Re: [SAtalk] auto_learn problem

Hi, On Tue, 15 Jul 2003 13:40:37 -0600 (MDT) Mike Mills <[EMAIL PROTECTED]> wrote: > I am experiencing weird and inconsistent behavior with the auto_learn > feature of spamassassin. I set the following in my local.cf file: > > auto_learn 1 > auto_learn_threshold_spam 4.3 > auto_learn_threshold

[SAtalk] Whitelist Problem

I run spamassassin 2.55 on a Redhat 7.2 system The attached email is spam, but it was not filtered because of the "USER_IN_WHITELIST" assessment. I studied my whitelist, and neither the originator nor strings containing the originator are listed, so I don't see how/why the message passed. Can an

[SAtalk] /kernel: spamd ?

I am getting a lot of messages on console like this: "/kernel: spamd [xxx] connection from localhost [127.0.0.1] at port " . I have a FreeBSD 4.3-RELEASE-p20 server running like mail server (sendmail, Qpopper, procmail etc..) with spamassassin on top of them. Can anybody tell me what is th

RE: [SAtalk] SA Learn from emails collected in Exchange (Outlook) ?

This goes against the subject line but is there a fairly easy way to do this that does not require Exchange? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of AltGrendel > Sent: Tuesday, July 15, 2003 2:25 PM > To: Spamassassin-List > Subject: RE:

RE: [SAtalk] Forwarding mail for sa-learn

I don't use Exchange but do have an IMAP server on the mail server. The only reason I do is because SquirrelMail requires one. ;) > -Original Message- > From: Yackley, Matt [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 15, 2003 9:15 PM > To: 'Phil Iovino ' > Subject: RE: [SAtalk] Forwar

RE: [SAtalk] Forwarding mail for sa-learn

Outlook and Sendmail. What should I be looking for in the archives? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Yackley, Matt > Sent: Tuesday, July 15, 2003 7:14 PM > To: ''SpamAssassin' ' > Subject: RE: [SAtalk] Forwarding mail for sa-learn >

Re: [SAtalk] Getting Razor error

On Tue, Jul 15, 2003 at 07:50:57PM -0400, Dragoncrest wrote: > Nobody knows anything about this error? > > At 04:22 PM 7/14/03 -0400, Dragoncrest wrote: > >Just viewing my mail logs today because i started getting fetchmail > >errors saying I had duplicate processes running which usually

[SAtalk] Re: (OT) DSL/DIALUP manual BL Catch 22

Chris Santerre <[EMAIL PROTECTED]> wrote: > > I've never been blocked.yet. But an admin with good intentions > like my own could. > > So I'm somewhat in a quandry. Does anyone block IP ranges > manually? Should I focus on using my ISP's email gateway? My entire IP range (of which I own only

Re: [SAtalk] Is bayes working?

On Tue, 15 Jul 2003, Luiz Lima wrote: > That should be enough to get me going, right? So, let me get back the my > original question: > > How can I tell if bayes is actually working on my setup? I have a > amavisd-new + sa setup and, although my bayes database gets updated and is > checked when I

RE: [SAtalk] SA Learn from emails collected in Exchange (Outlook) ?

That's right ... I didn't realize those weren't saved when you save a message from Outlook. Regards, Matthew Moldvan System Administrator Trilogy International, Inc. -Original Message- From: AltGrendel [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 3:25 PM To: Spamassassin-List

RE: [SAtalk] SA Learn from emails collected in Exchange (Outlook) ?

Do you happen to have a link for the script or Mark Motley's page? Thanks! Regards, Matthew Moldvan System Administrator Trilogy International, Inc. -Original Message- From: Marek Dohojda [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 2:28 PM To: 'AltGrendel'; Spamassassin-Lis

RE: [SAtalk] Forwarding mail for sa-learn

Yup, this can throw bayes off, (headers will be modifed, etc.) What client & MTA do you use? There has been several discussions of the best way to handle this depending on your setup. http://marc.theaimsgroup.com/?l=spamassassin-talk&r=1&w=2 -Original Message- From: Phil Iovino To: '

Re: [SAtalk] Getting Razor error

Nobody knows anything about this error? At 04:22 PM 7/14/03 -0400, Dragoncrest wrote: Just viewing my mail logs today because i started getting fetchmail errors saying I had duplicate processes running which usually singals that I've got a stuck email somewhere. In the process of checking

RE: [SAtalk] Advice

Thank you! -Original Message- From: Steve Thomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 4:33 PM To: Marek Dohojda Cc: 'Rick Macdougall'; [EMAIL PROTECTED] On Tue, Jul 15, 2003 at 03:44:09PM -0700, Marek Dohojda is rumored to have said: > > On the same note, I didn't se

Re: [SAtalk] Advice

On Tue, Jul 15, 2003 at 03:44:09PM -0700, Marek Dohojda is rumored to have said: > > On the same note, I didn't see documentation for local.cf and user_defaults. > Is there a place for this? man Mail::SpamAssassin::Conf -- "I think there is a world market for maybe five computers." - Thomas W

Re: [SAtalk] Is bayes working?

