I was wondering how to modify Lorens rule for the follwing type of emails
which I have been getting a lot of:
In the subject I get: some word[s]-userid or some word[s]-some
word[s]-userid
Loren answered that a month ago. Is in the archives. You may use:
header RULE_NAME ALL
I was wondering how to modify Lorens rule for the follwing type of emails
which I have been getting a lot of:
In the subject I get: some word[s]-userid or some word[s]-some
word[s]-userid
You aren't too specific about the subject form, and you aren't specific
about the To: form. That leaves
Am 08.08.2007 um 01:41 schrieb Expertsites, Inc.:
- Original Message - From: Stein Magne Bjorklund
[EMAIL PROTECTED]
To: Michael Worobcuk [EMAIL PROTECTED];
users@spamassassin.apache.org
Sent: Tuesday, August 07, 2007 1:11 AM
Subject: Re: spamd is invoked 3 times / forgot
Hi,
I am running SpamAssassin-3.2.1_1 on FreeBSD.
My MTA is Exim.
My problem is that spamd seems to be invoked 3 times by exim.
Here is an excerpt of my mysql-query-log:
9102 Connect [EMAIL PROTECTED] on spamassassin
9102 Query set autocommit=1
Hi,
I am running SpamAssassin-3.2.1_1 on FreeBSD.
My MTA is Exim.
My problem is that spamd seems to be invoked 3 times by exim.
Here is an excerpt of my mysql-query-log:
9102 Connect [EMAIL PROTECTED] on spamassassin
9102 Query set autocommit=1
On 8/7/07, Michael Worobcuk [EMAIL PROTECTED] wrote:
Hi,
I am running SpamAssassin-3.2.1_1 on FreeBSD.
My MTA is Exim.
My problem is that spamd seems to be invoked 3 times by exim.
Cant really help you as my Exim/Spamassassin is also broken at the
moment. I have problem running spamc on my
- Original Message -
From: Stein Magne Bjorklund [EMAIL PROTECTED]
To: Michael Worobcuk [EMAIL PROTECTED];
users@spamassassin.apache.org
Sent: Tuesday, August 07, 2007 1:11 AM
Subject: Re: spamd is invoked 3 times / forgot the subject
On 8/7/07, Michael Worobcuk [EMAIL PROTECTED
to go to a dedicated account.
After upgrading to 3.2 the forwarded emails to the spam account are adding
**spam** in the subject line.
How can I turn that off?
I do not have rewrite_header subject tag in the local.cf
It is as if it is now on by default.
Hi,
the Mail::Spamassassin::Conf manpage says that the body rule also
contains the Subject header as first part of the body content. I'm
trying to create a rule that catches empty messages but if the Subject
is always prepended, I can't do that. Is there a way to get the text or
html parts
On Thu, Jul 12, 2007 at 06:11:55PM +0200, Yves Goergen wrote:
is always prepended, I can't do that. Is there a way to get the text or
html parts of the message alone, without any headers that I can also
check otherwise?
rawbody.
--
Randomly Selected Tagline:
The Motorola 6800 had an
anybody a quick measure agains empty mails with Invoice #
in the subject and only a PDF attached?
--
Yves Goergen LonelyPixel [EMAIL PROTECTED]
Visit my web laboratory at http://beta.unclassified.de
) for it. :(
Or has anybody a quick measure agains empty mails with Invoice #
in the subject and only a PDF attached?
You want empty body other than the subject line? I think there is an
EMPTY_BODY rule already, or something very similar to that. Also I believe
rules that fire on various amounts
Perl and create my own function (or
plugin) for it. :(
Or has anybody a quick measure agains empty mails with Invoice #
in the subject and only a PDF attached?
You want empty body other than the subject line? I think there is an
EMPTY_BODY rule already, or something very similar
On Thu, Jul 12, 2007 at 11:01:45PM +0200, Yves Goergen wrote:
Okay, and what about an HTML part like this:
html
head
some garbage here
/head
bodypnbsp;/p/body
/html
I consider this empty, but ^$ does not. Any suggestions?
