Re: [SAtalk] Having trouble getting people out of my auto-whitelist

2002-03-18 Thread Rob McMillin
Craig Hughes wrote: >I would strongly recommend against doing it this way -- it will >certainly break when the whitelist DB format changes. I would instead >recommend useing the SA classes and invoking >DBBasedAddrList->remove_entry() -- that method will continue to work >even if the storage for

Re: [SAtalk] Whitelist for Charlie Root

2002-03-18 Thread Rob McMillin
Craig R Hughes wrote: >Rob McMillin wrote: > >>1) Pick up the current CVS tree and set up a short-circuit rule that >>allows multiple tests. >> > >Wow! Did someone implement that while I wasn't looking? Seriously though, I >don't think that's in CVS yet. > It is according to bug 62: http://b

[SAtalk] Some email that confure mass-check

2002-03-18 Thread Olivier Nicole
Hi, As I reported last week, runing mass-check on the past month received email did trigger some errors. Below are some example of the rror and the messages that caused them. Olivier Emails that triggered one or several errors of the type: Malformed UTF-8 character (unexpected continuation by

[SAtalk] Re: [Exim] Spamassassin config for running from exim

2002-03-18 Thread dman
Nigel, On Fri, Mar 15, 2002 at 04:46:26PM +, Nigel Metheringham wrote: | I've just been playing with the exim spamassassin config I have and made | an interesting change that might be useful to people. ... | # in transports | # Spam Assassin | spamcheck: | driver = pipe | c

Re: [SAtalk] Help with rules

2002-03-18 Thread Olivier Nicole
Ed, >header UNDISC_RECIPTo =~ /^Undisclosed-Recipient*:\s*;$/ I think your regexpr miss to catch the < and > that surround the "Undiclosed...". It matchs a line starting with "Undisclosed" and continuing with "recipient" (none to many t at the end) followed by none to many spaces, e

[SAtalk] Help with rules

2002-03-18 Thread Ed Kasky
I am in the process of learning regex and have a question if someone has a minute Based on the following headers, is this the correct addition to 20_head_tests.cf? header UNDISC_RECIPTo =~ /^Undisclosed-Recipient*:\s*;$/ describe UNDISC_RECIP Valid-looking To "Undisclo

Re: [SAtalk] SA's performance with mailing lists

2002-03-18 Thread Kenneth Chen
I believe that if an ISP is going to use SA for their mailserver, they should really be careful what threshold they set their SA configuration. Anything below 10 is playing with fire, IMHO. For my own system I use 7.0, but due to my small number of users I can also go through the spam mailbox and

[SAtalk] SA's performance with mailing lists

2002-03-18 Thread Kerry Nice
I saw in the Lockergnome newsletter I received today, Spamassassin was slammed big time. I do see his point though. Does SA really do that great of a job with newsletters and journals? Just as an exercise, I ran though my journals folder though SA and it wasn't pretty. These are all mailing

Re: [SAtalk] Error on make on a raq3

2002-03-18 Thread Olivier Nicole
> /bin/sh: pod2text: command not found > /bin/sh: pod2text: command not found > make: *** [doc/.made] Error 127 pod2text is a tool used to generate documentation from som Perl source. It means there is something strange in the way your perl distro was installed. In another hand, you don't absolu

Re: [SAtalk] List emails

2002-03-18 Thread Matthew Cline
On Monday 18 March 2002 10:22 am, CertaintyTech - Ed Henderson wrote: > I am very pleased with SA and the job it is doing. Good job to all! > > But...In my situation if SA makes a false positive it is often on mailing > list type emails. Perhaps a user has suscribed to a joke of the day or > som

Re: [SAtalk] Analysis script

2002-03-18 Thread Jeremy Zawodny
On Tue, Mar 19, 2002 at 09:48:28AM +1100, Barry Andersson wrote: > Hi, > > Has anyone written a script that analyses the caughtspam file to > generate a report with information such as: I have one... But I need to dig it up. I posted info about it a few months back but haven't had the time to

