[SAtalk] spamassassin and Mail::POP3Client

2002-04-30 Thread William Herrera
I'd like to set up a filter for email gotten through a virtual hosting service that won't let us touch their sendmail settings :-|. I already have one based loosely on popfilter.pl by Marco Fioretti, but it relys on rules added one by one locally. As a client, it deletes mail on the server b

[SAtalk] Selective site-wide usage?

2002-04-30 Thread Henry Kwan
Hi. Just recently found out about SA and have spent a little time playing with it and of course, had some questions. We have a low-volume mail server (P3-733/256MB, RH7.0/sendmail) and I wanted to install SA as a selective site-wide option. So the folks that would want to run it need to opt-

[SAtalk] Scam Warning! Please read. (fwd)

2002-04-30 Thread Doug Crompton
Thought you might like to read about the latest scam mail... From: [EMAIL PROTECTED] Subject: Scam Warning! Please read. Dear Valued Go Daddy customer, Tuesday morning, alert Go Daddy customers notified me that another scammer is after your personal information. Our legal team is already worki

Re: [SAtalk] Viewing auto-whitelist database

2002-04-30 Thread Bart Schaefer
On Tue, 30 Apr 2002, Craig R Hughes wrote: > ...or you can just use the tool that comes with the SA distribution > that's in tools/check_whitelist which will dump the list out all nicely > formatted for you. I just tried this, and (a) it croaks if invoked with perl 5.005 on the "use warnings;" l

Re: [SAtalk] What is the cleanest mail server to use with SA ?

2002-04-30 Thread Kelsey Cummings
On Tue, Apr 30, 2002 at 08:53:49PM -0400, Dave Strickler wrote: > Looks like SendMail uses Milter(s) to hook in... > Looks like ProcMail has easy hooks... > > Anyone have a preference for ease of use / clean install / less > headaches? The box it will run on will be dedicated to SA and nothin

Re: [SAtalk] (no subject)

2002-04-30 Thread Sidney Markowitz
"Jeff Shepherd" <[EMAIL PROTECTED]> asked: > Also, I need to add something to the header that will make > SpamAssassin will recognize it as not spam. > Any recommended way? You would not want SpamAssassin to default to anything that spammers could put in spam to get it to pass. But there should b

Re: [SAtalk] How do I add a header test for List-Unsubscribe:

2002-04-30 Thread Matthew Cline
On Tuesday 30 April 2002 02:30 pm, Jesus Climent wrote: > On Tue, Apr 30, 2002 at 01:58:01PM -0700, Jeff Shepherd wrote: > > I'm not a PERL programmer and not familiar with unix expressions, but > > to show I'm willing to do some footwork, I think I need to add > > something like the following li

[SAtalk] What is the cleanest mail server to use with SA ?

2002-04-30 Thread Dave Strickler
Looks like SendMail uses Milter(s) to hook in...   Looks like ProcMail has easy hooks...   Anyone have a preference for ease of use / clean install / less headaches? The box it will run on will be dedicated to SA and nothing else.   Thanks,   Dave Strickler CEODWS - "The GroupWise Integration

Re: [SAtalk] Viewing auto-whitelist database

2002-04-30 Thread Craig R Hughes
...or you can just use the tool that comes with the SA distribution that's in tools/check_whitelist which will dump the list out all nicely formatted for you. C Rich Wellner wrote: RW> Ross Vandegrift <[EMAIL PROTECTED]> writes: RW> RW> > I'm kinda interested in looking at what's stored in our

[SAtalk] (no subject)

2002-04-30 Thread Jeff Shepherd
I'm setting up an account on my mail server that will unassassinate false-positive spam. I plan to have users that received mail tagged as spam send the message to this account, have the SpamAssassin markup stripped and then sent back to the original sender. I believe all this can be done in

[SAtalk] More Spanish spam fodder

2002-04-30 Thread Michael Moncur
Here's the footer from a recent spanish-language spam that managed to miss all of the current filters - perhaps some rules could be modified to catch some of this? - Su dirección fue obtenida de un sitio público y nuestra intención es informarle nuestra propuesta, le pedimos d

Re: [SAtalk] Viewing auto-whitelist database

2002-04-30 Thread Rich Wellner
Ross Vandegrift <[EMAIL PROTECTED]> writes: > I'm kinda interested in looking at what's stored in our AWL. Is there an > easy way to dump it out as something useful? strings auto-whitelist.db Or, if your some sort of a purist, you can use the db_dump util from the berkeley db kit. rw2 __

