che.org/spamassassin/CustomRulesets
WWW: http://spamassassin.apache.org/
ler in thebighonker in ~ via ☕ v1.8.0 via v5.32.1 via v3.0.4
Ideas?
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106
.
IIRC, that's a Exim SA variable, and that probably means a score of
-3.8.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106
don't see
anything on the github page, but maybe it's documented elsewhere?
Hello,
you won't need to remove anything, it should just work (TM)
will spamhaus-dqs be updated with this? or should I change FreeBSD to
pull this branch?
--
Larry Rosenman http://www.lerctr.org/~ler
On 02/14/2020 3:56 am, Henrik K wrote:
On Thu, Feb 13, 2020 at 08:53:30AM -0600, Larry Rosenman wrote:
Greetings,
I upgraded to SpamAssassin 3.4.4 last night, and ever since, I'm
seeing a
ton of:
<22>1 2020-02-13T08:51:17.00-06:00 thebighonker.lerctr.org spamd
26116 -
op.net,
ignored, packet on next debug line
<22>1 2020-02-13T08:51:17.00-06:00 thebighonker.lerctr.org spamd
26116 - - dns: no likely matching queries for id 62451
What do I need to do to figure out why thes are now failing. It seems
to happen for EVERY lookup.
--
La
On 08/20/2019 7:05 am, Henrik K wrote:
Install Geo::IP or wait for 3.4.3.
When is 3.4.3 due? FreeBSD ports no longer contains Geo::IP.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 5708 Sabbia Dr
5] info: rules: meta test KAM_JURY has
dependency 'KAM_RAPTOR_ALTERED' with a zero score
sa-compile: not compiling; 'spamassassin --lint' check failed!
Can someone look at it?
Thanks!
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l
ne 135.
<20>1 2019-07-03T10:59:51.00-05:00 thebighonker.lerctr.org spamd
80260 - - Use of uninitialized value $_ in pattern match (m//) at
/usr/local/etc/mail/spamassassin/SH.pm line 139.
Is this a bug in my setup or a bug in the plugin?
--
Larry Rosenman http://www.lerctr.org/~
install perl-List-MoreUtils
portmaster lang/p5-List-MoreUtils
or
pkg install p5-List-MoreUtils
Thanks, this is for FreeBSD right?
If that's the case I'll update the documentation
yes it is.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640
aintained.
(My opinion FWIW)
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106
er6.o
scanner7.o scanner8.o scanner9.o -o
blib/arch/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
chmod 755 blib/arch/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
Manifying 1 pod document
make install
"/usr/local/bin/perl5.24.3" -MExtUtils::Command::MM -e 'cp_nonempty' --
;;
20 | 02 | 22 ) echo "ISSUES WITH DIFF -- CHECK IT";;
esac
cd /
rm -rf /tmp/KAM
exit 0
thebighonker.lerctr.org /home/ler $
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail
1799552, skipping
> channel
>
> Is this really still the most current? If not what do I need to do to get
> my system to get the latest?
>
> Thanks,
> Shane
There is an Infrastructure issue with the rules update. See the archives.
That is the most current.
--
Larry Rosenman
your server and it's a remote POP or
> IMAP, collect the spam via fetchmail or something to get it into a local
> folder then use mutt to send it as an attachment.
>
> --
> David Jones
You might also be able to set up something using imapsieve to do the same thing
as the mail get
occasionally.
SpamAssassin:
spamassassin-3.4.1_10 Highly efficient mail filter for identifying spam
From FreeBSD ports.
Ideas?
What can I supply to help?
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
it. But it seems to require the milter interface in the MTA
(ie. sendmail or _maybe_ postfix), and I'm married to Exim. :-(
I have RBLs, ClamAV and SpamAssassin working quite well with Exim on my
FreeBSD mail server,
FWIW.
I'm willing to share config if anyone's interested.
--
Larry Rosenman
don't understand why they do it like this.
what's the point behind changing IP address after each delivery
attempt?
Shared outbound spool, and the next available host sends it.