[SAtalk] Analysis script

2002-03-18 Thread Barry Andersson
Hi,   Has anyone written a script that analyses the caughtspam file to generate a report with information such as:   Top spam email addresses Top spam domains etc ...   Barry Andersson  

Re: [SAtalk] getting spamd to work with sendmail

2002-03-18 Thread Jeffrey Bacon
(procmail is used for local delivery, sendmail for everything else) ok, so I have a /etc/procmailrc file with only: :0fw | spamc in it and spamd running as: "spamd -d -c -a -F 0" but still no X-Spam-Status header is added to my mail. Greg Ward wrote: >On 18 March 2002, Jeff Bacon said: > >>I

Re: [SAtalk] getting spamd to work with sendmail

2002-03-18 Thread Jeff Bacon
(procmail is used for local delivery, sendmail for everything else) ok, so I have a /etc/procmailrc file with only: :0fw | spamc in it and spamd running as: "spamd -d -c -a -F 0" but still no X-Spam-Status header is added to my mail. Greg Ward wrote: >On 18 March 2002, Jeff Bacon said: > >

Re: [SAtalk] suggestion for tests

2002-03-18 Thread Søren Boll Overgaard
On Mon, Mar 18, 2002 at 12:13:05PM -0800, Craig R Hughes wrote: > Søren Boll Overgaard wrote: > > > That doesn't really make sense? If you know what countries you want to block, > > you know what zone (eg. country-code) to use. If you don't know what country > > you want to block, looking it up d

[SAtalk] Proxys, Win32, RFCs and other nonsense...

2002-03-18 Thread Nick Fisher
Hi, Some of you may remember me as the guy asking questions about running SA on Win32. Some of you were good enough to right me replys when you had stoped laughing... many thanks. The road has been long but I have made it. This is a bit of a mish-mash mail so I'll just try and get out the

[SAtalk] Error on make on a raq3

2002-03-18 Thread AHA Lists
I am trying to install Spam Assassin on my raq3 and I am running into an error when make'ing the file. Below is the output, if anyone can help point me in the right direction that would be great. [root@www Mail-SpamAssassin-2.11]# make mkdir blib mkdir blib/lib mkdir blib/lib/Mail mkdir blib/ar

Re: [SAtalk] getting spamd to work with sendmail

2002-03-18 Thread Greg Ward
On 18 March 2002, Jeff Bacon said: > I have installed spamd/spamassassin/spamc but I don't think it's > scanning my emails. If I perform the 'spamassassin -t' test on a > message it will mark it as spam (or at least add the X-Spam-Status > header) but that header is not added to all my email.

Re: [SAtalk] whitelist_from not working

2002-03-18 Thread Barry Andersson
Thanks Kenneth, > 1. you didn't restart spamd after changing the sitewide config file You got it first try. I didn't realise that spamd had to be restarted to re-read the local.cf file. :-| Thanks again Barry ___ Spamassassin-talk mailing list [E

Re: [SAtalk] More falsies with SA in an M$ Exchange network

2002-03-18 Thread Jason Haar
On Mon, Mar 18, 2002 at 10:24:10AM -0800, Craig R Hughes wrote: > I'd suggest that not routing the Exchange syncing messages through SA would be a > much, much better solution. Yup. The problem was that we're running SA site-wide via Qmail-Scanner, and this then becomes Q-S's problem as to when

[SAtalk] Diagnosed weird autowhitelist bug

2002-03-18 Thread Nix
You may recall I reported a weird `File exists' bug with libdb/DB_File hitting autowhitelists. I've fixed it. It's not a spamassassin or Perl problem; it's a libdb problem. It seems that libdb internal symbols in libdb2 and libdb3 conflict, even though the names do not and the libdb docs say you

[SAtalk] getting spamd to work with sendmail

2002-03-18 Thread Jeff Bacon
I have installed spamd/spamassassin/spamc but I don't think it's scanning my emails. If I perform the 'spamassassin -t' test on a message it will mark it as spam (or at least add the X-Spam-Status header) but that header is not added to all my email. Is there any hook I have to add to get it

