You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by m....@gmail.com on 2006/11/01 08:56:07 UTC
Re[2]: why this spam has a negative score?
Dobrý den,
24. ríjna 2006, 8:05:06, napsal jste:
> m.donicova@gmail.com wrote to me off list:
>> So, how whitelist the e-mail from users in my domain?
> I'd be asking myself why there's a need to whitelist my own users.
> Afterall, if you have to whitelist them to avoid their messages being
> marked as spam, what do you expect is going to happen when their mail
> arrives at other domains?
> In any case, you could use whitelist_from_rcvd, whitelist_from_spf
> whitelist_from_dkim or whitelist_from_dk. Or don't even bother scanning
> local mail.
> Daryl
I edit my local.cf to:
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
###########################################################################
#
# rewrite_header Subject *****SPAM*****
rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
whitelist_from *@ica.cz
trusted_networks 10.0.0/23 127/8
whitelist_from_rcvd *@muvalmez.cz muvalmez.cz
##########################################################################
use_bayes 1
bayes_auto_learn 1
# Enable or disable network checks
skip_rbl_checks 0
use_razor2 1
#use_dcc 1
use_pyzor 1
# Mail using languages used in these country codes will not be marked
# as being possibly spam in a foreign language.
# - czech english german polish russian slovak
ok_languages cs
# Mail using locales used in these country codes will not be marked
# as being possibly spam in a foreign language.
ok_locales cs
bayes_path /var/spool/spamassassin/bayes/bayes
bayes_file_mode 0777
although I find this spam with negative score:
Return-Path: <ky...@muvalmez.cz>
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on fw.muvalmez.cz
X-Spam-Status: No, score=-80.4 required=5.0 tests=BAYES_50,EXTRA_MPART_TYPE,
FROM_LOCAL_NOVOWEL,HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_90_100,
HTML_IMAGE_ONLY_08,HTML_MESSAGE,MIME_HTML_MOSTLY,MY_CID_AND_CLOSING,
MY_CID_AND_STYLE,SARE_GIF_ATTACH,SARE_GIF_STOX,UNPARSEABLE_RELAY,
USER_IN_WHITELIST autolearn=no version=3.1.5
X-Spam-Level:
X-Original-To: kys@muvalmez.cz
Received: from adsl-074-246-243-216.sip.ard.bellsouth.net (adsl-074-246-243-216.sip.ard.bellsouth.net [74.246.243.216])
by fw.muvalmez.cz (Postfix) with ESMTP id 5DC9E2C092
for <ky...@muvalmez.cz>; Tue, 31 Oct 2006 22:17:37 +0100 (CET)
Received: from mail.roschemanagement.de (port=15557 helo=hfksmjdhqtfa)
by adsl-074-246-243-216.sip.ard.bellsouth.net with smtp
id 46D6-mPwO8R8w-Hn4
for kys@muvalmez.cz; Tue, 31 Oct 2006 16:17:39 -0500
Message-ID: <00...@hfksmjdhqtfa>
From: "Ricky Martin" <gs...@rose-kim.com>
To: kys@muvalmez.cz
Subject: your spiritual side of the rising in all, the. I fuse a
Date: Tue, 31 Oct 2006 16:17:39 -0500
--
S pozdravem,
m.donicova@gmail.com
mailto:m.donicova@gmail.com
Re: why this spam has a negative score?
Posted by Alan Premselaar <al...@12inch.com>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
m.donicova@gmail.com wrote:
> I edit my setting to:
>
> whitelist_from_rcvd * fw.muvalmez.cz
>
> the spam with negative score is coming through spamassassin again
>
> Return-Path: <ky...@muvalmez.cz>
> X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on fw.muvalmez.cz
> X-Spam-Status: No, score=-80.5 required=5.0 tests=BAYES_50,DC_GIF_UNO_LARGO,
> DC_IMAGE_SPAM_HTML,DC_IMAGE_SPAM_TEXT,DC_IMG_HTML_RATIO,
> DC_IMG_TEXT_RATIO,EXTRA_MPART_TYPE,HTML_90_100,HTML_IMAGE_ONLY_08,
> HTML_MESSAGE,MIME_HTML_MOSTLY,MY_CID_AND_CLOSING,MY_CID_AND_STYLE,
> SARE_GIF_ATTACH,SARE_GIF_STOX,UNPARSEABLE_RELAY,USER_IN_WHITELIST
^^^^^^^^^^^^^^
You don't happen to have *@muvalmez.cz in your whitelist do you?
Alan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFSYrvE2gsBSKjZHQRAuIyAKDsNuKCRJF1cediMAhFrlj/EPTuuwCgg1si
//6OQ9JjPbissU9bTrm/8lI=
=CRaS
-----END PGP SIGNATURE-----
Re[4]: why this spam has a negative score?
Posted by m....@gmail.com.
