Re: more spam is getting through :-(

2019-03-18 Thread Duane Hill
sage as > non-spam and then ham a few minutes later? As I understand it you do not > need to explicitly --forget, SpamAssassin is smart enough to handle this > situation, no? And if so, learning your Inbox should be fine as long as > you move messages to Spam (and don't just delete) when appropriate. non-spam and ham are the exact same. Therefore, it would not make any difference. According to documentation, the --ham switch means to learn as ham (non-spam). Therefore, the same thing. -- Best regards, Duane Hill

Re: adding _SCORE_ to all messages

2019-01-27 Thread Duane Hill
l the subjects. Check out https://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html#basic_message_tagging_options -- Best regards, Duane Hill

Re: Unsubscribe

2014-10-16 Thread Duane Hill
ar for examples). > Have you confirmed in your server logs the message was received by the SA server? If so, there would have been a message coming back to your server shortly thereafter. I just sent an unsubscribe request: Date: Thu, 16 Oct 2014 21:03:35 -0500 From: Duane Hill

Re: spamd does not start

2014-10-08 Thread Duane Hill
On Wednesday, October 8, 2014, 6:31:08 PM, Martin confabulated: > On Wed, 2014-10-08 at 16:46 -0600, Amir Caspi wrote: >> On Oct 8, 2014, at 4:23 PM, Duane Hill wrote: >> > >> > No. && is a way of chaining commands together. Your cron says run >&g

Re: spamd does not start

2014-10-08 Thread Duane Hill
On Wednesday, October 8, 2014, 5:38:20 PM, John wrote: > On Wed, 8 Oct 2014, Duane Hill wrote: >> No. && is a way of chaining commands together. > ...where the second command is only executed if the first command exited > with a zero status. && stops on failur

Re: spamd does not start

2014-10-08 Thread Duane Hill
On Wednesday, October 8, 2014, 5:31:07 PM, Dave wrote: > On 2014-10-08 15:23, Duane Hill wrote: >> No. && is a way of chaining commands together. Your cron says run >> sa-update and then restart spamd. In other words, when sa-update >> finishes running,

Re: spamd does not start

2014-10-08 Thread Duane Hill
On Wednesday, October 8, 2014, 3:11:06 PM, LuKreme wrote: >> On 08 Oct 2014, at 04:56 , Duane Hill wrote: >> >> On Tuesday, October 7, 2014, 10:56:54 PM, LuKreme wrote: >> >>> On 07 Oct 2014, at 11:45 , Jari Fredrisson wrote: >>>> I ran sa-update &

Re: spamd does not start

2014-10-08 Thread Duane Hill
else exit 0 fi This way, sa-compile is ran and spamd is restarted only when there is an update. I then use the script in a cron which runs once per day. I believe the way you have it, spamd will get restarted every time your cron is ran whether there is an update or not. -- Duane Hil

Re: discard high scoring spam?

2014-01-06 Thread Duane Hill
Monday, January 6, 2014, 3:14:56 PM, you wrote: > On 06.01.14 09:02, Mark Chaney wrote: >>I sure I hope I didnt fail to bad on searching for this answer, but >>when simply using spamassasin with postfix as an incoming smtp relay >>server and not using anything like amavis or mailscanner, is ther

Re: spamd not staying up

2012-10-19 Thread Duane Hill
On Friday, October 19, 2012 at 20:21:13 UTC, t...@ipinc.net confabulated: > Hi All, >Last month I put in a new mailserver, here are the specs: > FreeBSD 8.3 amd64bit > 8GB ram > 2TB mirrored disk space > dual Xeon E5310s > Intel motherboard > top output: > last pid: 82946; load averages:

Re: How to make Spamassassin detect spam mails

2012-06-30 Thread Duane Hill
Try your testing from somewhere else. Your test appears to have been performed from the server itself. Your logs below show ALL_TRUSTED in the spamassassin results. On Saturday, June 30, 2012 at 05:48:15 UTC, jayanta.gh...@rp-sg.in confabulated: > Dear List, > We are trying to configure Spama

Re: How to make Spamassassin detect spam mails

2012-06-30 Thread Duane Hill
On Saturday, June 30, 2012 at 11:00:54 UTC, mar...@gregorie.org confabulated: > On Fri, 2012-06-29 at 22:48 -0700, Jayanta Ghosh wrote: >> Dear List, >> >> We are trying to configure Spamassassin (Version 3.3.1-2) with postfix >> (Version 2.6.6-2.1) on RHEL 6.1 (64 bit). In order to integrate pos

Re: X-Spam-Checker-Version doesn't reflect what sa-update we are at

2012-05-25 Thread Duane Hill
On Friday, May 25, 2012 at 21:26:45 UTC, jida...@jidanni.org confabulated: > Isn't it bad that X-Spam-Checker-Version doesn't report what sa-update > we are up to so far, and that there is no additional other variable that > we can toggle on in reports to do that. The version header shows the ve

