On Thu, Jun 12, 2003 at 03:35:00AM +0300, Jon wrote:
> And where do I look to see it listed in the blacklist?
Add your blacklist entries to local.cf or user_prefs.
If you add single addresses using spamassassin --add-addr-to-blacklist=,
you can use check_whitelist and grep its output to find the
I'm using SA 2.5.5 w/ Razor2 check on Red Hat 9 + sendmail 8.12.8-5.90 as
a front-end to a Lotus Domino server. It's a PII-333MHz machine w/ 256Mb
of memory.
How long should it take to process a message? I had to modify the razor
timeout to 30secs, or Razor wasn't working at all, but it seems
At 04:35 PM 6/11/03 -0800, [EMAIL PROTECTED] wrote:
I am trying to black list send4fun.com. I am using spamd and was reading
the man page for spamassassin and am wondering if I have the syntax right
to add this domain to the blacklist.
spamassassin -r -W send4fun.com
Would that be correct? And whe
It might be if I was trying block just that one.
This is not what I am asking for.
If there was a function in SA that would strip characters out then no matter
what way they sent
it would create a string of just the words which then could be further
parsed by SA.
-T*h*i*s i_s n&o&t a s$t$a$t$i$c
At 20:18 10/06/03 -0400, Matt Kettler wrote:
At 06:39 PM 6/10/2003 -0600, Mike Vanecek wrote:
On Tue, 10 Jun 2003 21:50:17 +0200, Tony Earnshaw wrote
> Mike Vanecek wrote:
>
> > ??
>
> Mine's in /usr/local - not /usr; has been since 2.4+
>
I wonder what makes the difference? I have been installing
I am trying to black list send4fun.com. I am using spamd and was reading
the man page for spamassassin and am wondering if I have the syntax right
to add this domain to the blacklist.
spamassassin -r -W send4fun.com
Would that be correct? And where do I look to see it listed in the blacklist?
--
Matt Kettler said:
> There's a bug open on it and it's been discussed many times on the list.
> Some of the code in 2.60-cvs takes care of some of this, but the bug isn't
> completely dead AFAIK.
Actually, I think it's pretty nailed now. ;)
--j.
-
At 11:29 10/06/03 -0700, Ben Johansen wrote:
Ok,
Not to start a flame war, but have 2 NT Servers Pentium 233 that have
been running for years, 24/7. There was a stretch from 96 to mid 99 that
they ran without being touched.
In which case they would have been vulnerable to a load of security
explo
At 05:08 PM 6/11/2003 -0500, Justin Shore wrote:
I don't have any information about this either, only a thought. If I
contributed code to an open source project like SA, I'm contributing it
under the conditions of whatever licensing scheme(s) the project already
utilizes.
Yes, this is the case fo
On Wed, Jun 11, 2003 at 05:08:21PM -0500, Justin Shore wrote:
> I don't have any information about this either, only a thought. If I
> contributed code to an open source project like SA, I'm contributing it
> under the conditions of whatever licensing scheme(s) the project already
> utilizes. Bec
Actually, the arguments being made here are flawed, because they make
erroneous assumptions about high-volume mail architectures.
A large ISP is not just like a small installation times N. Large ISPs
use multi-tiered mail architectures, particularly when anti-spam and
anti-virus filtering is invo
I've noticed a lot of spam lately that is using
invalid html tags embedded between the letters
of the body text, for example,
As seen on Oprah.
I searched around on the list but couldn't find
any references to this approach. Anyone else
seeing these spams? Is there any rule that covers
invali
--On Wednesday, June 11, 2003 3:59 PM -0400 Steve Wilson
<[EMAIL PROTECTED]> wrote:
> But now I'm hearing a LOT about how I should be installing via CPAN or via
> the SRC RPMs, and I wonder.
