Re: [SAtalk] base64 check not is not working?

2002-10-15 Thread Daniel Quinlan
Aram Mirzadeh <[EMAIL PROTECTED]> writes: > I just got this base64 spam and it seems the base64 check doesn't catch > it, I have included the header info: [ with 2.41 or 2.43 ]=20 > [...] > X-Spam-Status: No, hits=0.8 required=4.5 > tests=INVALID_MSGID,MICROSOFT_EXECUTABLE,MIME_HTML_NO_CH

Re: [SAtalk] Get SpamAssassin for your Woody!

2002-10-15 Thread Duncan Findlay
Packages for spamassassin-2.43 are available now. The libnet-smtp-server-perl package can be downloaded from the same place. Follow the instructions below. On Mon, Oct 07, 2002 at 11:41:42PM -0400, Duncan Findlay wrote: > Spamassassin 2.42 packages for Debian GNU/Linux "woody" are now available!

[SAtalk] base64 check not is not working?

2002-10-15 Thread Aram Mirzadeh
I just got this base64 spam and it seems the base64 check doesn't catch it, I have included the header info: [ with 2.41 or 2.43 ] [ Received stuff deleted ] From: "Monster Job Search Agent" <[EMAIL PROTECTED]> Subject: Monster Agent Results - 9/18/2002 MIME-Version: 1.0 Content-Type: multi

Re: [SAtalk] RPM build problem

2002-10-15 Thread Mike Burger
Well, the man directories...that showed up for the first time with 2.43. With 2.41 and 2, It was just /var/tmp/spamassassin-root/usr/bin/* that wasn't "found by glob". I'll try the rpm -bi... On Tue, 15 Oct 2002, Theo Van Dinter wrote: > On Tue, Oct 15, 2002 at 09:57:09PM -0500, Mike Burger w

Re: [SAtalk] RPM build problem

2002-10-15 Thread Mike Burger
Oddly, all the perl modules seem to be in place, as SA 2.41 is running. On Tue, 15 Oct 2002, Theo Van Dinter wrote: > On Tue, Oct 15, 2002 at 11:32:32PM -0400, Theo Van Dinter wrote: > > Unfortunately, I can't just force the directory in the spec file > > to something like /usr/share/doc/man/man

Re: [SAtalk] RPM build problem

2002-10-15 Thread Theo Van Dinter
On Tue, Oct 15, 2002 at 11:32:32PM -0400, Theo Van Dinter wrote: > Unfortunately, I can't just force the directory in the spec file > to something like /usr/share/doc/man/man* since it's different per > distro/version. Actually, I've forced the INSTALL1MANDIR and INSTALL3MANDIR in the spec file v

Re: [SAtalk] RPM build problem

2002-10-15 Thread Theo Van Dinter
On Tue, Oct 15, 2002 at 09:57:09PM -0500, Mike Burger wrote: > Theo didn't know what to make of it. I've figured out the problem to some degree, but I don't know what's causing it yet. I think it has something to do with the MakeMaker stuff, which I have no experience with, so investigation isn'

[SAtalk] RPM build problem

2002-10-15 Thread Mike Burger
I've run into this with 2.40, 2.41, 2.42, and now 2.43. It happens whether I'm using rpm --rebuild, as well as installing a src.rpm, and then running rpm -ba. Now, it's happening with rpm -ta Theo didn't know what to make of it. I'm trying to do this on a RH 7.1 system, which has rpm-4.0.4-7x

Re: [SAtalk] Consistency between releases

2002-10-15 Thread Barnaby Brown
On Mon, Oct 14, 2002 at 07:40:38PM -0700, Daniel Quinlan wrote: > [EMAIL PROTECTED] writes: > > > I only used the first message in my spam box, one that scored highly the > > first time around. I'm sure I could pick a half a dozen at random and see > > similar results. > > So what? Like I said

Re: [SAtalk] Razor Freezes in spamd Today

2002-10-15 Thread Theo Van Dinter
On Fri, Oct 11, 2002 at 12:14:40PM -0400, Theo Van Dinter wrote: > So if I'm right, the razor_timeout stuff is useless in SA since Net::Ping > just cancels the alarm on us, and we'd end up seeing hangs on Razor > calls since it never times out. > > I wonder if there's a way to find out the settin

