Re: [SAtalk] a few suggestions

Tony Earnshaw <[EMAIL PROTECTED]> writes: > "SpamAssassin 2.52-cvs". Here I'm absolutely stymied. There was never a > 2.52-cvs in my tree. And "2003-03-20" doesn't look like "the latest" to me. > > *Anybody else know what Dan is talking about?* You are being excessively harsh, Tony. SAproxy 1.1

Re: [SAtalk] PGP_SIGNATURE

Stephen Swaney <[EMAIL PROTECTED]> writes: > In checking the 15,000 spams received by our spam trap since late > Friday, I found 216 such messages with PGP_SIGNATURES. I haven't checked > every one but the twenty or so I looked at all had similar: This rule and all similarly forgeable rules are l

[SAtalk] Automated Report Script?

Hi Folks, I don't mean to be a persistent complainer of sorts, but since I took it upon myself (along with a few other subscribers, I might add) to joke about a piece of spam that happened to be sent to the list, I received the following automated (well, appears so anyway) message: [snip] One

Re: [SAtalk] DUMBO! Send the SPAM for big $$$$

> >>THIS IS NOT SPAM!! YOU and YOU ALONE Opted-In and Subscribed Directly with Us to > >> receive the TWICE PER WEEK SPAM E-mail Money Making Newsletter" > > > > > > Uh, yeah. I think I remember that. > > > > That's worse than being drunk while surfing eBay! No kidding. This line is the one

Re: [SAtalk] DUMBO! Send the SPAM for big $$$$

Steve Thomas wrote: On Tue, Jun 17, 2003 at 02:46:36AM +, MAKE BIG $$$ is rumored to have said: THIS IS NOT SPAM!! YOU and YOU ALONE Opted-In and Subscribed Directly with Us to receive the TWICE PER WEEK SPAM E-mail Money Making Newsletter" Uh, yeah. I think I remember that. That'

Re: [SAtalk] DUMBO! Send the SPAM for big $$$$

On Tue, Jun 17, 2003 at 02:46:36AM +, MAKE BIG $$$ is rumored to have said: > > THIS IS NOT SPAM!! YOU and YOU ALONE Opted-In and Subscribed Directly with Us to >receive the TWICE PER WEEK SPAM E-mail Money Making Newsletter" Uh, yeah. I think I remember that. -- Steve Thomas --

[SAtalk] DUMBO! Send the SPAM for big $$$$

Title: Untitled Document THIS IS NOT SPAM!! YOU and YOU ALONE Opted-In and Subscribed Directly with Us to receive the TWICE PER WEEK SPAM E-mail Money Making Newsletter" Read this E-mail completely and if you decide to unsubscribe, per your ORIGINAL AGREEMENT, please allow up to 3 OR M

Re: [SAtalk] Quick question - re: filtering

msglobal wrote: Using sendmail 8.9.15 How would I set the preferences or other file to Reject email with a score of 10 or higher and between 5 and 9.9 send it through and change the subject line. Get it to use amavisd-new somehow? That's what I use for this - though with another MTA. "Never beli

Re: [SAtalk] Spam Assassin backed up after weekend

s Justin Mason wrote: log cycling. Restart spamd after the logs are cycled. Interesting. This could explain a very recent anomaly with Postfix 2.0.12/amavisd-new 20030314 (for those who don't know, amavisd-new uses SpamAssassin's Perl library instead of spamd.) Whereas I'd never ever had any p

Re: [SAtalk] Yet another stats program, this time with RRDtool graphs

On Sun, 15 Jun 2003 21:56:20 -0600, you wrote: >I don't mean to drag this too far off-topic, but I'm a little curious. >What happened about two-thirds >of the way after 02/01 that increased the distribution of negatively >scoring spam? SA 2.5x ;-) ---

RE: [SAtalk] Docs or "cheat sheets" on installing SpamAssassin on MS Windows?

For an SMTP gateway? http://www.openhandhome.com/howtosa.html For a workstation? http://saproxy.bloomba.com/ > -Original Message- > From: Joe Flowers [mailto:[EMAIL PROTECTED] > Sent: Monday, June 16, 2003 3:52 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Docs or "cheat sheets" on ins

[SAtalk] PGP_SIGNATURE

In checking the 15,000 spams received by our spam trap since late Friday, I found 216 such messages with PGP_SIGNATURES. I haven't checked every one but the twenty or so I looked at all had similar: -BEGIN PGP SIGNATURE- version: pgpfreeware 6.5.2 for non-commercial use

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

Sorry, clicked the wrong button. My last reply wasn't meant to go to the list but only to Tony, my apologies. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org -

[SAtalk] Docs or "cheat sheets" on installing SpamAssassin on MS Windows?

