Re: [SAtalk] Well written spam advertising how to spam

2002-11-05 Thread Jan Schreckenbach
Well, I missed that point (wrote that mail before my first coffee that day). OK, but if that list isn't filtered server-side I need to do so (with the same result) or let SPAM in. At least posting should be restricted to list members. Would filtering based only on headers and using external databa

Re: [SAtalk] test suggestion

2002-11-05 Thread Ross Vandegrift
On Mon, Nov 04, 2002 at 12:58:55PM -0800, Daniel Quinlan wrote: > Yeech. Exempting broken MUAs is getting old. *sigh* Well, I certainly have never done a systematic study, but, is it worth it at all?? Every single false positive I've ever recieved, tripped over because of an MUA test. And not

[SAtalk] Mail Spam Assasin and sendmail configuration

2002-11-05 Thread Ashok V
Hi, I am using sendmail-8.11.6-15 in Linux. Frequently getting SPAM mail report from other site. I plan to go for Mail Spam Assassin. I installed it but hanged up with the configuration. I need to know complete configuration step with my sendmail server. Could you please help in this? thanks in ad

[SAtalk] Mail Spam Assasin and sendmail configuration

2002-11-05 Thread Ashok V
Hi, I am using sendmail-8.11.6-15 in Linux. Frequently getting SPAM mail report from other site. I plan to go for Mail Spam Assassin. I installed it but hanged up with the configuration. I need to know complete configuration step with my sendmail server. Could you please help in this? thanks in ad

Re: [SAtalk] a false negative.

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 07:51:56PM -0600, Jon Gabrielson wrote: > one of the more obvious false negatives. Any suggestions > about why this message got through spamassassin? > It is loaded with tons of pornographic keywords, etc... Just doing local tests, it does make it through: X-Spam-Status: N

[SAtalk] a false negative.

2002-11-05 Thread Jon Gabrielson
I have been getting a huge amount of false negatives since i upgraded spamassassin. Attached is one of the more obvious false negatives. Any suggestions about why this message got through spamassassin? It is loaded with tons of pornographic keywords, etc... Thanks, Jon. --- Begin Message --- Ti

Re: [SAtalk] Patching the Razor2 timeout issue

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 08:17:07PM -0500, Rob Mangiafico wrote: > Is all we have to do to patch the Razor2 timeout issue with the alarm > being reset is to apply the cvs changes for the files Dns.pm and > Reporter.pm that deal with the alarm resetting code? I think those are the > only changes n

[SAtalk] Patching the Razor2 timeout issue

2002-11-05 Thread Rob Mangiafico
Is all we have to do to patch the Razor2 timeout issue with the alarm being reset is to apply the cvs changes for the files Dns.pm and Reporter.pm that deal with the alarm resetting code? I think those are the only changes needed, but I wanted to be sure. Thanks! Rob M. ---

Re: [SAtalk] Newbie questions..perhaps?

2002-11-05 Thread Lars Hansson
Both of these questions pertains to amavisd-new. Ask on the amavis lists and I'm sure lots of people will be able to help you. I dont use amavis so, well, I cant help you. --- Lars Hansson --- This sf.net email is sponsored by: See the NEW Palm

Re: [SAtalk] Reloading the configuration on the fly

2002-11-05 Thread Matt Kettler
At 12:50 AM 11/6/2002 +0100, Andreas Lund wrote: Hi, After receiving more and more spam over the past few years, I finally installed SpamAssassin about a month ago. The results have been far better than I could have hoped, so I'm a little afraid of tampering too much with the default settings.

Re: [SAtalk] Odd intermittent failure, (RH8, SA 2.42, Perl 5.8) - Memory Leak?

