Re: [SAtalk] Re: spam assassin test

2002-10-14 Thread Ralf Hildebrandt
On Tue, Oct 15, 2002 at 01:53:15AM -0500, Neil wrote: > Hey guys, > > I saw the incoming mail and it was tagged as a spam. What's the next thing > that I should do then? Filter it to another mailbox? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus Mitte

[SAtalk] Re: spam assassin test

2002-10-14 Thread Neil
Hey guys, I saw the incoming mail and it was tagged as a spam. What's the next thing that I should do then? This is slick. Thanks. Neil --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___

[SAtalk] spam assassin test

2002-10-14 Thread Neil
Can some test if my spam assassin is able to detect an email spam? Also, am I right that by default install, spam assassin is already able to distinguish spam? It's because, I haven't modified any configuration yet. I could hardly find a good documentation on what files to modify. Thanks.

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk MailFilter"

2002-10-14 Thread Simon Matthews
On Tue, 15 Oct 2002, Mike Burger wrote: > keeping in mind, also, that you didn't include the headers, so from what > you presented us, there was no way for us to know from whence it came. Hey, I just posted it because I thought it would be amusing.

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk MailFilter"

2002-10-14 Thread Mike Burger
keeping in mind, also, that you didn't include the headers, so from what you presented us, there was no way for us to know from whence it came. On Mon, 14 Oct 2002, Simon Matthews wrote: > On Mon, 14 Oct 2002, Mike Burger wrote: > > > It is possible that Mr. Bob is subscribed to one of the sa

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk MailFilter"

2002-10-14 Thread Mike Burger
Well, I did say "possible" On Mon, 14 Oct 2002, Simon Matthews wrote: > On Mon, 14 Oct 2002, Mike Burger wrote: > > > It is possible that Mr. Bob is subscribed to one of the same lists as you. > > > Except that both of the SPAMs came from very similar IP addresses. I > really doubt that *bot

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk MailFilter"

2002-10-14 Thread Simon Matthews
On Mon, 14 Oct 2002, Mike Burger wrote: > It is possible that Mr. Bob is subscribed to one of the same lists as you. > Except that both of the SPAMs came from very similar IP addresses. I really doubt that *both* people could make the same mistake and apparently use the same servers in France.

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk MailFilter"

2002-10-14 Thread Mike Burger
It is possible that Mr. Bob is subscribed to one of the same lists as you. If that's the case, he's not spamming...he just has no clue on how to properly configure his anti-spam filtering software. I got a number of similar messages from someone on a list to which I'm subscribed. On Mon, 14 O

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk Mail Filter"

2002-10-14 Thread Daniel Quinlan
Simon Matthews <[EMAIL PROTECTED]> writes: > This is the second such SPAM I have received, advertising an > "Anti-SPAM filter". Now, who in their right mind is going to use an > "anti-spam filter" that is advertised by spamming? That reminds me of the Direct Marketing Association's postal junk m

Re: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-14 Thread Scott Lambert
On Mon, Oct 14, 2002 at 08:59:49PM -0500, Jeremy Turner wrote: > On Mon, 2002-10-14 at 20:42, Philip Clever wrote: > > what graphing have you set up thus far? > > The current graph is spam vs time, as in number of spam emails per > minute (or hour, day, year, etc...). What I want to graph now is

Re: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-14 Thread Jonathan Nichols
> On Mon, 2002-10-14 at 20:26, Jonathan Nichols wrote: > > How'd you get it working? I managed to make a flat line with mine. :-) > > I had that problem too. I put on my perl thinking hat, and I traced it > back to a problem with a function call to the line of code that tries to > pull the date

[SAtalk] Boneheaded SPAM advertising "My new Anti-Junk Mail Filter"

2002-10-14 Thread Simon Matthews
This is the second such SPAM I have received, advertising an "Anti-SPAM filter". Now, who in their right mind is going to use an "anti-spam filter" that is advertised by spamming? -- Forwarded message -- Date: Mon, 14 Oct 2002 19:44:39 +0200 From: Bob <[EMAIL PROTECTED]> To: undi

Re: [SAtalk] Consistency between releases

2002-10-14 Thread Daniel Quinlan
[EMAIL PROTECTED] writes: > I only used the first message in my spam box, one that scored highly the > first time around. I'm sure I could pick a half a dozen at random and see > similar results. So what? Like I said, it's not how individual scores change, it's how false positives and false ne

