Re: Suddenly getting lots of false positives.

2012-05-28 Thread Jari Fredriksson
On Sun, May 27, 2012 17:51, Benny Pedersen wrote: Den 2012-05-27 16:27, Jari Fredriksson skrev: Adding zones w/o forwarders will request directly them zones, thus allow dnseval to work. I want dnseval, but I do not want it use Google. okay, using forwards in options ? here i dont use

Re: Suddenly getting lots of false positives.

2012-05-27 Thread Jari Fredriksson
On Sun, May 27, 2012 12:28, Jeremy Morton wrote: I don't see what relevance the DNS servers I use on my my machine have to do with querying dnswl.org - surely dnswl.org shouldn't even know if I'm using Google's nameservers? You ask Google. Google does not know. They ask dnswl.org's DNS.

Re: Suddenly getting lots of false positives.

2012-05-27 Thread Jari Fredriksson
On Sun, May 27, 2012 16:34, Benny Pedersen wrote: Den 2012-05-27 11:39, Jari Fredriksson skrev: zone combined.njabl.org { type forward; forward first; forwarders {}; }; [zones] why not disable dnseval plugin in spamassassin ? saves more ram then add more zones to bind :=) Adding zones w

Re: Suddenly getting lots of false positives.

2012-05-27 Thread Jari Fredriksson
On Mon, May 28, 2012 00:09, Matthias Leisi wrote: On Sat, May 26, 2012 at 10:38 PM, Wolfgang Zeikat wolfgang.zei...@desy.de wrote: In an older episode, on 2012-05-26 22:06, Jeremy Morton wrote: OK I continue to get this problem - lots of spam is coming through now with: -4.0

Re: Missed SPAM

2012-03-31 Thread Jari Fredriksson
31.3.2012 19:17, joea kirjoitti: Beyond that, where can I find the difference, in a SPAM learning sense, between sa-learn --spam filename and spamassassin -r filename? If I do the sa-learn on the same file, after doing spamassassin, it tells me 0 tokens. If I then do sa-learn --forget

Re: sa-update

2012-03-27 Thread Jari Fredriksson
27.3.2012 13:08, j...@j4computers.com kirjoitti: On 3/26/2012 at 10:48 PM, Jeremy McSpadden jer...@fluxlabs.net wrote: Sa-update should reload SA, therefore reloading rules. What error are you getting ? -- Jeremy McSpadden Running /usr/sbin/spamassassin reload produces warn:

OT how to bypass public nameservers as bind forwarders?

2012-03-21 Thread Jari Fredriksson
I get this in SpamAssassin report: 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. I use public DNS services

Re: OT how to bypass public nameservers as bind forwarders?

2012-03-21 Thread Jari Fredriksson
21.3.2012 14:40, Michael Scheidell kirjoitti: On 3/21/12 8:24 AM, Jari Fredriksson wrote: I use public DNS services as forwarders in my LAN dns (bind9). I remember that once disabled forwarders for some URIBL but the setting is gone, and I can't find a recipe. Howto? don't use public

Re: OT how to bypass public nameservers as bind forwarders?

2012-03-21 Thread Jari Fredriksson
21.3.2012 16:45, Per Jessen kirjoitti: Jari Fredriksson wrote: I get this in SpamAssassin report: 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

Re: sa-update doesn't work anymore after upgrade to spamassassin-3.3.2-4.el4.rfx

2012-03-18 Thread Jari Fredriksson
18.3.2012 17:24, Bernard Lheureux kirjoitti: I use my own Bind9 DNS server which is running OK for a long time ago... And the 2 forwarders on this server are the 2 DNSes of my ISP what could be wrong ? Do you know if I could try to use public DNS as forwarders ? If yes, which ones ? Try

Re: Help with blocking Chinese Spam

2012-03-13 Thread Jari Fredriksson
13.3.2012 14:40, Jenny Lee kirjoitti: Date: Tue, 13 Mar 2012 08:25:21 -0400 From: d...@roaringpenguin.com To: users@spamassassin.apache.org Subject: Re: Help with blocking Chinese Spam On Tue, 13 Mar 2012 09:48:37 + Jenny Lee bodycar...@live.com wrote: I am getting this chinese spam

Re: Request for information about spam assasin channels

2012-03-13 Thread Jari Fredriksson
13.3.2012 12:45, Sharma, Ashish kirjoitti: Hi, I am using Spamassassin 3.3.1, earlier I used to use following rule channels to update my rulesets: saupdates.openprotect.com, updates.spamassassin.org Since 'saupdates.openprotect.com' is closed now, what other alternatives I have?

