[SAtalk] check_for_spam_reply_to() questions

2002-03-03 Thread Matthew Cline
check_for_spam_reply_to() uses get_address_commonality_ratio(), which checks to see how many characters the two addresses have in common. Why not compare the domains of the hosts for equality? Take the last three parts of the hostname for two letter TLDs ("foobar.co.uk") and the last two part

Re: [SAtalk] Having trouble getting people out of my auto-whitelist

2002-03-03 Thread Daniel Quinlan
Rob McMillin <[EMAIL PROTECTED]> writes: > The problem is exactly that -R doesn't work for me. I wrote a quick > script to delete everything in the dbm: -R was too inconvenient for me, so I wrote this. I have only tested it against SA 2.01. It may eat your whitelist or some other bad thing co

Re: [SAtalk] procmail error when forwarding to a razor database

2002-03-03 Thread Olivier Nicole
>Someone suggested doing an alias in /etc/mail/aliases that looked >like this: > >spam:"|/usr/bin/spamassassin -r" > >I keep getting a procmail error that says "unknown user". I am doing >"newaliases" in between each modification. before the message is handed to procmail for delivery, it mus

RE: [SAtalk] 2.11 released

2002-03-03 Thread Michael Moncur
> I just pushed out the new scores (and a bugfix or two) as 2.11 The new scores look MUCH better. By the way, using my corrected scores with 2.1 for the last few days, I've had excellent results. Not a single false positive and only a couple missed spams. I think the new scores will be even bette

[SAtalk] Unable to find Razor::Client?

2002-03-03 Thread Donovan Lange
First of all, I'd like to thank you guys for developing some kick-ass software. You guys rock! :) I recently installed both SpamAssassin and Vipul's Razor. While they each work independently, spamassassin apparently has "issues" loading the razor_check. In particular, I get the error message "

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Lars Hansson
On Sun, 03 Mar 2002 20:15:25 -0800 "Rob McMillin" <[EMAIL PROTECTED]> wrote: > I would imagine it would work for others similarly situated. And I would > seem to be in good company, with some US ISPs now taking the even more > drastic step of disabling port 25 for Chinese subnets (203/8, for in

[SAtalk] Re: procmail error when forwarding to a razor database

2002-03-03 Thread Mark
- Original Message - From: "Philip Guenther" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sunday, March 03, 2002 8:25 PM Subject: Re: procmail error when forwarding to a razor database > "Mike Loiterman" <[EMAIL PROTECTED]> writes: > >I'm

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Rob McMillin
Lars Hansson wrote: >On Sun, 03 Mar 2002 00:08:41 -0800 >"Rob McMillin" <[EMAIL PROTECTED]> wrote: > >>Let me get this straight -- we have ignorant and the willfully abusive >>people in these countries creating or abetting spam for others to deal >>with, and *we're* supposed to be concerned abo

Re: [SAtalk] 2.11 released

2002-03-03 Thread Duncan Findlay
On Sun, Mar 03, 2002 at 06:22:03PM -0800, Matthew Cline wrote: > On Sunday 03 March 2002 05:58 pm, Craig R Hughes wrote: > > I just pushed out the new scores (and a bugfix or two) as 2.11 > > > > The new scores are done by constraining the GA more, using Michael Moncur's > > submitted scores as a

RE: [SAtalk] Setting up Auto Razor Reporting?

2002-03-03 Thread Mike Loiterman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 It is: Mprog, P=/bin/sh, F=lsDFMoqeu9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL, D=$z:/, I have smrsh installed...can I just change it to /usr/libexec/smrsh which is where my smrsh is located. Mike Loiterman [EMAIL PROTECTED] >-Original

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Lars Hansson
On Sun, 03 Mar 2002 00:08:41 -0800 "Rob McMillin" <[EMAIL PROTECTED]> wrote: > Let me get this straight -- we have ignorant and the willfully abusive > people in these countries creating or abetting spam for others to deal > with, and *we're* supposed to be concerned about public relations? The

Re: [SAtalk] 2.11 released

2002-03-03 Thread Matthew Cline
On Sunday 03 March 2002 05:58 pm, Craig R Hughes wrote: > I just pushed out the new scores (and a bugfix or two) as 2.11 > > The new scores are done by constraining the GA more, using Michael Moncur's > submitted scores as a starting point, and then hand-tweaking the output > where basically any -

