Re: Mail::SpamAssassin::Plugin::Phishing PhishStats[.]info domain expired

ation line. If PhishStats[.]info will not find a new home I am going to remove the relevant code from the plugin.  Regards   Giovanni Did you remove the relevant code for PhishStats? Regards, Larry

update-rules script: Error with latest LWP:::UserAgent on FreeBSD

e available at http://wiki.apache.org/spamassassin/CustomRulesets WWW: http://spamassassin.apache.org/ ler in thebighonker in ~ via ☕ v1.8.0 via 🐪 v5.32.1 via 💎 v3.0.4 Ideas? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

T_SCC_BODY_TEXT_LINE

Greetings, What is the purpose of the rule named T_SCC_BODY_TEXT_LINE? On my servers, it hits nearly every spam and ham email. Regards, Larry

Re: What does this header mean?... X-Spam_score_int: -38

. IIRC, that's a Exim SA variable, and that probably means a score of -3.8. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

Re: [Spamhaus notice] New plug-in is now available for use with Spamhaus Domain Blocklist with hostnames which goes into production on February 1st.

don't see anything on the github page, but maybe it's documented elsewhere? Hello, you won't need to remove anything, it should just work (TM) will spamhaus-dqs be updated with this? or should I change FreeBSD to pull this branch? -- Larry Rosenman http://www.

Re: Beginner - Spamassassins 3.4.4 - Deb 10

Oh ya, you'll see the same in the Roles, under "Permissions". Larry On 5/9/20 1:22 PM, Matus UHLAR - fantomas wrote: > On 09.05.20 01:52, mau...@gmx.ch wrote: >> Subject: Beginner - Spamassassins 3.4.4 - Deb 10 >> >> Hello today i have installed SpamAssassin 3

Re: 3.4.4: Lots of DNS no callback messages (FreeBSD)

On 02/14/2020 3:56 am, Henrik K wrote: On Thu, Feb 13, 2020 at 08:53:30AM -0600, Larry Rosenman wrote: Greetings, I upgraded to SpamAssassin 3.4.4 last night, and ever since, I'm seeing a ton of: <22>1 2020-02-13T08:51:17.00-06:00 thebighonker.lerctr.org spamd 26116

3.4.4: Lots of DNS no callback messages (FreeBSD)

spamcop.net, ignored, packet on next debug line <22>1 2020-02-13T08:51:17.00-06:00 thebighonker.lerctr.org spamd 26116 - - dns: no likely matching queries for id 62451 What do I need to do to figure out why thes are now failing. It seems to happen for EVERY lookup.

Re: Lint Failed on auto download?

On 08/20/2019 7:05 am, Henrik K wrote: Install Geo::IP or wait for 3.4.3. When is 3.4.3 due? FreeBSD ports no longer contains Geo::IP. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 5708 Sabbia Dr

Lint Failed on auto download?

TR_SUSPECT' with a zero score Aug 20 06:24:42.385 [71305] info: rules: meta test KAM_JURY has dependency 'KAM_RAPTOR_ALTERED' with a zero score sa-compile: not compiling; 'spamassassin --lint' check failed! Can someone look at it? Thanks! -- Larry Rosenman

Re: Spamhaus Technology contributions to SpamAssassin

etc/mail/spamassassin/SH.pm line 135. <20>1 2019-07-03T10:59:51.00-05:00 thebighonker.lerctr.org spamd 80260 - - Use of uninitialized value $_ in pattern match (m//) at /usr/local/etc/mail/spamassassin/SH.pm line 139. Is this a bug in my setup or a bug in the plugin? -- Larry Rosenman

Re: Spamhaus Technology contributions to SpamAssassin

install perl-List-MoreUtils portmaster lang/p5-List-MoreUtils or pkg install p5-List-MoreUtils Thanks, this is for FreeBSD right? If that's the case I'll update the documentation yes it is. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 21

