RE: Spamassassin doesn't seem to obey my whitelist

Richard the whitelist_from you are specifying as [EMAIL PROTECTED] but if you look at the headers below, the email comes from : Received: from unknown (HELO n18c.bullet.sp1.yahoo.com) (69.147.64.129) You could try putting that in your whitelist_from although whitelisting yahoo.com might not be a

RE: Checking for PTR record

I use this header rule for the same thing: header LOCAL_INVALID_PTR2 Received =~ /from \S+ \(unknown / score LOCAL_INVALID_PTR2 0.8 describe LOCAL_INVALID_PTR2 Header contains no PTR2 Robert Peace he would say instead of goodbyepeace my brother. -Original

RE: Spamassassin Odd Problem

After the upgrade did you stop and start the SpamAssassin services? Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: ToTheCenter.com [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 26, 2006 12:52 PM To: mailto:@herse.apache.org

RE: I got a lottery spam from this list id

Me too, lol. Here is the header Robert Microsoft Mail Internet Headers Version 2.0 Received: from boylston.nskinc.com ([x.x.x.x]) by mail.nskinc.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 15 Dec 2006 06:53:19 -0500 Received: from spam1.nskinc.com ([x.x.x.x]) by

RE: Good source for IP addresses by country

block everything if your DNS fails. :-) Right. Even spamming back the last received spam to, say, 10 foreign mailboxes randomly taken from the ones uselessly attempting to connect could be fine. ;-) g Ken A Pacific.Net giampaolo Ken A. Pacific.Net Robert Swan wrote

RE: Good source for IP addresses by country

Let's say I wanted to score everything but the US. Do I have to write rule for every country or is there an easier way? Robert header RCVD_IN_NERDSeval:check_rbl('nerds','zz.countries.nerd.dk.') describe RCVD_IN_NERDS Received from a spam country tflags RCVD_IN_NERDSnet header

RE: Bayes doesn't seem to be working for me

Might want to check your local.cf file for: It is located in/etc/mail/spamassassin # Enable the Bayes system use_bayes 1 Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

whitelist etc..

Is it possible to whitelist_from or blacklist_from an IP address? Instead of a domain name or e-mail address. Thanks in advance, Robert Peace he would say instead of goodbyepeace my brother.

SPAM Question

Q1. How does this e-mail end up in my mailbox, if the To: is someone else (I am not [EMAIL PROTECTED]), and how can I identify this with a SPAM rule: Q2. Is there a custom rule that triggers if someone sends from an .ar domain server or some other foreign country server , we don't get e-mail

RE: SPAM Question

Ok so is there a rule that can identify when the 2 do not match? Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: Coffey, Neal [mailto:[EMAIL PROTECTED] Sent: Monday, December 04, 2006 12:55 PM To: users@spamassassin.apache.org

RE: SPAM Question

peace my brother. -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Monday, December 04, 2006 1:42 PM To: users@spamassassin.apache.org Subject: Re: SPAM Question On Mon, Dec 04, 2006 at 01:40:38PM -0500, Robert Swan wrote: Ok so is there a rule that can identify

RE: whitelist_from and whitelist_from_rcvd not working

I had a similar problem with SA not reading a specific .cf file. I basically created a new greylist.cf file and copied the test over and it worked, and of coarse make sure it is in the right folder... Might be worth a try Robert Peace he would say instead of goodbyepeace my

RE: No hit on this..

Ya for some reason Spamassassin didn't even look at it. Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: James Lay [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 07, 2006 8:59 AM To: Anders Norrbring Cc:

RE: Scoring PTR's

This is exactly what I was looking for.although I did enjoy the flame war Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: Eric A. Hall [mailto:[EMAIL PROTECTED] Sent: Friday, October 20, 2006 1:07 AM To: Robert Swan Cc

Scoring PTR's

*[213.39.204.131]) Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: Richard Frovarp [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 18, 2006 7:02 PM To: users@spamassassin.apache.org Subject: Re: Scoring PTR's Robert Swan wrote

RE: Scoring PTR's

Robert Peace he would say instead of goodbyepeace my brother. From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Thursday, October 19, 2006 9:25 AM To: Robert Swan; SpamAssassin Users Subject: RE: Scoring PTR's -Original Message- From

RE: Scoring PTR's

Guys, if my mail server announces itself as mail.somename.com and has a PTR that matches. I can send mail out as [EMAIL PROTECTED] or [EMAIL PROTECTED] as long as the MX record for the domain anothername.com reads as mail.somename.com The original questions was how do I write a header rule

eval:

Can anyone elaborate on this rule is it s plugin and how does it work? FORGED_RCVD_HELO eval:check_for_forged_received_helo Thanks in advance Robert Peace he would say instead of goodbyepeace my brother.