Re: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-14 Thread Jeremy Turner
On Mon, 2002-10-14 at 20:26, Jonathan Nichols wrote: > How'd you get it working? I managed to make a flat line with mine. :-) I had that problem too. I put on my perl thinking hat, and I traced it back to a problem with a function call to the line of code that tries to pull the date off of the s

Re: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-14 Thread Jeremy Turner
On Mon, 2002-10-14 at 20:42, Philip Clever wrote: > what graphing have you set up thus far? The current graph is spam vs time, as in number of spam emails per minute (or hour, day, year, etc...). What I want to graph now is the spamassassin point value vs quanity of each. What I want is a set o

Re: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-14 Thread Jonathan Nichols
How'd you get it working? I managed to make a flat line with mine. :-) - Original Message - From: "Jeremy Turner" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 14, 2002 6:09 PM Subject: [SAtalk] Spamassassin (non-time-based) Graphs? > A few days ago, someone mention

[SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-14 Thread Jeremy Turner
A few days ago, someone mentioned graphing stats from spamassassin using MRTG and others. Well, I got that working, and it's pretty slick. I was wondering about other non-time-based graphs? In other words I don't want to graph how many emails were tagged as spam, but I want a graph of how many

Re: [SAtalk] Re: Spamd 2.42 Problems

2002-10-14 Thread Justin Mason
"Chris A. Kalin" said: > I've been mentioning this problem off and on to the mailing list since 2.41. > With 2.41, SA would eventually crash if the "-m" option was used, and now > with 2.42, it will occasionally crash whether or not "-m" is used. I've got > SA running under daemontools' supervi

RE: [SAtalk] SA feature/idea? (teergrubing/ stalling SMTP session s )

2002-10-14 Thread SpamTalk
>connection handed off to a small process independent of the MTA No argument, certainly the way I would design it. Admittedly my serious programming skills are over 5 years rusty and I have never tried to pass an open handle across processes. >ties up plenty of resources on my machine as well (2

Re: [SAtalk] Spammer

2002-10-14 Thread Martin Radford
At Mon Oct 14 20:41:54 2002, Jeremy Oddo wrote: > > What WinNT list(s) were talking about this? I'd like to get a little > more info. I was hit by it and I *KNOW* that the NetBIOS ports were > (and still are) closed tight. I'm really interested in how they (the > spammers) did what they did...

Re: [SAtalk] SA feature/idea? (teergrubing/ stalling SMTP sessions )

2002-10-14 Thread Rich Puhek
Robert Strickler wrote: > Search the recent archive for teergrubing, (I called it a spambump, like a > speedbump in a parking lot). Basically you send continuation messages every > 15-60 seconds, a perfectly legitimate RFC, you just keep it up until you or > the other side gives up. > One thoug

Re: [SAtalk] spamassassin site wide

2002-10-14 Thread E Frank Ball
On Mon, Oct 14, 2002 at 01:06:26PM -0700, Seby Varghese wrote: } I have the SpamAssassin installed site wide and would } like to know there is a way to configure that if the } user is in white list don't do any other checks. We } need this because 80% of the mail handled by our mail } server is

Re: [SAtalk] spamassassin site wide

2002-10-14 Thread Theo Van Dinter
On Mon, Oct 14, 2002 at 01:06:26PM -0700, Seby Varghese wrote: > I have the SpamAssassin installed site wide and would > like to know there is a way to configure that if the > user is in white list don't do any other checks. We > need this because 80% of the mail handled by our mail There is no

Re: [SAtalk] SCORES

2002-10-14 Thread Denis Braekhus
Quoting spamassassin <[EMAIL PROTECTED]>: > How is everyone using SA? Do you auto delete spam after some high score? I > would like to find the safest score to delete spam, and keep the other mail > with smaller score. Personalised the score needed for the users, then let all spam through but wit

Re: [SAtalk] Re: Spamd 2.42 Problems

2002-10-14 Thread Chris A. Kalin
I've been mentioning this problem off and on to the mailing list since 2.41. With 2.41, SA would eventually crash if the "-m" option was used, and now with 2.42, it will occasionally crash whether or not "-m" is used. I've got SA running under daemontools' supervise so if it does go away, it come