If you're using an RPM-based system, rebuilding from SRPM and installing from
the resulting binary RPM wil
On Wed, 11 Jun 2003, Duncan Findlay wrote:
> On Wed, Jun 11, 2003 at 02:27:35PM -0400, Shayne Lebrun wrote:
> > Hai; note also that for all the random people on the street know, said
> > company went directly to the SA copyright holder, and got a license all
> > their own, separate from the GPL/AL
Steve Wilson wrote:
I've been running *nix boxes for a while, but I've gotten WAY too
comfortable with GUI-point and click type stuff. Most of what I've been
running have been RH boxes, and I always tried to find RPMs. From
xWindoze or rpm -i -- it's all kind of mindless. (I SAID I'd gotten
On Wed, Jun 11, 2003 at 04:02:52PM -0400, Tim wrote:
> On Wed, 11 Jun 2003, Jim Ford wrote:
>
> > On Wed, Jun 11, 2003 at 10:10:02AM -0400, Timothy J. Schutte wrote:
> >
> > > X-Spam-Status: No, hits=0.9 required=2.0
> >
> > Gosh - your required hits is low. Don't you get a lot of false positive
At 04:02 PM 6/11/2003 -0400, David Yang wrote:
Hi there,
How can correctly start deamon spamd ?
My first question is how are you starting it now, and what is sending it
SIGTERMs?
Really you should start one and only one spamd process, from a system
startup script.
It looks like you're winding
Hi Steve,
On Wed, 11 Jun 2003, Steve Wilson wrote:
> I've been running *nix boxes for a while, but I've gotten WAY too
> comfortable with GUI-point and click type stuff. Most of what I've been
> running have been RH boxes, and I always tried to find RPMs. From
> xWindoze or rpm -i -- it's al
- Original Message -
From: "Ben Johansen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 11, 2003 9:41 PM
Subject: [SAtalk] Bugzilla and New Function Request
> Ok, I am having trouble with the Bugzilla system.
> I have tried to submit this but it won't take my account
- Original Message -
From: "Mark Anderson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 11, 2003 3:31 PM
Subject: Re: [SAtalk] Non English Email
> > Do you use the ok_languages and ok_locales settings? If not, you should!
It is my understanding of ok_languages that
On Wed, Jun 11, 2003 at 02:27:35PM -0400, Shayne Lebrun wrote:
> Hai; note also that for all the random people on the street know, said
> company went directly to the SA copyright holder, and got a license all
> their own, separate from the GPL/AL/NPL/BSD License/Whatever.
No single entity owns th
On Wed, 11 Jun 2003, Justin Mason wrote:
>
> Justin Shore said:
>
> > Would it be possible for the developers to add a ./configure option for
> > CONTACT_ADDRESS so that people like myself can easily compile and install
> > the latest 2.60 from CVS nightly? Now that ./configure asks for this
- Original Message -
From: "Steve" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 11, 2003 6:57 PM
Subject: [SAtalk] Rewrite subject of probably-spam
> How do I rewrite the body or subject of a message when spamd determines
> probably-spam and/or almost-certainly-spam?
On Wed, 11 Jun 2003, Jim Ford wrote:
> On Wed, Jun 11, 2003 at 10:10:02AM -0400, Timothy J. Schutte wrote:
>
> > X-Spam-Status: No, hits=0.9 required=2.0
>
> Gosh - your required hits is low. Don't you get a lot of false positives?
> The default of 5 works fine for me.
No, but I do have a rathe
Hi there,
How can correctly start deamon spamd ?
I got those from /var/log/syslog
Jun 11 15:09:31 io spamd[1177]: server started on port 48373 (running
version 2.55)
Jun 11 15:09:32 io spamd[1177]: connection from localhost [127.0.0.1] at
port 32807
Jun 11 15:09:32 io spamd[1180]: Still runnin
SA should correctly interpret the times, using the specified RFC compliant
timezone indication. (I *think* this is done by normalizing all the times
to -000 before comparison)
Could you post an example set of Received: headers and Date: header?