[SAtalk] Viewing auto-whitelist database

2002-04-30 Thread Ross Vandegrift
Hey everyone, I'm kinda interested in looking at what's stored in our AWL. Is there an easy way to dump it out as something useful? Ross Vandegrift [EMAIL PROTECTED] ___ Have big pipes? SourceForge.net is looking for download

Re: [SAtalk] How do I add a header test for List-Unsubscribe:

2002-04-30 Thread Jesus Climent
On Tue, Apr 30, 2002 at 01:58:01PM -0700, Jeff Shepherd wrote: > > I'm not a PERL programmer and not familiar with unix expressions, but > to show I'm willing to do some footwork, I think I need to add > something like the following lines to > /usr/share/spamassassin/20_head_tests.cf > > hea

Re: [SAtalk] How do I add a header test for List-Unsubscribe:

2002-04-30 Thread Craig R Hughes
Perl regular expressions are a little different from DOS-style file globbing patterns. The perl way of saying "match anything" is /.*/ not /*/ -- the "*" means "repeat the previous thing 0 to infinity times" and the "." means "any character". So /*/ by itself is meaningless and will actually gen

[SAtalk] How do I add a header test for List-Unsubscribe:

2002-04-30 Thread Jeff Shepherd
The majority of the mailing lists I'm on (such as SpamAssassin Talk) have a List-Unsubscribe: line in the headers. How can I add a rule that if there is a List-Unsubscribe: line in the headers, it lowers the score? I'm not a PERL programmer and not familiar with unix expressions, but to show

Re: [SAtalk] Re: [SAdev] Re: CVS: spamassassin/lib/Mail/SpamAssassinPerMsgStatus.pm,1.99,1.100

2002-04-30 Thread Craig R Hughes
What I was sugesting was to go with the previous comment about extracting comments which are designed to obfuscate things by doing this in a simplified, fast-executing regex, and an actual rule (rawbody type) worth in the 4-5 ballpark, which recognizes comments in their own right, which could be

Re: [SAtalk] Re: [SAdev] Re: CVS: spamassassin/lib/Mail/SpamAssassinPerMsgStatus.pm,1.99,1.100

2002-04-30 Thread Theo Van Dinter
On Tue, Apr 30, 2002 at 12:48:08PM -0700, Craig R Hughes wrote: > I would say having 2 rules for regular comments and "obfuscated" comments would > make sense. Obfuscated comments are very likely to only *ever* appear in spam. > regular comments might occasionally appear in legitimate mail. This

Re: [SAtalk] Re: [SAdev] Re: CVS: spamassassin/lib/Mail/SpamAssassinPerMsgStatus.pm,1.99,1.100

2002-04-30 Thread Craig R Hughes
Sidney Markowitz wrote: SM> On Tue, 2002-04-30 at 11:11, rODbegbie wrote: SM> > OE would display it to the user, but SA would miss it for scoring. SM> SM> That's a good point, especially since according to Theo it is not just SM> OE, it is IE's renderer that sees them as comments. We are talking

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Craig R Hughes
Ok, I've made this change and checked in the new Conf.pm C Tobias von Koch wrote: TvK> After thinking a bit about DCC's auto-reporting and discussing this with TvK> Richie Laager (thank you!) I'd now recommend to change the following TvK> line in Conf.pm: TvK>$self->{dcc_options} = '-QR'; T

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Sean Rima
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 30 Apr 2002, Michael Moncur stated: >> Seems to work fine for me. I've switched the require IPC::Open2 to >> use IPC::Open2 but moved it to the top of the file. Also removed the >> = {} from the hash declaration. All seems to work OK on my

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Sean Rima
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 29 Apr 2002, Kelsey Cummings stated: >> > Okay I did: >> > use IPC::Open2; instead of require IPC::Open2; and changed line >> > 270 back to what you had it, that gets rid of the Use of >> > uninitialized value line but not the wtr error

[SAtalk] Re: [SAdev] Re: CVS:spamassassin/lib/Mail/SpamAssassinPerMsgStatus.pm,1.99,1.100

2002-04-30 Thread Sidney Markowitz
On Tue, 2002-04-30 at 11:11, rODbegbie wrote: > OE would display it to the user, but SA would miss it for scoring. That's a good point, especially since according to Theo it is not just OE, it is IE's renderer that sees them as comments. We are talking about what spammers are going to use to reac

[SAtalk] Re: [SAdev] Re: CVS: spamassassin/lib/Mail/SpamAssassinPerMsgStatus.pm,1.99,1.100

