[SAtalk] errors in the logs and RBL not working

2003-06-06 Thread
Hi list,I have some problems with Qmail and Spamassassin. Please help me.1) I had tried to configure spamassassin as system-wide. But i keep tellingme its unable to write to /var/qmail/.spamassassin/user_prefs. Do I alsoneed a user_prefs?2) In /etc/mail/spamassassin/local.cf , i had added a whitel

Re: [SAtalk] Fwd: Offshore person to needed to host blind SMTP server

2003-06-06 Thread Simon Byrnand
> This one slayed me. > > Weyland We're legit! honest! ;-) LOL Regards, Simon > --- > Subject: Offshore person to needed to host blind SMTP server > Date: Friday 06 June 2003 09:03 pm > From: "test022" <[EMA

[SAtalk] 2.55 - bug in always_add_headers ?

2003-06-06 Thread Simon Byrnand
Hi Everyone, I've just noticed that setting 'always_add_headers 0' disables most of the spamassassin headers and the report on non-spam messages, however it still leaves the X-Spam-Checker-Version: header in the message. Is this a known bug ? Regards, Simon ---

[SAtalk] Content-type rewritten

2003-06-06 Thread Michael Kimsal
Hello all: I was testing out some HTML mail messages to myself, and noticed that most were having the content-type rewritten to 'text/plain'. They're not being sent that way, and someone else getting another test copy was not having his content-type rewritten. We're both running spamassassin,

[SAtalk] Fwd: Offshore person to needed to host blind SMTP server

2003-06-06 Thread Weyland
This one slayed me. Weyland --- Subject: Offshore person to needed to host blind SMTP server Date: Friday 06 June 2003 09:03 pm From: "test022" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Need a person to hos

[SAtalk] Re: SA List (fwd)

2003-06-06 Thread Fuzzy Fox
Ben Johansen <[EMAIL PROTECTED]> wrote: > > you pick a header then > Sender: [EMAIL PROTECTED] > Errors-To: [EMAIL PROTECTED] These headers (plus Return-Path) tell you who SENT the message, and, if there is an error, whom should be notified it. The admin should be notified if there is a problem d

Re: [SAtalk] Install issues - dumps core

2003-06-06 Thread Lydia Leong
On Jun 6, 9:49pm, Bob Apthorpe wrote: > Seriously though, this makes two instances of changing Config.pm to work > around a vendor's missing compiler. Do you have instructions for fixing > Config.pm on IRIX? I documented Solaris 2.6 and 7 and the fix for 8 and > 9 are similar. Any HP-UX or AIX us

Re: [SAtalk] Install issues - dumps core

2003-06-06 Thread Bob Apthorpe
Hi, On Fri, 6 Jun 2003 12:59:05 -0700 [EMAIL PROTECTED] (Lydia Leong) wrote: > I'm installing SpamAssassin for the first time in the following > environment: > > - Irix 6.5 > - perl 5.6.1 (from the SGI freeware site, with a modified Config.pm > to make the compile default

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Chris, Friday, June 6, 2003, 10:03:20 AM, you wrote: CB> The isp I use for my private email address has recently started using CB> SA. It seems to work 'ok', but it seems to still generate: CB> * far too many false negatives CB> * occation

[SAtalk] Rules to check out

2003-06-06 Thread Jerry Bell
I've come up with lots of custom rules as of late, and I'd like to see if they should be merged into spamassassin ruleset. Below are some of the more effective ones I've found. Please give me comments as to whether you find them to be accurate/useful. Thanks, Jerry http://www.syslog.org heade

RE: [SAtalk] Speeding Up SpamAssassin

2003-06-06 Thread Jack Gostl
> > > > Timothy, that's the way that I have my procmmail set up as well. This doen's > > work that well though for sites which filter on a site-wide basis. > > Yes, that is why I mentioned that I use a standalone machine. It would be > a bad idea on a multi-user network. To be honest I'm not ha

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Simon Byrnand
> Kai Schaetzl <[EMAIL PROTECTED]> wrote: >> Chris Barnes wrote on Fri, 6 Jun 2003 12:03:20 -0500: >> >>> I am more concerned about the false positives. Looking at the >>> headers of those messages that are legit, it seems that the biggest >>> score comes from the BAYES test. >>> >>> Is there a pl

Re: [SAtalk] help installing spamassasins

2003-06-06 Thread Simon
> Don't call ./configure.. read the INSTALL file which will tell you to: > > 1)perl Makefile.PL > 2)make > 3)make install > > Note there's no ./configure in there :) I did that. I got this error when i tried to do the "make" command ~~ Makefile:92: *** missing separator. S

Re: [SAtalk] spamc/spamd and/or spamassassin?