At 03:06 PM 6/11/2003 -0400, Louis Bohm wrote:
How
I've been running *nix boxes for a while, but I've gotten WAY too
comfortable with GUI-point and click type stuff. Most of what I've been
running have been RH boxes, and I always tried to find RPMs. From
xWindoze or rpm -i -- it's all kind of mindless. (I SAID I'd gotten way
too comfortable
Hi there,
I am just finish install all packages (Spamassassin +MIMEDefang +Sendmail
+Qpopper +procmail) on Sun Solaris 9.
everything doing well, but now I need to create /etc/mail/spamcheck.users,
what is this file look like ?
Thanks
David
---
Neil,
| I don't know where I should post this.
amavis-user mailing list would be more appropriate.
| But maybe someone here can share the
| variables that I can use in /var/amavisd/notify_spam_sender.txt so that Spam
| Assassins report will be included when the mail is sent back to the sender.
Justin Shore said:
> Would it be possible for the developers to add a ./configure option for
> CONTACT_ADDRESS so that people like myself can easily compile and install
> the latest 2.60 from CVS nightly? Now that ./configure asks for this
> piece of information, I have to break out good old
>From Justin Mason:
| yeah. I would probably add a new arg for "metadata headers", e.g.
| (data => [EMAIL PROTECTED], add_From_line => 0,
|metadata => { 'X-Envelope-To' => '<[EMAIL PROTECTED]', ... });
| which SpamAssassin just mixes in with the real headers internally.
Merging 'met
How does SA handle time zone changes in mail.
We have received a few email sent from a time zone different then ours
that get this message:
* 1.6 -- Date: is 3 to 6 hours after Received: date
After looking at the messages the times all seem ok. I checked our
mailservers and they have th
On Wed, Jun 11, 2003 at 08:41:16PM +0200, Kristian Koehntopp wrote:
> But the version number indicates software that might not really be mature.
> Perhaps a higher order configuration interface along the lines of
> getconfigvalue() and setconfigvalue() would be in order, which under the
> hood cal
On Wed, Jun 11, 2003 at 12:48:43PM -0400, Theo Van Dinter wrote:
> On Wed, Jun 11, 2003 at 06:10:25PM +0200, Kristian Koehntopp wrote:
> > Has anybody written a ConfSourceLDAP.pm analogue to ConfSourceSQL.pm? I am
> > looking for a solution that stores SpamAssassin Preferences within an LDAP
> > st
Ok, I am having trouble with the Bugzilla system.
I have tried to submit this but it won't take my account info.
And when I ask it to send me an email with my password, I get no email.
Could someone that has submitted to bugzilla, please post this (see
original below) request to it.
Thank you
Be
On Wed, Jun 11, 2003 at 12:48:43PM -0400, Theo Van Dinter wrote:
> On Wed, Jun 11, 2003 at 06:10:25PM +0200, Kristian Koehntopp wrote:
> > Has anybody written a ConfSourceLDAP.pm analogue to ConfSourceSQL.pm? I am
> > looking for a solution that stores SpamAssassin Preferences within an LDAP
> > s
- Original Message -
From: "Mark" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 11, 2003 12:09 PM
Subject: [SAtalk] Non English Email
> I am using Spamassassin to filter english and italian
> email but the false positive rate seems to be allot
> higher with the italia
Hai; note also that for all the random people on the street know, said
company went directly to the SA copyright holder, and got a license all
their own, separate from the GPL/AL/NPL/BSD License/Whatever.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf O
Would it be possible for the developers to add a ./configure option for
CONTACT_ADDRESS so that people like myself can easily compile and install
the latest 2.60 from CVS nightly? Now that ./configure asks for this
piece of information, I have to break out good old expect to answer the
questio
On Wed, Jun 11, 2003 at 10:56:35AM -0700, Florin Andrei wrote:
> > For SA 2.53 there were Van Dinter RPMs for RedHat 7.3 and RedHat 8.0
> > both.