Re: recent update to __STYLE_GIBBERISH_1 leads to 100% CPU usage

eeing CPUs hanging at 100%. Larry

Re: Turn OFF SA spam filtering but keep ON header examination

not well maintained. (My opinion FWIW) -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106

Re: Fwd: [Bug 7331] channel: SHA1 verification failed, channel failed

r10.o scanner11.o scanner12.o scanner13.o scanner14.o scanner15.o scanner16.o scanner17.o scanner18.o scanner19.o scanner2.o scanner20.o scanner21.o scanner22.o scanner23.o scanner24.o scanner3.o scanner4.o scanner5.o scanner6.o scanner7.o scanner8.o scanner9.o -o blib/arch/auto/Mail/SpamAs

Re: Spam with tons of lines with garbage characters, preceded by

On 7/20/17 2:31 AM, Henrik K wrote: On Thu, Jul 20, 2017 at 01:02:07AM -0500, David B Funk wrote: On Thu, 20 Jul 2017, Andrzej A. Filip wrote: By default messages bigger than 500KB are not sent to spamd for processing/scanning => the tactics you describe frequently "turns off" spam filtering.

Re: Mailsploit

'`"     ;; 20 | 02 | 22 ) echo "ISSUES WITH DIFF -- CHECK IT";; esac cd / rm -rf /tmp/KAM exit 0 thebighonker.lerctr.org /home/ler $ -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerct

Re: Latest Spamassassin Rules

1799552, skipping > channel > > Is this really still the most current?  If not what do I need to do to get > my system to get the latest? > > Thanks, > Shane There is an Infrastructure issue with the rules update. See the archives. That is the most current. -- Larry Rosenman

Re: Bank fraud phish

ou don't have direct access to your server and it's a remote POP or > IMAP, collect the spam via fetchmail or something to get it into a local > folder then use mutt to send it as an attachment. > > -- > David Jones You might also be able to set up something using imapsie

SQL Destroy/Rollback?

logs occasionally. SpamAssassin: spamassassin-3.4.1_10 Highly efficient mail filter for identifying spam From FreeBSD ports. Ideas? What can I supply to help? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerct

Re: recent increase in spam getting through

I wanted to try it. But it seems to require the milter interface in the MTA (ie. sendmail or _maybe_ postfix), and I'm married to Exim. :-( I have RBLs, ClamAV and SpamAssassin working quite well with Exim on my FreeBSD mail server, FWIW. I'm willing to share config if anyone's

Re: sa-update failing

On Tuesday, November 22, 2016 18:34:05 bOnK wrote: > On 22-11-2016 18:22, Larry Starr wrote: > > Has there been a mirror change that I've missed? > > > For the past few days my daily "sa-update" job has been failing: > I don't know if this has anything

sa-update failing

mirrors.bogus-virus-warnings.cf.sare.sa-update.dostech.net' record found, channel failed channel: no 'mirrors.random.current.cf.sare.sa-update.dostech.net' record found, channel failed Update failed, exiting with code 4 I'm seeing this on both of my mail servers. This ha

Re: Spoofed Domain

n't think of a legitimate reason to use the old extension on the new file format. On 8/10/2016 9:28 AM, Larry Starr wrote: On Tuesday, August 09, 2016 18:01:57 RobMcEwen wrote: > On 8/9/2016 5:56 PM, Anthony Hoppewrote:

Re: Spoofed Domain

cm that is renamed to .docx, it will open a .docm renamed to .doc. I found this the hard way! It is necessary, if you wish to be safe from macro enabled documents to verify that the file is what the attachment's extension claims to be. -- Larry Starr Software Engineer Full Compass

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

d why they do it like this. what's the point behind changing IP address after each delivery attempt? Shared outbound spool, and the next available host sends it. It's not nefarious, just load balancing. -- Larry Rosenman http://www.lerctr.org/~ler Ph

Re: SA bayes file db permission issue

ue for Mac OS X. It's Unix/Unix-like. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

Re: How to configure FOO=-1.0 in X-Spam-Status ?

