19.11.2013 20:48, Matus UHLAR - fantomas kirjoitti:
So, which address (domain) are you sending reports to?
On 20.11.13 14:01, Jari Fredriksson wrote:
What? SpamAssassin seems to send them to vmx.spamcop.net
ok, so it is really the vmx.spamcop.net:587 that is blocked? Do they alllow
Matus UHLAR - fantomas skrev den 2013-11-17 20:13:
I believe the point was exactly to avoid any MTA in path.
On 18.11.13 00:34, Benny Pedersen wrote:
why ?
18.11.2013 21:46, Matus UHLAR - fantomas kirjoitti:
to avoid filtering, modification and delaying which often happens on
submission
Matus UHLAR - fantomas skrev den 2013-11-17 20:13:
I believe the point was exactly to avoid any MTA in path.
On 18.11.13 00:34, Benny Pedersen wrote:
why ?
to avoid filtering, modification and delaying which often happens on
submission servers.
if i used spamcop i could make a patch, but i
with them, if you use dns it should
not use your isp
telnet mx.spamcop.net 25
how did you come to the mx.spamcop.net?
My submission address' *@spam.spamcop.net MX points to vmx.spamcop.net that
has port 587 open.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning
On 16.11.13 19:16, Benny Pedersen wrote:
Matus UHLAR - fantomas skrev den 2013-11-12 08:40:
how do you know it does not listen to it?
learned from 0
do you have output of the mail somewhere?
nope
Benny,
I will simply ignore your responsed when you remove important parts
Matus UHLAR - fantomas skrev den 2013-11-17 17:23:
My submission address' *@spam.spamcop.net MX points to
vmx.spamcop.net that
has port 587 open.
On 17.11.13 18:23, Benny Pedersen wrote:
i forgot subdomain testing, since its possible to set recipient addr
in spamcop.pm, but this does
spamassassin is for. You apparently can create a plugin that will scan .ziop
attachments and score them, but that has nothing with rejection.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto
on initial sender domain if you add
maillist ips to trusted_networks, but i admit i self miss this :)
since i use spf testing in mta stage
it's not always easy to convince mail admin to add your favourite hosts to
do-not-scan list...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
,
so should one of them not work ?
how does output of sa-dump --magiv change between those 3 commands?
do you have output of the mail somewhere?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
the trust path was never meant that way, and it's not good
idea recommend it to others, since they may have to deal with issues
resulting of the invalid usade...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address
this.
Trying to figure out the advantage and what I've been missing...
What can a second castrated SA instance do that a first full blown SA can't?
only BAYES check I guess
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
:
address-literal = [ ( IPv4-address-literal /
IPv6-address-literal /
General-address-literal ) ]
Mailbox= Local-part @ ( Domain / address-literal )
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
rather than limiting what a valid address is.
On Wed, 30 Oct 2013 20:13:40 +0100
Matus UHLAR - fantomas wrote:
4.1.2 defines it as part of mail address:
address-literal = [ ( IPv4-address-literal /
IPv6-address-literal /
General-address-literal
are the
source.
Aren't they sending you notifications about spam they got from you?
They don't do it only for spam sent to their spam traps, but even in such
cases they might provide you filtered headers.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
the list, send a message to:
users‑unsubscr...@spamassassin.apache.org
he did send the message. But he forwarded the confirmation message to the
list, instead of where he had to...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
mynetworks
[...]
However, it is a leftover from a bug in postfix a while back, I've
fixed that.
does postfix have tool to generate SpamAssassin configs?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address
of the mta (postfix, amavis, SA, dspam). It
looks like VMW made some IP address changes w/o notifying me. Sigh.
you should apparently also configure internal_networks for all mailservers
that pass you mail, e.g. MX servers.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning
internal *inconsistencies* due to
being largely forged, a message *not* hitting RP_MATCHES_RCVD may
actually be a better spam indicator - that's probably the reason that
it has a negative score.
not hitting is very common by any hosted domains.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
whitelist_bounce_relays for it to work.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Saving Private Ryan...
Private Ryan exists. Overwrite? (Y/N)
written this plugin to spamassassin earlier, but I
cannot find it and will probably need to write it myself otherwise.
you should do this in your MTA
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie
changes (unless your MTA sucks)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The 3 biggets disasters: Hiroshima 45, Tschernobyl 86
On 07.10.13 00:19, Mauricio Tavares wrote:
So I am replacing my MTA... and do not know what to do with the
bayesian DB. Can I move it? If so, how? Ubuntu Linux if it really
matters.
On Monday 07 October 2013 at 10:47:20, Matus UHLAR - fantomas wrote:
Bayes DB has nothing to yo with MTA
clear spam at SMTP time.
just configure it so it can use the correct user names.
Maybe using -e or -x options for spamass-milter?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem
providing displaying rules so the
connecting side may disconnect if it doesn't agree to them.