2003-06-06 Thread Steve Wilson
Stuart Gall wrote: Where did you get that idea ? spamc respects the user_prefs and local.cf files. The only issue might be if you want user based configuration and you are running spamc as mail or something but this should be configureable on the MTA. Oh. The docs (which I don't have in front of

Re: [SAtalk] 2.54 - wrong score set chosen?

2003-06-06 Thread Bart Schaefer
On Fri, 6 Jun 2003, Matt Kettler wrote: > Fair enough.. Did you try this same test using the command-line SA, or does > this problem only show up for incoming mail? Ah, there it is: "ps" shows that spamd got started up with -L. Sorry for the red herring. -

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Chris Barnes
Kai Schaetzl <[EMAIL PROTECTED]> wrote: > As far as I understand this is not how the Bayes engine works. It just > matches token by token, gets the chance for spam and finally counts > them all together. Yeah, I know. It was mentioned in an article I read about using Bayes for spam detection (as

Re: [SAtalk] How to delete or move spammessages?

2003-06-06 Thread Thomas Cameron
Have a look at http://www.advosys.ca/papers/postfix-filtering.html, especially the extra filters at the bottom of the page - the sideline.sh filter will do what you want, I think. - Original Message - From: MisterM To: [EMAIL PROTECTED] Sent: Friday, June 06, 2003

RE: [SAtalk] Speeding Up SpamAssassin

2003-06-06 Thread Timothy J. Schutte
Hi Gary, On Fri, 6 Jun 2003, Gary Funck wrote: > > Timothy, that's the way that I have my procmmail set up as well. This doen's > work that well though for sites which filter on a site-wide basis. Yes, that is why I mentioned that I use a standalone machine. It would be a bad idea on a multi-u

Re: [SAtalk] Speeding Up SpamAssassin

2003-06-06 Thread Timothy J. Schutte
Hi Jim, On Fri, 6 Jun 2003, Jim Ford wrote: > Why not use spamd+spamc - it was the key to greatly speeding up the 133MHz > laptop I pick my mail up on? I am looking at it. Thanks! Tim -- Timothy J. Schutte | AIM: TimSchutte | ICQ: 57061028 [EMAIL PROTECTED] | Yahoo: kc8hr| http:/

Re: [SAtalk] Spamtrap account?

2003-06-06 Thread Kenneth Porter
--On Friday, June 06, 2003 7:34 PM +0100 Jim Ford <[EMAIL PROTECTED]> wrote: > If I set up a spamtrap account to seed any postings to the NGs I use FWIW, I post to newsgroups with ".blacklist" appended to my name in the From line and my real address in the Reply-To. The stuff that arrives at that

Re: [SAtalk] Rule Question

2003-06-06 Thread Matt Kettler
At 01:14 PM 6/6/2003 -0700, Abel Jeffcoat wrote: Hello, I have a user that buys and sells on Ebay. Sometimes those messages get tagged as spam. Is there a way to setup a rule to not tag them? Sincerely, Abel Jeffcoat My first suggestion: use whitelist_from_rcvd if they all come from ebay directl

Re: [SAtalk] spamd stopped responding

2003-06-06 Thread Kai Schaetzl
Theo Van Dinter wrote on Fri, 30 May 2003 13:00:52 -0400: > hmmm. that looks suspiciously like a sh if statement gone awry. It's > not spamd doing that. > Late comment. I indeed found a shell script containing an expression like "!= "jui" ]". But it remains a mystery how it got to mix with a s

Re: [SAtalk] Spamtrap account?

2003-06-06 Thread Bart Schaefer
On Fri, 6 Jun 2003, Matt Kettler wrote: > I think it was either Theo Van Dinter or Tony Svanstrom that once > pointed out that any spamtrap listed on a website needs to be closely > monitored, as some mailviruses for some reason will wind up extracting > email addresses from websites and inadverte

Re: [SAtalk] Rule Question

2003-06-06 Thread illustre
On Fri, 2003-06-06 at 16:14, Abel Jeffcoat wrote: > Hello, > > I have a user that buys and sells on Ebay. Sometimes those messages get > tagged as spam. Is there a way to setup a rule to not tag them? > > Sincerely, > > Abel Jeffcoat > > add his email to .spamassassin/user_prefs --

Re: [SAtalk] On trying out CVS'ed spam assassin

2003-06-06 Thread Kai Schaetzl
Gary Funck wrote on Fri, 6 Jun 2003 11:32:52 -0700: > Hmmm, So if I go here, http://spamassassin.rediris.es/downloads.html > and pick up the "Latest bleeding-edge code, 2.60", am I getting the > latest SA, *and* its latest scores? If I install this package, and > replace my previous package, and d

[SAtalk] Rule Question

2003-06-06 Thread Abel Jeffcoat
Hello, I have a user that buys and sells on Ebay. Sometimes those messages get tagged as spam. Is there a way to setup a rule to not tag them? Sincerely, Abel Jeffcoat --- This SF.net email is sponsored by: Etnus, makers of TotalView, The

Re: [SAtalk] Spamtrap account?

