Yes -- SA itself does not communicate with syslog -- which is probably the Right
Thing. spamd is the thing which is detaching itself from the terminal and
therefore losing SA debug messages; it should properly not drop those messages,
but instead redirect them to wherever the output might usefull
M. Brownsworth wrote:
MB> Ah, sorry. My procmail is doing system-wide filtering and invokes
MB> spamc. From /usr/local/etc/procmailrc:
MB>
MB> :0fw
MB> | spamc
MB>
MB> :0:
MB> * ^X-Spam-Status: Yes
MB> /var/log/spam
Ok, so why not just add a rule at the top of your procmail recipe which looks
Olivier Nicole wrote:
ON> > I don't see how the Subject contains anything remotely like a unique
ON> > ID code. Is this right?
ON>
ON> I did not check at the rule (too lazy.buzy) but maybe the unique ID is
ON> characterised by some string at the end of Subject, after a lot of
ON> spaces.
Yes, 7
Harry Putnam wrote:
HP> Probably should go back to default, and see what I observe. The
HP> first time around a message with FREE FREE in the subject and
HP> several times in the body came thru, it may have been a fluke.
There's a rule for that now in CVS. Any repeated word in all caps which
Bart Schaefer wrote:
BS> Hrm. This was reported once before, and I thought the description had
BS> been updated then. Sorry, I should have checked.
Ok, I just checked in a better description.
C
___
Don't miss the 2002 Sprint PCS A
Harry Putnam wrote:
HP> I've also had to edit a number of other rules score values so
HP> probably just got off on the wrong foot.
You're just not going to do a better job of optimizing scores than the GA will,
though you might be seeing some "unusual" email that's not paralleling the
corpus wel
Bryan Hoover wrote:
> Craig R Hughes wrote:
>
> > $SIG{__WARN__} = sub { logmsg($_[0]); }
> >
>
> I assume you would add the above to spamd? Would it make any
> difference
> if it were added to SA instead?
That is, within the context of using spamd given the tty (about which I
know nothing) dis
Harry Putnam wrote:
HP> Duncan Findlay <[EMAIL PROTECTED]> writes:
HP>
HP> [...]
HP>
HP> >> Going to the debug output, how can I find the output that pertains to
HP> >> that message? No date no msgid.
HP> >> I don't see why its being overlooked either. Its not a restart
HP> >> problem though.
Lars Hansson wrote:
LH> On Wednesday 05 June 2002 00:20, Tony L. Svanstrom wrote:
LH> > Looks like IT-news in swedish qualifies as part porn whenever something in
LH> > the news ends (end in swedish == slut). =D
LH>
LH> Heh, I suspect the number 6 (sex in swedish) will have the same effect ;)
I
On Tue, Jun 04, 2002 at 01:23:58PM -0300, Marc G. Fournier wrote:
|
| How hard would it be to change it so that if required_hits == 0, then it
| skips all checks and just passes through the message with no changes as
| !is_spam?
This sounds like a good idea, regardless.
| Essentially, i want t
Craig R Hughes wrote:
> $SIG{__WARN__} = sub { logmsg($_[0]); }
>
I assume you would add the above to spamd? Would it make any difference
if it were added to SA instead?
Bryan
--
Labor exploitation hurts us all - Sign the petition:
http://www.zazona.com/h1bpetition/P/facts.html
Proud ugly web
Doug --
...and then Doug Dempsey said...
%
% Also, how can I validate if spamassassin is operating correctly. I have the
% qmail-scanner insert a tag so I know it has been scanned. Is there away to
% do the same thing with spamassassin?
I don't have answers for your first batch of questions, bu
Also, how can I validate if spamassassin is operating correctly. I have the
qmail-scanner insert a tag so I know it has been scanned. Is there away to
do the same thing with spamassassin?
