Re: [SAtalk] Auto-whitelist improvement ideas

2002-01-21 Thread Sidney Markowitz
What about a blacklist? Or am I forgetting that there already is one? The From addresses are usually faked, but I'm sure I see some names that repeat, such as "Jack Strap" for porn spam and "Denise Smith, MBA" for a whole bunch of money/insurance spam. It would be nice to be able to drop address

Re: [SAtalk] Re: Auto-whitelist improvement ideas

2002-01-21 Thread Justin Mason
> > The thing is, if a spammer is claiming to be an actual person, but > > isn't, then that person who's being impersonated almost certainly has > > legal recourse for damages from the spammer. If I were a spammer, I'd > > avoid doing this, just in case I used someone's address who cared enough

RE: [SAtalk] Re: Auto-whitelist improvement ideas

2002-01-21 Thread Craig Hughes
It doesn't actually invoke PGP or GPG to check anything, it's just seeing if you are claiming to have signed a message. C On Mon, 2002-01-21 at 23:16, Michael Moncur wrote: > The thing is, if a spammer is claiming to be an actual person, but > isn't, then that person who's being impe

RE: [SAtalk] Re: Auto-whitelist improvement ideas

2002-01-21 Thread Michael Moncur
> The thing is, if a spammer is claiming to be an actual person, but > isn't, then that person who's being impersonated almost certainly has > legal recourse for damages from the spammer. If I were a spammer, I'd > avoid doing this, just in case I used someone's address who cared enough > to com

Re: [SAtalk] Auto-whitelist improvement ideas

2002-01-21 Thread Craig Hughes
With spamd at least, you need to specify an option to turn it on.  It's off by default (or should be). C On Mon, 2002-01-21 at 06:28, Bruce Marshall wrote: Good pointAuto-Whitelist has been bothering me for awhile and I was about to ask for an option to turn it off. I occas

RE: [SAtalk] Auto-whitelist improvement ideas

2002-01-21 Thread Craig Hughes
On Mon, 2002-01-21 at 01:49, Matt Sergeant wrote: (*please* stop posting in HTML craig - it's a real PITA, especially because Outlooks "switch" to plain text doesn't do nice reply-quoting) I just found this "HTML" menu option to turn off per-message in Evolution -- I think that might be n

RE: [SAtalk] false positives

2002-01-21 Thread Craig Hughes
On Mon, 2002-01-21 at 01:42, Matt Sergeant wrote: Anyway, I'm going to try and get the GA running here, though I'm not sure how easy that will be since it seems to be targetted at mbox's, whereas I've got Maildir's... But I'll figure it out. mass-check should work fine with maildirs t

[SAtalk] Re: Auto-whitelist improvement ideas

2002-01-21 Thread Craig Hughes
The thing is, if a spammer is claiming to be an actual person, but isn't, then that person who's being impersonated almost certainly has legal recourse for damages from the spammer. If I were a spammer, I'd avoid doing this, just in case I used someone's address who cared enough to come after me.

[SAtalk] Re: [SA] »¶Ó­µÇ¼±¦°²¹©ÇóÐÅÏ¢Íø

2002-01-21 Thread Charlie Watts
How about a test for high-bit characters in the body of text/plain messages (that don't define a compatible charset)? Might not be useful, considering this was forwarded ... I haven't compared this idea against my mailboxes yet. On Tue, 22 Jan 2002, [EMAIL PROTECTED] wrote: > [[HTML-only versio

Re: [SAtalk] where's the F{ine}M regarding ok_locales?

2002-01-21 Thread Charlie Watts
On 20 Jan 2002, Craig Hughes wrote: > Just out of curiosity, how does multiple character sets work? If the > header says it's 4 different charsets, and it contains some character > that's defined differently in 2 of those, then which character is > supposed to be rendered? I don't think multipl

Re: [SAtalk] Auto white listing.

2002-01-21 Thread Justin Mason
brad said: > > How can I enable the directory and not db based whitelisting? I am > getting these messages in the debug? > > ebug: DB addr list: untie-ing and destroying lockfile. > debug: DB addr list: file locked, breaking lock. these messages are OK btw, they're just the tidying-up-afterw

Re: [SAtalk] razor not working

2002-01-21 Thread Justin Mason
Olivier Berger said: > It worked well for some days, but suddenly, razor seems to be broken : > when trying to report a mail as spam with a pipe to "spamassassin -r > -D", I get : > razor-report failed: Aucun fichier ou répertoire de ce type undefined Razor::Clie > nt > "Aucun fichier ou réperto

Re: {SPAM?} [SAtalk] Auto white listing.

2002-01-21 Thread Charlie Watts
No it didn't. I'll bet that your procmail (or whatever) filter is set up to catch things with "SPAM" in the Subject line. On Mon, 21 Jan 2002, Kelly Hamlin wrote: > Explain this :) > > this came as spam from spamassassin :P > > - Original Message - > From: "brad" <[EMAIL PROTECTED]> > Cc

Re: [SAtalk] I never expected this!

