Rob Reid wrote:
RR> > down to list just those addresses you want to remove from the AWL. Also, and
RR> > this is important, insert 2 blank lines at the top of the file.
RR> >
RR> > Now, run:
RR> >
RR> > spamassassin -R < addresses
RR> >
RR> > That should remove all those addresses from your AWL.
Debbie Doerrlamm wrote:
DD> About 40% of the list mails coming in have been marked as spam with scores
DD> of 3-8. What I see is almost if not all of the mails marked so far are from
<5 isn't considered spam by default -- was that a typo on your part?
DD> AOL users (no real name) as well as oth
Jesus Climent wrote:
>> Having a strict configuration in my MTA (not allowing the use of our
>> domain for mail not coming from localhost), I do not want to check mail
>> in MTA level (using spamd/c) originated in my own system.
Marc MERLIN <[EMAIL PROTECTED]> writes:
> SA-Exim lets you do that
Hi All,
I am running FreeBSD 4.4 and have SpamAssassin 2.20 installed.
I prefer sendmail as my mailer and am attempting to configure
a spam proxy mailer using spamproxyd.
However, no matter which way I invoke the spamproxyd,
it always returns the syntax. Except when I only include
the src:prt dst
At 2:23 PM EDT on May 11 Craig R Hughes sent off:
> The autowhitelist is in a binary database format. You can't safely use a
> text editor on it. You can use the tools/check_whitelist script to get a
> nice clean dump of the AWL contents.
It didn't work, but I'm beginning to think there's a pr
...even tried a reboot of the system in case a file was
locked. No luck...
Dave Strickler CEODWS - "The GroupWise Integration Experts"
Boston * Austin * Belgium * Denmark http://www.emailsolutions.com
(800) 999-5412 x10>>> Duncan Findlay
<[EMAIL PROTECTED]> 05/13/02 10:45PM >>> On Mon, Ma
On Mon, May 13, 2002 at 09:40:19PM -0400, Dave Strickler wrote:
> I have set this up with "spam_level_stars 1" in the
> /etc/mail/spamassassin/local.cf file, but SA doesn't seem to to pick up
> the settings as I don't see the stars in the header of the email judged
> as SPAM. I'm using version 2.2
I have set this up with "spam_level_stars 1" in the
/etc/mail/spamassassin/local.cf file, but SA doesn't seem to to pick up the
settings as I don't see the stars in the header of the email judged as SPAM. I'm
using version 2.20 of SA.
My config file
-
rewrite_sub
> I know this is a non-answer, but what sort of scores are your false
> positives getting?
About 5.0 to 13, depending on the type.
> If they're all tending toward 5.1-10, you might be able to raise your
> threshold rather than messing with the GA scores. I use a threshold of 7.0
> and haven't ha
I know this is a non-answer, but what sort of scores are your false
positives getting?
If they're all tending toward 5.1-10, you might be able to raise your
threshold rather than messing with the GA scores. I use a threshold of 7.0
and haven't had a false positive in about a month.
If they're al
> > since it wasn't spam but I was just curious why it didn't tag it.
>
>
>
> > X-Spam-Status: No, hits=-6.5 required=6.0
>
> If you'll notice, it's actually a _negative_ 6.5. This is due to the
> in-reply-to at the very least.
Whoops.
Where is that foot extraction device when you need it
Just joined the list today. I had SA installed on my server last week and
am 99.9% thrilled with the results.
I manage several mailing lists thru topica.com (also thrilled with them
) but am having some trouble setting a rule so none of the
mails will be marked as spam.
About 40% of the list mai
On Mon, May 13, 2002 at 08:32:48AM -0300, Derek Broughton wrote:
> The one available from the sourceforge.net/projects/spamassassin page? It
> asks me for a userid & password. I don't mind helping you out with a
> survey, but I'm not going through the rigmarole of creating yet another
> login ID
On Mon, May 13, 2002 at 03:55:28PM -0500, David T-G wrote:
> Theo, et al --
> % I don't know how it'll find the rules files, but that may be handled
> % as well. To be honest, I haven't actually done a install in non-standard
> % location with SA, so ... :|
>
> That might be a reason to build wi
Theo, et al --
...and then Theo Van Dinter said...
%
% On Mon, May 13, 2002 at 03:50:57PM -0500, David T-G wrote:
% > That worked except for updating @INC, which is not unexpected. I wonder
% > if it will work without modification if I put it all in its own directory
% > rather than doing a mak
On Mon, May 13, 2002 at 03:50:57PM -0500, David T-G wrote:
> That worked except for updating @INC, which is not unexpected. I wonder
> if it will work without modification if I put it all in its own directory
> rather than doing a make install, though, as indicated in the next
> message in this t
Michael --
...and then Michael Stenner said...
%
% On Mon, May 13, 2002 at 02:37:45PM -0500, David T-G wrote:
% >
...