Thanks
Doug
-Original Message-
From: Doug Dempsey [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, Jun
Does someone have a basic recipe I can look over to validate my
installation? I think it is installed right but I don't know how to confirm
it. Additionally from the reading I have one specific question. How do I
setup this file /usr/bin/spamd -F 0 -L -x -u spamc to run with the specified
permissi
> I don't see how the Subject contains anything remotely like a unique
> ID code. Is this right?
I did not check at the rule (too lazy.buzy) but maybe the unique ID is
characterised by some string at the end of Subject, after a lot of
spaces.
Olivier
___
>Suppose a recipient wanted a message that had been marked as spam by
>mistake, intercepted, and archived. Is there a way to deliver this
>specific message to the recipient, preventing it from being
>intercepted again? It would involve circumventing spamd's scanning
>this message so that it
On Wednesday 05 June 2002 00:20, Tony L. Svanstrom wrote:
> Looks like IT-news in swedish qualifies as part porn whenever something in
> the news ends (end in swedish == slut). =D
Heh, I suspect the number 6 (sex in swedish) will have the same effect ;)
---
Lars Hansson
__
>On Tue, 4 Jun 2002, M. Brownsworth wrote:
>
>> Ah, sorry. My procmail is doing system-wide filtering and invokes
>> spamc.
>>
>> $DEFAULT is the default used by the vanilla procmail from FreeBSD
>> 4.5's port. The default mail spool directory is /var/mail. The Perl
>> script to redeliver
Chris,
>Would some one please explain to me how this mail got to me, or where I could go to
>learn more.
To use the classic snail-mail analogy, what you're seeing is the letter itself, not
the envelope it was delivered in. The envelope in this case is the actual SMTP
session which led to th
On Tue, 4 Jun 2002, M. Brownsworth wrote:
> Ah, sorry. My procmail is doing system-wide filtering and invokes
> spamc.
>
> $DEFAULT is the default used by the vanilla procmail from FreeBSD
> 4.5's port. The default mail spool directory is /var/mail. The Perl
> script to redeliver runs as r
>On Tue, 4 Jun 2002, M. Brownsworth wrote:
>
>> Suppose a recipient wanted a message that had been marked as spam by
>> mistake, intercepted, and archived. Is there a way to deliver this
>> specific message to the recipient, preventing it from being
>> intercepted again?
>[...]
>> BTW, procm
Hi,
I just got this spam (header only appended below), and it is
characteristic of a type of spam I have gotten recently where the To and
From addresses in the headers are the same, but there seems to be no
part in the header that would indicate a local address.
euler.DMS.UMontreal.CA is my s
On Tuesday 04 June 2002 03:12 pm, Craig R Hughes wrote:
> SA folks
> As some of you may know from reading about it in Simson Garfinkel's recent
> column, or from other hints on the grapevine, I have recently incorporated
> a company to commercialize a product based on SpamAssassin.
Cool! And g
On Tue, Jun 04, 2002 at 10:14:21AM -0700, Harry Putnam wrote:
> Duncan Findlay <[EMAIL PROTECTED]> writes:
>
> [...]
>
> >> Going to the debug output, how can I find the output that pertains to
> >> that message? No date no msgid.
> >> I don't see why its being overlooked either. Its not a r
Bryan Hoover wrote:
BH> Harry Putnam wrote:
BH>
BH> > So I think Duncan has hit it, in that -d (daemonize) silences the
BH> > debug output.
BH>
BH> Indeed sir. I was woefully ignorant of the behavior.
BH>
BH> Does that mean too, that when spamd calls SA, SA does not log as usual?
BH> My thought
On Tue, 4 Jun 2002, M. Brownsworth wrote:
> Suppose a recipient wanted a message that had been marked as spam by
> mistake, intercepted, and archived. Is there a way to deliver this
> specific message to the recipient, preventing it from being
> intercepted again?
[...]
> BTW, procmail is my
SA folks
As some of you may know from reading about it in Simson Garfinkel's recent
column, or from other hints on the grapevine, I have recently incorporated a
company to commercialize a product based on SpamAssassin. I will continue to
dedicate a lot of time to the open source project; this is
Just got a penis enlargement spam with "Time - 1:57:19 pm" in the
subject.