-Score: $spam_score ($spam_bar) spam = smmsp:true warn message = X-LERCTR-Spam-Score: $spam_score ($spam_bar) spam = smmsp:true warn message = X-Spam-Report: $spam_report spam = smmsp:true warn message = X-LERCTR-Spam-Report: $spam_report spam

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

SA rules to react to changing conditions. That job is the same regardless of how the email service is provided. Hope that helps, Larry Goldman > On Oct 1, 2015, at 6:53 PM, Larry Goldman > <mailto:lgold...@allstarcomputerservices.com>> wrote: > > From http://spamassass

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

Way the best answer, Dianne! Thanks! > On Oct 13, 2015, at 1:11 PM, Dianne Skoll wrote: > > On Tue, 13 Oct 2015 13:04:36 -0700 > Larry Goldman wrote: > >> Point me to the documentation of the SpamAssassin framework. Where >> are rules documented? What are the

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

service. > On Oct 13, 2015, at 12:58 PM, Reindl Harald wrote: > > > > Am 13.10.2015 um 21:48 schrieb Larry Goldman: >> It seems that a basic function of an email service provider, these days, is >> to keep up with spam. There is nothing unusual about my email. >>

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

documented there. Is that what it takes to administer a mail service? Why can’t an expert (at CPanel) do this for me? > On Oct 13, 2015, at 12:41 PM, Reindl Harald wrote: > > > > Am 13.10.2015 um 21:34 schrieb Larry Goldman: >> I couldn’t pay a full-time guy for what I’m

Re: Simplicity (was Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains)

gt; On Tue, 13 Oct 2015 12:24:53 -0700 > Larry Goldman wrote: > >> So, it is not possible to simplify the process of managing an email >> server via an easy-to-use software user interface? > > I think if your goal is to simplify the process of managing an email > server

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

I couldn’t pay a full-time guy for what I’m paying to use CPanel. I was hoping/expecting that the $ all of us shared users of CPanel are paying for the product would eventually be paying a full-time guy/gurl to support the product. > On Oct 13, 2015, at 12:19 PM, Reindl Harald wrote: > > it'

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

st the truth, maintaining mailservices > is a FULLTIME-JOB and that won't change in the near future > > Am 13.10.2015 um 21:15 schrieb Larry Goldman: >> The _idea_ of CPanel is a good one: a low-cost, do-it-all solution which a >> broader range of tech-savvy users ca

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

their black box, I’ll consider hosting my own email on OS X Server: full apache, full SA. > On Oct 13, 2015, at 12:07 PM, Reindl Harald wrote: > > > > Am 13.10.2015 um 21:02 schrieb Larry Goldman: >> I’ve seen CPanel hosted on several other ISPs. It would be quite unfortun

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

n A. McGrail wrote: > > On 10/13/2015 2:40 PM, Larry Goldman wrote: >> >>> On Oct 13, 2015, at 6:49 AM, Kevin A. McGrail >> <mailto:kmcgr...@pccc.com>> wrote: >>> >>> On 10/12/2015 2:15 PM, Larry Goldman wrote: >>>> I’m using the

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

I’ve seen CPanel hosted on several other ISPs. It would be quite unfortunate (for them and for their users) if their email product could not reliably catch spam. > On Oct 13, 2015, at 11:56 AM, Reindl Harald wrote: > > > > Am 13.10.2015 um 20:40 schrieb Larry Goldman: &

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

It seems that the new domains are appearing faster than I can keep up. Continual manual updates by every SA admin seems unfeasible. How does SA solve this problem? > On Oct 13, 2015, at 2:33 AM, Paul Stead wrote: > > On 12/10/15 19:15, Larry Goldman wrote: >> On Oct 2, 2015 6