2003-06-06 Thread Matt Kettler
The only thing you need to be aware of is that by putting it into a webpage you will have to monitor the incoming traffic for mailing lists. I think it was either Theo Van Dinter or Tony Svanstrom that once pointed out that any spamtrap listed on a website needs to be closely monitored, as some

[SAtalk] Install issues - dumps core

2003-06-06 Thread Lydia Leong
I'm installing SpamAssassin for the first time in the following environment: - Irix 6.5 - perl 6.5.1 (from the SGI freeware site, with a modified Config.pm to make the compile defaults gcc instead of SGI cc) - New, clean, installs of HTML::Parser, etc. - g

Re: [SAtalk] 2.54 - wrong score set chosen?

2003-06-06 Thread Matt Kettler
At 12:12 PM 6/6/2003 -0700, Bart Schaefer wrote: On Fri, 6 Jun 2003, Matt Kettler wrote: > At 09:10 AM 6/6/2003 -0700, Bart Schaefer wrote: > >Before I file a bugzilla about this ... > > > >debug: Score set 3 chosen. > > > >That means SA thinks network tests are not in use, but as the trace > >con

Re: [SAtalk] 2.54 - wrong score set chosen?

2003-06-06 Thread Bart Schaefer
On Fri, 6 Jun 2003, Matt Kettler wrote: > At 09:10 AM 6/6/2003 -0700, Bart Schaefer wrote: > >Before I file a bugzilla about this ... > > > >debug: Score set 3 chosen. > > > >That means SA thinks network tests are not in use, but as the trace > >continues after the scoreset is already chosen I fin

RE: [SAtalk] Question about BAYES tests

2003-06-06 Thread Tom Meunier
So just run some IncrediMail ham through sa-learn. I was getting a lot of FPs from NTBugTraq, so I grabbed a bunch of NTBugTraq messages and fed it to Bayes. Now Bayes subtracts points for my NTBugTraq mail. Although I sure wouldn't mind if Incredimail was tagged as spam. Then I could tell my

Re: [SAtalk] Spamtrap account?

2003-06-06 Thread Steve Thomas
I have a spamtrap address on my home page. I put it in very small text at the bottom of the page after a bunch of whitespace. I set the font color to the same as the background, including the mailto: link. Here's what I have: Do not send mail to this address or nasty things will happen: [EMAIL

Re: [SAtalk] help installing spamassasins

2003-06-06 Thread Matt Kettler
At 09:21 AM 6/6/2003 -0700, Simon wrote: Hi, I can't install spam assassins. i have perl v5.8.0 and redhat 9 i got this error: ~~~ ./configure make: ./configure: Command not found make: *** [binaries.mk] Error 127 ~~~ What should I do? Don't call ./configure.. read the INSTALL file which will te

Re: [SAtalk] 2.54 - wrong score set chosen?

2003-06-06 Thread Matt Kettler
At 09:10 AM 6/6/2003 -0700, Bart Schaefer wrote: Before I file a bugzilla about this ... debug: Score set 3 chosen. That means SA thinks network tests are not in use, but as the trace continues after the scoreset is already chosen I find ... Score set 3 is the 4th scoreset mentioned in the docs

Re: [SAtalk] What's your spam level?

2003-06-06 Thread Steve Thomas
On Fri, Jun 06, 2003 at 01:25:48PM -0500, Patrick Bores is rumored to have said: > > I thought it would be interesting to hear what other users/admins deal > with in terms of spam load, and see if anybody has those numbers beat. > Here's the stats from the last 12 weeks of mail on my personal m

Re: [SAtalk] Spamtrap account?

2003-06-06 Thread Vivek Khera
> "JF" == Jim Ford <[EMAIL PROTECTED]> writes: JF> they spam me, procmail will report them to Razor. But the obvious JF> thing for a spammer to do would be to delete any addresses in his JF> DB that contain the string 'spam' - I would think that they would You'd think it was obvious to them t

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Chris Barnes
Kai Schaetzl <[EMAIL PROTECTED]> wrote: > Chris Barnes wrote on Fri, 6 Jun 2003 12:03:20 -0500: > >> I am more concerned about the false positives. Looking at the >> headers of those messages that are legit, it seems that the biggest >> score comes from the BAYES test. >> >> Is there a place that

[SAtalk] Spamtrap account?

