[SAtalk] Re: Fw: Hi, it's Nadia. please come talk with me.. I have a webcam

2002-06-21 Thread Derrick 'dman' Hudson
On Fri, Jun 21, 2002 at 09:16:56PM -0400, David B. Bitton wrote: | how did this make it past spam assassin? Your setup must be odd. Your message got -1.4 on my site, but I have a SALIST rule scoring -10. If you hadn't sent it to the list it would have scored 8.6 and hit the spam bucket. (messa

[SAtalk] Re: anyone seen cloudmark.com?

2002-06-21 Thread Derrick 'dman' Hudson
On Sat, Jun 22, 2002 at 11:05:21AM +0800, Lars Hansson wrote: | On Fri, 21 Jun 2002 15:17:37 -0700 | "Daniel Rogers" <[EMAIL PROTECTED]> wrote: | | > On Fri, Jun 21, 2002 at 05:36:15PM -0400, Duncan Findlay wrote: | > > In the U.S. you can get sued for stuff so simple as selling hot | > > coffee

Re: [SAtalk] Spelling error....

2002-06-21 Thread Duncan Findlay
On Fri, Jun 21, 2002 at 10:30:21PM -0500, Larry Rosenman wrote: > Just upgraded to 2.31, and noticed the following typo in the first > Assassinated spam: > > SPAM: URGENT_BIZ (2.7 points) BODY: Containts 'URGENT BUSINESS' Fixed 2 instances of this. -- Duncan Findlay

[SAtalk] Spelling error....

2002-06-21 Thread Larry Rosenman
Just upgraded to 2.31, and noticed the following typo in the first Assassinated spam: SPAM: URGENT_BIZ (2.7 points) BODY: Containts 'URGENT BUSINESS' -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: [EMAIL PROTECTED] US Mail

Re: [SAtalk] anyone seen cloudmark.com?

2002-06-21 Thread Lars Hansson
On Fri, 21 Jun 2002 15:17:37 -0700 "Daniel Rogers" <[EMAIL PROTECTED]> wrote: > On Fri, Jun 21, 2002 at 05:36:15PM -0400, Duncan Findlay wrote: > > In the U.S. you can get sued for stuff so simple as selling hot > > coffee but failing to write "HOT" on the cup. > > That case isn't as simple as y

Re: [SAtalk] X- references in headers

2002-06-21 Thread Bart Schaefer
On Fri, 21 Jun 2002, Pete Hanson wrote: > A nice argument for people doing legitimate business on the web to start > banding together and trying to do something about spam. These bottom > feeders aren't helping legitimate business one bit, and may in fact be > doing harm. Actually there are som

Re: [SAtalk] X- references in headers

2002-06-21 Thread Matthew Cline
On Friday 21 June 2002 06:08 pm, Bart Schaefer wrote: > Here's an article that explains about "appending," a technique that seems > appealing to the naive marketer but often ends up turning them into an > "unintentional" spammer: > > http://www.clickz.com/em_mkt/opt/article.php/1367711 >Fr

Re: [SAtalk] X- references in headers

2002-06-21 Thread Pete Hanson
At 06/21/2002 17:49, Danita Zanre wrote: >Unfortunately, we also get complaints from customers saying "I >purchased such-and-such and was told that I would receive information >about upgrades - I see there's an upgrade and I didn't hear from you" - >and we check and they have unsubscribed, or the

Re: [SAtalk] Fw: Hi, it's Nadia. please come talk with me.. I havea webcam

2002-06-21 Thread Michael Leone
On Fri, 2002-06-21 at 21:16, David B. Bitton wrote: > how did this make it past spam assassin? Your message got flagged as spam for me, using 2.3.0: X-Razor-id: 3d79d76e0c60dd0e72660b706dc3c40e34b7a697 X-Spam-Status: Yes, hits=8.6 tests=PORN_11,CLICK_BELOW,DOUBLE_CAPSWORD,HTTP_USERNAME_U

Re: [SAtalk] X- references in headers

2002-06-21 Thread Danita Zanre
Bart, this is very useful, thanks. >http://sourceforge.net/mailarchive/message.php?msg_id=1640093 >Spammers give everyone a bad name. Isn't that the truth - we occasionally get people who complain about getting "too much email from us" We send out a mass mailing to our customers at most about

[SAtalk] Fw: Hi, it's Nadia. please come talk with me.. I have a webcam

2002-06-21 Thread David B. Bitton
how did this make it past spam assassin? --   David B. Bitton[EMAIL PROTECTED]www.codenoevil.com   Code Made Fresh Daily™ - Original Message - From: Bryce Chapin To: [EMAIL PROTECTED] Sent: Friday, June 21, 2002 5:22 PM Subject: Hi, it's Nadia. please come talk with me.. I have a web