Hello Everyone, I need to get Spam Assassin to work on a MS Windows XP machine ASAP. Are there any docs, faqs , web pages, or "cheat sheets" available to help me get this does ASAP? Thanks! Joe --- This SF.Net email is sponsored by: INetU At

[SAtalk] Qmail-Vmailmgr-Courier-SquirrelMail + SA?

I am running a Qmail-Vmailmgr-Courier-SquirrelMail setup and want to incorporate SpamAssassin into it. I am unsure what exactly what I need to run.. or what to edit. I think I have read most of the documentation and tried looking on google for something. Each email account is virtual and the actu

Re: [SAtalk] OK, this Nigerian takes the cake, hands down!

Chris Santerre wrote: At first I was surprised to see a link in a 419. Then I went to it and expected it to be a phony page. Then I looked closely.. Check out the site!!! Notice the little orange box in the middle of the story I dunno why you should be surprised. Aincha ever visited the

RE: [SAtalk] New type of generic rule.

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Monday, June 16, 2003 3:21 PM > To: Christopher Eykamp > Cc: Chris Santerre; Spamassassin-Talk (E-mail); [EMAIL PROTECTED] > Subject: Re: [SAtalk] New type of generic rule. > > > > Christopher Eykamp said

Re: [SAtalk] Spam Assassin backed up after weekend

Any log entries, error messages or  the like? --Thomas Cameron, RHCE, CNE, MCSE, MCTCameron Technical Services, Inc.http://www.camerontech.com/(512) 454-3200 - Original Message - From: Carmine DiMascio To: [EMAIL PROTECTED] Sent: Monday, June 16, 2003 7:44 AM Subje

Re: [SAtalk] No X-Header

> > What would make it take that long for such a short > > message? > > > > oops, forgot to mention that you could check the message against > spamassassin -D. If it's reproducable this would possibly make up for a > good bug report, if not, see my other message ;-) Not reproducable. Tried bot

Re: [SAtalk] Oops

> With cool places like http://www.wholelattelove.com - it's very likely! > Trust me, I did it! ;) Haha! There is hope! *grins* --- This SF.NET email is sponsored by: eBay Great deals on office technology -- on eBay now! Click here: http://

Re: [SAtalk] Oops

Sorry about that, folks. I should learn to drink more caffinated beverages by the afternoon... but what's the likelihood of that? :-) With cool places like http://www.wholelattelove.com - it's very likely! Trust me, I did it! ;) --- This S

[SAtalk] Oops

Have I ever mentioned how much I hate Outlook Express? It just dawned on me that I sent a reply from a joke account one of my coworkers had put on this system... D'oh! Sorry about that, folks. I should learn to drink more caffinated beverages by the afternoon... but what's the likelihood of that

Re: [SAtalk] New type of generic rule.

Christopher Eykamp said: > At 09:58 AM 6/16/2003 -0400, Chris Santerre wrote: > >This isn't a request, more an open discussion. > > > >Would it be good to program a default counter function in SA so that users > >may custom write rules using it. IE a simple function call in SA called > >'counte

Re: [SAtalk] OK, this Nigerian takes the cake, hands down!

That was probably added after they started receiving complaints from recipients of this scam. - Original Message - From: Chris Santerre To: Spamassassin-Talk (E-mail) Sent: Monday, June 16, 2003 11:36 AM Subject: [SAtalk] OK, this Nigerian takes the cake, hands d

Re: [SAtalk] OK, this Nigerian takes the cake, hands down!

> I received a Nigerian spam today. It was caught, > but they have definitely mutated it beyond logic. Here > is the kicker part: Okay, THAT one takes the cake! That's a real winner. This isn't a spam, and it's a pretty old joke (not sure if it's real or not) but it seems to vaguely remind me of

[SAtalk] spamassassin -r Questions

Since spamassassin 2.5x I had been using the new default "make spam message into attachment" feature. Does spamassassin -r properly handle stripping this MIME-ness from the message and properly report to Razor? If I have razor, pyzor, and dcc installed but I do not want spamassassin -r to report

Re: [SAtalk] Whitelist using LDAP server

John Lederer wrote: > I am extremely interested. > > We use Rolodap, an LDAP contacts directory . Automatically whielisting > email from anyone in tht would let us lower the threshold for spam > generally. > > If you can post your code somewhere where I could link to it, I would > make sure that

[SAtalk] OK, this Nigerian takes the cake, hands down!

I received a Nigerian spam today. It was caught, but they have definitely mutated it beyond logic. Here is the kicker part:   "I must use thisopportunity to implore you to exercise the utmostindulgence to keep this matter extraordinaryconfidential, whatever your decision, while Iawait your

Re: [SAtalk] New type of generic rule.