^\s*$ ?
You're going down the slippery slope, btw.
On Thu, Jul 12, 2007 at 05:32:17PM -0400, Theo Van Dinter wrote:
html
head
some garbage here
/head
bodypnbsp;/p/body
/html
I consider this empty, but ^$ does not. Any suggestions?
^\s*$ ?
fwiw, I was thinking of the rendered part when I wrote that, it obviously
doesn't do
How do I write a rule for the subject header, but for working on the
mimedecoded contents?
For instance a simple rule to check the length of the subject:
header BW_SUBJECT_LONG Subject =~ /.{100}/
Problem is - when the subject has been mime-encoded, it's already very
long:
Subject:
=?iso
Per Jessen wrote:
How do I write a rule for the subject header, but for working on the
mimedecoded contents?
Sorry, just found the answer. Ignore me.
/Per Jessen, Zürich
How do I write a rule for the subject header, but for working on the
mimedecoded contents?
For instance a simple rule to check the length of the subject:
header BW_SUBJECT_LONG Subject =~ /.{100}/
Problem is - when the subject has been mime-encoded, it's already very
long:
Subject:
=?iso-8859
Loren Wilton wrote:
I believe ot should work the way you want it to as you have it. If
you wanted to look at the undecoded mime you would do
Subject:raw =~ /something/
Thanks Loren - I realised just that after having dug a little deeper.
/Per Jessen, Zürich
5.8
rewrite_header subject [SPAM]
report_safe 0
use_pyzor 0
use_razor2 1
skip_rbl_checks 0
rbl_timeout 3
score RCVD_IN_BL_SPAMCOP_NET 2
use_bayes 1
bayes_auto_learn 1
bayes_path /home/spamd/.spamassassin/bayes
score DRUGS_ERECTILE 31.0
I receive header X-Spam-Status
On Wed, May 30, 2007 at 01:12:55PM -0500, Dave Richardson wrote:
Running spamd 3.1.7 on FC3. using qmail-scanner 2.01.
BUT rewrite_header isn't having desired change! HELP!??
Since you're using a third-party daemon, they may have their own way to markup
headers. I would check the appropriate
Dave Richardson wrote:
Running spamd 3.1.7 on FC3. using qmail-scanner 2.01.
Headers reflect that I AM loading spamd with the desired config
file... (I've changed require_score in small increments and headers
reflect correct value)
spamassassin --lint reports no errors
Please read the
Jason Haar wrote:
Dave Richardson wrote:
Running spamd 3.1.7 on FC3. using qmail-scanner 2.01.
Headers reflect that I AM loading spamd with the desired config
file... (I've changed require_score in small increments and headers
reflect correct value)
spamassassin --lint reports no errors
Chris wrote:
Since changing to embarqmail.com last Sunday each post I've
made to this list has been marked-up as possible spam. Is
Embarq that screwed up? Or is Synacor? Here are the markups
on the one I just posted:
X-Virus-Checked: Checked by ClamAV on apache.org
X-Old-Spam-Flag: YES
Since changing to embarqmail.com last Sunday each post I've made to this list
has been marked-up as possible spam. Is Embarq that screwed up? Or is
Synacor? Here are the markups on the one I just posted:
X-Virus-Checked: Checked by ClamAV on apache.org
X-Old-Spam-Flag: YES
X-Old-Spam-Status:
On Tue, Apr 10, 2007 at 08:23:15PM +0100, Paul Hurley wrote:
I've received a couple of Spam recently similar to the attached. They
all get through, and all trigger on Empty_Message, except the message
body isn't empty, and it contains some phrases that I would expect to
score off the
Am/On Tue, 10 Apr 2007 20:23:15 +0100 schrieb/wrote Paul Hurley:
I've received a couple of Spam recently similar to the attached. They
all get through, and all trigger on Empty_Message, except the message
body isn't empty, and it contains some phrases that I would expect to
score off the
in the background)
### you may add another parameters here, see spamass-milter(1)
#EXTRA_FLAGS=-m -r 15
Hmm...so nothing there to override spamd from over
And the relevant portion of my local.cf says:
#Change the subject of suspected spam
rewrite_header_subject***SPAM***
---
So just curious as to why
Assassin
install under QMail gets about 90% of them.