Yeah, I didn't quite get around to it. Sorry.
> The trick is to download the src.rpm, not the binary packages, and
> rebuild it.
absolutely.
> On 7.
At 01:23 PM 6/11/2003 -0400, Shayne Lebrun wrote:
Of course it's legal.
If they've made any changes to SA, they're obligated to release them to
anybody who buys the product (NOT necessarily to have them publically
available on a web/FTP site; that's just usually the route people take.)
If they'
They ran for that period without shutdown or restart.
Because of several factors.
1. Didn't have internet connection to them. So patches were not
necessary. 2. In 96 my business model changed, in other words my
clientele went in a different direction. So they just sat there running
without anyone
On Wed, Jun 11, 2003 at 12:48:43PM -0400, Theo Van Dinter wrote:
> On Wed, Jun 11, 2003 at 06:10:25PM +0200, Kristian Koehntopp wrote:
> > Has anybody written a ConfSourceLDAP.pm analogue to ConfSourceSQL.pm? I am
> > looking for a solution that stores SpamAssassin Preferences within an LDAP
> > st
Quoting Greg A <[EMAIL PROTECTED]>:
> The Van Dinter SA 2.55 RPMs are only available for RedHat 7.3
> For SA 2.53 there were Van Dinter RPMs for RedHat 7.3 and RedHat 8.0
> both.
> My question is this...
> Has anyone used the 7.3 RPM with RedHat Linux 8.0 and does it work?
Yeah, i've been using t
Steve wrote on Wed, 11 Jun 2003 11:57:45 -0400:
> How do I rewrite the body or subject of a message when spamd determines
> probably-spam and/or almost-certainly-spam?
>
No such thing in SA. spamd does *not* define probably-spam and/or
almost-certainly-spam.
Kai
--
Kai Schätzl, Berlin, Germ
On Wed, 2003-06-11 at 13:11, Greg A wrote:
> The Van Dinter SA 2.55 RPMs are only available for RedHat 7.3
>
> For SA 2.53 there were Van Dinter RPMs for RedHat 7.3 and RedHat 8.0
> both.
>
> My question is this...
>
> Has anyone used the 7.3 RPM with RedHat Linux 8.0 and does it work?
>
>
On Wed, Jun 11, 2003 at 10:42:56AM -0500, Chris Barnes is rumored to have said:
>
> So unless you didn't apply any security patches (gasp), I'm sure your 2
> NT servers were not continuously running from 96 to 99.
>
Speaking of not applying security patches, it seems that even the mighty Microso
On Wed, Jun 11, 2003 at 10:10:02AM -0400, Timothy J. Schutte wrote:
> X-Spam-Status: No, hits=0.9 required=2.0
Gosh - your required hits is low. Don't you get a lot of false positives?
The default of 5 works fine for me.
Regards: Jim Ford
--
Don't use this address! ---> [EMAIL PROTECTED] <---
On Wed, 11 Jun 2003 08:39:28 -0500, Jody Cleveland wrote
> > Mine's in /usr/local - not /usr; has been since 2.4+
>
> I found a file called spam in /usr/bin, but no spamc anywhere...
[EMAIL PROTECTED] admin]$ d /usr/bin/spam
lrwxrwxrwx1 root root5 Apr 8 12:05 /usr/bin/spam ->
Of
course it's legal.
If
they've made any changes to SA, they're obligated to release them to anybody who
buys the product (NOT necessarily to have them publically available on a web/FTP
site; that's just usually the route people take.)
If
they've *not* made any changes to SA, they just
How about this one?
http://www.mailshield.com/products/mailshield/server/whats_new.html
Mailshield now incorporates SpamAssassin and charges heaps of money for their product.
Anyone know if that is legal?
