Hi,
Read this http://www200.pair.com/mecham/spam/amavisd-settings.html
And you’ll be set.
Regards,
Leon Kolchinsky
From: Agnello George [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 30, 2007 8:31 AM
To: users@spamassassin.apache.org
Subject
x27;m using
reject_rbl_client zen.spamhaus.org,
reject_rbl_client safe.dnsbl.sorbs.net,
reject_rbl_client list.dsbl.org,
and zen.spamhaus.org filtering about 98% of all rbl rejects.
Regards,
Leon Kolchinsky
99% of the spams have the
> sender name same as recipient name (see original post).
>
As Dave said it seems that your problem in whitelist configuration. Please use
whitelist_from_rcvd instead of whatever you are using.
Leon Kolchinsky
well. It's the rules I'm worried about and
> how
> to make the log/discard work the way I want.)
>
> Thanks in advance for any help you can provide.
>
> Joe
>
Try amavisd-new list.
There you could integrate your SA checks in a very efficient way (policy banks,
quarantining, releasing etc.)
MySQL backend is also a good idea on high load severs.
Regards,
Leon Kolchinsky
> What can I do? The are more plugins like FuzzyOCR?
> Thanks.**
>
Hi,
I'm using SVN version of FuzzyOcr with no problem:
Just get it like this and install:
# svn -r 132 co svn://svn.own-hero.net/fuzzyocr/trunk/devel
Best Regards,
Leon Kolchinsky
L_MESSAGE=0.001,
HTML_MIME_NO_HTML_TAG=0.097, MIME_BASE64_TEXT=1.753,
MIME_HTML_ONLY=1.457, MPART_ALT_DIFF=0.739, SUBJ_ALL_CAPS=0]
Best Regards,
Leon Kolchinsky
> > > The first time I run sa-update after a v3.2.3 install, I get the
> > > following warnings:
> > >
> > > rules: score undef for rule 'MISSING_SUBJECT' in ''
> 'MISSING_SUBJECT'
> > at
> > > ...
> >
> > The score MISSING_SUBJECT is removed from 3.1.x and 3.2.x now.
> > You could check your local
useat.org; it is already included in
> zen.spamhaus.org, so using it creates double the DNS traffic unnecessarily
> and with little or no gain.
>
> Jeff C.
>
Thanks for the explanation :)
Regards,
Leon Kolchinsky
.
So actually BL check already performed on the MTA level.
Is it advisable to comment this line in the init.pre in my case (or there are
another considerations I'm not aware of)?:
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
Best Regards,
Leon Kolchinsky
ocal/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm
> line 2140.
> ...
> (repeated several times)
>
> The update succeeds anyway. What causes these warnings?
>
> Thanks, Larry
The score MISSING_SUBJECT is removed from 3.1.x and 3.2.x now.
You could check your local.cf (or in some .pre file) for this score and remove
it.
Regards,
Leon Kolchinsky
> They no longer hit enough spam to be worth keeping, so they were removed.
> Just remove the scores when you upgrade.
>
> Loren
Thanks,
I've suspected that :)
Leon
res disappeared?
Should I just remove them from my local.cf before upgrade?
Best Regards,
Leon Kolchinsky
lver issue (probably need to configure FreeBSD a little
different than OpenBSD).
Best Regards,
Leon Kolchinsky
> Can I run a perl script using DNSResolver to test things? BTW,
> $CHROOT/etc/resolv.conf is of course present, too.
Stupid question, but $MYHOME = /var/amavis ?
Also you can try to debug it with strace.
Look for all the files you're missing in the jail and copy them into it.
(here is a little example on how to use strace to find requirements outside the
jail - http://olivier.sessink.nl/jailkit/howtos_debug_jails.html )
Best Regards,
Leon Kolchinsky
> Any idea what is missing?
>
Do you have this
/usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/DnsResolver.pm
File in your chrooted environment?
If not, copy it to
$daemon_chroot_dir//usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/DnsResolver.pm
Regards,
Leon Kolchinsky
> fc4, sendmail, sa 3.0.6, spamass-milter
>
> some clients get mail rejected from my server (which they are using to
> send) because sa is checking all mail. I use smtp auth - Is there any
> way to bypass SA if they have been authenticated?