Re: Σχετ: Trusted Networks and scoring

2012-03-10 Thread Jari Fredriksson
. Παρασκευή, 9 Μαρτίου 2012 *Θεμα:* Re: Trusted Networks and scoring Den 2012-03-09 09:11, Jari Fredriksson skrev: No, SA will scan messages even if they originate from trusted_networks, and X-Spam headers will be added. most sites bypass scanning of there own mails since its just ham

Re: Trusted Networks and scoring

2012-03-09 Thread Jari Fredriksson
9.3.2012 9:50, Peter Tselios kirjoitti: Good morning, I noticed that for users originating from my networks, the X-Spam headers are not added to the messages. Is that due to the trusted_networks settings? If so, does that mean that spamassassin does not check them? P. No, SA will scan

Re: Allowing IMAP users to train spam/ham

2012-03-04 Thread Jari Fredriksson
4.3.2012 20:49, jdow kirjoitti: On 2012/03/04 10:30, LuKreme wrote: On 04 Mar 2012, at 05:36 , xTrade Assessory wrote: question is if necessary ... Being able to train mis-tagged spam is necessary, yes. I don’t see anyway to process a message in a maildir and then move that message. How

Re: Allowing IMAP users to train spam/ham

2012-03-04 Thread Jari Fredriksson
4.3.2012 22:44, LuKreme kirjoitti: Trouble with simply moving the messages about in the shell between Maildirs is that the courier files don’t get updated properly. I move my files all the time, and no problems occurred so far. I use Courier too... -- Things past redress and now with me

Re: Spamassassin detect my mails as spam

2012-02-24 Thread Jari Fredriksson
24.2.2012 13:23, Michelle Konzack kirjoitti: In relation to the previous poster with the fetchmail problem (the receiver should hide fetchmail received header by adding set invisible in the global section) I have the probvlem, that receiving MTAs runing spamassassin consider my mails as

T_DKIM_INVALID DKIM-Signature header exists but is not valid

2011-11-30 Thread Jari Fredriksson
I have set up DKIM on our corporate mail hosted by GMail. Google assigned a TXT record and our DNS-provider set it. I send a mail from GMail from the Web UI and from my Thunderbird to myself, and SA always triggers that rule. What does it mean? Is not valid? -- There are more things in

Re: T_DKIM_INVALID DKIM-Signature header exists but is not valid

2011-11-30 Thread Jari Fredriksson
30.11.2011 16:37, Mark Martinec kirjoitti: I have set up DKIM on our corporate mail hosted by GMail. Google assigned a TXT record and our DNS-provider set it. I send a mail from GMail from the Web UI and from my Thunderbird to myself, and SA always triggers that rule. What does it mean? Is

Re: sa-learn question

2011-10-28 Thread Jari Fredriksson
28.10.2011 4:38, Ricardo Ardila Vetrovec kirjoitti: Greetings list! Excuse my english, is not so good. I have a spamassasin standalone server, my MX it is another server postfix query spamassassin for score and work greats My question it's about spam that is not recognize on

Re: SOLVED Re: malware.blocklist.cf : www.malware.com.br unavailable

2011-08-09 Thread Jari Fredriksson
9.8.2011 11:54, J4K kirjoitti: On 08/09/2011 10:50 AM, J4K wrote: Hi, I noticed that the site that provided the malware.blocklist.cf has been unavailable since at least the 8th of August. URL for the file was on http://www.malware.com.br/cgi/submit?action=list_sa The FQDN no longer

Re: Beginner's question on DCC

2011-07-25 Thread Jari Fredriksson
25.7.2011 17:53, Walter Hurry kirjoitti: Hi, I am setting up Spamassassin on my home laptop, primarily as a learning exercise. I am mainly following the cookbook at http://wiki.apache.org/ spamassassin/SingleUserUnixInstall. However, I have a problem with DCC. dccproc is at

Re: [Q] Skip Bayes classification of emails with a certain From: address

2011-07-20 Thread Jari Fredriksson
20.7.2011 11:40, J4K kirjoitti: Morning all, I had a route around in the SA dox, and in /usr/share/spamassassin/*.cf, to try and find out how to disable Bayes classification for particular From: address. In particular, I don't want Bayes to classify, or put into the database, messages

Re: High Performance Bayes Database Configuration?

2011-06-21 Thread Jari Fredriksson
21.6.2011 17:53, David F. Skoll kirjoitti: On Tue, 21 Jun 2011 15:46:59 +0100 a.sm...@ukgrid.net wrote: Thats a bit harsh on MySQL isn't it? No. MySQL is horrible, no question about it. Anyway, how big are the DB's of you guys?? Our main database is 255MB, consisting of 6 220 831

Re: High Performance Bayes Database Configuration?