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

> On Oct 13, 2015, at 6:49 AM, Kevin A. McGrail wrote: > > On 10/12/2015 2:15 PM, Larry Goldman wrote: >> I’m using the CPanel shared hosting on GoDaddy. Inside there, SpamAssassin >> is running. > GoDaddy might not be running sa-update or a new enough version of SA to

Re: SpamAssassin Rules Regarding Abuse of New Top Level Domains

On Oct 2, 2015 6:47:41 am RW wrote: >> On Thu, 1 Oct 2015 18:53:16 -0700 >> Larry Goldman wrote: >> >> From http://spamassassin.apache.org <http://spamassassin.apache.org/>: >> >> Latest News >> >> 2015-04-30: SpamAssassin 3.4.1 has

Re: How to search Apache Mailing List archives?

Try: http://spamassassin.markmail.org > On Oct 1, 2015, at 6:44 PM, Larry Goldman > wrote: > > How does one perform a search on the Apache mailing list archives, e.g. > http://mail-archives.apache.org/mod_mbox/spamassassin-users/ > <http://mail-archives.apache.org/

SpamAssassin Rules Regarding Abuse of New Top Level Domains

From http://spamassassin.apache.org: > Latest News > > 2015-04-30: SpamAssassin 3.4.1 has been released! Highlights include: > > improved automation to help combat spammers that are abusing new top level > domains; > I’m running SpamAssassin on CPanel shared hosting (GoDaddy). For several we

How to search Apache Mailing List archives?

How does one perform a search on the Apache mailing list archives, e.g. http://mail-archives.apache.org/mod_mbox/spamassassin-users/ ? I’m running Safari 9.0 on Mac OS X 10.11.

New warnings after Perl upgrade to 5.20?

experimental at /usr/local/lib/perl5/site_perl/Mail/SpamAssassin/Plugin/URILocalBL.pm line 406. this is after I upgraded my PERL to 5.20. (SA 3.4.1 on FreeBSD 10.2-STABLE from Ports) -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l

Re: Cron /home/ler/bin/update-bayes.sh

On 2015-06-05 18:04, RW wrote: On Fri, 05 Jun 2015 18:11:48 -0400 Bill Cole wrote: On 5 Jun 2015, at 17:53, Larry Rosenman wrote: > I guess my question is why is it being called during sa-learn. You have yet to demonstrate that to be occurring. SA has a misfeature of attempting to

Re: Fwd: Cron /home/ler/bin/update-bayes.sh

I guess my question is why is it being called during sa-learn. On 2015-06-05 16:48, Kevin A. McGrail wrote: > On 6/5/2015 5:33 PM, Larry Rosenman wrote: > >> This appears to be from the EnemiesList.PM pliugin being invoked during >> sa-learn. >> >&

Re: Fwd: Cron /home/ler/bin/update-bayes.sh

gt; > You have emails somewhere in those mail boxes that have that domain of > .sa.enemieslist.com > > Regards, > KAM > > On 6/5/2015 4:21 PM, Larry Rosenman wrote: > >> Can anyone help me silence this? >> >> these are from: >> thebighonker.lerctr.o

Fwd: Cron /home/ler/bin/update-bayes.sh

ll label plugin: eval failed: oops, no key at /usr/local/lib/perl5/site_perl/Mail/SpamAssassin/AsyncLoop.pm line 180. Learned tokens from 0 message(s) (122 message(s) examined) Learned tokens from 0 message(s) (21 message(s) examined) -- Larry Rosenman http://www.lerctr.org/

Re: user_prefs custom rules, not matching

ther apps that validate e-mail addresses think the + sign is a URL encoded SPACE and REJECT it. :( RFC's be damned. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

Re: Where to download the latest KAM rules?