% > I'd like to run spamassassin as a procmail filter on my incoming mail,
% > and I can pretty much count on root telling me to install this in my
% > local tree.
...
%
% unpa
Theo --
...and then Theo Van Dinter said...
%
% On Mon, May 13, 2002 at 02:37:45PM -0500, David T-G wrote:
% > module into the system site_perl directory. I cleaned everything and
% > tried again using "env PREFIX=..." for the perl, make, and make install
% > steps with no change.
%
% The env
On Mon, May 13, 2002 at 02:37:45PM -0500, David T-G wrote:
> Hi, all --
>
> I asked this back when I first picked up SA but didn't get a chance to
> actually try an install. In the meantime I only got one response, which
> unfortunately hasn't helped me.
>
> I'd like to run spamassassin as a pr
On Mon, May 13, 2002 at 07:21:05PM +1000, Daniel Pittman wrote:
> > Yep. Running spamproxyd is really not an option for most of us.
> > You lose (if I'm not mistaken)
> > - SMTP AUTH
>
> Nope, at least not with my model. Admittedly this /is/ vaporware
> because I don't need it, but it would work
On Mon, May 13, 2002 at 11:35:40AM +0200, Jesus Climent wrote:
> Having a strict configuration in my MTA (not allowing the use of our
> domain for mail not coming from localhost), I do not want to check mail
> in MTA level (using spamd/c) originated in my own system.
SA-Exim lets you do that and
Jose Celestino wrote:
JC> the idea behind spam assassin is indeed great, the problem is that after
JC> about 3 minutes the server load goes to:
JC>
JC> mail:/var/log/qmail# uptime
JC> 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77
JC> PID USER PRI NI SIZE RSS
On Mon, May 13, 2002 at 02:37:45PM -0500, David T-G wrote:
> module into the system site_perl directory. I cleaned everything and
> tried again using "env PREFIX=..." for the perl, make, and make install
> steps with no change.
The env thing doesn't work for Perl makefiles, that's a "configure"
Jose Celestino <[EMAIL PROTECTED]> wrote:
> the idea behind spam assassin is indeed great, the problem is that after
> about 3 minutes the server load goes to:
>
> mail:/var/log/qmail# uptime
> 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77
How are you running it? spamc/
Hi, all --
I asked this back when I first picked up SA but didn't get a chance to
actually try an install. In the meantime I only got one response, which
unfortunately hasn't helped me.
I'd like to run spamassassin as a procmail filter on my incoming mail,
and I can pretty much count on root te
On Mon, May 13, 2002 at 10:58:55AM -0400, Michael Stenner wrote:
> On Mon, May 13, 2002 at 10:41:45AM -0400, Theo Van Dinter wrote:
> > Well, "broken pipe" is really the process receiving a SIGPIPE. So a
> > possible solution would be something like:
> >
> > my $old = $SIG{'PIPE'};
> > $SIG{'PIP
> > 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77
> > The server in question is a dual Pentium III 500 Mhz, 512 Mb Ram,
> > /var/qmail/queue is a UW SCSIII and the storage is a Mylex, raid 5.
Our internal mailserver is a single P3 667, 256 MB Ram, Raid 10 UW SCSI 3
runnin
> 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77
> The server in question is a dual Pentium III 500 Mhz, 512 Mb Ram,
> /var/qmail/queue is a UW SCSIII and the storage is a Mylex, raid 5.
How much mail do you push? My little setup does about 3-4k messages/day, if
I'm read
>It seems to me that such an option ought to exist in the spamassassin
>program, or it sholdn't be a fatal error in SpamAssassin.pm.
I submitted a patch that would do this. See:
http://www.hughes-family.org/bugzilla/show_bug.cgi?id=283
--
Morbus Iff ( i'm the droid you're looking for )
Cu
Hi,
the idea behind spam assassin is indeed great, the problem is that after
about 3 minutes the server load goes to:
mail:/var/log/qmail# uptime
18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77
I have an exchange with paying for one, from that point of view is
fine.
So,
Perhaps there would be a way to detect this message better as spam?
Jim
--- Begin Message ---
Title: notepad.gif
You are receiving this email from Blue Chip Brands. If you would prefer not to
receive messages of this sort in the future, please see the unsubscribe instructions
at the b
Hello again,
I upgraded to 2.20 late last week and while the amount of spam that is getting
through has gone down *dramatically* from SA1.5, the number of false
positives has seen a (slight) increase. Ferinstance: yesterday 2086 spam
messages were received but 8 were false positives, even wit
On Mon, May 13, 2002 at 08:26:42AM -0700, Bart Schaefer wrote:
> This one is interesting because it's got new variations on the "make
> money" patterns and also because it mentions "sendomatic.com" which looks
> to be a likely candidate for a rule.
sendomatic.com looks like an online invitation
Is adding a restart for spamd into the cron job (logrotate), just after the
syslog restart can be an efficient walkthrough for that?