RE: [SAtalk] X- references in headers

2002-06-21 Thread Rose, Bobby
His example message is really empty. It would seem that if these are the only triggers that set SA off then that should be the offset. -Original Message- From: Bart Schaefer [mailto:[EMAIL PROTECTED]] Sent: Friday, June 21, 2002 9:08 PM To: Danita Zanre Cc: [EMAIL PROTECTED] Subject: Re

Re: [SAtalk] Razor Reporting in SA

2002-06-21 Thread Duncan Findlay
On Fri, Jun 21, 2002 at 08:00:31PM -0400, Rose, Bobby wrote: > I thought it got added. According to the changelog razor2 support was > added. > > 2002-06-17 18:24 hughescr > > * lib/Mail/SpamAssassin/: Dns.pm, Reporter.pm: Bugzilla #446: > Razor2 support -- hope it works! >

Re: [SAtalk] X- references in headers

2002-06-21 Thread Bart Schaefer
On Fri, 21 Jun 2002, Danita Zanre wrote: > SPAM: Content analysis details: (5.7 hits, 5 required) > SPAM: X_SMTPEXP_VERSION (3.2 points) Found a X-SMTPExp-Version header > SPAM: X_EM2.31PRESENT (1.3 points) Found a X-EM-Version header > SPAM: X_EM_REGISTRATION (1.2 points) Found a X-EM-R

RE: [SAtalk] X- references in headers

2002-06-21 Thread Danita Zanre
>>> "Rose, Bobby" <[EMAIL PROTECTED]> 6/21/2002 6:19:09 PM >>> >Can you include the header that produced this also? Yes, certainly - here's the entire message since it's not terribly long: >From [EMAIL PROTECTED] Fri Jun 21 12:09:53 2002 X-Mail-Format-Warning: Bad RFC2822 header formatting in M

RE: [SAtalk] X- references in headers

2002-06-21 Thread Rose, Bobby
Can you include the header that produced this also? -Original Message- From: Danita Zanre [mailto:[EMAIL PROTECTED]] Sent: Friday, June 21, 2002 8:05 PM To: [EMAIL PROTECTED] Subject: [SAtalk] X- references in headers I've installed SpamAssassin for our GroupWise system, and it is fant

[SAtalk] X- references in headers

2002-06-21 Thread Danita Zanre
I've installed SpamAssassin for our GroupWise system, and it is fantastic. Thus far out of 487 messages that have come in since installation, 180 have been classified as Spam, and except for 2 cases they really WERE Spam. One does not concern me - another mail server was not configured correctly

RE: [SAtalk] Razor Reporting in SA

2002-06-21 Thread Rose, Bobby
I thought it got added. According to the changelog razor2 support was added. 2002-06-17 18:24 hughescr * lib/Mail/SpamAssassin/: Dns.pm, Reporter.pm: Bugzilla #446: Razor2 support -- hope it works! -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED]

Re: [SAtalk] Razor Reporting in SA

2002-06-21 Thread Theo Van Dinter
On Fri, Jun 21, 2002 at 07:19:39PM -0400, Rose, Bobby wrote: > I don't think it's working correctly. For one, if I report thru SA with > the debug switch it looks like it's using the old agents. 2.31 doesn't support Razor2, so this output looks right. -- Randomly Generated Tagline: Feel free t

[SAtalk] Razor Reporting in SA

2002-06-21 Thread Rose, Bobby
I don't think it's working correctly. For one, if I report thru SA with the debug switch it looks like it's using the old agents. debug: Razor is available debug: Razor Agents 1.20, protocol version 2. debug: Read server list from /home/admin/brose/.razor.lst debug: 60577 seconds before closest

Re: [SAtalk] anyone seen cloudmark.com? (OT)

2002-06-21 Thread Malte S. Stretz
On Saturday 22 June 2002 00:17 CET Daniel Rogers wrote: > On Fri, Jun 21, 2002 at 05:36:15PM -0400, Duncan Findlay wrote: > > In the U.S. you can get sued for stuff so simple as selling hot > > coffee but failing to write "HOT" on the cup. > > That case isn't as simple as you might think... > > Ha

Re: [SAtalk] anyone seen cloudmark.com?

2002-06-21 Thread Daniel Rogers
On Fri, Jun 21, 2002 at 05:36:15PM -0400, Duncan Findlay wrote: > In the U.S. you can get sued for stuff so simple as selling hot > coffee but failing to write "HOT" on the cup. That case isn't as simple as you might think... Have a look at http://lawandhelp.com/q298-2.htm (Third degree burns t

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Smart, Dan
New Razor 2.08 was a breeze to install. Just need the prereq libraries that you can get using the perl CPAN function that the SA Install suggest for SpamAssassin. Be sure to download the SDK, and it will save a big headache. DCC was trickier since there's zip for documentation. Key is to creat

Re: [SAtalk] anyone seen cloudmark.com?

