[SAtalk] whitelist envelope MAIL FROM

2002-07-22 Thread Randy Bush
whitelist_from seems to be strictly the rfc2822 header From: field. for mailing list subscriptions, i need to allow white-listing the envelope MAIL_FROM, which is also schlonged into the Return-Path: 2822 header. any clues? randy --- This sf

Re: [SAtalk] Is this an attempt to throw off SA?

2002-07-22 Thread rODbegbie
Darian Rafie wrote: > I've noticed two recent spam emails, both from mortgage lenders, with > some nonsense like this attached at the end. Is this an attempt to > throw SA off the trail? Could be -- Decrease the chance of hitting a spam phrase score by padding out the message? Could also be ran

Re: [SAtalk] Is this an attempt to throw off SA?

2002-07-22 Thread Bill D
On Mon, Jul 22, 2002 at 10:13:22PM -0500, Darian Rafie wrote: > I've noticed two recent spam emails, both from mortgage lenders, with some > nonsense like this attached at the end. Is this an attempt to throw SA off > the trail? It's what's known as a "hash buster," designed to foil programs tha

[SAtalk] Is this an attempt to throw off SA?

2002-07-22 Thread Darian Rafie
I've noticed two recent spam emails, both from mortgage lenders, with some nonsense like this attached at the end. Is this an attempt to throw SA off the trail? d. @@@ It is assumed that my proposed independent structuralistic co

[SAtalk] How to disable debug stuff w/ CPAN install?

2002-07-22 Thread Skip Montanaro
I installed SA 2.31 using CPAN and now find all my spamassassin commands generate a bunch of debug output. This is fairly innocuous except for the fact that it hoses up the various Emacs macros from which the spamassassin command is invoked (what with new windows displaying and all). I can (and

Re: [SAtalk] Two rule suggestions

2002-07-22 Thread Olivier Nicole
>With a score as small as -0.036 the GA is giving more of a statement that >this rule isn't much of an indicator of anything at all. Just wondering, when runninh GA, would it be possible to make it a 2 step process, first step let it run without constraint, and on the second setp force the nearl

[SAtalk] spamassasin and syslog

2002-07-22 Thread Simon Frohn
Hi, one week ago I installed spamassasin within my qmail / qmail-scanner enviroment. Spam filtering works, however spamassasin uses my syslog facility, which is getting restarted every night. After the restart every request using "spamc" hangs, "spamc -c" works. As a temporarily solution I rest

[SAtalk] system-wide spamassassin, per-user config?

2002-07-22 Thread Morris Jones
When I have spamassassin installed as a postfix filter, systemwide on my mail server, does it ever look at per-user config files? I can see that it doesn't create them, but I haven't been able to tell if it's using them, or what their name should be. I used the how-to paper from advosys to set u

Re: [SAtalk] How to add rules? CLOSED!

2002-07-22 Thread Joel Epstein
Many thanks to all of you who helped me today...! Theo Van Dinter wrote: > On Mon, Jul 22, 2002 at 03:31:23PM -0500, Joel Epstein wrote: > >>If the following is in /etc/mail/spamassassin/local.cf, why does the >>following mail not get tagged? >> > > Are you running spamd? If so, did you rest

RE: [SAtalk] Spam got through: refinance and save $$$

2002-07-22 Thread SpamTalk
We are still at v2.20, I am surprised that none of the "market-speak" phrases triggered. There are several that should be in the 2.31 spam phrases, maybe they are in the CVS? Only takes [1-9] minutes fill out our form new home loan Mortgage rates take action now Refinance your home extra cash you

[SAtalk] Spam got through: refinance and save $$$

2002-07-22 Thread Stewart, John
I had a user report this spam as getting through, so I ran it through spamassassin -t to see what it scored... it only picked up the CASHCASHCASH rule ($$$ in the subject). Looking at it, I saw there was a URL to an IP address, so I looked in the spamassassin .cf files and saw this in 50_scores.

RE: [SAtalk] How to add rules?