Stupid permissions problem... Only root could read from the bayes database, not the amavisd-new user. Thanks for all the help. -- Luiz Lima Image Link Internet http://www.imagelink.com.br - Original Message - From: "Luiz Lima" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, Ju

[SAtalk] Forwarding mail for sa-learn

I've setup 2 mailboxes to use for sa-learn. When I or anyone else forwards mail into either the spam or nonspam mailboxes, does it matter if a ton of the messages will be from me, and they will have the subject prefaced by "FW:"? I would think either of those things would really throw the logic off

Re: [SAtalk] Advice

You could modify the person's spamassassin user preference file and adjust required_hits to be a higher number.. so less e-mail are marked spam. On Tue, 2003-07-15 at 18:30, Marek Dohojda wrote: > I need to make sure that I mark one e-mail box as being able to receive > spams (it seems a lot of r

[SAtalk] Vexira antivirus

ANyone using vexira antivirus with spamassassin and Postfix?  If so can you respond I have a couple of questions to ask, namely the order that you have things happening, and how you go about the process.   Thanks,   Bill

Re: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

Satya wrote: | | >You are already paying a ISP, so, use its services. | >The ISP should relay your emails for you and queue incoming mail. | | Personally, I prefer my ISP to give me an IP connection. A fast | one, static address highly preferred. That's all. | | >Of course not all ISPs offer goo

RE: [SAtalk] Advice

I love community!! Thank you everyone... On the same note, I didn't see documentation for local.cf and user_defaults. Is there a place for this? Again once again Thank you!! Marek -Original Message- From: Rick Macdougall [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 3:43 PM

Re: [SAtalk] Advice

Hi, Marek Dohojda wrote: I need to make sure that I mark one e-mail box as being able to receive spams (it seems a lot of resumes are marked spam!). I don't see option in that since whitelist_from isn't right, it be more like whitelist_to (option that I don't see). What would be best thing to do

[SAtalk] Advice

I need to make sure that I mark one e-mail box as being able to receive spams (it seems a lot of resumes are marked spam!). I don't see option in that since whitelist_from isn't right, it be more like whitelist_to (option that I don't see). What would be best thing to do in this case? Should I a

[SAtalk] blacklist & whitelist

Can I blacklist everyone and setup a whitelist of domains? -- Henry Wong <[EMAIL PROTECTED]> --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux /

[SAtalk] How to ... rule question

How can I identify (have spamassassin tag) emails that come across with obscure letter strings in the subject or body of an email. Example: Subject Line: Fwd: Are you sick and tired of missing the fun? u azdoahbbx Subject Line: Fwd: Re: Worlds Smallest Digital Camera Has Arrived. dhyguhdy a pghup

Re: [SAtalk] Bayes overhead?

Hi, Dave Goodrich wrote: Hello, I have an interest in setting up Bayes testing. I am concerned about the consistent mention of increased resource usage when running Bayes. Can I get some idea of how much Bayes will increase my servers load? Thanks, We run a setup similar to yours but with eve

Re: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

On Jul 15, 2003 at 14:48, Raul Dias wrote: >You are already paying a ISP, so, use its services. >The ISP should relay your emails for you and queue incoming mail. Personally, I prefer my ISP to give me an IP connection. A fast one, static address highly preferred. That's all. >Of course not all

[SAtalk] Bayes overhead?

Hello, I have an interest in setting up Bayes testing. I am concerned about the consistent mention of increased resource usage when running Bayes. Can I get some idea of how much Bayes will increase my servers load? Thanks, DAve SunOS mail3 5.5.1 Generic_103640-32 sun4m sparc SUNW,SPARCstatio

Re: [SAtalk] any hope of using bayes for me?

If you are the one using a database for individual SA settings the following applies: If not, Please disregard this email :) A response to me from Theo: On Mon, Jul 07, 2003 at 04:03:48PM -0400, Greg Cirino wrote: > My question: Is this functionality going to be part > of the 2.60 release? nope.

[SAtalk] NJABL and SA 2.6 How to?