2011-06-21 Thread Jari Fredriksson
21.6.2011 21:10, David F. Skoll kirjoitti: On Tue, 21 Jun 2011 21:06:49 +0300 Jari Fredriksson ja...@iki.fi wrote: Our main database is 255MB, consisting of 6 220 831 tokens from 731 289 spam messages and 900 447 non-spam messages. Each user potentially has his/her own Bayes database

Re: BOTNET IPv6 patch

2011-06-13 Thread Jari Fredriksson
13.6.2011 14:51, Matthew Newton kirjoitti: Hi, On Sat, Jun 11, 2011 at 02:44:19AM +0300, Jari Fredriksson wrote: 11.6.2011 0:41, Matthew Newton kirjoitti: I've therefore hacked together the following patch to Botnet.pm (0.8). It should fix the main issue that BOTNET does not do any

Re: BOTNET IPv6 patch

2011-06-10 Thread Jari Fredriksson
11.6.2011 0:41, Matthew Newton kirjoitti: I've therefore hacked together the following patch to Botnet.pm (0.8). It should fix the main issue that BOTNET does not do any lookups for IP addresses that look like IPv6 addresses. It Hi! I really need that, but the patch did not work, ot

Re: log scans

2011-05-31 Thread Jari Fredriksson
31.5.2011 13:11, Mihamina Rakotomandimby kirjoitti: Hi all, I am runnin Postfix + Amavis + Spamassassin on Debian Squeeze Postfix throws messages to Amavis, Amavis is supposed to submit messages to Spamassassin. spamd is running on localhost:783 I dont see any Amavis configuration

Re: Rule dependency problems with v3.3.2-r929478

2011-05-23 Thread Jari Fredriksson
23.5.2011 16:01, Alex kirjoitti: Can any amount of information be changed in the email for anonymity? The masscheck operates on your computer, on your data. It does not send the email corpus anywhere, only couple small logfiles having the results per rule. -- All the troubles you have

Re: sought.rules.yerp.org?

2011-05-05 Thread Jari Fredriksson
5.5.2011 5:01, dar...@chaosreigns.com kirjoitti: On 05/05, Jari Fredriksson wrote: http: GET http://rules.yerp.org.s3.amazonaws.com/rules/stage/3301099614.tar.gz request failed: 404 Not Found: !DOCTYPE HTML PUBLIC -//IETF//DTD HTML I have no problem downloading that link. If you figure out

Re: sought.rules.yerp.org?

2011-05-05 Thread Jari Fredriksson
5.5.2011 9:40, Jari Fredriksson kirjoitti: 5.5.2011 5:01, dar...@chaosreigns.com kirjoitti: On 05/05, Jari Fredriksson wrote: http: GET http://rules.yerp.org.s3.amazonaws.com/rules/stage/3301099614.tar.gz request failed: 404 Not Found: !DOCTYPE HTML PUBLIC -//IETF//DTD HTML I have

Re: sought.rules.yerp.org?

2011-05-04 Thread Jari Fredriksson
4.5.2011 23:12, Bowie Bailey kirjoitti: On 5/2/2011 4:44 AM, Jari Fredriksson wrote: That sa-update channel fails, and no file can be found. Is this temporary problem or what has happened? It has been a failure many days now. Looks like it is you (or your network path) rather than

sought.rules.yerp.org?

2011-05-02 Thread Jari Fredriksson
That sa-update channel fails, and no file can be found. Is this temporary problem or what has happened? It has been a failure many days now. -- Someone is speaking well of you. signature.asc Description: OpenPGP digital signature

Re: Should Emails Have An Expiration Date

2011-03-01 Thread Jari Fredriksson
On 1.3.2011 0:06, Matt wrote: Looking at top 8 newest messages from my personnel email account: [Spammy subjects deleted] None of them are SPAM. If I wanted to unsubscribe from them I would. Its just if I do not read them within 30 days why keep them. I want to keep those for 3 months for

SHURT_URL_RULES fails

2011-02-20 Thread Jari Fredriksson
Hello. I reinstalled my machine, and reinstalled SA 3.3.1 from CPAN (this is still a Debian Lenny machine, and 3.3.1 not available via package repo. Errors in logs now: check[11271]: rules: failed to run HAS_SHORT_URL test, skipping: check[11271]: (Can't locate object method short_url_tests

Re: SHURT_URL_RULES fails

2011-02-20 Thread Jari Fredriksson
On 20.2.2011 19:16, Karsten Bräckelmann wrote: On Sun, 2011-02-20 at 17:29 +0200, Jari Fredriksson wrote: Hello. I reinstalled my machine, and reinstalled SA 3.3.1 from CPAN (this is still a Debian Lenny machine, and 3.3.1 not available via package repo. Errors in logs now: check[11271

Re: SHURT_URL_RULES fails

2011-02-20 Thread Jari Fredriksson
On 20.2.2011 19:50, Karsten Br�ckelmann wrote: Oh. The problem is the folder. Should be /etc/mail/spamassassin, which contains totally different file set. Fixed, and now linting the numerous issues... I suggest making one a symlink of the other, since you seem to be used to the Debian way.

