[SAtalk] Where can I find these modules?

Hi Folks! I recently installed SA 2.44 in AIX, (IBM Unix) along with Postfix (which I had running for a few months). My first SA results are great. However, my install didn't come with these modules: sa-forget sa-learn-nonspam sa-learn-rebuild sa-learn-spam I can't find them

[SAtalk] Re: Ok, RBL/DCC problems part deux

At 2:48 PM 2/14/2003, Kurt Kesler <[EMAIL PROTECTED]> wrote: /var/spool/MIMEDefang/qdir-2003-02-14-10.29.53-001 on the mail server. Make sure you put "$SALocalTestsOnly = 0" in your mimedefang-filter. I believe the default is 1, which would disable all network-based tests (DCC, RBLs, Razor, P

Re: [SAtalk] Psyche of spammers?

fre, 2003-02-14 kl. 19:50 skrev Matt Kettler: > Which proposed rules are used and which are rejected is also a strictly > results-oriented process.. generally based on looking at the number of spam > and nonspam hits a rule generates. Generally the S/O ratio is used as a > first measure of the

[SAtalk] razor headers not added

i have my razor checking finally working, but i figured if I set report_headers = 1 in razor-agent.conf I would get a header telling me something? i do have my razor-agent.conf set in local.cf razor_config /etc/razor/razor-agent.conf and by running spamd -D i see that it does rea

RE: [SAtalk] urgent business/investment

> > These are being sent to the list more frequently--is there > some reason why th > > e > > admins allow posts from nonsubscribed addresses? > > yes, it's a list where people post tech support q's. Hmmm... I dunno how this follows. If someone wants to see the answer to their question, would

RE: [SAtalk] urgent business/investment

> These are being sent to the list more frequently--is there > some reason why the > admins allow posts from nonsubscribed addresses? Good question. This has been discussed before, but I don't remember the justification for open posting... is there an actual good reason for this?!? johnS --

Re: [SAtalk] SA burning CPU

- Original Message - From: "Klaus Heinz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 14, 2003 12:42 PM Subject: Re: [SAtalk] SA burning CPU > Theo Van Dinter wrote: > > > On Thu, Feb 13, 2003 at 05:57:02PM -0800, Daniel Quinlan wrote: > > > > > I'm not sure whether

RE: [SAtalk] Sample spam not found in Pyzor or DCC?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, February 14, 2003 3:18 PM [EMAIL PROTECTED] wrote: > Mike Loiterman said: > >> I was reviewing some of my other spams -- sometimes it can find the >> DCC witho ut me putting in the path, but it seems to miss it

Re: [SAtalk] urgent business/investment

Chuck Mize said: > These are being sent to the list more frequently--is there some reason why th > e > admins allow posts from nonsubscribed addresses? yes, it's a list where people post tech support q's. --j. --- This SF.NET email is spons

[SAtalk] urgent business/investment

FROM THE DESK OF: DR. SHEHU SULE. E-Mail: [EMAIL PROTECTED] Date: 11/01/2003. ATTENTION: Dear Friend, REQUEST FOR URGENT BUSINESS RELATIONSHIP - STRICTLY CONFIDENTIAL First, I must solicit your strictest confidence in this transaction. This is by virtue of its nature as being utterly confident

Re: [SAtalk] Sample spam not found in Pyzor or DCC?

Mike Loiterman said: > I was reviewing some of my other spams -- sometimes it can find the DCC witho > ut me putting in the path, but it seems to miss it on the sample-spam for som > e reason. are you running "./spamassassin" in the build dir? I've just fixed a bug which was breaking config-re

RE: [SAtalk] urgent business/investment

Oh I am sure this one will generate some e-mail :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Friday, February 14, 2003 15:37 To: [EMAIL PROTECTED] Subject: [SAtalk] urgent business/investment FROM THE DESK OF: DR. SH

Re: [SAtalk] urgent business/investment

On Friday 14 February 2003 12:36, [EMAIL PROTECTED] wrote: > FROM THE DESK OF: DR. SHEHU SULE. > E-Mail: [EMAIL PROTECTED] > Date: 11/01/2003. > > ATTENTION: Dear Friend, > > REQUEST FOR URGENT BUSINESS RELATIONSHIP - STRICTLY CONFIDENTIAL These are being sent to the list more frequently--is there

[SAtalk] urgent business/investment

FROM THE DESK OF: DR. SHEHU SULE. E-Mail: [EMAIL PROTECTED] Date: 11/01/2003. ATTENTION: Dear Friend, REQUEST FOR URGENT BUSINESS RELATIONSHIP - STRICTLY CONFIDENTIAL First, I must solicit your strictest confidence in this transaction. This is by virtue of its nature as being utterly confident

RE: [SAtalk] Sample spam not found in Pyzor or DCC?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, February 14, 2003 1:55 PM Theo Van Dinter wrote: > On Fri, Feb 14, 2003 at 01:40:09PM -0600, Mike Loiterman wrote: >>> It does (at least the Razor modules blowing away $PATH). Are you >>> sure that dccproc and

Re: [SAtalk] Psyche of spammers?