It's not nefarious, just load balancing.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-64
. It's Unix/Unix-like.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281
)
spam = smmsp:true
warn message = X-LERCTR-Spam-Score: $spam_score ($spam_bar)
spam = smmsp:true
warn message = X-Spam-Report: $spam_report
spam = smmsp:true
warn message = X-LERCTR-Spam-Report: $spam_report
spam = smmsp:true
--
Larry Rosenman
is experimental at
/usr/local/lib/perl5/site_perl/Mail/SpamAssassin/Plugin/URILocalBL.pm
line 406.
this is after I upgraded my PERL to 5.20.
(SA 3.4.1 on FreeBSD 10.2-STABLE from Ports)
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l
Regards,
KAM
On 6/5/2015 4:21 PM, Larry Rosenman wrote:
Can anyone help me silence this?
these are from:
thebighonker.lerctr.org /home/ler/bin $ cat update-bayes.sh
#!/bin/sh
PATH=$PATH:/usr/local/bin
export PATH
sa-learn --spam --mbox /home/ler/mail/SA/FN
sa-learn --spam
, no key at
/usr/local/lib/perl5/site_perl/Mail/SpamAssassin/AsyncLoop.pm line 180.
Learned tokens from 0 message(s) (122 message(s) examined)
Learned tokens from 0 message(s) (21 message(s) examined)
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640
I guess my question is why is it being called during sa-learn.
On 2015-06-05 16:48, Kevin A. McGrail wrote:
On 6/5/2015 5:33 PM, Larry Rosenman wrote:
This appears to be from the EnemiesList.PM pliugin being invoked during
sa-learn.
I'm not quite sure why the EnemiesList.PM
On 2015-06-05 18:04, RW wrote:
On Fri, 05 Jun 2015 18:11:48 -0400
Bill Cole wrote:
On 5 Jun 2015, at 17:53, Larry Rosenman wrote:
I guess my question is why is it being called during sa-learn.
You have yet to demonstrate that to be occurring.
SA has a misfeature of attempting to de
that validate e-mail addresses think the +
sign is a URL encoded SPACE and REJECT it. :(
RFC's be damned.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 108 Turvey Cove, Hutto, TX 78634-5688
On 2015-05-10 15:11, Sergio wrote:
Hi, where is the best place to download the lastest KAM rules?
Thanks in advance.
Sergio
http://www.peregrinehw.com/downloads/SpamAssassin/contrib/KAM.cf
--
Larry Rosenman http://www.lerctr.org/~ler [1]
Phone: +1 214-642-9640 E-Mail: l
On 2015-05-02 15:40, John Hardin wrote:
On Fri, 1 May 2015, RW wrote:
On Fri, 01 May 2015 09:55:31 -0500
Larry Rosenman wrote:
X-Spam-Report: SpamScore (3.8/5.0) BAYES_99=3.5,BAYES_999=0.2
Consider increasing the score of BAYES_99 above 5. For me BAYES_99
has
an FP rate that's
On 2015-05-01 10:08, Kevin A. McGrail wrote:
On 5/1/2015 11:06 AM, Joe Quinn wrote:
On 5/1/2015 10:55 AM, Larry Rosenman wrote:
http://pastebin.com/4gck7uLD
This one and one's like it seem to get through multiple times/day.
Any help here? Today's is WITH 3.4.1..
That's a variant
http://pastebin.com/4gck7uLD
This one and one's like it seem to get through multiple times/day.
Any help here? Today's is WITH 3.4.1..
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 108 Turvey Cove
://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Util/RegistrarBoundaries.pm?view=log
I believe this works with at least 3.4.0 or is it only 3.4.1?
I'm using it successfully with 3.4.0. I believe that this is being
heavily modified for 3.4.1 to be in
a .cf file.
--
Larry
/local/lib/perl5/site_perl/Mail/SpamAssassin/Util/RegistrarBoundaries.pm
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail: l...@lerctr.org
US Mail: 108 Turvey Cove, Hutto, TX 78634-5688
On 2015-04-01 19:23, Kevin A. McGrail wrote:
On 4/1/2015 8:21 PM, Larry Rosenman wrote:
Is there an ETA for 3.4.1? And, is there anything else I can do mean
time?
3.4.1 is planned to announce for release during ApacheCon in about 2
weeks.
1 - Make sure you are using the new Registrar
On 2015-04-01 19:23, Kevin A. McGrail wrote:
On 4/1/2015 8:21 PM, Larry Rosenman wrote:
Is there an ETA for 3.4.1? And, is there anything else I can do mean
time?