Otherwise I think those are just declaratory...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto
, Matus UHLAR - fantomas wrote:
I think some law in countries requires providing displaying rules so the
connecting side may disconnect if it doesn't agree to them.
Otherwise I think those are just declaratory...
On 19.09.13 11:04, Antony Stone wrote:
I think I'm confused.
What banners / prompt
.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
He who laughs last thinks slowest.
message. I have also looked at the FAQ at
http://wiki.apache.org/spamassassin and did not find anything
relevant there.
there's no reason why SpamAssassin should care about CFS/LFD (whatever that
is) or CPanel issues. Search further in LFD forums, as that is clearly mail
from LFD...
--
Matus UHLAR
network for last-external
tests to work.
not the ISP but MX servers or your e-mail service provider.
That means, the IPs of machine(s) you directly receive the mail through.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you.
On 15.09.13 08:58, Harry Putnam wrote:
How can I make SA include the 'X-Spam-Report:' header and report for
all messages rather than just the spam messages?
I have `report_safe 0' set but that only causes SA to includes the
Report header for spam msgs.
Matus UHLAR - fantomas uh
scores? Please show us how?
what I've got from SA updates:
score BAYES_50 0 0 2.00.8
score BAYES_99 0 0 3.83.5
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem
Hello. My name is Marcus Loxx.
Hello. My pseudonym is Desmond Fox,
aren't the two above the same person?
(i was lasy to find proper anti-spam-cook imediarely after the OP...)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
the limit is 512000 where I understand the default is 256000.
If that is so, can someone clue me as to where to adjust this? A quick
scan of the usual sources did not satisfy.
man spamc should say it:
-s max_size, --max-size=max_size
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
filtered by SA on those hosts, aren't they?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you
changed trusted and local network IP's and had
a typo in one. lint called me out on it.
what happens then you pipe a mail into spamassassin -D?
What spamassassin --lint produce?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
On 8/20/2013 at 5:00 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote:
On 19.08.13 18:23, Joe Acquisto-j4 wrote:
So, I have this in my /etc/mail/spamassassin/local.cf:
is that the same as /etc/spamassassin/local.cf?
On 20.08.13 08:05, Joe Acquisto-j4 wrote:
Don't have one of those.
/etc
On 19.08.13 19:37, Catalin Constantin wrote:
Is there any setting in spamassassin to make it NOT add the X-Spam headers
for mails which are originating from trusted ips (listed in
trusted_networks) ?
On Tue, 20 Aug 2013, Matus UHLAR - fantomas wrote:
Configure your mailer not to filter
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
the -u option, user nobody is used.
If the option was supposed to process BCC also why wasn't it called
all_spam_to_both_to_and_bcc?
I strongly doubt that any spam software does use Bcc:
Bcc: is for MTAs that need to specify envelope users that do not go to the
headers.
--
Matus UHLAR - fantomas
tweaking RP_MATCHES_RCVD?
I have
score RP_MATCHES_RCVD 0
in /etc/mail/local.cf
there is __RP_MATCHES_RCVD that has to be used in metas. I don't see any
poing in giving positive score to mail just because it's not any kind of
forged...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
Matus UHLAR - fantomas skrev den 2013-08-15 22:33:
score RP_MATCHES_RCVD 0
hard scoreing
there is __RP_MATCHES_RCVD that has to be used in metas. I don't
see any
poing in giving positive score to mail just because it's not any
kind of
forged...
On 15.08.13 22:41, Benny Pedersen wrote
1.775 0 1.725 # n=0 n=2
... and I have quite actual scores:
-rw-r--r-- 1 debian-spamd debian-spamd 44575 Aug 9 02:23 50_scores.cf
just noticing...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
like more effective alternative of FSL_HELO_BARE_IP_1
However they two seem to overlap, so the FSL_HELO_BARE_IP_1 should be
apparently removed.
I wonder how could they give different scores. Maybe there are e-mails that
only hit one of those, I'd like to see them then...
--
Matus UHLAR - fantomas, uh
mail as
spam or ham.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg
On 19.07.13 15:00, Giles Coochey wrote:
Is there a current issue with reporting to spamcop?
devn...@prod-sc-app10.sv4.ironport.com (expanded from
spamassassin-sub...@spam.spamcop.net): unknown user: devnull
you apparently need to configure own spamcop_to_address
--
Matus UHLAR
directly, without forwarding by
anyone?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Depression is merely anger without enthusiasm.
, Matus UHLAR - fantomas
uh...@fantomas.skwrote:
are you getting those mails from gmail directly, without forwarding by
anyone?