"Bingham, Ryan" <[EMAIL PROTECTED]> wrote:
Open-source strikes back:http://www.ewe
On Wed, Jun 11, 2003 at 08:39:28AM -0500, Jody Cleveland wrote:
> > Mine's in /usr/local - not /usr; has been since 2.4+
>
> I found a file called spam in /usr/bin, but no spamc anywhere...
Mine was pre-built in the spamd directory of the 2.55 tarball. As suggested
in the README.spamd, I copied b
The Van Dinter SA 2.55 RPMs are only available for RedHat 7.3
For SA 2.53 there were Van Dinter RPMs for RedHat 7.3 and RedHat 8.0 both.
My question is this...
Has anyone used the 7.3 RPM with RedHat Linux 8.0 and does it work?
Thank you.
Do you Yahoo!?
The New Yahoo! Search - Faster. Easie
Open-source strikes back:
http://www.eweek.com/article2/0,3959,1123172,00.asp
Let's hope there's some merit to this.
Ryan
-Original Message-
From: Kristian Koehntopp [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 11, 2003 12:10 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] LDAP Storage
I am starting a collection of "hype" words that I can use in conjunction
with other tests to boost scores and reduce false positives. The idea
works like this: If you have an email with the words "pain relief", I
would give it a small score, because that phrase could occur in a
legitimate ema
On Wed, Jun 11, 2003 at 11:57:45AM -0400, Steve wrote:
> How do I rewrite the body or subject of a message when spamd determines
> probably-spam and/or almost-certainly-spam?
SpamAssassin only knows ham vs spam. So you could do something like
set the spam required_hits (aka definately spam for th
On Wed, Jun 11, 2003 at 06:10:25PM +0200, Kristian Koehntopp wrote:
> Has anybody written a ConfSourceLDAP.pm analogue to ConfSourceSQL.pm? I am
> looking for a solution that stores SpamAssassin Preferences within an LDAP
> store.
Does LDAP interface with DBI? There's a ticket to move to DBI inst
At 04:11 PM (-0700) 6/9/2003 (Monday), Gregory Longfellow
wrote:
I've been successfully using
fetchmail to get mail
from my speakeasy account, but recently switched to having them just
forward
the mail (unmolested) to another address.
I have yet to see any breakage if you simply set up forwardin
Has anybody written a ConfSourceLDAP.pm analogue to ConfSourceSQL.pm? I am
looking for a solution that stores SpamAssassin Preferences within an LDAP
store.
Kristian
---
This SF.NET email is sponsored by: eBay
Great deals on office technology
How do I rewrite the body or subject of a message when spamd determines
probably-spam and/or almost-certainly-spam?
Steve
---
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.m
Ben Johansen <[EMAIL PROTECTED]> wrote:
> Ok,
>
> Not to start a flame war, but have 2 NT Servers Pentium 233 that have
> been running for years, 24/7. There was a stretch from 96 to mid 99
> that they ran without being touched.
>
> I don't get this argument
It's the definition of "uptime". In th
Try an "updatedb" to update the locate database. Then try the locate spamc | grep -iv
spool again. If you had a stale db, that might explain why locate didn't find
anything...
Jeff
-Original Message-
From: Jody Cleveland [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 10, 2003 8:50 AM
To:
At 01:24 PM 6/11/03 +0200, [EMAIL PROTECTED] wrote:
Hi
However looking at the syntax in the answer to Q1.13, I dont know how
to add such a rule?
At the risk of being self promoting, I've got a rule writing guide. It
might be a bit of overkill, but should cover what you need.
http://mywebpages.co
Mark Anderson wrote on Wed, 11 Jun 2003 13:31:30 +0100:
> ok_languages en it
> ok_locales en
>
Yes, I use the same for German (with de, of course). If you still get more
Italian FPs than usual, you should also train your Bayes with a lot of
Italian ham, so that it knows those words as ham.