Re: sa-update

2012-03-26 Thread Duane Hill
On Tuesday, March 27, 2012 at 02:48:08 UTC, jer...@fluxlabs.net confabulated: > Sa-update should reload SA, therefore reloading rules. What error are you > getting ? You have to reload spamd after sa-update if any rules were updated to activate the changes. > -- > Jeremy McSpadden > On Mar 26

Re: Yet another thread about AWL

2012-02-22 Thread Duane Hill
erriding this setting? > Thank you! I forgot you are using amavisd. Amavisd doesn't use SA's spamd. You have to restart amavisd whenever you make changes. > 2012/2/22 Duane Hill >> On Wednesday, February 22, 2012 at 12:36:31 UTC, >> agutierr@gmail.comco

Re: Yet another thread about AWL

2012-02-22 Thread Duane Hill
ES_50=0.001,HTML_MESSAGE=0.001 > :?? Did you disable (comment out) the AWL line in the config file v310.pre? > 2012/2/21 Duane Hill >> On Tuesday, February 21, 2012 at 15:18:30 UTC, >> michael.scheid...@secnap.com confabulated: >> >> > On 2/21/12 10:11 AM, Anto

Re: Yet another thread about AWL

2012-02-21 Thread Duane Hill
On Tuesday, February 21, 2012 at 21:25:08 UTC, michael.scheid...@secnap.com confabulated: > On 2/21/12 4:09 PM, Benny Pedersen wrote: >> Den 2012-02-21 16:29, Duane Hill skrev: >> >>> >>> http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_AW

Re: Yet another thread about AWL

2012-02-21 Thread Duane Hill
On Tuesday, February 21, 2012 at 15:18:30 UTC, michael.scheid...@secnap.com confabulated: > On 2/21/12 10:11 AM, Antonio Gutiérrez Mayoral wrote: >> rule AWL is triggered with a negative score. Reading the documentation >> I think that the problem >> was a wrong auto-learn thresold for HAM, the

Re: sa-learn and modern spam sizes

2011-12-20 Thread Duane Hill
On Tuesday, December 20, 2011 at 17:06:36 UTC, rwmailli...@googlemail.com confabulated: > On Tue, 20 Dec 2011 15:38:58 + > Duane Hill wrote: >> On Tuesday, December 20, 2011 at 15:26:06 UTC, bowie_bai...@buc.com >> confabulated: >> >> >> Should I ope

Re: sa-learn and modern spam sizes

2011-12-20 Thread Duane Hill
On Tuesday, December 20, 2011 at 15:26:06 UTC, bowie_bai...@buc.com confabulated: > On 12/19/2011 4:03 AM, Jonas wrote: I've never seen spam larger than 3 MB. >>> which is much bigger than the 256 kB limit in sa-learn that the OP is >>> having a >>> problem with. >> Indeed, of course I agre

Re: spam reports

2011-08-06 Thread Duane Hill
Friday, August 5, 2011, 11:01:04 PM, Anil wrote: > I am using sun (oracle) messaging server. > Anyone have an idea for this? The report_safe config option tells SA what type of reporting is to be used: http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html#report_safe > On Th

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Duane Hill
Friday, August 5, 2011, 12:54:35 PM, you wrote: >> Most here score along this: >> >> X-Spam-Status: Reqd:5.0 Hits:14.6 Tests:BODY_8BITS=1.5 >>        CHARSET_FARAWAY_HEADER=3.2 HTML_MESSAGE=0.001 >> MIME_CHARSET_FARAWAY=2.45 >>        MIME_HTML_ONLY=1.105 MISSING_HEADERS=1.207 RCVD_IN_BRBL_LASTEX

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Duane Hill
Friday, August 5, 2011, 11:08:29 AM, you wrote: > Most seem to get through for me. What are you doing to catch them? > I added this too local.conf and it did not help at all: > #ok_languages en es fr de cs da lv nl pl sv > ok_languages en > TextCat appears to be enabled in v310.pre: > # TextC

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Duane Hill
Friday, August 5, 2011, 7:48:09 AM, you wrote: > Been getting a LOT of Chinese language spam lately with Chinese named > attached spreadsheets or .doc files. > Anyone else seeing this? Yeah. And it's nice to see SA has not missed one yet that has made it through ClamAV. -- Best regards, Duan

Re: MySQL Bayes - can slow MySql cause other tests not to run?

2011-08-03 Thread Duane Hill
Hello Giampaolo, Wednesday, August 3, 2011, 4:09:57 PM, you wrote: >> -Original Message- >> From: Duane Hill [mailto:du...@duanemail.org] >> >> Wednesday, August 3, 2011, 3:58:28 PM, you wrote: >> >> >> -----Original Message- >>

Re: MySQL Bayes - can slow MySql cause other tests not to run?