Scoring PTR's

OK the rule to block an unknown or a mail server without a PTR works great: header LOCAL_INVALID_PTR2 Received =~ /from \S+ \(unknown / score LOCAL_INVALID_PTR2 2 describe LOCAL_INVALID_PTR2 Header contains no PTR2 Now how can I make a rule to score if the PTR is different than

Is there any way to score this?

Is there anyway to get points added if the sending mail server has no PTR record (unknown [196.211.162.65])? I am using Redhat Fedora and Spamassassin 3.1.2 and Postfix X-Spam-Checker-Version: SpamAssassin 3.1.2 (2006-05-25) on SPAM1 X-Spam-Level: ** X-Spam-Status: No, score=3.0

RE: Ideas

We setup regular mail server for companies (mostly exchange servers). Once we setup the mail server I want to send an e-mail from that new mail server to [EMAIL PROTECTED] I want that email run through all the SpamAssasin tests, then get sent back to the sender with all the rules that were

Ideas

Hi everyone, I am trying to setup a SPAM server to process incoming email and then send it back to the original sender. I have setup Spamassassin and Postfix (latest version), and they are working great. I am trying to figure out how to get Postfix to automatically send the processed

RE: Ideas

I am trying to setup a SPAM server to test e-mail servers, whether they are setup correctly or not..we do mail server setups on a pretty large scale and am looking to test the servers once they are built and installed. Robert Peace he would say instead of

RE: Ideas

PROTECTED] Sent: Tuesday, October 10, 2006 4:18 PM To: Robert Swan; SpamAssassin Users Subject: RE: Ideas Wait...what? You want to setup a server that sends spam? Why not just make an email address, stick it on the usenet and post to a few sites, have it get normal

Razor removal

Message-Id has pattern used in spam 1.9 RATWARE_MS_HASH Bulk email fingerprint (msgid ms hash) found Thanks in advance, Robert Swan

RE: Razor removal

: Bowie Bailey [mailto:[EMAIL PROTECTED] Sent: Monday, October 02, 2006 1:19 PM To: SpamAssassin Users Subject: RE: Razor removal Robert Swan wrote: I have a legitimate client that I receive e-mail from and they are listed by Razor (sourceforge.net), among other things. Does any know how to get

spamassassin --lint error

All, I am stumped with a lint error I am getting below, everything is running ok but when I run lint I get this error, anybody know what the problem might be? I have pasted the debul log entries that are close to it. I am running SpamAssassin version 3.1.1 running on Perl version 5.8.6

SPAMD error question

I am getting the following in my Maillog and wondered if anyone knew how to rectify, I am using Redhat9, Spamassassin 3.1.0 and postfix: Jan 18 14:09:01 spamma spamd[16397]: prefork: server reached --max-clients setting, consider raising it Thanks in advance, Robert

postfix errors

Had a problem earlier when postfix stopped working and I had a backup of e-mail in my active queue, here are some errors from the log. Anyone seen this before or know why it might have happened I reloaded postfix and it fixed it but not sure of the cause.Jan 18 14:07:05 spamma

SPAMD proccesses

I am wondering how many is the maximum SPAMD proccesses that occur in 3.1 and how you can change this number. I am running redhat 9 with postfix and SPAMC/SPAMD. Thanks Robert Peace he would say instead of goodbyepeace my brother.

Spamassassin speed

I am running the new spamassassin 3.10 and it seems a bit slower that the previous version 3.06. Although it IS doing a better job at identifying SPAM it takes an e-mail longer to be processed that before or there are not as many processes. My first thought is that the previous version

FW: using LearnAsSpam IMAP folder

I learn from an exchange IMAP public folder and use the following line: fetchmail -a -v -n -K --folder Public Folders/Spam -m 'sa-learn --spam' -Original Message- From: Pollywog [mailto:[EMAIL PROTECTED] Sent: Sunday, December 04, 2005 3:17 PM To: users@spamassassin.apache.org

spamd proccesses

Hello all I have a quick question. I have recently upgraded to spamassassin v3.1.0 from 3.0.6 and prior to the upgrade I had maybe 5 spamd proccesses running and now there is only 3, 2 running under the user filter and one runnign under the user root , also it takes about 30 minutes to