3.4.1 is planned to announce for release during ApacheCon in about 2
weeks.
1 - Make sure you are using the new Registrar
I've been getting pounded with stuff from new tld's (cricket, science,
work, et al).
I'm wondering how to make SA more immune to it.
Spamples: http://pastebin.com/jc3efYju
Thanks!
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 E-Mail
On 2015-04-01 19:20, Kevin A. McGrail wrote:
On 4/1/2015 8:18 PM, Larry Rosenman wrote:
On 2015-04-01 19:15, Kevin A. McGrail wrote:
On 4/1/2015 8:13 PM, Larry Rosenman wrote:
I've been getting pounded with stuff from new tld's (cricket,
science, work, et al).
I'm wondering how to make SA
On 2015-04-01 19:15, Kevin A. McGrail wrote:
On 4/1/2015 8:13 PM, Larry Rosenman wrote:
I've been getting pounded with stuff from new tld's (cricket,
science, work, et al).
I'm wondering how to make SA more immune to it.
Spamples: http://pastebin.com/jc3efYju Are you using a recent SA from
On 2014-01-15 07:41, RW wrote:
On Tue, 14 Jan 2014 16:30:02 -0600
Larry Rosenman wrote:
I just had 3 messages that are HAM that hit TVD_PH_BODY_META=3.625
and got marked as SPAM.
It seems that
Funds could take up to two business days to post to your account.
is hitting:
body
is too complicated for me to
understand atm) too aggressive for this case?
Thanks!
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c) E-Mail: l...@lerctr.org
US Mail: 108 Turvey Cove, Hutto, TX 78634-5688
On 2014-01-14 16:30, Larry Rosenman wrote:
I just had 3 messages that are HAM that hit TVD_PH_BODY_META=3.625 and
got marked as SPAM.
The text contents are: [quote]
This message confirms your deposit of $70.94 has been approved and
processed. Funds could take up to two business days to post
On 2014-01-14 17:07, Benny Pedersen wrote:
Larry Rosenman skrev den 2014-01-14 23:33:
Whoops, wrong headers
is it possible to learn it as ham with bayes ?, bayes 50 is more or
less neotral score for unsure content, help learning it as ham will
solve it to go under 5
Already done
}{yes}{no}}
- --
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: l...@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http
Yes, there is a PR in the queue.
The FreeBSD ports tree is currently frozen for the Xorg 7.2 import.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683E-Mail: [EMAIL PROTECTED]
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
(8.13.8/8.13.6/mr1) with SMTP id
l07IDGSl038034
for ler@lerctr.org; Sun, 7 Jan 2007 10:13:27 -0800 (PST)
Message-Id: [EMAIL PROTECTED]
Precedence: bulk
Auto-Submitted: auto-replied
Date: Sun, 07 Jan 2007 10:13:26 -0800
To: Larry Rosenman ler@lerctr.org
Subject: A message from Yahoo! Customer
Is there some process that needs to be automated to ship out the 3.1
branch rules changes via sa-update?
I know I've seen commits to branches/3.1, but no sa-update since 12/19
Just asking...
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683
-Spam-Flag: YES
DomainKey-Status: no signature
And the rule that marked this as SPAM is the RCVD_HELO_IP_MISMATCH.
Why is this rule so high?
What exactly is it checking?
This is from a legit mailing list.
Thanks,
Larry Rosenman
--
Larry Rosenman http
aubreyl wrote:
Larry Rosenman wrote:
Greetings,
I had the following headers:
[snip]
This checks what the server initiating the SMTP connection to your
server says it is, and what it's domain name resolves to.
Let's say that fakedomain.com resolves to 45.45.45.45
drop the
connection.
Just one other solution to this issue.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
)
BAYES_00=-2.599 DK_POLICY_SIGNSOME=0.001 SPF_PASS=-0.001
UPPERCASE_25_50=0 USER_IN_WHITELIST=-100 USER_IN_WHITELIST_TO=-6
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX
88_fvgt_rawbody.cf.sare.sa-update.dostech.net
88_fvgt_subject.cf.sare.sa-update.dostech.net
88_fvgt_headers.cf.sare.sa-update.dostech.net
88_fvgt_uri.cf.sare.sa-update.dostech.net
(Along with a bunch of others).