I have SA 2.55 and NJABL (not just another black list) set up and working very well.  I have it setup in my local.cf (/etc/mail/spamassassin) as you cna see at the bottom of this post.  My question is, on 2.6 I see the skip_rbl_checks I have that to 0 but I am wondering where i would config

Re: [SAtalk] Implementing SpamAssassin with Auto-Updates

At 10:36 PM 7/15/2003 -0700, Krishna wrote: 1. Do the Spam Score updates with every new relaese? Not every release.. typicaly there's a whole new rulset at the start of a release family (ie: 2.40, 2.50, 2.60) and there is often a "re-scoring" of the rules somewhere in the middle (ie: 2.43, 2.54).

Re: [SAtalk] any hope of using bayes for me?

I can't sign up 300 mail accounts to spamcop. I never see the good mail for the 300 accounts we have. I don't think it's representitive to use my good email as ham samples for the other 299 accounts. >spamhater wrote: >> My mailserver that SA runs on has no local accounts and forwards all >> mail

[SAtalk] auto_learn problem

I am experiencing weird and inconsistent behavior with the auto_learn feature of spamassassin. I set the following in my local.cf file: auto_learn 1 auto_learn_threshold_spam 4.3 auto_learn_threshold_nonspam 0.0 In my user_prefs I have: required_hits 4.3 It seems that not all of th

RE: [SAtalk] SA Learn from emails collected in Exchange (Outlook) ?

On Tue, 2003-07-15 at 14:39, Matthew Moldvan wrote: > An easier way to do it would be to setup a Samba share (google for > Samba if you're unfamiliar), have your users save the false > negatives/positives in a directory in that share, then have your SA > box run a crontab every night to learn those

RE: [SAtalk] SA Learn from emails collected in Exchange (Outlook)?

An easier way to do it would be to setup a Samba share (google for Samba if you're unfamiliar), have your users save the false negatives/positives in a directory in that share, then have your SA box run a crontab every night to learn those saved messages as ham or spam ...   Regards, Matthe

[SAtalk] Implementing SpamAssassin with Auto-Updates

Hi, I have been using SpamAssassin for users with individual preferences from a MySQL DataBase. Now I have a few questions to ask: 1. Do the Spam Score updates with every new relaese? 2. What about mails sent by a blacklisted ipaddress? How do I check them? Currently it is scanning incomi

RE: [SAtalk] SA Learn from emails collected in Exchange (Outlook)?

Darn you Alt.. You beat me to a punch! :) Yep public folders is the way to go. I have this implemented (due to a great script and help from Mark Motley, THANK YOU MARK!). Users simply put the mails in the folders and script automatically takes them, learns and deletes them. It's slick and simpl

[SAtalk] Re: SA Learn from emails collected in Exchange (Outlook)?

On Tuesday 15 July 2003 18:46 CET Nichols, William wrote: > I want to then FTP these messages to a folder on sa box and run sa-learn > --ham --dir /folderpath/here/ > > these are in .eml format. How could I save these so that they could be > used to learn the SA box? Any ideas here? The Microsof

Re: [SAtalk] SA Learn from emails collected in Exchange (Outlook)?

On Tue, 2003-07-15 at 12:46, Nichols, William wrote: > My SA box is a message router, does not collect any mail into local > folders. > > All mail is delivered to users exchange folder, and is read in > outlook. When someone receives a false positive or negative they > forward it to me and I sti

Re: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

Just my ¢2, Em Ter, 2003-07-15 às 11:20, Chris Santerre escreveu: > I'm using a DSL line on my email server. Which is part of my ISP's > static DSL pool. I don't send thru my ISP's mail server. I'm starting > to see the error in this now. In my mind I had somehow split the > difference of HOME D

Re: [SAtalk] SA Learn from emails collected in Exchange (Outlook)?

On Tue, Jul 15, 2003 at 09:46:59AM -0700, Nichols, William is rumored to have said: > > these are in .eml format. How could I save these so that they could be > used to learn the SA box? Any ideas here? You could try this: http://sourceforge.net/projects/ol2mbox I've never used it, so I can'

Re: [SAtalk] Failed to run BAYES_*

On Tue, Jul 15, 2003 at 11:36:27AM -0400, Theo Van Dinter wrote: > So the solution is to install DB_File and associated db libs. How can we tell what database file type SA is using (is DB_File a Berkeley DB)? Regards: Jim Ford -- Spam poison - don't use! ---> [EMAIL PROTECTED] <---

Re: [SAtalk] Spam with negative score

At 10:01 AM 7/15/2003 -0400, Gaurav Hariani wrote: I've been (almost) spam free for almost a month since I installed spamassassin. But today I received spam that had a -ve score. I don't know much about spamassassin, so could someone explain how this happened and what can I do to catch this sort of

Re: [SAtalk] Getting SA to score certain words higher

At 05:08 PM 7/15/2003 +0100, Huw Jenkins wrote: Hi there list, I'm fairly new to SA so forgive my ignorance. I've installed SpamAssasssin and it works very nicely. I've got my threshold set pretty high as we're an ISP and I don't want and False Negatives. I've noticed that certain pension spam

Re: [SAtalk] Global white/black lists?