Re: [SAtalk] Country codes [was: A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Olivier Nicole
.ar is Argentina Olivier > >Both of them are code posted to BugTraq, one from Hong Kong and another > >from .ar[1]. > > > [...] > > >Footnotes: > >[1] I can't recall where this is. Austria, maybe? > > > Yes. See http://www.oasis-open.org/cover/country3166.html ___

[SAtalk] 2.11 released

2002-03-03 Thread Craig R Hughes
I just pushed out the new scores (and a bugfix or two) as 2.11 The new scores are done by constraining the GA more, using Michael Moncur's submitted scores as a starting point, and then hand-tweaking the output where basically any -ve scores that came out but which only existed in the corpus as

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Olivier Nicole
Hi Craig, >I agree that baseless discrimination is bad; however the goal here is >not to punish evil country, or the people who live in them. In fact, >the score of 3.0 for ROUND_THE_WORLD means that even if you happen to >have one of those TLDs, you still need to be sending something >spammy-lo

Re: [SAtalk] Install Problems

2002-03-03 Thread oacheson
> > # make > > make: *** No rule to make target spamassassin.raw', needed by spamassassin'. > > Stop. > > That's very very odd. Are you in the distribution directory? type 'ls' and see > if the spamassassin.raw file is there. What platform/OS/shell/perl/make are you > using? > Yes, I'm i

Re: [SAtalk] Country codes [was: A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Rob McMillin
Craig R Hughes wrote: >Rob McMillin wrote: > >>>Both of them are code posted to BugTraq, one from Hong Kong and another >>> >>>from .ar[1]. >> > >>>Footnotes: >>>[1] I can't recall where this is. Austria, maybe? >>> > >>Yes. See http://www.oasis-open.org/cover/country3166.html >> > >You mean no

Re: [SAtalk] Country codes [was: A better alternative to testROUND_THE_WORLD]

2002-03-03 Thread Craig R Hughes
Rob McMillin wrote: > >Both of them are code posted to BugTraq, one from Hong Kong and another > >from .ar[1]. > >Footnotes: > >[1] I can't recall where this is. Austria, maybe? > Yes. See http://www.oasis-open.org/cover/country3166.html You mean no, argentina! C _

Re: [SAtalk] Country codes [was: A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Rob McMillin
Daniel Pittman wrote: >Both of them are code posted to BugTraq, one from Hong Kong and another >from .ar[1]. > [...] >Footnotes: >[1] I can't recall where this is. Austria, maybe? > Yes. See http://www.oasis-open.org/cover/country3166.html -- http://www.pricegrabber.com | Dog is my

[SAtalk] Re: A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Daniel Pittman
On Sun, 3 Mar 2002, Craig R. Hughes wrote: [...] > It's great to hear that SA is increasingly being viewed as the #1 anti > spam product. In some part I think that's probably due to both its > effectiveness, and its flexibility. The simple fact is that in the > corpus, there are 687 pieces of sp

Re: [SAtalk] Attachment checking eval tests

2002-03-03 Thread Matthew Cline
On Sunday 03 March 2002 07:54 am, Rob McMillin wrote: > You made the same spelling error twice in the original. Gah! I really must use my spellchecker more often. -- Visit http://dmoz.org, the world's | Give a man a match, and he'll be warm largest human edited web directory. | for a minut

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Gunter Ohrner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Sunday, 3. March 2002 19:02 schrieb Rob McMillin: > weight set to zero. But I've had at least one yea on this subject, and I > bet a test against a decent-size spam corpus would yield decent results. Tests depending on the TLD od the messages woul

Re: [SAtalk] Spammers trying to adapt..