[SAtalk] 2.4x seems much improved

2002-10-15 Thread Eric Mings
Since upgrading to the 2.4x versions (most recently 2.43 today) I have noticed a dramatic improvement in accuracy. Currently I am testing just on my own accounts, but I have been fortunate enough to have 100% correct classification of about 500 spams and who knows how many legit mails (I get a lo

Re: [SAtalk] Possible spam signature

2002-10-15 Thread Martin Radford
At Wed Oct 16 00:09:34 2002, Justin Mason wrote: > > > > Would anyone like to run this rule against their corpora and let me > > > know if it might be useful? > > > > Sorry dude: > > 0.0000.0000.0000.000.001.00 THEO_MSGID_TEST > > same here, I'm afraid. looks like you'v

Re: [SAtalk] Possible spam signature

2002-10-15 Thread Justin Mason
Theo Van Dinter said: > > Would anyone like to run this rule against their corpora and let me > > know if it might be useful? > > Sorry dude: > 0.0000.0000.0000.000.001.00 THEO_MSGID_TEST same here, I'm afraid. looks like you've got a lone spammer with his homegrown too

RE: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-15 Thread Jeremy Turner
On Tue, 2002-10-15 at 12:33, Stewart, John wrote: > > > A few days ago, someone mentioned graphing stats from > > spamassassin using > > MRTG and others. Well, I got that working, and it's pretty slick. > > Care to share the recipe for this? I didn't see anything in the SAtalk > archive... >

Re: [SAtalk] Possible spam signature

2002-10-15 Thread Tony L. Svanstrom
On Tue, 15 Oct 2002 the voices made Martin Radford write: > I've spotted in the last day or so a possible spam-indicator based on > the Message-ID of a number of recent spams. > > These have the format: > Message-ID =~ /^<10[0-9]{8}\.[0-9]{7}\.0\@\S+>$/ > > (i.e ten digits "dot" seven digits "dot

[SAtalk] Re: spamd 2.42 issues

2002-10-15 Thread Quinn Vallance
The problems that I was experiencing with spamd dying in the 2.42 release seems to have indeed been fixed with the release of 2.43. I upgraded to 2.43 from 2.41 which I had rolled back to as an interim solution and it has been running fine, rock solidish ;), on both of the mailservers (postfi

Re: [SAtalk] SA performance information

2002-10-15 Thread Steven Saner
The virus scanning mail servers that are in front of this box are doing RBL and MX checks and tagging messages with X headers. I then have a couple custom scores in the spamassassin config for these headers. This was done prior to spamassassin for use with some custom procmail spam filtering, and

Re: [SAtalk] Possible spam signature

2002-10-15 Thread Theo Van Dinter
On Tue, Oct 15, 2002 at 08:07:46PM +0100, Martin Radford wrote: > These have the format: > Message-ID =~ /^<10[0-9]{8}\.[0-9]{7}\.0\@\S+>$/ > > Would anyone like to run this rule against their corpora and let me > know if it might be useful? Sorry dude: OVERALL% SPAM% NONSPAM% S/ORANK

[SAtalk] adding a blacklist

2002-10-15 Thread Kris Zabriskie
A couple of my users are getting pounded by email from an open relay.  It is not on any of the RBLs, but I wish to add them.  How can I do this?

Re: [SAtalk] SA performance information

2002-10-15 Thread listuser
One thing I always do on my MTAs that use DNSBls is only use zone transfers of blacklists on my DNS server. I currently use 7 DNSBls from Sendmail, only 2 commercial lists. That brings the total DNS queries for each message to around 10. Now I don't deal with tons of mail per day, compared to s

Re: [SAtalk] SA performance information

2002-10-15 Thread Aram Mirzadeh
Did you even try to have a huge ass dns caching server on available, or just not even looking for these features? On Tue, 2002-10-15 at 16:19, Steven Saner wrote: > I use a dual P-III 1GHz, 1GB RAM. I churn as many as 80,000 messages a > day through spamassassin using spamc/spamd called from pr