SA doesn't directly account for the psyche of spammers, however many of the rules are first designed around patterns and phrases which are typical "spammer-speak". The scores assigned to those rules are actually evolved by an automated Genetic Algorithm, thus are strictly results oriented. The

RE: [SAtalk] 'Norton Antivirus' hoax?

Klez is still VERY much around. Unfortunately most infected victims don't know they are infected, and the heavy forgery of the headers makes it difficult to track the source down and tell them to disinfect their computer. The HR department here gets a steady stream of KLEZ emails from the same

[SAtalk] Razor2 Question

Hello, Does anyone have any ideas? Running SA 2.44 razor2 check skipped: Illegal seek Can't locate object method "do_conf" via package "Razor2::Client::Agent" (perhaps you forgot to load "Razor2::Client::Agent"?) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Dns.pm line 387. When I do

RE: [SAtalk] 'Norton Antivirus' hoax?

I use NAV for exchange here. There really isn't a tool to pick and choose which to respond to. :( I wish there was. Simply ignore it for the most part. I can't believe that Klez is still around. > -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED]] > Sent: Friday, February

Re: [SAtalk] SA burning CPU

On Fri, Feb 14, 2003 at 03:06:49AM +0100, Mark wrote: > I do not have "strace" (Linux?), but I have "ktrace" on my FreeBSD system; I > suppose that will do too. Install strace; it's in the ports tree. Both have their uses but more people are going to be familiar with strace and it's output. --

Re: [SAtalk] Razor home, conf, identity issue on 2.50-cvs

On Fri, Feb 14, 2003 at 11:41:21AM -0600, Dallas Engelken wrote: > razorhome /etc/razor > logfile /dev/null > debuglevel 5 > turn_off_discovery 0 > ignorelist 1 > min_cf 60 > report_headers 1 > use_engines

[SAtalk] RE: Razor home, conf, identity issue on 2.50-cvs

> -Original Message- > From: Dallas Engelken > Sent: Friday, February 14, 2003 11:41 AM > To: '[EMAIL PROTECTED]' > Subject: Razor home, conf, identity issue on 2.50-cvs > > > i set the following options in my local.cf to use razor and > razor2. i have installed the appropriate razor s

[SAtalk] Razor home, conf, identity issue on 2.50-cvs

i set the following options in my local.cf to use razor and razor2. i have installed the appropriate razor sdk and agents bundles... use_razor1 1 use_razor2 1 razor_timeout 2 razor_config

RE: [SAtalk] RE: Outlook FN --> sa-learn-spam

fre, 2003-02-14 kl. 16:26 skrev Dallas Engelken: > a mystery is only something you are not willing to figure out ® > :) Basically, it does *not* work when I do as you advise. However, I'm used to that sort of thing. It began with my mother, when I was still a suckling. Thanks anyway, Dallas. I a

[SAtalk] Exiscan spamd problems

Hi has anybody seen this error culled from the exim reject log after a user found they could not send mail 2003-02-14 11:11:16 18jdgI-0006aA-00 exiscan: problem with spamd facility (spamd connection to 127.0.0.1, port 783 failed: Connection timed out) Thanks in advance Ron -- Ron McKeating Se

Re: [SAtalk] Ok, RBL/DCC problems part deux

On Fri, Feb 14, 2003 at 11:48:25AM -0500, Kurt Kesler wrote: > Results when run manually versus automatically. DCC runs in manual mode, does not >when mail is processed normally. There is no difference in any of the cf > files that I can find. Is dccproc in the $PATH when you run normally? >

Re: [SAtalk] 'Norton Antivirus' hoax?

Agreed, the virus detected was klez-h.. Any virus scanning system that replies to messages should IMO already know that klez infected emails are NOT worth replying to as all the headers are forged. My setup only mentions klez infections to me, and the recipient, and does not try to contact the

Re: [SAtalk] Sample spam not found in Pyzor or DCC?

On Fri, Feb 14, 2003 at 09:22:51AM -0600, Mike Loiterman wrote: > I though 2.50 fixed the paths issue? It does (at least the Razor modules blowing away $PATH). Are you sure that dccproc and pyzor is in the path when running spamd? > Also something isn't right with pyzor, although it worked in 2.