2002-03-03 Thread Gunter Ohrner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Saturday, 2. March 2002 23:32 schrieb Daniel Quinlan: > > I think the idea with GAPPY_TEXT is to catch these things. I > > suspect it's not working right though. > Why not strip out all non-letters and then do matching for things like > the "remov

Re: [SAtalk] Having trouble getting people out of my auto-whitelist

2002-03-03 Thread Rob McMillin
Craig R Hughes wrote: >You can remove/add addresses to the AWL using spamassassin's "-R" and "-W" >flags. You can list the AWL contents using tools/check_whitelist > The problem is exactly that -R doesn't work for me. I wrote a quick script to delete everything in the dbm: use AnyDBM_File; t

Re: [SAtalk] Having trouble getting people out of my auto-whitelist

2002-03-03 Thread Craig R Hughes
You can remove/add addresses to the AWL using spamassassin's "-R" and "-W" flags. You can list the AWL contents using tools/check_whitelist C Rob McMillin wrote: > Date: Sun, 03 Mar 2002 12:36:37 -0800 > From: Rob McMillin <[EMAIL PROTECTED]> > To: SAtalk <[EMAIL PROTECTED]> > Subject: [SAtal

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Craig R Hughes
Rob McMillin wrote: > Craig, I'd be curious to see this corpus -- where can I find it? I'd > like to know, once and for all, how badly this kills the non-spam. Also, > is there a testbed suite for checking the results against an arbitrary > corpus? The stuff in the /masses directory of the di

Re: [SAtalk] Spamassassin and razor issue

2002-03-03 Thread Craig R Hughes
Known bug in razor 1.20 which looks to have been released prematurely (there are warnings about its state on the razor website). Downgrade to 1.19 to fix the problem. C Rose, Bobby wrote: > Date: Sun, 3 Mar 2002 11:10:10 -0500 > From: "Rose, Bobby" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED]

Re: [SAtalk] Install Problems

2002-03-03 Thread Craig R Hughes
[EMAIL PROTECTED] wrote: > Per the README I did the following: > > # perl Makefile.PL > Writing Makefile for Mail::SpamAssassin Looks good so far > # make > make: *** No rule to make target spamassassin.raw', needed by spamassassin'. > Stop. That's very very odd. Are you in the distributio

Re: [SAtalk] Re: A better alternative to test ROUND_THE_WORLD

2002-03-03 Thread Craig R Hughes
The best way of submitting them is to forward them as an attachment to [EMAIL PROTECTED] The downside of this method is that it's an open mailing list, so your potentially private mail will be available to all via the mailing list archives, so think before you submit. C David Cantrell wrote:

Re: [SAtalk] MIME null block report fix

2002-03-03 Thread Craig R Hughes
Ok, thank. In CVS now. Matthew Cline wrote: > Here's a CVS patch which fixes the problem of the spam report being added > before the first MIME part. ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Craig R Hughes
Rob McMillin wrote: > Daniel Quinlan wrote: > > >Rob McMillin <[EMAIL PROTECTED]> writes: > > > >>When sysadmins in those TLDs fix their relays, I'll be happy to hear > >>them out. > >> > >The other problem with using this type of test in a spam corpus is > >that you're using a small subset of g

[SAtalk] Having trouble getting people out of my auto-whitelist

2002-03-03 Thread Rob McMillin
I can't get addresses -- or anything, really -- out of my auto-whitelist. I'm running RedHat 7.2 with Perl 5.6. I've been able to generate standalone dbm applications that can delete entries in an arbitrary (ndbm?) database file, but I can't remove anything from the auto-whitelist, even with a

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Rob McMillin
Craig R Hughes wrote: >Olivier Nicole wrote: > >>It would be best to avoid ruining the slowly building good reputation >>of SA (attending Apricot yesterday, SA was cited as the best anti-spam >>product one could choose -- Apricot is a yearly international >>conference in Asia-Pacific). >> > >I ag

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Craig R Hughes
Patches happily accepted :) Bugzilla feature requests too :) C Daniel Quinlan wrote: > It would be better to find a rule that just worked. For example, one > method would be a TLD "whitelist". As spamassassin receives mail, > there are two counters for each TLD. One is total messages and th

Re: [SAtalk] Limiting the children in spamd / BSD sighandling bug?