At 09:58 AM 6/16/2003 -0400, Chris Santerre wrote: This isn't a request, more an open discussion. Would it be good to program a default counter function in SA so that users may custom write rules using it. IE a simple function call in SA called 'counter' instead of header. Then you simply feed i

Re: [SAtalk] Spam Assassin backed up after weekend

Carmine DiMascio said: > Hi everyone > > We've been using spam assassin in production now for 2 weeks. > > Monday morning after both weekends we cease to get mail. > > The only way to get it is to shut down spam assassin, have everyone > download there mail, the once most mail has been downloa

Re: [SAtalk] No X-Header

Thomas.Meyer said: > On Mon, 16 Jun 2003, Jack Gostl wrote: > > > On Mon, 16 Jun 2003, Kai Schaetzl wrote: > > > > > Jack Gostl wrote on Mon, 16 Jun 2003 00:33:10 -0400 (EDT): > > > > > > > Using Pine, I checked the message ID and scanned the syslog > > > > (which includes both spamd and sendm

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

Tom Meunier said: > A Bayes > database doesn't reach maturity by having a certain number of SA-filtered spa > ms >15 and SA-filtered hams <-2; it reaches maturity by having a certain numb > er of confirmed hams and spams, period. Therefore, if one organization obtai > ns initial Bayes seeding s

Re: [SAtalk] Help needed blocking HTML_IMAGE_ONLY emails

Fox Flanders wrote: I have a problem And your SA version is ... ? Tony -- Tony Earnshaw Working to get a life http://j-walk.com/blog/docs/conference.htm http://www.billy.demon.nl Mail: [EMAIL PROTECTED] --- This SF.NET email is sponsored by:

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

Tom Meunier wrote: To my mind, it's not murdering, or anything remotely approaching it. Bless you for bothering, Tom. Your line wrap is so utterly impossible with Mozilla 1.4rc1 (would have been better in Evo 1.2.4, but I fscked that up on my machine by compiling and installing gtk+2.2), that I

Re: [SAtalk] want a quick laugh? Ironic!

Benjamin A. Shelton wrote: I just got this subject placed directly into my spamtrap folder: Hehehe, I've had a few that were advertising e-mail marketing along the lines of "Want to learn how to spam?" Pity I didn't notice it was in my junk folder until it was over three months old, I could'v

Re: [SAtalk] want a quick laugh? Ironic!

> I just got this subject placed directly into my spamtrap folder: Hehehe, I've had a few that were advertising e-mail marketing along the lines of "Want to learn how to spam?" Pity I didn't notice it was in my junk folder until it was over three months old, I could've poked fun at it sooner!

[SAtalk] want a quick laugh? Ironic!

I just got this subject placed directly into my spamtrap folder:   *SPAM* Email ads are the most effective   :)  SO funny I had to share.  Keep up the great work guys! I'll upgrade one day, I swear! 2.4x and still rocking! Chris SanterreSystem Admin"A little nonsense now and th

Re: [SAtalk] No X-Header

Jack Gostl wrote on Mon, 16 Jun 2003 06:55:52 -0400 (EDT): > Its tough to match up, but there is an entry that shows 303 seconds to > process a message. What would make it take that long for such a short > message? > I don't know, things just happen. I had this once with two messages, too, and e

Re: [SAtalk] No X-Header

Jack Gostl wrote on Mon, 16 Jun 2003 06:55:52 -0400 (EDT): > What would make it take that long for such a short > message? > oops, forgot to mention that you could check the message against spamassassin -D. If it's reproducable this would possibly make up for a good bug report, if not, see my o

[SAtalk] Quick question - re: filtering

Hi, Using sendmail 8.9.15 How would I set the preferences or other file to Reject email with a score of 10 or higher and between 5 and 9.9 send it through and change the subject line. Thanks Msglobal --- This SF.NET email is sponsored by:

RE: [SAtalk] Removing headers etc.. to feed Bayes correctly

> -Original Message- > From: Tony Earnshaw [mailto:[EMAIL PROTECTED] > Sent: Monday, June 16, 2003 7:58 AM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Removing headers etc.. to feed Bayes correctly > >...people on the list were > saying about > murdering the Bayes database before it

[SAtalk] Adding entries to whitelist?