[SAtalk] spamassassin site wide

2002-10-14 Thread Seby Varghese
I have the SpamAssassin installed site wide and would like to know there is a way to configure that if the user is in white list don't do any other checks. We need this because 80% of the mail handled by our mail server is from within the company domain and all the company domain mail is white l

Re: [SAtalk] Re: Spamd 2.42 Problems

2002-10-14 Thread Brian
Quinn, We run two very high volume servers here as well, and have seen the exact same thing happening, spamd dies, with nothing logged. This is only on 2.42. Brian On Wed, 9 Oct 2002, Quinn Vallance wrote: > I maintain two relatively high volume mail servers both of which have > been u

Re: [SAtalk] SCORES

2002-10-14 Thread Mike Leone
* spamassassin ([EMAIL PROTECTED]) wrote this on 10 14, 02 at 12:06: > > How is everyone using SA? Do you auto delete spam after some high score? I > would like to find the safest score to delete spam, and keep the other mail > with smaller score. I never auto-delete anything. :-) Losing real m

RE: [SAtalk] Spammer

2002-10-14 Thread Jeremy Oddo
What WinNT list(s) were talking about this? I'd like to get a little more info. I was hit by it and I *KNOW* that the NetBIOS ports were (and still are) closed tight. I'm really interested in how they (the spammers) did what they did...and it seems no one really has any answers. > -Origina

RE: [SAtalk] SA feature/idea? (teergrubing/ stalling SMTP sessions )

2002-10-14 Thread Robert Strickler
Search the recent archive for teergrubing, (I called it a spambump, like a speedbump in a parking lot). Basically you send continuation messages every 15-60 seconds, a perfectly legitimate RFC, you just keep it up until you or the other side gives up. I believe Marc Merlin (Hi Marc) on the list h

Re: [SAtalk] Disabling razor?

2002-10-14 Thread Frank Pineau
>Ideally, I'd like to just get razor working, but it's given me so many problems >(vis a vis the old Net::Ping error) that it's hardly worth my time any more. Swt. Finally got razor fixed. What a PITA. --- This sf.net email is sponsore

Re: [SAtalk] SA feature/idea?

2002-10-14 Thread listuser
I heard of a similar idea a while back. The nice thing about it is that it avoided all possible legal problems. It also consumed some resources on your MTA but it is surely doable. The trick was that as soon as you've identified that the message is spam during you MTA's conversation, slow the c

Re: [SAtalk] SA score in subject?

2002-10-14 Thread listuser
On Mon, 14 Oct 2002, Mike Schrauder wrote: > If I wanted to change the subject of spam to say *SPAM=14.3* instead of > *SPAM* site wide, is that possible? Is there a way to use the score as a >variable in a config file? > Where would I set up the way the subject gets altered by

[SAtalk] netscape

2002-10-14 Thread lambert Bernard
Hi I want to install spamassassin on my PC I run suse 8.0 , and I use Netscape as browser and email. my mail box is froma provider I have read the install and faq I saw how to set kdemail or procamail but nothing about netscape It is possible to use spamassassin with netscape mail, and where

Re: [SAtalk] SA feature/idea?

2002-10-14 Thread f. Andrew Lawton
On Fri, 2002-10-11 at 01:28, Carl E. Mankinen wrote: > With all this talk of SA stalling, I decided to go ahead and post an idea > that a friend of mine posed to me a couple days ago. I don't think he is > interested in posting to the list, but he hates spam as much as I do. > > The idea is to do

Re: [SAtalk] SA score in subject?

2002-10-14 Thread Matt Kettler
I think what you are trying to do is let your users customize their filtering, so I'm going to operate under that assumption and suggest you look at the spam_level_stars option. It's much easier for most MUA's to handle. As far as I know there's currently not an option to do what you're asking.

Re: [SAtalk] How AWL system works?

2002-10-14 Thread Matt Kettler
It's a known bug in SpamAssassin 2.42, already fixed in CVS.. see bugzilla http://www.hughes-family.org/bugzilla/show_bug.cgi?id=1071 At 05:25 PM 10/14/2002 +0300, Tanel Kokk wrote: >I'm just trying to understand, how AWL works. > >As I have understood, AWL is like a longterm score for senders.