Might be a pattern worth matching on worth an extra half-point or so.
-- Nathan
Nathan Neulinger EMail: [EMAIL PROTECTED]
University of
David T-G spaketh:
>% Some good info and suggestions in your reply. What do you think of
>
>Happy to help!
>
>% this brute-force approach?
>
>Hrmmm...
>
>% $cf = '/etc/mail/spamassassin/local.cf';
>% system("cp -p $cf ${cf}.tmp"); # Preserve original
>% open(CF, ">>$cf") || die "Can't open $cf
Michelle, et al --
...and then M. Brownsworth said...
%
% >...and then M. Brownsworth said...
% >%
...
% >% this message so that it can be redelivered to the user's local
% >% mailbox.
% >
% >In some recent posts there has been talk of SA automatically (that is, in
% >the default configuration)
>Michelle --
>
>...and then M. Brownsworth said...
>%
>% Suppose a recipient wanted a message that had been marked as spam by
>% mistake, intercepted, and archived. Is there a way to deliver this
>% specific message to the recipient, preventing it from being
>
>Almost certainly; anything is possi
Michelle --
...and then M. Brownsworth said...
%
% Suppose a recipient wanted a message that had been marked as spam by
% mistake, intercepted, and archived. Is there a way to deliver this
% specific message to the recipient, preventing it from being
Almost certainly; anything is possible :
>On Tue, Jun 04, 2002 at 11:54:55AM -0700, M. Brownsworth wrote:
>> Suppose a recipient wanted a message that had been marked as spam by
>> mistake, intercepted, and archived. Is there a way to deliver this
>> specific message to the recipient, preventing it from being
>> intercepted again?
The included false positive came in to a co-worker's mailbox today:
I don't see how the Subject contains anything remotely like a unique
ID code. Is this right?
Ross Vandegrift
[EMAIL PROTECTED]
Received: from SpoolDir by HAL (Mercury 1.48); 4 Jun 02 13:51:51 -0500
Return-path: <[EMAIL PROTECT
Suppose a recipient wanted a message that had been marked as spam by
mistake, intercepted, and archived. Is there a way to deliver this
specific message to the recipient, preventing it from being
intercepted again? It would involve circumventing spamd's scanning
this message so that it can b
On Tue, 4 Jun 2002 the voices made Harry Putnam write:
> I tried a defaut setup first though and lots of stuff was coming thru
> that shouldn't.
I've got it at 4.5, which along with AWL removes 99% of SPAM with no false
positives (I used to just /dev/null along with autoreplies, but now I've be
Bart Schaefer <[EMAIL PROTECTED]> writes:
>> describe FORGED_YAHOO_RCVD Forged yahoo.com 'Received:' header found
>>
>> Comes no nearer to making it clear what is really happening.
>
> Hrm. This was reported once before, and I thought the description had
> been updated then. Sorry, I should
On Tue, 4 Jun 2002, Harry Putnam wrote:
> Thanks, I guess it makes sense, but I have to say that reading the
> description:
> describe FORGED_YAHOO_RCVD Forged yahoo.com 'Received:' header found
>
> Comes no nearer to making it clear what is really happening.
Hrm. This was reported once befo
Harry, et al --
...and then Harry Putnam said...
%
% Bart Schaefer <[EMAIL PROTECTED]> writes:
%
% > On Tue, 4 Jun 2002, Harry Putnam wrote:
% >
...
% >> FORGED_YAHOO_RCVD version=2.20
% >>
% >> Yet a grep of the received headers reveal no instance of yahoo.
% >
% > I'll answer since this ha
Duncan Findlay <[EMAIL PROTECTED]> writes:
[...]
>> Going to the debug output, how can I find the output that pertains to
>> that message? No date no msgid.
>> I don't see why its being overlooked either. Its not a restart
>> problem though. But can't find debug info to help out.
