Re: [SAtalk] which is 'better' for reporting/learning?sa-learn+razor vs. spamassassin -r

2003-07-18 Thread Nix
On Wed, 16 Jul 2003, Kelson Vibber yowled: > Nix <[EMAIL PROTECTED]> wrote: >>You'd have to run the files through spamassassin -d before passing them >>to razor, and sa-learn also has to do that, so spamassassin -r is faster >>(you're only doing the equivalent of a -d once) > > Only if you have SA

[SAtalk] Using SA for "Bayes/Whitelist" only?

2003-07-18 Thread Gwen M. Morse
Is there any simple config option to shut off all the assorted SA filtering options, except Bayes and whitelisting by collecting 'outgoing' e-mail addresses? Something along the lines of "OptionsToTurnOn" rather than shutting down each filtering option I don't want? These are the two features

[SAtalk] (no subject)

2003-07-18 Thread Alan Fullmer
--- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.c

RE: [SAtalk] Trouble training bayes ?

2003-07-18 Thread Matt Kettler
At 04:09 PM 7/18/2003 -0500, Jeff Funk wrote: I'm sure this is a silly question, but it's one that I haven't been able to find documentation on and has kept me from using the Bayes stuff in SA. Does it matter whether the header info is included in the e-mail when submitted to sa-learn? From what

[SAtalk] +$B6KHk>pJs;o(B + (fwd)

2003-07-18 Thread Tim
Hi Guys, (B (BHere is another sneaky one. It is entirely in Japanese, so I have set the (Bfollowing in my user_prefs: (B (B# Languages--rejects non-English spam (Bok_languages en (Bok_locales en (B (BLater-- (BTim (B (B-- Forwarded message -- (BReturn-Path: <[EMAIL PRO

RE: [SAtalk] Blocking during MTA

2003-07-18 Thread Larry Gilson
I originally sent this to Jordan directly by accident and not the list. My apologies! > -Original Message- > From: Jason Jordan [mailto:[EMAIL PROTECTED] > > Has anyone integrated SpamAssassin into Postfix such that any high > scoring spam can be rejected during MTA rather than this pr

RE: [SAtalk] Trouble training bayes ?

2003-07-18 Thread Jeff Funk
I'm sure this is a silly question, but it's one that I haven't been able to find documentation on and has kept me from using the Bayes stuff in SA. Does it matter whether the header info is included in the e-mail when submitted to sa-learn? From what has been said in this thread, it sounds like o

[SAtalk] RE: [Mimedefang] HTML stripped from email

2003-07-18 Thread David F. Skoll
On Fri, 18 Jul 2003, James Miller wrote: > I'm having a similar problem and I'm still unclear how to completely > disable HTML defanging in a message. I have set 'defang_mime 0' in > /etc/mail/spamassassin/sa-mimedefang.cf (for mimedefang) and > /usr/share/spamassassin/10_misc.cf report_safe 0.

Re: [SAtalk] Business Proposal (fwd)

2003-07-18 Thread Tony Earnshaw
Chris Knipe wrote: The South African Police Service are actually investigating multiple cases of fraud and other crimes against these spammers. South Africans have been asked to forward the mails to [EMAIL PROTECTED] They have also established a local web site, http://www.saps.org.za/cimeprev/nig

Re: [SAtalk] Blocking during MTA

2003-07-18 Thread Vivek Khera
> "JJ" == Jason Jordan <[EMAIL PROTECTED]> writes: JJ> Has anyone integrated SpamAssassin into Postfix such that any high JJ> scoring spam can be rejected during MTA rather than this process of JJ> simply categorizing? The latest postfix *snapshot* releases can do this using amavisd-new (or a

Re: [SAtalk] Re: Re[2]: Re: Movie FILTER THIS VIRUS ALREADY!!!