Blacklist rule

-- -- 100 USER_IN_BLACKLIST From: address is in the user's black-list -1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.] Robert Swan Vice President NSK Associates Boston, MA

subject rewrite

Hello all, I am wondering if anyone knows how to get the score of the SPAM in the subject line with the rewrite. Right now I rewrite the subject line with [SPAM] at the beginning but it would be helpful to see the score in the same place. Also I attach the original e-mail and I use

Bayes question

I have a pair of Spamassassin servers filtering e-mail (Spamassassin 3.0.4, spamd/spamc, Postfix, redhat 9) I was wondering if I could share the bayes database between the two server rather than having each with its own and having to do the salearn process twice. Any Thoughts?

RE: Postfix problem

Fixed my own problem with postsuper r ALL thanks for listening Robert Peace he would say instead of goodbyepeace my brother. From: Robert Swan Sent: Sunday, July 24, 2005 6:10 PM To: users@spamassassin.apache.org Subject: Postfix problem

e-mail size limits

I have recently taken over administration of a Spamassassin server that is running RedHat 9, and Spamassassin 3.04, spamd, spamc, postfix. When users from the outside try and send us e-mail larger than 10MB they get a bounce back: Administrator@thierdomain.com on 6/30/2005 11:43 AM

RE: e-mail size limits

my brother. From: Robert Swan Sent: Thursday, June 30, 2005 12:04 PM To: users@spamassassin.apache.org Subject: e-mail size limits I have recently taken over administration of a Spamassassin server that is running RedHat 9, and Spamassassin 3.04, spamd, spamc, postfix. When users

e-mail size limits

Does anyone know if Spamassassin limits the size of e-mails passing through it? For some reason I though it was limited to 8MB e-mails.. I am running RedHat and Spamassassin 3.04 spamd, spamc, postfix. Robert Peace he would say instead of goodbyepeace my brother.

Bayes learning error

I am getting an error when I run manual learning sa-learn ham . Has anyone seen this before or have a clue how to fix it debug: bayes: DB_File module not installed, cannot use Bayes I am using Redhat, spamassassin 3.03 spamd,spamc, postfix thanks Robert Swan

meta spamassassin error

I was running spamassassin lint on some new rules I had created and noticed an error but dont know where to look. I have pasted it below does anyone know which file this error might be in? Failed to run meta SpamAssassin tests, skipping some: syntax error at (eval 65) line 440, near +

meta spamassassin error

I was running spamassassin lint on some new rules I had created and noticed an error but dont know where to look. I have pasted it below does anyone know which file this error might be in? Failed to run meta SpamAssassin tests, skipping some: syntax error at (eval 65) line 440, near +

rule edit

I am having trouble with a custom rule and wondered if anyone know why this didnt work. I have pasted an error from sa-learn and also the rule below. I am running Redhat 9 and Spamassassin 3.0.3 invalid regexp for rule VIRUS_SOBER5: /*** Attachment-Scanner: Status OK/i body

RE: rule edit

Thanks all Robert Peace he would say instead of goodbyepeace my brother. From: Robert Swan Sent: Thursday, May 12, 2005 9:00 AM To: spamassassin-users@incubator.apache.org Subject: rule edit I am having trouble with a custom rule and wondered

RE: PTR Rules

Couldn't we just write a rule that adds points when it see's the unknown in the MX, I also use postfix, so postfix specific.. Received: from predialnet.com.br (unknown [200.218.176.14]) Robert Peace he would say instead of goodbyepeace my brother.

RE: reading in exchange folder for salearn

I do this on our servers here, I use fetchmail with IMAP. I have setup the public folder for everyone to dump into but then have to pull the SPAM into a local folder in my inbox to feed it to fetchmail, because IMAP does not support the public folders only mailbox folders. I setup a folder

RE: autolearn=ham

:24 PM To: users@spamassassin.apache.org Subject: Re: autolearn=ham Robert Swan wrote: How do I clear, or unlearn the bayes filter it seems that it is picking up wrong. E-mail that is SPAM has autolearn=ham in the header and this is wrong. I am Running SPAMASSASSIN 3.0.3 on a Linux Red