2002-03-03 Thread Craig R Hughes
I know nothing specific of the BSD sighandling bug -- I just believed others who reported it, and others who provided a patch, and others who told me the patch worked. I've been unable to install a decent version of perl on my fiancee's Ti powerbook w/OSX to do any BSD testing myself. C Dunc

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Craig R Hughes
Olivier Nicole wrote: > It would be best to avoid ruining the slowly building good reputation > of SA (attending Apricot yesterday, SA was cited as the best anti-spam > product one could choose -- Apricot is a yearly international > conference in Asia-Pacific). I agree that baseless discriminati

Re: [SAtalk] 0.0 scored rules

2002-03-03 Thread Craig R Hughes
Hmm, I had thought that section is generated during the merge process after the GA generates new scores -- it's basically the scores which had been in the previous scores file but which don't appear in the corpus and so were unmodified by the GA (I think that's what it is anyway from memory).

RE: [SAtalk] Spamassassin and razor issue

2002-03-03 Thread Rose, Bobby
Found it. In Client.pm in the readserverlist routine. For some reason when razor is called from spammassassin it doesn't like the new push condition when the .razor.lst already exists. But does like it when it's created during the spamassassin call. Maybe @list is still lingering from the write

[SAtalk] Re: procmail error when forwarding to a razor database

2002-03-03 Thread Philip Guenther
"Mike Loiterman" <[EMAIL PROTECTED]> writes: >I'm trying to set up a local mail account that I can forward messages >to so that they will be reported to the Razor database. All that I >need to do is run the command >"| spamassassin -r"on the messages. > >Someone suggested doing an alias in /etc

RE: [SAtalk] Spamassassin and razor issue

2002-03-03 Thread Rose, Bobby
I reinstalled 1.19 and it works so Spamassassin doesn't work with 1.20 of the razor agents. Here's the debug for 1.19 for comparison with the debug of 1.2 debug: Razor is available debug: Razor Agents 1.19, protocol version 2. debug: Read server list from /home/admin/brose/.razor.lst debug: 1270

[SAtalk] Re: A better alternative to test ROUND_THE_WORLD

2002-03-03 Thread Alan Shutko
Rob McMillin <[EMAIL PROTECTED]> writes: > I'm curious -- what release are you running that the FARAWAY_CHARSET > rules are disabled? Is this a Debian thing? Yes, it's a Debian thing. The scores for the FARAWAY_CHARSET rules are set to zero in the Debian package. The rules are still there, so

Re: [SAtalk] Re: A better alternative to test ROUND_THE_WORLD

2002-03-03 Thread Rob McMillin
Alan Shutko wrote: >OTOH, the vast majority of spam I get is cjk spam, as is the majority >of spam that gets through spamassassin. I would be quite in favor of >including this test, as the debian package could easily disable it by >default, and users could easily reenable it (as I have done so f

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Rob McMillin
Andrew Kohlsmith wrote: >>Let me get this straight -- we have ignorant and the willfully abusive >>people in these countries creating or abetting spam for others to deal >>with, and *we're* supposed to be concerned about public relations? >> >I don't think you're getting it. > >If North America (

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Andrew Kohlsmith
> Let me get this straight -- we have ignorant and the willfully abusive > people in these countries creating or abetting spam for others to deal > with, and *we're* supposed to be concerned about public relations? I don't think you're getting it. If North America (I'm from Canada) didn't have w

[SAtalk] Spamassassin and razor issue

2002-03-03 Thread Rose, Bobby
After upgrading to 1.20 razor agents, spamassassin doesn't seem to be able to user razor anymore. Whenever it tries, it says razor check skipped: No such file or directory undefined Razor::Client In debug mode debug: Razor is available debug: Razor Agents 1.20, protocol version 2. debug: Read

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Rob McMillin
Olivier Nicole wrote: >>When sysadmins in those TLDs fix their relays, I'll be happy to hear >>them out. In the meantime, experience shows mail relayed through those >> > >Too bad, wrong example again. > >It happens that Thailand TLD is just the room next to mine and I know >they have no open rel

Re: [SAtalk] Attachment checking eval tests

2002-03-03 Thread Rob McMillin
Matthew Cline wrote: >On Saturday 02 March 2002 09:37 pm, I wrote: > >>rawbody ONLY_ATTACHMENTS eval:check_for_only_attachments() >>describe ONLY_ATTACHMNETS Only attachmnets, no text >> > >Ooops, spelling mistake in "describe". Should be > >describe ONLY_ATTACHMENTS Only atta