On 2015-05-10 15:11, Sergio wrote: > Hi, where is the best place to download the lastest KAM rules? > > Thanks in advance. > > Sergio http://www.peregrinehw.com/downloads/SpamAssassin/contrib/KAM.cf -- Larry Rosenman http://www.lerctr.org/~ler [1] Phone: +1 214-642

Re: Particularly annoying spam

On 2015-05-02 15:40, John Hardin wrote: On Fri, 1 May 2015, RW wrote: On Fri, 01 May 2015 09:55:31 -0500 Larry Rosenman wrote: X-Spam-Report: SpamScore (3.8/5.0) BAYES_99=3.5,BAYES_999=0.2 Consider increasing the score of BAYES_99 above 5. For me BAYES_99 has an FP rate that&#

Re: Particularly annoying spam

On 2015-05-01 10:08, Kevin A. McGrail wrote: On 5/1/2015 11:06 AM, Joe Quinn wrote: On 5/1/2015 10:55 AM, Larry Rosenman wrote: http://pastebin.com/4gck7uLD This one and one's like it seem to get through multiple times/day. Any help here? Today's is WITH 3.4.1.. That's

Particularly annoying spam

http://pastebin.com/4gck7uLD This one and one's like it seem to get through multiple times/day. Any help here? Today's is WITH 3.4.1.. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 108 T

Re: Mail Filter Recommendations

ere: http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Util/RegistrarBoundaries.pm?view=log I believe this works with at least 3.4.0 or is it only 3.4.1? I'm using it successfully with 3.4.0. I believe that this is being heavily modified for 3.4.1 to be in a .cf fi

Re: Help with today's (and previous) spam uptick?

local/lib/perl5/site_perl/Mail/SpamAssassin/Util/RegistrarBoundaries.pm -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

Re: Help with today's (and previous) spam uptick?

On 2015-04-01 19:23, Kevin A. McGrail wrote: On 4/1/2015 8:21 PM, Larry Rosenman wrote: Is there an ETA for 3.4.1? And, is there anything else I can do mean time? 3.4.1 is planned to announce for release during ApacheCon in about 2 weeks. 1 - Make sure you are using the new Registrar

Re: Help with today's (and previous) spam uptick?

On 2015-04-01 19:23, Kevin A. McGrail wrote: On 4/1/2015 8:21 PM, Larry Rosenman wrote: Is there an ETA for 3.4.1? And, is there anything else I can do mean time? 3.4.1 is planned to announce for release during ApacheCon in about 2 weeks. 1 - Make sure you are using the new Registrar

Re: Help with today's (and previous) spam uptick?

On 2015-04-01 19:20, Kevin A. McGrail wrote: On 4/1/2015 8:18 PM, Larry Rosenman wrote: On 2015-04-01 19:15, Kevin A. McGrail wrote: On 4/1/2015 8:13 PM, Larry Rosenman wrote: I've been getting pounded with stuff from "new" tld's (cricket, science, work, et al). I'm

Re: Help with today's (and previous) spam uptick?

On 2015-04-01 19:15, Kevin A. McGrail wrote: On 4/1/2015 8:13 PM, Larry Rosenman wrote: I've been getting pounded with stuff from "new" tld's (cricket, science, work, et al). I'm wondering how to make SA more immune to it. Spamples: http://pastebin.com/jc3efYju Are y

Help with today's (and previous) spam uptick?

I've been getting pounded with stuff from "new" tld's (cricket, science, work, et al). I'm wondering how to make SA more immune to it. Spamples: http://pastebin.com/jc3efYju Thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-96

Fwd: Check out these *Costa rica* luxury resorts

`However,' said Mrs Joe. `I should have since you went to get to her, avoiding her do it.' AJNIYSYAUWRNWOTKTO oJLNVPDJOUDDUMIPNDPr torches we went across and I resolved to me.' PAOJPMYLYUCIHQGWTP ----- -- Larry Starr Software Engineer F

Re: TVD_PH_BODY_META rule: Hitting legit HAM from my Credit Uniomn

On 2014-01-15 07:41, RW wrote: On Tue, 14 Jan 2014 16:30:02 -0600 Larry Rosenman wrote: I just had 3 messages that are HAM that hit TVD_PH_BODY_META=3.625 and got marked as SPAM. It seems that "Funds could take up to two business days to post to your account." is hitti

