Ralf Hildebrandt <[EMAIL PROTECTED]> [2002-10-24 07:16:54 +0200]:
> On Wed, Oct 23, 2002 at 04:20:16PM -0400, Matt Kettler wrote:
> > 0.5, and I'm not high volume. If you do leave any DNSBLs on, make sure
> > your spamd server has FAST access to a nameserver. I'd even go as far as
> > to recomme
On Wed, Oct 23, 2002 at 04:20:16PM -0400, Matt Kettler wrote:
> 2) zero the scores for several, or all, of the DNSBLs. I personally took
> the approach of zeroing the scores of DNSBL's for ones which score under
> 0.5, and I'm not high volume. If you do leave any DNSBLs on, make sure
> your sp
On Wed, Oct 23, 2002 at 08:38:24PM -0500, Mike Loiterman wrote:
>
> How are people generating statistics with Spamassassin?
>
> For example, in a recent post to the list someone writes:
>
> Here is a typical summary for a weekday:
> SpamAssassin statistics for 2002/10/22:
>
> Time spent process
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
First, I have a rule in my procmailrc file that pulls the score and
date from each email and dumps it into a file called
/home/mike/email-scores
:0fw
* ^X-Spam-Status: *\/[^].*
{ SSTAT=$MATCH }
SSTAT=`echo "$SSTAT" | cut -d' ' -f2 | tr -dc "0-9.-
On Mon, 21 Oct 2002, Joseph R wrote:
> using Spamassasin 2.42
>
> I had a "rape" spam that got in... The RAPE score completely failed,
> because the email had text like so ;
>
> ---
> Wow ! What a great site ! Excellent violent rape videos, very fast
Your pattern looks good.
I ran this past the
Scott Lambert wrote:
On Wed, Oct 23, 2002 at 10:01:21AM -0400, Chris Santerre wrote:
"Of course, you probably need to use a userprefs database in that case,
rather than the userprefs in each user's home directory."
Aside from moving the process to another system, Are you saying that seting
up t
>Scott Lambert wrote:
>Seperate the two functions. Run spamd on a dedicated box with lots
>of CPU and memory. Disk is not terribly important. Just add -d
>spamd.box.domain to you spamc invocation on the mail server.
im currently already running them as 2 separate functions but on the same mac
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
How are people generating statistics with Spamassassin?
For example, in a recent post to the list someone writes:
Here is a typical summary for a weekday:
SpamAssassin statistics for 2002/10/22:
Time spent processing all messages: 70424
Total mess
On Wed, 23 Oct 2002 13:28:34 -0600
Gustave Eiffel <[EMAIL PROTECTED]> wrote:
> So, spamc is the daemon is it not?
spamd is the daemon, spamc is the client :)
sorry, seeing procmail made me think of spawning the whole spamassassing for
each mail.
so, you're hitting loadavg of 4 and more. thats
I've recently run into an issue... I use courier-mta's userdb auth to set
up virtual accounts for a few domains I host on my machine. This is nice,
since I don't need to create system accounts on my machine for people who
have no right to be in there. I finally figured out why I hadn't been
The Spam Assassin install doc says Razor 2 doesn't work with Spam Assassin. I just
installed Spam Assassin and am hardly blocking any spam. I thought I would try razor
as well, but don't know what version to use, where to get it, or how to install it.
I'm on Win2k Server.
Any help would be g
On Wed, 23 Oct 2002, Michael Moncur wrote:
> score LINES_OF_YELLING_3 0.315
> score LINES_OF_YELLING_2 0.217
> score LINES_OF_YELLING 0.212
>
> Scores this low indicate that all three LINES_OF_YELLING rules have become
> pretty worthless in detecting spam.
