My thought on this is that there should be an eval test that calculates a
ratio of HTML tags to actual (between the tags) content. This would really
just be the ratio of the lengths of the raw and "cooked" versions of the
body, I think. Are both of those available to an eval test or would it have
Anyone else here trying to use SpamAssassin to filter
ALL incoming mail for many users in Vpopmail on Qmail?
Is Qmail-Scanner the way to go? http://qmail-scanner.sourceforge.net/
ifspamh? http://www.gbnet.net/~jrg/qmail/ifspamh
Any tips/URLs/FAQs appreciated.
I'm pretty new to it, o
On Thu, Apr 25, 2002 at 10:46:38PM -0400, Brian Kendig wrote:
> Does anyone have an easier (but reliable) way to have SpamAssassin
> automatically report spam to the upstream providers?
The method I use is that all incoming mails that are flagged as spam
(and from my spam traps) are saved into a
Brian Kendig wrote:
> I have a free reporting account on SpamCop. I suppose I could put
> a line into my procmailrc which forwards all my spam to my SpamCop
> reporting address; then SpamCop will send me back a confirmation
> email for each spam thus reported. That's a little messy, though,
> si
First, kudos: I am *very* happy with SpamAssassin. I used to use
my own filters, about twenty phrases like 'to be removed' and 'to
get off this list' and so forth, but that had about a 60% success
rate; then I switched to Spam Bouncer but that only had about an
80% success rate; in the few da
On Thu, Apr 25, 2002 at 02:12:27PM -0600, Charlie Watts wrote:
> > Doing an alarm() and such would side-step the problem, but not actually
> > stop the problem from occuring.
>
> How about both: regexes -are- complicated, and folks are likely to
> write long-running ones again in the future.
>
>
On Thu, Apr 25, 2002 at 02:12:27PM -0600, Charlie Watts wrote:
> On Thu, 25 Apr 2002, Theo Van Dinter wrote:
>
> > On Thu, Apr 25, 2002 at 11:31:08AM -0600, Charlie Watts wrote:
> > > Is there anything that can be done to -avoid- this?
> > >
> > > Perhaps wrapping the regex portion of SA in an al
On Thu, 25 Apr 2002, Theo Van Dinter wrote:
> On Thu, Apr 25, 2002 at 11:31:08AM -0600, Charlie Watts wrote:
> > Is there anything that can be done to -avoid- this?
> >
> > Perhaps wrapping the regex portion of SA in an alarm() timer so that
> > long-running regexes just get exited from?
>
> I vo
On Thu, Apr 25, 2002 at 11:31:08AM -0600, Charlie Watts wrote:
> Is there anything that can be done to -avoid- this?
>
> Perhaps wrapping the regex portion of SA in an alarm() timer so that
> long-running regexes just get exited from?
I vote for "writing correct code the first time", followed by
> The two obvious approaches seem to have problems:
>
> |spamassassin -d |mail $MAIL -- spamassassin will simply reprocess the
> message, and, in any case, the original headers won't show up properly
>
> |spamassassin -d >>$MAIL -- this could run afoul of sendmail delivering
> mail
>
> So... any s
I'm using spamassassin, via procmail, on a unix box - and reading mail
using lynx.
I know that I can pipe a message through spamassassin -d, to unmark a flas
positive, but I've been trying to figure out a simple way to then get that
message back into my inbox.
The two obvious approaches seem to
Matt Sergeant wrote:
MS> You'd have to do this with an eval. Try adding the following to EvalTests.pm:
The right way to do it is not with an eval, but by fixing bugzilla #47, then
writing a multi-match rule.
C
___
Spamassassin-talk mailing list
[EMA
On Wed, Apr 24, 2002 at 08:07:35PM -0400, Duncan Findlay wrote:
| On Wed, Apr 24, 2002 at 12:09:03PM -0700, Bart Schaefer wrote:
| > On Wed, 24 Apr 2002, Vivek Khera wrote:
| >
| > > If there is such an RFC, how would I then use my personal email address,
| > > [EMAIL PROTECTED], if there is no m
Hi,
I see that spamc/spamd supports storing the user prefs in MySQL.
I'm not using spamd, but rather 'spamassassin' called on a per user basis
from procmail. For conveneince I'd like to store the per user whitelists
in MySQL. I'm thinking of modifying spamassasin to do this. But I'm
wondering if
Matt Sergeant wrote:
MS> Now that's interesting. I wonder if it's constructed specifically to make SA
MS> hang... I guess we need to redo the body test parser to grep out blank lines.
MS> *sigh*
Probably be interesting to count the ratio of blank:nonblank lines and give it a
score.
C
On Thu, 25 Apr 2002, Matt Sergeant wrote:
> On Wednesday 24 Apr 2002 8:02 pm, Viraj Alankar wrote:
> > Thanks, I've made these changes and the memory usage does not seem bad. It
> > still grows a little, reporting about 26M via top, but definitely not as
> > bad as before. I will do some tests wit
OK, last message from em on this subject as well.