2003-07-18 Thread Vivek Khera
> "SAC" == Scott A Crosby writes: SAC> Yes. Thanks.. For my current work, observe this regexp used by SA: SAC> 2 '[EMAIL PROTECTED](?:[\-.0-9A-Z_a-z]+\.)+\w+' SAC> Feed it a bunch of dot's followed by a non-word... SAC> Say... '[EMAIL PROTECTED]' SAC> and, on some regexp interpreters, t

Re: [SAtalk] Blacklist & Whitelist file help

2003-07-18 Thread Matt Kettler
At 03:02 PM 7/18/2003 -0400, Walter Ray wrote: HI What "exact" file should I be looking for to create a Whitelist and Blacklist Add your whitelist and blacklist commands to /etc/mail/local.cf OR ~/.spamassassin/user_prefs Documentation of the commands can be found in: man Mail::SpamAssas

Re: [SAtalk] Blacklist & Whitelist file help

2003-07-18 Thread Joe Flowers
> What "exact" file should I be looking for to create a Whitelist and > Blacklist /etc/mail/spamassassin/local.cf or ~/.spamassassin/user_prefs For example, see http://maxo.captainnet.net/mailAdmin/spamAssassin/add.html Joe --- This

Re: [SAtalk] defang_mime is now report_safe but.......

2003-07-18 Thread Matt Kettler
At 01:38 PM 7/18/2003 -0400, Adam Denenberg wrote: Sorry for the repost, but trying to get this all figured out. Now that i know defang_mime has evolved into "report_safe 2", does anybody know how to get the defang capabilities without SA actaully putting a report in the email? You might be able t

Re: [SAtalk] 2.60-cvs problem with dial-up RBLs?

2003-07-18 Thread Justin Mason
Tony Earnshaw writes: > David B Funk wrote: > > > OK, I'm sorry I wasn't clear enough about the environment. The AOL client > > was using a web browser (HTTP not SMTP) to sent the message, via a > > webmail (HTTP-2-IMAP/SMTP) gateway (running 'IMP'). I understand about > > requiring dial-up clien

[SAtalk] Blacklist & Whitelist file help

2003-07-18 Thread Walter Ray
HI What "exact" file should I be looking for to create a Whitelist and Blacklist Thanks!!! Walter --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a

FW: [SAtalk] China

2003-07-18 Thread Larry Gilson
> > Add this to your sendmail.mc and you will get no mail from china. > > > > FEATURE(dnsbl,`cn.countries.nerd.dk', `SPAM from > China:$&{client_addr} rejected' )dnl > > Except that Joe's relaying out via a Postfix server ;) The most efficient way would be to block using Postfix then. It is

Re: [SAtalk] RE: [Mimedefang] HTML stripped from email

2003-07-18 Thread Adam Denenberg
well i am actually trying to *enable* defanging, but i dont want the SA report along with the defanging. thats what i am trying to figure out. How to defang html email without SA dropping a report in the email. adam On Fri, 2003-07-18 at 13:53, James Miller wrote: > I'm having a similar proble

[SAtalk] RE: [Mimedefang] HTML stripped from email

2003-07-18 Thread James Miller
I'm having a similar problem and I'm still unclear how to completely disable HTML defanging in a message. I have set 'defang_mime 0' in /etc/mail/spamassassin/sa-mimedefang.cf (for mimedefang) and /usr/share/spamassassin/10_misc.cf report_safe 0. What am I missing to completely disable HTML d

[SAtalk] defang_mime is now report_safe but.......

2003-07-18 Thread Adam Denenberg
Sorry for the repost, but trying to get this all figured out. Now that i know defang_mime has evolved into "report_safe 2", does anybody know how to get the defang capabilities without SA actaully putting a report in the email? thanks in advance adam -

[SAtalk] Re: 2 Feature suggestions for spamd

2003-07-18 Thread Malte S. Stretz
On Friday 18 July 2003 17:20 CET [EMAIL PROTECTED] wrote: > On Thu, 17 Jul 2003, Malte S. Stretz wrote: > > On Thursday 17 July 2003 20:21 CET Justin Mason wrote: > > > [EMAIL PROTECTED] writes: > > > >1) Have spamd re-read local.cf when it receives a HUP signal, rather > > > > that having to be

[SAtalk] Re: SpamAssassin Whitelisting when I don't want it to

2003-07-18 Thread Fuzzy Fox
Mike Staver <[EMAIL PROTECTED]> wrote: > > Ok, I think I see what you man here - saying that I could use this > procmail filter... and I could then blacklist fimble.com so any > external mail from fimble.com gets blocked. Well, what I'm suggesting is that you use an alternate method to determine

Re: [SAtalk] Re: 2 Feature suggestions for spamd

2003-07-18 Thread up
On Thu, 17 Jul 2003, Malte S. Stretz wrote: > On Thursday 17 July 2003 20:21 CET Justin Mason wrote: > > [EMAIL PROTECTED] writes: > > >1) Have spamd re-read local.cf when it receives a HUP signal, rather > > > that having to be stopped and restarted > > > > Yep, that'll be in for 2.60. > > But

Re: [SAtalk] OT - Spamstats problem.

