tag:old.nabble.com,2006:forum-191Nabble - SpamAssassin2009-11-09T10:37:44Z<div style="float:left;padding:5px">
<img src="http://spamassassin.apache.org/images/arrowlogo.png" title="SpamAssassin" width="150" height="75">
</div>
<a href="http://spamassassin.apache.org/" target="_top" rel="nofollow">SpamAssassin</a> is a mature, widely-deployed open source project that serves as a mail filter to identify Spam. SpamAssassin uses a variety of mechanisms including header and text analysis, Bayesian filtering, DNS blocklists, and collaborative filtering databases. SpamAssassin runs on a server, and filters spam before it reaches your mailbox.tag:old.nabble.com,2006:post-26271452Hudson build is back to normal: SpamAssassin-trunk #43192009-11-09T10:37:44Z2009-11-09T10:37:44ZApache Hudson ServerSee <<a href="http://hudson.zones.apache.org/hudson/job/SpamAssassin-trunk/4319/changes" target="_top" rel="nofollow">http://hudson.zones.apache.org/hudson/job/SpamAssassin-trunk/4319/changes</a>>
<br><br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26271321[Bug 5442] Provide line continuation facility for rules2009-11-09T10:28:31Z2009-11-09T10:28:31ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5442" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5442</a><br><br>Mark Martinec <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271321&i=0" target="_top" rel="nofollow">Mark.Martinec@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> Priority|P3 |P5
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26271268[Bug 6214] compiled body rules doesnt match2009-11-09T10:25:21Z2009-11-09T10:25:21ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6214" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6214</a><br><br>Mark Martinec <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271268&i=0" target="_top" rel="nofollow">Mark.Martinec@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> Priority|P3 |P1
<br><br>--- Comment #6 from Mark Martinec <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271268&i=1" target="_top" rel="nofollow">Mark.Martinec@...</a>> 2009-11-09 10:25:19 UTC ---
<br>I can reproduce the problem revealed by test in Comment 4, but I don't know
<br>enough about compiled rules to help here (I don't use it here, not worth the
<br>trouble imo). Bumping up priority.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26271228[Bug 6230] Remove massmailers from uridnsbl_skip_domain in 25_uribl.cf2009-11-09T10:22:32Z2009-11-09T10:22:32ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6230" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6230</a><br><br>AXB <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271228&i=0" target="_top" rel="nofollow">alex.uribl@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> Status|NEW |RESOLVED
<br> Resolution| |FIXED
<br><br>--- Comment #11 from AXB <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271228&i=1" target="_top" rel="nofollow">alex.uribl@...</a>> 2009-11-09 10:22:31 UTC ---
<br>(In reply to comment #10)
<div class='shrinkable-quote'><br>> svn log Alex:
<br>>
<br>> r833769 | axb | 2009-11-07 22:21:19 +0100 (Sat, 07 Nov 2009) | 10 lines
<br>> as per bug 6230 removed:
<br>> partner2profit.com
<br>> smileycentral.com
<br>> tickle.com
<br>> topica.com
<br>> vistaprint.com
<br>> freelotto.com
<br>> yourfreedvds.com
<br>>
<br>>
<br>>
<br>> So I guess this can be closed now.
</div><br><br>imo yes.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26271226unsubscribe2009-11-09T10:22:09Z2009-11-09T10:22:09ZDavid Fisher<p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26271211Re: Spam coming from hotmail.2009-11-09T10:20:39Z2009-11-09T10:20:39ZBenny PedersenOn man 09 nov 2009 13:56:27 CET, "Casartello, Thomas" wrote
<br>> Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign up
<br>> now.
<br><br>why not enable it ?
<br><br>but for others:
<br><br>give a big spam score for rfc-i
<br>give a big ham score for users at hotmail that does not spam you
<br><br>meta RFC_ABUSE_POST (__DNS_FROM_RFC_ABUSE && __DNS_FROM_RFC_POST)
<br>describe RFC_ABUSE_POST Meta: both abuse and postmaster missing on
<br>sender domain
<br>score RFC_ABUSE_POST 2.0
<br><br>meta __SPF_MATCH (USER_IN_DEF_SPF_WL || USER_IN_SPF_WHITELIST)
<br>meta __DKIM_MATCH (USER_IN_DEF_DKIM_WL || USER_IN_DKIM_WHITELIST)
<br><br>meta URI_NOT_WHITELISTED (__HAS_ANY_URI && !__SPF_MATCH && !__DKIM_MATCH)
<br>describe URI_NOT_WHITELISTED Meta: URI found but none are WHITE
<br>score URI_NOT_WHITELISTED 1.1
<br><br>whitelist_from_auth <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271211&i=0" target="_top" rel="nofollow">foo@...</a>
<br><br>score USER_IN* -5.0
<br><br>--
<br>xpoint
<br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26271153[Bug 6230] Remove massmailers from uridnsbl_skip_domain in 25_uribl.cf2009-11-09T10:16:40Z2009-11-09T10:16:40ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6230" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6230</a><br><br>--- Comment #10 from Mark Martinec <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26271153&i=0" target="_top" rel="nofollow">Mark.Martinec@...</a>> 2009-11-09 10:16:38 UTC ---
<br>svn log Alex:
<br><br>r833769 | axb | 2009-11-07 22:21:19 +0100 (Sat, 07 Nov 2009) | 10 lines
<br>as per bug 6230 removed:
<br>partner2profit.com
<br>smileycentral.com
<br>tickle.com
<br>topica.com
<br>vistaprint.com
<br>freelotto.com
<br>yourfreedvds.com
<br><br><br><br>So I guess this can be closed now.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26270962[Bug 6200] Replace use of Digest::SHA1 by Digest::SHA2009-11-09T10:04:19Z2009-11-09T10:04:19ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6200" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6200</a><br><br>--- Comment #8 from Mark Martinec <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270962&i=0" target="_top" rel="nofollow">Mark.Martinec@...</a>> 2009-11-09 10:04:19 UTC ---
<br>Bug 6200 cont'd: fixed DependencyInfo.pm
<br>Sending lib/Mail/SpamAssassin/Util/DependencyInfo.pm
<br>Committed revision 834162.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26270943[Bug 6200] Replace use of Digest::SHA1 by Digest::SHA2009-11-09T10:02:51Z2009-11-09T10:02:51ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6200" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6200</a><br><br>Justin Mason <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270943&i=0" target="_top" rel="nofollow">jm@...</a>> changed:
<br><br> What |Removed |Added
<br>----------------------------------------------------------------------------
<br> CC| |<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270943&i=1" target="_top" rel="nofollow">jm@...</a>
<br><br>--- Comment #7 from Justin Mason <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270943&i=2" target="_top" rel="nofollow">jm@...</a>> 2009-11-09 10:02:50 UTC ---
<br>(In reply to comment #6)
<br>> Bug 6200: let SA use either Digest::SHA or Digest::SHA1,
<br>> whichever is available (the Digest::SHA is now a base
<br>> module since perl 5.10.0)
<br><br>hmm, may still need some work, as Hudson is failing to build.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26270496[Bug 6200] Replace use of Digest::SHA1 by Digest::SHA2009-11-09T09:38:52Z2009-11-09T09:38:52ZBugzilla from bugzilla-daemon@bugzilla.spamassassin.org<a href="https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6200" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6200</a><br><br>--- Comment #6 from Mark Martinec <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270496&i=0" target="_top" rel="nofollow">Mark.Martinec@...</a>> 2009-11-09 09:38:48 UTC ---
<br>Bug 6200: let SA use either Digest::SHA or Digest::SHA1,
<br>whichever is available (the Digest::SHA is now a base
<br>module since perl 5.10.0)
<br>Sending INSTALL
<br>Sending build/sha1sum.pl
<br>Sending lib/Mail/SpamAssassin/BayesStore/BDB.pm
<br>Sending lib/Mail/SpamAssassin/BayesStore/DBM.pm
<br>Sending lib/Mail/SpamAssassin/BayesStore/SQL.pm
<br>Sending lib/Mail/SpamAssassin/Plugin/Bayes.pm
<br>Sending lib/Mail/SpamAssassin/Plugin/Hashcash.pm
<br>Sending lib/Mail/SpamAssassin/Util/DependencyInfo.pm
<br>Sending masses/corpora/fuzzy-hash-maildir
<br>Sending masses/rule-dev/seek-phrases-in-log
<br>Sending sa-update.raw
<br>Sending t/mimeparse.t
<br>Sending t/rule_names.t
<br>Sending t/sha1.t
<br>Transmitting file data ..............
