Andreas Pettersson wrote:
SysAdmin wrote:
I wrote the following rule in an attempt to catch these but I've
obviously made some error. Can someone give me a little guidance as
to where I went awry?
rawbody SWF_r_AMPGFX1 /\.(com|net)/\w+/\?90\amp/i
The forward slashes need to be
decoder wrote:
decoder wrote:
Hello there,
I have improved the original OcrPlugin (found at
http://wiki.apache.org/spamassassin/OcrPlugin), so it contains
fuzzy matching. Like that, mistakes made by the OCR recognition or
intentional obfuscations in the text don't make the recognition
Am running SpamAssassin 3.1.2 on Windows 2003 server.
This is an extract from the headers of an incoming email.
This triggered the MISSING_SUBJECT Missing Subject: header rule.
Why did this not detect the subject header?
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class
Am running SpamAssassin 3.1.2 on Windows 2003 server.
This is an extract from the headers of an incoming email.
This triggered the MISSING_SUBJECT Missing Subject: header rule.
Why did this not detect the subject header?
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content
Ben Wylie wrote:
Am running SpamAssassin 3.1.2 on Windows 2003 server.
This is an extract from the headers of an incoming email.
This triggered the MISSING_SUBJECT Missing Subject: header rule.
Why did this not detect the subject header?
Because its blank?
X-MimeOLE: Produced By Microsoft
Jim Maul wrote:
Ben Wylie wrote:
Am running SpamAssassin 3.1.2 on Windows 2003 server.
This is an extract from the headers of an incoming email.
This triggered the MISSING_SUBJECT Missing Subject: header rule.
Why did this not detect the subject header?
Because its blank?
my understanding
Ben Wylie wrote:
Jim Maul wrote:
Ben Wylie wrote:
Am running SpamAssassin 3.1.2 on Windows 2003 server.
This is an extract from the headers of an incoming email.
This triggered the MISSING_SUBJECT Missing Subject: header rule.
Why did this not detect the subject header?
Because its blank
Dear Group Members,
I have a GW IP from where all mails will come and fall to my real server. I have spamassassin in my real server whihc is almost uptodate. Now, whenever i rcv a mailby bypassing the gwit is stamped as SPAM where if the same mail comes thru that gwit is marked in low rate.
How
Bowie Bailey wrote:
tomcatf14 wrote:
I've disabled fast spamassassin and now it tag the subject!!!Good but
i think i still want to use Fast SA to enhance the performance.
What is fast spamassassin???
Basically spamc -c
The doc stated this:
The doc for what?
qmail-scanner
I want
unsubscribe
end
I've installed SA and set the score to 6. However, it doesn't seems to tag
the subject although the qmail-queue.log said tagging message.
What is wrong?
--
View this message in context:
http://www.nabble.com/SA-not-tagging-subject-tf1953977.html#a5358637
Sent from the SpamAssassin - Users
I am using the following:
SpamAssassin version 3.1.3
running on Perl version 5.8.7
rewrite_subject 1 is not recognise when running spamassassin -D --lint
--
View this message in context:
http://www.nabble.com/SA-not-tagging-subject-tf1953977.html#a5360179
Sent from the SpamAssassin - Users
tomcatf14 wrote:
I am using the following:
SpamAssassin version 3.1.3
running on Perl version 5.8.7
rewrite_subject 1 is not recognise when running spamassassin -D --lint
You will want
rewrite_header Subject your message
your message without the and .
--
Thanks,
James
On Mon, Jul 17, 2006 at 03:34:46AM -0700, tomcatf14 wrote:
I've installed SA and set the score to 6. However, it doesn't seems to tag
the subject although the qmail-queue.log said tagging message.
What is wrong?
You don't state how you're calling SA, but if you're using qmail-scanner
rewrite_header Subject your message-- this is my 1st line in the
local.cf file and it's uncommented.
I call SA from qmail-scanner. I used the whole package from qmailrocks.