2003-07-18 Thread Tim Litwiller
here is a version that only needs the spamd logs http://mailhost.bccwebhosting.com/mrtg/sstats.tar.gz it creates part of the stats on this page http://mailhost.bccwebhosting.com/mrtg/ Jim Ford wrote: Hi, I'm trying spamstats, but there seems to be insufficient logging for it to return meaningfu

RE: [SAtalk] How to get SAproxy to work with Outlook Express - my configuration

2003-07-18 Thread Chris Santerre
> -Original Message- > From: Steve Miller [mailto:[EMAIL PROTECTED] > Sent: Sunday, July 13, 2003 1:48 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] How to get SAproxy to work with Outlook Express - my > configuration > > > No doubt - like the rest of you I HATE spam, to that end I >

[SAtalk] whitelist_from not working :-(

2003-07-18 Thread Joe Flowers
Hello Everyone! :-) I have a program that does this: use Mail::SpamAssassin; $spamobj = Mail::SpamAssassin->new(); my $status = $spamobj->check_message_text(\"Email Message Text Goes Here\"); (In other words, I'm not using the "spamassassin" executable or spamd to send the message to Mail::Spam

RE: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22

2003-07-18 Thread Chris Santerre
> -Original Message- > From: Alan Leghart [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 17, 2003 9:03 PM > To: Chris Santerre > Cc: Spamassassin-Talk (E-mail) > Subject: RE: [SAtalk] (OT) DSL/DIALUP manual BL Catch 22 > > > --On Wednesday, July 16, 2003 9:56 AM -0400 Chris Santerre

Re: [SAtalk] Business Proposal (fwd)

2003-07-18 Thread Chris Knipe
Just, FYI I'm not sure if it's applicable to other countries - it more than likely is if you can find the correct details... The South African Police Service are actually investigating multiple cases of fraud and other crimes against these spammers. South Africans have been asked to forward the

[SAtalk] SAProxy

2003-07-18 Thread Jack Gostl
Sorry to put this on the SA list, but I'm having a problem with SAProxy and I can't find the list address. By the way, the problem is that it hangs. If I have 10 or 20 messages at my ISP, its fine. But somewhere around 50 it hangs and I have to use Taskmanager to clean it up. This is version 1.2.

Re: [SAtalk] Re: Problem with DCC; Insecure path

2003-07-18 Thread Henrik Larsson
> The problem is that older versions of spamassassin aren't taint safe. I'm > not sure if the proper code was already in the 2.5x series, but 2.60 > (currently in beta/prerelease state) will be able to run in taint mode. > Which version of SpamAssassin do you run? I did run Spamassassin 2.55 but f

Re: [SAtalk] SA and Razor

2003-07-18 Thread Ryan Lumsden
On Friday 18 July 2003 15:46, you wrote: Oh really, thats good to know, I am upgrading now then. Thanks for the input R > At 11:32 AM 7/18/03 +0200, Ryan Lumsden wrote: > >Hi > > > >Simple quiestion, does Razor2 work with RA 2.20 > > I doubt it, but a better point would be that nobody should

Re: [SAtalk] SA and Razor

2003-07-18 Thread Matt Kettler
At 11:32 AM 7/18/03 +0200, Ryan Lumsden wrote: Hi Simple quiestion, does Razor2 work with RA 2.20 I doubt it, but a better point would be that nobody should be using SA 2.2x unless they are GAing their own scoreset on a regular basis... ---

[SAtalk] Business Proposal (fwd)

2003-07-18 Thread Tim
Hi Guys, These Nigerian scammers are really getting creative. This one scored 1.1! Tim -- Forwarded message -- Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: from localhost (localhost.localdomain [127.0.0.1]) by localhost.localdomain (Postfix)

Re: [SAtalk] Trouble training bayes ?