Re: Score ...3.6 TO_NO_DIRECT

2011-01-25 Thread Jari Fredriksson
On 25.1.2011 14:11, Margrit Lottmann wrote: ...3.6 TO_NO_DIRECT To: misformatted and direct-to-MX What does such a score description mean ??? I didn't found any information to that score line in docs of spamassassin.org,... We are using version 3.3.1. Eventually somebody of you has

Re: Score ...3.6 TO_NO_BRKTS_DIRECT...

2011-01-25 Thread Jari Fredriksson
On 25.1.2011 14:15, Margrit Lottmann wrote: sorry...it was not the right line... here the right score line ...3.6 TO_NO_BRKTS_DIRECT To: misformatted and direct-to-MX What does such a score description mean ??? I didn't found any information to that score line in docs of

Re: spamc/spamd using IPv6?

2011-01-17 Thread Jari Fredriksson
On 17.1.2011 16:47, Chris Conn wrote: On 2011-01-15 14:47, Jari Fredriksson wrote: I just assigned records to my DNS, and spamc/spamd fails. I have a DNS alias spamd for a server. jarif@lancaster:~$ host spamd spamd.fredriksson.dy.fi is an alias for lancaster.fredriksson.dy.fi

spamc/spamd using IPv6?

2011-01-15 Thread Jari Fredriksson
I just assigned records to my DNS, and spamc/spamd fails. I have a DNS alias spamd for a server. jarif@lancaster:~$ host spamd spamd.fredriksson.dy.fi is an alias for lancaster.fredriksson.dy.fi. lancaster.fredriksson.dy.fi has address 10.123.29.113 lancaster.fredriksson.dy.fi has IPv6

Re: Understanding TrustPath

2011-01-11 Thread Jari Fredriksson
On 11.1.2011 21:24, Mauricio Tavares wrote: Am I correct? What would stop someone from trying to fake the originating IP to fit the ones in the above list? If I am not mistaken, the IP protocol and SMTP. Someone might fake the address when sending to you MTA, but your MTA's response would go to

Re: Spam bot Spam seems to be decreasing

2011-01-09 Thread Jari Fredriksson
On 9.1.2011 18:40, Marc Perkel wrote: Just wondering if anyone else is noticing this. Spam bot spam is down to 1/4 of what it was a year ago. I had noticed my black list shrinking. But here's some raw data from someone who tracks it. Now: http://www.sdsc.edu/~jeff/spam/cbc.html A year

Re: config: SQL error: Access denied for user 'spamassassin'@'localhost' (using password: YES)

2011-01-08 Thread Jari Fredriksson
On 8.1.2011 13:44, JKL wrote: user_scores_sql_password A()xxx!!*-44 user_scores_sql_username spamassassin user: spamassassin The user name and password combination can log in and query the database using: # mysql -p spamassassin -u spamhamster user: spamhamster Different

Re: BOTNET rules question

2011-01-06 Thread Jari Fredriksson
On 6.1.2011 0:10, Lawrence @ Rogers wrote: I would remove the p0f and botnet rules if I were you. That would solve your problem. I find BOTNET an excellent addition to my SA. TOP SPAM RULES FIRED -- RANKRULE NAME

Re: BOTNET rules question

2011-01-06 Thread Jari Fredriksson
On 6.1.2011 15:42, Henrik K wrote: On Thu, Jan 06, 2011 at 02:46:30PM +0200, Jari Fredriksson wrote: On 6.1.2011 0:10, Lawrence @ Rogers wrote: I would remove the p0f and botnet rules if I were you. That would solve your problem. I find BOTNET an excellent addition to my SA. Of course

Off topic: best RBLs to use to block at smtp connection?

2011-01-03 Thread Jari Fredriksson
I want to secure a postfix site with rbls, no spamassassin at this moment. (I use SpamAssassin on other sites, and no RBLs at SMTP time, so I'm not very experienced with this. SA has may RBL's, sure, but what to use to kill them when seen?) I can google, but many of those advices tell to use

Re: Off topic: best RBLs to use to block at smtp connection?

2011-01-03 Thread Jari Fredriksson
On 3.1.2011 18:33, Bowie Bailey wrote: I've been using zen.spamhaus.org as an MTA blacklist for quite a while now. Works great. Many have said this. Thanks to all who replied, I have settled to zen. -- Are you ever going to do the dishes? Or will you change your major to biology?

Re: Off topic: best RBLs to use to block at smtp connection?

2011-01-03 Thread Jari Fredriksson
On 3.1.2011 20:13, Andrzej Adam Filip wrote: Jari Fredriksson ja...@iki.fi wrote: On 3.1.2011 18:33, Bowie Bailey wrote: I've been using zen.spamhaus.org as an MTA blacklist for quite a while now. Works great. Many have said this. Thanks to all who replied, I have settled to zen. As I

Re: Off topic: best RBLs to use to block at smtp connection?