2002-11-05 Thread Justin Mason
James Bly said: > Spoke too soon. It just took 4 hours longer than 2 days to exhibit the > behavior. Is anyone successfully running SpamAssassin 2.43 under perl 5.8? > > Debugging output doesn't give any indication as to a source of the problem, > so I'm starting to reach for other possibilities

[SAtalk] Reloading the configuration on the fly

2002-11-05 Thread Andreas Lund
Hi, After receiving more and more spam over the past few years, I finally installed SpamAssassin about a month ago. The results have been far better than I could have hoped, so I'm a little afraid of tampering too much with the default settings. However, I have two questions that I can't find an

Re: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Klaus Heinz
Michael Weber wrote: > I have just finished installing SA 2.4.2 and my users are pretty happy If you are using the automatic whitelist, you won't be happy very long with 2.42. This version had some strange notions about how to calculate thw AWL score. ciao Klaus --

[SAtalk] spamd Remote Host Question

2002-11-05 Thread Doug Eubanks
Out mail server slowly bogs down when running spamd/spamc locally but I need to have the ability for users to change their spam level. If I setup a remote spamd server that just does spamd and use the mail server to contact it, will it still use the user settings from the mail server? I guess my

RE: [SAtalk] Odd intermittent failure, (RH8, SA 2.42, Perl 5.8) - Memory Leak?

2002-11-05 Thread James Bly
Spoke too soon. It just took 4 hours longer than 2 days to exhibit the behavior. Is anyone successfully running SpamAssassin 2.43 under perl 5.8? Debugging output doesn't give any indication as to a source of the problem, so I'm starting to reach for other possibilities... -James -Original

Re: [SAtalk] Custom Rule STILL being ignored

2002-11-05 Thread Matt Kettler
The most debug output you can get from spamassassin is by running: spamassassin -tD Note that sample-nonspam.txt is included in the SpamAssassin tarball. I'd run the debug output version of SA above and look at where spamasin is reading your user_prefs file and make sure that rule is in th

Re: [SAtalk] Failed to run header SpamAssassin tests

2002-11-05 Thread Mike Van Pelt
Do any of your custom rules contain a "#"? "#" starts a comment in local .cf files unless backslash-escaped. Even if it's within quotes or a slash-delimited regex. The error will usually point to some place unrelated to the location of the #. (This nearly drove me nuts before I figured out what

[SAtalk] Newbie questions..perhaps?

2002-11-05 Thread Maillists for [EMAIL PROTECTED]
Hiya folks, bear with me. I love spamassasin and I run it togheter with amavisd-new and postfix as MTA. Now..Im learning more and more everyday, theres quite a few docs to read :-) ..but I have this thing I need kinda urgently. I need to have the spam-emails caught, to be reported somehow. I.e

Re: [SAtalk] Custom Rule STILL being ignored

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 01:26:13PM -0800, Steve Thomas wrote: > Do you have a 'describe' line in there? I don't know if SA requires it, but describe isn't required. You only need the rule defined. The description and score are autogenerated if none are specified. BTW: I just double-checked and

Re: [SAtalk] man Mail::SpamAssassin::Conf

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 03:10:52PM -0600, Josh Trutwin wrote: > Perhaps adding a simple README.config file in the SA top level that simply > says "See man Mail::SpamAssassin::Conf for details on customizing your > installation" would help. I know references exist in the README file, but > after yo

RE: [SAtalk] Custom Rule STILL being ignored

2002-11-05 Thread Steve Thomas
| | header MY_BLACKLISTED_RCVD ALL=~/coolfunpages\.com/i | score MY_BLACKLISTED_RCVD 100 | Do you have a 'describe' line in there? I don't know if SA requires it, but I use a number of custom rules without any trouble and they all have a description. Here's one example t

Re: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 03:01:32PM -0600, Michael Weber wrote: > Thanx for the info, but I still have the problem that the line in my > local.cf file > > report_header 1 > > is being ignored. I still get the SPAM: lines in the body. I've tried > using 0, I've tried putting it in the 10_