In this page: http://freebsd.qmailrocks.org/clamspam.htm
The instruction is add:
rewrite_subject 1
required_hits 5
tomcatf14 wrote:
rewrite_header Subject your message-- this is my 1st line in the
local.cf file and it's uncommented.
I call SA from qmail-scanner. I used the whole package from qmailrocks.
In this page: http://freebsd.qmailrocks.org/clamspam.htm
The instruction is add:
rewrite_subject
In this page: http://freebsd.qmailrocks.org/clamspam.htm
The instruction is add:
rewrite_subject 1
required_hits 5
However, rewrite_subject 1 is not recognise when i do spamassassin -D
--lint
This is the error:
[2276] warn: config: failed to parse line, skipping: rewrite_subject
Which
I don't understand these sentences:
Note that you should only use the _REQD_ and _SCORE_ tags when rewriting the
Subject header if report_safe is 0. Otherwise, you may not be able to remove
the SpamAssassin markup via the normal methods.
--
View this message in context:
http://www.nabble.com
This is the output of spamassassin -D --lint
http://pastebin.ca/90451
--
View this message in context:
http://www.nabble.com/SA-not-tagging-subject-tf1953977.html#a5365554
Sent from the SpamAssassin - Users forum at Nabble.com.
What should i do if i want to use the current SA?
--
View this message in context:
http://www.nabble.com/SA-not-tagging-subject-tf1953977.html#a5365578
Sent from the SpamAssassin - Users forum at Nabble.com.
tomcatf14 wrote:
What should i do if i want to use the current SA?
Follow the instructions that come with it instead of some outdated guide
somewhere.
-Jim
I've disabled fast spamassassin and now it tag the subject!!!Good but i think
i still want to use Fast SA to enhance the performance.
The doc stated this:
I want fast_spamassassin for performance - but I want the Subject: header
tagged as SPAM too! Boy - you don't want much do you! :-) Anyway
tomcatf14 wrote:
I've disabled fast spamassassin and now it tag the subject!!!Good but
i think i still want to use Fast SA to enhance the performance.
What is fast spamassassin???
The doc stated this:
The doc for what?
I want fast_spamassassin for performance - but I want the Subject
Hi
All
I hope
somebody on the list can help me here. Our set-up is as
follows:
Internet
-- Spam Gateway -- pop server/exchange
server
we are
using:
FreeBSD
6.1
Sendmail
8.13 forward s mail via smtp from mailertable
spamass-milter
spamassassin
3.1.3
Our problem
is that we want to
header L_DOUBLE_SUBJECT ALL =~ /^Subject:.*^Subject:/smi
header L_DOUBLE_FROMALL =~ /^From:.*^From:/smi
Doing some more research on my suggestion
and evaluating results for the last three days, here is a proposal for new
rule:
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4927
On 5/31/06, Benny Pedersen [EMAIL PROTECTED] wrote:
but should this not be more in postfix header check ?
does someone know if there is a set of rfc checks for postfix exists anywhere ?
Not possible with postfix header_checks. Header_checks cannot test
for the absence of a header, nor
mark --
it's not too pretty.
header TWO_SUBJSALL =~ /(?:^|\n)Subject:.*\nSubject:/s
--j.
Mark Martinec writes:
Is it possible to add some score points to mail which has multiple
Subject header fields and/or multiple From header fields?
I guess not, but it is worth asking
Is it possible to add some score points to mail which has multiple
Subject header fields and/or multiple From header fields?
Sure. Ugly, but certainly possible. Something like
header DOUBLE_SUBJECT ALL =~ /\nSubject: *\nSubject:.\s+\S/m
Loren
header TWO_SUBJS ALL =~ /(?:^|\n)Subject:.*\nSubject:/s
header DOUBLE_SUBJECT ALL =~ /\nSubject: *\nSubject:.\s+\S/m
So this is what it boils down to, tested:
header L_DOUBLE_SUBJECT ALL =~ /^Subject:.*^Subject:/smi
score L_DOUBLE_SUBJECT 0.9
header L_DOUBLE_FROMALL =~ /^From:.*^From
On May 26, 2006, at 10:37 AM, Loren Wilton wrote:
Is it possible to add some score points to mail which has multiple
Subject header fields and/or multiple From header fields?