Re: [SAtalk] newbie question, I am not getting any scores when running test messages thru SA v1.42

2002-10-15 Thread Theo Van Dinter
On Tue, Oct 15, 2002 at 03:16:14PM -0500, william f guyton jr wrote: > this is what I have got: > > -rw-r--r--1 root root 291 Oct 15 14:20 local.cf > > [root@projects spamassassin]# pwd > > /etc/mail/spamassassin Ok, how about /usr/share/spamassassin which is the default for t

Re: [SAtalk] SA performance information

2002-10-15 Thread Steven Saner
I use a dual P-III 1GHz, 1GB RAM. I churn as many as 80,000 messages a day through spamassassin using spamc/spamd called from procmail with a load avg. of 1-2, sometimes spiking higher during a big spam. Sendmail is the MTA and there is no virus filtering on this box (that happens before it gets t

Re: [SAtalk] newbie question, I am not getting any scores whenrunning test messages thru SA v1.42

2002-10-15 Thread william f guyton jr
this is what I have got: -rw-r--r--1 root root 291 Oct 15 14:20 local.cf [root@projects spamassassin]# pwd /etc/mail/spamassassin On Tue, 2002-10-15 at 14:55, Theo Van Dinter wrote: > On Tue, Oct 15, 2002 at 02:46:38PM -0500, william f guyton jr wrote: > > I must have a switch

[SAtalk] [Razor-users] commercial usage, etc. (fwd)

2002-10-15 Thread Mike Burger
Follow up from the Razor folks, regarding razor-for-pay. -- Mike Burger http://www.bubbanfriends.org Visit the Dog Pound II BBS telnet://dogpound2.citadel.org or http://dogpound2.citadel.org:2000 -- Forwarded message -- Date: Tue, 15 Oct 2002 12:29:05 -0700 From: Vipul Ved Prak

Re: [SAtalk] SA performance information

2002-10-15 Thread Vivek Khera
> "g" == gabriel <[EMAIL PROTECTED]> writes: g> Hi. I'm currently evaluating SpamAssassin for use in filtering / g> tagging spam, and I'm curious to know how well it performs. That is, on g> a given bit of hardware, let's say P-III @ 1GHz, 1GB Ram, about how many g> messages could spam

Re: [SAtalk] newbie question, I am not getting any scores when running test messages thru SA v1.42

2002-10-15 Thread Theo Van Dinter
On Tue, Oct 15, 2002 at 02:46:38PM -0500, william f guyton jr wrote: > I must have a switch set wrong, but I cant seem to find it. That is a usual symptom of spamassassin not being able to read the rule files. Check paths and permissions. Were the rules installed in a default location? -- Ra

[SAtalk] SA performance information

2002-10-15 Thread Gabriel
Hi. I'm currently evaluating SpamAssassin for use in filtering / tagging spam, and I'm curious to know how well it performs. That is, on a given bit of hardware, let's say P-III @ 1GHz, 1GB Ram, about how many messages could spam assassin handle? Any pointers? Much thanks, Gabriel Cain. -

[SAtalk] newbie question, I am not getting any scores when running testmessages thru SA v1.42

2002-10-15 Thread william f guyton jr
I am running qmail, patched with qmail-scanner and SA 1.42, everything tests out fine, but when run a test message thru the MTA running SA, I dont get any score reported. Received: from [EMAIL PROTECTED] by projects by uid 506 with qmail-scanner-1.14 (spamassassin: 2.42. Clear:SA:0(0/0):. Proce

Re: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-15 Thread Jeremy Turner
On Mon, 2002-10-14 at 22:31, Scott Lambert wrote: > On Mon, Oct 14, 2002 at 08:59:49PM -0500, Jeremy Turner wrote: > > On Mon, 2002-10-14 at 20:42, Philip Clever wrote: > > > what graphing have you set up thus far? > > > > The current graph is spam vs time, as in number of spam emails per > > min