VERY effective set that I have now.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone
.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
]: prefork: child states: BI
Ideas?
It caused spamd to die :(
Thanks.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
I've placed a comment in 4594.
Thanks for the pointer, Daryl!
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
Is there a problem with 3.1.5 (FreeBSD port) and sa-learn --mbx?
I get the following:
/usr/local/bin/sa-learn --spam --mbx --showdots /home/ler/Mail/SA/FN
archive-iterator: unable to open /home/ler/Mail/SA/FN./home/ler/Mail/SA/FN:
No such file or directory
archive-iterator: unable to open
I hadn't needed to in previous releases, and MBOX format seems(!) to
work
I'll re-verify.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
-Original
/.spamassassin1378GH7mLltmp./tmp/.spamassassin1378GH7mLltmp: No such
file or directory
Learned tokens from 0 message(s) (0 message(s) examined)
$
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681
It's a file.
Where's the BZ, and I'll create a bug. It did seem to break when I put
3.1.5 on.
(This is in a nightly update script, that's been running for months).
I'll attach the MBX to the BZ ticket.
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248
I found the BZ.
Bug 5101
Thanks...
PS: I'm willing to test patch(es).
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
-Original Message-
From: Larry
will log the port the CLIENT
used.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
Sandy S wrote:
- Original Message -
From: Larry Rosenman ler@lerctr.org
To: 'Sandy S' [EMAIL PROTECTED]; users@spamassassin.apache.org
Sent: Wednesday, March 08, 2006 10:13 AM
Subject: RE: All image spam
Sandy S wrote:
We're also being bombarded with these and I noticed
are basically 0.
FORGED_YAHOO_RCVD is 1.8, but if the card was sent to you from a
yahoo.com address, it was technically forged since all yahoo.com
mails should come from a Yahoo server.
fyi.
TW_?? is TripWire.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512
1.28 of rules_du_jour?
It's the version that added SARE_STOCKS.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893
I have run into an issue, that I think is SA's.
If I have Mail::DomainKeys 0.80 installed, SA's DomainKeys plugin can't find
Method 'header'.
Is this known?
Is a fix/patch available?
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683
seem to make bind9 do the forward
correctly.
Rbldnsd is in FreeBSD ports (although it seems to be a release or 2 down,
I'll probably submit
An update soon).
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E-Mail: ler@lerctr.org
US
and the BIND.
I did that, and bind didn't seem(!) to be forwarding the requests, so I just
gave it a different IP address, and told
Bind to leave that IP alone.
Not a biggie, and it's happily responding.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683
configured Outlook to use Word as the email editor? If so
that might explain the AutoCorrect you are experiencing.
Nope, even without word as the editor, it still does it :(
(from painful experience).
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683
The current one from SARE works fine :)
And, the latest RDJ has support for all the SARE rules.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 3535 Gaspar Drive, Dallas, TX 75220-3611 US
Another one you might want to add to that list:
Crypt::OpenSSL::Bignum
The pre-req chain for Mail::DomainKeys doesn't req it, but apparently SA
3.1.0pre1 does.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
Theo Van Dinter wrote:
On Sun, Jun 19, 2005 at 04:02:11PM -0400, Larry Rosenman wrote:
It showed up when I enabled Mail::DomainKeys, so it may be that In
the way SA is using it, FWIW.
Doing some digging, DK uses Crypt::OpenSSL::RSA, which has in it:
BEGIN { eval { require Crypt::OpenSSL
Theo Van Dinter wrote:
On Sun, Jun 19, 2005 at 04:02:11PM -0400, Larry Rosenman wrote:
It showed up when I enabled Mail::DomainKeys, so it may be that In
the way SA is using it, FWIW.
Doing some digging, DK uses Crypt::OpenSSL::RSA, which has in it:
BEGIN { eval { require Crypt::OpenSSL
at $Previous_Employer. They don't give details on what hit.
LER
Sincerely,
NB
__
Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos
mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/
--
Larry
SPAMD is running as, and the permissions for
/var/db/spamassassin.
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
the spam check.
See !hosts=
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
72 matches
Mail list logo