Question: I subscribe to various Yahoo Groups lists and I am finding that my
spam score setting, 0, is filtering many of them. If I set it to 3 which
allows Yahoo mail through, it also allows through about 30% more spam.
Can I white list subject
From: apc [mailto:[EMAIL PROTECTED]
Sent: Sun 4/1/2007 9:05
To: users@spamassassin.apache.org
Subject: Whitelisting subject line
Hi,
I have been a Linux tech for many years, and now I want to get the most out
of Spam Assassin. My email address has been around
of the
group which isn't practical.
--
View this message in context:
http://www.nabble.com/Whitelisting-subject-line-tf3501030.html#a9778120
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Well, this works here.
whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com
Dan
-Original Message-
From: apc [mailto:[EMAIL PROTECTED]
Sent: Sunday, April 01, 2007 10:18 AM
To: users@spamassassin.apache.org
Subject: RE: Whitelisting subject line
Jean-Paul Natola wrote:
I always run
Dan Barker wrote:
Well, this works here.
whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com
Dan
Thanks! I have added that; I am sure it will works if it works for you.
--
View this message in context:
http://www.nabble.com/Whitelisting-subject-line-tf3501030.html#a9779673
Sent
On Sun, Apr 01, 2007 at 05:49:24AM -0700, dougp23 wrote:
#Change the subject of suspected spam
rewrite_header_subject***SPAM***
It's:
rewrite_header Subject ...
not:
rewrite_header_subject ...
perldoc Mail::SpamAssassin::Conf :)
--
Randomly Selected Tagline:
Y'know, Zap, once I
Thanks!
That and /etc/init.d/spamass-milter had the -m switch on.
Now we're changing subjects!!!
Theo Van Dinter-2 wrote:
On Sun, Apr 01, 2007 at 05:49:24AM -0700, dougp23 wrote:
#Change the subject of suspected spam
rewrite_header_subject***SPAM***
It's:
rewrite_header
I'm testing a firewall that has anti-spam capabilities. When it detects
spam, it adds a label to the subject. ie. ---SPAM---
I would like to create a simple ruleset that adds certain weight to
mails that have this subject. Please let me know if I'm headed in the
right direction.
header
Yep, that will do it.
Loren
I'm testing a firewall that has anti-spam capabilities. When it detects
spam, it adds a label to the subject. ie. ---SPAM---
I would like to create a simple ruleset that adds certain weight to
mails that have this subject. Please let me know if I'm headed
I receive different results running the 'sa-learn --dump magic'
command depending on the user.
Running as user ‘atom’:
sa-learn --dump magic
0.000 0 3 0 non-token data: bayes db version
0.000 0 8902 0 non-token data: nspam
0.000 0
Hi,
Is anyone else seeing these. They seem to have 2 word subjects
starting with at, for or good. I don't seem to get any personally,
but one of my users seems to get 500 or 600 a week
Thanks, Tuc
On Mon, 2007-01-29 at 09:19 +0100, D Ivago wrote:
- the first kind of spam is with subject that contain RX and is mostly
like a reply so 'Re:blahblahRXblah'
It does come from different smtp servers so denying the host is not an
option.
not sure what do you want here.
- the second kind
Hello,
I have 2 kinds of spam that still gets through with a 3.0 score setup.
- the first kind of spam is with subject that contain RX and is mostly like
a reply so 'Re:blahblahRXblah'
It does come from different smtp servers so denying the host is not an
option.