<br>Committed revision 834155.
<br><br>--
<br>Configure bugmail: <a href="https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email" target="_top" rel="nofollow">https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email</a><br>------- You are receiving this mail because: -------
<br>You are the assignee for the bug.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Dev-f194.html" embed="fixTarget[194]" target="_top" >SpamAssassin - Dev</a></p>tag:old.nabble.com,2006:post-26270272Re: Spam coming from hotmail.2009-11-09T09:25:19Z2009-11-09T09:25:19Zrichard@buzzhost.co.ukOn Mon, 2009-11-09 at 17:12 +0000, RW wrote:
<div class='shrinkable-quote'><br>> On Mon, 09 Nov 2009 15:09:18 +0000
<br>> "<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270272&i=0" target="_top" rel="nofollow">richard@...</a>" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270272&i=1" target="_top" rel="nofollow">richard@...</a>> wrote:
<br>>
<br>> > <snip>
<br>> > Running those through my SA gets the biggest hit for the second
<br>> > example with the Indian link in the body. But that's a custom rule
<br>> > kindly given to me by of one of the good people on this list.
<br>> >
<br>> > I'm more concerned with this:
<br>> >
<br>> > X-Originating-IP: [189.69.146.53]
<br>> >
<br>> > In Brazil yet my relay module does not seem to be biting on it.
<br>>
<br>> The list of country codes in the X-Spam-Relay-Countries header
<br>> corresponds to the list of untrusted relays - which is taken from the
<br>> received headers.
</div><br>Thanks RW - You've probably forgotten more about SA than I'll ever know,
<br>so I appreciate your time in responding.
<br><br><br>It would be infinitely useful for me to match strings like:
<br><br>X-Originating-IP: [189.69.146.53]
<br><br>to country and block upon the result of that test. Basically I would
<br>happy with X-Originating-IP: [....] being in the UK, USA and parts of
<br>Europe, but I would like to kill any that come from Brazil, Columbia,
<br>China etc.
<br><br>I'm getting confused as to if I can do this with SA - I think I'm clear
<br>that the Relay Countries won't look at this kind of header(?), and that
<br>checking them against blocklists is not appropriate as by nature they
<br>will probably be in the PBL. But is there a way to grab these by
<br>geographic location and block? I see this often with Hotmail spam and
<br>whilst I would love to just block hotmail period, that would be a BOFH
<br>move that would not go down well :-)
<br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26270113Re: New to Spamassassin. Have a few ?s...2009-11-09T09:17:41Z2009-11-09T09:17:41ZComputerflake<br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">Kurt Buff wrote:</div>
<div class="quote-message shrinkable-quote">On Sun, Nov 8, 2009 at 19:30, Computerflake <gledford@phhw.com> wrote:
<br>>
<br>> I'm looking into a free spam filter that can do the following. Will
<br>> Spamassassin do these things?
<br>>
<br>> 1) Will it filter multiple domains so I can filter for many different
<br>> companies?
<br>> 2) Will it send individual users an email once a day (for example) to inform
<br>> them of the spam that was captured in case they were not actually spam?
<br>> 3) Will it allow users to add people to an individual whitelist so they can
<br>> handle their own spam settings?
<br>> 4) I understand it connects in to ClamAV using a plugin. How easy is it to
<br>> install the plugin so I can also scan for viruses for folks?
<br>>
<br>> Thanks for any help. I don't want to spend a fortune on a spam filter if I
<br>> can find a free filter that will do everything I would need.
<br><br>Try this:
<br><br><a href="http://www.maiamailguard.com" target="_top" rel="nofollow">http://www.maiamailguard.com</a><br><br>Kurt
</div>
</div></blockquote>
That sounds exactly like what I'm looking for. Thanks for the help!<p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26270066Re: [SPAM:6.0] Spam coming from hotmail.2009-11-09T09:12:53Z2009-11-09T09:12:53ZRW-15On Mon, 09 Nov 2009 15:09:18 +0000
<br>"<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270066&i=0" target="_top" rel="nofollow">richard@...</a>" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26270066&i=1" target="_top" rel="nofollow">richard@...</a>> wrote:
<br><div class='shrinkable-quote'><br>> <snip>
<br>> Running those through my SA gets the biggest hit for the second
<br>> example with the Indian link in the body. But that's a custom rule
<br>> kindly given to me by of one of the good people on this list.
<br>>
<br>> I'm more concerned with this:
<br>>
<br>> X-Originating-IP: [189.69.146.53]
<br>>
<br>> In Brazil yet my relay module does not seem to be biting on it.
</div><br>The list of country codes in the X-Spam-Relay-Countries header
<br>corresponds to the list of untrusted relays - which is taken from the
<br>received headers.
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26269911Re: New to Spamassassin. Have a few ?s...2009-11-09T09:04:48Z2009-11-09T09:04:48ZLuKremeOn 8-Nov-2009, at 20:30, Computerflake wrote:
<br>> 1) Will it filter multiple domains so I can filter for many different
<br>> companies?
<br><br>No. SpamAssassin does not filter mail. It marks mail that is suspected
<br>of being spam.
<br><br>> 2) Will it send individual users an email
<br><br>No.
<br><br>> 3) Will it allow users to add people to an individual whitelist so
<br>> they can
<br>> handle their own spam settings?
<br><br>If the users have shell access to change their user_prefs file or if
<br>you implement some other mechanism. However, this is generally
<br>unnecessary as long as you provide a method for learning messages as
<br>ham that were miss-tagged as spam.
<br><br>> Thanks for any help. I don't want to spend a fortune on a spam
<br>> filter if I
<br>> can find a free filter that will do everything I would need.
<br><br>You can spend as much as you want and never find a spam solution any
<br>better than SA. In fact, almost all the 'solutions' you would buy are
<br>actually SpamAssassin at their core.
<br><br>--
<br>Because you can't cotton to evil. No Sir. You have to smack evil
<br> on the nose with the rolled-up newspaper of justice and say,
<br> 'Bad evil. Bad BAD evil'"
<br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26269119Re: About log generation2009-11-09T08:17:17Z2009-11-09T08:17:17ZLuKremeOn 8-Nov-2009, at 21:33, Matt Kettler wrote:
<br>> However, that assumes you can tell from the log message alone.. I'm
<br>> not sure offhand if spamd has that info in the syslog messages.