2011-08-03 Thread Duane Hill
Wednesday, August 3, 2011, 3:58:28 PM, you wrote: >> -Original Message- >> From: Duane Hill [mailto:du...@duanemail.org] >> >> Hello David, >> >> Wednesday, August 3, 2011, 2:23:28 PM, you wrote: >> >> I set MySQL to log all SQL queries.

Re: MySQL Bayes - can slow MySql cause other tests not to run?

2011-08-03 Thread Duane Hill
Hello David, Wednesday, August 3, 2011, 2:23:28 PM, you wrote: > On Wed, 3 Aug 2011 21:15:16 +0200 > "Giampaolo Tomassoni" wrote: >> > Except that in real life, the write transaction lasts much longer, >> What is it? 60ms? Granted. It is still a 1/100 of 6s. > No, write transactions are expens

Re: slow bayes queries using innodb

2011-07-25 Thread Duane Hill
Monday, July 25, 2011, 1:26:22 PM, you wrote: > On 7/25/11 2:24 PM, Duane Hill wrote: >> Monday, July 25, 2011, 1:16:54 PM, you wrote: >> >>> On 7/25/11 2:13 PM, Duane Hill wrote: >>>> Should this even be an issue if one is using an SQL backend and has it

Re: slow bayes queries using innodb

2011-07-25 Thread Duane Hill
Monday, July 25, 2011, 1:16:54 PM, you wrote: > On 7/25/11 2:13 PM, Duane Hill wrote: >> Should this even be an issue if one is using an SQL backend and has it >> configured to handle the extra processing? The OP is using MySQL as >> the backend. I've had MySQL config

Re: slow bayes queries using innodb

2011-07-25 Thread Duane Hill
Hello Michael, Monday, July 25, 2011, 9:30:11 AM, you wrote: > On 7/25/11 10:24 AM, Jason Ede wrote: >> >> We’ve 2 reasonably powerful mail servers handling incoming email and >> sharing the load. We’ve moved to a single bayes database (to make >> training easier) and its stored in mariadb and

Re: problem with spamassassin and sql

2011-07-13 Thread Duane Hill
Wednesday, July 13, 2011, 3:14:53 AM, Kristian wrote: > Is it nessacary needed? When i start spamd in debug mode saw the > /usr/share/spamassassin/10_default_prefs.cf is proceeded. You shouldn't make any changes in the /usr/share/spamassassin directory as they could be overwritten when you upgrad

Re: problem with spamassassin and sql

2011-07-13 Thread Duane Hill
Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote: > Hello im using spamassassin and user prefs in mysql database, i have > successfully setting up mysql table and all about correct work of > squirelmail plugin and from client site everything is ok. The problem is > spamassassin can't handle us

Re: Test port for SpamAssassin for Freebsd

2011-06-24 Thread Duane Hill
Friday, June 24, 2011, 7:21:09 AM, you wrote: > I am the official port maintainer for the Freebsd port for SpamAssassin. > I have uploaded a test port for anyone who wants to try it. > http://www.secnap.com/downloads/sa332_unofficial.tgz > to install and compile: > cd /(your ports dir: /usr/ports

Re: delete spam instead of marking as spam

2011-06-07 Thread Duane Hill
Tuesday, June 7, 2011, 1:36:24 AM, Matus wrote: > Postfix can't use spamassassin directly, you _need_ to use something > and that somethink FYI: You can pipe to SpamAssassin directly from Postfix: master.cf: ... spamass unix - n n - 15 pipe user=spamd argv=/usr/

Re: delete spam instead of marking as spam

2011-06-06 Thread Duane Hill
Hello asimhafeez, Monday, June 6, 2011, 10:10:55 AM, you wrote: > Matus UHLAR - fantomas wrote: >> >>> > On Sun, 5 Jun 2011 07:00:02 -0700 (PDT), asimhafeez >>> >>> > wrote: >>> >> Is there any possibility to delete spam instead of marking (rewriting) >>> >> the >>> >> emails as [SPAM] in su

Re: Spamc issues with remote userprefs

2009-09-16 Thread Duane Hill
On Mon, 14 Sep 2009, Ryan Thoryk wrote: Hi, We're rebuilding a mail server and are having some issues with SQL-based SA preference lookups. We're running Postfix 2.5.5 and SA 3.2.5 (Debian Lenny version) - here's our Postfix config from master.cf: spamassassin unix - n n -

Re: SA-learn is it a problem

2009-08-31 Thread Duane Hill
On Mon, 31 Aug 2009, Duane Hill wrote: On Mon, 31 Aug 2009, Ben Whyte wrote: Based on what you've told me so far, it is not. It is pointing to /home/.spamassassin/ What's the exact bayes_path statement you used, and what file is it in? (please post the exact one.. bayes_path