2002-06-21 Thread Duncan Findlay
On Fri, Jun 21, 2002 at 12:55:27AM -0400, Bryan Hoover wrote: > Duncan Findlay wrote: > > > Yep, it's razor. Vipul is the other (or another) co-founder. > > I read the article at coudmark. I never really considered the lawsuit > aspect. The Razor voting concept would indeed seem to sidestep tha

Re: [SAtalk] Default MySQL Settings for users

2002-06-21 Thread Andy Higgins
> > Thanks for the help! Specifically, would I just add this to the file? I > found a copy at: > /usr/lib/perl5/site_perl/5.6.0/Mail/SpamAssassin/ConfSourceSQL.pm > Do I need to recompile SA after modifing this file? > I put the new code you sent after >if($dbh) { > I set the default value t

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread jason varsoke
On Fri, 21 Jun 2002, Bart Schaefer wrote: > On Fri, 21 Jun 2002, jason varsoke wrote: > > > Yes, Bart, thank you! I deleted the -c part of the line and now > > everything works; but of course I'm not using any rules. > > Obviously you're using *some* rules, or nothing would be happening. > > >

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Bart Schaefer
On Fri, 21 Jun 2002, jason varsoke wrote: > Yes, Bart, thank you! I deleted the -c part of the line and now > everything works; but of course I'm not using any rules. Obviously you're using *some* rules, or nothing would be happening. > $HOME/etc/spamassassin should be a directory? Is it oka

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Bart Schaefer
On Fri, 21 Jun 2002, Smart, Dan wrote: > Bart: > > Still hitting on all messages There's also this at the very top of the function: if (exists $self->{from_domain_in_received}) { return $self->{from_domain_in_received}; } Is it possible that this value is not getting reset when spam

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Smart, Dan
Bart: Still hitting on all messages An example: = Return-Path: <[EMAIL PROTECTED]> Received: from Mail2.ElPaso.com (12-40-24-37.elpaso.com [12.40.24.37]) by dalton.vul.com (Vulcan E-mail Relay) with ESMTP id 45169A8013 for <[EMAIL PROTECTED]>; Fri, 2

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread jason varsoke
On Fri, 21 Jun 2002, Bart Schaefer wrote: > On Fri, 21 Jun 2002, jason varsoke wrote: > > > This is my recipe: > > > > :0fw > > | /usr/bin/spamassassin -P -D -c $HOME/etc/spamassassin/rules > > > > Though I don't have a file called "rules". Is that my problem? > > In this case "rules" should be

[SAtalk] spamd+SQL preferences

2002-06-21 Thread Ted Harvey
I am running Postfix 1.1.11-1 / SA 2.31 /Mysql 3.23.49. This machine acts as an inbound relay to our local Imail server. I am xperiencing the same issue as Dmitry, spamc is run as user filter and all messages are checked against user filters' preferences. If I add a GLOBAL user to mysql, then all

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Bart Schaefer
On Fri, 21 Jun 2002, jason varsoke wrote: > This is my recipe: > > :0fw > | /usr/bin/spamassassin -P -D -c $HOME/etc/spamassassin/rules > > Though I don't have a file called "rules". Is that my problem? In this case "rules" should be a directory. Probably what you're after is | /usr/bin/spa

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Bart Schaefer
I don't have *any* hits on FORGED_EBAY_RCVD in my logs for the past two weeks. However, it looks like this expression in EvalTests.pm: if($rcvd =~ /from.*\Q$domain\E.*[\[\(][0-9]+\.[0-9]+\.[0-9]+\.[0-9]+[\]\)].*by.*\Q$domain\E/) { might need a word-boundary delimiter before $domain: if($r

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread jason varsoke
On Fri, 21 Jun 2002, Smart, Dan wrote: > You set score to 0.0 by putting in local.cf > > score FORGED_EBAY_RCVD 0.0 > > Your X-Spam-Status in the message headers shows 0.0 with not tests being > hit? yes. Here's what I get. (I deleted the subject line becasue I sent a message to this list

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Smart, Dan
The CVS won't let me login either, to try for any updates. Anything up with that? |-Original Message- |From: Smart, Dan [mailto:[EMAIL PROTECTED]] |Sent: Friday, June 21, 2002 12:21 PM |To: [EMAIL PROTECTED] |Subject: [SAtalk] FORGED_EBAY_RCVD broken! | | | |What's up with FORGED_EBAY_RCV

RE: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Smart, Dan
You set score to 0.0 by putting in local.cf score FORGED_EBAY_RCVD 0.0 Your X-Spam-Status in the message headers shows 0.0 with not tests being hit? <> |-Original Message- |From: jason varsoke [mailto:[EMAIL PROTECTED]] |Sent: Friday, June 21, 2002 12:26 PM |To: spamassassin lis

Re: [SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread jason varsoke
Dan, How do you "set score to 0.0"? I'm having the opposite problem. All my scores in the Debug log are 0.0! But spamassassin -t works fine. Any suggestions? -j On Fri, 21 Jun 2002, Smart, Dan wrote: > > What's up with FORGED_EBAY_RCVD? Installed the CVS and now its been hitting > on mo

[SAtalk] FORGED_EBAY_RCVD broken!

