Re: [SAtalk] whitelist

2002-05-21 Thread dman
On Tue, May 21, 2002 at 09:36:41PM +0200, Mark Martinec wrote: | | Rob> Now SPAM's getting through this "loop hole". Is there any way to | | Rob> whitelist based upon Recipient to:, or am I just screwed? | | | | Can't you just define a "header" rule, such as | | | | header REALLY_ME

Re: [SAtalk] RULES File For rpm version

2002-05-21 Thread Ron Carter
> Jim> I installed the i386.rpm version of Spam Assassin and thanks to the > Jim> help from everybody, I got it up and running - question is, where's > Jim> the rules file so that I can alter the percentages and such? > > Dunno, but you can list the files in an RPM with > > rpm -ql

Re: [SAtalk] RULES File For rpm version

2002-05-21 Thread Skip Montanaro
Jim> I installed the i386.rpm version of Spam Assassin and thanks to the Jim> help from everybody, I got it up and running - question is, where's Jim> the rules file so that I can alter the percentages and such? Dunno, but you can list the files in an RPM with rpm -ql rpmname o

[SAtalk] RULES File For rpm version

2002-05-21 Thread Jim Hale
I installed the i386.rpm version of Spam Assassin and thanks to the help from everybody, I got it up and running - question is, where's the rules file so that I can alter the percentages and such? Thanks! Jim Hale --- Jim & Kathy's Website Collection http://hale.dyndns.org

Re: [SAtalk] One Last Question Before I Start Installing SpamAssassin...

2002-05-21 Thread Theo Van Dinter
On Tue, May 21, 2002 at 04:17:17PM -0500, Jim Hale wrote: > I've decided that until I get comfortable with running SA as a system-wide > util, I'm going to set it up for individuals on my EMail server (there's only 5 > so copying the files needed shouldn't be a big hassle) - anyway - is there a

[SAtalk] One Last Question Before I Start Installing SpamAssassin...

2002-05-21 Thread Jim Hale
I've decided that until I get comfortable with running SA as a system-wide util, I'm going to set it up for individuals on my EMail server (there's only 5 so copying the files needed shouldn't be a big hassle) - anyway - is there a way to link SA to process incoming messages to a mailing list a

Re: [SAtalk] HTML comments not searched by body rule?

2002-05-21 Thread Ken Causey
Great! Thank you. On Tue, 2002-05-21 at 15:17, Theo Van Dinter wrote: > On Tue, May 21, 2002 at 03:03:06PM -0500, Ken Causey wrote: > > body IMAS_SCRIPT/imas.?script/i > > > > What's up with that? HTML comments are not searched? > > Try using rawbody instead. body trims out t

Re: [SAtalk] HTML comments not searched by body rule?

2002-05-21 Thread Theo Van Dinter
On Tue, May 21, 2002 at 03:03:06PM -0500, Ken Causey wrote: > body IMAS_SCRIPT/imas.?script/i > > What's up with that? HTML comments are not searched? Try using rawbody instead. body trims out the cruft. The 'raw body' of a message is the text, including all

[SAtalk] HTML comments not searched by body rule?

2002-05-21 Thread Ken Causey
I recently mentioned the occurrence of spams referring to something called IMAS. In particular they are HTML emails and will include near the beginning OK. So I added the following the my local.cf: body IMAS_SCRIPT/imas.?script/i describe IMAS_SCRIPTTag indicating

Re: [SAtalk] whitelist

2002-05-21 Thread Mark Martinec
| Rob> Now SPAM's getting through this "loop hole". Is there any way to | Rob> whitelist based upon Recipient to:, or am I just screwed? | | Can't you just define a "header" rule, such as | | header REALLY_ME To =~ [EMAIL PROTECTED]/ | describe REALLY_ME To: indicates it's for m

Re: [SAtalk] SA not scanning messages?