>>
>
> Fi
Bart Schaefer <[EMAIL PROTECTED]> writes:
> On Tue, 4 Jun 2002, Harry Putnam wrote:
>
>> This line appears in mail:
>> X-Spam-Status: Yes, hits=2.2 required=2.0 tests=Repeat_Any_Allcap,\
>> FORGED_YAHOO_RCVD version=2.20
>>
>> Yet a grep of the received headers reveal no instance of yahoo.
>
>
Just found this looking through GeoCrawler:
=
This has come up before a few times (not quite an FAQ though). The
concensus at the end of the discussion ends up being that deciding whether
or not to process mail through SA is best handled upstream of SA -- why
invoke
On Tue, Jun 04, 2002 at 09:34:39AM -0700, Harry Putnam wrote:
> Can we make Debug output more usefull?
>
> Maybe adding a date prefix and something to crossreference what
> message is being read? A msgid would be very handy.
>
> Its kind of useless as it stands unless you are doing only one
> m
Can we make Debug output more usefull?
Maybe adding a date prefix and something to crossreference what
message is being read? A msgid would be very handy.
Its kind of useless as it stands unless you are doing only one
message.
An example might be that I see a message where FROM_MALFORMED was
g
How hard would it be to change it so that if required_hits == 0, then it
skips all checks and just passes through the message with no changes as
!is_spam?
Essentially, i want to install this on several servers, one of which has
>5k users ... I want to install it so that, by default, it short-cir
Looks like IT-news in swedish qualifies as part porn whenever something in the
news ends (end in swedish == slut). =D
/Tony
-- Forwarded message --
From: Computer Sweden <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Date: Tue, 4 Jun 2002 13:01:41 +0200
On Tue, 4 Jun 2002, Harry Putnam wrote:
> This line appears in mail:
> X-Spam-Status: Yes, hits=2.2 required=2.0 tests=Repeat_Any_Allcap,\
> FORGED_YAHOO_RCVD version=2.20
>
> Yet a grep of the received headers reveal no instance of yahoo.
I'll answer since this has come up before and I sugge
This line appears in mail:
X-Spam-Status: Yes, hits=2.2 required=2.0 tests=Repeat_Any_Allcap,\
FORGED_YAHOO_RCVD version=2.20
Yet a grep of the received headers reveal no instance of yahoo.
It is from a yahoo.com user, but the message mentiones rec'd, not
from.
__
On Tue, Jun 04, 2002 at 09:33:13AM -0500, [EMAIL PROTECTED] wrote:
> When trying to compile the current CVS, It was missing a library called
> TextCat.pm. I cannot seem to locate a copy of this anywhere.
>
Try doing a cvs update. Or if you downloaded of the web site, try
downloading again. (I.
When trying to compile the current CVS, It was missing a library called
TextCat.pm. I cannot seem to locate a copy of this anywhere.
<>
___
Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -
I take it this is corrected in CVS. Is it just a typo? Can I just correct
it? Take the source for this module from CVS?
Doug
On Mon, 3 Jun 2002, Bryan Hoover wrote:
> Doug Crompton wrote:
>
> > SA has been running great here for 2 months. I am very happy with it's
> >
> > performance. In the
Is now available, for those that are using both ...
*Very* base functionality is in there right now, which is limited to just
changing the required_hits value, but that was just to get it into the
repository ... we've already got a load of changes that should be
committed later on tonight ...
W
Hi SA-users,
I figured that spamd queries for "username='$user' or username='GLOBAL'"
while retrieving the user-preferences from a SQL database. Do the
entries need to have a special sorting in order to have global
settings overridden by user entries?
During a test I noticed that the GLOBAL setti
"Michael Moncur" <[EMAIL PROTECTED]> writes:
> I'm confused. Your message has spamassassin-talk in the To: field. So does
> this one. In my scan through the last 24 hours worth of messages to SAtalk
> and SAdev, 100% of them had the list's address in either the To: or Cc:
> field.
No, I'm confus
54 matches
Mail list logo