- the second kind of spam
I am running Spamassassin 3.1.7 on a Fedora core 6 box
Everything appears to be working but the subject is not getting
rewritten to show that the spam is spam
my /etc/mail/spamassassin/local.cf has the following line in it.
rewrite_header subject SPAM(_SCORE_)
Am I missing something?
Tom wrote:
I am running Spamassassin 3.1.7 on a Fedora core 6 box
Everything appears to be working but the subject is not getting
rewritten to show that the spam is spam
my /etc/mail/spamassassin/local.cf has the following line in it.
rewrite_header subject SPAM(_SCORE_)
Am I
==?= [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: LOG! =?windows-1251?B?z/Dl5Ovu5uXt6OUg4uD46Owg7e7i+
+wg6uvo5e3y4Ow=?=
Date: Tue, 09 Jan 2007 01:10:20 +0300
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE
Kelson wrote:
Bowie Bailey wrote:
If you are going to try this, you will definately want to check
word boundaries like this:
header BAD_WORDS Subject =~ /\bbadword\b/i
The \b on either side will ensure that you don't match the string
as part of another word. (Anyone been
Hello spamassasin_list,
I want filter messages with some bad words. How can configure yhe SA
to do that?
Thanks.
--
Best regards,
Sergio Bortsov(Global Ukraine Lan ISP), mailto:[EMAIL
PROTECTED]
phones:8(032)2987593;
8(050)3170470.
-Original Message-
From: sergio [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 03, 2007 9:13 AM
To: spamassasin_list
Subject: how filter messages by subject
Hello spamassasin_list,
I want filter messages with some bad words. How can configure yhe SA
to do
Hello Chris,
Wednesday, January 3, 2007, 4:57:02 PM, you wrote:
-Original Message-
From: sergio [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 03, 2007 9:13 AM
To: spamassasin_list
Subject: how filter messages by subject
Hello spamassasin_list,
I want filter
I do NOT recommend doing any of this.
Why?
Because I know lots of coworkers and friends who might use a few bad words
when describing:
Their boss, their job, spam, the Boston Bruins quality of play this season,
George Bush, and their lack of ability to become invisible.
Just because you
.
Heh.
Kurt
-Original Message-
From: Chris Santerre [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 03, 2007 08:26
To: 'sergio'
Cc: spamassasin_list
Subject: RE: Re[2]: how filter messages by subject
I do NOT recommend doing any of this.
Why?
Because I know lots of coworkers
Chris Santerre wrote:
From: sergio [mailto:[EMAIL PROTECTED]
Hello spamassasin_list,
I want filter messages with some bad words. How can configure yhe
SA to do that? Thanks.
Its not really meant to do it, but you can. You first right a rule to
match bad words in the subject
At 11:03 AM 1/3/2007, you wrote:
These words do not actually appear much in spam. You may be able to filter
out mail from obnoxious clients with this approach. These types of words
are used more often in casual emails than in spam. Enhancement spams may
have some of these words, but they tend
Kurt Buff wrote:
Missed the beginning of this conversation.
If it's about 'naughty' words, then I've got a word for you:
Scunthorpe
It's a small town in the UK, and their local government had almost no
incoming mail when they implemented a naive naughty word filter, until
Bowie Bailey wrote:
If you are going to try this, you will definately want to check word
boundaries like this:
header BAD_WORDS Subject =~ /\bbadword\b/i
The \b on either side will ensure that you don't match the string as part
of another word. (Anyone been to Essex? :)
Even that isn't
unsubscribe
--
Nicholas Anderson
Administrador de Sistemas Unix
LPIC-1 Certified
Rede Fiocruz
e-mail: [EMAIL PROTECTED]
At 12:48 PM 1/2/2007, you wrote:
unsubscribe
As the headers say:
list-unsubscribe: mailto:[EMAIL PROTECTED]
Sietse van Zanen:
That is version 2.x config.