I edit my setting to:
whitelist_from_rcvd * fw.muvalmez.cz
the spam with negative score is coming through spamassassin again
Return-Path: <ky...@muvalmez.cz>
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on fw.muvalmez.cz
X-Spam-Status: No, score=-80.5 required=5.0 tests=BAYES_50,DC_GIF_UNO_LARGO,
DC_IMAGE_SPAM_HTML,DC_IMAGE_SPAM_TEXT,DC_IMG_HTML_RATIO,
DC_IMG_TEXT_RATIO,EXTRA_MPART_TYPE,HTML_90_100,HTML_IMAGE_ONLY_08,
HTML_MESSAGE,MIME_HTML_MOSTLY,MY_CID_AND_CLOSING,MY_CID_AND_STYLE,
SARE_GIF_ATTACH,SARE_GIF_STOX,UNPARSEABLE_RELAY,USER_IN_WHITELIST
autolearn=no version=3.1.5
X-Spam-Level:
X-Original-To: kys@muvalmez.cz
Received: from tm.net.my (unknown [219.95.18.47])
by fw.muvalmez.cz (Postfix) with ESMTP id 4C3292C0EB
for <ky...@muvalmez.cz>; Wed, 1 Nov 2006 10:25:29 +0100 (CET)
Received: from mailin.webmailer.de (port=1513 helo=ctwumfepkgu)
by tm.net.my with smtp
id 1856q-VwQ6-2u
for kys@muvalmez.cz; Wed, 01 Nov 2006 17:25:34 +0800
Message-ID: <00...@ctwumfepkgu>
From: "Curtis Lopez" <pa...@stb-finger.de>
To: kys@muvalmez.cz
Subject: high priest representative on Askone invent them.
Date: Wed, 01 Nov 2006 17:25:34 +0800
MIME-Version: 1.0
X-Security: MIME headers sanitized on fw.muvalmez.cz
See http://www.impsec.org/email-tools/sanitizer-intro.html
for details. $Revision: 1.139 $Date: 2003-09-07 10:14:23-07
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000B_01C6FDDA.B2AB33A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.3 with clamscan / ClamAV 0.88.4/2137/Wed Nov 1 09:39:47 2006
Status:
X-Antivirus: AVG for E-mail 7.5.427 [268.13.21/510]
--
S pozdravem,
m.donicova@gmail.com
mailto:m.donicova@gmail.com
Re: Re[2]: why this spam has a negative score?
Posted by Nigel Frankcom <ni...@blue-canoe.net>.
On Wed, 1 Nov 2006 08:56:07 +0100, m.donicova@gmail.com wrote:
>Dobrý den,
>24. ríjna 2006, 8:05:06, napsal jste:
>
>> m.donicova@gmail.com wrote to me off list:
>>> So, how whitelist the e-mail from users in my domain?
>
>> I'd be asking myself why there's a need to whitelist my own users.
>> Afterall, if you have to whitelist them to avoid their messages being
>> marked as spam, what do you expect is going to happen when their mail
>> arrives at other domains?
>
>> In any case, you could use whitelist_from_rcvd, whitelist_from_spf
>> whitelist_from_dkim or whitelist_from_dk. Or don't even bother scanning
>> local mail.
>
>
>> Daryl
>
>I edit my local.cf to:
>
># This is the right place to customize your installation of SpamAssassin.
>#
># See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
># tweaked.
>#
>###########################################################################
>#
># rewrite_header Subject *****SPAM*****
>rewrite_header Subject *****SPAM*****
># report_safe 1
># trusted_networks 212.17.35.
># lock_method flock
>whitelist_from *@ica.cz
>trusted_networks 10.0.0/23 127/8
>whitelist_from_rcvd *@muvalmez.cz muvalmez.cz
>##########################################################################
>use_bayes 1
>bayes_auto_learn 1
># Enable or disable network checks
>skip_rbl_checks 0
>use_razor2 1
>#use_dcc 1
>use_pyzor 1
>
># Mail using languages used in these country codes will not be marked
># as being possibly spam in a foreign language.
># - czech english german polish russian slovak
>ok_languages cs
>
># Mail using locales used in these country codes will not be marked
># as being possibly spam in a foreign language.
>ok_locales cs
>bayes_path /var/spool/spamassassin/bayes/bayes
>bayes_file_mode 0777
>
>although I find this spam with negative score:
>
>Return-Path: <ky...@muvalmez.cz>
>X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on fw.muvalmez.cz
>X-Spam-Status: No, score=-80.4 required=5.0 tests=BAYES_50,EXTRA_MPART_TYPE,
> FROM_LOCAL_NOVOWEL,HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_90_100,
> HTML_IMAGE_ONLY_08,HTML_MESSAGE,MIME_HTML_MOSTLY,MY_CID_AND_CLOSING,
> MY_CID_AND_STYLE,SARE_GIF_ATTACH,SARE_GIF_STOX,UNPARSEABLE_RELAY,
> USER_IN_WHITELIST autolearn=no version=3.1.5
>X-Spam-Level:
>X-Original-To: kys@muvalmez.cz
>Received: from adsl-074-246-243-216.sip.ard.bellsouth.net (adsl-074-246-243-216.sip.ard.bellsouth.net [74.246.243.216])
> by fw.muvalmez.cz (Postfix) with ESMTP id 5DC9E2C092
> for <ky...@muvalmez.cz>; Tue, 31 Oct 2006 22:17:37 +0100 (CET)
>Received: from mail.roschemanagement.de (port=15557 helo=hfksmjdhqtfa)
> by adsl-074-246-243-216.sip.ard.bellsouth.net with smtp
> id 46D6-mPwO8R8w-Hn4
> for kys@muvalmez.cz; Tue, 31 Oct 2006 16:17:39 -0500
>Message-ID: <00...@hfksmjdhqtfa>
>From: "Ricky Martin" <gs...@rose-kim.com>
>To: kys@muvalmez.cz
>Subject: your spiritual side of the rising in all, the. I fuse a
>Date: Tue, 31 Oct 2006 16:17:39 -0500
You need to use whitelist_from_rcvd * muvalmez.cz (note the spaces)
With your current setting you are whitelisting anything that *says*
it's from muvalmez.cz rather than whitelist_from_rcvd which actually
checks the sending mailserver is valid for muvalmez.cz
HTH
Nigel
Re: Re[2]: why this spam has a negative score?