Re: TVD_PH_BODY_META rule: Hitting legit HAM from my Credit Uniomn

On 2014-01-14 17:07, Benny Pedersen wrote: Larry Rosenman skrev den 2014-01-14 23:33: Whoops, wrong headers is it possible to learn it as ham with bayes ?, bayes 50 is more or less neotral score for unsure content, help learning it as ham will solve it to go under 5 Already done, but

Re: TVD_PH_BODY_META rule: Hitting legit HAM from my Credit Uniomn

On 2014-01-14 16:30, Larry Rosenman wrote: I just had 3 messages that are HAM that hit TVD_PH_BODY_META=3.625 and got marked as SPAM. The text contents are: [quote] This message confirms your deposit of $70.94 has been approved and processed. Funds could take up to two business days to post

TVD_PH_BODY_META rule: Hitting legit HAM from my Credit Uniomn

understand atm) too aggressive for this case? Thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: l...@lerctr.org US Mail: 108 Turvey Cove, Hutto, TX 78634-5688

Re: Advice

mmon and seems to be > the problem. > > I have also noticed that every time one of these mailings is sent with > several AOL users, our servers will be temporarily blocked. Are there > some precautions I should take to possible get their mails trusted? Any > other advice? > > -

Re: Am i sending spam?

elo_name} \ lsearch{/usr/local/etc/exim/checkfiles/our_host_names}{yes}{no}} - -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 512-248-2683 E-Mail: l...@lerctr.org US Mail: 430 Valona Loop, Round Rock, TX 78681-3893 -BEGIN PGP SIGNATURE

RE: DKIM Checks

> From: Matt [mailto:lm7...@gmail.com] > Sent: Wednesday, May 18, 2011 11:32 AM > To: users > Subject: DKIM Checks > > I am running spamassassin-3.2.5-1.el5 on 64 bit CentOS. > > sa-update -D seems to indicate that the DKIM libraries are installed. > ... > May 18 10:25:02.683 [15134] dbg: diag:

How to disable links in email?

Is there a SpamAssassin add-on that will disable links in emails (i.e. massage them or make them non-clickable)? Thanks, Larry -- View this message in context: http://old.nabble.com/How-to-disable-links-in-email--tp31427225p31427225.html Sent from the SpamAssassin - Users mailing list archive

RE: Fake MX

> From: Bob Proulx [mailto:b...@proulx.com] > Subject: Re: Fake MX > > > > [...] but that is distinct from being a tarpit, which is what > > > I'm trying to clarify. > > > > A discussion around the definition of tarpit, and why tarbaby might be a > > suboptimal, though catchy, name? > > For the r

RE: email address forgery

Are there domains that have actually defined SPF record type records? I haven’t been able to find any, but it could be the fault of the tools I’m using. L From: Noel Butler [mailto:noel.but...@ausics.net] Sent: Thursday, November 11, 2010 5:14 PM To: users@spamassassin.apache.org Subject: Re: e

RE: DOS_OE_TO_MX

ing. It is in /var/lib/spamassassin/3.003001/updates_spamassassin_org/50_scores.cf or some similar directory. To find your config directory path, try this: spamassassin -D config --lint > > Rosenbaum, Larry M. wrote: > > > > > > > >> -Original Message- > >&

RE: DOS_OE_TO_MX

> -Original Message- > From: njjrdell [mailto:nruggi...@dellmagazines.net] > Sent: Wednesday, September 29, 2010 11:32 AM > To: users@spamassassin.apache.org > Subject: Re: DOS_OE_TO_MX > > > I'm pretty sure she would not send a GTUBE. Here is another from her > > Sep 28 08:35:26 nsmai

Moving from Solaris to Red Hat

ll by downloading the Mail-SpamAssassin-3.3.1.tar.bz2 file and running the build procedure, after installing the required Perl modules. Thanks, Larry

RE: Trouble whitelisting domain users with whitelist_from_rcvd

> What is the best way to completely whitelist all internal emails so that > there is no danger of any internal emails being blacklisted The best way is to not feed internal emails to SpamAssassin.

compiling: Illegal octal digit '9' ignored...