Re: [SAtalk] netscape and spamassassin

2002-10-15 Thread Matt Kettler
In general your best bet will to be to use fetchmail and call spamassassin from procmail and point netscape at the local mail pool. There's not a whole lot of support for embedding SpamAssassin into MUA's (ie: clients) since it's really intended for use on MTAs (ie: servers). Some MUA's just h

Re: [SAtalk] netscape and spamassassin

2002-10-15 Thread Charles Dennett
lambert Bernard wrote: > Hi > > I want to install spamassassin on my PC > > I run suse 8.0 , and I use Netscape as browser and email. my mail box is > froma provider > > I have read the install and faq > > I saw how to set kdemail or procamail but nothing about netscape > > It is possible

Re: [SAdev] Re: [SAtalk] [SA-Announce] SpamAssassin 2.43 released

2002-10-15 Thread Kenneth Porter
--On Tuesday, October 15, 2002 1:26 PM -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: > You mean besides the spec file in the tar ball or the (S)RPMs available > from http://www.kluge.net/ftp/pub/spamassassin/ ??? And which you can rebuild without unpacking the tarball by using the "-ta" optio

Re: [SAtalk] SA score in subject?

2002-10-15 Thread Kenneth Porter
--On Monday, October 14, 2002 4:03 PM +0100 Nancy McGough <[EMAIL PROTECTED]> wrote: > I use this > rewrite_subject 1 > subject_tag {* _HITS_ *} > in my user_prefs file. The _HITS_ token is documented in the SA > man page. I do this as well. I then set my spam folder to sort by subject (ie. th

RE: [SAtalk] netscape and spamassassin

2002-10-15 Thread SpamTalk
I believe you will want to configure fetchmail to do the retrieval from your provider and configure Netscape to read IMAP or POP3 from you localhost. -Original Message- From: lambert Bernard [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 15, 2002 1:38 PM To: mail spamassassin Subject:

[SAtalk] Possible spam signature

2002-10-15 Thread Martin Radford
Hi all, I've spotted in the last day or so a possible spam-indicator based on the Message-ID of a number of recent spams. These have the format: Message-ID =~ /^<10[0-9]{8}\.[0-9]{7}\.0\@\S+>$/ (i.e ten digits "dot" seven digits "dot" zero @...) The first set of digits are the standard Unix ti

[SAtalk] netscape and spamassassin

2002-10-15 Thread lambert Bernard
Hi I want to install spamassassin on my PC I run suse 8.0 , and I use Netscape as browser and email. my mail box is froma provider I have read the install and faq I saw how to set kdemail or procamail but nothing about netscape It is possible to use spamassassin with netscape mail, and where

[SAtalk] Setting up SA on RH 7.2 w/sendmail

2002-10-15 Thread mbowman
Hello Has anyone successfully setup and installed spamassassin on a Redhat 7.2 system running sendmail. I want to configure it so that there is 'system wide' filtering. The future intention is to route all inbound email traffic through this server so that all email is filtered through spamassassi

RE: [SAtalk] Spamassassin (non-time-based) Graphs?

2002-10-15 Thread Stewart, John
> A few days ago, someone mentioned graphing stats from > spamassassin using > MRTG and others. Well, I got that working, and it's pretty slick. Care to share the recipe for this? I didn't see anything in the SAtalk archive... 'twould be excellent to show a graph to management so they can act

Re: [SAtalk] [SA-Announce] SpamAssassin 2.43 released

2002-10-15 Thread Vivek Khera
> "s" == steveo <[EMAIL PROTECTED]> writes: s> On Tue, 15 Oct 2002, Justin Mason wrote: s> =>Should be rock solid. ish. ;) s> I love you guys, but if some anti-spam fairy godmother could pop out and s> grant me one free wish, I'd ask for a spec file so I could create an s> installable rpm

Re: [SAdev] Re: [SAtalk] [SA-Announce] SpamAssassin 2.43 released

2002-10-15 Thread Theo Van Dinter
On Tue, Oct 15, 2002 at 01:08:31PM -0400, [EMAIL PROTECTED] wrote: > I love you guys, but if some anti-spam fairy godmother could pop out and > grant me one free wish, I'd ask for a spec file so I could create an > installable rpm to get better control on my Red Hat installation. > > Is this pos