2002-06-21 Thread Smart, Dan
What's up with FORGED_EBAY_RCVD? Installed the CVS and now its been hitting on most (all?) messages. Had to set score to 0.0 <> --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ ___ Spamass

[SAtalk] Share / Contribute our site local.cf settings

2002-06-21 Thread Smart, Dan
Since things are fairly stable now with 2.31, might I suggest we share our local.cf updates to learn from each other what site-specific tuning we have done. May help the whole group and give ideas for better base rules. local.cf --- snip --- required_hits 5.1 scor

Re: [SAtalk] spamassassin -r -w = mailloop?

2002-06-21 Thread David Flanigan
OK, thanks for the help - I am on the right track. I created a link so that spamassassin is executable from /etc/smrsh for smrsh support, which was killing me before. I have the following in my aliases: spamtrap: "|/etc/smrsh/spamassassin -r -w noreply@localhost" Things are working

[SAtalk] Creating Manual Whitelists and Blacklists

2002-06-21 Thread Mario Mastrangelo
Spamassassin v2.20 was installed on our firewall, (system-wide) I am new at the whole unix/spamassassin thing. I am having trouble getting a manual whitelist (and blacklist) working using Spamassassin.  I added auto_whitelist_path /etc/mail/spamassassin/auto-whitelist auto_whitelist_file_mo

[SAtalk] SA 2.3x detects a lot more

2002-06-21 Thread Rose, Bobby
Geez and I thought blocking with DCC was starting to help reduce the amount of Spam but after updating to 2.3x the number of messages getting tagged has increased by nearly 500 more a day. I log the messages that are tagged and I've gone thru looking at the subjects and it all looks like spam to

Re: [SAtalk] spamassassin switches

2002-06-21 Thread Matt Sergeant
David B. Bitton wrote: > if i'm using spamd/spamc, how can I use command switches from spamassassin, > particularly -W? You can't. Try PPerl (from CPAN) instead which does the same job, but doesn't require two separate scripts. Matt. --- S

[SAtalk] Re: spamassassin -r -w = mailloop?

2002-06-21 Thread Shane Williams
-BEGIN PGP SIGNED MESSAGE- Keep in mind that most recent versions of sendmail will require you to put a copy of any programs you want sendmail to execute in a "smrsh" directory. On my system it's /etc/smrsh, but other systems may vary. On Fri, 21 Jun 2002, David Flanigan wrote: > SA Gu

[SAtalk] spamassassin switches

2002-06-21 Thread David B. Bitton
if i'm using spamd/spamc, how can I use command switches from spamassassin, particularly -W? -- David B. Bitton [EMAIL PROTECTED] www.codenoevil.com Code Made Fresh DailyT --- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/

Re: [SAtalk] spamassassin -r -w = mailloop?

2002-06-21 Thread Vivek Khera
> "DF" == David Flanigan <[EMAIL PROTECTED]> writes: DF> I have several very old, and very spam ridden e-mail addresses which I am DF> trying to make spamtraps. I am running Sendmail and Procmail. Why use procmail at all? Just delete the account associated with it and make an alias, or f

RE: [SAtalk] Newbie question - script for resubmit and add to whitelist

2002-06-21 Thread Smart, Dan
Unless you are *REALLY* high volume, Procmail is fantastic. Anything you want to do with your incoming messages can be done in it. Our mail volume maxes out at 25,000 messages per day and about 500 per hour, which Procmail and spamd can handle with ease. See http://www.ling.helsinki.fi/users/re

[SAtalk] spamassassin -r -w = mailloop?

2002-06-21 Thread David Flanigan
SA Gurus: I have several old e-mail addresses which receive only spam (and allot of it). So I would like to turn them into SpamTraps. Following the instructions in the spamassassin man page I tried the following in aliases: spamtrap: "|/usr/bin/spamassassin -r -w spamtrap" The resu

[SAtalk] spamassassin -r -w = mailloop?

2002-06-21 Thread David Flanigan
SA gurus: I have several very old, and very spam ridden e-mail addresses which I am trying to make spamtraps. I am running Sendmail and Procmail. :0fw | /usr/bin/spamassassin -r -w noreply -- Kind Regards, David A. Flanigan [EMAIL PROTECTED] http://www.flanigan.net --