2002-01-21 Thread dman
On Mon, Jan 21, 2002 at 03:27:20PM -0700, Justin England wrote: | > I did some reading on using SA with mysql and this having the ability to | > enable / disable per user. Is there a simple interface to this or is | > mysql even required for what I am trying to do? | | In my local copy of my gl

Re: [SAtalk] where's the F{ine}M regarding ok_locales?

2002-01-21 Thread Ian Briggs
On Mon, 21 Jan 2002, Jeremy Zawodny wrote: > We have users who get a lot of Big5 spam that SA doesn't catch right > now. :-( I'm not sure what the SA syntax would be, but I'm using procmail to catch them with: :0 * ^Subject:.*big5 mail/junk_mail Ian

Re: [SAtalk] false negative

2002-01-21 Thread Justin Mason
dman said: > On Mon, Jan 21, 2002 at 03:50:15PM +1100, Justin Mason wrote: > | dman said: > | > | > A spam got through, but this addition catches it : > | > > | > header INVALID_DATE_STAR Date =~ /\*+/ > | > describeINVALID_DATE_STAR Date: contains '*' > | > score INVALID_DAT

Re: [SAtalk] I never expected this!

2002-01-21 Thread Justin England
> > I did some reading on using SA with mysql and this having the ability to > enable / disable per user. Is there a simple interface to this or is > mysql even required for what I am trying to do? In my local copy of my global prefs, I have required_hits 80, then when one of my customers wants

Re: [SAtalk] where's the F{ine}M regarding ok_locales?

2002-01-21 Thread Jeremy Zawodny
On Mon, Jan 21, 2002 at 10:59:32AM -0500, dman wrote: > > I get lots of korean spam. I don't see much Big5 actually, (though > someone writes in english, plain ascii, yet sets their charset to > Big5; too bad for them (I actually asked him about it but no > repsonse)). We have users who get a l

[SAtalk] false positives on conference announcements

2002-01-21 Thread Tom Lipkis
Conference announcements often contain the phrase "the following format" when requesting submissions, which matches the THE_FOLLOWING_FORM rule, which has a quite high score. Adding \W to the end of the pattern prevents this, and seems safe in general. Tom __

RE: [SAtalk] Postfix set-up and Mail loops

2002-01-21 Thread Tony Hoyle
> -Original Message- > From: John Weissberg [mailto:[EMAIL PROTECTED]] > Sent: 21 January 2002 18:02 > To: Tony Hoyle > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Postfix set-up and Mail loops > > > I am using Postfix and now trying to set up SA via spamd. I > seem to be creating >

[SAtalk] razor not working

2002-01-21 Thread Olivier Berger
Hi. I've recently installed spamassassin and razor (debian testing system). It worked well for some days, but suddenly, razor seems to be broken : when trying to report a mail as spam with a pipe to "spamassassin -r -D", I get : debug: using "/usr/share/spamassassin/spamassassin.cf" for defaul

[SAtalk] 2.0 failing for me on "make test"

2002-01-21 Thread Lisa Applegate
Hi! I'm hoping this is just a stupid pilot error mistake on my part, but whenever I do "make test" on my SpamAssassin install, it fails with a huge list of errors, all relating to "Failed to run MISSING_HEADERS SpamAssassin test". I've put the entire error message on a web server, since it's fai

Re: [SAtalk] Postfix set-up and Mail loops

2002-01-21 Thread John Weissberg
I am using Postfix and now trying to set up SA via spamd. I seem to be creating mail-loops with the spamc pipe to sendmail in the spamfilter file called from Postfix master.cf. It seems that mails that spanc scans are being output via sendmail into a queue that will be scanned by spamc again etc.

Re: {SPAM?} [SAtalk] Auto white listing.

2002-01-21 Thread Kelly Hamlin
Explain this :) this came as spam from spamassassin :P - Original Message - From: "brad" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, January 21, 2002 11:44 AM Subject: {SPAM?} [SAtalk] Auto white listing. > > How can I enable the directory and not db based whitelisting?

[SAtalk] Auto white listing.

2002-01-21 Thread brad
How can I enable the directory and not db based whitelisting? I am getting these messages in the debug? ebug: DB addr list: untie-ing and destroying lockfile. debug: DB addr list: file locked, breaking lock. ___ Spamassassin-talk mailing list [EMAI

Re: [SAtalk] false negative

2002-01-21 Thread dman
On Mon, Jan 21, 2002 at 03:50:15PM +1100, Justin Mason wrote: | dman said: | | > A spam got through, but this addition catches it : | > | > header INVALID_DATE_STAR Date =~ /\*+/ | > describeINVALID_DATE_STAR Date: contains '*' | > score INVALID_DATE_STAR 3.2 | > | | could

Re: [SAtalk] where's the F{ine}M regarding ok_locales?