Sure. Ugly, but certainly possible. Something like
header DOUBLE_SUBJECT ALL =~ /\nSubject: *\nSubject:.\s+\S/m
I´d like to know if it´s possible to filter efficiently all
those emails
about Viagra and friends with a subject that always changes and has
different letters inserted between the letters of the drug
name. I guess you
know which ones I´m talking about (Re: test VhtAGGRA / CItAlLIS
Hi,
I´d like to know if it´s possible to filter efficiently all those emails
about Viagra and friends with a subject that always changes and has
different letters inserted between the letters of the drug name. I guess you
know which ones I´m talking about (Re: test VhtAGGRA / CItAlLIS
Does anyone know if the AuthCourier.pm module that is described on the
page linked below works with SA 3.1.1?
http://da.andaka.org/Doku/courier-spamassassin.html
--
Bowie
Ok, I changed the tagging slightly, and I can confirm that it is still happening and that the tagging is on my end:===From: Court of Appeal Distribution
[EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject: ***SPAM*** Court
:
===
From: Court of Appeal Distribution [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: ***SPAM*** Court of Appeal Judgments to be filed
Date: Thu, 27 Apr 2006 16:14:41 -0600
Message-Id: [EMAIL PROTECTED]
MIME-Version: 1.0
that it is stillhappening and that the tagging is on my end:===
From: Court of Appeal Distribution [EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject: ***SPAM*** Court of Appeal Judgments to be filed
Date: Thu, 27 Apr 2006 16:14:41
Just upgraded to SA 3.1 from 3.04. Running on SLES 9. I have a couple examples of a message that SA scores as Ham, but that still got the Subject line re-written:==
From: Court of Appeal Distribution [EMAIL PROTECTED]To: [EMAIL
Paul Dulaba wrote:
Just upgraded to SA 3.1 from 3.04. Running on SLES 9. I have a couple
examples of a message that SA scores as Ham, but that still got the
Subject line re-written:
Any chance it got scanned by two different copies of SA? Including the sending
side?
If a second SA scans
I am contacting the originator, as they are basically another department, to see if they are running anything. I doubt they are though, they currently use tags of [SPAM-high].The other thing that makes it look like my system is the
X-Spam-Prev-Subject: Court of Appeal Judgments to be filedThe
Paul Dulaba wrote:
I am contacting the originator, as they are basically another
department, to see if they are running anything. I doubt they are
though, they currently use tags of [SPAM-high].
The other thing that makes it look like my system is the
X-Spam-Prev-Subject: Court of Appeal
that makes it look like my system is the X-Spam-Prev-Subject: Court of Appeal Judgments to be filedWhat adds that header?
Paul Dulaba wrote:
As far as I know, SpamAssassin does.
Ahh.. Yes it does.. Nevermind..
That said, the presence of that header doesn't really mean much. SA only adds
that when it tags. If another SA instance did the tagging, your site would not
have modified X-Spam-Prev-Subject.
However
Try changing your subject tag slightly and see if the tag in the mail
changes. If not (and you remembered to restart spamd) then someone else is
tagging it.
Loren
.
It gets hit by a '20' rule for body parts in the message body,
but I noticed it doesn't get anything for the subject:
Want a Bigger MBP? A '25_replace' rule is present for fuzzy
MBP's, but doesn't seem to catch unfuzzy ones.
So I guess questions might be:
1) should 'fuzzy' rules match non
for purposes discussion.