Check this howto: http://www200.pair.com/mecham/spam/b
Hi Mark!
>
> Thank you for your answere.
> I am using SuSE Rpm's so upgrading amavis is not that easy (as I were
> not able to find a repository yet)
>
Not true,
You can use Anders Norrbring's rpms
from ftp://ftp.norrbring.com/pub/linux/inst-source
His rpms (actually I always compiling his src.rpm to get the actual packages)
are very good and I'm using them on my production server.
Regards,
Leon Kolchinsky
>
> I'm running Spamassassin on OpenSuse 10.2 and have just installed
> FuzzyOCR.
>
> It appears to be working in that it scans/detects words in the supplied
> test files.
>
> I noticed "spamassassin --lint" gives:
>
> [25313] warn: FuzzyOcr: Cannot find executable for pamthreshold
> [25313] wa
> -Original Message-
> From: David Baron [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 26, 2007 5:31 PM
> To: users@spamassassin.apache.org
> Subject: Pamditherbw gone, but no pamthreshhold (REPOST)
>
> Got no advice on this so reposting:
>
> Now getting loads of FuzzyOcr failed to ex
> -Original Message-
> From: Raul Dias [mailto:[EMAIL PROTECTED]
> Sent: Thursday, February 15, 2007 7:12 PM
> To: Maciej Friedel
> Cc: users@spamassassin.apache.org
> Subject: Re: [2] How can I configure spamassassin to filter spam jpgs?
>
> On Thu, 2007-02-15 at 11:01 +0100, Maciej Fri
Pamthreshold is in 10.34 and higher versions of netpbm.
Use patches from here http://www200.pair.com/mecham/spam/image_spam2.html
to solve your problem.
Regards,
Leon Kolchinsky
From: Spamassassin List [mailto:[EMAIL PROTECTED]
Sent: Thursday
> -Original Message-
> From: Sebastian Ries [mailto:[EMAIL PROTECTED]
> Sent: Friday, February 02, 2007 9:10 AM
> To: users@spamassassin.apache.org
> Subject: useful SA on Suse 9.0
>
> Hi there
>
> I have an old machine running Suse 9.0 with SA version 2.55 .
>
> For certain reasons I
and mailgraph results are very similar.
Note that "Rejected" count in mailgraph is wrong (comparing to pflogsumm and
logwatch results), but you can get "Recected" count from pflogsumm.
Regards,
Leon Kolchinsky
> _
zzyOcr or is they still not
> available (or does this matter)?
I've installed from source 10.35.21 ver. on my SLES9 and it's working nicely so
far.
If you'd like my step-by-step for suse, I can send it to you.
Regards,
Leon Kolchinsky
I can’t see why this should be the problem with amavisd-new?
You can exclude any domain from SA checks via amavis.
Look for some info here: http://www200.pair.com/mecham/spam/bypassing.html
From: Maxim Cernэ [mailto:[EMAIL PROTECTED]
Sent: Sunday, December 2
> -Original Message-
> From: Thomas Bolioli [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 18, 2006 5:37 PM
> To: users@spamassassin.apache.org
> Subject: roaming users sending mail internally and dynamic IPs issue
>
> Whenever our users travel outside the internal networks and send
> -Original Message-
> From: Chris [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 14, 2006 5:55 AM
> To: users@spamassassin.apache.org
> Subject: Re: MSRBL
>
> On Wednesday 13 December 2006 11:35 am, Bret Miller wrote:
> > Has anyone here tried MSRBL (http://www.msrbl.com/site/)? I
> > >
> > >
> > > Hello All,
> > >
> > > What is the preferred to backup the following bayesiab DB
> > > files? What is the suggested frequency to make backups of the
> > > following DBase's?
> > >
> > If you are using db files, sa-learn will do a backup of the bayes db for
> > you.
> >
> > (for a
> -Original Message-
> From: Michael Scheidell [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, December 12, 2006 1:29 AM
> To: לאון קולצ'ינסקי; users@spamassassin.apache.org
> Subject: RE: backup for bayesian DB
>
>
>
> > -----Original Message-
>
98048 Dec 11 15:50 bayes_seen
-rw--- 1 vscan vscan 5341184 Dec 11 15:50 bayes_toks
-rw-r--r-- 1 vscan vscan 1547 Oct 26 09:24 user_prefs
Leon Kolchinsky
Recently I've added these words to FuzzyOcr.words:
GALROE
VXBX
VOXBOX
TELECOM
maku
arss
PRGJ
May be it's a good idea to keep such updated lists or may be add to FuzzyOcr
the ability to fetch updated lists from the web, but this should go to FuzzyOcr
list, don't you think?