2003-06-06 Thread Jim Ford
Hi, If I set up a spamtrap account to seed any postings to the NGs I use, or any web pages I might create, I would need to make it obvious to human readers that it is not to be used - eg '[EMAIL PROTECTED]', '[EMAIL PROTECTED]' etc.. Hopefully then, a spammer's email harvester will pick the addres

Re: [SAtalk] spams that get through

2003-06-06 Thread Kai Schaetzl
Jonathan Vanasco wrote on Fri, 6 Jun 2003 11:21:43 -0400: > what about the random stuff? > I think this is specifically included for confusing Bayes. I don't know if it works. I just see that we catch 99,9% of the spam at the moment (after adding some custom rules) and none of those get thru if

Re: [SAtalk] What needs to be SA-Learned?

2003-06-06 Thread Kai Schaetzl
Michael Weber wrote on Fri, 06 Jun 2003 09:43:22 -0500: > I was reading the docs and it wasn't real clear what messages needed to > be sent through the sa-learn process. Do I need only ham that was > marked as spam and spam that was not marked? If SA auto-learns, is > there any value in sending

Re: [SAtalk] Which Milter to use

2003-06-06 Thread Kai Schaetzl
Mark Emerle wrote on Thu, 5 Jun 2003 10:45:25 -0400: > I am running a server using Solaris 2.8 and Sendmail-8.12.9. I was > wondering if someone could recommend what milter would work best in my > current setup. If there are a couple of different options, maybe the > pros/cons of each. > I can re

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Kai Schaetzl
Chris Barnes wrote on Fri, 6 Jun 2003 12:03:20 -0500: > I am more concerned about the false positives. Looking at the headers > of those messages that are legit, it seems that the biggest score comes > from the BAYES test. > > Is there a place that talks about how that score is derived? I'm not

RE: [SAtalk] On trying out CVS'ed spam assassin

2003-06-06 Thread Gary Funck
> -Original Message- > From: Kai Schaetzl > Sent: Friday, June 06, 2003 10:32 AM > > scores *are* available on cvs, but not alone. You cannot drop in > new tests and > scores in an old sa. You need the full package. Hmmm, So if I go here, http://spamassassin.rediris.es/downloads.html

Re: [SAtalk] turning on Bayes test

2003-06-06 Thread Matt Kettler
At 11:50 AM 6/6/2003 -0600, Mike Mills wrote: I've just upgraded from SpamAssassin version 2.43 to 2.55. I've been using sa-learn to build up the Bayesian database. Still, SpamAssassin doesn't seem to be using the Bayes test. All of the spams it catches fail due to other rules, and it is letting

[SAtalk] What's your spam level?

2003-06-06 Thread Patrick Bores
Hello, On the system I help administer, we deliver spam-flagged messages to an IMAP folder inside the user's directory. Nightly, a script runs that deletes messages that are older than 10 days from that folder. So, there are no flagged messages more than 10 days old. Yet, several users have up

[SAtalk] SAProxy

2003-06-06 Thread Jack Gostl
I notice that SAProxy uses version 2.52 of SA. It looks like SA and its tests are internal to SAProxy. Is there a way to get it to upgrade? -- Jack Gostl [EMAIL PROTECTED] --- This SF.net email is sponsored by: Etnus, makers of TotalV

Re: [SAtalk] Speeding Up SpamAssassin

2003-06-06 Thread Jim Ford
On Fri, Jun 06, 2003 at 11:28:37AM -0400, Timothy J. Schutte wrote: > Hi, > > First of all, I am on a single, standalone machine [Celeron 333] and a 56K > dialup. I am using: > :0fw: spamassassin.lock > | /home/kc8hr/bin/sausr/bin/spamassassin Why not use spamd+spamc - it was the key to greatly

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Matt Kettler
At 12:03 PM 6/6/2003 -0500, Chris Barnes wrote: I am more concerned about the false positives. Looking at the headers of those messages that are legit, it seems that the biggest score comes from the BAYES test. Is there a place that talks about how that score is derived? Bayes is a learning system

[SAtalk] turning on Bayes test

2003-06-06 Thread Mike Mills
I've just upgraded from SpamAssassin version 2.43 to 2.55. I've been using sa-learn to build up the Bayesian database. Still, SpamAssassin doesn't seem to be using the Bayes test. All of the spams it catches fail due to other rules, and it is letting a good number of other spam get through.