It gets hit by a '20' rule for body parts in the message body,
but I noticed it doesn't get anything for the subject:
Yes it does.. the text of the subject line will match against any body rule. SA
pre-pends this so we don't have to have a massive duplication
Matt Kettler wrote:
Yes it does.. the text of the subject line will match against any body rule. SA
pre-pends this so we don't have to have a massive duplication of rules to cover
both body and subject.
---
Ah. Didn't know that. Different tools, different lingo for
message, message
or get a score of 0. It's
1.72 SUBJECT_ENCODED_TWICE Subject: MIME encoded twice
From grepping the rules it does what it says: it checks if there are two
B/Q encoding identifiers in the subject. Why is this scoring with 1.72 or
at all? This is absolutely valid Q/B encoding and actually
On Donnerstag, 13. April 2006 13:35 Mark Martinec wrote:
Agreed, this rule is completely inappropriate, it penalizes valid
encoding according to RFC 2047 and fires on any lengthier Subject
line in non-English language. It should disappear or have a
much reduced default score.
The problem
On Thu, Apr 13, 2006 at 01:35:19PM +0200, Mark Martinec wrote:
Agreed, this rule is completely inappropriate, it penalizes valid
encoding according to RFC 2047 and fires on any lengthier Subject
line in non-English language. It should disappear or have a
much reduced default score.
Says you
I want to use SA for a lot of users which don't have home directory.
There mails are in /var/mail. The spammed mails are send to the
recipient in his file /var/mail/user with the addition of SA.
The bayes and auto-whitelist database will be comun to anybody.
I use spamassassin 3.0.3
I just saw that a normal Ebay outbid notice hit two high-score rules. One
is from sare-spoof and I already contacted the maintainer. But one is in
the default 3.1.1 ruleset and I think this rule should get completely
removed or get a score of 0. It's
1.72 SUBJECT_ENCODED_TWICE Subject: MIME
SUBJECT_ENCODED_TWICE Subject: MIME encoded twice
From grepping the rules it does what it says: it checks if there are two
B/Q encoding identifiers in the subject. Why is this scoring with 1.72 or
at all? This is absolutely valid Q/B encoding and actually *required* by
RFC if your subject line is longer than 80
-
De: Matt Kettler [mailto:[EMAIL PROTECTED]]
Enviado el: viernes, 10 de marzo de 2006 21:57
Para: Ruben Cardenal
CC: users@spamassassin.apache.org
Asunto: Re: SA rule for userid in subject?
Ruben Cardenal wrote:
Hi,
Loren answered that a month ago. Is in the archives. You may us
hello assassin-types,
I'm seeing a lot of image-only spam of the following form:
rcpt to: userid@domain.com
Subject: Fw: userid
Is there a way to create a simple spamassassin rule that will hit on
this? I could use () and \1 in regular expressions and a giant,
multi-line matching RE
Jonathan Engbrecht wrote:
hello assassin-types,
I'm seeing a lot of image-only spam of the following form:
rcpt to: userid@domain.com
Subject: Fw: userid
Is there a way to create a simple spamassassin rule that will hit on
this? I could use () and \1 in regular expressions
]
Enviado el: viernes, 10 de marzo de 2006 21:17
Para: Jonathan Engbrecht
CC: users@spamassassin.apache.org
Asunto: Re: SA rule for userid in subject?
Jonathan Engbrecht wrote:
hello assassin-types,
I'm seeing a lot of image-only spam of the following form:
rcpt to: userid
On Fri, Mar 10, 2006 at 02:59:09PM -0500, Jonathan Engbrecht wrote:
I'm seeing a lot of image-only spam of the following form:
rcpt to: userid@domain.com
Subject: Fw: userid
Yeah, there's a lot of that.
Is there a way to create a simple spamassassin rule that will hit on
this? I could
Ruben Cardenal wrote:
Hi,
Loren answered that a month ago. Is in the archives. You may use:
header RULE_NAME ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw:
.{0,30}\s*\1\b/i
That covers Fw: userid and Fw: (some word[s]) userid.
