2.1
http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_AutoLearnThreshold.html
--- cut ---
The following configuration settings are used to
Hello list!
I was under the impression that autolearn was going to start self
learning ham at some point, when enough messages had been processed.
Checking the spamd log I see only no-learning or spam-learning. And I
can't feed anything to sa-learn because we drop spam into oblivion. (The
Lars Ippich escribió:
Diego Pomatta schrieb:
[...] And I
can't feed anything to sa-learn because we drop spam into oblivion. (The
only spam I can scavenge are the mails that SA didn't catch, but by that
time those mails are in the users e-mail client in a host computer, not
in the server
Fletcher Mattox escribió:
Spamhaus has determined that my query rate is too high to continue
using their servers for free. So they have, apparently, blocked my
queries at their router, which incurs a 5 second timeout. How do I
tell SpamAssassin to stop using all spamhaus servers, including
Kai Schaetzl wrote:
Diego Pomatta wrote on Tue, 14 Aug 2007 10:37:27 -0300:
I always considered it to be more efficient this way, would this be correct?
It's a matter of trust. If you trust the RBL to produce an insignificant
amount of false positives for you then rejecting at MTA
Jo Rhett escribió:
On Aug 14, 2007, at 8:22 AM, Loren Wilton wrote:
PDFinfo plugin from SARE helps a lot with the pdf mess. Theo has
also published a number of rules that catch them, I believe. You can
get them form one of the standard SA update channels.
I suppose we ought to publish some
Interesting Tech Republic article, Putting a stop to PDF spam
http://blogs.techrepublic.com.com/networking/?p=314tag=nl.e019
which mentions the pdfinfo plugin for SA.
Jeremy Fairbrass escribió:
If you're using the PDFinfo plugin, you should see a rule called GMD_PDF_EMPTY_BODY on those spams - it should fire on any message
containing a PDF and a blank body. Obviously you can modify that rule's score if you want to make it higher, or meta it with other
rules.
Matus UHLAR - fantomas escribió:
when we ran qmail, we had false positives, and we did not like the fact we
could not tell sender what the problem was...
But is not qmail's job to detect spam or tell the sender what the
problem was; qmail is just the MTA, and a damn fine one imho.
A
Rocco Scappatura escribió:
It is possible to block the spam sent by GreetingCards.com which invites
the receiver to access an URL and browse the ecard?
I mean that spam which has subject similar to:
You've received a greeting ecard from a Colleague!
BR,
rocsca
I asked something about
Kris Deugau escribió:
I don't drop anything but confirmed viruses on my *personal* mail
system, never mind the systems I'm responsible for at work; I shudder
to think of the cries of outrage if I silently dropped spam on the ISP
mail systems I administer. (There *have* been business-related
Hey list.
I'm new to custom rules. I've written my first one, and I was wondering
if one of the list gurus could tell me if it's correct.
Specially the regex part. Not sure since I don't know jack about Perl
regex. :)
Would the following do the trick, if what I want is for all mail
Jim Maul escribió:
Matus UHLAR - fantomas wrote:
On 30.07.07 13:25, Spamassassin List wrote:
Any idea for qmail?
if you excuse a big of irony, I'd say: drop it. There are many better
MTA's than qmail. There's imho much less worse solutions...
According to who, you?
He asked for a solution
Matus UHLAR - fantomas escribió:
On 30.07.07 14:10, Diego Pomatta wrote:
LoL. qmail rocks.
yes, google for qmail bugs and withlist for more info.
No problems here whatsoever.
And... I don't understand the point. Every piece of software has bugs.
Even the e-mail client you used
Hey all,
Now that I got the spamd log working again, I keep seeing these errors:
warn: util: secure_tmpfile failed to create file
'/root/tmp/.spamassassin7688bq4Fdstmp': Permission denied (many times)
and then...
warn: print() on closed filehandle $tmpfile at
Theo Van Dinter wrote:
On Tue, Jul 17, 2007 at 01:36:16PM -0300, Diego Pomatta wrote:
Now that I got the spamd log working again, I keep seeing these errors:
warn: util: secure_tmpfile failed to create file
'/root/tmp/.spamassassin7688bq4Fdstmp': Permission denied (many times)
What
Dear all,
Are any of you succesfully using simscan with spamdspamc ?
/Regards
Thomas Raef escribió:
Yes.
Thomas J. Raef
e-Based Security, LLC
www.ebasedsecurity.com
1-866-838-6108
You're either hardened, or you're hacked!
-Original Message-
From: Diego Pomatta [mailto:[EMAIL PROTECTED]
Sent: Monday, July 16, 2007 7:50 AM
To: users@spamassassin.apache.org
Thomas Raef escribió:
The-Box:~# vi /etc/tcp.smtp
127.:allow,RELAYCLIENT=
192.168.13.2:allow,RELAYCLIENT=,QMAILQUEUE=/var/qmail/bin/simscan
My spamd logs show all activity. It shows what spam rules were hit,
preforks and other such activity.
Check to see what logs are showing
43 matches
Mail list logo