-Sietse
From: Fettke, Dirk
Sent: Tue 19-Dec-06 16:03
To: Tony Guadagno
Cc: users@spamassassin.apache.org
Subject: AW: Help! rewrite_header subject not working for me
Hi,
I don't know if this works with your solution because I do
subject
Tony Guadagno wrote:
I guess i don't understand, you say that Rewriting the subject is
ultimately the responsibility of the MTA., but SA has this option,
so that means that it is SA's responsibility...right?
It depends on how you call it. If you call SA directly, then yes, it does
:
I guess i don't understand, you say that Rewriting the subject is
ultimately the responsibility of the MTA., but SA has this option,
so that means that it is SA's responsibility...right?
It depends on how you call it. If you call SA directly, then yes, it does
the markup. If you use another
Tony Guadagno wrote:
I see, yes, I am calling SA directly, no Amavis etc involved..
Bowie Bailey [EMAIL PROTECTED] 12/21/2006 9:37 am
Tony Guadagno wrote:
I guess i don't understand, you say that Rewriting the subject is
ultimately the responsibility of the MTA., but SA has
I guess i don't understand, you say that Rewriting the subject is ultimately
the responsibility of the MTA., but SA has this option, so that means that it
is SA's responsibility...right?
***
Tony Guadagno
Guadagno Consulting
[EMAIL PROTECTED
Hi,
I have been reading and I don't see my problem exactly. This is my local.cf
I am using 3.1.7 I have report_safe =1 and the rewrite_header set. from the
docs For the Subject header, this will be prepended to the original subject.
the problem i have is the string is not prepended
Tony Guadagno wrote:
Hi,
I have been reading and I don't see my problem exactly. This is my
local.cf I am using 3.1.7 I have report_safe =1 and the rewrite_header set.
from the docs For the Subject header, this will be prepended to the original
subject. the problem i have
Hi,
I don't know if this works with your solution because I do subject-rewriting in
the amavisd.conf, but my local.cf looks like this (in short form):
# rewrite the Subject: line with SPAM .* if set to 1 (default=1)
rewrite_subject 1
required_score 5
subject_tag SPAM(_SCORE_
Jess Mooers wrote:
Theo Van Dinter [EMAIL PROTECTED] wrote on Monday, December 18,
2006:
On Mon, Dec 18, 2006 at 12:23:31PM -0600, Jess Mooers wrote:
Does anyone know of a cf ruleset that will address this, or
another way to stop it.
Chasing the subject of the day is futile
-Original Message-
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
Sent: Monday, December 18, 2006 1:33 PM
To: users@spamassassin.apache.org
Subject: Re: Name in Subject CF RuleSet
On Mon, Dec 18, 2006 at 12:23:31PM -0600, Jess Mooers wrote:
Does anyone know of a cf ruleset
this, or
another way to stop it.
Chasing the subject of the day is futile. Do you use sa-update?
Not to my knowledge. I guess I will have to look up the docs on how
to use sa-update.
Unless you have some sort of unusual configuration, just run it with no
arguments.
$ sa-update
It puts
On Tue, Dec 19, 2006 at 10:02:02AM -0600, Jess Mooers wrote:
I started to install components needed to use sa-update. I am getting this
error when I run sa-update -D:
error: gpg required but not found!
I tried to install GPG and GnuPG::Interface, but I am now getting errors on
Hi,
I have been reading and I don't see my problem exactly. This is my local.cf
I am using 3.1.7
rbl_timeout 15
fold_headers1
report_contact [EMAIL PROTECTED]
required_score 5
use_auto_whitelist 1
rewrite_header Subject
I have been getting alot of spam that has the senders first or last name in the
subject, either alone or within text like...
Greetings Smith
Does anyone know of a cf ruleset that will address this, or another way to stop
it.
Software info:
Exim version 4.62
On Mon, Dec 18, 2006 at 12:23:31PM -0600, Jess Mooers wrote:
Does anyone know of a cf ruleset that will address this, or another way to
stop it.
Chasing the subject of the day is futile. Do you use sa-update?
