Re: [SAtalk] Re: SA 2.43-1woody

2002-10-16 Thread Ralf G. R. Bergs
On Wed, 16 Oct 2002 17:21:49 -0400, Duncan Findlay wrote: >On Wed, Oct 16, 2002 at 02:14:27PM +0200, Ralf G. R. Bergs wrote: >> Duncan, >> >> the following snippet in your port of SA 2.43 gives ugly regular warnings from >> the automunter: >> >> Server:~# grep duncf /usr/sbin/spamd >> use li

[SAtalk] spamassassin 2.41 "tests=none"

2002-10-16 Thread Mark Rowlands
I was running sa on FreeBSD4.6 ok, after an upgrading to 4.7, all mail now shows X-spam tests=none, I am using kmail and piping through spamc to spamd. . any pointer as to why/how this may have happened? --- This sf.net ema

[SAtalk] System White / Black lists Ignored

2002-10-16 Thread Jason KRISCH
I have been battling this all night: We are running SpamAssassin 2.42 infront of our GroupWise GWIA. We have SpamAssassin running with spampd (http://www.worlddesign.com/index.cfm/rd/mta/spampd.htm) as an smtp relay and pushing everything to the GWIA. It works great and our test users are thri

Re: [SAtalk] Site-wide Auto-Whitelist Issues

2002-10-16 Thread Ross Vandegrift
On Wed, Oct 16, 2002 at 11:30:57AM -0400, Jason KRISCH wrote: > I am trying to get the autowhite-list feature to work for the entire system There's your first mistake; in general, I've found the AWL to be unreliable. I've commonly seen spams score a nice fat negative due to the AWL - heaven know

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread Neal Hughes
Thanks everyone for the help.. I went through the steps suggested here, did some more debugging, and found there were permission problems on the auto-whitelist files. I changed those and everything seems to be happy now.. The problem was related to using a different user when using spamd. Your

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 08:33:44AM -0700, Neal Hughes wrote: > Yes, it connects! > > /root/downloads/spamassassin# telnet localhost 783 > Trying 127.0.0.1... > Connected to localhost.localdomain. > Escape character is '^]'. > > SPAMD/1.0 76 Bad header line: > Connection closed by foreign host. >

[SAtalk] Wanted: contractor to work on spam control for innovative email client

2002-10-16 Thread Ron Bodkin
Hi all, I'm a consultant with Stata Labs, which is a Silicon Valley-based R&D firm. We are developing an innovative new email client, NewMonix. Like any email product, it needs to deal with spam effectively. We view spamassassin as one of the leading open source spam projects and wanted to det

Re: [SAtalk] Pyzor & DCC not found

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 01:59:53PM -0500, Smart, Dan wrote: > debug: DCC is not available: dccproc not found > debug: Pyzor is not available: pyzor not found > > What could have happened? I didn't mess with either pyzor or dcc today. I > did load the 2.20 Razor, which is working great! Could t

Re: [SAtalk] Spam Assassin Installer

2002-10-16 Thread Colm MacCárthaigh
On Wed, Oct 16, 2002 at 05:03:18PM -0500, Johnny L. Wales wrote: > Anyhoo, I wrote a little perl script that takes the name of a user and > automagically installs SpamAssassin for them. It's not quite ready for > primetime, but I thought I'd send in what I had and maybe get some > comments on it.

Re: [SAtalk] winpopup spams - article

2002-10-16 Thread Tony L. Svanstrom
On Wed, 16 Oct 2002 the voices made Kenneth Porter write: > BTW, an open port 135 might as well be considered a solicitation for a > message, so it would be hard to prosecute anyone using this to send a spam. BTW, an open port 25 might as well be considered a solicitation for a message...