2002-07-22 Thread Robert Strickler
> required_hits 6.1 ... > score RAPE 4.125 ... > rape rape rape I think it only counts once. Since 4.125 < 6.1 makes it not spam. Of course your total showed 0.9, as others noted, restarting spamd would also be needed. -Original Message- From: Joel Epstein [mailto:[EMAIL

Re: [SAtalk] How to add rules?

2002-07-22 Thread Tony L. Svanstrom
On Mon, 22 Jul 2002 the voices made Joel Epstein write: > ok... now what? =) > > If the following is in /etc/mail/spamassassin/local.cf, why does the > following mail not get tagged? Are you using spamc/spamd and forgot to restart spamd? /t -- # Per scientiam ad libertatem! // Throug

RE: [SAtalk] tiny spam-abductor

2002-07-22 Thread Tony L. Svanstrom
On Mon, 22 Jul 2002 the voices made Robert Strickler write: > On Mon, 22 Jul 2002 the voices made SpamTalk write: > > > Like the thinkgeek at the bottom of these postings? ;) > > Yeah, I was planing on having all plugins off when installed, and some > scale on morality, or whatever it might be c

Re: [SAtalk] How to add rules?

2002-07-22 Thread Theo Van Dinter
On Mon, Jul 22, 2002 at 03:31:23PM -0500, Joel Epstein wrote: > If the following is in /etc/mail/spamassassin/local.cf, why does the > following mail not get tagged? Are you running spamd? If so, did you restart it after you added the rule? -- Randomly Generated Tagline: "Never trust any comp

Re: [SAtalk] SA/postfix via amavisd-new w/o razor

2002-07-22 Thread Vivek Khera
> "SH" == Scott Henderson <[EMAIL PROTECTED]> writes: SH> line (as root), I get an error saying it can't locate SH> Razor/Client.pm in @INC. Well, actually, I don't think I want to SH> run razor. I just want to use the other checks in SA. How can I SH> tell it to stop trying to run razor?

Re: [SAtalk] How to add rules?

2002-07-22 Thread Joel Epstein
ok... now what? =) If the following is in /etc/mail/spamassassin/local.cf, why does the following mail not get tagged? # How many hits before a mail is considered spam. required_hits 6.1 # Whitelist and blacklist addresses are now file-glob-style patterns, so # "[EMAIL PROTECTED]",

RE: [SAtalk] tiny spam-abductor

2002-07-22 Thread Robert Strickler
I'd like to invoke it as a sendmail milter to strip them before SA has a chance to score them. I think it would be valuable in reducing false positives. The real trick would be to get it to autolearn the format of the trailer for each domain in a list. -Original Message- From: Tony L. Sva

Re: [SAtalk] How to add rules?

2002-07-22 Thread Deanna Phillips
Joel Epstein <[EMAIL PROTECTED]> writes: > Let's see if I am on the right track... or am I placing these commands > in the wrong files??? > > Could I add the following to /usr/share/spamassassin/20_body_tests.cf: You could, but your changes would be overwritten each time you upgraded. Better to

Re: [SAtalk] How to add rules?

2002-07-22 Thread Theo Van Dinter
On Mon, Jul 22, 2002 at 02:48:17PM -0500, Joel Epstein wrote: > Could I add the following to /usr/share/spamassassin/20_body_tests.cf: First, you should add your own rules to /etc/mail/spamassassin/local.cf -- if you add it to the normal rules files, they'll be wiped out when you upgrade. > full

Re: [SAtalk] How to add rules?

2002-07-22 Thread Joel Epstein
Let's see if I am on the right track... or am I placing these commands in the wrong files??? Could I add the following to /usr/share/spamassassin/20_body_tests.cf: full RAPE /rape/i describe RAPE contains rape Then add the following to /usr/share/spamassassin/50_scores

Re: [SAtalk] SA/postfix via amavisd-new w/o razor

2002-07-22 Thread Michael Leone
Scott Henderson said: > Since there doesn't seem to be any amavis mail list, I'll be the people on the AMaVis list would be surprised to hear they don't exist. :-) http://sourceforge.net/mail/?group_id=6006 --- This sf.net email is sponso

Re: [SAtalk] Two rule suggestions

2002-07-22 Thread Matt Kettler
With a score as small as -0.036 the GA is giving more of a statement that this rule isn't much of an indicator of anything at all. I'd agree with the original poster, almost anything coming out of the GA with a score between 0.05 and -0.05 is probably not worth running. Ultimately it is contri

Re: [SAtalk] How to add rules?