<br><br><br>It doesn't. All virtual domains get scanned as the virtual mailbox
<br>user.
<br><br>Nov 9 06:47:17 mail spamd[439]: spamd: identified spam (5.8/5.0) for
<br>vpopmail:89 in 6.0 seconds, 2910 bytes.
<br>Nov 9 06:47:17 mail spamd[439]: spamd: result: Y 5 -
<br>BAYES_95,HTML_MESSAGE,MISSING_SUBJECT,URIBL_OB_SURBL
<br>scantime
<br>=
<br>6.0
<br>,size
<br>=
<br>2910
<br>,user
<br>=
<br>vpopmail
<br>,uid
<br>=
<br>89,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=65314,mid=<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26269119&i=0" target="_top" rel="nofollow">COL121-W21E61FB2BDC3CA21457EE6D1AC0@...</a>
<br> >,bayes=0.975174,autolearn=no
<br><br>You can use the message ID to scan the log and find the Queue-ID and
<br>then use that to scan the log again for the Queue-ID and THEN you can
<br>get the user/domain.
<br><br>--
<br>I WILL NOT HANG DONUTS ON MY PERSON
<br> Bart chalkboard Ep. 2F13
<br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26268706facebook Spam Question2009-11-09T07:51:46Z2009-11-09T07:51:46Ztwofers<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top" style="font: inherit;"><DIV>Thanks everyone for the facebook feedback.</DIV>
<DIV> </DIV>
<DIV>Indeed this did happen and begin after Oct 26th. I believe our registration began closer to Nov 1st.</DIV>
<DIV> </DIV>
<DIV>It's relieving that this appears to be coincidence and is not a local virus, keylogger, undetected VPS break in, etc.</DIV>
<DIV> </DIV>
<DIV>My spamassassin is set up as a pretty generic install, although I do edit the config to add rules. I do not necessarily need to focus intensly on spam elimination, I am pretty much my only customer.</DIV>
<DIV> </DIV>
<DIV>Thank you for the help.</DIV></td></tr></table><br>
<p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26268089RE: [SPAM:6.0] Spam coming from hotmail.2009-11-09T07:18:13Z2009-11-09T07:18:13ZLordSigmaSomeone kindly showed me pastebin. Here are my samples FINALLY in proper
<br>form (my apologies for any inconvenience.):
<br><a href="http://pastebin.com/m44e99f80" target="_top" rel="nofollow">http://pastebin.com/m44e99f80</a><br><a href="http://pastebin.com/m4a64ab62" target="_top" rel="nofollow">http://pastebin.com/m4a64ab62</a><br><br>Oh that's a good point. That is pretty funny, obviously their outgoing
<br>protection isn't too good.
<br><br>Thomas E. Casartello, Jr.
<br>Staff Assistant - Wireless/Linux Administrator
<br>Information Technology
<br>Wilson 105A
<br>Westfield State College
<br><br>Red Hat Certified Technician (RHCT)
<br><br><br>-----Original Message-----
<br>From: Matus UHLAR - fantomas [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268089&i=0" target="_top" rel="nofollow">uhlar@...</a>]
<br>Sent: Monday, November 09, 2009 9:36 AM
<br>To: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268089&i=1" target="_top" rel="nofollow">users@...</a>
<br>Subject: Re: [SPAM:6.0] Spam coming from hotmail.
<br><br>On 09.11.09 09:20, Casartello, Thomas wrote:
<br>> Yeah I should have attached those instead of copying and pasting the
<br>> Outlook crap. Was pretty stupid, my apologies.
<br><br>no, you should have publiched them somewhere and paste a link. Sending spam
<br>to any mailing list is a bad idea, unless the mailing list recommends that.
<br><br>btw, it was this advertising signature what made him laugh:
<br><br>> > ______________________________________________________________________
<br>> > Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign
<br>> > up now.
<br><br><br><br>--
<br>Matus UHLAR - fantomas, <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26268089&i=2" target="_top" rel="nofollow">uhlar@...</a> ; <a href="http://www.fantomas.sk/" target="_top" rel="nofollow">http://www.fantomas.sk/</a><br>Warning: I wish NOT to receive e-mail advertising to this address.
<br>Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
<br>Fighting for peace is like fucking for virginity...
<br><br /> <div class="small"><br/><img src="http://old.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (5K) <a href="http://old.nabble.com/attachment/26268089/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26267992Re: Short URL Providers RBL List2009-11-09T07:10:33Z2009-11-09T07:10:33ZJonas EckermanMike Cardwell wrote:
<br><br>>> I don't know if it will be useful but I made a short URL provider list
<br>>> that is DNS readable.
<br><br>> Been done. See <a href="http://rhs.mailpolice.com/#rhsredir" target="_top" rel="nofollow">http://rhs.mailpolice.com/#rhsredir</a><br><br>Thet don't seem to be the same thing. Quote from the page you linked to:
<br>---8<---
<br>This includes any website which provides an open mechanism to redirect a
<br>web browser to another website, ie, by adding a
<br>url=<a href="http://anotherwebsite" target="_top" rel="nofollow">http://anotherwebsite</a> in the URL.
<br>---8<---
<br><br>I would not consider open redirector of that type to be the same thing
<br>as a URL shortener service (especially not a well run service).
<br><br>/Jonas
<br>--
<br>Jonas Eckerman
<br>Fruktträdet & Förbundet Sveriges Dövblinda
<br><a href="http://www.fsdb.org/" target="_top" rel="nofollow">http://www.fsdb.org/</a><br><a href="http://www.frukt.org/" target="_top" rel="nofollow">http://www.frukt.org/</a><br><a href="http://whatever.frukt.org/" target="_top" rel="nofollow">http://whatever.frukt.org/</a><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26267959RE: [SPAM:6.0] Spam coming from hotmail.2009-11-09T07:09:18Z2009-11-09T07:09:18Zrichard@buzzhost.co.uk<snip>
<br>Running those through my SA gets the biggest hit for the second example
<br>with the Indian link in the body. But that's a custom rule kindly given
<br>to me by of one of the good people on this list.
<br><br>I'm more concerned with this:
<br><br>X-Originating-IP: [189.69.146.53]
<br><br>In Brazil yet my relay module does not seem to be biting on it.
<br><br><br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26267798Re: Short URL Providers RBL List2009-11-09T06:56:25Z2009-11-09T06:56:25ZJonas EckermanRW wrote:
<br>> On Thu, 05 Nov 2009 20:05:25 +0100
<br><br>>> Thanks. That could be usuable in my URLRedirect plugin. A current
<br>>> list of URL redirectors is the main thing missing from that plugin.
<br>>>
<br>>> It would be even better it included info about wether a URL shortener
<br>>> uses HTTP redirects (wich is what my plugin checks).
<br><br>> One other thing is that sometimes the links have already been cancelled
<br>> for abuse, and the redirection goes to a page saying that. Such pages
<br>> aren't going to be in any URIBL list, but obviously they are very
<br>> strong spam indicators. Ideally there would be a regex to match those
<br>> links on each redirection service.
<br><br>Since my plugin adds redirect targets to the message metadata that check
<br>could be done with a normal URL rule.
<br><br>(It might be useful if the plugin flags redirections that redirects to
<br>the same domain.)