Hi, The option -W to SA adds an address to the auto_whitelist. It would also be convenient to be able to add an address in a similar way to the user_prefs whitelist, which has a much stronger effect. Is there a way to do it, other than manually? Regards: Jim Ford -- Spam poison - don't use! ---

[SAtalk] Help needed blocking HTML_IMAGE_ONLY emails

I have a problem with spam composed of just a large image containing an advertisement and an id tag at the bottom. This sort of spam is making it through nearly every time. I have bumped up the score on HTML_IMAGE_ONLY to 3.0, which is as high as I dare, but I need another 2 points to get it to 5

AW: [SAtalk] Confused about sa-learn and auto_learn

Hi Bryan > Given that auto_learn is working, is it still worthwhile to > run true-positives (spam) and true-negatives (hams) through > sa-learn, as the INSTALL document says you should do? Yes, it makes sense: auto-earn is quite conservative wrt to the messages it actually trains from. This mea

[SAtalk] Confused about sa-learn and auto_learn

I'm a little confused about training with sa-learn, when auto_learn is enabled by default. Given that auto_learn is working, is it still worthwhile to run true-positives (spam) and true-negatives (hams) through sa-learn, as the INSTALL document says you should do? Or instead is it only us

Re: [SAtalk] Spamc/spamd piping

Hi, On Mon, 16 Jun 2003 10:26:28 +0200 Buscema Guido <[EMAIL PROTECTED]> wrote: > Hi, > > I'm trying to set up spamc/spamd with postfix by piping a shell script > inside master.cf file of postfix. > I created a user "filter" and a directory /var/spool/filter. > I also created a directory ( /opt/

[SAtalk] New type of generic rule.

This isn't a request, more an open discussion.   Would it be good to program a default counter function in SA so that users may custom write rules using it. IE a simple function call in SA called 'counter' instead of header. Then you simply feed it a regex and give it a minimum.   counter

[SAtalk] Filtering spam sent to mail aliases

I'm running Sendmail on a Linux server, and I currently have Spamassassin set up for my users. Since some of them are untrusting of mail filtering apps, I use individual .forward files to enable SA for users who want it. The .forward calls Procmail, and the user's procmailrc file handles the pi

SV: [SAtalk] Spam Assassin backed up after weekend

I would suggest looking at this: http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/121.html (I think you change the language settings for system wide in /etc/sysconfig/i18n) I've seen strange errors when using redhat9 + mimedefang + spamassassin with UTF-8 enabled. / Per -Ursprunglig

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

Kai Schaetzl wrote: it was your response below. I really didn't quite understand it, but was wondering what Gerhard Schrder had to do with this or "statistics". And so I figured there was a slight chance that this was intended to express that you didn't like my reply. Whatever, thanks for clari

[SAtalk] Spam Assassin backed up after weekend

Hi everyone We’ve been using spam assassin in production now for 2 weeks. Monday morning after both weekends we cease to get mail. The only way to get it is to shut down spam assassin, have everyone download there mail, the once most mail has been downloaded, I can start up spam ass and

[SAtalk] Spamd hanging and autowhitelisting

Title: Spamd hanging and autowhitelisting Hi, Last Friday I had a problem which slowed/stopped a large percentage of the mail in to my site for 3 hours. Briefly I have  tied in spamd with Exim to process all incoming mail to our site. This worked happily until has Friday. On inspection the s

Re: [SAtalk] No X-Header

On Mon, 16 Jun 2003, Kai Schaetzl wrote: > Jack Gostl wrote on Mon, 16 Jun 2003 00:33:10 -0400 (EDT): > > > Using Pine, I checked the message ID and scanned the syslog (which > > includes both spamd and sendmail entries) and located the message being > > handed off to procmail. It wasn't even sli

Re: [SAtalk] Spoiling ham?

Kai Schaetzl wrote: Today the only spam which slipped thru was a short one with some URLs in HTML and then this at the end (see below): I think this is not only trying to trick Bayes in thinking it's ham but also tries to spoil the Bayes ham recognition if I teach that message as spam to sa-lea

Re: [SAtalk] No X-Header

Jack Gostl wrote on Mon, 16 Jun 2003 00:33:10 -0400 (EDT): > Using Pine, I checked the message ID and scanned the syslog (which > includes both spamd and sendmail entries) and located the message being > handed off to procmail. It wasn't even slightly busy at that time. > The machine doesn't need

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

Tony Earnshaw wrote on Sun, 15 Jun 2003 18:48:20 +0200: > Course I didn't take offense at *anything* you have said, say now or > will say in the future. I don't know what this is about; quoting could > help jog my memory. It's a huge list, and I can't find the bit you're > talking about here. Anyw

[SAtalk] Spamc/spamd piping

Hi, I'm trying to set up spamc/spamd with postfix by piping a shell script inside master.cf file of postfix. I created a user "filter" and a directory /var/spool/filter. I also created a directory ( /opt/spamfilter ) with the following shell script (filter.sh) SENDMAIL="/usr/lib/sendmail -i" SPAM

[SAtalk] spamd, performance and autowhitelisting database size

We are running Exim using spamassassin version 2.53 to scan all non-local mail with sitewide autowhitelisting enabled. Calls to spamassassin are made through spamd and this situation had happily persisted for a year, until today. Just before 12:00 GMT we noticed that mail was flowing very slow. On