Re: SA-learn is it a problem

2009-08-31 Thread Duane Hill
On Mon, 31 Aug 2009, Ben Whyte wrote: Based on what you've told me so far, it is not. It is pointing to /home/.spamassassin/ What's the exact bayes_path statement you used, and what file is it in? (please post the exact one.. bayes_path is a VERY tricky option to use, because it requires more

RE: mail slipping through

2009-08-20 Thread Duane Hill
On Thu, 20 Aug 2009, Gary Smith wrote: Aug 19 15:03:11 hsoakmsa03l02 spamd[28319]: spamd: result: Y 4 - BAYES_50,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_PASS,URIBL_BLACK,URIBL_RH S_DOB scantime=0.2,size=4543,user=filter,uid=124,required_score=0.0,rhost=10. 80.65.9,raddr=10.80.65.9,rport=53097,

Re: Error: "spamc: connection attempt to spamd aborted after 3 retries"

2009-05-05 Thread Duane Hill
On Tue, 5 May 2009, Alejandro Cabrera Obed wrote: People, I've followed your advice and I've noticed that spamc is called from Postfix in /etc/postfix/master.cf: spamassassinunix- n n - - pipe user=nobody argv=/usr/bin/spamc -d 127.0.0.1 -e /usr/sbin/sendm

Re: AWL - deactivate

2009-04-22 Thread Duane Hill
On Wed, 22 Apr 2009, Matt Kettler wrote: Duane Hill wrote: Additional comment below. I should have checked docs before I initially responded. On Wed, 22 Apr 2009, Duane Hill wrote: On Wed, 22 Apr 2009, Matt Kettler wrote: Interesting. use_auto_whitelist used to be an admin-only option

Re: AWL - deactivate

2009-04-22 Thread Duane Hill
Additional comment below. I should have checked docs before I initially responded. On Wed, 22 Apr 2009, Duane Hill wrote: On Wed, 22 Apr 2009, Matt Kettler wrote: Interesting. use_auto_whitelist used to be an admin-only option (valid only in local.cf). But I guess if the admin wants to make

Re: AWL - deactivate

2009-04-22 Thread Duane Hill
On Wed, 22 Apr 2009, Matt Kettler wrote: Interesting. use_auto_whitelist used to be an admin-only option (valid only in local.cf). But I guess if the admin wants to make sure no users can turn it on, then they can comment out the loadplugin. It probably changed when AWL became a plugin. Our se

Re: AWL - deactivate

2009-04-22 Thread Duane Hill
On Wed, 22 Apr 2009, sebast...@debianfan.de wrote: how to deactivate the AWL for the whole server ? Place: use_auto_whitelist 0 in the local.cf. By default it is turned on. Therefore you may not see the entry. Otherwise, if you do, just set it to zero. You will have to restart whatever is

Re: Further information on tweaking tips...

2009-04-10 Thread Duane Hill
On Fri, 10 Apr 2009, martes wrote: I also want to know how to pipe the logs from spamd into /var/log/spamd.log. I have newsyslog.conf and syslog.conf set up to shoot those logs to that log file, however, nothing gets sent there. I guess everything is getting picked up by the maillog.info direct

Re: Ways to block bouncebacks?

2009-04-05 Thread Duane Hill
On Sun, 5 Apr 2009, Jeremy Morton wrote: mouss wrote: Jeremy Morton a ?crit : mouss wrote: the recipient of the bounce is the sender of the original message. so if you use BATV, you could block bounces sent to a non BATV address. Again, maybe I'm missing something here, but let's go back to

Re: simple script idea for checking reputation disagreement

2009-04-04 Thread Duane Hill
Actually, disregard. I see what you are stating. On Sat, 4 Apr 2009, Duane Hill wrote: On Sat, 4 Apr 2009, Neil Schwartzman wrote: On 04/04/09 4:22 PM, "RobertH" wrote: 0.2 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic

Re: simple script idea for checking reputation disagreement

2009-04-04 Thread Duane Hill
On Sat, 4 Apr 2009, Neil Schwartzman wrote: On 04/04/09 4:22 PM, "RobertH" wrote: 0.2 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [209.92.22.130 listed in dnsbl.sorbs.net] That would be incorrect. The IP is static, not dynamic. wh

Re: SPF plugin per-user?

2009-03-31 Thread Duane Hill
On Wed, 1 Apr 2009, Karsten Br?ckelmann wrote: On Tue, 2009-03-31 at 23:14 +, Duane Hill wrote: On Tue, 31 Mar 2009, Ricardo Kleemann wrote: This can be done for a particular user? You should be able to modify scores at a user level by enabling user rules in local.cf: allow_user_rules

Re: SPF plugin per-user?