Hi, Em Ter, 2003-07-15 às 11:13, Jason Buscema escreveu: > I have SA (2.44-11.8.x ) setup on a RedHat 9 machine. This is my main mail You might want to update to 2.55. > machine for the company. On my old machine I ran SA but each user had their > own prefs. On this new machine, so far, I have

Re: [SAtalk] Need a procmail recipe to redirect spam.

On Tue, 15 Jul 2003, Steven W. Orr wrote: > I want a recipe for /etc/procmailrc which conditionally runs a message > through spamc *only* if it hasn't already been processed by SA. I want > to use the X-Spam-Status and/or the X-Spam-Flag headers. Use the version_tag directive in /etc/mail/spamass

[SAtalk] SA Learn from emails collected in Exchange (Outlook)?

My SA box is a message router, does not collect any mail into local folders.   All mail is delivered to users exchange folder, and is read in outlook.  When someone receives a false positive or negative they forward it to me and I stick it in the appropriate folder.   I want to then FTP th

[SAtalk] which is 'better' for reporting/learning? sa-learn+razor vs. spamassassin -r

spamassassin -r reports to razor/pyzor and bayes sa-learn only does bayes? what would be best for reporting a maildir of spam? spamassassin -r each file? or sa-learn the directory and then report each file to razor? i can imagine there's a speed tradeoff between sa-learn and spamassassin -r .

[SAtalk] any hope of using bayes for me?

My mailserver that SA runs on has no local accounts and forwards all mail to another server. I have qmail-scanner quarantining suspicious mail. Over the last 3 or 4 months I've collected tons of spam samples, but only collected 20 or so hams. I can't think of any good way to get a reasonable sampli

Re: [SAtalk] Getting SA to score certain words higher

On Tue, Jul 15, 2003 at 05:08:31PM +0100, Huw Jenkins wrote: > Hi there list, > I'm fairly new to SA so forgive my ignorance. I've installed > SpamAssasssin and it works very nicely. I've got my threshold set pretty > high as we're an ISP and I don't want and False Negatives. I've noticed that

[SAtalk] Getting SA to score certain words higher

Hi there list, I'm fairly new to SA so forgive my ignorance. I've installed SpamAssasssin and it works very nicely. I've got my threshold set pretty high as we're an ISP and I don't want and False Negatives. I've noticed that certain pension spam doesn't get in, yet kiddie porn spam falls just

RE: [SAtalk] hits equals required hits but slips through

That was it. I now check for at least 5 stars or hits=5.0. Thanks guys! -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 11:00 AM To: Test, James Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] hits equals required hits but slips through On Tu

RE: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

I thought about doing the /32 as well. I use access list for sendmail, but I was simply entering in the IPs in an excel sheet and using the pull down feature to create the rest of the corresponding IPs. (ie: 1-127 for half a class C). Then import into access file. How are you implementing your list

Re: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

Hi, My list does exactly that... but... I am very selective about what ISP's get the dialup/dsl block. rr.com, sympatico.ca, earthlink.net doesn't, the just get /32 blocks .br,.kr,.cn,.mx, btopenworld, ono.com, .ar, .jp, and hongkong do get full /24 or greater blocks. I just base this on the

[SAtalk] How "-m " works

I'm trying to build a scanning system which is as robust as I can make at the moment. Everything is pretty much locked down except the way the max-children option works. Unless I'm missing something all connections are accepted, however if max-children is reached the new connections are held in

RE: [SAtalk] Failed to run BAYES_*

Theo, I suspect that you understand what wrong with my setup..could you point me in a more obvious direction? > -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 15, 2003 10:59 AM > To: Eric Dean > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Fail

Re: [SAtalk] Failed to run BAYES_*

On Tue, Jul 15, 2003 at 11:33:25AM -0400, Eric Dean wrote: > I suspect that you understand what wrong with my setup..could you point me > in a more obvious direction? Sure: install DB_File. :) The slightly longer explanation is that you're running 2.60 which has a new Bayes DB format. The "magi