Re: [SAtalk] Feeding the Bayesian DB

2003-06-06 Thread Kris Deugau
p2 wrote: > The majority of my users are POP. I would like an easy way to teach SA > using spam emails from my user. Does anyone have any suggestions on the > best method (easy) for users to transfer their spam to a location? Does > forwarding thwart the sa-learn tool? Thanks. If you can manage

Re: [SAtalk] On trying out CVS'ed spam assassin

2003-06-06 Thread Kai Schaetzl
Gary Funck wrote on Fri, 6 Jun 2003 08:57:24 -0700: > On the second point, I was wondering if there might be some sort of overnight, > or every-few-days automated update of the scores, and that these latest scores > would become available with the latest CVS copy of SA. > scores *are* available o

RE: [SAtalk] Speeding Up SpamAssassin

2003-06-06 Thread Gary Funck
Timothy, that's the way that I have my procmmail set up as well. This doen's work that well though for sites which filter on a site-wide basis. > From: Timothy J. Schutte > Sent: Friday, June 06, 2003 8:29 AM > > I subscribe to thirteen e-mail lists, several of which generate > 50-100 posts per d

[SAtalk] Question about BAYES tests

2003-06-06 Thread Chris Barnes
(newbie to the group, so please forgive if this question is inappropriate) The isp I use for my private email address has recently started using SA. It seems to work 'ok', but it seems to still generate: * far too many false negatives * occational false positives I am more concerned about th

[SAtalk] Feeding the Bayesian DB

2003-06-06 Thread p2
The majority of my users are POP. I would like an easy way to teach SA using spam emails from my user. Does anyone have any suggestions on the best method (easy) for users to transfer their spam to a location? Does forwarding thwart the sa-learn tool? Thanks. __

[SAtalk] sql db not getting used

2003-06-06 Thread Kai Schaetzl
Finally, I wanted to try user_prefs via MySQL db. I followed the README in the sql subdir, I assured that the db/table is there and accessable by the user, I added user_scores_dsn etc. to the local.cf, I reloaded spamd. There's no indication that it's getting used. I reread everything, includin

RE: [SAtalk] Any ideas why this got tagged as spam

2003-06-06 Thread Carmine DiMascio
How could you tell it was not added by spam assassin I'm also using MailScanner, and that must have been what added it. Actually that is what added it b/c in the MailScanner.conf {Spam?} is the tag it adds. Does anyone else use MailScanner with spam assassin Is there a way to have spamassassin tag

Re: [SAtalk] A newbie question about spam rules

2003-06-06 Thread Vivek Khera
> "PM" == Patrick Morris <[EMAIL PROTECTED]> writes: PM> Your mail server is listed by Osirusoft as an open relay. You may want PM> to take it up with them. ROTFL. Lots of luck. Osirusoft is probably one of the most poorly managed lists. Total black hole when you try to contact them, and

Re: [SAtalk] Any ideas why this got tagged as spam

2003-06-06 Thread Patrick Morris
SpamAssassin didn't mark this is spam. I'm guessing the "{Spam?}" in the subject was added by some other program -- that's really where you need to look. Carmine DiMascio wrote: If you look at the following headers you'll see it received a score of 1.4 and 4.3 is required. Does anyone know why

[SAtalk] 2.54 - wrong score set chosen?

2003-06-06 Thread Bart Schaefer
Before I file a bugzilla about this ... debug: Score set 3 chosen. That means SA thinks network tests are not in use, but as the trace continues after the scoreset is already chosen I find ... debug: Initialising learner debug: is Net::DNS::Resolver available? yes debug: trying (3) nytimes.com.

[SAtalk] help installing spamassasins

2003-06-06 Thread Simon
Hi,   I can't install spam assassins.   i have perl v5.8.0 and redhat 9   i got this error: ~~~ ./configuremake: ./configure: Command not foundmake: *** [binaries.mk] Error 127~~~     What should I do?   Thanks    

RE: [SAtalk] A newbie question about spam rules

2003-06-06 Thread Matt Yackley
Paul, Have you checked osirusoft's database for your mailserver address? -Original Message- From: Paul Lee [mailto:[EMAIL PROTECTED] Sent: Friday, June 06, 2003 9:49 AM To: [EMAIL PROTECTED] I just configured SA on my RH8 mail ser

Re: [SAtalk] A newbie question about spam rules

2003-06-06 Thread Patrick Morris
A slight correction to my last e-mail: Your relay server isn't listed as an open relay, but it appears your workstation (or a proxy you send mail to from your workstation) is: *(127.0.0.2) 66.20.63.187 is DNSbl listed. by relays.osirusoft.com