Ka
Got this little beauty in today's batch of email:
-- Forwarded message --
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost.localdomain [127.0.0.1])
by localhost.localdomain (Postfix) with ESMTP id 8D9AF2B9BE
for <[
Wow This is OT. But while we are at it, I had a win NT 3.1 PDC YES 3.1
server running at my last job for about 2-3 years. Service pack 1 only :) To
my knowledge it is still running! About 7 years+
Mangmnt decided if it ain't broke...
NT, behind a firewall, without worrying about inside at
Hi,
I'm developing some pt_BR rules to Brazillian spams and putting it on
local.cf, How can i start to contribute to spamassassin to add pt_BR as a
supported language?
thanks
---
This SF.net email is sponsored by: Etnus, makers of TotalView,
"Benjamin A. Shelton" wrote:
>
> I always wanted to start an anti-chain e-mail chain e-mail but never got
> around to it. Besides, I think someone beat me to the punch...
I cannot remember where I found this...
http://www.easley.net/help/faq/chain_letter.html
-
> Mine's in /usr/local - not /usr; has been since 2.4+
I found a file called spam in /usr/bin, but no spamc anywhere...
Jody
---
This SF.net email is sponsored by: Etnus, makers of TotalView, The best
thread debugger on the planet. Designed w
You're correct; most hacks are internal. And there are other precautions
that need to be taken there; your servers, for example, should be just as
firewalled from your internal network as from the external.
As for things like nimda, this is where the enterprise virus scanners come
in.
A total so
> Do you use the ok_languages and ok_locales settings? If not, you should!
Just the kind of help I need - thanks. Would the following settings
be right to handle English and Italian mail ?
ok_languages en it
ok_locales en
Mark.
---
This SF.ne
Mark wrote on Wed, 11 Jun 2003 10:09:01 +0100:
> I am using Spamassassin to filter english and italian
> email but the false positive rate seems to be allot
> higher with the italian email, does anyone have any
> experience using SA with non english email ? Are
> there any options to help my situ
On Wed, Jun 11, 2003 at 01:05:00PM +0300, Olivier Studer wrote:
> I need more explain to configure and install a solution using
> spamassassin and sendmail of Solaris 8. I have no idea to do
> that.
Depends on your environment and needs. procmail, maildrop,
spamass-milter, mimedefang, mailcorral.
Hi
This question really refers to FAQ 1.13.
I basically want to whitelist all internal-only mails at my site, very
similar to that asked in Q1.13.
My site has a structure where I know that all mails to/from the
Internet go via a specific set of relays, whereas all internal mails
go via a set of
Hello,
I need more explain to configure and install a solution using
spamassassin and sendmail of Solaris 8. I have no idea to do that.
Some body can help me ?
Thanks
/Olivier
On Среда, 11 Июнь 2003 16:09, Mark wrote:
> I am using Spamassassin to filter english and italian
> email but the false positive rate seems to be allot
> higher with the italian email, does anyone have any
> experience using SA with non english email ? Are
> there any options to help my situation ?
I am using Spamassassin to filter english and italian
email but the false positive rate seems to be allot
higher with the italian email, does anyone have any
experience using SA with non english email ? Are
there any options to help my situation ?
Thanks,
Mark.
---
Mike Vanecek wrote:
Mine's in /usr/local - not /usr; has been since 2.4+
I wonder what makes the difference? I have been installing from src rpms since
2.4 myself. IIRC, it was installing in /usr/bin on RH 8 as well. What distro
are you using and how do you install SA? I am running 2.55.
[EMAIL P
There was an interesting issue with the Code-Red and the like.
There were some Cisco routers that were using IIS for easy web configuration
of the router. So there were admins that had all the patches on there
servers, but the router was compromised. This was a big factor in the
spread of the wor
Hi all,
I setup a special user ( abuse ) and catch spam in /var/mail/abuse.
From time to time I login as abuse, using 'mutt' to verify each spam.
If there is non-spam, I will resend ( re-deliver ) it to my user.
In matt, you can setup some macro as the doc suggests like
macro index \cb " | spam
80 matches
Mail list logo