<br><br>/Jonas
<br>--
<br>Jonas Eckerman
<br>Fruktträdet & Förbundet Sveriges Dövblinda
<br><a href="http://www.fsdb.org/" target="_top" rel="nofollow">http://www.fsdb.org/</a><br><a href="http://www.frukt.org/" target="_top" rel="nofollow">http://www.frukt.org/</a><br><a href="http://whatever.frukt.org/" target="_top" rel="nofollow">http://whatever.frukt.org/</a><br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26267468Re: [SPAM:6.0] Spam coming from hotmail.2009-11-09T06:36:11Z2009-11-09T06:36:11ZMatus UHLAR - fantomasOn 09.11.09 09:20, Casartello, Thomas wrote:
<br>> Yeah I should have attached those instead of copying and pasting the
<br>> Outlook crap. Was pretty stupid, my apologies.
<br><br>no, you should have publiched them somewhere and paste a link. Sending spam
<br>to any mailing list is a bad idea, unless the mailing list recommends that.
<br><br>btw, it was this advertising signature what made him laugh:
<br><br>> > ______________________________________________________________________
<br>> > Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign
<br>> > up now.
<br><br><br><br>--
<br>Matus UHLAR - fantomas, <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267468&i=0" target="_top" rel="nofollow">uhlar@...</a> ; <a href="http://www.fantomas.sk/" target="_top" rel="nofollow">http://www.fantomas.sk/</a><br>Warning: I wish NOT to receive e-mail advertising to this address.
<br>Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
<br>Fighting for peace is like fucking for virginity...
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26267279RE: [SPAM:6.0] Spam coming from hotmail.2009-11-09T06:24:29Z2009-11-09T06:24:29ZLordSigmaHere are two of the messages in a more proper form. Again I apologize for the earlier message.
<br><br>Thomas E. Casartello, Jr.
<br>Staff Assistant - Wireless/Linux Administrator
<br>Information Technology
<br>Wilson 105A
<br>Westfield State College
<br><br>Red Hat Certified Technician (RHCT)
<br><br><br>-----Original Message-----
<br>From: Casartello, Thomas
<br>Sent: Monday, November 09, 2009 9:20 AM
<br>To: '<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=0" target="_top" rel="nofollow">richard@...</a>'
<br>Cc: Spamassassin Mailing List
<br>Subject: RE: [SPAM:6.0] Spam coming from hotmail.
<br><br>Yeah I should have attached those instead of copying and pasting the Outlook crap. Was pretty stupid, my apologies.
<br><br>Thomas E. Casartello, Jr.
<br>Staff Assistant - Wireless/Linux Administrator
<br>Information Technology
<br>Wilson 105A
<br>Westfield State College
<br><br>Red Hat Certified Technician (RHCT)
<br><br>-----Original Message-----
<br>From: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=1" target="_top" rel="nofollow">richard@...</a> [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=2" target="_top" rel="nofollow">richard@...</a>]
<br>Sent: Monday, November 09, 2009 8:47 AM
<br>Cc: Spamassassin Mailing List
<br>Subject: Re: [SPAM:6.0] Spam coming from hotmail.
<br><br>On Mon, 2009-11-09 at 07:56 -0500, Casartello, Thomas wrote:
<br>> I’ve been getting a lot of non-scoring spam coming from hotmail over
<br>> the last couple weeks. It’s one user that’s been complaining about it.
<br>>
<br>> Here’s a few samples:
<br>{serious ascii murder commited}
<br><br>I could not stop laughing at this given the context...
<br><br>>
<br>> ______________________________________________________________________
<br>> Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign
<br>> up now.
<br><br><br><br />Received-SPF: pass (hotmail.com: Sender is authorized to use
<br>'<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=3" target="_top" rel="nofollow">toblosasocw@...</a>' in 'mfrom' identity (mechanism
<br>'include:spf-a.hotmail.com' matched)) receiver=mx1.wsc.ma.edu;
<br>identity=mailfrom; envelope-from="<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=4" target="_top" rel="nofollow">toblosasocw@...</a>";
<br>helo=col0-omc3-s1.col0.hotmail.com; client-ip=65.55.34.139
<br>Received: from col0-omc3-s1.col0.hotmail.com
<br>(col0-omc3-s1.col0.hotmail.com [65.55.34.139])
<br> by mx1.wsc.ma.edu (Postfix) with ESMTP id A54CB37600A
<br> for <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=5" target="_top" rel="nofollow">kcouture@...</a>>; Mon, 9 Nov 2009 03:52:05 -0500 (EST)
<br>Received: from COL114-W59 ([65.55.34.136]) by
<br>col0-omc3-s1.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
<br> Mon, 9 Nov 2009 00:49:29 -0800
<br>Message-ID: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=6" target="_top" rel="nofollow">COL114-W59276E20FF6F4849346832AFAC0@...</a>>
<br>Content-Type: multipart/alternative;
<br> boundary="_bd552ac0-b167-4ee2-926d-d8eb2b4270a0_"
<br>X-Originating-IP: [92.124.6.234]
<br>From: oblosas towazoco <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=7" target="_top" rel="nofollow">toblosasocw@...</a>>
<br>To: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=8" target="_top" rel="nofollow">david-deprospero@...</a>>, <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=9" target="_top" rel="nofollow">jlwedgeiii@...</a>>,
<br> <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=10" target="_top" rel="nofollow">davedebbiealexboyd@...</a>>, <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=11" target="_top" rel="nofollow">sevan26@...</a>>,
<br><<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=12" target="_top" rel="nofollow">diamond.1000@...</a>>
<br>CC: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=13" target="_top" rel="nofollow">stacyberger@...</a>>
<br>Subject: Afternoon
<br>Date: Mon, 9 Nov 2009 00:49:29 -0800
<br>Importance: Normal
<br>MIME-Version: 1.0
<br>X-OriginalArrivalTime: 09 Nov 2009 08:49:29.0207 (UTC)
<br>FILETIME=[8C758870:01CA6119]
<br><br>--_bd552ac0-b167-4ee2-926d-d8eb2b4270a0_
<br>Content-Type: text/plain; charset="iso-8859-1"
<br>Content-Transfer-Encoding: quoted-printable
<br><br><br>How are you=2C
<br><br><br><br>If i recollect correctly=2C you weren't feeling well the other week
<br>and I t=
<br>hought you'd want to see
<br><a href="http://www.google.com/reader/item/tag:google.com=" target="_top" rel="nofollow">http://www.google.com/reader/item/tag:google.com=</a><br>=2C2005:reader/item/bfbff5e0da68bbf1
<br><br><br><br>This store is an internet store with great collections. Immediately
<br>you'll =
<br>know that it's a bargain!
<br><br><br><br>Get better=2C
<br><br>Gerek
<br> =20
<br>_________________________________________________________________
<br>Hotmail: Trusted email with powerful SPAM protection.