I'm seeing warnings like this when I run sa-compile: Illegal octal digit '9' ignored at /usr/local/lib/perl5/site_perl/5.10.1/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm line 1083, <$fh> line 5645. Illegal octal digit '9' ignored at /usr/local/lib/perl5/site_perl/5.10.1/Mail/SpamAssassin/

RE: new PDF "Launch" malware exploit (with sample)

> From: d.h...@yournetplus.com [mailto:d.h...@yournetplus.com] > Sent: Wednesday, April 28, 2010 2:29 PM > To: users@spamassassin.apache.org > Subject: RE: new PDF "Launch" malware exploit (with sample) > > Quoting "Rosenbaum, Larry M." : > > > Ple

RE: new PDF "Launch" malware exploit (with sample)

Please don't send live malware samples to the list. > -Original Message- > From: Chip M. [mailto:sa_c...@iowahoneypot.com] > Sent: Wednesday, April 28, 2010 2:01 PM > To: users@spamassassin.apache.org > Subject: new PDF "Launch" malware exploit (with sample) > > FILE QUARANTINED > > Micr

RE: More freemail URI spam

> Generally speaking, anything deemed worthwhile is added to SA proper > (unless there's a licensing question). The exceptions come from > automated rules (like Sought, MBL, SARE 2tld, and Khop-sc-neighbors), 90_2tld.cf has been replaced by the official rule file 20_aux_tlds.cf. From the commen

RE: 90_sare_freemail.cf.sare.sa-update.dostech.net

> From: Yet Another Ninja [mailto:sa-l...@alexb.ch] > > On 3/4/2010 7:34 PM, Rosenbaum, Larry M. wrote: > > > >> From: Karsten Bräckelmann [mailto:guent...@rudersport.de] > >> > >> On Thu, 2010-03-04 at 00:12 +0100, Yet Another Ninja wrote: > >&g

RE: 90_sare_freemail.cf.sare.sa-update.dostech.net

t Another Ninja wrote: > > On 3/3/2010 10:09 PM, Karsten Bräckelmann wrote: > > > On Wed, 2010-03-03 at 15:38 -0500, Rosenbaum, Larry M. wrote: > > >> Is there still a reason for this update channel? > > >> > > >> 90_sare_freemail.cf.sar

90_sare_freemail.cf.sare.sa-update.dostech.net

Is there still a reason for this update channel? 90_sare_freemail.cf.sare.sa-update.dostech.net Or is it now built in to SA v3.3.0?

Re: UPS Delivery Problems

the -s (max size) > parameter is a good size to catch jpg and virus spam. I use 40. > > - C -- Larry G. Starr - lar...@fullcompass.com or sta...@globaldialog.com Software Engineer: Full Compass Systems LTD. Phone: 608-831-7330 x 1347 FAX: 608-831-6330 ===

90_sare_freemail.cf.sare.sa-update.dostech.net

Is there still a reason for this update channel? 90_sare_freemail.cf.sare.sa-update.dostech.net Or is it now built in to SA v3.3.0?

spamd: respawning server - why?

