I have noticed that the rules SPAM_PHRASES_020 and SPAM_PHRASES_040
don't seem to work anymore in 2.31. FREQ_SPAM_PHRASE works fine. For
example, this message will score over 20 but not get the corresponding
SPAM_PHRASES_020 rule marked in the header. Spam phrases follow:
temple kiff kathman
On Mon, Jul 08, 2002 at 04:43:15PM -0700, Jason Baker wrote:
| Before I start wandering down this path, I thought I'd check to see if it's
| already been done (and a quick google came up emptyhanded).
|
| Has anyone added spamassassin into EZMLM mailing lists? I'm essentially
| thinking to bou
On Mon, Jul 08, 2002 at 05:17:32PM -0400, Ryan Cleary wrote:
| On Mon, 8 Jul 2002, David B. Bitton wrote:
|
| > This got a 35.7. What's your record?
|
| I've been using SpamAssassin for about a week and a half, and I've already
| got a score of 44:
Here's the highest two from my sa-exim reje
Over the past few days I've been receiving bounces of mail I did not send.
The content of the mail is spam for spamming software. The ad itself is an
attachment. Headers and decoded attachment follow. Anyone else getting this? How
can SA deal with it?
Thanks!!!
Harold
Received: from omr-r0
Russ,
> my users are
>complaining that emails, particularily long-lined HTML emails have an "=20"
>at the ends, which can break HTML if it occurs in the middle of the tag and
>just looks ugly otherwise.
I don't think it is due to SA. I get such messages from time to time,
usually coming for F
On Tue, Jul 09, 2002 at 09:18:29AM +0700, Olivier Nicole wrote:
| > FYI, =3D20 is the quoted-printable encoding of a space character.
|
| Is that a joke? "equal three D" is the encoding for the equal of course
No, it's not a joke. Check out the MIME structure of my messages :
I 1
> FYI, =3D20 is the quoted-printable encoding of a space character.
Is that a joke? "equal three D" is the encoding for the equal of course
Olivier
---
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a geek.
http://thinkgeek.c
> sanitising code written...
On another hand, sanitising code could prove usefull in general in the
future, to check just any new rule added to SA.
> Could easily lead to
>deliberate of accidental DoS attacks against the machine hosting
>the CGI.
Ressource limitation could be enforced I gues
Do test emails count?
X-Spam-Status: No, hits=149.9 required=500.0
tests=IHUG_LOCAL_ISP,IHUG_NZ_SITE,SUBJ_HAS_SPACES,ADVERT_CODE,DOMAIN_SUBJECT,
PLING,PLING_PLING,REMOVE_SUBJ,REMOVE_IN_QUOTES,REPLY_REMOVE_SUBJECT,
SUBJ_REMOVE,NO_QS_ASKED,DEAR_SOMEBODY,BRAND_NEW_PAGER,BILL_1618,
EXCUSE_8,ONE_HUNDR
> mysql> select MAX(value) from reported;
> 53.5
> mysql> select rules from reported where value = 53.5;
> NO_REAL_NAME,PLING,PLING_PLING,TONER,CLICK_BELOW,REMOVAL_INSTRUCTIONS,EXCUS
>E_12,EXCUSE_3,DIRECT_EMAIL,OPT_IN,SENT_IN_COMPLIANCE,CALL_FREE,EMAIL_MARKETI
>NG,SECTION_301,CLICK_TO_REMOVE_2,SUB
Before I start wandering down this path, I thought I'd check to see if it's
already been done (and a quick google came up emptyhanded).
Has anyone added spamassassin into EZMLM mailing lists? I'm essentially
thinking to bounce to moderator if the score is above the limit, rather than
message-
On Monday 08 July 2002 23:27 CET Theo Van Dinter wrote:
> On Mon, Jul 08, 2002 at 05:17:32PM -0400, Ryan Cleary wrote:
> > > This got a 35.7. What's your record?
> >
> > I've been using SpamAssassin for about a week and a half, and I've
> > already got a score of 44:
>
> mysql> select MAX(value)
On Mon, 8 Jul 2002, Theo Van Dinter wrote:
> > I've been using SpamAssassin for about a week and a half, and I've already
> > got a score of 44:
>
> mysql> select MAX(value) from reported;
> 53.5
> mysql> select rules from reported where value = 53.5;
> NO_REAL_NAME,PLING,PLING_PLING,TONER,CLIC
On Mon, Jul 08, 2002 at 05:17:32PM -0400, Ryan Cleary wrote:
> > This got a 35.7. What's your record?