2011-01-03 Thread Jari Fredriksson
On 3.1.2011 20:44, Andrzej Adam Filip wrote: Jari Fredriksson ja...@iki.fi wrote: On 3.1.2011 20:13, Andrzej Adam Filip wrote: Jari Fredriksson ja...@iki.fi wrote: On 3.1.2011 18:33, Bowie Bailey wrote: I've been using zen.spamhaus.org as an MTA blacklist for quite a while now. Works great

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Jari Fredriksson
On 28.10.2010 18:12, John Hardin wrote: RH has provided /etc/init.d as a symlink to /etc/rc.d/init.d for quite some time now - possibly from the start of the Fedora distributions. I don't know why since it saves so little typing. More likely to reduce cognitive distruption for those used to

Re: SA not picking up users

2010-09-19 Thread Jari Fredriksson
On 19.9.2010 20:57, tonjg wrote: I've just built up a web/mail server running centos 4.8 and installed spamassassin-3.3.1-3.el4.rf. I then set SA up and got good results with the usual test commands. After this I then imported all the virtual sites and users from another backup, but

Re: New plugin: DecodeShortURLs

2010-09-17 Thread Jari Fredriksson
On 17.9.2010 16:11, Steve Freegard wrote: Hi All, Recently I've been getting a bit of filter-bleed from a bunch of spams injected via Hotmail/Yahoo that contain shortened URLs e.g. bit.ly/foo that upon closer inspection would have been rejected with a high score if the real URL had been

Re: Messages Stuck In Postfix

2010-09-09 Thread Jari Fredriksson
On 9.9.2010 17:53, Jason Hollenberg wrote: After a new OpenSuSE 11.3 mail server build (SpamAssassin 3.3.1, Postfix 2.7.1, invoking SpamAssassin using Amavisd-new) I'm seeing messages getting stuck in the Postfix queue with errors similar to this: host 127.0.0.1[127.0.0.1] said: 451 4.5.0

Re: Trouble whitelisting domain users with whitelist_from_rcvd

2010-07-28 Thread Jari Fredriksson
On 28.7.2010 17:57, keithcommins wrote: Hi there , Having some trouble getting this to work correctly , it would seem.. Firstly, here is my whitelist_from rcvd config from my local.cf file. whitelist_from_rcvd *...@mydomain.com mydomain.local trusted_networks 172.16.1/24

Re: spamc client always returning 0/0

2010-07-17 Thread Jari Fredriksson
On 17.7.2010 8:59, Gnanam wrote: Karsten Bräckelmann-2 wrote: -- char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1: (c=*++x); c128 (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0;

Re: png images

2010-07-17 Thread Jari Fredriksson
the ifplugin endif is missing, it is in the end of the previous line. -Original Message- From: Jari Fredriksson [mailto:ja...@iki.fi] Sent: Saturday, 17 July 2010 4:09 a.m. To: users@spamassassin.apache.org Subject: Re: png images On 16.7.2010 4:04, Peter Lowish wrote: I am wondering

Re: png images

2010-07-16 Thread Jari Fredriksson
On 16.7.2010 4:04, Peter Lowish wrote: I am wondering if someone has a rule to deal with the current spam being sent with just a small png attachment the name of which changes There is no text in the email, just the attachment – the subject line is always different header

Re: Stability of spamassassin command-line tool

2010-07-15 Thread Jari Fredriksson
On 15.7.2010 16:09, Gnanam wrote: Where do I limit/configure the number of child processes that spamd can run? Can you provide me documentation link for the same? Can you share with me the normal limit imposed by a typical MTA? It depends. If you are using *nix it is dependent on the *nix

Re: spamc client always returning 0/0

2010-07-15 Thread Jari Fredriksson
On 15.7.2010 16:58, Gnanam wrote: Also, how do I print only Content analysis details from spamassassin command-line tool by suppressing the whole mail message from being printed? Is there any option that controls this? Not possible as far as I know. SpamAssassin's idea is to be a *filter*,

Re: Strange log entries after OS upgrade

2010-07-11 Thread Jari Fredriksson
On 11.7.2010 5:40, Chris wrote: I upgraded to Mandriva 2010.1 yesterday. I was already running SA 3.3.0 and AFAICT that didn't change. What did change are log entries. I'm now seeing entries like this: rhost=localhost,raddr=127.0.0.1,

Re: Compile error at spamc_optC.t look like an old bug bug5510

2010-06-30 Thread Jari Fredriksson
On 30.6.2010 2:22, Péter Szekeres wrote: Hello SA list, I try to compile SA on a Debian 5.0.5, via CPAN. (install Mail::SpamAssassin), but it fails when running the tests. I have done it earlier a hundred times, but now I got strange error. I have found a similar in 2007 (bug5510) (maybe it

Re: Basic Setup Questions

2010-06-27 Thread Jari Fredriksson
On 27.6.2010 19:55, Giampaolo Tomassoni wrote: I have LearnAsSpam IMAP folders for everyone to drag spam that get's through into. How can I run sa-learn so that it builds a /single/ database from all of these folders and so that spamd uses that single database for scoring everyone's mail?