RE: [SAtalk] RE: Outlook FN --> sa-learn-spam

> -Original Message- > From: Tony Earnshaw [mailto:[EMAIL PROTECTED]] > Sent: Friday, February 14, 2003 9:02 AM > To: Dallas Engelken > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] RE: Outlook FN --> sa-learn-spam > > > fre, 2003-02-14 kl. 15:14 skrev Dallas Engelken: > > > > Testing it

RE: [SAtalk] Sample spam not found in Pyzor or DCC?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, February 14, 2003 8:00 AM Theo Van Dinter wrote: > On Fri, Feb 14, 2003 at 07:30:43AM -0600, Mike Loiterman wrote: >> I've been running the sample-spam.txt file through spamc for ages, >> but since I upgrade to

Re: [SAtalk] Sample spam not found in Pyzor or DCC?

fre, 2003-02-14 kl. 14:30 skrev Mike Loiterman: > I've been running the sample-spam.txt file through spamc for ages, but since I >upgrade to 2.50 CVS, I've noticed that its not being picked with by Pyzor or DCC. >Any reason for this? This could have to do with what I posted to Dallas Engelkens

Re: [SAtalk] new faq entry

Justin Mason wrote: (double-click to open the mail in its own window) -> Actions -> Resend This Message This is incorrect. You can only resend messages that you originally sent. If you try to 'resend' a spam you get the error: "You do not have permission to send on behalf of the specif

RE: [SAtalk] RE: Outlook FN --> sa-learn-spam

fre, 2003-02-14 kl. 15:14 skrev Dallas Engelken: > > Testing it with spamassassin -t < porn.txt now scores 12.9, > > fine by me. > > Testing it with 'cat porn.text | spamc' still gives 3.5. Even running > > spamc as the spamd user. > > Why would this be? > did you restart the spamd daemon to re

RE: [SAtalk] RE: Outlook FN --> sa-learn-spam

> -Original Message- > From: Tony Earnshaw [mailto:[EMAIL PROTECTED]] > Sent: Friday, February 14, 2003 3:34 AM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] RE: Outlook FN --> sa-learn-spam > > > tor, 2003-02-13 kl. 23:36 skrev Dallas Engelken: > > > Check this example... > > > > Tak

Re: *SPAM* Re: [SAtalk] GRRR!! - Family H-core party (fwd)

On Fri, 14 Feb 2003 the voices made LuKreme write: L> have they done se>< and secs and sekz already? Number of hits in the db, and spampoints (0-1): "sekz" 1 0.000415 "secs" 117 0.092999 "seks" 21 0.511654

Re: [SAtalk] Sample spam not found in Pyzor or DCC?

On Fri, Feb 14, 2003 at 07:30:43AM -0600, Mike Loiterman wrote: > I've been running the sample-spam.txt file through spamc for ages, but since I >upgrade to 2.50 CVS, I've noticed that its not being picked with by Pyzor or DCC. >Any reason for this? It's in DCC for me (I don't use pyzor): debu

[SAtalk] Sample spam not found in Pyzor or DCC?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've been running the sample-spam.txt file through spamc for ages, but since I upgrade to 2.50 CVS, I've noticed that its not being picked with by Pyzor or DCC. Any reason for this? - --- Randomly Generated

[SAtalk] Re: Spam Arrest is spamming

On Thursday, Feb 13, 2003, at 12:22 Canada/Mountain, Matt Kettler wrote: Well, if the allegations are true, It's likely to be a one-time mailing after all the flack they're about to get (ie: they aren't going to be making THAT mistake for very long) According to their user agreement they are

Re: [SAtalk] 'Norton Antivirus' hoax?

On Fri, 14 Feb 2003 the voices made Mike Loiterman write: ML> I keep getting these alert messages that Norton Anitvirus has detected and ML> qiarantined various viruses. Has anyone else seen these, if so, whats the ML> best way of blocking them? There doesn't seem to be any common them other ML>

[SAtalk] HTML-comment as BayesBuster?

Interest r= ates are at their lowest point in over 40 years! Find out how much money you could = be saving by visiting http://freequotes.bz/dev/mort14/";>this Website!= -- /\___/\ /\___/\ \_@ @_/

Re: [SAtalk] RE: Outlook FN --> sa-learn-spam

tor, 2003-02-13 kl. 23:36 skrev Dallas Engelken: > Check this example... > > Take an email... cat it through spamc to see what bayes scores it. Send it into >your learning system as spam. cat it through spamc again to see what bayes thinks >now... SA>2.50-CVS from mid January last. I ha

[SAtalk] 'Norton Antivirus' hoax?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I keep getting these alert messages that Norton Anitvirus has detected and qiarantined various viruses. Has anyone else seen these, if so, whats the best way of blocking them? There doesn't seem to be any common them other then the 'Norton' name

Re: [SAtalk] GRRR!! - Family H-core party (fwd)

On Thu, 13 Feb 2003 the voices made Michael Moncur write: MM> Tony L. Svanstrom wrote: MM> MM> > "seks" is now getting 0.807152 on a "1 = spam and 0 = ham"-scale here, so MM> > before your e-mail starting messing it up it was a perfect MM> > spam-sign for my MM> > bayesian filter; bad you. ;-) MM

[SAtalk] Re: From being cut off

On Thursday, Feb 13, 2003, at 10:10 Canada/Mountain, Jeremy Simmons wrote: I'm seeing a problem where the F in From at the beginning of some mails is cut off corrupting the mailbox. I'm running: This is not a SA problem, this is a procmail bug. It's been around a long time. No one has quite tr