2002-04-30 Thread rODbegbie
Sidney Markowitz <[EMAIL PROTECTED]> wrote: > So for the purpose of stripping out comments in HTML you would want to > match from a leading '' and you would > specifically not want to match other legal SGML comment syntax that > would not be recognized by most browsers. But, if Outlook/OutlookEx

[SAtalk] base64 errors

2002-04-30 Thread Viraj Alankar
Hello, I'm using Mail::SpamAssassin in a custom filter and passing messages via check_message_text(). Many times I get the following errors: Premature padding of base64 data at /usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/PerMsgStatus.pm line 1689 and Premature end of base64 data at

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Tobias von Koch
Hi, On Tue, 30 Apr 2002 04:32:23 -0600, Michael Moncur wrote: MM> > Seems to work fine for me. I've switched the require IPC::Open2 MM> > to use IPC::Open2 but moved it to the top of the file. Also MM> > removed the= {} from the MM> > hash declaration. All seems to work OK on my linux machine.

Re: [SAtalk] spamassassin on a mail relay

2002-04-30 Thread Nigel Metheringham
On Mon, 2002-04-29 at 22:24, Pete O'Hara wrote: > :0 > | /usr/sbin/sendmail -oi -t > > The problem is that the "-t" option sends to the recipient > defined in the "To:" header and if it is outgoing mail from > a mail downstream mailserver and the "To:" is an alias such > as "admin@downstream-mai

Re: [SAtalk] spamassassin on a mail relay

2002-04-30 Thread Miles Fidelman
On Tue, 30 Apr 2002, Vivek Khera wrote: > Date: Tue, 30 Apr 2002 09:54:46 -0400 > From: Vivek Khera <[EMAIL PROTECTED]> > To: Pete O'Hara <[EMAIL PROTECTED]> > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] spamassassin on a mail relay > > > "PO" == Pete O'Hara <[EMAIL PROTECTED]> writes: > >

Re: [SAtalk] spamassassin on a mail relay

2002-04-30 Thread Vivek Khera
> "PO" == Pete O'Hara <[EMAIL PROTECTED]> writes: PO> # If no spam just send to recipient PO> :0 PO> | /usr/sbin/sendmail -oi -t PO> The problem is that the "-t" option sends to the recipient PO> defined in the "To:" header and if it is outgoing mail from PO> a mail downstream mailserver an

[SAtalk] spamd hangs

2002-04-30 Thread Ron
I recently installed SA, but find that spamd sometimes hangs. Our mail server receives about 3500 emails a day with the following setup: 1.2 GHz AMD with 512MB RAM FreeBSD 4.5 Stable Exim 3.36 SA 2.11 Exim uses a pipe/filter transport to pass mail to spamc -> spamd spamd is launched with the f

[SAtalk] w flag and spamtraps

2002-04-30 Thread Richie Laager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm using 'spamassassin -r -w [EMAIL PROTECTED]' to report messages to that address, which is a spamtrap. (Obviously, the domain has been changed.) However, the messages are being sent with a from address that belongs to the user account which is

[SAtalk] Observations from the trenches

2002-04-30 Thread Clayton, Nik [IT]
A couple of things I've observed in the recent past that I thought I'd pass on. adversend.com seem to exist solely to send adverts. Which makes deciding what to do with the mail very easy :-) And the spammers seem to be getting a little more creative with their message text to try and avoid s

[SAtalk] Few quick things

2002-04-30 Thread Eli Barzilay
1. Both in the subject and in the body, it looks like it would have been useful to test for a long caps line rather than any all caps - a subject containing a single caps word is probably some acronym. 2. Doing a test run on a lot of old archived non-spam emails, I saw a glaring problem

RE: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Michael Moncur
> Seems to work fine for me. I've switched the require IPC::Open2 to use > IPC::Open2 but moved it to the top of the file. Also removed the > = {} from the > hash declaration. All seems to work OK on my linux machine. I installed DCC and tried this earlier and got the same errors, but after th

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Craig R Hughes
Rob McMillin wrote: RM> open2? Has anyone tested this with spamd? The reason I ask is that I RM> recently wrote a networking daemon in Perl that used open3() while doing RM> the canonical close() on STDOUT, STDIN, and STDERR. I couldn't get it to RM> work until I redirected those file handles to

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-30 Thread Rob McMillin
Kelsey Cummings wrote: >On Tue, Apr 30, 2002 at 01:42:26AM +0100, Sean Rima wrote: > >>-BEGIN PGP SIGNED MESSAGE- >>Hash: SHA1 >> >>On Tue, 30 Apr 2002, Sean Rima said: >> >> >SR> Use of uninitialized value at >SR> /usr/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm line >