Re: [SAtalk] Install Problems

2002-03-03 Thread oacheson
Sorry if I left out some steps. Per the README I did the following: # perl Makefile.PL Writing Makefile for Mail::SpamAssassin # make make: *** No rule to make target spamassassin.raw', needed by spamassassin'. Stop. so I never even get to the "make test" stage. Any ideas? Ollie On Sun, M

RE: [SAtalk] Install Problems

2002-03-03 Thread Mike Loiterman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You need to do "make Makefile.pl && make && make test && make install" without the quotes of course. Mike Loiterman [EMAIL PROTECTED] >-Original Message- >From: [EMAIL PROTECTED] >[mailto:spamassassin-talk- [EMAIL PROTECTED]] On Behalf Of

[SAtalk] procmail error when forwarding to a razor database

2002-03-03 Thread Mike Loiterman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm trying to set up a local mail account that I can forward messages to so that they will be reported to the Razor database. All that I need to do is run the command "| spamassassin -r"on the messages. Someone suggested doing an alias in /etc/m

[SAtalk] Install Problems

2002-03-03 Thread oacheson
I am trying to install SpamAssassin for the first time. Starting with Mail-SpamAssassin-2.1.tar.gz, I follow the README instructions, but "make" gives me the following error message: make: *** No rule to make target spamassassin.raw', needed by spamassassin'. Stop. So, thinks I, I'll use the

[SAtalk] config - file /command line consolidation?

2002-03-03 Thread Martin Bene
Hi, I've noticed that there's a couple of settings that can only be changed on the command line/perl function call, but not in the config file - why? local_checks_only dont_report_to_razor also the -a flag for spamassassin (autowhitelist) doesn't seem to have a config - file equivalent. esp.

AW: [SAtalk] Sendmail + Milter + Spamassassin + Easy Administration

2002-03-03 Thread Martin Bene
Hi Jeffrey, > I don't want to run Spamassassin for all users in every domain (i.e., > spamproxyd). I also would prefer that Sendmail do it's MTA > job. The key here is, I want to be able to easily configure the > Spamassassin service for multiple virtual domains, and I want it to > be as effi

Re: [SAtalk] Re: A better alternative to test ROUND_THE_WORLD

2002-03-03 Thread David Cantrell
On Sun, Mar 03, 2002 at 09:41:18PM +1100, Daniel Pittman wrote: > I just need to finish culling false positives from it automatically. And talking of false positives ... I've looked on the site but could find no way of reporting them. Could someone enlighten me? Perhaps some way of submitting

Re: [SAtalk] A better alternative to test ROUND_THE_WORLD]

2002-03-03 Thread Christof Damian
On Sun, 03 Mar 2002, Olivier Nicole wrote: > > I fully agree with Duncan (see my address above? :) > > I hardly receive any spam from .th, but I receive a heap from .com, > should .com be banned? I agree too. A quick grep through my spam folder results in about 300 matches on Received Lines of

[SAtalk] Re: A better alternative to test ROUND_THE_WORLD

2002-03-03 Thread Daniel Pittman
On Sat, 02 Mar 2002, Rob McMillin wrote: > Daniel Pittman wrote: >>On Sat, 02 Mar 2002, Rob McMillin wrote: >>>Duncan Findlay wrote: On Fri, Mar 01, 2002 at 09:50:03PM -0800, Rob McMillin wrote: >I would like to suggest that the ROUND_THE_WORLD test, which seems >to catch little r

Re: [SAtalk] Attachment checking eval tests

2002-03-03 Thread Matthew Cline
On Saturday 02 March 2002 09:37 pm, I wrote: > rawbody ONLY_ATTACHMENTS eval:check_for_only_attachments() > describe ONLY_ATTACHMNETS Only attachmnets, no text Ooops, spelling mistake in "describe". Should be describe ONLY_ATTACHMENTS Only attachmnets, no text > sub check_

[SAtalk] MIME null block report fix

2002-03-03 Thread Matthew Cline
Here's a CVS patch which fixes the problem of the spam report being added before the first MIME part. Index: lib/Mail/SpamAssassin/PerMsgStatus.pm === RCS file: /cvsroot/spamassassin/spamassassin/lib/Mail/SpamAssassin/PerMsgStatus