Regards,
Leon Kolchinsky
> -Original Message-
> From: Peter M. Abraham [mailto:[EMAIL PROTECTED]
> Sent: Saturday, December 09, 2006 5:30 PM
> To: users@spamassassin.apache.org
> Subject: Is there a way to tell spam assassin to avoid any processing of
> local emails?
>
>
>
> ___
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 07, 2006 12:36 PM
> To: לאון קולצ'ינסקי
> Cc: users@spamassassin.apache.org
> Subject: Re: how to modify headers so sa-learn gives more accurate
> results?
>
&g
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 06, 2006 7:15 PM
> To: לאון קולצ'ינסקי
> Cc: users@spamassassin.apache.org
> Subject: Re: how to modify headers so sa-learn gives more accurate
> results?
>
>
ap/user/spamcop/spam
cd /var/spool/imap/user/spamcop/spam/
chmod 644 *.
su vscan -c "(sa-learn --showdots --spam *)"
echo spam learning completed!
Best Regards,
Leon Kolchinsky
I think you should read this http://www200.pair.com/mecham/spam/bypassing.html
-Original Message-
From: Anders Norrbring [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 05, 2006 2:19 PM
To: users@spamassassin.apache.org
Subject: Re: Spam from local users.
Shahzad Abid skrev:
> Dear All
Yes,
These kind of e-mails get caught by my FuzzyOcr.
It's all in the scansets configuration and words in the dictionary.
Some other image spam couldn't be read by FuzzyOcr, but this is the best tool
for now, that I'm aware of.
-Original Message-
From: Ray Anderson [mailto:[EMAIL PROTE
;ינסקי; users@spamassassin.apache.org
Subject: RE: RE: How to extract the Reverse DNS hostname by script means?
Hello!
"Leon Kolchinsky" <[EMAIL PROTECTED]> wrote on 19.11.2006 09:28:14:
> Hi Bret,
>
> According to tip from Gary V. you can reliably use whitelist_from_rcvd,
>
>3) The Mail::SpamAssassin Perl API -- This allows the SpamAssassin code to
> be called directly by another Perl program. This is how Amavisd runs.
> It gets a message, calls the SpamAssassin routines, marks up the message,
> and sends it along. It still only loads everything once, but it i
Hi,
Really what are the tools you're using and/or suggesting to generate such
reports?
Regards,
Leon
-Original Message-
From: Quinn Comendant [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 29, 2006 2:41 AM
To: SpamAssassin Users
Subject: Re: Percentage of email that is spam after
, ["CONTSCAN {}\n", "/var/lib/clamav/clamd-socket"],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
-Original Message-
From: Nigel Frankcom [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 29, 2006 10:21 AM
To: users@spamassassin.apache.org
Subj
Hi,
I thought I was wrong and "amavis restart" didn't really helped there, but
there is an update for this problem I had with configuration in local.cf not
catching.
It seems that only when I do /etc/init.d/amavis restart, all configs in
local.cf are coming intact.
I've used to an old version
.
ok_locales all
# Internal
clear_internal_networks
internal_networks 127/8 132.74.1.219 132.74.1.39 132.74.1.218
# Trusted
clear_trusted_networks
trusted_networks 127/8 132.74.1.219 132.74.1.39 132.74.1.218
Best Regards,
Leon Kolchinsky
Hi,
Below is a little info on optimizing MySQL.
I've used it on my web server a while ago.
If you use InnoDB, you should change it according to InnoDB parameters.