Re: [SAtalk] A newbie question about spam rules

2003-06-06 Thread Patrick Morris
Your mail server is listed by Osirusoft as an open relay. You may want to take it up with them. Paul Lee wrote: I just configured SA on my RH8 mail server (postfix) last night and was testing it this morning when I came accross something I was not expecting. I received a message from an interna

[SAtalk] On trying out CVS'ed spam assassin

2003-06-06 Thread Gary Funck
Since spam is a moving target, and SA is under constant development, and the newer versions always seem to do a better job of spotting the latest spam, there are some of us out here in the peanut gallery who'd like to try the latest. But we're often warned away because (1) obviously, the latest is

[SAtalk] Any ideas why this got tagged as spam

2003-06-06 Thread Carmine DiMascio
If you look at the following headers you'll see it received a score of 1.4 and 4.3 is required. Does anyone know why this has been tagged as spam I'm using spamassassing 2.55 with mailscanner 4.1 Thx carmine Return-Path: <[EMAIL PROTECTED]> Received: from mailgw1.cimage.co.uk ([213.38.153.156]) b

[SAtalk] Spam with low score? is this right?

2003-06-06 Thread Simon Crowther
Hi, I have only just started running spamassassin for our site, a lot of spam seems to be scoring quite low, is this normal? do other users of 2.53 get such a low score? Below is my debug output, and below that is a low scoring spam. Cheers Simon $ spamassassin -D --lint debug: Score set 0 c

Re: [SAtalk] Little bayes question

2003-06-06 Thread Germán D . Staltari
It could be global or for each user. Better results when is applied for each user. German - Original Message - From: "Jose M.Herrera" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 06, 2003 10:53 AM Subject: [SAtalk] Little bayes question > The bayes database is global

[SAtalk] Speeding Up SpamAssassin

2003-06-06 Thread Timothy J. Schutte
Hi, First of all, I am on a single, standalone machine [Celeron 333] and a 56K dialup. I am using: Mandrake 8.1 [2.4.8-26mdk] postfix-20010228 fetchmail-6.1.0 procmail-3.22 SpamAssassin-2.55 I subscribe to thirteen e-mail lists, several of which generate 50-100 posts per day. I noticed that Spa

[SAtalk] Is there a rule for "username" in Subject line?

2003-06-06 Thread Michael Clark
Is there a rule for matching the username in the subject line? I've been getting lots of spam with a subject line of "mclark, information for you" or "webmaster turn back time." People that send real mail rarely (if ever) send a message with the username as part of the subject. Thanks, Mike

[SAtalk] spams that get through

2003-06-06 Thread Jonathan Vanasco
some spam has gotten though lately with characteristics like the following: 1) EMVJJIUHXRHCKNQIULFTQGTMGLWWSNDDRJVGKMDGXSKATVUPOITCMYWOTFHMRJDQKJDPVTHC OTGVCU-3809950 2) a{LOCAL_PART}o{LOCAL_PART}e 3) d y e w e e v l p t u? w c y c y s j t k s d? 4) Unsubs.cribe 5) kcv yuekaxgymqfur b

[SAtalk] A newbie question about spam rules

2003-06-06 Thread Paul Lee
I just configured SA on my RH8 mail server (postfix) last night and was testing it this morning when I came accross something I was not expecting. I received a message from an internal user and the message received 2.9 points based on the following rule. X_OSIRU_OPEN_RELAY (2.9 points) RBL

RE: [SAtalk] problem with spamassassin, bmf and procmail

2003-06-06 Thread Gary Funck
> From: sandolo > Sent: Friday, June 06, 2003 6:17 AM > > I choose to rename the spamassassin's header and all seems to work fine That's good. I'd recommend that you also file a bug report on bmf's development site, indicating that they are not properly rewriting the X-Spam-Status header, by ign

Re: [SAtalk] How to delete or move spammessages?

2003-06-06 Thread Jonathan Vanasco
In my exim setup (using sa-exim) i scan incoming mail, and have the spam status by the time i route it to the appropriate address. That said, i can just delete it or deliver it, or even reject it based on the level. I don't know if anything similar exists for postfix... BUT you could have a stan

Re: [SAtalk] sending file to qmail-queue

2003-06-06 Thread Steve Wilson
Atlas wrote: I can't find the information how to manually run qmail-inject. It looks, that it reads info from stdin, but my mail was not delivered :(( When I find it, I will publish it in this mailing list - surely Maca Don't know if this answers you or not, but (page 23 of Life With Qmail) 2.