Re: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

I'm using a DSL line on my email server. Which is part of my ISP's static DSL pool. I don't send thru my ISP's mail server. I'm starting to see the error in this now. In my mind I had somehow split the difference of HOME DSL and BUSINESS DSL. I always agreed that HOME DSL users should always se

[SAtalk] SA with amavisd-new: prevent SPAM FROM LOCAL

Dear ML, perhaps this is not the right ML but does anybody got expierence with SA and amavisd-new ? How can I prevent that a Spammer uses as a Sender an internal address like: [EMAIL PROTECTED] -> [EMAIL PROTECTED] I always get the message "SPAM FROM LOCAL". Whitelisting is shit cause it's Spam.

Re: [SAtalk] Is bayes working?

> Which bayes database did you tell "check_bayes_db"to check? Ok, thanks. That fixes the difference between "spamassassin --lint -D" and "chkeck_bayes_db". Now it says: 00 non-token data: db format = on-the-fly probs, expiry, scan-counting 49710 non-token data: nspa

Re: [SAtalk] hits equals required hits but slips through

On Tue, Jul 15, 2003 at 08:49:12AM -0400, Test, James wrote: > I'm using 2.60 (though I would get the same problem with 2.55), and once in a while > spam that scores a 5.0 (my required_hits is 5.0) slips through because it shows the > X-Spam_Level as 4 stars instead of 5 (my check to flag as spam

Re: [SAtalk] Failed to run BAYES_*

On Tue, Jul 15, 2003 at 10:05:23AM -0400, Eric Dean wrote: > New to Spam Assassin...new install..anybody know how to make this go > away..feel free to embarrass me. I'm finding that DB_File is becoming more required than "highly recommended". GDBM doesn't like control chars in the db (at least th

Re: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

| I'm using a DSL line on my email server. Which is part of my ISP's static | DSL pool. I don't send thru my ISP's mail server. I'm starting to see the | error in this now. In my mind I had somehow split the difference of HOME DSL | and BUSINESS DSL. I always agreed that HOME DSL users should alway

[SAtalk] (OT) DSL/DIALUP manual BL Catch 22

I started to take a look at blocking dialup and dsl IPs. I don't use an RBL for this, and I have my reasons. So I want to handle the BL myself in my access list. (Yeah I hear you grumbling!)   I was looking at spam IPs, checking them in ARIN, and writing down the blocks to block. I started t

[SAtalk] Failed to run BAYES_*

New to Spam Assassin...new install..anybody know how to make this go away..feel free to embarrass me. Running spamd with auto-learn enabled. Jul 15 09:56:25 maverix1 spamd[29552]: Failed to run BAYES_10 SpamAssassin test, skipping: ^I(gdbm store returned -1, errno 0, key "^M^A^G^I^CRUNNINGEXPIRE

[SAtalk] Global white/black lists?

I have SA (2.44-11.8.x ) setup on a RedHat 9 machine. This is my main mail machine for the company. On my old machine I ran SA but each user had their own prefs. On this new machine, so far, I have a global procmailrc file setup that runs SA (spamd): /etc/procmailrc # Run SpamAssassin :0fw | /usr/

[SAtalk] Spam with negative score

I've been (almost) spam free for almost a month since I installed spamassassin. But today I received spam that had a -ve score. I don't know much about spamassassin, so could someone explain how this happened and what can I do to catch this sort of thing. I've attached the message too if that he

[SAtalk] hits equals required hits but slips through

I'm using 2.60 (though I would get the same problem with 2.55), and once in a while spam that scores a 5.0 (my required_hits is 5.0) slips through because it shows the X-Spam_Level as 4 stars instead of 5 (my check to flag as spam is to look for at least 5 stars).. Any ideas? Should I be using a

Re: [SAtalk] Re: Need a procmail recipe to redirect spam.

On Monday, Jul 14th 2003 at 22:12 -0500, quoth Fuzzy Fox: =>Abigail Marshall <[EMAIL PROTECTED]> wrote: =>> =>> Try putting the recipe that is in your personal .procmailrc at the end =>> of the main /etc/procmailrc - then the mail will be sent to the =>> $SUSPECT file BEFORE going to your individu

Re: [SAtalk] [ot] Dilbert

--On Saturday, July 12, 2003 3:14 PM -0300 Raul Dias <[EMAIL PROTECTED]> is rumoured to have written: http://www.comics.com/comics/dilbert/archive/images/dilbert2003071742312. gif Here's another one: -- Random Tagline: Kids, the seven basic food groups