Re: [SAtalk] [SA-Announce] SpamAssassin 2.43 released

2002-10-15 Thread steveo
On Tue, 15 Oct 2002, Justin Mason wrote: =>OK, here's 2.43. This is strictly a bug-fix release. Download at => =>http://spamassassin.org/downloads.html => =>(Er, at least, download it there in about 15 minutes, it's still =>gronking. ;) => =>Changes: => => - AWL change reverted; instead of

[SAtalk] nightly mass-check submission

2002-10-15 Thread Justin Mason
OK, I've just rigged something up for this. There really wasn't much to it apart from some procedures, so that's written up in "masses/CORPUS_SUBMIT_NIGHLY". Here it is: How To Submit Nightly Mass-check Results The first time you do this: check out t

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk Mail Filter"

2002-10-15 Thread Matt Kettler
I've recently been receiving quite a few similar spams myself. Both at my work addresses (postmaster) and one of my home addresses that's on a personal website. All of the ones here at work spamvertize "www.net-tran.com" which offers a product called "SpamCatchers" and are sent via a variety o

[SAtalk] man pages...

2002-10-15 Thread Brian May
Is there anyway we can add the version number of the release to the man pages? I know this seems kind of silly, but I just removed some very old man pages from /usr/share/man/man1 I think they were dated 6/15/02 or 01, but it would be MUCH easier to tell if I was looking atthe correct man pages i

[SAtalk] spamc && !spamd

2002-10-15 Thread aero
Hello, I just installed SpamAssassin. I've told procmail to pipe messages through spamc, but I was surprised when, before I had a chance to run spamd, messages appeared in my box with SpamAssassin headers. Does spamc instantiate a spamd process if the daemon isn't running? Thanks, Patrick --

[SAtalk] SpamAssassin 2.43 released

2002-10-15 Thread Justin Mason
OK, here's 2.43. This is strictly a bug-fix release. Download at http://spamassassin.org/downloads.html (Er, at least, download it there in about 15 minutes, it's still gronking. ;) Changes: - AWL change reverted; instead of decreasing the AWL bias gradually to allow frequently-seen

Re: [SAtalk] spamassassin site wide

2002-10-15 Thread Rick Beebe
Theo Van Dinter wrote: > On Mon, Oct 14, 2002 at 01:06:26PM -0700, Seby Varghese wrote: > >>I have the SpamAssassin installed site wide and would >>like to know there is a way to configure that if the >>user is in white list don't do any other checks. We >>need this because 80% of the mail handl

Re: [SAtalk] Boneheaded SPAM advertising "My new Anti-Junk MailFilter"

2002-10-15 Thread Mike Burger
On Mon, 14 Oct 2002, Simon Matthews wrote: > On Tue, 15 Oct 2002, Mike Burger wrote: > > > keeping in mind, also, that you didn't include the headers, so from what > > you presented us, there was no way for us to know from whence it came. > > Hey, I just posted it because I thought it would b

Re: [SAtalk] Consistency between releases

2002-10-15 Thread Justin Mason
Daniel Quinlan said: > > I really don't see it that way. I really don't think just looking at the > > false postitives and negatives is looking at the whole picture. Ignoring > > the hits in the middle would be like ignoring successes )complete or > > partial and only focusing on failures IMHO

Re: [SAtalk] Listbuilder rule?

2002-10-15 Thread Jost Krieger
On Mon, Oct 14, 2002 at 03:40:04PM +0100, Justin Mason wrote: > b) nowadays, there's quite a lot of worry being expressed about false > positives from over-zealous spamcop users nominating non-spam. We're > already talking about zeroing out SPEWS, and Spamcop is #2 (as far as I > can tell) in te

Re: [SAtalk] Re: spam assassin test

2002-10-15 Thread Jonathan Nichols
> > I saw the incoming mail and it was tagged as a spam. What's the next thing > that I should do then? > > This is slick. > Next? Go have some coffee.. because you get to learn procmail next! :-) (Actually, simple procmail rules aren't too bad) Either that, or teach users how to filter email..