I
On Sat, Oct 19, 2002 at 03:01:39PM -0500, Bryant, Eric D. wrote:
> I am working on implementing a spam-filtering solution for Purdue
> University and SpamAssassin is one of the products at the top of my
> list. I'm wondering if you guys can give me some feedback as to what
> your experiences have
http://www.msnbc.com/news/824336.asp?0si=
An excerpt:
> This swindle is commonly known as "419 fraud," after the section of
> the Nigerian penal code covering cons. According to the anti-spam
> software vendor Brightmail, 419 come-ons are the Web's second-most
> common form of junk mail, ranking
> 1. Why does the third line of yelling account for a negative score? It's
> quite common for UCE to have multiply lines in ALLCAPS.
The scores are calculated using a genetic algorithm (GA) that analyzes a
huge corpus of spam and nonspam messages, and it probably found some overall
benefit in redu
Al Sparks said:
> I'll ask a broader question. If we want users to be able to add their
> own whitelist entries only, what's the best mechanism to do that?
whitelist_from etc. all work in the user_prefs file. It's just new
rules that cannot be defined.
--j.
-
This may be a bit of a stupid question but...
I have all the config files in /usr/share/spamassassin/
eg 10_misc.cf and 20_body_tests.cf etc
Where does /etc/mail/spamassassin/locla.cf fit into this?
The config below should go where? Into the locla.cf?
Some explanation of how this works wou
"McClung, Darren W." said:
> Spamd most certainly does use individual user_prefs files, and will create
> them if they do not already exist. The wording of the readme would indicate
> to me that you cannot define custom rules inside a user_prefs file.
>
> I'm curious to know what the "security
Michael Bell said:
> Well, first I should say I am running this on Win32, so y'all can
> tell me Win32 != Unix
wow, cool, didn't realise this worked without serious porting ;)
> Anyway, I run SA-LEARN-SPAM on a single message in a single folder
> like this
> sa-learn-spam -D c:\test
> (C:\test
On Wed, 23 Oct 2002 14:42:25 -0700, you wrote:
>Use the milter interface with amavis. The instructions are in the file
>README.milter of the amavis distribution. I've got it running on three
>servers with sophos a/v, and it works like a charm.
Thank you, that's what I was looking for!
FP
---
Use the milter interface with amavis. The instructions are in the file
README.milter of the amavis distribution. I've got it running on three
servers with sophos a/v, and it works like a charm.
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:spamassassin-talk-admin@;lists.sourcefo
On Wed, Oct 23, 2002 at 11:26:26PM +0200, Jan Korger wrote:
> does 'spamassassin -r' accept a unix mail folder or do I need to use
> formail if I want to tag all messages in a folder as Spam?
spamassassin only deals with one message at a time (-r or not),
so you'd need a seperate program to either
Greg Jamison wrote:
> The spamassassin service is running, but spam of all kinds is still
> pouring through. Any ideas on what I need to do to get it working? Any
> input is greatly appreciated. Thanks!!
>From the RPM notes:
To enable spamassassin, if you are receiving mail locally, simply add
th
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi again,
does 'spamassassin -r' accept a unix mail folder or do I need to use
formail if I want to tag all messages in a folder as Spam?
Is the INTERNAL FOLDER DATE message on top of any mail folder file a
problem?
Is there anything special for pine u
On Wed, 23 Oct 2002, Kevin J. Steil wrote:
> Also, which will perform better...using mailscanner or a milter in
> sendmail??
>
> This is an enterprise SMTP Gateway...going to be passing about 10K to
> 20k message per day.
>
I've used both mailscanner and mimedefang, and mimedefang (a milter) is
D
If any one has ever got the spamassassin that comes bundled with RedHat
8.0 working, I would like to know what is necessary to do so. I choose
the sendmail and spamassassin packages during the OS installation, and
have sendmail configured and running, everything there is working fine.
The spamassas
Strange. SA doesn't report RCVD_IN_ in
get_names_of_tests_hit. However, a direct DNS check of the
blacklists shows that Received: [ip] of email is
blacklisted. Using v2.41
- Original Message -
Subject: Re: [SAtalk] DNS blacklists
> look for "check_rbl" and "check_rbl_results_for
Spamd most certainly does use individual user_prefs files, and will create
them if they do not already exist. The wording of the readme would indicate
to me that you cannot define custom rules inside a user_prefs file.