Re: [SAtalk] Blackhole lists

2002-10-14 Thread Matt Kettler
1) first make sure you have Net::DNS installed. This is the most common cause of the blackhole lists not being checked by spamassassin 2) using the sample mail from the SpamAssassin distro, run spamassassin -tD How can I prove that spamassassin is using all the blackhole lists. I saw

Re: [SAtalk] Auto White List modification

2002-10-14 Thread Rich Puhek
Jeremy Kister wrote: > I've been subscribed to the list for about 4 months, and I searched through > my locally saved messages for topics of this nature, but couldnt find any.. > So forgive me if someone has publicly announced this revelation.. Also > forgive the cross-posting; I want to get a

Re: [SAtalk] Listbuilder rule?

2002-10-14 Thread Justin Mason
Simon Matthews said: > In any case, a lot of the time, listbuilder will get positive hits from > the bl.spamcop.net RBL. > Which brings another question, spamcop RBL is by default zeroed out, yet > it does not cost anything to use. Why? a) when I added it, this was not specified by spamcop.net,

Re: [SAtalk] (no subject)

2002-10-14 Thread Justin Mason
"spamassasin" said: > X_OSIRU_SPAM_SRC (2.7 points) RBL: DNSBL: sender is Confirmed Spam Source > > Why only 2.7 points and not something higher to delete mails that are known > spam? Because the blacklist that produces this (Osiru I think) is coming up with a large # of false positives. G

RE: [SAtalk] Disabling razor?

2002-10-14 Thread McClung, Darren W.
score RAZOR_CHECK 0.00 score RAZOR2_CHECK 0.00 in your config file. -Original Message- From: Frank Pineau [mailto:[EMAIL PROTECTED]] Sent: Monday, October 14, 2002 11:08 To: [EMAIL PROTECTED] Subject: [SAtalk] Disabling razor? Ok, can't find anything in the SA archives. How do I stop

Re: [SAtalk] Disabling razor?

2002-10-14 Thread Frank Pineau
On Mon, 14 Oct 2002 12:21:49 -0400, you wrote: >If it can load the perl module, it considers Razor to be available. >Are you sure you removed them? ;) > I've since found the module(s). Apparently, I only removed *some* of Razor. >You can disable any test by setting the score to 0 BTW. Ah, I wa

[SAtalk] Blackhole lists

2002-10-14 Thread Louis Bohm
How can I prove that spamassassin is using all the blackhole lists. I saw it the docs that it is configured to use them by default however I am not seeing anything in my maillog. Louis -- ¤¤º°`°º¤ø,¸¸,ø¤º°`°º¤øø¤º°`°º¤ø,¸¸,ø¤º°`°º¤øø¤º°`°º¤ ¤°`°Lightbridge, Inc ¤°`°67 South Bedford St. ¤°`°Bu

Re: [SAtalk] Disabling razor?

2002-10-14 Thread Theo Van Dinter
On Mon, Oct 14, 2002 at 11:08:13AM -0500, Frank Pineau wrote: > Ok, can't find anything in the SA archives. How do I stop SA from doing a razor > check? I've tried uninstalling the razor perl modules, but when recompiling SA, > it still seems to find it, so I'm not even sure what makes it think

RE: [SAtalk] SCORES

2002-10-14 Thread Steve Thomas
| How is everyone using SA? Do you auto delete spam after some high score? I | would like to find the safest score to delete spam, and keep the | other mail with smaller score. I archive everything first, just in case, then /dev/null anything that scores 20+ and put anything from 5-19.x into a sp

Re: [SAtalk] SCORES

2002-10-14 Thread Chris Fortune
I use a 'suspicious' score of 5-10, and an auto deletion score of 10. Perhaps 10 is overly-cautious because my highest scoring 'false suspicious' email has been 8.9 (an MLM newsletter). Many people here would consider 10 to be too low, I'm sure. I have my clients opt in for spamassassin on thei

[SAtalk] Disabling razor?