[SAtalk] What needs to be SA-Learned?

2003-06-06 Thread Michael Weber
I was reading the docs and it wasn't real clear what messages needed to be sent through the sa-learn process. Do I need only ham that was marked as spam and spam that was not marked? If SA auto-learns, is there any value in sending messages that were correctly scored back through the process? Th

[SAtalk] Double extension in attached file

2003-06-06 Thread VORLET Jean-Pierre
We receive many messages with executable attached file, for example: Content-Disposition: attachment; filename="SITUATIE ORDINE 01.2003.xls.scr" or Content-Disposition: attachment; filename="Jeux de mots et de mémoire.htm.exe" I tried to catch these files with the following rules: rawbody UF_DB

[SAtalk] spamc/spamd and/or spamassassin?

2003-06-06 Thread Steve Wilson
I'm currently using spamc/spamd here to filter the mail. This is a small place (only about 80 customers), so I was able to run the mailserver on a P2 450 without problems. When i started running spamassassin (on a per user basis), the machine started really bogging down - if only for 5-10 sec

Re: [SAtalk] Double extension in attached file

2003-06-06 Thread Tony Hoyle
VORLET Jean-Pierre wrote: We receive many messages with executable attached file, for example: Content-Disposition: attachment; filename=" or Content-Disposition: attachment; filename=" These are viruses, which are not really part of SA's remit. The best way to stop them is to block all e

[SAtalk] CVS usage questions

2003-06-06 Thread Kai Schaetzl
I'm getting the 2.60 cvs after having initialized it with this recommended script now: export CVSROOT=:pserver:[EMAIL PROTECTED]:/cvsroot/spamassassin cvs login cvs update -Pd cvs logout It sort of works and updates everything, but I'm getting these irritating errors: Logging in to :pserver:[EM

Re: [SAtalk] sending file to qmail-queue

2003-06-06 Thread Atlas
I can't find the information how to manually run qmail-inject. It looks, that it reads info from stdin, but my mail was not delivered :(( When I find it, I will publish it in this mailing list - surely Maca On Fri, 6 Jun 2003 15:50:08 +0200, Ralf Guenthner <[EMAIL PROTECTED]> wrote: This is the

Re: [SAtalk] Little bayes question

2003-06-06 Thread Patrick Morris
It can be configured either way. Jose M.Herrera wrote: The bayes database is global or for each user. --- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugg

Re: [SAtalk] How to delete or move spammessages?

2003-06-06 Thread Patrick Morris
No. SpamAssassin doesn't do anything to mail except tag it. Deleting it or moving it based on the tags would be the job of other software. MisterM wrote: hello all, I'm wondering about something, is it possible to delete or move messages based on the spam level or tag by spamassassin itself

[SAtalk] Re:*SPAM* Blatant spammer

2003-06-06 Thread Jonathan Nichols
Why are we so successful?? 1. Because, simply put, NO ONE can bring us down! And 2. Because we KICK ASS with Our HACKER-PROOF and ANTI-SPAMMER-PROOF I found this on the Postfix mailing list this morning. Stupid spammer. His "anti-spammer-proof" stuff works SO WELL... that SA caught it and dumpe

Re: Enough with the conspiracy theories! (was Re: [SAtalk] (no subject))

2003-06-06 Thread Jonathan Nichols
It would help if the spam report that's generated clearly identified the host that added it. If that header included something like: Scanned for spam by host mail.small-web-host.com (172.17.2.3) I also *LOVE* that idea, but for another reason. I like to know which machines in the farm scanned

Re: Enough with the conspiracy theories! (was Re: [SAtalk] (no subject))

2003-06-06 Thread Martin Radford
At Wed Jun 4 21:10:01 2003, Justin Mason wrote: > - They go to the URL in the mail -- http://SpamAssassin.org/tag/ -- > this page tells them to ask their ISP. So they do, and the ISP > says "we don't run that" -- because the *web host*, not the ISP, > is running it, and they don't

[SAtalk] Little bayes question

2003-06-06 Thread Jose M.Herrera
The bayes database is global or for each user. Thank --- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 f

[SAtalk] How to delete or move spammessages?