True, but that's using () and \1, which is
el: viernes, 10 de marzo de 2006 21:57
Para: Ruben Cardenal
CC: users@spamassassin.apache.org
Asunto: Re: SA rule for userid in subject?
Ruben Cardenal wrote:
Hi,
Loren answered that a month ago. Is in the archives. You may use:
header RULE_NAME ALL =~ /\nTo: ([EMAIL PROTECTED
How do I prevent the ssubject tag from being appended.
When i use
rewrite_subject 0
subject_tag [SPAM]
it does not help
when I remove those two lines it does not help.
Here is my user_prefs
required_hits 5
rewrite_subject 1
subject_tag [SPAM]
report_safe 0
clear_headers
add_header all Flag
of rewrite_subject and
subject tag. Check your manpages.
Also, be sure to run spamassassin --lint after editing your configs. This will
allow SA to complain about config options it doesn't understand. (Ordinarily
this command runs without printing anything, but if it finds a parse error
I looked this up and can't see where I'm doing anything wrong, but the
subject is not being rewritten.
Some relevant data:
/etc/mail/spamassassin/local.cf
# How many hits before a message is considered spam.
required_score 3.0
# Change the subject of suspected spam
rewrite_header Subject
On Sun, 19 Feb 2006, Terry Miller wrote:
I looked this up and can't see where I'm doing anything wrong, but the
subject is not being rewritten.
You should probably ask this question on the exim-users list. I suspect
(but I am not certain) that exiscan doesn't support the message rewrite
parts
:[EMAIL PROTECTED]
Sent: Sunday, February 19, 2006 3:40 PM
To: Terry Miller
Cc: users@spamassassin.apache.org
Subject: Re: Exiscan + subject rewrite not working
On Sun, 19 Feb 2006, Terry Miller wrote:
I looked this up and can't see where I'm doing anything wrong, but the
subject is not being
Hello for all,
My SpamAssassin show me this messages somebody that means it ?
[10272] warn: Argument n.nn isn't numeric in addition (+) at
/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 251.
[10272] warn: Argument n.nn isn't numeric in addition (+) at
[EMAIL PROTECTED] wrote:
Hello,
I have spamd setup and its working perfectly except for processing
custom
subject rules in user_prefs files. The subject rules for the default
rule
set are processed and applied as expected all the time.
Rules are by default not allowed in user_prefs files
Hello,
I have spamd setup and its working perfectly except for processing custom
subject rules in user_prefs files. The subject rules for the default rule
set are processed and applied as expected all the time. I have copied and
renamed subject rules to user_prefs files and tested them. I wrote
[EMAIL PROTECTED] wrote:
Hello,
I have spamd setup and its working perfectly except for processing custom
subject rules in user_prefs files. The subject rules for the default rule
set are processed and applied as expected all the time.
Rules are by default not allowed in user_prefs files
I want to get a notification if a certain user sends an email to anyone
in our company. I am using spamassassin 2.6. I think this might be accomplished
by running the -l filename, --log-to-mbox=filename command and doing a grep on
the senders name in the resulting file, but I am not sure
Vincenzo Martiello wrote:
Anyone has notice of this?:
spammers send mail with two row Subject in mail
when spamassassin mark as spam mail with two row Subject in the header
mail, then it marks only the first row Subject
is there the way to mark all header row with Subject
Not sure about
, attaching a score, and
adding the default message at the top of the email (Email has been tagged
as possible spam by the system...or whatever). However, the Subject
rewrite is not getting performed. For some emails, the rewrite occurs,
but not all of them.
Example of the Subject being rewritten
...or whatever). However, the Subject
rewrite is not getting performed. For some emails, the rewrite occurs,
but not all of them.
Nothing looks horribly wrong to me with your setup. See if you can
reproduce the no-rewrite state with an email you have received which did
not get the subject rewritten
Hi Chris,
Nothing looks horribly wrong to me with your setup. See if you can
reproduce the no-rewrite state with an email you have received which did
not
get the subject rewritten. Remove the spamassassin markup and re-send
the
message through spamassassin (pipe a marked-up email
Hello List..