2009-03-31 Thread Duane Hill
On Tue, 31 Mar 2009, Ricardo Kleemann wrote: This can be done for a particular user? You should be able to modify scores at a user level by enabling user rules in local.cf: allow_user_rules 1 By default it is turned off. Reference: http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAs

RE: New kind of spam part 2

2009-03-31 Thread Duane Hill
On Tue, 31 Mar 2009, Jason Bertoch wrote: -Original Message- From: Arthur Kerpician [mailto:art...@bluechip.ro] Sent: Tuesday, March 31, 2009 12:43 PM To: users@spamassassin.apache.org Subject: New kind of spam part 2 Hi, I've been following the latest messages on this list regarding ne

RE: China Spam rule

2009-02-25 Thread Duane Hill
On Wed, 25 Feb 2009, Paul Houselander (SME) wrote: On 25.02.09 10:03, Paul Houselander (SME) wrote: I use the SARE rules and have been asked to explain why a certain email got caught as spam. IMPORTANT: Due to Ninjas being busy with lives, wives & hockey matches, SARE rules aren't being upd

Re: Something doofuzzled in a * ^To: line.

2009-02-23 Thread Duane Hill
On Mon, 23 Feb 2009, Gene Heskett wrote: I've seen both. but I didn't see a Bcc: line at all. There is no Bcc: line (email header). Therefore, a Bcc: is supplied as a RCPT TO during SMTP time and that is it.

Re: DNS MX Question [OT]

2009-02-14 Thread Duane Hill
On Sat, 14 Feb 2009, Marc Perkel wrote: Hi, I have a quick bind question. I want to set the MX records on a domain to something normal but I want to set the MX for all subdomains to something else. example.com mail.example.com xxx.example.com blackhole.example.com So do just that: exampl

Re: How can this free MX backup service be exploited?

2009-01-21 Thread Duane Hill
On Thu, 22 Jan 2009, Steve Freegard wrote: 5) Privacy concerns; potentially a domains entire mail stream for the last 5 days could be held on your mail spool. This has obvious privacy implications for most people particularly as there is no contract between you and the end-user. How does the

Re: Some questions on sa-learn

2009-01-20 Thread Duane Hill
On Tue, 20 Jan 2009, Simone Morandini wrote: Er.. isn't it bayes_auto_learn 1 ?? Actually, I do have "auto_learn 1"... is it something meaningless? By default is turned on. Therefore, one doesn't even have it configured.

Re: Whitelist not working - Ugh please help

2009-01-08 Thread Duane Hill
On Thu, 8 Jan 2009, fbpc wrote: ... X-FBPC-MailScanner-SpamCheck: spam, ORDB-RBL, SpamAssassin (not cached, ... In light of all the other comments already given, I couldn't help to notice the 'ORDB-RBL' in the MailScanner header. I'm assuming that is the ordb.org RBL that's been dead for qui

Re: It is useful to use sa-compile with spamd/c?

2009-01-04 Thread Duane Hill
On Sun, 4 Jan 2009, Luis Daniel Lucio Quiroz wrote: Hi all, again me, with more doubts. I've setup SA with spamd-spamc daemon-client. I also I use sa-compile. does spamd takes advantaje of compiled rules or it is only for spamassassin executable. spamd sure does take advantage of compiled rul

Re: remove SURBL rules

2008-12-17 Thread Duane Hill
On Wed, 17 Dec 2008, Benny Pedersen wrote: On Ons, December 17, 2008 07:35, ram wrote: I would like to remove the SURBL lookups from our servers since they are no longer free (and their charges are unreasonable ) show links where this is stated or make a bug on it :) else: score *_SURBL 0

Re: remove SURBL rules

2008-12-17 Thread Duane Hill
On Wed, 17 Dec 2008, ram wrote: I would like to remove the SURBL lookups from our servers since they are no longer free (and their charges are unreasonable ) I would just put a 0.0 score in local.cf for all their rules , but I guess when the rules are removed from the actual cf files by sa-upd

Re: sought rules updates

2008-12-09 Thread Duane Hill
On Tue, 9 Dec 2008, LuKreme wrote: (where did you find/get the 6C6191E3?). Not too hard: Do a search for 'sought' on the SA wiki page (which is linked off of http://spamassassin.apache.org/): http://wiki.apache.org/spamassassin/ The very first link provided this: http://wiki.apac

Re: Rule to catch PO#

2008-12-02 Thread Duane Hill
On Tue, 2 Dec 2008, Ray Jette wrote: Good morning, I am trying to write a negative scoring rule that files on the following: PO PO# PO # Following is the rule I am using: header PO_AND_ORDERSSubject =~ /\bPO*?#?/i score PO_AND_ORDERS-0.50 describe PO_AND_ORDERSA negative sc

Re: SpamAssassin config

2008-11-15 Thread Duane Hill
On Sat, 15 Nov 2008, Troy Settle wrote: Sujit Acharyya-Choudhury wrote: I have been modifying local.cf so that report_safe is 0 or 1. Can not see any change. For my sin, my exim config has the following entry: warncondition = ${if or{\ {eq {${substr_0_6:$