I'm curious to know what the "security reasons" are for this though.
Darren
Hopefully an easy one. I'm using SA with sendmail and procmail. SA is being
called via procmail recipes for individual users, rather than sitewide via a
milter.
I'd like to use amavis to scan all incoming mail, but the amavis instructions
say to replace procmail.
What's the best (read: "easiest
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi all,
1. Why does the third line of yelling account for a negative score? It's
quite common for UCE to have multiply lines in ALLCAPS.
2. I don't think that auto_report (to Vazor) is a good feature because
anything that can be automatically spotted
I am testing out using spamassassin with sendmail on RedHat as a SMTP
Gateway for our Enterprise Notes and Exchange servers. The mail will be
scrubbed then passed on. I have setup MailScanner with SA and SOPHOS
and it worked great, except for debugging Spam issues. I would like to
enable MailSc
*NOTE: the following is HUMOR.. do not take this as serious advice on how
/dev/null works*
Are you sure? Couldn't the contents of /dev/null get corrupted if multiple
threads are writing to it without locking? I know I generally read the
contents of my /dev/null out into a debug logfile as a par
Well, first I should say I am running this on Win32, so y'all can
tell me Win32 != Unix
Anyway, I run SA-LEARN-SPAM on a single message in a single folder
like this
sa-learn-spam -D c:\test
(C:\test contains sample-spam.txt)
The program gets stuck, probably because the UID, UNAME, and DATE
com
look for "check_rbl" and "check_rbl_results_for" in the EvalTests.pm file
for the code.
As for the list of blacklists checked, look for rules calling them in
20_head_tests.cf.
For example:
header HABEAS_HIL rbleval:check_rbl('hil', 'hil.habeas.com.')
At 12:31 PM 10/23/2002 -0700,
For high-volume I'd recommend a couple tweaks if your CPU load average is
going too high.
1) disable razor, as you already suggested, along with razor2, dcc, and pyzor.
2) zero the scores for several, or all, of the DNSBLs. I personally took
the approach of zeroing the scores of DNSBL's for one
Tried that. Load still went up to over 10.0
Any other ideas on reducing the load put on by spamassassin?
Thanks
Quoting Steve Thomas <[EMAIL PROTECTED]>:
> | Suggestions appreciated.
> |
> | :0:
> | * ^X-Spam-Status: Yes
> | /dev/null
>
> suggestion:
> You don't need to specify file loc
The following is from the README file at
http://www.spamassassin.org/dist/README.
- $USER_HOME/.spamassassin/user_prefs:
User preferences file. If it does not exist, one of the
default prefs file from above will be copied here for the
user to edit later, if they wish.
U
| Suggestions appreciated.
|
| :0:
| * ^X-Spam-Status: Yes
| /dev/null
suggestion:
You don't need to specify file locking (the trailing ":" in ":0:") when
writing to /dev/null. :)
---
This sf.net email is sponsored by: Influence the future
of
I am running it through spamd an I not?
Procmail is the MTA and here is the system wide /etc/procmailrc
DROPPRIVS=yes
:0fw
* < 256000
| spamc
So, spamc is the daemon is it not?
Thanks
Mark
Quoting Jure Pecar <[EMAIL PROTECTED]>:
> On Wed, 23 Oct 2002 13:00:16 -0600
> Gustave Eiffel <[
On Wed, 23 Oct 2002 13:00:16 -0600
Gustave Eiffel <[EMAIL PROTECTED]> wrote:
> Suggestions appreciated.