>
> I've been using SpamAssassin for about a week and a half, and I've already
> got a score of 44:
mysql> select MAX(value) from reported;
53.5
mysql> select rules from reported where value =
On Mon, 8 Jul 2002, David B. Bitton wrote:
> This got a 35.7. What's your record?
I've been using SpamAssassin for about a week and a half, and I've already
got a score of 44:
SPAM: Start SpamAssassin results --
SPAM: This mail is probably spam. The o
On Mon, Jul 08, 2002 at 04:03:57PM -0400, Mike Burger wrote:
> Aaahhh...well, then. Is there any idication of when the current CVS will
> be release ready?
Good question. I haven't seen anything on the list about a planned 2.40
release date yet. Hopefully soon. :)
--
Randomly Generated Tagl
On Monday 08 July 2002 13:11, Derrick 'dman' Hudson wrote:
> FYI, =20 is the quoted-printable encoding of a space character.
>
> If I was in your place, I would keep a copy of all mails (for a while)
> and next time you get a customer complaint, ask them what the
> Message-ID: header is (you'll be
On Mon, 8 Jul 2002, Derrick 'dman' Hudson wrote:
> On Sun, Jul 07, 2002 at 10:53:27AM -0500, Skip Montanaro wrote:
>
> | Should there be a test for domains from which
> | lots of spam tends to originate?
>
> | I know about the forged hotmail received
> | rules. I seem to get lots of Portugue
On Mon, 8 Jul 2002, Russ Gilman-Hunt wrote:
> Well... the top portion of the email, where a message in text would be,
> is the message with "proper" line endings. Below that is the HTML copy
> of the email, and it's that part with the =20s. So I suspect that the
> MUA on the sending end is work
On Sun, Jul 07, 2002 at 10:53:27AM -0500, Skip Montanaro wrote:
| Should there be a test for domains from which
| lots of spam tends to originate?
| I know about the forged hotmail received
| rules. I seem to get lots of Portuguese spam which originates in Brazilian
| domains (at least they a
On Mon, 8 Jul 2002, Theo Van Dinter wrote:
> On Mon, Jul 08, 2002 at 03:48:06PM -0400, Mike Burger wrote:
> > Razor Agents 2.08 is what's reporting when I do a razor-check. I believe
> > that's equivalent to Razor2, no?
>
> Yes, that's Razor2, which is currently not supported by a released
> S
On Mon, Jul 08, 2002 at 11:39:54AM -0700, Russ Gilman-Hunt wrote:
| I took the forward to spamc out of the procmailrc file and the problem
| persisted; which means it's a sendmail problem. So I'll shop there for a
| solution. Thanks for your time !
FYI, =20 is the quoted-printable encoding of a
On Mon, Jul 08, 2002 at 03:48:06PM -0400, Mike Burger wrote:
> Razor Agents 2.08 is what's reporting when I do a razor-check. I believe
> that's equivalent to Razor2, no?
Yes, that's Razor2, which is currently not supported by a released
SpamAssassin. (it's available via CVS...) Currently rel
On Mon, Jul 08, 2002 at 11:13:16AM -0500, Kip Turk wrote:
| On Mon, 8 Jul 2002, Bart Schaefer wrote:
|
| > Hmm, here's a thought. Each SA rule could (optionally) be assigned a
| > "category" (porn, UCE, MLM, fraud, etc.). SA could then tally up a
| > "category score" as well as a basic spam sco
Hello,
I wanted to have spamd print logging messages on stderr (or stdout) so that
I could use multilog program for logging instead of syslog.
Attached is a patch to do just that.
--- /usr/local/bin/spamdMon Jul 8 14:56:42 2002
+++ spamd Mon Jul 8 15:53:35 2002
@@ -19,6 +19,7 @
On Mon, 8 Jul 2002, Theo Van Dinter wrote:
> On Mon, Jul 08, 2002 at 03:27:13PM -0400, Mike Burger wrote:
> > What, if anything, do I need to do to get it to check against the Razor
> > databases, as I'm under the impression that it is supposed to do?