Re: Spamassassin+amavis

2008-11-05 Thread Duane Hill
On Thu, 6 Nov 2008, Mark Martinec wrote: Luis, I was doing some tests with all the recommendations you sent me... and I can make to work the server correctly... I was filtering spam with no problems and my performances troubles dissapeard... I just configured 5 procs for amavis and

RE: German for the backscatter-plagued

2008-10-27 Thread Duane Hill
On Tue, 28 Oct 2008, Koopmann, Jan-Peter wrote: Spamers are using MY E-Mail spaming russian servers and now Ihave gotten nearly 200.000 backscatters which make my account unusable specialy for my customers and peoples which urgently need my help without passing over mailinglists... So

Re: Public whitelists

2008-10-21 Thread Duane Hill
You must have something incorrectly set up with your filtering. I received a bounce stating I do not have FCrDNS set up: http://ipadmin.junkemailfilter.com/rdns.php?ip=65.124.230.214 when I do IN FACT: %host 65.124.230.214 214.230.124.65.in-addr.arpa is an alias for 214.192-223.230.124.65.in-

Re: koi8-r ok_locales and ok_languages

2008-10-21 Thread Duane Hill
On Tue, 21 Oct 2008, Clayton Cottingham wrote: hi all trying to figure a way to filter out, or better yet score charset koi8-r down some ok_locales and ok_languages do not work as expected inactive_languages is a no go as well any help appreciated For ok_languages, do you have the TextCat p

Re: Need Help For Redirecting SPAM to a mailbox

2008-10-21 Thread Duane Hill
On Tue, 21 Oct 2008, mathiasadsl wrote: Hi all, I'm currently running a postfix server and spamassassin under Fedora Core 8. Everyhting is OK but i'd like to redirect tagged [SPAM] mails to a mailbox. I did the following: #Edit /etc/postfix/main.cf header_checks = regexp:/etc/postfix/header_c

Re: DnsBlocklists not working?

2008-10-09 Thread Duane Hill
On Thu, 9 Oct 2008, Tomasz Chmielewski wrote: Duane Hill schrieb: On Thu, 9 Oct 2008, Tomasz Chmielewski wrote: McDonald, Dan schrieb: On Thu, 2008-10-09 at 12:07 +0200, Tomasz Chmielewski wrote: I have a mail setup, where the SMTP server (Postfix) is running on a machine with a public IP

Re: DnsBlocklists not working?

2008-10-09 Thread Duane Hill
On Thu, 9 Oct 2008, Tomasz Chmielewski wrote: McDonald, Dan schrieb: On Thu, 2008-10-09 at 12:07 +0200, Tomasz Chmielewski wrote: I have a mail setup, where the SMTP server (Postfix) is running on a machine with a public IP address, and amavisd-new and spamassassin are running on a "filter" s

Re: How to include external config-files

2008-10-03 Thread Duane Hill
On Fri, 3 Oct 2008, [EMAIL PROTECTED] wrote: Hello, how do i include external config files for example i want to integrate my own rulesets - from /home/username/my_ruleset.txt From 'perldoc Mail::SpamAssassin::Conf': include filename Include configuration lines from filename. Rel

Re: Trying out a new concept

2008-09-22 Thread Duane Hill
On Mon, 22 Sep 2008, Karl Pearson wrote: On Mon, 22 Sep 2008, Marc Perkel wrote: McDonald, Dan wrote: On Mon, 2008-09-22 at 15:44 -0700, Marc Perkel wrote: Ken A wrote: Marc Perkel wrote: I don't know how this will work but I'm building the data now. For those of you who are familiar

Re: New free blacklist: BRBL - Barracuda Reputation Block List

2008-09-22 Thread Duane Hill
On Mon, 22 Sep 2008, Dave Koontz wrote: Rose, Bobby wrote ... (9/22/2008 10:24 AM): I had the same issue and found that the system that's relaying (216.129.105.40) those confirmation emails doesn't have a PTR record. You'd think someone selling a antispam/email appliance would be familiar with

Re: version now in X-Spam-Checker-Version, so remove from X-Spam-Status

2008-09-12 Thread Duane Hill
On Sat, 13 Sep 2008, [EMAIL PROTECTED] wrote: Gentlemen, I am frustrated by the duplication of information in: X-Spam-Checker-Version: SpamAssassin 3.2.5-mon_sep__8_23_53_29_2008.jidanni2.jidanni.org (2008-06-10) on jidanni2.jidanni.org X-Spam-Status: No, score=0.0 required=1.9 t