<br><a href="http://clk.atdmt.com/GBL/go/177141665/direct/01/=" target="_top" rel="nofollow">http://clk.atdmt.com/GBL/go/177141665/direct/01/=</a><br><br>--_bd552ac0-b167-4ee2-926d-d8eb2b4270a0_
<br>Content-Type: text/html; charset="iso-8859-1"
<br>Content-Transfer-Encoding: quoted-printable
<br><br><html>
<br><head>
<br><style><!--
<br>.hmmessage P
<br>{
<br>margin:0px=3B
<br>padding:0px
<br>}
<br>body.hmmessage
<br>{
<br>font-size: 10pt=3B
<br>font-family:Verdana
<br>}
<br>--></style>
<br></head>
<br><body class=3D'hmmessage'>
<br>How are you=2C<BR>
<br><BR>
<br>If i recollect correctly=2C you weren't feeling well the other week
<br>and I t=
<br>hought you'd want to see <A
<br>href=3D"<a href="http://www.google.com/reader/item/tag:g=" target="_top" rel="nofollow">http://www.google.com/reader/item/tag:g=</a><br>oogle.com=2C2005:reader/item/bfbff5e0da68bbf1"><a href="http://www.google.com/reader=" target="_top" rel="nofollow">http://www.google.com/reader=</a><br>/item/tag:google.com=2C2005:reader/item/bfbff5e0da68bbf1</A><BR>
<br><BR>
<br>This store is an internet store with great collections. Immediately
<br>you'll =
<br>know that it's a bargain!<BR>
<br><BR>
<br>Get better=2C<BR>
<br>Gerek<BR> <br /><hr />Hotmail: Trusted email with powerful
<br>SPAM =
<br>protection. <a
<br>href=3D'<a href="http://clk.atdmt.com/GBL/go/177141665/direct/01/'" target="_top" rel="nofollow">http://clk.atdmt.com/GBL/go/177141665/direct/01/'</a> ta=
<br>rget=3D'_new'>Sign up now.</a></body>
<br></html>=
<br><br>--_bd552ac0-b167-4ee2-926d-d8eb2b4270a0_--
<br><br />Received-SPF: pass (hotmail.com: Sender is authorized to use
<br>'<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=14" target="_top" rel="nofollow">jmouswenfiiw@...</a>' in 'mfrom' identity (mechanism
<br>'include:spf-a.hotmail.com' matched)) receiver=mx2.wsc.ma.edu;
<br>identity=mailfrom; envelope-from="<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=15" target="_top" rel="nofollow">jmouswenfiiw@...</a>";
<br>helo=blu0-omc2-s12.blu0.hotmail.com; client-ip=65.55.111.87
<br>Received: from blu0-omc2-s12.blu0.hotmail.com
<br>(blu0-omc2-s12.blu0.hotmail.com [65.55.111.87])
<br> by mx2.wsc.ma.edu (Postfix) with ESMTP id 530D814002
<br> for <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=16" target="_top" rel="nofollow">kcouture@...</a>>; Mon, 9 Nov 2009 00:27:50 -0500 (EST)
<br>Received: from BLU139-W3 ([65.55.111.72]) by
<br>blu0-omc2-s12.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
<br> Sun, 8 Nov 2009 21:26:48 -0800
<br>Message-ID: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=17" target="_top" rel="nofollow">BLU139-W38F3F898E2401A7184B7BCCAC0@...</a>>
<br>Content-Type: multipart/alternative;
<br> boundary="_53a4b5fd-adfc-4fd6-8e9a-5f5944ac93ec_"
<br>X-Originating-IP: [189.69.146.53]
<br>From: Jeffry Mouswen <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=18" target="_top" rel="nofollow">jmouswenfiiw@...</a>>
<br>To: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=19" target="_top" rel="nofollow">morse@...</a>>, <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=20" target="_top" rel="nofollow">nightmareofdreams@...</a>>
<br>CC: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267279&i=21" target="_top" rel="nofollow">kcouture@...</a>>
<br>Subject: Interested in it
<br>Date: Sun, 8 Nov 2009 21:26:48 -0800
<br>Importance: Normal
<br>MIME-Version: 1.0
<br>X-OriginalArrivalTime: 09 Nov 2009 05:26:48.0752 (UTC)
<br>FILETIME=[3C435B00:01CA60FD]
<br><br>--_53a4b5fd-adfc-4fd6-8e9a-5f5944ac93ec_
<br>Content-Type: text/plain; charset="iso-8859-1"
<br>Content-Transfer-Encoding: quoted-printable
<br><br><br>What you up to=2C
<br><br><br><br>I just felt compelled to communicate to you about the brilliant new
<br>way I b=
<br>uy my pharmaceuticals.
<br><br><br><br>I found this virtual distributor at
<br><a href="http://LudovicLen.insanejournal.com" target="_top" rel="nofollow">http://LudovicLen.insanejournal.com</a> and=
<br> I believed that you could use it too. They use the right amount of
<br>judicio=
<br>usness and trade in identical items as at your SavOn.
<br><br><br><br>It'll be great when you guys finally purchase their reasonably-priced
<br>stuff=
<br>!
<br><br><br><br>See you soon=2C
<br><br>Ronin
<br> =20
<br>_________________________________________________________________
<br>Hotmail: Trusted email with Microsoft's powerful SPAM protection.
<br><a href="http://clk.atdmt.com/GBL/go/177141664/direct/01/" target="_top" rel="nofollow">http://clk.atdmt.com/GBL/go/177141664/direct/01/</a><br><a href="http://clk.atdmt.com/GBL/go/177141664/direct/01/" target="_top" rel="nofollow">http://clk.atdmt.com/GBL/go/177141664/direct/01/</a><br><br>--_53a4b5fd-adfc-4fd6-8e9a-5f5944ac93ec_
<br>Content-Type: text/html; charset="iso-8859-1"
<br>Content-Transfer-Encoding: quoted-printable
<br><br><html>
<br><head>
<br><style><!--
<br>.hmmessage P
<br>{
<br>margin:0px=3B
<br>padding:0px
<br>}
<br>body.hmmessage
<br>{
<br>font-size: 10pt=3B
<br>font-family:Verdana
<br>}
<br>--></style>
<br></head>
<br><body class=3D'hmmessage'>
<br>What you up to=2C<BR>
<br><BR>
<br>I just felt compelled to communicate to you about the brilliant new
<br>way I b=
<br>uy my pharmaceuticals.<BR>
<br><BR>
<br>I found this virtual distributor at <A
<br>href=3D"<a href="http://LudovicLen.insanejour=" target="_top" rel="nofollow">http://LudovicLen.insanejour=</a><br>nal.com"><a href="http://LudovicLen.insanejournal.com" target="_top" rel="nofollow">http://LudovicLen.insanejournal.com</a></A> and I believed that
<br>you co=
<br>uld use it too. They use the right amount of judiciousness and trade
<br>in ide=
<br>ntical items as at your SavOn.<BR>
<br><BR>
<br>It'll be great when you guys finally purchase their reasonably-priced
<br>stuff=
<br>!<BR>
<br><BR>
<br>See you soon=2C<BR>
<br>Ronin<BR> <br /><hr />Hotmail: Trusted email with
<br>Microsoft's po=
<br>werful SPAM protection. <a
<br>href=3D'<a href="http://clk.atdmt.com/GBL/go/177141664/di=" target="_top" rel="nofollow">http://clk.atdmt.com/GBL/go/177141664/di=</a><br>rect/01/
<br><a href="http://clk.atdmt.com/GBL/go/177141664/direct/01/" target="_top" rel="nofollow">http://clk.atdmt.com/GBL/go/177141664/direct/01/</a><br>' target=3D'_new'>Sign up now.</a></body>
<br></html>=
<br><br>--_53a4b5fd-adfc-4fd6-8e9a-5f5944ac93ec_--
<br><br /> <div class="small"><br/><img src="http://old.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (5K) <a href="http://old.nabble.com/attachment/26267279/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26267196RE: [SPAM:6.0] Spam coming from hotmail.2009-11-09T06:20:08Z2009-11-09T06:20:08ZLordSigmaYeah I should have attached those instead of copying and pasting the Outlook crap. Was pretty stupid, my apologies.