2002-10-14 Thread Frank Pineau
Ok, can't find anything in the SA archives. How do I stop SA from doing a razor check? I've tried uninstalling the razor perl modules, but when recompiling SA, it still seems to find it, so I'm not even sure what makes it think razor is there. --

[SAtalk] SCORES

2002-10-14 Thread spamassassin
How is everyone using SA? Do you auto delete spam after some high score? I would like to find the safest score to delete spam, and keep the other mail with smaller score. Thanks --http://www.fastmail.gr --- This sf.net email is sponsored

Re: [SAtalk] Consistency between releases

2002-10-14 Thread listuser
On 13 Oct 2002, Daniel Quinlan wrote: > [EMAIL PROTECTED] writes: > > > Can anyone give me any ideas why SA is so inconsistent between different > > releases? For example I picked a spam to test a new installation of SA > > with. It had scored over 10 on a previous install. When the message >

RE: [SAtalk] spamd log to mrtg

2002-10-14 Thread Jason Qualkenbush
You might need to clear the log file when you make a change like that. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Saturday, October 12, 2002 9:41 AM To: Jonathan Nichols Cc: Tony Hoyle; [EMAIL PROTECTED] Subject: RE: [SAtalk] spamd log to mrtg On Sat, 1

Re: [SAtalk] SA score in subject?

2002-10-14 Thread Nancy McGough
On 14 Oct 2002 Mike Schrauder ([EMAIL PROTECTED]) wrote: > If I wanted to change the subject of spam to say > *SPAM=14.3* instead of *SPAM* site wide, is > that possible? Is there a way to use the score as a variable > in a config file? Where would I set up the way the subject get

Re: [SAtalk] Listbuilder rule?

2002-10-14 Thread Vivek Khera
> "SM" == Simon Matthews <[EMAIL PROTECTED]> writes: SM> Which brings another question, spamcop RBL is by default zeroed out, yet SM> it does not cost anything to use. Why? My personal experience with it is that it has a high false-positive rate. You can get listed on SpamCop's BL for even

Re: [SAtalk] Why doesn't whilelist catch this?

2002-10-14 Thread Jeff Grossman
on 10/12/02 7:05 PM, Joe Berry at [EMAIL PROTECTED] wrote: > Hello, > > I'm having problems with a particular email which keeps getting > rejected as spam by SA. It's daily comic strip that my wife > subscribes to. My local.cf file has the following in it: > > whitelist_from *@unitedmedia.co

[SAtalk] SA score in subject?

2002-10-14 Thread Mike Schrauder
If I wanted to change the subject of spam to say *SPAM=14.3* instead of *SPAM* site wide, is that possible? Is there a way to use the score as a variable in a config file? Where would I set up the way the subject gets altered by SA? TIA Mike Schrauder --

[SAtalk] How AWL system works?

2002-10-14 Thread Tanel Kokk
I'm just trying to understand, how AWL works. As I have understood, AWL is like a longterm score for senders. When <[EMAIL PROTECTED]> sends a message with positive score (>5), then her longterm score should increase. When <[EMAIL PROTECTED]> sends s message with score below 5, then longterm s

Re: [SAtalk] How it all works...

2002-10-14 Thread Theo Van Dinter
On Mon, Oct 14, 2002 at 09:44:29AM -0400, Louis Bohm wrote: > I will take a look at mimedefang in a bit. Right now I am just trying to > understand how all this works together. Sadly I have not seen any docs > that really describe the process and the function of all the pieces. Well, with mil

Re: [SAtalk] How it all works...

2002-10-14 Thread Theo Van Dinter
On Mon, Oct 14, 2002 at 07:53:22AM -0400, Louis Bohm wrote: > So my question is this do I need Spamass-Milter to make all this > work??? After reading the docs on spamassassin and spamd it leads me to > think I don't. Well, you need something to interface spamassassin and sendmail. That's wha

[SAtalk] How it all works...

2002-10-14 Thread Louis Bohm
Help please, I have read all I can on milters and spamassassin and I know I am missing something. What I have is sendmail running on a DMZ mailsever (ver 8.12.6). This server is forwarding everything to internal mailservers using mailertables. I downloaded and installed spamassassin 2.42.

Re: [SAtalk] why fetchmail?

2002-10-14 Thread Matthew Cline
On Monday 14 October 2002 02:41 am, Nancy McGough wrote: > I don't have a fetchmail example to submit, but I have a > question: Why do people use fetchmail rather than getmail or > another method (*)? It seems that getmail avoids this type of > problem because it does not route the mail through t

Re: [SAtalk] fetchmail and SpamAssassin examples needed

2002-10-14 Thread Nancy McGough
On 11 Oct 2002 Daniel Quinlan ([EMAIL PROTECTED]) wrote: > I am renewing my request for fetchmail examples. It's been 3 weeks > and nobody (other than Justin) has attached any examples. > > If you: > > 1. tag your mail with spamassassin after retrieving it with fetchmail >or another POP3/IMAP