[SAtalk] man Mail::SpamAssassin::Conf

2002-11-05 Thread Josh Trutwin
Just to stir the pot a little: I have been on SA-TALk for about a month and notice a lot of traffic that can be answered with "man Mail::SpamAssassin::Conf". (I am guilty of at least two silly posts myself) :) >From my perspective, after I installed spamassassin, I did a "man -k spam" to see wh

RE: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Michael Weber
Thanx for the info, but I still have the problem that the line in my local.cf file report_header 1 is being ignored. I still get the SPAM: lines in the body. I've tried using 0, I've tried putting it in the 10_main.cf file. Nothing works. Any idea what the problem is? Thanx! Micha

[SAtalk] Now that I've trapped my spam, how do I report it?

2002-11-05 Thread Steven W. Orr
I've been using spamcop. They do good job, but it's tedious. I found ricochet by Vipul, but I was wondering if anyone is using something else. (I couldn't find anything.) Ricochet works, but I suspect it's not doing as good a job as spamcop. Anyone have any suggestions? TIA -- -Time flies li

RE: [SAtalk] FIXED - Public Razor2 is slow as Christmas

2002-11-05 Thread Smart, Dan
Classification: PUBLIC OK. Here's the resolution. The problem was that Razor kept doing a discovery each pass. When I did a razor-admin -d -discover it did not write to the catalogue and nominated files. It turns out that two .lock files were in there (for whatever reason) as stopped these from

RE: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Quentin Krengel
Restart spamassassin after making the change... ...ie /etc/init.d/spamassassin restart Quentin Krengel www.oilsoflife.com/netmarket -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Michael Weber Sent: Tuesday, November 05, 2002 12:30 PM To: [EMAIL PROT

[SAtalk] Custom Rule STILL being ignored

2002-11-05 Thread David Brossard
I want to thank everyone for their help so far in trying to get a custom rule working with my Spam Assassin. At this point its getting pretty frustrating. It also doesn't help that I am more familiar with shell type Reg Exp rather than what Perl uses. A quick recap: header MY_BLACKLISTED_

Re: [SAtalk] whitelist function - where is it?

2002-11-05 Thread Matt Kettler
Read man Mail::SpamAssassin::Conf You probably want to add a whitelist_from_rcvd or whitelist_from to your /etc/mail/local.cf. At 01:46 PM 11/5/2002 -0500, Vernon Webb wrote: I've been trying to read through the web site in an attempt to remove an email I am receiving from the SPAM list (yes I w

[SAtalk] whitelist function - where is it?

2002-11-05 Thread Vernon Webb
I've been trying to read through the web site in an attempt to remove an email I am receiving from the SPAM list (yes I want to receive it). How the heck so I do that? Thanks --- This sf.net email is sponsored by: See the NEW Palm Tungsten T

RE: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Quentin Krengel
Greetings Michael: Note the reply from Theo. If you put your customizations in local.cf they will survive the next upgrade... Quentin Krengel http://www.oilsoflife.com/netmarket -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Michael Weber Sent: Tu

Re: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Michael Weber
I have changed the report_header entry from 0 to 1 and back again. It doesn't seem to make a difference. (Yes, I restarted spamd when I made the change.) I have now added it to the local.cf file and will try it there. As for Q #2, I actually run the "service spamd restart" command at the end of

Re: [SAtalk] howto spamassassim learns automatically

2002-11-05 Thread Matt Kettler
Have you looked at the ok_languages and ok_locales options in the SA config options? man Mail::SpamAssassin::Conf At 03:45 PM 11/5/2002 -0200, sandra wrote: Hi ALL, I'm using postfix+amavisd(+spamassassim). But the majority of the mail messages that we receive and that are spam are in portugu

Re: [SAtalk] Newbie Q #2

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 12:02:04PM -0600, Michael Weber wrote: > I am using spamd rather than calling spamassassin from my postfix > service. Do I need to HUP spamd everytime I make a change or does it > re-read the conf file every message? You need to restart spamd if you want it to see changes