Is it possible to reject, add weight (score), etc
mail by subject LIKE rules?
Regards ..
Leonard
Hallo und Guten Abend Leonard,
Heute (am 24.11.2005 - 19:18 Uhr)
schriebst Du:
Hello List..
Is it possible to reject, add weight (score), etc mail by subject LIKE rules?
Regards ..
Leonard
yes. With header_checks, like pcre or regexp
--
Viele Grüße, Kind regards,
Jim Knuth
Thanks all for the suggestions..!
Regards ..
Leonard
- Original Message -
From: Jim Knuth [EMAIL PROTECTED]
To: users@spamassassin.apache.org
Sent: Thursday, November 24, 2005 1:32 PM
Subject: Re: Block By Subject LIKE
Hallo und Guten Abend Leonard,
Heute (am 24.11.2005 - 19:18
Hi
please a small question but urgent ! :
Actually, all spams are Tagged into the subject :
rewrite_header Subject *SPAM*
It's on a relay server ..
Can i pat a different rewrite_header Subject speicifed for one domain ?
Exemple:
* = rewrite_header Subject *SPAM*
domain.com
Noc Phibee wrote:
Hi
please a small question but urgent ! :
Actually, all spams are Tagged into the subject :
rewrite_header Subject *SPAM*
It's on a relay server ..
Can i pat a different rewrite_header Subject speicifed for one domain ?
Exemple:
* = rewrite_header Subject
From: Michael Parker [mailto:[EMAIL PROTECTED]
Noc Phibee wrote:
Hi
please a small question but urgent ! :
Actually, all spams are Tagged into the subject :
rewrite_header Subject *SPAM*
It's on a relay server ..
Can i pat a different rewrite_header Subject
somebody suggest me how to turn it in a SA 3.x rule?
Sure.
This is the rule...
Subject
=~
/p.{0,2}u.{0,2}b.{0,2}l.{0,2}i.{0,2}c.{0,2}i.{0,2}d.{0,2}a.{0,2}d/i
You don't mention where this word is showing up. The stuff above indicates
that it might be in the Subject line. I would assume
On Thu, Oct 13, 2005 at 06:29:22AM -0700, Loren Wilton wrote:
Can somebody suggest me how to turn it in a SA 3.x rule?
Subject
=~
/p.{0,2}u.{0,2}b.{0,2}l.{0,2}i.{0,2}c.{0,2}i.{0,2}d.{0,2}a.{0,2}d/i
What you have above is very nearly correct for a Subject rule, if it were on
one line
Although I seem to be getting the same errors as another poster:
Oct 8 21:44:42 cpollock spamd[14459]: spamd: processing message
[EMAIL PROTECTED] for chris:501
Oct 8 21:44:42 cpollock spamd[14459]: Can't locate object method header
via package Mail::DomainKeys::Message
at
Hello all, I am wondering if anyone knows how to get the
score of the SPAM in the subject line with the rewrite. Right now I rewrite the
subject line with [SPAM] at the beginning but it would be helpful to see the
score in the same place. Also I attach the original e-mail and I use
Robert Swan wrote:
Hello all, I am wondering if anyone knows how to get the score of the
SPAM in the subject line with the rewrite. Right now I rewrite the
subject line with [SPAM] at the beginning but it would be helpful to see
the score in the same place. Also I attach the original e-mail
On Fri, Sep 23, 2005 at 03:43:23PM -0400, Robert Swan wrote:
Hello all, I am wondering if anyone knows how to get the score of the
SPAM in the subject line with the rewrite. Right now I rewrite the
subject line with [SPAM] at the beginning but it would be helpful to
see the score in the same
On Fri, 23 Sep 2005, Michael Barnes wrote:
I prefer:
rewrite_header Subject [SPAM-Score-_HITS_]
==
Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
Hi,
Since everything moved up in SA 3.1 (it will take time to get
used to this one) shouldn't also X-Spam-Prev-Subject move up
there with the rest of X-Spam-...? IMHO, I find it more
practical to have everything in one place. BTW, doesn't this
effect Domain-Key's compatibility?