[SAtalk] Spam Assassin Installer

2002-10-16 Thread Johnny L. Wales
Hi folks! I installed SpamAssassin on my own account here at work a couple weeks ago, and saw how cool it was, and then I showed it to my boss. Then she wanted it and mentioned it to the CEO. He wanted it, too. Then I brought it up in a programmers meeting and lots of people wanted it. Still, we

RE: [SAtalk] Pyzor & DCC not found

2002-10-16 Thread Smart, Dan
Classification: PUBLIC I tried back revving to Razor 2.14. This didn't make a difference. Not sure what to do next. <> |-Original Message- |From: Smart, Dan [mailto:[EMAIL PROTECTED]] |Sent: Wednesday, October 16, 2002 2:00 PM |To: [EMAIL PROTECTED] |Subject: [SAtalk] Pyzor & DCC not

Re: [SAtalk] winpopup spams - article

2002-10-16 Thread Kenneth Porter
--On Wednesday, October 16, 2002 11:51 AM -0700 Jonathan Nichols <[EMAIL PROTECTED]> wrote: > I recall someone talking about getting hit with Windows Messenger > spams recently. Here's an article about them: > http://www.wired.com/news/technology/0,1282,55795,00.html >From the article: "While W

[SAtalk] Re: SA 2.43-1woody

2002-10-16 Thread Duncan Findlay
On Wed, Oct 16, 2002 at 02:14:27PM +0200, Ralf G. R. Bergs wrote: > Duncan, > > the following snippet in your port of SA 2.43 gives ugly regular warnings from > the automunter: > > Server:~# grep duncf /usr/sbin/spamd > use lib '/home/duncf/spamassassin- > 2.43/debian/spamassassin/usr/local/sh

Re: [SAtalk] More granular reporting on unflagged Spam available?

2002-10-16 Thread listuser
On Wed, 16 Oct 2002, Tim Provencio wrote: > Is there a way to add the scores to the tests that were done? For example, > in the following it does report the number of hits the required and the test > but is it possible to display the score of each test similar to as it does > in the case of Spam

Re: [SAtalk] Grr..> more detailed information (fwd)

2002-10-16 Thread Matt Kettler
What about a rule hitting anything giving a strong or aggressive buy recommendation for any OTCBB traded stock? body MK_OTC_STOCK_BUY /\b(?:aggressive|strong) buy recommendation.{1,100}\b(?-i:OTCBB)\b/i score MK_OTC_STOCK_BUY 4.0 This might false pos for those who subscribe to a lot of legit

Re: [SAtalk] More granular reporting on unflagged Spam available?

2002-10-16 Thread Nancy McGough
On 16 Oct 2002 Tim Provencio ([EMAIL PROTECTED]) wrote: > > Reason being; in the case of missed messages, it would be nice to see what > tests are resulting in what scores. I've looked thru the config options and > don't see anything of the likes. Is there some "secret" or undocumented > directi

Re: [SAtalk] More granular reporting on unflagged Spam available?

2002-10-16 Thread Pete Hanson
I don't believe there's a way to do that, but I sure would love to see some individual scores in that header just to show what's going on. On Wednesday, Oct 16, 2002, at 10:33 America/Anchorage, Tim Provencio wrote: > Is there a way to add the scores to the tests that were done?  For > exampl

[SAtalk] RPM build problem

2002-10-16 Thread John Dalbec
I'm on Red Hat 7.1 (perl 5.6.0) and I tried rebuilding the SpamAssassin RPMs from source. I got the "File not found by glob" message. Apparently the files that are supposed to be in /usr/lib/perl5/site_perl/5.6.0 are being installed in /usr/lib/site_perl/5.6.0. I can see this path in the gen

[SAtalk] VCF attachments

2002-10-16 Thread Danita Zanre
Does anyone ever see true Spam that contains VCFs as attachments? I haven't seen any yet, but I have had email flagged as spam with VCFs just due to "spammish" stuff in the message. I'm wondering if this might not be another possible "offsetting" value to think about. Just a thought way too ear

[SAtalk] Infinite loop

2002-10-16 Thread John Dalbec
One of my users got a 2.5M email that sent spamassassin 2.31 into an infinite loop. Unfortunately I wasn't able to capture the e-mail. I did an strace() on the spamassassin process and it kept mmap()ing and unmmap()ing one section of the file. Has anyone seen similar behavior? Thanks, John D