2002-07-22 Thread Jesus Climent
On Mon, Jul 22, 2002 at 12:58:29PM -0500, Joel Epstein wrote: > Hey all... > > How exactly do you create rules? I ask because I seem to be getting > tons of email containing words like incest, etc Directory rules/ Include a XX_custom.cf where XX are two numbers. The rules files get tested

RE: [SAtalk] plauge of spam

2002-07-22 Thread Dan Kohn
Gabriel, the "take something from these stored messages and develop rules for them" is the whole purpose of this list and the SA effort. The argument is that machines cannot develop reliable heuristics, but a dedicated team of developers/users using the open source model can. Please feel free to

Re: [SAtalk] How to add rules?

2002-07-22 Thread Matt Kettler
In general the rules for SA are simple perl regexp format. You can also create functions and make them a rule, but I've not done that myself yet. You can add your rules to {HOME}/.spamassassin/user_prefs to add rules on a per-user basis (if your SA gets run as different users) or /etc/mail/sp

[SAtalk] plauge of spam

2002-07-22 Thread Gabriel C Millerd
i get frequently spam that with spamassassin out of the box yeilds a score of 1 to 2 ... i am trying to figure out a way to put a stop to it ... currently i put the spam (as i manually go through my mail) into a folder named spam. i am thinking i would like to write some code to take the somethin

[SAtalk] How to add rules?

2002-07-22 Thread Joel Epstein
Hey all... How exactly do you create rules? I ask because I seem to be getting tons of email containing words like incest, etc Any thoughts? Thanks -- = Joel Epstein Manager of Systems Integration Integrated Warehousing Solutions 3075 Highland Parkway Sui

[SAtalk] SpamAssassin on IRIX 6.5

2002-07-22 Thread Frank Bures
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, could please anyone point me to instructions how to install SpamAssassin on IRIX 6.5, specifically the spamd and spamc. Thanks Frank Bures, Dept. of Chemistry, University of Toronto, M5S 3H6 [EMAIL PROTECTED] http://www.chem.utoronto.ca/gener

[SAtalk] SA/postfix via amavisd-new w/o razor

2002-07-22 Thread Scott Henderson
Since there doesn't seem to be any amavis mail list, I guess this would be the best place to ask this... I want to run SA via the amavisd-new script, under RH 7.3. I managed to compile amavisd-new, but when I try to run "amavisd" from the command line (as root), I get an error saying it can't lo

[SAtalk] tiny spam-abductor

2002-07-22 Thread Tony L. Svanstrom
I just want some positive feedback regarding a project that will design software that will remove ads in e-mails, once I get that I'll start with the actual code... Would people be interested in using and/or writing plugins for the different services that they use? /Tony -- # Per sc

[SAtalk] Re: "Spam Doesn't Work?" [slashdot]

2002-07-22 Thread Tony L. Svanstrom
On Mon, 22 Jul 2002 the voices made Shane Williams write: > If only the original article had anything to do with spam. The study > focused not on commercial or bulk mail, but how likely respondents were > to answer a simple question, and whether that likelihood changed if > there were only one o

[SAtalk] Re: "Spam Doesn't Work?" [slashdot]

2002-07-22 Thread Shane Williams
If only the original article had anything to do with spam. The study focused not on commercial or bulk mail, but how likely respondents were to answer a simple question, and whether that likelihood changed if there were only one or multiple recipients. On Mon, 22 Jul 2002, Tony L. Svanstrom wrot

Re: [SAtalk] "Spam Doesn't Work?" [slashdot]

2002-07-22 Thread Graham Dunn
On Mon, Jul 22, 2002 at 06:49:50PM +0200, Tony L. Svanstrom wrote: > > http://slashdot.org/articles/02/07/22/1516234.shtml?tid=111 > > > Discussing the article/page at: > > http://www.newscientist.com/news/news.jsp?id=ns2557 > ... which really doesn't have anything to do about spam, jus

[SAtalk] SA + Mailscanner Question

2002-07-22 Thread David Flanigan
I just installed and turned up Mailscanner(w/ f-prot), after having run SA for some time. I know from watching the list that several others here are running both as well. I current have both running separately. That is, I am not running SA from Mailscanner, but separately from procmail.