Thnx,
Lefteris
Since everything moved up in SA 3.1 (it will take time to get
used to this one) shouldn't also X-Spam-Prev-Subject move up
there with the rest of X-Spam-...? IMHO, I find it more
Sounds like a bug to me if they aren't all in the same place.
practical to have everything in one place. BTW
Loren Wilton wrote:
Since everything moved up in SA 3.1 (it will take time to get
used to this one) shouldn't also X-Spam-Prev-Subject move up
there with the rest of X-Spam-...? IMHO, I find it more
Sounds like a bug to me if they aren't all in the same place.
Nope, they are not. In fact, I
. I haven't
been able to verify if this creates a problem with DomainKeys yet
though (I upgraded 12 hours ago). I 'll open a ticket for this one
then.
Since everything moved up in SA 3.1 (it will take time to get
used to this one) shouldn't also X-Spam-Prev-Subject move up
there with the rest of X
to get
used to this one) shouldn't also X-Spam-Prev-Subject move up
there with the rest of X-Spam-...? IMHO, I find it more
Sounds like a bug to me if they aren't all in the same place.
Nope, they are not. In fact, I am not sure I ever saw
X-Spam-Prev-Subject with the other X-Spam headers
Dear Users,
When SpamAssassin tags an email as spam and modifies the subject line, is it
possible for it to also modify any swear words (offensive language) that maybe
in the subject line? Maybe replace them with astericks.
Rick Page
Page Hosting 4U, LLC
888-256-7445
On Mon, Sep 19, 2005 at 03:11:53PM -0500, Rick Page wrote:
When SpamAssassin tags an email as spam and modifies the subject line, is it
possible for it to also modify any swear words (offensive language) that maybe
in the subject line? Maybe replace them with astericks.
You'd have to modify
Folks,
We have in the SA conf:
subject_tag [SPAM]
We are running SA 2.63
Since today, we haven't had a problem with the rewrite, and today a message
came in as:
[SPAM-P]
...I'm confused... of where the -P came from. Has anyone seen this before?
Or know why?
Thanks,
Steve
Steve Dimoff wrote:
Folks,
We have in the SA conf:
subject_tag [SPAM]
We are running SA 2.63
Warning: You have a DoS vulnerability in your version of SA. This vulnerability
is in the mime parser, and can be exploited remotely by sending you a malformed
message. Upgrade to 2.64 or
? Or know why?
Stupid question time...
Was the message marked as spam by your server?
Is it possible the [SPAM-P] was part of the subject already?
--
Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
At least a dozen of our users got emails last night with subject 1 (no
quotes), a minimal header, and a MIME body with a text/html part containing
just 1 and an attachment 1.txt . A sample is included below, with only the
recipient address and domain altered.
I am guessing it's a broken spam
Pierre Thomson wrote on Sat, 23 Jul 2005 09:09:14 -0400:
I am guessing it's a broken spam zombie,
Not just one and they have been appearing for a week or so now.
But all of them get detected as high scoring spam here:
-1.10 BAYES_40 Bayesian spam probability is 20 to 40%
0.15 HTML_80_90
However, I was unable to match the filename in the MIME header, even with
a full rule. According to Matt Kettler:
full - entire message, with all headers, all mime segments,
and no decoding. Just raw, as it was on the wire.
What version are you using? 2.6x pulled attachments out of 'full'
SA 2.64 w/ qmail-scanner. Messages w/ no subject and no body are being
detected as spam (message header info is normal, some score as high as
9.1 (threshold @ 5)), but it's not being rejected, and the ones that
should be let through, albeit with a [SPAM] tag on the subject line, are
not being
601 - 700 of 880 matches
Mail list logo