[SAtalk] winpopup spams - article

2002-10-16 Thread Jonathan Nichols
Hey guys - I recall someone talking about getting hit with Windows Messenger spams recently. Here's an article about them: http://www.wired.com/news/technology/0,1282,55795,00.html Geez. Spammers just keep sinking to new depths. Just when I thought they had hit the rock bottom of scum, th

[SAtalk] Pyzor & DCC not found

2002-10-16 Thread Smart, Dan
Classification: PUBLIC I'm running the release 2.43 code. I had Razor2, DCC, and Pyzor all running under 2.42 and 2.43. Now, all of a sudden, DCC and Pyzor have quit running. When I loaded spamd from command prompt it says: > spamd -D -x -a -m 8 -u filter -H /home/filter debug: DCC is not ava

[SAtalk] Re: URL blacklist

2002-10-16 Thread Scott A Crosby
On Tue, 1 Oct 2002 10:56:31 -0500, Robert Strickler <[EMAIL PROTECTED]> writes: > The biggest problem with converting a url to a checksum, is it wont take > long for the more sophisticated die-hard spammers to hack Apache (if it does > not currently support the capability) to allow a randomized

[SAtalk] Grr..> more detailed information (fwd)

2002-10-16 Thread Jonathan Nichols
These spams are so annoying. Any ideas for a rule that bit-buckets anything that says "Cal-Bay" in it? (with the exception of "Cal Bay sucks?") :P I get probably 5-7 of these a week on another address.. -- Forwarded message -- Date: Wed, 16 Oct 2002 05:52:25 -0700 (PDT) From: Ro

[SAtalk] More granular reporting on unflagged Spam available?

2002-10-16 Thread Tim Provencio
Title: More granular reporting on unflagged Spam available? Is there a way to add the scores to the tests that were done?  For example, in the following it does report the number of hits the required and the test but is it possible to display the score of each test similar to as it does in the

Re: [SAtalk] spamc && !spamd

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 11:23:10AM -0500, [EMAIL PROTECTED] wrote: > This leads me to a question. Is there a way to tell SA to ignore (and > possibly overwrite) all conflicting header lines like X-Spam-Status? That It does already. SA removed the X-Spam-* headers before scanning. This actually

Re: [SAtalk] spamc && !spamd

2002-10-16 Thread listuser
On Wed, 16 Oct 2002, Theo Van Dinter wrote: > On Wed, Oct 16, 2002 at 09:47:52AM -0500, [EMAIL PROTECTED] wrote: > > So, why did I get SpamAssassin headers when I didn't have spamd running? > > The answer is that it's being scanned elsewhere. For instance, I > receive mails (currently ~4% of my

Re: [SAtalk] No need to answer : Where should whitelist_from entries be placed ?

2002-10-16 Thread Matt Kettler
No, do not edit any of the /usr/share/spamassasin/* files if you can avoid it. They will be obliterated when you upgrade. /etc/mail/spamassassin/local.cf is the proper spot for site-wide applications ~/.spamassassin/user_prefs is the proper spot if you run SpamAssassin as different users and wa

Re: [SAtalk] Why the score is at -68.3

2002-10-16 Thread Matt Kettler
SA 2.42 has a bug in the AWL code that can severely jack down the score of spam mails, disable the AWL or use SA 2.43 At 09:43 AM 10/16/2002 +0200, Vincent Nainemoutou wrote: > All, please find enclosed a message header I am trying to tag. It is >working for all other blacklist_from. I

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread Neal Hughes
Yes, it connects! /root/downloads/spamassassin# telnet localhost 783 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. SPAMD/1.0 76 Bad header line: Connection closed by foreign host. Thanks for looking at this.. -Neal. At 10:55 AM 10/16/2002 -0400, Theo Van

[SAtalk] Site-wide Auto-Whitelist Issues

2002-10-16 Thread Jason KRISCH
We are running SpamAssassin 2.42 infront of our GroupWise GWIA. We have SpamAssassin running with spampd (http://www.worlddesign.com/index.cfm/rd/mta/spampd.htm)acting as a smtp relay and pushing everything to the GWIA. It works great and our test uses are thrilled with the new spam tags that

Re: [SAtalk] spamc && !spamd

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 09:47:52AM -0500, [EMAIL PROTECTED] wrote: > So, why did I get SpamAssassin headers when I didn't have spamd running? The answer is that it's being scanned elsewhere. For instance, I receive mails (currently ~4% of my mail per month) that already have a X-Spam-Status head

Re: [SAtalk] No need to answer : Where should whitelist_from entries be placed ?