On 18.07.13 16:05, Ryan Braganza wrote:
Hi thanks for the reply, these mails 1st come to an MX server and from
there to the spamasasin server.
isn't the server by any
On 18.07.13 16:21, Ryan Braganza wrote:
On Thu, Jul 18, 2013 at 4:17 PM, Matus UHLAR - fantomas
uh...@fantomas.skwrote:
On 18.07.13 16:01, Ryan Braganza wrote:
Why is T_DKIM_INVALID getting triggered for gmail ? I have seen this
happening many times with my servers, the dkim gets passed
getting triggered for gmail ? I have seen this
happening many times with my servers, the dkim gets passed , then why
does
this invalid rule hit? Any inputs? am using SpamAssassin version
3.3.2
On Thu, Jul 18, 2013 at 4:03 PM, Matus UHLAR - fantomas uh...@fantomas.sk
wrote:
are you getting those
spamassassin will be *on*?
if you use amavisd-new, then it's irelevant if spamassassin is on.
you have to reload amavisd, not the spamassassin.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
::Record
at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SPF/Server.pm line 524.
This looks lik Net::DNS ssue, try upgrading that one.
Also, try upgrading perl...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address
contains all spam messages, train it as spam.
You can re-train the same message if you (or autolearn) misclassified it, so
there's no issue about training repeatedly - the message content will be
remembered only once, as you trained it for last time.
--
Matus UHLAR - fantomas, uh...@fantomas.sk
... two rules starting with _ (so they do not
get any score by default) and meta...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Two words
for localy broken (misformatted) mail.
That means, only if you know that mail can't be checked by SA and no matter
what you have learnt it, it will spoil scoring.
otherwise, learn as ham.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
Matus UHLAR - fantomas skrev den 2013-06-22 15:02:
I only recommend to use --forget for localy broken (misformatted)
mail. That means, only if you know that mail can't be checked by SA
and no matter what you have learnt it, it will spoil scoring.
otherwise, learn as ham.
On 22.06.13 15:31
, and you can
manually review the folders before feeding.
Just note about privacy, when checking mail reported as ham
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT
mail.
The rest depends on how the training is done - who goes to spam mailbox (or
mailboxes, if it's not one shared folder) and how are the mails fed to
commands I mentioned above.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
verification as abuse.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Two words: Windows survives. - Craig Mundie, Microsoft senior
, this part cant be
abused of spammers, but there is badly writed milters that dont see
client ips, this might not be mta fault, but mostly is
some do but after milters are checked. That's why e.g. sa-milter must fake
Received: headers when passing the mail to spamassassin.
--
Matus UHLAR
Matus UHLAR - fantomas skrev den 2013-06-04 15:20:
some do but after milters are checked. That's why e.g. sa-milter
must fake
Received: headers when passing the mail to spamassassin.
On 04.06.13 15:35, Benny Pedersen wrote:
basicly yes, but why not test client ip rbl in mta stage ?
what
complaints..
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Eagles may soar, but weasels don't get sucked into jet engines.
On Mon, 3 Jun 2013 14:28:36 +0200
Matus UHLAR - fantomas uh...@fantomas.sk wrote:
you should look at Received: headers to see who passed the mail to
you and complain to abuse@ there. If the mail came from nacha.org, the
ab...@nacha.org is the right place to send complaints..
On 03.06.13 08:52
in the last couple of
months?
I could say so, but that's apparently mostly due to rfc-ignorant.org
deactivation.
Yes, spammers try to avoid those techniques. Do you update your rules on
regular basis?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
messages it is
confident are ham.
I rarely have BAYES_9x FPs and BAYES_0x FNs.
While BAYES is great, I don't consider it to be 100%
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu
exam...@example.co.uk
what happens when you pass arguments -u exam...@example.co.uk to spamc,
instead of -u spamd ?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT
On 29.05.13 12:29, Simon Loewenthal wrote:
The socket seems ok to me:
srw-rw-rw- 1 clamav clamav 0 May 14 21:43 /var/run/clamav/clamd.ctl
what are permissions for /var/run/clamav ?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
, no?
I should have used different wordsL: I ocasionally get spam with BAYES_0x
and ham with BAYES_9x, in which case bayes causes the mail not to be catched
properly. That's why I still don't trust BAYES fot 100% although it usually
gives very good results.
--
Matus UHLAR - fantomas, uh...@fantomas.sk
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux - It's now safe to turn on your computer.
Linux - Teraz mozete pocitac bez obav zapnut.
mail that is not gong to happen. If you train any mail, its previous
training result is forgotten and new one is implemented.
Simply train any mail that misfires the way you want it to be handled.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive
for
internal mail infrastructure, excluding SMTP servers.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Two words: Windows survives
network interface
and use that IP in milter config.
Otherwise just keep the Received: parsing on SA.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu
, it's not compliant. if it's visibly
ignored, trashed, dropped, it violates the RFC
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError
in rfc-ignorant conference).