>
> It should just work. What does "spamas
On Mon, Jul 08, 2002 at 03:27:13PM -0400, Mike Burger wrote:
> What, if anything, do I need to do to get it to check against the Razor
> databases, as I'm under the impression that it is supposed to do?
It should just work. What does "spamassassin -P -D< message" tell you?
Does it say Razor is
On Mon, Jul 08, 2002 at 10:56:21AM -0700, Bart Schaefer wrote:
> > Depending on the situation, that may or may not be a correct choice.
>
> Which returns us by a roundabout route to the "spam criteria" part of this
> thread, my point being that any single person's idea of what constitutes
> junkm
Is there a rule that anyone uses for reducing the score for listservs?
I know you can whitelist but I was wondering if there was an easier way
to avoid all the maintenance.
---
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a
Well... the top portion of the email, where a message in text would be, is
the message with "proper" line endings. Below that is the HTML copy of the
email, and it's that part with the =20s. So I suspect that the MUA on the
sending end is working properly.
Would there be a problem with my m
I've gone over my spamassassin.cf file, and the entries for razor appear
to be there. I have razor running.
Yet, SA does not appear to be checking against the razor database(s).
In the last batch of spam that SA tagged (at least it's doing its job,
there. ), one of the messages was confirmed
On Mon, Jul 08, 2002 at 11:22:07AM -0700, Russ Gilman-Hunt wrote:
> > Check to see if your sendmail.cf has a short (less that 990) "L=" line
> > included. This instructs sendmail to wrap lines at a different length
> > than implied by SMTP (which says lines are shorter than 990 chars).
>
> Thank
> So if anyone else thinks this would be useful what other categories are
> there? Here is what Postini offers:
I really like this idea.
as you said, it could be used to NOT filter out certain things... so if
you want "get rich quick" mail, you dis/enable it in your user file and
those scores
I took the forward to spamc out of the procmailrc file and the problem
persisted; which means it's a sendmail problem. So I'll shop there for a
solution. Thanks for your time !
-Russ GilmanHunt
[EMAIL PROTECTED]
---
This sf.net email is spon
> file not to mention the "log watch" emails root receives.
I modified my sendmail logwatch script to avoid seeing unnecessary messages
(unknown users, virus scanning, etc). Take a look at the perl script at
(assuming RH linux):
/etc/log.d/scripts/services/sendmail
If you don't want to see 'Us
> Check to see if your sendmail.cf has a short (less that 990) "L=" line
> included. This instructs sendmail to wrap lines at a different length
> than implied by SMTP (which says lines are shorter than 990 chars).
>
> Ross Vandegrift
> [EMAIL PROTECTED]
Thank you for responding. All my L= lines
Perhaps someone has already tried this, but it occurs to me that a sort
of RBL for spammer phone numbers, e-mail addresses, and URLs would be
useful.
Almost all spam includes a phone number, an e-mail address, or an URL for
the victim to use to contact the spammer. Of course, many of these are
On Mon, Jul 08, 2002 at 10:53:07AM -0700, Russ Gilman-Hunt wrote:
> This question has probably been asked a billion times before. Please be
> patient with me..
>
> After installing Sendmail (8.19) and SpamAssassin (together) and swapping the
> old email server (an old clunky MacIntosh thing) fo
I'm sure this can be site specific... :)
- Original Message -
From: "Kip Turk" <[EMAIL PROTECTED]>
To: "Bart Schaefer" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, July 08, 2002 9:13 AM
Subject: Re: [SAtalk] s/SPAM/spam/ it seems
On Mon, 8 Jul 2002, Bart Schaefer wrote:
>
This question has probably been asked a billion times before. Please be
patient with me..
After installing Sendmail (8.19) and SpamAssassin (together) and swapping the
old email server (an old clunky MacIntosh thing) for the new high powered
(laugh) Linux server (the one with Sendmail and Spam
On Mon, 8 Jul 2002, Theo Van Dinter wrote:
>
> > It's far too common to equate "sender sent a message I consider junkmail"
> > with "sender should therefore be prevented from sending mail to anyone I
> > can manage to stop him from sending mail to."
>
> Depending on the situation, that may or
This got a 35.7. What's your record?