[SAtalk] Newbie Q #2

2002-11-05 Thread Michael Weber
Ok. I have written a script to update the local.cf file a little more automatically. (It adds a correctly formatted whitelist entry for me.) I am using spamd rather than calling spamassassin from my postfix service. Do I need to HUP spamd everytime I make a change or does it re-read the conf fi

Re: [SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 11:52:05AM -0600, Michael Weber wrote: > How do I turn off the results lines in the body and leave just the > header and subject stuff? RTFM or look at list archives. :) We really need to FAQ this... $ man Mail::SpamAssassin::Conf ... report_header { 0 | 1 } (de

[SAtalk] Newbie to Spamassassin Q

2002-11-05 Thread Michael Weber
Greetings! I have just finished installing SA 2.4.2 and my users are pretty happy with it. Except those who get html messages. The message... SPAM: Start SpamAssassin results -- SPAM: End of SpamAssassin results

Re: [SAtalk] problem with spamd 2.43

2002-11-05 Thread Mike Burger
I'm sorry...I don't see what the problem is. The message is saying that spamd is checking the message, and expects 2877 bytes. Then, it's saying that it received 2877 bytes, checked it, and scored it 1.0 on the spamminess scale. What's the problem? On Tue, 5 Nov 2002 [EMAIL PROTECTED] wrote:

[SAtalk] howto spamassassim learns automatically

2002-11-05 Thread sandra
Hi ALL, I'm using postfix+amavisd(+spamassassim). But the majority of the mail messages that we receive and that are spam are in portuguese language. Is there a way to feed spamassassin database automatically with the messages that it considers a spam message? (sa_learn_spam you have to give th

Re: [SAtalk] Spamming through returned mail

2002-11-05 Thread Matt Sergeant
John Schutz said the following on 05/11/02 16:25: One of my users has been getting these about once a day. What it looks like is happening is that since AOL doesn't immediately report back with a 550 user unknown, the spammer can fill in a return address of my user, so the bounce ends up in hi

RE: [SAtalk] Spamming through returned mail

2002-11-05 Thread James Bly
Spammers are spamming using "from" addresses as random people on their spam list. This is actually more common than the first method you list, because if it doesn't reach its intended recipient, it just goes to another user on their spam list as a bounce. -Original Message- From: John Schu

RE: [SAtalk] Odd intermittent failure, (RH8, SA 2.42, Perl 5.8) - Memory Leak?

2002-11-05 Thread James Bly
Fixed thus far, but why is not clear. The fix was to move my whitelist information and configuration information out of the files in /usr/local/share/spamassassin/*.cf and put it into /etc/mail/spamassassin/local.cf. I moved 3k worth of configuration data from these files (around 80 whitelist entr

[SAtalk] Spamming through returned mail

2002-11-05 Thread John Schutz
One of my users has been getting these about once a day. What it looks like is happening is that since AOL doesn't immediately report back with a 550 user unknown, the spammer can fill in a return address of my user, so the bounce ends up in his mailbox. The other option is that they're tryin

RE: [SAtalk] Well written spam advertising how to spam

2002-11-05 Thread Tony Hoyle
> -Original Message- > From: Michael Moncur [mailto:[EMAIL PROTECTED]] > Sent: 05 November 2002 10:23 > To: Daniel Quinlan; [EMAIL PROTECTED] > Subject: RE: [SAtalk] Well written spam advertising how to spam > > Corrollary: If they DON'T see something that has an "@" in > the middle of

[SAtalk] problem with spamd 2.43

2002-11-05 Thread Wolfgang . Fuertbauer
Hi experts, I have a problem with spamd in version 2.43; getting messages like this: >Nov 5 16:38:11 saxophon spamd[14014]: checking message <[EMAIL PROTECTED]> for :501, expecting 2877 bytes. >Nov 5 16:38:20 saxophon spamd[14014]: clean message (1.0/5.0) for (unknown):501 in 8.8 seconds, 2877

Re: [SAtalk] Well written spam advertising how to spam

2002-11-05 Thread Vivek Khera
> "JS" == Jan Schreckenbach <[EMAIL PROTECTED]> writes: JS> Hi, JS> why is this list not filtered on the list server? It's open to JS> post for everyone. Should not every list like that be filtered? How exactly do you propose discussing spam and spam techniques without examples? Lists that *

Re: [SAtalk] SA rules + SA versions ?