Gilles.
-Original Message-
From: Michael Stenner [mailto:[EMAIL PROTECTED]]
Sent: dimanche 12 mai 2002 18:22
To: [EMAIL PROTECTED]
Subject: [SAtalk] spamd
> "VK" == Vivek Khera <[EMAIL PROTECTED]> writes:
VK> It seems to me that such an option ought to exist in the spamassassin
VK> program, or it sholdn't be a fatal error in SpamAssassin.pm.
VK> Because of this, all my spamtrap addresses are bouncing since the
VK> upgrade from 2.11 to 2.20...
It seems to me from reading the man page and the source that there is
no way to turn off creating the ~/.spamassassin directory when running
the command line spamassassin program. This seems to be a fatal error
now with SA 2.20, whereas in 2.11 it either didn't try to do this or
it wasn't fatal.
This was the second of three false negatives I got within about 36 hours.
I haven't had that many misses since the first week of March.
This one is interesting because it's got new variations on the "make
money" patterns and also because it mentions "sendomatic.com" which looks
to be a likely ca
On Mon, May 13, 2002 at 08:20:27AM -0700, Bart Schaefer wrote:
> Is it time to update the ONE_TIME_MAILING rule?
>
> This is a one time email. You will never receive email from us again.
How about:
-body ONE_TIME_MAILING
/this\b.{0,20}\b(?:one|1).time\b.{0,20}\b(?:mail|offer)/i
+body
Is it time to update the ONE_TIME_MAILING rule?
--- Begin Message ---
NEW! Secret Weapon Revealed for Living SPAM-FREE!
Smart Computing Magazine calls it "a great way to avoid the
daily deluge of spam".
"I was impressed! This software is a super email filter,
substantially more powerful than
On Mon, May 13, 2002 at 10:41:45AM -0400, Theo Van Dinter wrote:
> On Mon, May 13, 2002 at 10:26:01AM -0400, Michael Stenner wrote:
> > I've tracked the problem down pretty far. If syslog-ng is restarted
> > after a Sys::Syslog::connect(), and then &syslog() is called, the
> > process will die wi
On Mon, May 13, 2002 at 04:40:50PM +0200, Gilles Nedostoupof wrote:
> Is adding a restart for spamd into the cron job (logrotate), just after the
> syslog restart can be an efficient walkthrough for that?
There's no real clean way to do that. That would always be a one-off
solution.
Hi,
On Sun, 12 May 2002 20:35:53 -0700, Harold Hallikainen wrote:
HH> Actually, it LOOKS like SpamAssassin is working. I'm getting
HH> incoming spam properly identified. So, maybe it runs without gdbm
HH> even being there. One curious thing, though: I have not yet created
HH> a .forward file. Can
I just received spam from a Chinese glass-blower (copy sent to -sightings
if anyone cares) that contained nine application/octet-stream attachments,
all of different sizes but all with filename "xy".
It also had the typical signature of a message ID added by my local MTA
even though the message
Hi,
a message I received was tagged with DATE_IN_FUTURE but the 'Date:' header
was actually about a week in the past.
The description of the rule is not as misleading as its name:
'Date: Differs by more than 4 days from current date'
Should the name be changed to something like 'BIG_DATE_DIF
On Mon, May 13, 2002 at 10:26:01AM -0400, Michael Stenner wrote:
> I've tracked the problem down pretty far. If syslog-ng is restarted
> after a Sys::Syslog::connect(), and then &syslog() is called, the
> process will die with "Broken Pipe".
>
> It does not appear that this can be caught. I t
Marc MERLIN wrote:
MM> On Sun, May 12, 2002 at 09:53:51AM -0500, Nathan Neulinger wrote:
MM> >
MM> > What about using the bgsend/bgisready functionality in Net::DNS? That
MM> > should allow multiple queries in the background in parallel.
MM>
MM> Sounds like a great idea, I wasn't aware of the fun
Mixed news on the spamd/syslog-ng front:
I've tracked the problem down pretty far. If syslog-ng is restarted
after a Sys::Syslog::connect(), and then &syslog() is called, the
process will die with "Broken Pipe".
It does not appear that this can be caught. I tried wrapping it in an
eval {} an
Marc MERLIN wrote:
MM> That's what I wanted to do originally.
MM> I just didn't do it in my current version of SA-Exim, because I didn't want
MM> to track the spamd protocol, or embed spamc into exim right now, and then
MM> have to maintain that.
MM> That said, if it were to be a library, I'd
Jim Scott wrote:
JS> 1. Since I am now using spamassassin and it is now putting all the messages
JS> tagged as spam in a folder called caught spam. How can I then use the
JS> spamassassin -r to report all messages in that mbox file? I assume that if I
JS> use spamassassin -r < caughtspam it will
You have to run /etc/rc.d/init.d/* scripts as root.