[SAtalk] "Spam Doesn't Work?" [slashdot]

2002-07-22 Thread Tony L. Svanstrom
http://slashdot.org/articles/02/07/22/1516234.shtml?tid=111 > Discussing the article/page at: http://www.newscientist.com/news/news.jsp?id=ns2557 > /Tony -- # Per scientiam ad libertatem! // Through knowledge towards freedom! # # Genom kunskap mot frihet! =*= (c) 1999-2002 [EM

RE: Re: [SAtalk] Spamassassin + QmailScanner

2002-07-22 Thread Willliam Klein
Title: RE: Re: [SAtalk] Spamassassin + QmailScanner Hello All; I've been folowing this thread with intrest since I haven't had success getting  SA working with Qmail on my system.  However when I tried to add this code I broke qmail-scanner.  Where does this go exactly please?  I know nothi

[SAtalk] Personal/Site-Wide SA Glitch (Spamassassin+Exim)

2002-07-22 Thread Odhiambo Washington
Hello People, I am new to SA but (2) problems I do have. I run SA from my own home for personal use and it seems to work but I see this in my procmail log: procmail: Executing " ~/bin/SpamAssassin/spamassassin -P -c ~/bin/SpamAssassin/rules" dccproc: not found dccproc: not found Can someone

Re: [SAtalk] Apple, Kmail, Adaptive Rules

2002-07-22 Thread Tony L. Svanstrom
On Mon, 22 Jul 2002 the voices made Olivier Nicole write: > >How would forgeries (e.g. viruses) be detected? Would there be an > >"oops-I-didn't-mean-to-submit-that" option somehow? > > Real viruses are filtered before they reach any mailbox for delivery. > > Tose two addresses could be accessib

[SAtalk] Frequent spam phrases in Spanish

2002-07-22 Thread Jesus Climent
Hi. I want to create a similar list of words as the ones that match check_for_spam_phrases but I need that list to be in Spanish. Can someone help with the procedure? I can enter them by hand, or use the collection of spam I have, if there is an already made script. I will probably have to mo

[SAtalk] porn rules

2002-07-22 Thread Yevgeniy Miretskiy
None of the porn rules fired on this message: From [EMAIL PROTECTED] Sat Jul 20 03:33:17 2002 Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 25884 invoked by uid 152); 20 Jul 2002 07:33:17 - Received: from alder.invision.net (206.112.34.75) by antares.invi

Re: [SAtalk] Removing SPAM: from SA notice

2002-07-22 Thread Justin Mason
"Christopher Crowley" said: > SpamAssassin could make the prefix string configurable, so that I > don't have to modify the code in future releases. I'll post my > modifications once I make them. This makes the most sense. The prefix string doesn't have to be "SPAM: "; if it was configurable,

[SAtalk] Inflex and Spam-Assassin

2002-07-22 Thread Joerg Henner
Hi, is there any way to integrate SA within the Inflex-Scripts ??? Inflex can be found here: http://pldaniels.com/inflex/ Any hints/tips are welcome Greetings, -- Jörg Henner Fon: +49 (7 11) 48 90 83 - 0 ETES - EDV-Systemhaus GbRFax: +49

Re: [SAtalk] http://www.spamassassin.org

2002-07-22 Thread Malte S. Stretz
On Monday 22 July 2002 07:00 CET John Rudd wrote: > On Sunday, July 21, 2002, at 08:30 , Bob Proulx wrote: > > > http://www.spamassassin.org > > > Is anyone besides me having problems getting to the site? Jepp. The same is true for Justin's private page jmason.org. traceroutes to both these serv