--
David B. Bitton
[EMAIL PROTECTED]
www.codenoevil.com
Code Made Fresh DailyT
- Original Message -
From: "F1 Freak" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 08, 2002 9:24 AM
Subject: *SPAM* EARN UNLIMITED INCOME WORKING
On Mon, Jul 08, 2002 at 09:53:31AM -0700, Bart Schaefer wrote:
> > > Ah, now we're getting into the definition of "spam." If I send an
> > > unsolicted message to a dozen carefully selected people, am I spamming?
> >
> > That's not the issue.
>
> Why not?
In my opinion, sending it to one, a do
Hi all,
Which resources does SA need in order to scan (15.000 accounts) - 50.000
emails/day (Hardware/Software)?
And 1.000.000 emails/day (50.000 accounts)?
I have these two email conf to put to work. Are they possible? If not, what
conf is possible?
Much
On Monday, July 8, 2002, at 08:03 AM, Justin Mason wrote:
>
> Patrice Fournier said:
>
>> I was wondering if there was someplace where we could have a new rule
>> tested automatically against both spam and non-spam corpus to see how
>> effective it is. Is this something everyone must make on th
> "SPAM is a registered trademark of Hormel Foods, LLC, for luncheon meat."
>
> Didn't they have a press release a few months ago that stated that it didn't
> really bother them that UCE was being called spam?
That is right, "spam", not "SPAM". They have a legal need to protect
their trademark
> But does that make me (the sender) a spammer?
>
> It's far too common to equate "sender sent a message I consider junkmail"
> with "sender should therefore be prevented from sending mail to anyone I
> can manage to stop him from sending mail to."
Isn't that the premise behind ORBS (open rela
I've heard this argument more times than I care to.
Hormel has no problem with UCE being called spam, they do however think
people *should* use it in lower case letters though. Just read the
following:
http://www.spam.com/ci/ci_in.htm
Anyhow, it's the differance between using capital letters and
This has probably been considered before, but I thought I'd ask, since I'm
still relatively new to SA. Should there be a test for domains from which
lots of spam tends to originate? I know about the forged hotmail received
rules. I seem to get lots of Portuguese spam which originates in Brazil
I am using SpamAssassin version 2.31 on my RedHat 7.2 box.
I am attempting to override rule scores for our local configuration. I have
tried various things without success.
In my /etc/mail/spamassassin directory I have a local.cf file with my rules
changes. The website says "The, configuration
On Mon, 8 Jul 2002, Theo Van Dinter wrote:
> On Mon, Jul 08, 2002 at 08:21:20AM -0700, Bart Schaefer wrote:
> > > (3) Is my copy unsolicited junk?
> >
> > Ah, now we're getting into the definition of "spam." If I send an
> > unsolicted message to a dozen carefully selected people, am I spammin
On Mon, Jul 08, 2002 at 12:43:49PM -0400, Vivek Khera wrote:
> Is Hormel in the computer business? Is their trademark registered in
> the appropriate category that covers email/web? Only then is it
> infringing.
If you go to www.hormel.com and have a look at the bottom, you'll see:
"SPAM is a
Is Spamassassin compatible with FreeBSD 4.0? We're also using Webmin
version 0.83.
If so how do I go about installing it?
reply via e-mail to: [EMAIL PROTECTED]
thanks
---
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a g
On Mon, 8 Jul 2002, Vivek Khera wrote:
> > "JM" == Justin Mason <[EMAIL PROTECTED]> writes:
>
> JM> "SPAM" is a tm of Hormel, whereas "spam" is not, apparently...
>
> Is Hormel in the computer business? Is their trademark registered in
> the appropriate category that covers email/web? Onl
> "JM" == Justin Mason <[EMAIL PROTECTED]> writes:
JM> "SPAM" is a tm of Hormel, whereas "spam" is not, apparently...
Is Hormel in the computer business? Is their trademark registered in
the appropriate category that covers email/web? Only then is it
infringing.
On Mon, 8 Jul 2002, Kip Turk wrote:
> > "category score" as well as a basic spam score, and the subject tag could
> > be selected using the category that scores highest.