Taken from here
http://linuxgangster.org/modules.php?name=Content&file=printout&id=8
Below is a good start for getting mysql going
Hi,
Quoting Gary V here:
"As of SA version 3.1.6, --lint turns off net tests. You now have to feed a
message to debug to get net tests.
spamassassin -D mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 28, 2006 12:02 PM
To: users@spamassassin.apache.org
Subject: Question on Bayes ?
and last que
sed in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales all
# Internal
clear_internal_networks
internal_networks 127/8 132.74.1.219 132.74.1.39 132.74.1.218
# Trusted
clear_trusted_networks
trusted_networks 127/8 132.74.1.219 13
ing English is very
inconvenient in the Arabic right to left. The scroll bar on the left is kind of
handy though. :-)
____
From: Leon Kolchinsky
Sent: Mon 27-Nov-06 16:19
To: users@spamassassin.apache.org
Subject: False positives with RCVD_IN_NJABL_DUL, RCVD_IN_DSBL and
p.net it has many many false positives.
Regards,
Leon Kolchinsky
-Original Message-
From: Quinn Comendant [mailto:[EMAIL PROTECTED]
Sent: Monday, November 27, 2006 11:07 PM
To: SpamAssassin Users
Subject: Re: rbl insight and wisdom please
I'm using the following with qmail'
undary="Boundary-00=_NTPDBHK0"
X-Mailer: IncrediMail (5002253)
From: "Billie Eilam" <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
X-FID: EAF615C8-5C8C-11D4-AF90-0050DAC67E11
X-Priority: 3
To: "Vidergor" <[EMAIL PROTECTED]>
Subject: RE:
Leon Kolchinsky
Hi,
I've moved to a new syntax style of amavisd.conf for 2.4.4 version (modified
sample file) and now all is working.
Restarted amavis and it read the local.cf config now.
Best Regards,
Leon Kolchinsky
-Original Message-
From: Mark Martinec [mailto:[EMAIL PROTECTED]
Sent: S
>>
>> 1. AFAIK it is not necessary to restart amavisd-new, after a change in
>> local.cf it is enough to restart spamd.
>>
>Erm.. are you sure? I thought amavisd-new called SA directly at the API
>layer, not via spamd...
At least this is how it worked on SLES9 with those versions:
amavisd-ne
>
> I've upgraded to:
> amavisd-new-2.4.4-4
> spamassassin-3.1.7-3
> from:
> amavisd-new-20030616p9-3.6
> spamassassin-2.64-3.7
>
> These are optional scores in my local.cf:
>
> ## Optional Score
> score ROUND_THE_WORLD 0
> score SUBJ_ILLEGAL_CHARS 0
> score HEAD_ILLEGAL_CHARS 0
> score FORGED_HO
t;
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: Acb424iUdIWYHggsSheZUsiBH1MRuA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id: <[EMAIL PROTECTED]>
Could it be because I'm still using "old stile" amavisd.conf?
Any help?
Best Regards,
Leon Kolchinsky
s" via
package "MIME::Parser" at /usr/sbin/amavisd line 5933. (in reply to end of DATA
command))
So, meanwhile I got the old SA and amavis back, but I wish I could use the
newest versions.
What may be causing these errors and how to solve this?
Best Regards,
Leon Kolchinsky
rg
Subject: Re: getting mail directly and not via mail-relay
On Mon, 20 Nov 2006, Leon Kolchinsky wrote:
> Hello,
>
> There is a Mail-Relay administered by another person and its MX record stand
> before MX record of my mail server, so theoretically mail should go first
> throug
Hi Bret,
According to tip from Gary V. you can reliably use whitelist_from_rcvd,
You only should configure the following parameters right:
trusted_networks
internal_networks
Best Regards,
Leon Kolchinsky
-Original Message-
From: Bret Miller [mailto:[EMAIL PROTECTED]
Sent: Thursday
Tue, 14 Nov 2006 13:11:52 +0200 (IST)
I'm not really sure what the solution is though. What version of SA are you
running?
Leon Kolchinsky wrote:
> Hello All,
>
> I'm running several virtual domains on
> Cyrus+Postfix+SquirrelMail+Amavisd-new+Spamassassin+ClamAV
ath: [EMAIL PROTECTED]
X-OriginalArrivalTime: 01 Nov 2006 04:27:03.0500 (UTC)
FILETIME=[FB3D50C0:01C6FD6D]
Best Regards,
Leon Kolchinsky
AM
To: users@spamassassin.apache.org
Subject: Re: adjust rules and whitelist_from_rcvd
On Tue, November 14, 2006 14:08, Leon Kolchinsky wrote:
> X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00,
> NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_I
PROTECTED] mydomain.ac.il
Or this?