2002-01-21 Thread dman
On Mon, Jan 21, 2002 at 07:04:57PM +1100, Justin Mason wrote: | | Craig Hughes said: | | > Well, some of the ISO-8859-* should be "far away", shouldn't they? | > Weren't we treating some russian character set as "far away" not too | > long ago? How is say, arabic (8859-6) "closer" than russian

RE: [SAtalk] Quick Question

2002-01-21 Thread Matt Sergeant
> -Original Message- > From: Scott Pilz [mailto:[EMAIL PROTECTED]] > > We run Spam Assassin with the Razor option - and it does a good > job (from what I can tell). With new spam "tactics" being > found daily, I > fear that spammers may catch on to the "point system" that > spam a

[SAtalk] Quick Question

2002-01-21 Thread Scott Pilz
We run Spam Assassin with the Razor option - and it does a good job (from what I can tell). With new spam "tactics" being found daily, I fear that spammers may catch on to the "point system" that spam assassin runs and will easily be able to produce messages that will not look like spam t

Re: [SAtalk] Auto-whitelist improvement ideas

2002-01-21 Thread Bruce Marshall
On Monday 21 January 2002 3:02 am, Craig Hughes wrote: > Spinning off this initial topic, I'm interested in hearing feedback from > people on auto-whitelists.  My own experience is that some "gray" > spammers (people whose junk I might well have accidentally subscribed to > in the past) tend to ov

Re: Re: [SAtalk] Still: None of the Spam is detected

2002-01-21 Thread Dean Bishop
turns out i had a couple of problems. the lack of Net:DNS was one. Once i had that done SA -D worked so long as my pwd was not the user's home dir. For some reason, if SA found a .spamassassin.cf then it read this file and ignored the common file.i am now running version 2.0 and it is

[SAtalk] Re: Auto-whitelist improvement ideas

2002-01-21 Thread Aaron Swartz
On 2002-01-21 2:02 AM, "Craig Hughes" <[EMAIL PROTECTED]> wrote: > I'm interested in hearing feedback from people on auto-whitelists. One concern that comes to mind is the recent practice of taking email addresses of popular posters to mailing lists and using them as the return address for spam.

RE: [SAtalk] make test fails (install Mail::Spamassassin)

2002-01-21 Thread Matt Sergeant
> -Original Message- > From: Olivier M. [mailto:[EMAIL PROTECTED]] > > Hi, FYI, install Mail::Spamassassin (via cpan) never worked > on the systems > I'm using (Suse linux-7.3 based): it always finish this way: > > t/forged_rcvd...ok >

[SAtalk] make test fails (install Mail::Spamassassin)

2002-01-21 Thread Olivier M.
Hi, FYI, install Mail::Spamassassin (via cpan) never worked on the systems I'm using (Suse linux-7.3 based): it always finish this way: t/forged_rcvd...ok t/nonspam...ok t/re

RE: [SAtalk] Auto-whitelist improvement ideas

2002-01-21 Thread Matt Sergeant
(*please* stop posting in HTML craig - it's a real PITA, especially because Outlooks "switch" to plain text doesn't do nice reply-quoting) Can you tell us how the auto-whitelist algorithm works? Surely it should be an average system, so that 3 spams over time don't have much effect on the overall

RE: [SAtalk] false positives

2002-01-21 Thread Matt Sergeant
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > > mike castleman said: > > > 1) Any tips for reducing this number? Most of the messages are not > >especially private, so I can forward them or put them on the web > >somewhere if people want. I don't wan

Re: [SAtalk] false positives

2002-01-21 Thread mike castleman
On Sat, Jan 19, 2002 at 12:44:10AM -0500, mike castleman wrote: > 2) And, for when false positives do occur, has anyone yet hacked up a >mutt macro for running the message through spamassassin -d and >moving the message to another folder? So, there might be some prettier way, but here's w

Re: [SAtalk] where's the F{ine}M regarding ok_locales?

2002-01-21 Thread mike castleman
I get a lot of spam in the gb2312 charset. On Mon, Jan 21, 2002 at 07:04:57PM +1100, Justin Mason wrote: > > I dunno. To tell the truth, I think the locales test isn't working as > well as it should; perhaps it should be broken down into a "message is in > random foreign charset" and a "message

Re: [SAtalk] where's the F{ine}M regarding ok_locales?

2002-01-21 Thread Justin Mason
Craig Hughes said: > Well, some of the ISO-8859-* should be "far away", shouldn't they? > Weren't we treating some russian character set as "far away" not too > long ago? How is say, arabic (8859-6) "closer" than russian? Or how is > 8859-5 (cyrillic) not russian? er, (waves hands) ;) I dun

[SAtalk] Auto-whitelist improvement ideas

2002-01-21 Thread Craig Hughes
Spinning off this initial topic, I'm interested in hearing feedback from people on auto-whitelists.  My own experience is that some "gray" spammers (people whose junk I might well have accidentally subscribed to in the past) tend to over time become auto-whitelisted (say they send 100 emails ov