<br><br>Thomas E. Casartello, Jr.
<br>Staff Assistant - Wireless/Linux Administrator
<br>Information Technology
<br>Wilson 105A
<br>Westfield State College
<br><br>Red Hat Certified Technician (RHCT)
<br><br>-----Original Message-----
<br>From: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267196&i=0" target="_top" rel="nofollow">richard@...</a> [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26267196&i=1" target="_top" rel="nofollow">richard@...</a>]
<br>Sent: Monday, November 09, 2009 8:47 AM
<br>Cc: Spamassassin Mailing List
<br>Subject: Re: [SPAM:6.0] Spam coming from hotmail.
<br><br>On Mon, 2009-11-09 at 07:56 -0500, Casartello, Thomas wrote:
<br>> I’ve been getting a lot of non-scoring spam coming from hotmail over
<br>> the last couple weeks. It’s one user that’s been complaining about it.
<br>>
<br>> Here’s a few samples:
<br>{serious ascii murder commited}
<br><br>I could not stop laughing at this given the context...
<br><br>>
<br>> ______________________________________________________________________
<br>> Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign
<br>> up now.
<br><br><br><br /> <div class="small"><br/><img src="http://old.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (5K) <a href="http://old.nabble.com/attachment/26267196/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26266668Re: [SPAM:6.0] Spam coming from hotmail.2009-11-09T05:47:16Z2009-11-09T05:47:16Zrichard@buzzhost.co.ukOn Mon, 2009-11-09 at 07:56 -0500, Casartello, Thomas wrote:
<br>> I’ve been getting a lot of non-scoring spam coming from hotmail over
<br>> the last couple weeks. It’s one user that’s been complaining about it.
<br>>
<br>> Here’s a few samples:
<br>{serious ascii murder commited}
<br><br>I could not stop laughing at this given the context...
<br><br>>
<br>> ______________________________________________________________________
<br>> Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign
<br>> up now.
<br><br><br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26266012Spam coming from hotmail.2009-11-09T04:56:27Z2009-11-09T04:56:27ZLordSigma<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:Z="urn:schemas-microsoft-com:" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>I’ve been getting a lot of non-scoring spam coming
from hotmail over the last couple weeks. It’s one user that’s been
complaining about it.<o:p></o:p></p>
<p class=MsoNormal>Here’s a few samples:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Jeffry Mouswen
[mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=0" target="_top" rel="nofollow">jmouswenfiiw@...</a>] <br>
<b>Sent:</b> Monday, November 09, 2009 12:27 AM<br>
<b>To:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=1" target="_top" rel="nofollow">morse@...</a>; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=2" target="_top" rel="nofollow">nightmareofdreams@...</a><br>
<b>Cc:</b> <user’s name removed><br>
<b>Subject:</b> Interested in it</span><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif"'>What you up to,<br>
<br>
I just felt compelled to communicate to you about the brilliant new way I buy
my pharmaceuticals.<br>
<br>
I found this virtual distributor at <a href="http://LudovicLen.insanejournal.com" target="_top" rel="nofollow">http://LudovicLen.insanejournal.com</a>
and I believed that you could use it too. They use the right amount of
judiciousness and trade in identical items as at your SavOn.<br>
<br>
It'll be great when you guys finally purchase their reasonably-priced stuff!<br>
<br>
See you soon,<br>
Ronin<o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Hotmail:
Trusted email with Microsoft's powerful SPAM protection. <a href="http://clk.atdmt.com/GBL/go/177141664/direct/01/%0d%0ahttp:/clk.atdmt.com/GBL/go/177141664/direct/01/%0d%0a" target="_new" rel="nofollow">Sign up now.</a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> shebrome ascange
[mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=3" target="_top" rel="nofollow">ashebromefuqat@...</a>] <br>
<b>Sent:</b> Friday, November 06, 2009 10:08 PM<br>
<b>To:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=4" target="_top" rel="nofollow">marsik555@...</a>; <user’s name removed>;
<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=5" target="_top" rel="nofollow">stacyberger@...</a>; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=6" target="_top" rel="nofollow">farmbabe66@...</a><br>
<b>Cc:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=7" target="_top" rel="nofollow">davedebbiealexboyd@...</a><br>
<b>Subject:</b> U finished it again</span><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif"'>Howdy! <br>
<br>
I just was dying to write you about the brilliant new manner in which I get a
hold of my medicine.<br>
<br>
I discovered this cyber dispensary at <a href="http://denyounvid.spaces.live.com" target="_top" rel="nofollow">http://denyounvid.spaces.live.com</a>
and I could tell that you could use it too. They use the correct amount of care
and have indistinguishable medicines as at your SavOn.<br>
<br>
It'll be a blast when you guys finally obtain their first-rate medications!<br>
<br>
Talk to you really soon,<br>
Tomoyuki<o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Find
the right PC with Windows 7 and Windows Live. <a href="http://www.microsoft.com/Windows/pc-scout/laptop-set-criteria.aspx?cbid=wl&filt=200,2400,10,19,1,3,1,7,50,650,2,12,0,1000&cat=1,2,3,4,5,6&brands=5,6,7,8,9,10,11,12,13,14,15,16&addf=4,5,9&ocid=PID24727::T:WLMTAGL:ON:WL:en-US:WWL_WIN_evergreen2:112009" target="_new" rel="nofollow">Learn more.</a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> silonoho erahofonw
[mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=8" target="_top" rel="nofollow">serahofonwarjkc@...</a>] <br>
<b>Sent:</b> Saturday, November 07, 2009 1:57 AM<br>
<b>To:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=9" target="_top" rel="nofollow">dillbert2953@...</a>; <user’s name removed><br>
<b>Cc:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=10" target="_top" rel="nofollow">boocf@...</a>; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=11" target="_top" rel="nofollow">ayers@...</a><br>
<b>Subject:</b> Happy</span><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif"'>Hi,<br>
<br>
I stumbled across this online shop at <a href="http://6yo.org/s/?QOREQ" target="_top" rel="nofollow">http://6yo.org/s/?QOREQ</a>
and I was positive that you could use it too. They have the correct amount of
privacy and sell equivocal medications as at your area store.<o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Hotmail:
Trusted email with powerful SPAM protection. <a href="http://clk.atdmt.com/GBL/go/177141665/direct/01/" target="_new" rel="nofollow">Sign up
now.</a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> stuhanst bbigelart
[mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=12" target="_top" rel="nofollow">bbigelartscruzk@...</a>] <br>
<b>Sent:</b> Tuesday, November 03, 2009 1:00 PM<br>
<b>To:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=13" target="_top" rel="nofollow">davidwray1@...</a><br>
<b>Subject:</b> Thank ya</span><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif"'>I just ended a phone call with my
co-worker, who says "hi," and she wanted to talk with us about a
wicked site she wants us to try. She disclosed to me that this site boasts an
unmatched supply and nice prices that dishonor our area vendor! <br>
<br>
Don't even say that you don't hate paying too much for your medicines as much
as I'm aware that you do. Well our answer is right there on the web at <a href="http://jeenpeul.livejournal.com" target="_top" rel="nofollow">http://jeenpeul.livejournal.com</a> This
internet supplier is totally reputable and safe. He was the marketing and sales