Yesterday one of our servers started having problems. I found the following messages in the syslog file: Jan 14 14:12:38 localhost spamd[20926]: spamd: respawning server at /usr/local/bin/spamd line 1080. Jan 14 14:12:38 localhost spamd[20927]: spamd: respawning server at /usr/local/bin/spamd

Spamd startup locale question

n LANG=en_US export LANG Thanks, Larry

RE: spamassassin bug

> check: no loaded plugin implements 'check_main': cannot scan! at > /usr/lib/perl5/vendor_perl/5.10.0/Mail/SpamAssassin/PerMsgStatus.pm > line > 164. > >What plugin do I need to have loaded to resolve this error? It looks like you are missing the v320.pre file, which contains loadplugin Mai

RE: About upgrading

> -Original Message- > From: Bill Landry [mailto:b...@inetmsg.com] > Sent: Sunday, January 10, 2010 12:42 PM > To: users@spamassassin.apache.org > Subject: Re: About upgrading > > LuKreme wrote: > > On 9-Jan-2010, at 21:23, Rosenbaum, Larry M. wrote: > >

RE: About upgrading

--Original Message- > From: Alex [mailto:mysqlstud...@gmail.com] > Sent: Saturday, January 09, 2010 9:13 PM > To: SA Mailing list > Subject: Re: About upgrading > > Hi, > > >   sa-learn --dump magic gives: > >       0.000          0          3          0  non-token data: bayes > db version >

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now! (custom sa-update script from howtoforge)

On Tuesday 05 January 2010, Thomas Harold wrote: > On 1/5/2010 1:50 PM, Larry Starr wrote: > > On Tuesday 05 January 2010, Thomas Harold wrote: > >> You mean something more then: > >> > >> "An update was available, and was downloaded and installed success

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

On Tuesday 05 January 2010, Thomas Harold wrote: > On 1/4/2010 1:55 PM, Larry Starr wrote: > > On Monday 04 January 2010, Michael Scheidell wrote: > >> On 1/4/10 1:36 PM, Larry Starr wrote: > >>> On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: > >&g

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

On Monday 04 January 2010, Michael Scheidell wrote: > On 1/4/10 1:36 PM, Larry Starr wrote: > > On Saturday 02 January 2010, Daryl C. W. O'Shea wrote: > > > > My question, short of running with "-D", which is a bit noisy, is there a > > way to get sa-

Re: Apache SpamAssassin Y2K10 Rule Bug - Update Your Rules Now!

ment something myself, but I'd rather not maintain local versions of items that may be updated from the repository. Thank you, -- Larry G. Starr - lar...@fullcompass.com or sta...@globaldialog.com Software Engineer: Full Compass Sy

Solaris 10 requires --syslog-socket=native

I have just recently installed SA v3.3.0-rc1 on Solaris 10. I have discovered that in order for syslog logging to work, I have to start spamd with the switch "--syslog-socket=native". It won't work if I set it to "unix" or "inet" or if I omit the switch entirely. As this is my first time runn

Recommended version of re2c?

What is the recommended version of re2c to use with SpamAssassin v3.3.0? What about with v3.2.5? Thanks, Larry

RE: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

> From: Mark Martinec [mailto:mark.martinec...@ijs.si] > > > Thanks for testing! Which version of a perl module Time::HiRes > > do you have installed? See what is reported by: > > $ perl -MTime::HiRes -le 'print Time::HiRes->VERSION' 1.9719 This is the version that came with Perl 5.10.1, and i

RE: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

/timeout.t ... 25/27 # Failed test 25 in t/timeout.t at line 129 # Failed test 27 in t/timeout.t at line 131 t/timeout.t ... Failed 12/27 subtests Thanks, Larry > -Original Message- > From: Warren Togami [mailto:wtog...@redhat.com] > Sent: Sunday, December 06,

RE: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

> From: Warren Togami [mailto:wtog...@redhat.com] > Subject: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available > ... > - if module Digest::SHA is not available, a module Digest::SHA1 > will be used, but at least one of them must be installed; > a DKIM plugin requires Digest::SHA (the ol

Re: Hostkarma white list

Oops! Sorry, I didn't intend to send my previous message to the list. Nedry On 9/29/09 at 12:51 PM -0500 Larry Nedry wrote: >On 9/29/09 at 7:41 AM -0700 Marc Perkel wrote: >>For those of you getting spam from IPs/Hostnames on my hostkarma white >>list, if you could emai

  1   2   3   4   >