2003-06-06 Thread MisterM
hello all,   I'm wondering about something, is it possible to delete or move messages based on the spam level or tag by spamassassin itself? I know you can do it with the clients but that's no option for the company here. Have you got any idea's to do this??   I'm using spamassassin 2.55 in

Re: [SAtalk] sending file to qmail-queue

2003-06-06 Thread Ralf Guenthner
> This is the possibility howto erase all mails marked as spam BEFORE > queueing it. It's very important for me. You need qmail-inject, not qmail-queue. See the qmail-mailinglist-archive or the docs directory in the qmail source for examples on how to manuall inject a mail into the queue. If you g

Re: [SAtalk] SA not catching spam obscured with character codes and tags

2003-06-06 Thread Stuart Gall
Hello, The problem is with the MIME decode. It is fixed in the latest CVS I think. If your policy prevents you from using CVS here is what I do, and I think these are good generic rules to have anyhow. body SWG_NO_SPACES_1 /[a-z]{30}/i describe SWG_NO_SPACES_1 Very long word (30 letters), usin

Re: [SAtalk] SpamSending Tools for testing (do they exist?)

2003-06-06 Thread Jonathan Vanasco
Thanks to all! On Thursday, June 5, 2003, at 03:48 PM, Many People wrote: --- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed

[SAtalk] special report on spam

2003-06-06 Thread Marissa O'Hare
Hi there, It's Marissa from CNET Networks UK again. I posted something a while back in order to get advice on optimizing our newsletters so that we are received as whitelisted senders. I hope you don't perceive this to be spam and if you do feel free to tell me off but I did want to do a one-of

RE: [SAtalk] problem with spamassassin, bmf and procmail

2003-06-06 Thread Gary Funck
Your note didn't clearly say what exactly is wrong with the headers that you're seeing. Is it that the X-Spam-Status heeader is screwed up? If that's the case, the probably `bmf' (see http://sourceforge.net/projects/bmf/) is messing things up, when you call it with the -p switch. I don't know how

Re: [SAtalk] problem with spamassassin, bmf and procmail

2003-06-06 Thread sandolo
On Thu, 5 Jun 2003 13:12:49 -0700 "Gary Funck" <[EMAIL PROTECTED]> wrote: I choose to rename the spamassassin's header and all seems to work fine :) Thanks for your suggestions greets sand -- [ [EMAIL PROTECTED] - http://autistici.org/sandolo/ ] [ "Non sono disordinato. Sono solo u

Re: [SAtalk] .spammassin

2003-06-06 Thread Stuart Gall
- Original Message - From: "Marek Dohojda" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 05, 2003 8:40 PM Subject: [SAtalk] .spammassin > Hello > > I have a question, test computer accidentally rebooted (well pressing > control-alt-delete kind of created this "acciden

[SAtalk] sending file to qmail-queue

2003-06-06 Thread Atlas
Hi, how can I send the content of a real file to qmail-queue? The content of the file is from the command spamassassin -e > /tmp/mailfile.txt How can I send it as a real mail to qmail? I've tried cat /tmp/mailfile.txt > /var/qmail/bin/qmail-queue but it doesn't work. Probably I'm doing some

Re: [SAtalk] SA not catching spam obscured with character codes andtags

2003-06-06 Thread Tony Earnshaw
R.W. wrote: I have an account at fastmail.fm, and SA, which was once very effective, is now passing a lot of spam with scores <3 Virtually all of this spam has html text with the following characteristics: 1) it's obfuscated with a combination of both tags and character codes 2) it's base64 e

Re: [SAtalk] SpamSending Tools for testing (do they exist?)

2003-06-06 Thread Matt Kettler
Might I suggest sending yourself a GTUBE test mail. The GTUBE rule will add 100 points to the email, and is based on a body string. If you want to force a message to be tagged with a very high score to test your processing, stick a GTUBE string in a message: body GTUBE /XJS\*C4JDBQADN1\.NSBN3

RE: [SAtalk] .spammassin

2003-06-06 Thread Marek Dohojda
Thank you I just figured out what I did.. And I am a bozo (for all the world to know). I didn't realize that all this time I am running spamassasin as root for testing, but spamc for actuall running. Well guess what happens when you do sa-learn as a root instead of spamc? You all can officially

Re: [SAtalk] SAproxy

2003-06-06 Thread Jack Gostl
> > I'm trying to get SAProxy working. According to the docs, I should point > > my OE at 127.0.0.1, and then change my account to > > "account_name:server". After I do this, I'm getting authentication > > failures. I looked in my server log, and did some traces and I find that > > the account is

Re: [SAtalk] Is there a rule for "username" in Subject line?

2003-06-06 Thread Michael Clark
Interesting. you're right, email with mclark in the subject get caught. But it does not seem to be catching virtual names as the alternate To:. for example, webmaster@ comes into my regular username, but that rule does not seem to match because the username is mclark. Mike At 11:00 PM -0400 6

  1   2   >