>
> I am running RedHat 8.0 on Quad Xeons with spamassasin (spamd)
> version spamassassin-2.31-16 ( version OK? )
> with this for an /etc/procmailrc file:
Run it as a daemon (spamd), route you
Can somebody please point me to the lines of code where SA
does it's DNS blacklist lookups. Can't seem to find it
- Original Message -
From: "Matt Kettler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Wednesday, October 23, 2002 10:26 AM
Subject: Re: [SAtal
Hello all,
I am using spamc for all users through /etc/procmailrc on 4 servers and
spamassassin works great. The problem is that it loads up the CPU to 4.0 and
often 10.0 or above. How can I reduce this? Eliminate razor check is one I
have seen on some other posts. What would be the best to t
You need to generate a new qmail-scanner-queue.pl and specify
verbose_spamassassin. It defaults to fast_spamassassin, which doesn't
inject any headers.
http://qmail-scanner.sourceforge.net/FAQ.php
Darren
-Original Message-
From: Jeff Garvas [mailto:jeff@;lek.net]
Sent: Wednesday, Octobe
If you want to delete on a per mailbox basis, the individual
$HOME/.procmailrc could have this recipe;
:0
* ^Subject: \[SPAM\]
/dev/null
Dan Liston
Gustave Eiffel wrote:
Thanks.
However not too sure how to do this:
I have this in my /etc/procmailrc
DROPPRIVS=yes
:0fw
* < 256000
| spamc
Wh
On Fri, Oct 18, 2002 at 11:51:08AM -0700, Aaron Levitt wrote:
> Is there a way to whitelist based on Bcc? If there is a user that is
> whitelisted based on whitelist_to it works for To: and Cc: but not Bcc.
> This is my alternative to user_prefs not working.
As others have said, the BCC headers a
What are the appropriate flags to run spamd for qmail-scanner?
I'm getting qmail-scanner header response that say "Clear:." but I can't get
the test-spam message to generate any X-Spam- style inserts. Does
qmail-scanner
cause spamd not to inject headers?
Am I missing something in the docume
On Wed, Oct 23, 2002 at 10:01:21AM -0400, Chris Santerre wrote:
> "Of course, you probably need to use a userprefs database in that case,
> rather than the userprefs in each user's home directory."
>
> Aside from moving the process to another system, Are you saying that seting
> up the users in a
On Wed, Oct 23, 2002 at 08:39:58AM -0500, Dallas Engelken wrote:
> > On Wed, Oct 23, 2002 at 05:35:20AM +0200,
> > [EMAIL PROTECTED] wrote:
> >
> > > hi list
> > >
> > > however, once the mails received go higher than 50 at one time,
> > > the CPU load shoots up to 90% or higher. and when this ha
Thanks.
However not too sure how to do this:
I have this in my /etc/procmailrc
DROPPRIVS=yes
:0fw
* < 256000
| spamc
What should I add?
Thanks much!
Mark
Quoting Neal Hughes <[EMAIL PROTECTED]>:
>
> Use procmail to put them in spam mailbox.
>
> -Neal.
>
> At 10:53 AM 10/23/2002 -060
Oh joy, this broken vacation rule even replies to the list sometimes!
wonderful! The only way it could be "better" is if the rule engaged in
conversations with itself posting to the list.
And people wonder why I feel that vacation rules should not be written by
anyone without a decent backgroun
1) that's not something SpamAssassin does, it doesn't work based on sender
domains, it tags based on content.
2) that's not something anyone does in text form, you can however do DNS
queries for blocked servers in various DNS blacklists. SpamAssassin does
use a few DNS blacklists by default. Mo
Well, I can give you any fixed ratios, but I can tell you that this "score
deviation" is likely to change when the GA is run. It's likely to change
very substantially if the GA itself changes, as happened between 2.31 and
2.4x, and it's likely to deviate more mildly as the content of the corpus
I want to run smapassassin site-wide using spamc. All works fine and is marking
messages with [SPAM]
How can I delete these messages instead of still delivering them?