2002-05-21 Thread Ollie Acheson
I have just in the past week noticed a similar problem: some messages get through with no trace of spamd looking at them. I am running fetchmail-5.9.11, qmail-1.03, procmail-3.21 and spamc/spamd-2.20 with razor-1.20, all on redhat 7.2/linux-2.4.7-10. spamc/d works well, dumping perhaps 30 emails

RE: [SAtalk] whitelist

2002-05-21 Thread Rob Dege
These are global rules for the company mail server. I figured that any mail sent internally would have the mail server IP listed, which would make an excellent check rule. Then if anyone spoofs the FROM, the lack of the mail server IP would prevent the whitelist exception. -Rob > -Origina

Re: [SAtalk] whitelist

2002-05-21 Thread Skip Montanaro
Rob> Now SPAM's getting through this "loop hole". Is there any way to Rob> whitelist based upon Recipient to:, or am I just screwed? Can't you just define a "header" rule, such as header REALLY_ME To =~ [EMAIL PROTECTED]/ describe REALLY_ME To: indicates it's for me score R

Re: [SAtalk] Ughhh... High Processor Utilization

2002-05-21 Thread Sidney Markowitz
On Tue, 2002-05-21 at 11:20, Joel Epstein wrote: > Is there a way to set a size limit as to which mails are scanned? Since you are using procmail you can simply add a test * < 25 to the recipe that you use to call spamassassin. By the way, I have a similar RedHat 6.2/sendmail/procmail setu

[SAtalk] whitelist

2002-05-21 Thread Rob Dege
I have been using whitelist_from to prevent any work email addresses from getting accidently marked as SPAM. It seemed to be working well until some evil SOB started spoofing the FROM line, with my work domain address. Now SPAM's getting through this "loop hole". Is there any way to whitelist

Re: [SAtalk] Ughhh... High Processor Utilization

2002-05-21 Thread Joel Epstein
Tobias, Thanks for your response. We only use spam assassin currently for 4 users on our system. I have not investigated the spamd daemon and client as of yet. Is there a way to set a size limit as to which mails are scanned? That would be a perfect work-around for this. My sendmail has be

Re: [SAtalk] Spam Grading Information as attachment

2002-05-21 Thread Tony L. Svanstrom
On Tue, 21 May 2002 the voices made Matt Sergeant write: > Tony L. Svanstrom wrote: > > The problem with that is, of course, that it messes up existing MIME... > > meaning that people will bitch about not having the cake and eating it at the > > same time, or sumthin like that. :-) > > It doesn

Re: [SAtalk] date difference testing

2002-05-21 Thread Daniel Quinlan
Kingsley G. Morse Jr. writes: > Being an old AI/GA programmer who just started using > SA, your post fascinates me. Thanks for the update on > your research. > [...] > It seems to me that it would be interesting to consider a _summary_ of > > a.) The percentage of false positives and >

[SAtalk] problem with load of triplets.txt?

2002-05-21 Thread Neulinger, Nathan
This code: if (!$triplets_loaded) { my $filename = $self->{main}->{rules_filename} . "/triplets.txt"; if (!open (TRIPLETS, "<$filename")) { dbg ("failed to open '$filename', cannot check dictionary"); return 1; } is giving me this output from spamd: debug: checking

Re: [SAtalk] Solved: Solaris make test fails

2002-05-21 Thread John Horne
On 21-May-2002 at 15:23:56 Bart Schaefer wrote: > On Tue, 21 May 2002, John Horne wrote: >> I guess the question should be should 'make test' ignore any >> pre-installed configuration file? Is this mentioned anywhere in the > docs? If it is then I missed it. > > See bugzilla.spamassassin.org #207

[SAtalk] MIME boundary recognition, and body vs. full

2002-05-21 Thread Tom Pfeifer
While RFC2045 says that the boundary parameter of the header Content-Type: multipart/alternative; can be quoted or not, spamassassin seems to treat them differently, in particular it seem not to consider an unquoted boundary parameter as MIME. rfc2045: >Note that the value of a quoted string par

Re: [SAtalk] [Celina1737e43@hanmail.net: Naked chixs]

2002-05-21 Thread Daniel Rogers
On Sat, May 18, 2002 at 09:10:06AM -0700, Scott Nelson wrote: > I see something in SA 2.20; > uri HTTP_ESCAPED_HOST /^https?\:\/\/[^\/]*%/ > describe HTTP_ESCAPED_HOST Uses %-escapes inside a URL's hostname > score HTTP_ESCAPED_HOST 1.849 > > I think ESCAPES_DIGIT /%3[0-9]

Re: [SAtalk] Solved: Solaris make test fails

2002-05-21 Thread Bart Schaefer
On Tue, 21 May 2002, John Horne wrote: > I guess the question should be should 'make test' ignore any pre-installed > configuration file? Is this mentioned anywhere in the docs? If it is then I > missed it. See bugzilla.spamassassin.org #207 ...

