You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Kevin Miller <Ke...@ci.juneau.ak.us> on 2014/03/20 21:25:34 UTC
KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC are clobbering a lot of legitimate mail. I'd like to drop the score. Can I just put
score KAM_BODY_URIBL_PCCC 1.0
score KAM_FROM_URIBL_PCCC 1.0
in local.cf? Since KAM.cf changes frequently there's no point in changing it there. I presume that local.cf is the last thing read so overrides other scores and settings.
Thanks...
...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4500
Registered Linux User No: 307357
Re: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
On 3/20/2014 4:37 PM, Joe Quinn wrote:
> On 3/20/2014 4:25 PM, Kevin Miller wrote:
>> KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC are clobbering a lot of
>> legitimate mail. I'd like to drop the score. Can I just put
>> score KAM_BODY_URIBL_PCCC 1.0
>> score KAM_FROM_URIBL_PCCC 1.0
>> in local.cf? Since KAM.cf changes frequently there's no point in
>> changing it there. I presume that local.cf is the last thing read so
>> overrides other scores and settings.
>>
>> Thanks...
>>
>> ...Kevin
>> --
>> Kevin Miller
>> Network/email Administrator, CBJ MIS Dept.
>> 155 South Seward Street
>> Juneau, Alaska 99801
>> Phone: (907) 586-0242, Fax: (907) 586-4500
>> Registered Linux User No: 307357
> We would be very interested to know what FPs you have found.
>
> In the meantime, that should theoretically work for dropping our RBL
> score. Even if local.cf isn't the last loaded, 'L' still sorts after
> 'K'. :)
>
> Regards,
> JMQ
Are you running a current copy of KAM.cf? We found a bug where the
octet for the RBL match was not implemented in SA. We fixed that code
and change KAM.cf. So unless you are A) running the latest KAM.cf and
B) running SVN trunk, you should not even be hitting KAM_BODY_URIBL_PCCC.
But yes, we had a FP issue where we listed Yahoo.com (and some others)
in a whitelist/ignore octet and the code treated it as a blacklist.
Yikes! and thanks to Mark Sapiro for pointing it out!
regards,
KAM
RE: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
Posted by Email Lists07 <li...@abbacomm.net>.
Orig---From: Kevin A.
Good luck and one correction KAM_FROM_URIBL_PCCC was disabled unless you are
running svn trunk
Greetings,
Is this the proper place to download the cf file ?
http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf
if so, it doesn't appear to us that KAM_BODY_URIBL_PCCC or
KAM_FROM_URIBL_PCCC are disabled.
how and where are they disabled ?
- rh
Re: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
Posted by "Kevin A. McGrail" <KM...@PCCC.com>.
Good luck and one correction KAM_FROM_URIBL_PCCC was disabled unless you
are running svn trunk
Regards,
KAM
On 3/20/2014 5:54 PM, Kevin Miller wrote:
> Sorry for top-posting. Jeepers Outlook drives me nuts.
> Anyway, I'd be happy to get some samples to you folks for further diagnosis. I'll drop them in pastebin and let you know out of band.
>
> This afternoon I have to take off and mount some antennas on the side of a building and I'll be out tomorrow, but Monday morning I should be able to work on this.
>
> Thanks much...
>
> ...Kevin
> --
> Kevin Miller
> Network/email Administrator, CBJ MIS Dept.
> 155 South Seward Street
> Juneau, Alaska 99801
> Phone: (907) 586-0242, Fax: (907) 586-4500
> Registered Linux User No: 307357
>
> -----Original Message-----
> From: Joe Quinn [mailto:jquinn@pccc.com]
> Sent: Thursday, March 20, 2014 12:37 PM
> To: users@spamassassin.apache.org
> Subject: Re: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
>
> On 3/20/2014 4:25 PM, Kevin Miller wrote:
>> KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC are clobbering a lot of legitimate mail. I'd like to drop the score. Can I just put
>> score KAM_BODY_URIBL_PCCC 1.0
>> score KAM_FROM_URIBL_PCCC 1.0
>> in local.cf? Since KAM.cf changes frequently there's no point in changing it there. I presume that local.cf is the last thing read so overrides other scores and settings.
>>
>> Thanks...
>>
>> ...Kevin
>> --
>> Kevin Miller
>> Network/email Administrator, CBJ MIS Dept.
>> 155 South Seward Street
>> Juneau, Alaska 99801
>> Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No:
>> 307357
> We would be very interested to know what FPs you have found.
>
> In the meantime, that should theoretically work for dropping our RBL score. Even if local.cf isn't the last loaded, 'L' still sorts after 'K'. :)
>
> Regards,
> JMQ
--
*Kevin A. McGrail*
President
Peregrine Computer Consultants Corporation
3927 Old Lee Highway, Suite 102-C
Fairfax, VA 22030-2422
http://www.pccc.com/
703-359-9700 x50 / 800-823-8402 (Toll-Free)
703-359-8451 (fax)
KMcGrail@PCCC.com <ma...@pccc.com>
RE: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
Posted by Kevin Miller <Ke...@ci.juneau.ak.us>.
Sorry for top-posting. Jeepers Outlook drives me nuts.
Anyway, I'd be happy to get some samples to you folks for further diagnosis. I'll drop them in pastebin and let you know out of band.
This afternoon I have to take off and mount some antennas on the side of a building and I'll be out tomorrow, but Monday morning I should be able to work on this.
Thanks much...
...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4500
Registered Linux User No: 307357
-----Original Message-----
From: Joe Quinn [mailto:jquinn@pccc.com]
Sent: Thursday, March 20, 2014 12:37 PM
To: users@spamassassin.apache.org
Subject: Re: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
On 3/20/2014 4:25 PM, Kevin Miller wrote:
> KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC are clobbering a lot of legitimate mail. I'd like to drop the score. Can I just put
> score KAM_BODY_URIBL_PCCC 1.0
> score KAM_FROM_URIBL_PCCC 1.0
> in local.cf? Since KAM.cf changes frequently there's no point in changing it there. I presume that local.cf is the last thing read so overrides other scores and settings.
>
> Thanks...
>
> ...Kevin
> --
> Kevin Miller
> Network/email Administrator, CBJ MIS Dept.
> 155 South Seward Street
> Juneau, Alaska 99801
> Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No:
> 307357
We would be very interested to know what FPs you have found.
In the meantime, that should theoretically work for dropping our RBL score. Even if local.cf isn't the last loaded, 'L' still sorts after 'K'. :)
Regards,
JMQ
Re: KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC
Posted by Joe Quinn <jq...@pccc.com>.
On 3/20/2014 4:25 PM, Kevin Miller wrote:
> KAM_BODY_URIBL_PCCC and KAM_FROM_URIBL_PCCC are clobbering a lot of legitimate mail. I'd like to drop the score. Can I just put
> score KAM_BODY_URIBL_PCCC 1.0
> score KAM_FROM_URIBL_PCCC 1.0
> in local.cf? Since KAM.cf changes frequently there's no point in changing it there. I presume that local.cf is the last thing read so overrides other scores and settings.
>
> Thanks...
>
> ...Kevin
> --
> Kevin Miller
> Network/email Administrator, CBJ MIS Dept.
> 155 South Seward Street
> Juneau, Alaska 99801
> Phone: (907) 586-0242, Fax: (907) 586-4500
> Registered Linux User No: 307357
We would be very interested to know what FPs you have found.
In the meantime, that should theoretically work for dropping our RBL
score. Even if local.cf isn't the last loaded, 'L' still sorts after 'K'. :)
Regards,
JMQ