Re: MagicSpam

2008-09-12 Thread Duane Hill
On Fri, 12 Sep 2008, Karl Pearson wrote: On Thu, 11 Sep 2008, fchan wrote: Hi, Sorry I don't have experience with this product. I do have limited experience with Barracuda Networks appliance and I think is a great product for an e-mail filter which I had experienced with my friend to set up

Re: Different Scores

2008-09-09 Thread Duane Hill
On Tue, 9 Sep 2008, PileOfMush wrote: Can someone help me understand why a message can come through and get one score, then I can scan it again 1 minute later and get a much higher score? Here's the message. http://slexy.org/raw/s2JoVC8OlP The top copy of the message was how it was scanned com

Re: 1000 times easier to just do sa-update --nogpg

2008-09-05 Thread Duane Hill
On Sat, 6 Sep 2008, [EMAIL PROTECTED] wrote: You know, it is a 1000 times easier to just do $ sa-update --nogpg than to try to figure our the right way from the messages that surround "channel: GPG validation failed, channel failed", or the sa-update man page, or writing this group and asking wh

Re: Bayesian Test Oddities

2008-09-03 Thread Duane Hill
On Wed, 3 Sep 2008, Bill Gunty wrote: I recently did a --force-expire on my bayesian database as I was getting some false positives with it and the information it in was getting to be over a year old. Since then, when automatically scanning, bayesian tests are not being run. This can be seen

Re: This spam should have triggered more rules

2008-08-27 Thread Duane Hill
On Wed, 27 Aug 2008, Skip wrote: Scored well here: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) X-Spam-Level: x X-Spam-Status: Reqd:5.0 Hits:17.1 Learn:disabled Tests:JM_SOUGHT_2=4, JM_SOUGHT_3=4,SG_EXECUTABLE_URI=3,UNPARSEABLE_RELAY=0.001,

Re: This spam should have triggered more rules

2008-08-27 Thread Duane Hill
On Wed, 27 Aug 2008, Skip wrote: http://pastebin.com/m5b376775 I have the botnet rules enabled and they trigger on a lot of my spam, as well as the sought rules. But not this message. This spam however only triggered two rules, however I feel it should have triggered more. Yeah, it passed

RE: Report Safe

2008-08-26 Thread Duane Hill
to come from your MTA. SA has nothing to do with redirecting messages. -Original Message- From: Duane Hill [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2008 10:15 AM To: users@spamassassin.apache.org Subject: Re: Report Safe On Wed, 27 Aug 2008, Denise Ricerra wrote: Hi! S

Re: Report Safe

2008-08-26 Thread Duane Hill
On Wed, 27 Aug 2008, Denise Ricerra wrote: Hi! Sorry I am a newbie here at spam assassin. I just have a question, when I set the report safe to ?1? the message gets altered, even for the important message being tagged as SPAM. How do I get the original message. Is there some sort of directory

Re: Whitelist config for internal/external servers

2008-08-26 Thread Duane Hill
On Tue, 26 Aug 2008, Camron W. Fox wrote: Alle, We are running SA V3.2.4 on RHEL5.1. We would like to whitelist mail coming from inside our network. Spamassassin is located on our DMZ servers. Users use the internal SMTP relay to send mail. The internal domain is foo.ac.jp. The external dom

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Duane Hill
On Wed, 27 Aug 2008, mouss wrote: Marc Perkel wrote: And - I'm putting this out for those who are interested. You are not interested so this doesn't affect you. Mark, This debate can continue until the end of time (assuming time has an end ;-p). How about creating a dedicated mailing li

Re: SA scores "MISSING_SUBJECT", but message _has_ a Subject

2008-08-20 Thread Duane Hill
On Wed, 20 Aug 2008, Bob Gereford wrote: I've received a message with a Subject of "Be Serious and Have Fun!" Looking at the headers Return-Path: <[EMAIL PROTECTED]> X-Spam-Flag: YES X-Spam-Level: !!! X-Spam-Status: score=7.8/4.0 autolearn=spam X-Spam-Report:

Re: spamassassin failure causing mail bounces

2008-08-13 Thread Duane Hill
On Wed, 13 Aug 2008, theWoosh wrote: /etc/postfix/main had mailbox_size_limit set to 11 megs - can't believe this is the default! All 3 users are on holiday, so this is the first time this limit had been reached... upped it to half a gig and now the mail is getting through 11 messages? T

Re: autolearn=yes but sa-learn dump magic shows no new spam

2008-08-01 Thread Duane Hill
On Fri, 1 Aug 2008, Brett Millett wrote: I've been googling quite a bit today to find the answer to what I'm seeing that is happening on my mail server. However, I just can't seem to find a definitive answer. When looking at my mail logs I see a number of autolearn=spam, however when I run "sa-l

Re: Memory Leak?