Re: [SAtalk] whitelist_from not working

2002-03-18 Thread Kenneth Chen
You're right, sorry. I was referring to whitelist_to which is only a -6.0 bonus. Best, Kenneth --- Kenneth Chen Unit Supervisor, Clark Kerr and UVA Residential Computing University of California, Berkeley [EMAIL PROTECTED] On Mon, 18 Mar 2002, Craig R Hughes wro

[SAtalk] Craig slow in answering

2002-03-18 Thread Craig R Hughes
As some of you probably noticed, I fell a little behind in following/answering SATalk mails last week. I'm in the middle of kicking off a big new project which is consuming much of my time, so I might not be answering postings to this list as frequently and rapidly as I have in the recent past

Re: [SAtalk] suggestion for tests

2002-03-18 Thread Craig R Hughes
Søren Boll Overgaard wrote: > That doesn't really make sense? If you know what countries you want to block, > you know what zone (eg. country-code) to use. If you don't know what country > you want to block, looking it up doesn't do much good? Well, I think a lot of people just block whole x.0.0

RE: [SAtalk] Re: List emails

2002-03-18 Thread CertaintyTech - Ed Henderson
I should have explained that the situation that I'm talking about is not for my personal email but for SA used site-wide and therefore doesn't have per-user settings. If it was just my own then what you are describing would work just fine and I have actually done this for myself. My original que

RE: [SAtalk] Re: More complex customizations (MIME, etc)

2002-03-18 Thread Craig R Hughes
Outlook users (and their sysadmins) might be interested in this: http://sourceforge.net/mailarchive/message.php?msg_id=1262233 C Smith, Rick wrote: > The problem with this approach is that some of us deal with clueless > people, and the even more clueless Exchange Server which hides all > inte

Re: [SAtalk] SUBJ_ALL_CAPS regex broken

2002-03-18 Thread Kelsey Cummings
On Mon, Mar 18, 2002 at 11:42:51AM -0800, Craig R Hughes wrote: > Kelsey, > > I changed SUBJ_ALL_CAPS on the 17th to use an eval someone contributed -- does > that fix your problem? I'll try it out. I took one of the suggested regex's and that seemed to fix it but the eval code is most likely

Re: [SAtalk] More complex customizations (MIME, etc)

2002-03-18 Thread Craig R Hughes
Jim Paris wrote: > 1) If a message is spam, it should not be modified, but instead be >replaced by a multipart/mixed message where the first part is >a text/plain containing the SpamAssassin report and the second >part is a message/rfc822 containing the original, unmodified >mess

Re: [SAtalk] suggestion for tests

2002-03-18 Thread Søren Boll Overgaard
On Mon, Mar 18, 2002 at 11:25:41AM -0800, Craig R Hughes wrote: > Soren, > > Could you please add this at http://bugzilla.spamassassin.org/ as a feature > request? Done. > Sounds like a great idea. Any idea on what the * in > &.rbl.cluecentral.net can expand to? I included an URL in the

Re: [SAtalk] SUBJ_ALL_CAPS regex broken

2002-03-18 Thread Craig R Hughes
Kelsey, I changed SUBJ_ALL_CAPS on the 17th to use an eval someone contributed -- does that fix your problem? C Kelsey Cummings wrote: > Date: Fri, 15 Mar 2002 10:13:19 -0800 > From: Kelsey Cummings <[EMAIL PROTECTED]> > To: Rob McMillin <[EMAIL PROTECTED]> > Cc: [EMAIL PROTECTED] > Subject:

[SAtalk] Re: List emails

2002-03-18 Thread Will Yardley
CertaintyTech - Ed Henderson wrote: > I am very pleased with SA and the job it is doing. Good job to all! > > But...In my situation if SA makes a false positive it is often on > mailing list type emails. [...] > Just wondering if anyone else has created any rules that have helped > in this area

RE: [SAtalk] MIME problems

2002-03-18 Thread Craig R Hughes
Smith, Rick wrote: > Anyone working on this currently ? I see it's been assigned in CVS, > wondering if there's a status function somewhere that developers fill > out when it's been completed... As far as I know, nobody is working on it at the moment. The only tracking info is the bugzilla t