We can't confirm compliancy, but in some clear situations we can confirm
uncompliancy.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT
and copying it back to server
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux is like a teepee: no Windows, no Gates and an apache inside...
On 28.04.13 10:31, Rick Cone wrote:
I have spamassassin available for use in a POP environment with Outlook
2010. We don't use IMAP. How would someone recommend getting the SPAM and
HAM information to sa-learn?
start using IMAP...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
On 28.04.13 10:31, Rick Cone wrote:
I have spamassassin available for use in a POP environment with Outlook
2010. We don't use IMAP. How would someone recommend getting the SPAM and
HAM information to sa-learn?
On 29.04.13 09:10, Matus UHLAR - fantomas wrote:
start using IMAP...
Well
rule to trap it.
What if it's a semi-legit newsletter thatuserhas not subscribed into?
I have seen receiving this kind of e-mails from some world saviours
repeatedly to many addressess that did not subscribe...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
product.
now I can only recommend you to migrateonto newer solution, supported and
with good spam filter :-)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek
since? Did you clear the bad BAYES database?
Look at it again, folder and file permissions, and --dump magic if it
contains enough ham and spam.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
?
sa-learn --dump magic, of course.
You need at least 200 hams and 200 spams for BAYES to start firing.
At the begin, you can train ANY mail. Later, it's easier just to correct
mail with misfired score (ham not BAYES_00 and spam not BAYES_99)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
-time RBLs, because
of possible false positives.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty
.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I don't have lysdexia. The Dog wouldn't allow that.
possibility for processing the same spam mail to different
recipients in parallel. It could also be problem of case sensitiveness.
Would need to take look into the database...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
On Thu, Apr 25, 2013 at 1:47 PM, Matus UHLAR - fantomas
uh...@fantomas.skwrote:
I don't think so... IIRC the REPLACE INTO deletes existing record and
inserts new one, does not update existing. This caused some issues for me
some ~10 years ago, so i switched to the update or insert.
On 25.04.13
to do so, maybe?
Does anyone do that? Is it smart?
depends on how you train spamassassin. the spamassassin -r reports
automatically wherever possible. sa-learn only trains bayes.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
also use score 10 as rejecting threshold.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Depression is merely anger without enthusiasm.
anything...).
Looks like I gotta learn to Samba.
This has nothing to do with samba.
I suppose I should clear bayes and start over, then?
apparently yes. But if yopu have stored messages that were feed into BAYES,
you can extract older attachments, would help at the begin.
--
Matus UHLAR
non-token data: nspam
0.000 0 54729 0 non-token data: nham
and it still catches most of spam...
Note that false negatives (non-catched spam) are still better than false
positives (catched non-spam).
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk
:-)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you.
On 4/18/2013 at 7:21 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote:
Train your bayes database, if you get many spams with this small score.
On 18.04.13 21:45, Joe Acquisto-j4 wrote:
All I can do is feed it.
that is what you should do. You need to train on both spam and ham, since
magic produce?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
(R)etry, (A)bort, (C)ancer
On 4/19/2013 at 6:29 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote:
that is what you should do. You need to train on both spam and ham, since
the BAYES filter must know how they differ...
On 19.04.13 07:02, Joe Acquisto-j4 wrote:
That has always given me pause, as I get very little ham
that database you have trained is not used (and this
would explain your problem).
The question is how is SA called and how do people train the database...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
with BAYES_50 score.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!
was
repeatedly leaking thanks to it.
I agree that with such check belonging to e-mail, but no direct negative
score should be applied here. there's __RP_MATCHES_RCVD meta available.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
(trusted_networks and internal_networks) that affect which
Received: lines are parsed and which are checked for blacklists/whitelists.
If you find bad headers parsed, you apparently have not configured them or
misconfigured them.
http://wiki.apache.org/spamassassin/TrustPath
--
Matus UHLAR - fantomas, uh
in dynamic blacklist. Note that if remote mailserver accepts
mail from machine used by spammers, SA can detect it being in different
blacklist and still apply other blacklists other than DUL there.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e
the wrong rules.
On 12.04.13 13:19, Frank Reppin wrote:
given this example - you're probably looking for the
notfirsthop
or
lastexternal
features from Mail::SpamAssassin::Conf(3).
he's complaining about the SA standard ulez, changing them is not wanted
there.
--
Matus UHLAR - fantomas, uh
that would work.
The problem lies elsewhere, seems that either the remote mail server is in
internal_networks or the local mail server does not accReceived: lines when
SA parses the mail.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
the wrong rules.
Is there any way to tell SA check only the last Received line (before
entering the local network) ?
On 12.04.13 11:38, Matus UHLAR - fantomas wrote:
your mail server should add another Received: line and SA should use that
one for check in dynamic blacklist. Note that if remote
1201 - 1300 of 2486 matches
Mail list logo