2008-07-25 Thread Duane Hill
On Fri, 25 Jul 2008, Ron Smith wrote: When I reinstituted the blocklists in CommuniGate Pro, the spam load falls dramatically and SA continues to function. And yet I'm still getting tmp files in the Submitted folder that have multiple .tmp extensions as though spamd was being respawned by the

Re: Incorrect DNSBL evaluation

2008-07-20 Thread Duane Hill
On Mon, 21 Jul 2008, mouss wrote: Duane Hill wrote: On Sun, 20 Jul 2008, Yves Goergen wrote: On 20.07.2008 17:10 CE(S)T, mouss wrote: on the host running SA, try $ host 1.0.0.127.zen.spamhaus.org It says: 1.0.0.127.zen.spamhaus.org does not exist (Authoritative answer) The server is

Re: Incorrect DNSBL evaluation

2008-07-20 Thread Duane Hill
On Sun, 20 Jul 2008, Yves Goergen wrote: On 20.07.2008 17:10 CE(S)T, mouss wrote: on the host running SA, try $ host 1.0.0.127.zen.spamhaus.org It says: 1.0.0.127.zen.spamhaus.org does not exist (Authoritative answer) The server is located in a well-known computing centre in Nuremberg, Germ

Re: Sendmail Question [OT]

2008-07-18 Thread Duane Hill
On Fri, 18 Jul 2008, Marc Perkel wrote: Just a quick sendmail question I'm asking for a friend. If they want to make sendmail listen on port 2525 instead of 25 - what do they meed to change? Email me privately off list. Thanks in advance Google for: "sendmail" +alternate port Very first

Re: Clamav+phishing

2008-07-03 Thread Duane Hill
On Thu, 3 Jul 2008, Sujit Acharyya-Choudhury wrote: Dear All, We are using clamAV 0.93.1 as our virus checker on SLES9 using exim as MTA. It catches lot of virus+phishing. However, lot of phishing mails are recently getting through. Our spamassassin is version 3.1.7 (a bit old), but running

Re: FreeMail Plugin

2008-07-02 Thread Duane Hill
On Wed, 2 Jul 2008, Dj Helmes wrote: Where can I find the url to download the FreeMail Plugin? Right on the plugins wiki page: http://wiki.apache.org/spamassassin/CustomPlugins It's toward the bottom of the page.

Re: i'm unable to catch these

2008-07-02 Thread Duane Hill
On Wed, 2 Jul 2008, Arvid Ephraim Picciani wrote: Received: from n75.bullet.mail.sp1.yahoo.com ([10.10.10.21]) by EXCHANGE02.norddeutsche.de with Microsoft SMTPSVC(6.0.3790.3959); Mon, 30 Jun 2008 18:58:44 +0200 huh? what's that weird IP doing there? It's a version.

Re: SARE Rules problem?

2008-06-30 Thread Duane Hill
On Mon, 30 Jun 2008, Arthur Dent wrote: Hello all. I have just upgraded from SA 3.2.4 to 3.2.5 and ran sa-update to get the latest rulesets (which also happens every night via a cronjob). I got the following errors: [errors chopped] Stopping spamd:

Re: EuroPharmacie

2008-06-20 Thread Duane Hill
On Fri, 20 Jun 2008, phil89 wrote: Hi We receive some mails with EuroPharmacie How could i avoid theses SCORE is only 5.9 Only 5.9? 5.0 is the SA default score. You must have changed that.

Re: skip inbox ?

2008-06-18 Thread Duane Hill
On Wed, 18 Jun 2008, almaren wrote: Is it possible to somehow tell spamassassin to move all messages marked as spam directly into the spam/ham/trash folders ? The thing is I'm running backups on my mailbox and although I omit spam/ham/trash I do collect the mails from my inbox, and in most case

Re: Pbl.spamhaus.org down?

2008-02-22 Thread Duane Hill
On Fri, 22 Feb 2008 17:02:11 -0800 Bob Amen <[EMAIL PROTECTED]> wrote: > Michael Scheidell wrote: > > >Works fine for me. Are you sure you weren't blocked? > > > > > > In fact, I found several sites (different networks, not mine) where > > it doesn't work. > > (I don't query more than 10,000

Re: Pbl.spamhaus.org down?

2008-02-22 Thread Duane Hill
On Fri, 22 Feb 2008 17:02:11 -0800 Bob Amen <[EMAIL PROTECTED]> wrote: > Michael Scheidell wrote: > > >Works fine for me. Are you sure you weren't blocked? > > > > > > In fact, I found several sites (different networks, not mine) where > > it doesn't work. > > (I don't query more than 10,000

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Duane Hill
On Tue, 19 Feb 2008 09:25:41 -0500 (EST) Andy Dills <[EMAIL PROTECTED]> wrote: > > It appears (from email recently sent to the admins of a few small > mailservers I help admin) that the people in charge of uribl.com have > decided to set a pretty low threshold for blacklisting DNS servers > fro

  1   2   3   4   >