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 03:57:18PM +0100, Usr Local wrote: > I hate having to answer my own posts but I think I have found the right > file - 10_misc.cf appears to work. You don't want to edit the default rule files, they'll be overwritten if/when you upgrade. Typically anything "sitewide" is p

Re: [SAtalk] spamc && !spamd

2002-10-16 Thread aero
So, why did I get SpamAssassin headers when I didn't have spamd running? Patrick Original Message From: Theo Van Dinter Date: Wed 10/16/02 9:38 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject:Re: [SAtalk] spamc && !spamd On Wed,

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 07:48:15AM -0700, Neal Hughes wrote: > Yes, ps ax says so, see here: > 357 ? S0:01 perl /usr/local/bin/spamd -d -c -a -D -u nobody Hmmm. If you do a "telnet localhost 783" does it connect? If you give it a newline, you ought to get back a "SPAMD/1.0 76 Bad header

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread joe
On October 16, 2002 07:31 am, Neal Hughes wrote: > Hi, > > Spamassassin works well when I call it from procmailrc.. > > I'd like to use spamc though to reduce overhead. It's not working, > I get the following message in maillog: > Oct 16 04:08:24 server1 spamc[9388]: connect() to spamd failed: > C

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 07:31:55AM -0700, Neal Hughes wrote: > I'd like to use spamc though to reduce overhead. It's not working, > I get the following message in maillog: > Oct 16 04:08:24 server1 spamc[9388]: connect() to spamd failed: Connection > refused > > I can't figure out what causes th

[SAtalk] LMTPProxy (spamcheck.py) errors ...

2002-10-16 Thread Marc G. Fournier
I know zip about python, so don't know where to start debugging this, but periodically I'm getting the following coming back: <[EMAIL PROTECTED]>: Command died with status 1: "/usr/local/sbin/spamcheck.py". Command output: exceptions.SystemExit: 75 but no idea how to debug it ... Anyone?

Re: [SAtalk] spamd connection refused.

2002-10-16 Thread Neal Hughes
Yes, ps ax says so, see here: 357 ? S0:01 perl /usr/local/bin/spamd -d -c -a -D -u nobody Thanks, -Neal. At 10:42 AM 10/16/2002 -0400, Theo Van Dinter wrote: >On Wed, Oct 16, 2002 at 07:31:55AM -0700, Neal Hughes wrote: > > I'd like to use spamc though to reduce overhead. It's not worki

[SAtalk] No need to answer : Where should whitelist_from entries be placed?

2002-10-16 Thread Usr Local
I hate having to answer my own posts but I think I have found the right file - 10_misc.cf appears to work. Apologies for the duplicate earlier. Toril The problem I have is some non-spam is being tagged as spam and my understanding is I can use the whitelist_from keyword to have specific

Re: [SAtalk] spamc && !spamd

2002-10-16 Thread Theo Van Dinter
On Wed, Oct 16, 2002 at 08:57:32AM -0500, [EMAIL PROTECTED] wrote: > It's version 2.42 of SA. When I went back and checked, spamd was not running. So if > it's spawning a spamd, it's not leaving it hanging around. spamc does not spawn spamd. spamc tries to connect to the port, if there's nothing

[SAtalk] spamd connection refused.

2002-10-16 Thread Neal Hughes
Hi, Spamassassin works well when I call it from procmailrc.. I'd like to use spamc though to reduce overhead. It's not working, I get the following message in maillog: Oct 16 04:08:24 server1 spamc[9388]: connect() to spamd failed: Connection refused I can't figure out what causes that.. Any

RE: [SAtalk] spamc && !spamd

2002-10-16 Thread aero
It's version 2.42 of SA. When I went back and checked, spamd was not running. So if it's spawning a spamd, it's not leaving it hanging around. Patrick Original Message From: Robin Cornelius Date: Wed 10/16/02 3:46 To: [EMAIL PROTECTED] Subject:R

[SAtalk] AWL, my coworkers

2002-10-16 Thread Scott Gurley
Hi everyone. I've looked through the archives and couldn't find a solution. I see other people have had this problem though so I thought I'd post. Here's the situation. I'm sure everyone has seen the spam that comes in looking like you sent it to yourself. I get spam sent to me "from me"... spamm

RE: [SAtalk] Get SpamAssassin for your Woody!