C
[EMAIL PROTECTED] wrote:
> Anybody have a quick cure for this?
>
> /etc/rc.d/init.d/spamassassin start
> Starting spamd: Cannot create tmp lockfile /root/.spamassassin/auto-
> whitelist.lock : No such file or directory
>
dman wrote:
d> On Sun, May 12, 2002 at 07:27:56PM -0700, Harold Hallikainen wrote:
d> | cc -Dbool=char -DHAS_BOOL -D_REENTRANT -DDEBIAN -I/usr/local/include
d> | -O2 spamd/spamc.c \
d> | -o spamd/spamc -L/usr/local/lib -lnsl -lndbm -lgdbm
d> | -ldbm -ldb -ldl -lm -lc -l
d> | pos
Uh,
I think I just removed the two doc translator people from the SF project... But
now I don't remember what your names are! If you want me to re-add you, please
email me with your sf ID.
Sorry!
C
___
Have big pipes? SourceForge.
Is this right?
spamd[11778]: identified spam (8.6/5.0) for root:99 in 1 seconds.
May 13 08:17:51 spamd[10289]: connection from localhost.localdomain [
127.0.0.1 ] at port 34374
May 13 08:17:51 spamd[11923]: Still running as root: user not specified, not
found, or set to root. Fall back t
Anybody have a quick cure for this?
/etc/rc.d/init.d/spamassassin start
Starting spamd: Cannot create tmp lockfile /root/.spamassassin/auto-
whitelist.lock : No such file or directory
[FAILED]
--
On Sun, 12 May 2002, Marc MERLIN wrote:
> On Mon, May 13, 2002 at 11:52:23AM +1200, Jason Haar wrote:
>> I'd suggest the opposite is better: have the real MTA relay it to
>> spamproxyd. If you do it your way, you've just lost all anti-relaying
>> protection...
>
> Yep. Running spamproxyd is reall
On Sun, 12 May 2002, [EMAIL PROTECTED] wrote:
> On Mon, May 13, 2002 at 11:52:23AM +1200, Jason Haar wrote:
> | On Sat, May 11, 2002 at 10:33:41AM +1000, Daniel Pittman wrote:
> | > Fix that first, if you want to fix anything. Grab, or write, a
> | > version of spamproxyd that you trust[1] with yo
I am having this same (I think) problem. 99% of emails get
scanned, but a few don't each day. No explanation in the header of the email. I
can see it passed through the machine running SendMail that SA runs on, but
nothing in the headers about being 'touched' by SA.
While I don't have a sol
I think you'll find if you check out the "White-List" feature,
you can enabled anything sent from your domain to be skipped by SA,
regardless of content. Can't remember the directory at the moment, but look in
the docs for something list White List.
Dave>>> "Kevin G. J. Freels"
<[EMAIL PR
> I also created a survey to give us all a better sense of who's using
SpamAssassin.
> It's just 3 questions, all multiple choice :) -- if you have 3 seconds
while
> signing up for the announcements list, go ahead and click through the
survey
> too.
The one available from the sourceforge.net/proj
Jesus Climent wrote:
> On Sat, May 11, 2002 at 06:23:19PM +0200, Arpi wrote:
>
>>Hi,
>>
>>
>>>I will add the code to the CVS and put a mark that is still beta
>>
> code.
>
>>where should i send the updates later?
>>i mean i see no sense of having it in your cvs, while the developed
>
> version
Mail Admin wrote:
> Hi,
> I want to use spamassassin on a system where real heavy load exists. I have
> 540,000 incoming emails daily.
We're doing about 7m a day. Though we do solve the problem with *lots*
of hardware. Also not everything goes through our spam engine (which is
SpamAssassin plu
Hello everybody,
I've the same problem with the same configuration (RH 7.2 - syslog 1.4.14 -
SpamAssassin 2.20 - Postfix 1.1.8).
>1) verify spamd is running
Yes
>2) restart syslog-ng
Ok
>3) verify spamd is running
Yes
>4) send a test message through spamc
Ok
>5) verify spamd is running
Yes, but
On Mon, May 13, 2002 at 02:05:24AM -0700, Daniel Quinlan wrote:
> Jesus Climent wrote:
>
> > Anyone's comments about the upload of the c code in the cvs?
>
> A few things off the top of my head:
>
> - Limit the a maximum amount of data going into body tests (max
[snip]
> - Order tests bette
Jesus Climent wrote:
> Anyone's comments about the upload of the c code in the cvs?
It's interesting, but given how quickly spammers adapt and change, I
think trying to keep up with them using C as the implementation
language will be problematic. It seems like any solution that loses
the flexib
64 matches
Mail list logo