Re: [SAtalk] whitelist_from not working

2002-03-18 Thread Craig R Hughes
Kenneth Chen wrote: > I believe the whitelist entry simply gives it a negative score in addition > to whatever positive scores it would have obtained via the rules. That is > to say, if your spam message would have been 20.3 points without your > whitelist entry, it'd only be something like 15.3

[SAtalk] Fragmented messages

2002-03-18 Thread dgillett
The ISP that hosts my domain, including my mailboxes, makes SpamAssassin available, and I've enabled it for my domain. Since then, I've been having an odd problem. NOTE: The version of SA identifies itself as "2.01". I see references on this list to 2.11, so I'm expecting that some of t

Re: [SAtalk] Auto_whitelist after upgrade to 2.11

2002-03-18 Thread Craig R Hughes
AWL is the auto-whitelist. When your report came through scoring really high, it got added to the auto-whitelist (actually auto-blacklist in this case). As you continue to receive mail from there, your AWL score will drift to being closer to -100 over time. You needn't worry about it, but if

Re: [SAtalk] suggestion for tests

2002-03-18 Thread Craig R Hughes
Soren, Could you please add this at http://bugzilla.spamassassin.org/ as a feature request? Sounds like a great idea. Any idea on what the * in &.rbl.cluecentral.net can expand to? I mean, if I have an IP address to look up, there's no way to know the country code a lot of the time. Or can

Re: [SAtalk] Spamc problem

2002-03-18 Thread Craig R Hughes
Ray thanks for the detailed report. Very refreshing :) Could you give one more piece of info though -- could you forward as an attachment the mail from newsletter@gambling that "broke" spamc? Looks like something with that particular message caused the problem, since the other you quote appa

Re: [SAtalk] Whitelist for Charlie Root

2002-03-18 Thread Craig R Hughes
Rob McMillin wrote: > 1) Pick up the current CVS tree and set up a short-circuit rule that > allows multiple tests. Wow! Did someone implement that while I wasn't looking? Seriously though, I don't think that's in CVS yet. > 2) Use ~/.procmailrc to do a multipart test and skip SpamAssassin

Re: [SAtalk] Running spamassassin on an existing spool...

2002-03-18 Thread Craig R Hughes
If you have procmail installed, you can do something like this fairly easily using formail -- see its manpage for details. (assuming you using mbox mailboxes) If you're using maildir or something similar, it's even easier. In both cases, I'd strongly recommend using spamc instead of spamassas

Re: [SAtalk] Is -l broken in v2.11

2002-03-18 Thread Craig R Hughes
Don't know -- probably the least used SA flag. Might be that NoMailAudit broke this. Please file a bug report at http://bugzilla.spamassassin.org/ C Robert Abatecola wrote: > Date: Fri, 15 Mar 2002 20:28:12 -0800 > From: Robert Abatecola <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject:

Re: [SAtalk] Slashdot: Class Action Lawsuit Against Spammer

2002-03-18 Thread Craig R Hughes
Sean Harding wrote: > On Fri Mar 15 at 02:38:01 PM, Rob McMillin wrote: > > > from the eggs-bacon-and-50-dollars-please dept. > > http://slashdot.org/article.pl?sid=02/03/15/1956200&mode=nested&tid=111 > > There are lots of lawsuits going on here in Washington against spammers, and > the spamme

Re: [SAtalk] Limiting Regex Set

2002-03-18 Thread Craig R Hughes
Rob McMillin wrote: > Yevgeniy Miretskiy wrote: > > >Hello, > > > >Is there a way to configure spamassassin to run say, header checks only, > >or body checks only? > > > Not that I know of -- you could set all the non-header checks to zero in > your user_prefs file. ...or the systemwide scores

Re: [SAtalk] Can anyone help with this?