2002-10-16 Thread DEFFONTAINES Vincent
> -Original Message- > From: Duncan Findlay [mailto:[EMAIL PROTECTED]] > Sent: Wednesday 16 October 2002 06:15 > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Get SpamAssassin for your Woody! > > > Packages for spamassassin-2.43 are available now. The > libnet-smtp-server-perl package

RE: [SAtalk] Consistency between releases

2002-10-16 Thread Michael Moncur
> I've got a sneaking suspicion that all of us who are using scores > 5 > as the "it's spam, bin it" threshold with the stock rule values should > really be re-running the GA locally, tuned for whatever threshold value > we want -- i.e., you should run it with the GA configured for a threshold > o

RE: [SAtalk] Consistency between releases

2002-10-16 Thread Clayton, Nik [IT]
> As you can see, almost the same proportion of mail is scored above 5.0 > (I would expect this) - but now only a fraction of said mail is being > blocked as spam. To get the same level of blocking on that second day, > under 2.42, I actually have to lower the threshold from 10 to > 6.6 - not a s

Re: [SAtalk] Why the score is at -68.3

2002-10-16 Thread Justin Mason
Vincent Nainemoutou said: > All, please find enclosed a message header I am trying to tag. It is > working for all other blacklist_from. I don't understand why the score is > negative. I did not notice any problem in my local.cf file. Vincent, we need *full* headers including Received,

Re: [SAtalk] Spam not being tagged

2002-10-16 Thread Jose Manuel Macias Luna
El Mié 16 Oct 2002 11:14, Jose Manuel Macias Luna escribió: > I realized this morning that some spam is not being tagged by > SA... I know why... I'm sorry... spamc man page states: " Note that the default size is 250k, so if spamc gets handed a message bigger than this

[SAtalk] Where should whitelist_from entries be placed ?

2002-10-16 Thread Usr Local
The problem I have is some non-spam is being tagged as spam and my understanding is I can use the whitelist_from keyword to have specific from: addresses ignored. Running on Mandrake 8.2 I have SA 2.41 running in site-wide spamd/spamc mode as user spamtrap with header filters in /etc/procmailrc

[SAtalk] Spam not being tagged

2002-10-16 Thread Jose Manuel Macias Luna
Hello all, I realized this morning that some spam is not being tagged by SA. I tried to report that it is spam with 'spamassassin -r' but I got an error: "Warning, unable to report spam", perhaps a problem with my configuration. What should I do ? It's very str

[SAtalk] whitelist_from file location confusion !!

2002-10-16 Thread Rc Local
The problem I have is some non-spam is being tagged as spam and my understanding is I can use the whitelist_from keyword to have specific from: addresses ignored. Running on Mandrake 8.2 I have SA 2.41 running in site-wide spamd/spamc mode as user spamtrap with header filters in /etc/procmail

[SAtalk] Fw: [Razor-users] [Announce] razor-agents 2.20 - First Stable Release

2002-10-16 Thread Jonathan Nichols
Hey guys! I think this is what we were waiting for to solve that "unblessed reference" log error that razor was causing. There's already a workaround/explanation in the SA FAQ just in case it's not. :-) - Original Message - From: "Vipul Ved Prakash" <[EMAIL PROTECTED]> To: <[EMAIL PROTE

[SAtalk] Why the score is at -68.3

2002-10-16 Thread Vincent Nainemoutou
All, please find enclosed a message header I am trying to tag. It is working for all other blacklist_from. I don't understand why the score is negative. I did not notice any problem in my local.cf file. Thanks for any advice. --Vincent From: "Artprice.com" <[E