whitelist_from_rcvd [EMAIL PROTECTED] mail.mydomain.ac.il
-Original Message-----
From: Leon Kolchinsky [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 14, 2006 3:09 PM
To: users@spamassassin.apache.org
Subject: adjust rules and whitelist_from_rcvd
Hello
2) I've tried to add whitelist_from_rcvd to local.cf, but it didn't help:
whitelist_from_rcvd [EMAIL PROTECTED] virtualdomain1.ac.il
Should this line look like this?
whitelist_from_rcvd [EMAIL PROTECTED] mydomain.ac.il
Or this?
whitelist_from_rcvd [EMAIL PROTECTED] mail.mydomain.ac.il
Best Regards,
Leon Kolchinsky
= 4
min_cf = ac
razordiscovery = discovery.spamnet.com
rediscovery_wait = 172800
report_headers = 1
turn_off_discovery = 0
use_engines= 4,8
whitelist = razor-whitelist
###
Best Regards,
Leon Kolchinsky
-Original Message-
Fr
ot-Delivered,
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine
spam-fd4fb4374df425aa3c2de2a2cf49e0d2-20061106-151933-32677-09, Message-ID:
<[EMAIL PROTECTED]>, Hits: 5.4
Best Regards,
Leon Kolchinsky
Hi,
I'm running SLES9.
I've added
add_header all Report _REPORT_
to local.cf file, but I'm still getting those headers without individual scores
:(
Like these:
X-Spam-Status: Yes, hits=11.0 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_50,
FROM_ILLEGAL_CHARS, HTML_60_70, HTML_MESSAGE, MIME_HTML_M
th me :)
Best Regards,
Leon Kolchinsky
-Original Message-
From: Chris Purves [mailto:[EMAIL PROTECTED]
Sent: Friday, November 03, 2006 12:06 AM
To: users@spamassassin.apache.org
Subject: Re: script for reporting ham/spam/resending?
Leon Kolchinsky wrote:
> Thanks Cris,
>
> What a
ML_MESSAGE,
MSGID_FROM_MTA_SHORT, RCVD_IN_NJABL_DUL, RCVD_IN_SORBS_DUL,
RCVD_IN_SORBS_WEB, RCVD_IN_XBL
X-Spam-Level: ***
How should I change the configs (local.cf, amavis.conf, etc.?) so it looks like
in the upper example?
Regards,
Leon Kolchinsky
Leon Kolchinsky wrote:
> Hello All,
>
> I'm running Cyrus as my IMAP server
> (Cyrus+Postfix+Amavis_ClamAV+Spamassassin+Web-Cyradm).
>
> I've wrote a script for reporting spam to Razor DB and teaching with it
> Bayesian DB, revoking false positives from Ra
ller/spam)"
End of the script###
What I'm missing is a proper way of resending false positives (located now in
/ham_folder/).
Should I also add the sender to a whitelist? If yes how?
How should I remove SA headers (how exactly?) and resend ham in the proper way?
Any sample
ller/spam)"
End of the script###
What I'm missing is a proper way of resending false positives (located now in
/ham_folder/).
Should I also add the sender to a whitelist? If yes how?
How should I remove SA headers (how exactly?) and resend ham in the proper way?
Best Regards
Leon Kolchinsky
e original recipients?
Can I use the following syntax on my Cyrus system?:
spamassassin --revoke /ham_folder/*
or
/usr/lib/razor-revoke /ham_folder/*
sa-learn --showdots --ham /ham_folder/*
Regards,
Leon Kolchinsky
at a regular message with empty message body
and one attachment (hebrewnamedfile.doc) is labeled as a spam.
Maybe there is a score on attachment names encodings?
May be there is a good idea to play a little with score FROM_ENDS_IN_NUMS,
ROUND_THE_WORLD etc.?
Best Regards,
Leon Kolchinsky
-
suggest putting
scores in local.cf file and some into user_prefs.
What is the right way to do it?
Best Regards,
Leon Kolchinsky
From: Chris Santerre
[mailto:[EMAIL PROTECTED]
Sent: Thursday, October 26, 2006
3:29 PM
To: לאון קולצ'ינסקי; users@spamassassin.apach
r?
Please Help.
Best Regards,
Leon Kolchinsky
73 matches
Mail list logo