Re: SpamAssassin Integration

2010-06-17 Thread Jari Fredriksson
On 17.6.2010 9:19, Gnanam wrote: BTW, what does PGP mean that I found from your signature? http://en.wikipedia.org/wiki/Pretty_Good_Privacy -- http://www.iki.fi/jarif/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. O, it is excellent To have

Re: RTF casino spams

2010-06-16 Thread Jari Fredriksson
On 16.6.2010 14:54, RW wrote: On Wed, 16 Jun 2010 12:11:26 +0200 Marcus li...@localguru.de wrote: Helo, could someone send me a working rule against these empty emails with RTF attchments, which contains links to online casinos? Karsten Bräckelmann posted a useful rule for rtf spams

Re: SpamAssassin Integration

2010-06-16 Thread Jari Fredriksson
On 16.6.2010 17:18, Gnanam wrote: Hi, I want to integrate SpamAssassin in my web-based application to test spam score of the email content that our application User's wish to send in mail composing page itself - even before sending. When I say mail composing page here, it is not an email

Re: SA not filtering on distribution lists??!

2010-06-15 Thread Jari Fredriksson
On 15.6.2010 21:31, Ted Mittelstaedt wrote: Hi All, OK I thought I knew SA but I have a strange one here that is probably due to a configuration directive set wrong, but I don't know what it is. System is running sendmail and SA 3.2.5 mails sent to user e-mail addresses get

Re: SA not filtering on distribution lists??!

2010-06-15 Thread Jari Fredriksson
On 15.6.2010 21:31, Ted Mittelstaedt wrote: Hi All, OK I thought I knew SA but I have a strange one here that is probably due to a configuration directive set wrong, but I don't know what it is. System is running sendmail and SA 3.2.5 mails sent to user e-mail addresses get

Re: A few questions

2010-06-10 Thread Jari Fredriksson
On 10.6.2010 19:10, Adam Moffett wrote: These issues came up when I was trying to address performance problems, I hope they aren't major RTFM items. 1) I used sa-compile as suggested by the FAQ and the CPU load dropped *dramatically*. The question is do I have to run that every time I

Re: word file spam

2010-06-08 Thread Jari Fredriksson
On 13.10.2009 12:13, Jonas Eckerman wrote: John Hardin wrote: There were mutterings about a generic plugin that would take an attachment, process it somehow (e.g. wvHtml, antiword, ps2ascii, or whatever was appropriate), and insert the results into the body text to be scanned by the regular

Re: word file spam

2010-06-08 Thread Jari Fredriksson
On 8.6.2010 21:58, Scott Ostrander wrote: -Original Message- From: Jari Fredriksson [mailto:ja...@iki.fi] Sent: Tuesday, June 08, 2010 10:45 AM Subject: Re: word file spam But SA -D --lint says Jun 8 20:38:57.000 [10237] warn: plugin: eval failed: Insecure dependency in eval

Re: word file spam

2010-06-08 Thread Jari Fredriksson
On 8.6.2010 22:23, Jari Fredriksson wrote: On 8.6.2010 21:58, Scott Ostrander wrote: -Original Message- From: Jari Fredriksson [mailto:ja...@iki.fi] Sent: Tuesday, June 08, 2010 10:45 AM Subject: Re: word file spam But SA -D --lint says Jun 8 20:38:57.000 [10237] warn: plugin

Re: word file spam

2010-06-08 Thread Jari Fredriksson
On 8.6.2010 22:56, Scott Ostrander wrote: On 8.6.2010 22:47, Jari Fredriksson wrote: -Original Message- From: Jari Fredriksson [mailto:ja...@iki.fi] But then no. It gets BAYES_99 now, but then I think it still does not work. Jun 8 22:38:00.931 [21328] dbg: extracttext

Re: What are these errors: DNS_FROM_OPENWHOIS RBL FH_DATE_PAST_20XX??

2010-06-05 Thread Jari Fredriksson
On 5.6.2010 8:25, aquero wrote: Hi, I have installed spam-assassin in my mail server and when i sent mails from my gmail accout i always get these errors. * 2.4 DNS_FROM_OPENWHOIS RBL: Envelope sender listed in bl.open-whois.org. * 3.4 FH_DATE_PAST_20XX The date is grossly in

Re: spam score limit adivse

2010-06-04 Thread Jari Fredriksson
On 4.6.2010 18:53, aquero wrote: Hi, What is the maximum allowed spam score value for a legitimate mail? What value should i set as the spam score limit? The default is 5 and that value works best for any installation, as the stock rules are configured using that value. You have it at 2

Re: Will spam-assassin check the mail content?