strategist behind many of Microsoft's software deals. Their <br>
<br>
While the imperial powers in Africa prospered off of the raw materials of the
land and slavery (economic values), the African natives suff<br>
<br>
To your health!<br>
Rioun<o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Hotmail:
Trusted email with Microsoft's powerful SPAM protection. <a href="http://clk.atdmt.com/GBL/go/177141664/direct/01/%0d%0ahttp:/clk.atdmt.com/GBL/go/177141664/direct/01/%0d%0a" target="_new" rel="nofollow">Sign up now.</a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> asthog alhora
[mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=14" target="_top" rel="nofollow">asthogainuxf@...</a>] <br>
<b>Sent:</b> Monday, November 02, 2009 3:04 PM<br>
<b>To:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26266012&i=15" target="_top" rel="nofollow">aaronragsdale@...</a><br>
<b>Subject:</b> All the possibilities</span><o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Verdana","sans-serif"'>I just finished chatting with my
girlfriend, who says "hi," and she wanted to talk with us about a
great shop she heard about. She told me that this virtual store shows a wide
variety and fair prices that dishonor our neighborhood outlet! <br>
<br>
Don't even act like you don't dislike getting ripped off for your drugs as much
as I am sure you do. Well our cure is right there in cyberspace at <a href="http://bingperkin.livejournal.com" target="_top" rel="nofollow">http://bingperkin.livejournal.com</a>
This cyber location is totally reputable and safe. software became the industry
standard in the early 1980s and has just increased in distribution <br>
<br>
ered from political and economic situations. Politically, most African Empires
were emerging through new military technology and religious<br>
<br>
Let me know how it goes!<br>
Rouppoun<o:p></o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>New
Windows 7: Find the right PC for you. <a href="http://www.microsoft.com/windows/pc-scout/default.aspx?CBID=wl&ocid=PID24727::T:WLMTAGL:ON:WL:en-US:WWL_WIN_pcscout:112009" target="_new" rel="nofollow">Learn more.</a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Thomas E. Casartello, Jr.<o:p></o:p></p>
<p class=MsoNormal>Staff Assistant - Wireless/Linux Administrator<o:p></o:p></p>
<p class=MsoNormal>Information Technology<o:p></o:p></p>
<p class=MsoNormal>Wilson 105A<o:p></o:p></p>
<p class=MsoNormal>Westfield State College<o:p></o:p></p>
<p class=MsoNormal>(413) 572-8245<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Red Hat Certified Technician (RHCT)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>
<br /> <div class="small"><br/><img src="http://old.nabble.com/images/icon_attachment.gif" > <strong>smime.p7s</strong> (5K) <a href="http://old.nabble.com/attachment/26266012/0/smime.p7s" target="_top">Download Attachment</a></div><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26265597Re: Could not connect to database2009-11-09T04:27:02Z2009-11-09T04:27:02ZFlorian Effenberger-3Hi Mark,
<br><br>> The message 'Could not connect to database' does not come directly
<br>> neither from amavisd nor from SpamAssassin. It seems to occur during
<br>> loading ('require') or perl modules needed by SpamAssassin, so attention
<br>> should be directed there. I couldn't find the message in question
<br>> by searching through all .pm modules in the library, so it is either
<br>> spliced together from components, or more likely, coming from one
<br>> of the underlying libraries, perhaps your PAM login authentication.
<br><br>wow, thanks a lot! Indeed, you seem to be right. The error seems to be
<br>caused from entires in /etc/nsswitch.conf that FusionForge set up.
<br>After removal of FF, it all worked fine again. I guess that
<br>amavisd-new and/or SA tried to get user data from the added database,
<br>and did not succeed.
<br><br>Thanks for your fast help!
<br><br>Florian
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26265421Re: Could not connect to database2009-11-09T04:11:23Z2009-11-09T04:11:23ZMark MartinecFlorian,
<br><div class='shrinkable-quote'><br>> all of a sudden, on my Ubuntu 9.04 machine with amavids-new 2.6.2 and
<br>> SpamAssassin 3.2.5, I get the following error when starting:
<br>> [...]
<br>> I found out that if I disable SpamAssassin, everything works fine
<br>> again. It might be related to an unfinished FusionForge installation,
<br>> but I can't find out why it doesn't work. Anyone has an idea what
<br>> might cause the error message? sa-update -D works fine, so the basic
<br>> database seems to be existing, and I couldn't find any changes neither
<br>> in amavisd nor in SpamAssassin configuration.
<br>>
<br>> Nov 9 09:19:56.250 myserver /usr/sbin/amavisd-new[30023]: Perl
<br>> version 5.010000
<br>>
<br>> Could not connect to database
<br>> Nov 9 09:19:56.775 myserver /usr/sbin/amavisd-new[30023]: INFO: SA
<br>> version: 3.2.5, 3.002005, no optional modules: Net::CIDR::Lite
<br>> Encode::Detect IP::Country::Fast Image::Info Image::Info::GIF
<br>> Image::Info::JPEG Image::Info::PNG Image::Info::TIFF
</div><br>The message 'Could not connect to database' does not come directly
<br>neither from amavisd nor from SpamAssassin. It seems to occur during
<br>loading ('require') or perl modules needed by SpamAssassin, so attention
<br>should be directed there. I couldn't find the message in question
<br>by searching through all .pm modules in the library, so it is either
<br>spliced together from components, or more likely, coming from one
<br>of the underlying libraries, perhaps your PAM login authentication.
<br><br>> sa-update -D works fine
<br><br>Try: su vscan -c 'spamassassin -D -t <test.msg'
<br>(run it under the same user as amavisd is runnning under)
<br><br><br> Mark
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26265356Re: New to Spamassassin. Have a few ?s...2009-11-09T04:06:34Z2009-11-09T04:06:34ZAnthony Cartmell> Generally matters like this are handled by integration tools such as
<br>> MailScanner, amavisd-new, etc, although I do not know of any that
<br>> provide comprehensive quarantine management. That said, I've never
<br>> desired such, so I've not looked at length for one. (I mostly just tag
<br>> mail, and let users filter at the client level as they see fit.)
<br><br>The (slightly-dormant) MailWatch project integrates with MailScanner and
<br>SpamAssassin to add quarantine notifications, management, message release,
<br>etc. It stores message information in MySQL which you can query to find
<br>interesting things.
<br><br>Anthony
<br>--
<br>www.fonant.com - Quality web sites
<br>Fonant Ltd is registered in England and Wales, company No. 7006596
<br>Registered office: Grafton Lodge, 15 Grafton Road, Worthing, West Sussex,
<br>BN11 1QR
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26262772Could not connect to database2009-11-09T00:33:10Z2009-11-09T00:33:10ZFlorian Effenberger-3Hello,
<br><br>all of a sudden, on my Ubuntu 9.04 machine with amavids-new 2.6.2 and
<br>SpamAssassin 3.2.5, I get the following error when starting:
<br><br># /etc/init.d/amavis start
<br>Starting amavisd:
<br>Could not connect to database
<br>amavisd-new.
<br><br>I found out that if I disable SpamAssassin, everything works fine
<br>again. It might be related to an unfinished FusionForge installation,
<br>but I can't find out why it doesn't work. Anyone has an idea what
<br>might cause the error message? sa-update -D works fine, so the basic
<br>database seems to be existing, and I couldn't find any changes neither
<br>in amavisd nor in SpamAssassin configuration.
<br><br>amavisd-new debug gives the following (relevant) output:
<br><br>==
<br>Nov 9 09:19:56.250 myserver /usr/sbin/amavisd-new[30023]: starting.