--
Randomly Selected Tagline:
Your next question is 'How does this gate work?' I
Theo Van Dinter [EMAIL PROTECTED] wrote on Monday, December 18, 2006:
On Mon, Dec 18, 2006 at 12:23:31PM -0600, Jess Mooers wrote:
Does anyone know of a cf ruleset that will address this, or another way to
stop it.
Chasing the subject of the day is futile. Do you use sa-update?
Not to my
-Original Message-
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
Sent: Monday, December 18, 2006 1:33 PM
To: users@spamassassin.apache.org
Subject: Re: Name in Subject CF RuleSet
On Mon, Dec 18, 2006 at 12:23:31PM -0600, Jess Mooers wrote:
Does anyone know of a cf ruleset
Hi,
I have been reading and I don't see my problem exactly. This is my local.cf
I am using 3.1.7
rbl_timeout 15
fold_headers1
report_contact [EMAIL PROTECTED]
required_score 5
use_auto_whitelist 1
rewrite_header Subject
set delivery off
[EMAIL PROTECTED] wrote:
I have seen this in the past but now can not find those email on how to
do this. What i want to do is rewrite the subject line so when it is
thought to be spam, it will appear like this:
[SPAM]score
score=the score of the email thought to be spam.
Can some please let
I have seen this in the past but now can not find those email on how to
do this. What i want to do is rewrite the subject line so when it is
thought to be spam, it will appear like this:
[SPAM]score
score=the score of the email thought to be spam.
Can some please let me know how to do this.
Chris
2006 18:38:52 -0700
Received: from aliceadsl.fr (192.168.10.57) by mail.libertysurf.net (7.1.026)
id 43F3DDC5003935BF; Wed, 22 Nov 2006 02:22:49 +0100
Date: Wed, 22 Nov 2006 02:22:49 +0100
Message-Id: [EMAIL PROTECTED]
Subject: =?iso-8859-1?Q?Representative_Needed.?=
MIME-Version: 1.0
X
On Mon, Nov 20, 2006 at 11:44:19PM +, Tony Finch wrote:
SA should do better with these since the new RCVD_WROTE2 rule should
trigger. They also follow the same forgery pattern with the
From/To/Message-ID lines.
What's the problem with these mails?
X-Spam-Status: Yes, score=14.2
]; Mon, 20 Nov 2006 23:25:05 -0480
From: May [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: hi abuse
Date: Mon, 20 Nov 2006 23:25:05 -0480
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/related;
boundary==_NextPart_000_000A_01C70D3E.2A9CC8C0
X-Mailer: Microsoft
Hello,
I'm running SpamAssassin 3.1.3 on Qmail.
99% of the spam that is processed by SA has the subject header rewritten. A
few times a day however, there are spams that get processed by SA, and do
not have the 'detected spam' string in the subject. In these spam there are
two
/more_spam.txt
I took them both, removed the SA markup, added GTUBE appropriately, and ran it
through w/ a rewrite_header Subject ... config, and it worked fine.
--
Randomly Selected Tagline:
This tagline is ANNOYWARE! To register, send me some fish.
pgpgOJzav3HHU.pgp
Description: PGP signature
Sorry for not being more specific. I'm not using qmail-scanner, just thought
it might be helpful to mention qmail is my MTA.
I have the same results as you after removing SA markup and retesting... The
difference between the two however is the X-Spam-Prev-Subject header - it
doesn't read
Hello,
I am trying to find a rule that will score messages where the Sender's
Name is in the Subject of the message. A lot of spam messages use this
tactic. I have not been able to write a rule and get it to score
correctly. Does anybody have a rule that will do this check already???
Thank you
On Thu, Nov 16, 2006 at 08:35:38AM -0800, Andrew Hawthorne wrote:
Any chance spamd is not processing the same?
Perhaps a clever spammer trick?
Anything's possible, but I would find it unlikely to be either of those two.