2002-11-05 Thread Justin Mason
Paul Reilly said: > How closely tied are the rule sets to the different versions of SA that > they were released with? They're 100% tied together -- there's lots of new features (meta rules etc) and eval tests (which load code from the SpamAssassin modules to run). It wouldn't work, I'm afraid

[SAtalk] SA rules + SA versions ?

2002-11-05 Thread Paul Reilly
How closely tied are the rule sets to the different versions of SA that they were released with? ie - can I take the rules from latest release (say from 2.43) and plug them in to my 2.11 installation ? Are there plans to abstract the rule set from the software version, so this is possible in the

[SAtalk] Just what you never wanted - another newbie

2002-11-05 Thread Quentin Krengel
Title: Message >Replacing our Windows based filter (if you could call it that) that is using a program named Mail Essentials.  It does not provide >anywhere near the throughput we need (~120/min) and I have been hoping to show our IT director it is time to switch to *nix based solutions >o

RE: [SAtalk] Well written spam advertising how to spam

2002-11-05 Thread Quentin Krengel
>why is this list not filtered on the list server? It's open to post for everyone. Should not every list >like that be filtered? Greetings Jan: Filtering this list would somewhat inhibit keyword discussions wouldn't it? As mentioning keywords in a post would trigger SA. Quentin Krengel

RE: [SAtalk] Well written spam advertising how to spam

2002-11-05 Thread Michael Moncur
> 99.99% of all spammers aren't that bright. They see something that > has an "@" in the middle of it and they'll try to send mail to it... > forever. Corrollary: If they DON'T see something that has an "@" in the middle of it, they'll make up an address and send mail to that forever. (Just fini

Re: [SAtalk] Just what you never wanted - another newbie

2002-11-05 Thread Jan Schreckenbach
Hello, you probably want to look at www.exim.org. Exim is used by a lot of ISP's and the docu is one of the best I've ever seen in the Open Source community. Currently I'm using SpamAssassin as global filter. But I'm in the process of getting the things running for users that have it's own settin

Re: [SAtalk] Well written spam advertising how to spam

2002-11-05 Thread Jan Schreckenbach
Hi, why is this list not filtered on the list server? It's open to post for everyone. Should not every list like that be filtered? cu, Jan Jonathan M. Manning wrote: --On Sunday, November 03, 2002 9:25 AM -0800 John Rudd <[EMAIL PROTECTED]> wrote: And the other side of the coin is ... how man

Re: [SAtalk] cannot parse local.cf with sql-config (SA 2.43)

2002-11-05 Thread Theo Van Dinter
On Tue, Nov 05, 2002 at 08:52:38AM +0100, Bernhard Thoni wrote: > debug: Failed to parse line in SpamAssassin configuration, skipping: > user_score_dsn DBI:mysql:spamassassin:samplehost:3306 > debug: Failed to parse line in SpamAssassin configuration, skipping: > user_score_sql_username test > debu

[SAtalk] cannot parse local.cf with sql-config (SA 2.43)

2002-11-05 Thread Bernhard Thoni
hello list, although following the sql-howto on http://www.spamassassin.org i do not get the spamd to get the sql-configuration from /etc/mail/spamassassin/local.cf; everytime i start spamd -q -D and do a "cat /tmp/sample-spam.txt | spamc" (like suggested in the howto) i get the following error on