<br>/usr/sbin/amavisd-new at myserver amavisd-new-2.6.2 (20081215),
<br>Unicode aware, LANG="de_DE.UTF-8"
<br>Nov 9 09:19:56.250 myserver /usr/sbin/amavisd-new[30023]: user=,
<br>EUID: 108 (108); group=, EGID: 116 116 (116 116)
<br>Nov 9 09:19:56.250 myserver /usr/sbin/amavisd-new[30023]: Perl
<br>version 5.010000
<br><br>Could not connect to database
<br>Nov 9 09:19:56.775 myserver /usr/sbin/amavisd-new[30023]: INFO: SA
<br>version: 3.2.5, 3.002005, no optional modules: Net::CIDR::Lite
<br>Encode::Detect IP::Country::Fast Image::Info Image::Info::GIF
<br>Image::Info::JPEG Image::Info::PNG Image::Info::TIFF
<br>Nov 9 09:19:56.775 myserver /usr/sbin/amavisd-new[30023]:
<br>SpamControl: init_pre_chroot on SpamAssassin done
<br>Nov 9 09:19:56.776 myserver /usr/sbin/amavisd-new[30023]:
<br>Net::Server: 2009/11/09-09:19:56 Amavis (type
<br>Net::Server::PreForkSimple) starting! pid(30023)
<br>[...]
<br>Nov 9 09:19:56.823 myserver /usr/sbin/amavisd-new[30023]: Creating db
<br>in /var/lib/amavis/db/; BerkeleyDB 0.34, libdb 4.6
<br>Nov 9 09:19:59.897 myserver /usr/sbin/amavisd-new[30023]:
<br>SpamControl: initializing Mail::SpamAssassin
<br>Nov 9 09:19:59.897 myserver /usr/sbin/amavisd-new[30023]:
<br>SpamAssassin debug facilities: info
<br><br>Could not connect to database
<br>Nov 9 09:20:02.283 myserver /usr/sbin/amavisd-new[30023]:
<br>SpamControl: init_pre_fork on SpamAssassin done
<br>Nov 9 09:20:02.283 myserver /usr/sbin/amavisd-new[30023]:
<br>Net::Server: Beginning prefork (2 processes)
<br>Nov 9 09:20:02.284 myserver /usr/sbin/amavisd-new[30023]:
<br>Net::Server: Starting "2" children
<br>[...]
<br>==
<br><br>The mail log files do not contain any errors.
<br><br>I didn't modify the configuration in the last months according to the
<br>date/time stamp.
<br><br>Thanks,
<br>Florian
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26261313Re: New to Spamassassin. Have a few ?s...2009-11-08T20:55:43Z2009-11-08T20:55:43ZKurt BuffOn Sun, Nov 8, 2009 at 19:30, Computerflake <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26261313&i=0" target="_top" rel="nofollow">gledford@...</a>> wrote:
<div class='shrinkable-quote'><br>>
<br>> I'm looking into a free spam filter that can do the following. Will
<br>> Spamassassin do these things?
<br>>
<br>> 1) Will it filter multiple domains so I can filter for many different
<br>> companies?
<br>> 2) Will it send individual users an email once a day (for example) to inform
<br>> them of the spam that was captured in case they were not actually spam?
<br>> 3) Will it allow users to add people to an individual whitelist so they can
<br>> handle their own spam settings?
<br>> 4) I understand it connects in to ClamAV using a plugin. How easy is it to
<br>> install the plugin so I can also scan for viruses for folks?
<br>>
<br>> Thanks for any help. I don't want to spend a fortune on a spam filter if I
<br>> can find a free filter that will do everything I would need.
</div><br>Try this:
<br><br><a href="http://www.maiamailguard.com" target="_top" rel="nofollow">http://www.maiamailguard.com</a><br><br>Kurt
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26261298Re: New to Spamassassin. Have a few ?s...2009-11-08T20:53:16Z2009-11-08T20:53:16ZAaron WolfeOn Sun, Nov 8, 2009 at 11:43 PM, Computerflake <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26261298&i=0" target="_top" rel="nofollow">gledford@...</a>> wrote:
<div class='shrinkable-quote'><br>>
<br>>
<br>>
<br>>> Directly? No.. SpamAssassin, by itself, is really just a scanning engine
<br>>> with header modification abilities. It does not do email management,
<br>>> quarantines, etc at all. It receives a message, evaluates it, and
<br>>> modifies it based on the results, nothing more, nothing less. (this is
<br>>> done to make SA flexible.. it's a mail pipe, so you can glue it into
<br>>> almost anything.)
<br>>>
<br>>> Generally matters like this are handled by integration tools such as
<br>>> MailScanner, amavisd-new, etc, although I do not know of any that
<br>>> provide comprehensive quarantine management. That said, I've never
<br>>> desired such, so I've not looked at length for one. (I mostly just tag
<br>>> mail, and let users filter at the client level as they see fit.)
<br>>>
<br>>> See also:
<br>>> <a href="http://wiki.apache.org/spamassassin/IntegratedInMta" target="_top" rel="nofollow">http://wiki.apache.org/spamassassin/IntegratedInMta</a><br>>>
<br>>
<br>> Wow. Really? Barracuda and Sonicwall both include this feature and it's one
</div><br>You're comparing apples to oranges. SA can be used as one part of a
<br>system that does the same things that those products do. It is not,
<br>by itself, the same thing. Barracuda is to automobile as SA is to
<br>gasoline engine.
<br><br><br>> of the most popular features my clients (who own these products) enjoy. I'll
<br>> have to take a look at the products you mentioned. Anyone else have any
<br>> experience with these types of functions?
<br>> --
<br>> View this message in context: <a href="http://old.nabble.com/New-to-Spamassassin.-Have-a-few--s...-tp26260803p26261237.html" target="_top" rel="nofollow">http://old.nabble.com/New-to-Spamassassin.-Have-a-few--s...-tp26260803p26261237.html</a><br>> Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
<br>>
<br>>
<br><p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>tag:old.nabble.com,2006:post-26261237Re: New to Spamassassin. Have a few ?s...2009-11-08T20:43:17Z2009-11-08T20:43:17ZComputerflake<blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-message shrinkable-quote">Directly? No.. SpamAssassin, by itself, is really just a scanning engine
<br>with header modification abilities. It does not do email management,
<br>quarantines, etc at all. It receives a message, evaluates it, and
<br>modifies it based on the results, nothing more, nothing less. (this is
<br>done to make SA flexible.. it's a mail pipe, so you can glue it into
<br>almost anything.)
<br><br>Generally matters like this are handled by integration tools such as
<br>MailScanner, amavisd-new, etc, although I do not know of any that
<br>provide comprehensive quarantine management. That said, I've never
<br>desired such, so I've not looked at length for one. (I mostly just tag
<br>mail, and let users filter at the client level as they see fit.)
<br><br>See also:
<br><a href="http://wiki.apache.org/spamassassin/IntegratedInMta" target="_top" rel="nofollow">http://wiki.apache.org/spamassassin/IntegratedInMta</a></div>
</div></blockquote>
Wow. Really? Barracuda and Sonicwall both include this feature and it's one of the most popular features my clients (who own these products) enjoy. I'll have to take a look at the products you mentioned. Anyone else have any experience with these types of functions?<p>From forum: <a href="http://old.nabble.com/SpamAssassin---Users-f195.html" embed="fixTarget[195]" target="_top" >SpamAssassin - Users</a></p>