[SAtalk] Solved: Solaris make test fails

2002-05-21 Thread John Horne
On 20-May-2002 at 16:21:47 John Horne wrote: > On 20-May-2002 at 10:59:00 John Horne wrote: > Damn! Spoke too soon when I reported that this was sorted on the solaris 7 > system. I've just installed perl 5.6.1 with no problems onto one of the > mailhubs (solaris 8); rebuilt spamassassin and I stil

Re: [SAtalk] Why some negative scores?

2002-05-21 Thread Matt Sergeant
John Ackermann N8UR wrote: > Hi -- > > I reinstalled SA 2.20 after running and then having to disable an earlier > version some time ago. The new version doesn't seem to be catching as many > spams as the old one, and as I was perusing the report on those it did > find, I was surprised at some o

[SAtalk] Why some negative scores?

2002-05-21 Thread John Ackermann N8UR
Hi -- I reinstalled SA 2.20 after running and then having to disable an earlier version some time ago. The new version doesn't seem to be catching as many spams as the old one, and as I was perusing the report on those it did find, I was surprised at some of the negative scores I saw assigned to

Re: [SAtalk] Ughhh... High Processor Utilization

2002-05-21 Thread Tobias von Koch
hi, On Tue, 21 May 2002 08:50:57 -0500, Joel Epstein wrote: JE> I've been using Spam Assassin for a few months now and find it to be JE> a fantastic project. My thanks go out to the team! JE> JE> I do have one major issue though; Whenever files with large JE> attachments ( > 4mb )are sent into

[SAtalk] Getting Started

2002-05-21 Thread Jim Hale
I need to get try and get this running on my personal EMail server (home-based) that has several accounts on it. I'm using Postfix (not sendmail, but I do have a sendmail.postfix executable to work with.) - Are there instructions for setting up SA with Postfix and also the ability for people to

[SAtalk] Ughhh... High Processor Utilization

2002-05-21 Thread Joel Epstein
I've been using Spam Assassin for a few months now and find it to be a fantastic project. My thanks go out to the team! I do have one major issue though; Whenever files with large attachments ( > 4mb )are sent into our domain, SpamAssassin will take about 45% of available memory and 98% of th

Re: [SAtalk] date difference testing

2002-05-21 Thread Kingsley G. Morse Jr.
Daniel, Being an old AI/GA programmer who just started using SA, your post fascinates me. Thanks for the update on your research. On Mon:22:07, Daniel Quinlan wrote: [...] > My only gripe is that having so many rules is somewhat clumsy in the > scores file, even using arguments. What if spamass

Re: [SAtalk] Spam Grading Information as attachment

2002-05-21 Thread Matt Sergeant
Tony L. Svanstrom wrote: > On Tue, 21 May 2002 the voices made Matt Sergeant write: > > >>Daniel Quinlan wrote: >> >>>Matt Sergeant <[EMAIL PROTECTED]> writes: >>> >>> >>> Yeah, I've got that working here. It's a pretty trivial change to SpamAssassin, but I haven't gotten around to integ

Re: [SAtalk] Spam Grading Information as attachment

2002-05-21 Thread Tony L. Svanstrom
On Tue, 21 May 2002 the voices made Matt Sergeant write: > Daniel Quinlan wrote: > > Matt Sergeant <[EMAIL PROTECTED]> writes: > > > > > >>Yeah, I've got that working here. It's a pretty trivial change to > >>SpamAssassin, but I haven't gotten around to integrating it yet. It's > >>just a matter

Re: [SAtalk] Spam Grading Information as attachment

2002-05-21 Thread Matt Sergeant
Daniel Quinlan wrote: > Matt Sergeant <[EMAIL PROTECTED]> writes: > > >>Yeah, I've got that working here. It's a pretty trivial change to >>SpamAssassin, but I haven't gotten around to integrating it yet. It's >>just a matter of setting the content-type to multipart/mixed, and set >>the first

Re: [SAtalk] botched MIME tests?

2002-05-21 Thread Matt Sergeant
Daniel Quinlan wrote: > Matt Sergeant writes: > > >>Every single one of these is a virus, not spam. > > > I think it's a worm, actually Call it what you like. It's still malicious code designed purely to propogate (and perhaps do something evil while it does so). In no way is it unsolicited