2002-03-18 Thread Craig R Hughes
Configuration error I think. 1. You need to let your host know its own name for locking of the DB file can work right. Try an entry in /etc/hosts 2. The AWL entries should indeed be stored in ~/.spamassassin/auto_whitelist.db, though depending on what DB system AnyDBMFile picks up, the name of

Re: [SAtalk] Contributed rules: MLM/business spam

2002-03-18 Thread Craig R Hughes
Bart Schaefer wrote: > On Fri, 15 Mar 2002, Michael Moncur wrote: > > > This is the first, a bunch of rules to catch MLM and other "business > > opportunity" spams. > > Almost anything that uses the word "downline", particularly in conjunction > with "grow", "increase", "improve", etc., is in m

RE: [SAtalk] spamc

2002-03-18 Thread Craig R Hughes
Ray Curtis wrote: > Date: Fri, 15 Mar 2002 12:50:22 -0500 > From: Ray Curtis <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] spamc > > > "eh" == ed henderson writes: > > eh> Look at the "-i" option for spamd. It defaults to only allowing con

Re: [SAtalk] Messed emails

2002-03-18 Thread Craig R Hughes
How are you invoking SA? It might be that if you're using procmail or something like it, you're not locking mailboxes right during delivery, or something, and messages are getting interleaved in weird ways. C CertaintyTech - Ed Henderson wrote: > Date: Thu, 14 Mar 2002 15:00:09 -0500 > From:

Re: [SAtalk] Razor Check Skipped

2002-03-18 Thread Craig R Hughes
This is a well known problem, originally thought to be a razor bug, but in fact was due to razor fixing a previous "bug" and breaking our workaround. Search the mailing list archives for "my $/" and you should find the solution. C Karyl F. Stein wrote: > Date: Thu, 14 Mar 2002 13:34:42 -0500

RE: [SAtalk] MIME problems

2002-03-18 Thread Smith, Rick
Yeah that's what I was talking about. I DO want the reports prepended to the email, because like I said the headers are hard to get at in Outlook, which is our standard email package here. The report_header option works fine... html email works ok / plain email works ok. Not the option I want,

Re: [SAtalk] startup trouble, 2 questions

2002-03-18 Thread Craig R Hughes
André Somers wrote: > Can anyone here > 1) Tell me how I can get Redhat to startup Spamd? Just use the RPM from http://www.hughes-family.org/spamassassin/ I built them on Mandrake, but they should work fine on RedHat also. > 2) How I get Spamassassin to use Vipuls Razor? Easy. Install SA. I

Re: [SAtalk] MIME problems

2002-03-18 Thread Craig R Hughes
Rick, not positive this answers your questions, but: you can currently make the report appear only in the headers, thereby not breaking MIME stuff. Just use the report_header config file option. If you're talking about http://bugzilla.spamassassin.org/show_bug.cgi?id=18 that will take a littl

Re: [SAtalk] More falsies with SA in an M$ Exchange network

2002-03-18 Thread Craig R Hughes
I'd suggest that not routing the Exchange syncing messages through SA would be a much, much better solution. C Jason Haar wrote: > Date: Thu, 14 Mar 2002 15:58:26 +1300 > From: Jason Haar <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: [SAtalk] More falsies with SA in an M$ Exchange net

[SAtalk] List emails

2002-03-18 Thread CertaintyTech - Ed Henderson
I am very pleased with SA and the job it is doing. Good job to all! But...In my situation if SA makes a false positive it is often on mailing list type emails. Perhaps a user has suscribed to a joke of the day or some hobby list, etc... Has anyone developed any custom rules what would give -ve

Re: [SAtalk] Patch for spamd

2002-03-18 Thread Craig R Hughes
Will do. I'll probably add a flag to let you say what directory you want /var/run to be too (defaulting to /var/run) Duncan, could you file a bugzilla on this and attach the patch file? Thanks. C Duncan Findlay wrote: > Date: Wed, 13 Mar 2002 17:20:12 -0500 > From: Duncan Findlay <[EMAIL P

RE: [SAtalk] Why to deliver SPAM even if it's identified. (was Re:Spamd and Milter - Expected Results?)