You could test though by shoving a message through spamc/spamd and see if
-Original Message-
From: Chris Szilagyi [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 16, 2006 12:49 PM
To: users@spamassassin.apache.org
Subject: Sender's name in subject
Hello,
I am trying to find a rule that will score messages where the Sender's
Name
Greetings,
Ive been
receiving a number of spam lately that are being correctly identified as spam
by SA, however the subject line is not being rewritten. I have noticed that
there are two subject lines and the X-Spam-Prev-Subject header
states non existent. Below is part of one
Andrew Hawthorne wrote:
Greetings,
I’ve been receiving a number of spam lately that are being
correctly identified as spam by SA, however the subject line is not
being rewritten. I have noticed that there are two subject lines and
the ‘X-Spam-Prev-Subject’ header states non
Question, since you only quoted some of the headers.. is there a blank
line anywhere in the headers before the subject header?
There are no blank lines... anything else I should check? I attempted to
send all the headers and the email was bounced back to me because it was too
spammy *grin
hi all. i have a problem with rewrite subject. many meesages in the
server detected has spam and rewrite subject with ***SPAM*** but others
NOT. and in the headers have this. what is the problem why spamassassin
dont rewrite this messages? what is tagged_above=-999 ?
X-Spam-Status: Yes, hits
On Wednesday 01 November 2006 13:29, Pablo Allietti took the opportunity to
say:
hi all. i have a problem with rewrite subject. many meesages in the
server detected has spam and rewrite subject with ***SPAM*** but others
NOT. and in the headers have this. what is the problem why spamassassin
Pablo Allietti wrote:
hi all. i have a problem with rewrite subject. many meesages in the
server detected has spam and rewrite subject with ***SPAM*** but others
NOT. and in the headers have this. what is the problem why spamassassin
dont rewrite this messages?
Because you're not using
encoding according to RFC 2047 on all headers. Unencoded
8-bit characters aren't allowed in headers).
In SuSE's distribution there is no munge8bit option for Cyrus (which would
leave the problematic subject as is but damage the search function) so all
Subjects in Hebrew/Russian/Etc. sent form
Title: RE: How to avoid spamassassin checks in Subject header?
-Original Message-
From: Leon Kolchinsky [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 26, 2006 9:09 AM
To: users@spamassassin.apache.org
Subject: How to avoid spamassassin checks in Subject header
Title: RE: How to avoid spamassassin checks in Subject header?
Thanks Chris,
I should read more about score rules J
Another thing:
There is a legitimate e-mail with empty
body message but with .doc attachment (filename is in hebrew) that marked as a spam
-
X-Spam-Status: Yes
On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote:
There is a legitimate e-mail with empty body message but with .doc attachment
(filename is in hebrew) that marked as a spam -
X-Spam-Status: Yes, hits=5.4 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_44,
FROM_ENDS_IN_NUMS,
should do encoding according to RFC 2047 on =
all headers. Unencoded 8-bit characters aren't allowed in headers).=20
In SuSE's distribution there is no munge8bit option for Cyrus (which =
would leave the problematic subject as is but damage the search =
function) so all Subjects in Hebrew/Russian
-
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 26, 2006 5:04 PM
To: users@spamassassin.apache.org
Subject: Re: How to avoid spamassassin checks in Subject header?
On Thu, Oct 26, 2006 at 04:56:21PM +0200, Leon Kolchinsky wrote:
There is a legitimate e-mail with empty body
Hi,
Over the last week, my machine (Fedora, SA 3.1.3, qmail,
qmail-scanner-queue.pl) has
been recieving a fair amount of junk mail which is not being tagged as spam; in
fact the
total scores are negative.
The messages are simply a random stream of words, with punctuation scattered in
them. No
SysAdmin wrote:
I wrote the following rule in an attempt to catch these but I've
obviously made some error. Can someone give me a little guidance as
to where I went awry?
rawbody SWF_r_AMPGFX1 /\.(com|net)/\w+/\?90\amp/i
The forward slashes need to be escaped as well.
Regards,
Andreas
501 - 600 of 880 matches
Mail list logo