>
> God no, please. It was hard enough getting our customers to put the
> single filter rule for **SPAM** in their e-
>
> Hmm, here's a thought. Each SA rule could (optionally) be assigned a
> "category" (porn, UCE, MLM, fraud, etc.). SA could then tally up a
> "category score" as well as a basic spam score, and the subject tag could
> be selected using the category that scores highest.
>
> Some rules, like bei
On Mon, Jul 08, 2002 at 08:21:20AM -0700, Bart Schaefer wrote:
> > (3) Is my copy unsolicited junk?
>
> Ah, now we're getting into the definition of "spam." If I send an
> unsolicted message to a dozen carefully selected people, am I spamming?
That's not the issue.
> How many people does it t
On Mon, 8 Jul 2002, Bart Schaefer wrote:
> Hmm, here's a thought. Each SA rule could (optionally) be assigned a
> "category" (porn, UCE, MLM, fraud, etc.). SA could then tally up a
> "category score" as well as a basic spam score, and the subject tag could
> be selected using the category that
> >> One thing that bears mentioning: "SPAM," all-caps, is a trademark of
> >> Hormel. UCE (unsolicited commercial email) or UBE (unsolicited bulk
> >> email) should properly be referred to as "spam," lower-case. More
> >> information is available here: http://www.spam.com/ci/ci_in.htm
> > The
Justin Mason wrote:
> "Michael 'Moose' Dinn" said:
>
>
>>Has anyone taken a huge spam database and sent it through some sort of
>>genetic learning program to see if spam can be identified that way?
>>More of a curiosity thing than anything else.
>
>
> Yes, there's a group in Greece who are doi
"SPAM" is a tm of Hormel, whereas "spam" is not, apparently...
--j.
--- Forwarded Message
Date:Mon, 08 Jul 2002 11:26:23 -0400
From:Dallman Ross <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
cc: Dallman Ross <[EMAIL PROTECTED]>
Subject: (fwd) Re: SpamAssassin
Justin,
Applau
On Sun, 7 Jul 2002, Derrick 'dman' Hudson wrote:
> On Sun, Jul 07, 2002 at 04:20:20PM -0400, Andrew Kohlsmith wrote:
> | > There are really only two ideal spam indicators:
> | >
> | > (1) Who sent it.
> | > (2) What proportion of the people who got it, didn't want it.
>
> (3) Is my copy unsolic
"Michael 'Moose' Dinn" said:
> Has anyone taken a huge spam database and sent it through some sort of
> genetic learning program to see if spam can be identified that way?
> More of a curiosity thing than anything else.
Yes, there's a group in Greece who are doing this (slowly -- they don't
hav
Patrice Fournier said:
> I was wondering if there was someplace where we could have a new rule
> tested automatically against both spam and non-spam corpus to see how
> effective it is. Is this something everyone must make on their own or
> there is some email/web interface to such a service
"CertaintyTech - Ed Henderson" said:
> But with the large amount of Outlook Express users out there I imagine that
> this rule will cause alot of false positives. You can talk all day about MS
> not following RFC standards but in the end the customer still gets
> legitimate email tagged as Spam
Ron Smith <[EMAIL PROTECTED]> a dit :
> Hello [EMAIL PROTECTED] On 7/5/02 4:04 AM, from <[EMAIL PROTECTED]>
> you wrote:
>
> > hello,
> > I'm trying to make a site-wide installation of spamassassin.
> > I use defaults rules for almost everybody, but I'm trying to
> > make it possible for each u
On Mon, Jul 08, 2002 at 08:49:47AM -0400, Andrew Kohlsmith wrote:
| > | OT: is it possible to add a configuration option which lists the domain
| > | mailservers and their IPs? And add a test which scores rather highly for
| > | mail claiming to come from domain.dom but which isn't actually from
Michael 'Moose' Dinn wrote:
>
> Has anyone taken a huge spam database and sent it through some sort of
> genetic learning program to see if spam can be identified that way?
>
> More of a curiosity thing than anything else.
We use quite a bit of machine learning stuff plugged into SpamAssassin's
> | OT: is it possible to add a configuration option which lists the domain
> | mailservers and their IPs? And add a test which scores rather highly for
> | mail claiming to come from domain.dom but which isn't actually from one
> | of the mailservers for domain.dom?
>
> This belongs at the MTA l
70 matches
Mail list logo