2002-03-18 Thread Craig R Hughes
That code is in CVS already -- might have made it into 2.1 or 2.11 -- don't recall. from perldoc Mail::SpamAssassin::Conf: subject_tag STRING ...(default: *SPAM*) Text added to the "Subject:" line of mails that are considered spam, if "rewrite_subjec

Re: [SAtalk] Error during SpamAssassin build - ld: fatal: library-ldb: not found

2002-03-18 Thread Craig R Hughes
Duncan Findlay wrote: > I really think that we can get rid of those extra libraries. On Debian, > spamc builds with just libc. It will build fine on many systems (particularly linux) which have modern libc/glibc's where the unix socket stuff is automatically linked by your linker. However, th

Re: [SAtalk] PORN ideas 2

2002-03-18 Thread Craig R Hughes
A bit delayed in answering, sorry I've been ignoring [SAtalk] for a few days to get some Real Work done. Matt, I agree the porn rules are pretty lame currently. They need revamping. I've got a bug in bugzilla (#46) which was reminding me to work on this, though it doesn't include the full detai

[SAtalk] Re: whitelist_from not working

2002-03-18 Thread Shane Williams
On Mon, 18 Mar 2002, Barry Andersson wrote: > I've added our domain to /etc/mail/spamassassin/local.cf to allow all messages through but when I sent a deliberate spam message it was blocked. > > I've added the line > > whitelist_from *.simplex.net.au The whitelist and blacklist entries d

Re: [SAtalk] New AWL implementation now done

2002-03-18 Thread Bart Schaefer
On Mon, 18 Mar 2002, Charlie Watts wrote: > My AWL database is rapidly getting big. It's up to 23MB and growing. > > Any suggestions for how to keep it from growing without bound? Oh, dear. I can't check the size of my AWL DB at the moment -- server is down -- but I never considered that SA wo

RE: [SAtalk] Re: How to put hits in subject (Was Re: Why to deliver SPAM even if it's identified.)

2002-03-18 Thread CertaintyTech - Ed Henderson
You may want to look at the "spamc -c" option which will return error codes that correspond to the number of hits, etc.. Based on what spamc -c reports you could exit with a particular status code that would cause the SMTP session to fail and not continue. I personally use qmail and an exit code

RE: [SAtalk] Whitelist for Charlie Root

2002-03-18 Thread CertaintyTech - Ed Henderson
You may want to modify your mail system so that it tacks on your domain name. Then you can whitelist all admin type addresses ie. [EMAIL PROTECTED] > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Mike > Loiterman > Sent: Sunday, March 17, 2002 5:03

[SAtalk] Re: [Exim] Spamassassin config for running from exim

2002-03-18 Thread Philip Hazel
On 18 Mar 2002, Nigel Metheringham wrote: > Rats. Those were in my original config - because it was mutated from an > earlier config, but I knocked them out when quoting it because I thought > the BSMTP setting reset them. Sorry about that. The BSMTP setting *does* change things in Exim 4. May

Re: Re: Re: [SAtalk] spamassassin in 100% C

2002-03-18 Thread Charlie Watts
On 19 Feb 2002, Craig Hughes wrote: > On Tue, 2002-02-19 at 14:57, Charlie Watts wrote: > > And I'm actually playing with Razor again. It isn't nearly as broken as it > > was for a while. But I've got some spare CPU cycles to throw at Razor > > right now. Razor probably wouldn't be worth re-implem

Re: [SAtalk] New AWL implementation now done

2002-03-18 Thread Charlie Watts
I've been using the AWL with no problems for a little over a week now. I just wanted to mention this in reply to my earlier "it's broken" message. I dunno what the problem was before. I don't think it was one. My AWL database is rapidly getting big. It's up to 23MB and growing. Any suggestions f

[SAtalk] Re: [Exim] Spamassassin config for running from exim

2002-03-18 Thread Nigel Metheringham
On Fri, 2002-03-15 at 20:52, Adrian Phillips wrote: > > "Nigel" == Nigel Metheringham <[EMAIL PROTECTED]> >writes: > > > Interesting, I though I'd give it a go. > > Nigel> I've just been playing with the exim spamassassin config I > Nigel> have and made an interesting change that m