2010-06-04 Thread Jari Fredriksson
On 4.6.2010 18:40, aquero wrote: I want to know whether spam-assassin will check the mail content also for finding spam score , in its default settings. If not what changes should I make in the configurations for, the spam-assassin to include the mail content , for its spam check. Please

Re: spam assassin custom rule sets

2010-06-04 Thread Jari Fredriksson
On 4.6.2010 19:33, aquero wrote: Hi, When i checked the third party softwares for spam-assassin i found many custom rule sets. Do I have to install these rule sets manually? If I perform sa-update, will it will include all these rule sets into my spam-assassin rules list? sa-update can

Re: new error

2010-05-25 Thread Jari Fredriksson
Now I've got new message when starting spamd and don't know how to fix it: info: rules: meta test T_OBFU_ATTACH_MISSP has dependency 'OBFU_TEXT_ATTACH' with a zero score I see this kind of errors almost every day, but I just ignore them. They do not sound dangerous to me. I may be wrong

Re: databse questions

2010-05-24 Thread Jari Fredriksson
I got two questions that I can't find an answer: 1- Is it possible to distribute antispam database among different servers (4 in my case) and how can I distribute? Using an SQL database. it is also possible to share whole /etc/spamassassin/* via NFS but that does not work out so well, is my

Re: Updated rules are not regarded

2010-05-22 Thread Jari Fredriksson
Hi, I have recently added the 70_zmi_german_cf_zmi_sa-update_dostech_net rules to my sa-update call. The rules seem to get updated, I can also find the files under /var/lib/spamassassin/3.002005/. It just doesn't look as if they're regarded. In my reject log, none of the ZMI rules appear

Re: System hangs on sending mail sometimes

2010-05-21 Thread Jari Fredriksson
I'm using spamassassin with sendmail via spamass-milter. Many users are using Open Webmail to read mail, and sometimes when they try to send, the system hangs for 10+ seconds. Often it sends immediately however. You are scanning outgoing messages. Is this really a requirement? If not, You

Re: remmonded max children settings

2010-05-21 Thread Jari Fredriksson
Hi all, I am constantly getting the server reached --max children setting entries in my log I started with 10 max children and have been raising it by 2. I am now at 40 , but still getting the messages (though not as often) how high can I go given these specs: sa 3.3 on freebsd ,

Re: Scanning Outbound emails

2010-05-05 Thread Jari Fredriksson
On 5.5.2010 15:38, Alans wrote: We are about to close port 25 and tell customers to switch to our smtp relay and scan it with spamassasin (I still don't know if possible or no!). We want to reject all spam emails and send notification back to sender about his/her activity. There is one

Re: Scanning Outbound emails

2010-05-05 Thread Jari Fredriksson
On 5.5.2010 17:39, Kris Deugau wrote: Jari Fredriksson wrote: On 5.5.2010 15:38, Alans wrote: We are about to close port 25 and tell customers to switch to our smtp relay and scan it with spamassasin (I still don't know if possible or no!). We want to reject all spam emails and send

Re: Scanning Outbound emails

2010-05-05 Thread Jari Fredriksson
On 5.5.2010 17:44, Charles Gregory wrote: On Wed, 5 May 2010, Jari Fredriksson wrote: There is one special group that will suffer from that decision: namely SpamAssassin users within your network. If they do report their spam to SpamCop using SpamAssassin's own report mechanism

Re: spamd[18549]: config: failed to parse line, skipping, in /etc/mail/spamassassin/local.cf: use_auto_whitelist 1

2010-04-28 Thread Jari Fredriksson
On 28.4.2010 9:10, ram wrote: after update also still it shows old version why ? X-Spam-Status: No, score=-0.4 required=5.0 tests=AWL,BAYES_00, DATE_IN_PAST_03_06,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY, RCVD_IN_SORBS_WEB autolearn=no version=3.2.5 Maybe you used to use the

Re: sa-update channels

2010-04-21 Thread Jari Fredriksson
On 21.4.2010 18:00, Micah Anderson wrote: Kai Schaetzl mailli...@conactive.com writes: Micah Anderson wrote on Wed, 17 Mar 2010 18:20:40 -0400: saupdates.openprotect.com It's been said repeatedly on this list: don't use it. Thanks, should I be using the sought.rules.yerp.org channel

What happens to a rule file when removed from sa-update channels

2010-04-20 Thread Jari Fredriksson
90_2tld.cf has been replaced by the official rule file 20_aux_tlds.cf. I have this in my channels.txt that I use with sa-update. Is it enough to remove the channel, and the rule file disappears on next sa-update, or does the old remnant keep on ghosting on the system forever? --

Re: Top Ten Rules

2010-04-19 Thread Jari Fredriksson
On 19.4.2010 9:29, Alex wrote: Hi all, Here is mine top 20 TOP SPAM RULES FIRED -- RANKRULE NAME COUNT %OFMAIL %OFSPAM %OFHAM --

Re: How do I filter out phishing email?