On Thu, 25 Apr 2002, Eric S. Johansson wrote:
> > > You've just accumulated enough scar tissue from using bad UI
> > > software so that you cannot recognize the pain anymore.
> >
> >That's non sequitur.
>
> and that's a classic debating techniqu
At 10:26 AM 4/24/2002 -0700, Bart Schaefer wrote:
>On Wed, 24 Apr 2002, Eric S. Johansson wrote:
>
> > At 08:51 AM 4/22/2002 -0700, Bart Schaefer wrote:
> > >
> > >The trouble is that any solution that places a burden on the sender is
> > >lousy social engineering.
> >
> > unfortunately, you just
We actually receive several emails that contain graphics as an attachment.
(We do a lot of logo work and graphics design). While I would not have a
problem catching HTML with only a single img src tag in it, I would want
image attachments not to be included as a "Hit".
Then the spammers just att
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 25 Apr 2002 4:34 pm, Sean Harding wrote:
> On Thu Apr 25 at 04:27:26 PM, Matt Sergeant wrote:
> > Who cares? There's a damn near 100% probability such a message is spam.
> > So we add a new heuristic for it. Send it along.
>
> It's not *th
On Thu Apr 25 at 04:27:26 PM, Matt Sergeant wrote:
> Who cares? There's a damn near 100% probability such a message is spam. So we
> add a new heuristic for it. Send it along.
It's not *that* great of a probability that a message with only images is
spam. I've received them more than once from
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 25 Apr 2002 4:03 pm, Sean Harding wrote:
> Another annoying one this morning...I got two copies of a spam that were
> just HTML with img tags. The images contained the text of the message. Yet
> another way to make it difficult (nearly imp
Here's one that slipped through the cracks relatively unscathed.
Should any rules be modified to trap future messages like this?
Gawain
Spam follows:
>From [EMAIL PROTECTED] Sat Apr 20 04:35:23 2002
Received: (qmail 13666 invoked by uid 519); 20 Apr 2002 09:35:18 -
Delivered-To: [EMAIL PR
Another annoying one this morning...I got two copies of a spam that were
just HTML with img tags. The images contained the text of the message. Yet
another way to make it difficult (nearly impossible) to analyze the text of
the message.
Sigh.
sean
--
Sean Harding [EMAIL PROTECTED] | "Youth is
From: "Matt Sergeant" <[EMAIL PROTECTED]>
>
> > They may also have the text "I need your advice on this" or some such
> > nonsense. The attachment is usually a .pif file that shows up with the
> > type "Audio/X-WAV" as below. SA does not catch it as spam. At least
not
> > with the stock setting
On Thu, Apr 25, 2002 at 11:12:17AM +0100, Matt Sergeant wrote:
> > http://www.cse.fau.edu/~valankar/blah.gz
> >
> > Didn't debug this much, but I did disable network checks and still the same
> > hang result with this message.
>
> Now that's interesting. I wonder if it's constructed specifically
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 25 Apr 2002 2:13 pm, Doug Crompton wrote:
> I get the following messages all the time. Since I read my mail in Pine in
> Linux I have no idea what they are. They have attachments with no text.
> They may also have the text "I need your adv
On Thu, Apr 25, 2002 at 09:13:05AM -0400, Doug Crompton wrote:
> I get the following messages all the time. Since I read my mail in Pine in
> Linux I have no idea what they are. They have attachments with no text.
> They may also have the text "I need your advice on this" or some such
Sounds like
On Thu, Apr 25, 2002 at 11:51:46AM +0100, Matt Sergeant wrote:
| body BULK_AND_UNSUBSCRIBE eval:bulk_and_unsubscribe()
| describe BULK_AND_UNSUBSCRIBE Email contains both Precendence: bulk and an
| "unsubscribe" message
| score BULK_AND_UNSUBSCRIBE -2
Hmm. I was thinking more along the lines of
I get the following messages all the time. Since I read my mail in Pine in
Linux I have no idea what they are. They have attachments with no text.
They may also have the text "I need your advice on this" or some such
nonsense. The attachment is usually a .pif file that shows up with the
type "Au
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 25 Apr 2002 3:30 am, Clark C . Evans wrote:
> Hello. I'd like a rule that gives high values
> to "unsubscribe" remarks in the body of the email
> if the bulk header is not present. This rule
> should catch the "bulk" of my spam as mosts
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wednesday 24 Apr 2002 8:02 pm, Viraj Alankar wrote:
> Thanks, I've made these changes and the memory usage does not seem bad. It
> still grows a little, reporting about 26M via top, but definitely not as
> bad as before. I will do some tests with c
"Michael C. Hanson" wrote:
> I would appreciate it if someone could offer some suggestions, or solutions
> on howto recover the compressed *.gz data from the mbox file into their
> respective individual *.gz file format?
Sure. Cut out all the email stuff (leave just the mimencode stuf) and
run
33 matches
Mail list logo