Posted by Nigel Frankcom <ni...@blue-canoe.net>.
On Wed, 1 Nov 2006 08:56:07 +0100, m.donicova@gmail.com wrote:
>Dobrý den,
>24. ríjna 2006, 8:05:06, napsal jste:
>
>> m.donicova@gmail.com wrote to me off list:
>>> So, how whitelist the e-mail from users in my domain?
>
>> I'd be asking myself why there's a need to whitelist my own users.
>> Afterall, if you have to whitelist them to avoid their messages being
>> marked as spam, what do you expect is going to happen when their mail
>> arrives at other domains?
>
>> In any case, you could use whitelist_from_rcvd, whitelist_from_spf
>> whitelist_from_dkim or whitelist_from_dk. Or don't even bother scanning
>> local mail.
>
>
>> Daryl
>
>I edit my local.cf to:
>
># This is the right place to customize your installation of SpamAssassin.
>#
># See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
># tweaked.
>#
>###########################################################################
>#
># rewrite_header Subject *****SPAM*****
>rewrite_header Subject *****SPAM*****
># report_safe 1
># trusted_networks 212.17.35.
># lock_method flock
>whitelist_from *@ica.cz
>trusted_networks 10.0.0/23 127/8
>whitelist_from_rcvd *@muvalmez.cz muvalmez.cz
>##########################################################################
>use_bayes 1
>bayes_auto_learn 1
># Enable or disable network checks
>skip_rbl_checks 0
>use_razor2 1
>#use_dcc 1
>use_pyzor 1
>
># Mail using languages used in these country codes will not be marked
># as being possibly spam in a foreign language.
># - czech english german polish russian slovak
>ok_languages cs
>
># Mail using locales used in these country codes will not be marked
># as being possibly spam in a foreign language.
>ok_locales cs
>bayes_path /var/spool/spamassassin/bayes/bayes
>bayes_file_mode 0777
>
>although I find this spam with negative score:
>
>Return-Path: <ky...@muvalmez.cz>
>X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on fw.muvalmez.cz
>X-Spam-Status: No, score=-80.4 required=5.0 tests=BAYES_50,EXTRA_MPART_TYPE,
> FROM_LOCAL_NOVOWEL,HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_90_100,
> HTML_IMAGE_ONLY_08,HTML_MESSAGE,MIME_HTML_MOSTLY,MY_CID_AND_CLOSING,
> MY_CID_AND_STYLE,SARE_GIF_ATTACH,SARE_GIF_STOX,UNPARSEABLE_RELAY,
> USER_IN_WHITELIST autolearn=no version=3.1.5
>X-Spam-Level:
>X-Original-To: kys@muvalmez.cz
>Received: from adsl-074-246-243-216.sip.ard.bellsouth.net (adsl-074-246-243-216.sip.ard.bellsouth.net [74.246.243.216])
> by fw.muvalmez.cz (Postfix) with ESMTP id 5DC9E2C092
> for <ky...@muvalmez.cz>; Tue, 31 Oct 2006 22:17:37 +0100 (CET)
>Received: from mail.roschemanagement.de (port=15557 helo=hfksmjdhqtfa)
> by adsl-074-246-243-216.sip.ard.bellsouth.net with smtp
> id 46D6-mPwO8R8w-Hn4
> for kys@muvalmez.cz; Tue, 31 Oct 2006 16:17:39 -0500
>Message-ID: <00...@hfksmjdhqtfa>
>From: "Ricky Martin" <gs...@rose-kim.com>
>To: kys@muvalmez.cz
>Subject: your spiritual side of the rising in all, the. I fuse a
>Date: Tue, 31 Oct 2006 16:17:39 -0500
Reading further through your mail rather than scanning it.. you would
need to replace...
whitelist_from_rcvd *@muvalmez.cz muvalmez.cz
with
whitelist_from_rcvd * fw.muvalmez.cz
The info following the * needs to be the fqdn of your mailserver, not
your domain as you currently seem to have.
Sorry for the earlier confusion.
Nigel