Thanks
Mark
---
This sf.net email is sponsored by: Influence the future
Hi
Trying to setup spamassassin w/mailscanner
Environment:
O/S Redhat 7.2
SA Version 2.11
mailscanner 3.41
smapd is running with -d and -D flags
/var/log/maillog is reporting the following error:-
Premature end of base64 data at
/usr/lib/perl5/site_perl/5.6.0/Mail/SpamAssassin/PerMsgStatus
Hello,
I'm trying to determine how many spamassassin hits are appropriate for
tagging messages at different levels of it possibly being spam.
I have spamassassin 2.31 running on a production machine, and figured out
some good numbers for that situation. I installed 2.43 on a different
machine, an
Where can I get Text list of all blocked spaers domain names?
So that I can download to my server
Thanks
Best Regards
O. TUNC ERESEN
BEGIN:VCARD
VERSION:2.1
N:ERESEN;OSMAN;TUNC
FN:OSMAN TUNC ERESEN ([EMAIL PROTECTED])
ORG:NETINT Ltd
TITLE:DIRECTOR
TEL;WORK;VOICE:(44) 07785363481
TEL;WORK;
Someone should write a rule to catch McAfee spam like this.
When I downloaded whatever it is they claim I downloaded, I know I unchecked
any box that says "spam me with more advertisements about your products".
This isn't the first time McAfee has spammed me to sell spam software. I think
it'd
Ullrich Groh wrote:
Hy there,
I just installed (for the first time) SA 2.43 on our AIX 4.3 mail-server.
Perl is 5.005_03.
The SA itself seems to be running very good.
What makes a problem is spamd/spamc.
In principle it is up and running: but only for E-Mail smaller than
approx. 250 kB. Anyt
Hy there,
I just installed (for the first time) SA 2.43 on our AIX 4.3 mail-server.
Perl is 5.005_03.
The SA itself seems to be running very good.
What makes a problem is spamd/spamc.
In principle it is up and running: but only for E-Mail smaller than
approx. 250 kB. Anything above 250 kB goes
"Of course, you probably need to use a userprefs database in that case,
rather than the userprefs in each user's home directory."
Aside from moving the process to another system, Are you saying that seting
up the users in a database is a faster process then putting configs in user
directories? I h
> On Wed, Oct 23, 2002 at 05:35:20AM +0200,
> [EMAIL PROTECTED] wrote:
>
> > hi list
> >
> > however, once the mails received go higher than 50 at one time, the
> > CPU load shoots up to 90% or higher. and when this happens the mail
> > server becomes very slow and sometimes users complain that t
On Wed, 23 Oct 2002 09:32:21 -0400, you wrote:
>Hey Folks..
>
>What kind of rule would be needed to best filter out spam which is mostly
>HTML based? I remember something being posted here about this, but I think I
>accidentally deleted the post..
>
>Much thanks.. Doug
From http://www.spamassa
On Wed, 23 Oct 2002 06:36:54 -0700, [EMAIL PROTECTED]
wrote:
> Spamassassin-talk -- confirmation of subscription -- request 647701
>
> We have received a request from 63.69.210.36 for subscription of your
> email address, <[EMAIL PROTECTED]>, to the
> [EMAIL PROTECTED] mailing list. To confirm
Hey Folks..
What kind of rule would be needed to best filter out spam which is mostly
HTML based? I remember something being posted here about this, but I think I
accidentally deleted the post..
Much thanks.. Doug
---
This sf.net email is sp
Simon Matthews said the following on 23/10/02 07:08:
CPAN does not seem to have 2.43 yet -- I just tried an install and it told
me everything was up to date. I have 2.42 installed.
What's up?
Me. I just forgot. Done now. Should propogate tonight.
hi,
i wanted to install spamassassin on freebsd 4.5-RELEASE-p5 from the ports
and nearly everything worked
fine, except some errors:
1. while make build -> Warning: prerequisite File::Spec 0.8 not found at
(eval 1) line 219.
(i have File::Spec 0.82 installed)
2. while executing "/usr/local/bi
66 matches
Mail list logo