2010-04-14 Thread Jari Fredriksson
On 14.4.2010 17:54, yongke wrote: Hi guys Is there anyway to filter out phishing emails using spam assassin? My current test email wasn't blocked and SA had a score 0f 0: You sample was not a real email with all headers, or so it looked. However, I sent to my SA, and here is the

Re: How do I filter out phishing email?

2010-04-14 Thread Jari Fredriksson
On 14.4.2010 17:54, yongke wrote: Hi guys Is there anyway to filter out phishing emails using spam assassin? My current test email wasn't blocked and SA had a score 0f 0: Please do not post spammy mail to the list (it poisons our Bayes with spammy tokens with hammy score). Post the

Re: How do I filter out phishing email?

2010-04-14 Thread Jari Fredriksson
On 14.4.2010 18:57, yongke wrote: Well, we send emails on behalf of clients, and so we are trying catch phishing spam before they are sent out. Since the email aren't sent yet, we had to generate a mock email for SA. The header in the example is what we THINK the headers will be when they

Re: How do I filter out phishing email?

2010-04-14 Thread Jari Fredriksson
On 14.4.2010 21:38, yongke wrote: I don't think I am running compiled rules as I haven't changed any rules... I just used that channel thing. I have also restarted SA using the following command: sudo /etc/init.d/spamassassin restart Still the same result :( Clueless here, can't

Re: How do I filter out phishing email?

2010-04-14 Thread Jari Fredriksson
On 15.4.2010 0:32, John Hardin wrote: A mailing list about spam detection shouldn't discuss actual samples of spam to detect? Of course it should. The primary reason for posting samples to pastebin et all is to prevent the mangling that sending them through the mail will inevitably

Rare (?) error message

2010-04-07 Thread Jari Fredriksson
Apr 7 10:07:41 lancaster check[1339]: Use of uninitialized value $origip in concatenation (.) or string at /usr/local/share/perl/5.10.0/Mail/SpamAssassin/AutoWhitelist.pm line 346. 3.3.1 in Debian Lenny, compiled via CPAN. I have not seen this message before, but now it came. I have no idea of

Re: Rare (?) error message

2010-04-07 Thread Jari Fredriksson
On 7.4.2010 19:12, Mark Martinec wrote: Jari, Apr 7 10:07:41 lancaster check[1339]: Use of uninitialized value $origip in concatenation (.) or string at /usr/local/share/perl/5.10.0/Mail/SpamAssassin/AutoWhitelist.pm line 346. 3.3.1 in Debian Lenny, compiled via CPAN. I have not seen

Re: Some problems after update to SpamAssassin 3.3.1 and Perl 5.10.1

2010-04-02 Thread Jari Fredriksson
On 2.4.2010 11:30, Cecil Westerhof wrote: I just updated my SpamAssassin to 3.3.1. Maybe not the correct place to mention it, but I find the perl -MCPAN -e shell not working very well. There was a message that the Perl version 5.8.6 was outdated, but I only saw it, because I was watching

Re: Some problems after update to SpamAssassin 3.3.1 and Perl 5.10.1

2010-04-02 Thread Jari Fredriksson
On 2.4.2010 14:14, Cecil Westerhof wrote: Most of my problems where solved by installing db-dev abd running 'install Bundle::CPAN'. But some problems remain. When I give: i Razor2::Client::Agent I get: No objects found of any type for argument Razor2::Client::Agent Is the

Re: Some problems after update to SpamAssassin 3.3.1 and Perl 5.10.1

2010-04-02 Thread Jari Fredriksson
On 2.4.2010 14:02, Cecil Westerhof wrote: My problem with Net::Ident did not go away. I might try force install Net::Ident and then prepare to format my HD :( It has worked sometimes, and never failed. But I have not done it too often. Installing from CPAN can be pain. --

Re: Some problems after update to SpamAssassin 3.3.1 and Perl 5.10.1

2010-04-02 Thread Jari Fredriksson
On 2.4.2010 14:31, Cecil Westerhof wrote: Jari Fredriksson ja...@iki.fi writes: On 2.4.2010 14:02, Cecil Westerhof wrote: My problem with Net::Ident did not go away. I might try force install Net::Ident and then prepare to format my HD :( It looks like it does not pose a problem

<    1   2   3   4   5   6   7   >