2003-07-18 Thread Fox Flanders
Yes. I having been using Bayes since about the day Paul Graham published his algorithm. I have always hand picked messages I knew where spam (trollboxes) or ham (hand picked). I found that filter, which I still maintain, was so much more effective than SA autolearn, that I disabled SA's bayes fi

[SAtalk] RE: spamd 2.60-cvs

2003-07-18 Thread Hill, John
I updated this morning. Now it gives me the same message only on line 155 not 154? --john -Original Message- From: Malte S. Stretz [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2003 4:57 PM To: [EMAIL PROTECTED] Cc: Hill, John Subject: Re: spamd 2.60-cvs On Thursday 17 July 2003 23

RE: [SAtalk] Nedd help with procmail filtering

2003-07-18 Thread Larry Gilson
> I have a procmail file like this: > > LOGFILE=/var/log/procmail.log > VERBOSE=yes > > :0fw > * < 256000 > |/usr/bin/spamassassin -D > :0e > { > EXITCODE=$? > } > :0: > * ^X-Spam-Status: Yes > /usr/log/SPAM > > > OK this makes a log of every sp

Re: [SAtalk] defang_mime in 2.55

2003-07-18 Thread Adam Denenberg
ok report_safe 2 seems to work, but i dont want the SA report in the body of the message. Is it possible to get the funtionality of report_safe 2 , without the SA report? report_safe 1 seems to attach the original message yet stiull print a report, and report_safe 0 doesnt do any "mime defanging"

[SAtalk] Re: SA and message size limit?

2003-07-18 Thread Malte S. Stretz
On Friday 18 July 2003 07:18 CET Tomas Pluskal wrote: > Is there any way how to tell spamassassin to NOT analyze large messages? From [1]: | 4.10. SpamAssassin/spamd seem to take a very long time to scan large | emails, and are bogging down my server. What can I do? | | Spamassassin will attempt

Re: [SAtalk] blacklist with ip address

2003-07-18 Thread Greg Cirino
Have you looked into MessageWall? messagewall.org you can use it to do rbldns lookups before the mail gets to SA and is also very fast. we check about 8 ip rbls including our own and 3 source address rbls for every message coming to our mailers and it does the checking in about a second. Hence we

Re: [SAtalk] Problem with DCC; Insecure path

2003-07-18 Thread mikea
On Fri, Jul 18, 2003 at 01:20:42PM +0200, Henrik Larsson wrote: > Hi > > I know this is properly not a pure Spamassassin issue as you can se below, > but since all the Spamassasin experts is here, I would take the liberty to > asking the question anyway. > > Please don't flame me to much if this

[SAtalk] Re: Problem with DCC; Insecure path

2003-07-18 Thread Malte S. Stretz
On Friday 18 July 2003 13:20 CET Henrik Larsson wrote: > I know this is properly not a pure Spamassassin issue as you can se > below, but since all the Spamassasin experts is here, I would take the > liberty to asking the question anyway. > > Please don't flame me to much if this is this is way off

[SAtalk] Problem with DCC; Insecure path

2003-07-18 Thread Henrik Larsson
Hi I know this is properly not a pure Spamassassin issue as you can se below, but since all the Spamassasin experts is here, I would take the liberty to asking the question anyway. Please don't flame me to much if this is this is way off topic. I have recently installed DCC to add this to my che

[SAtalk] Problem with DCC; Insecure path

2003-07-18 Thread Henrik Larsson
Hi I know this is properly not a pure Spamassassin issue as you can se below, but since all the Spamassasin experts is here, I would take the liberty to asking the question anyway. Please don't flame me to much if this is this is way off topic. I have recently installed DCC to add this to my che

Re: [SAtalk] SpamAssassin at Redhat 7.2?

2003-07-18 Thread Tony Earnshaw
Klaus Pforte wrote: I have an older Redhat 7.2 mail/web server and want to install SpamAssassin. On this system I cannot upgrade to perl 5.6.1... Some other tries didn't work. Is someone here who has some experiences about this? Or solved this problem? This is a heavily updated RH 7.2 machine. I

Re: [SAtalk] China

2003-07-18 Thread Tony Earnshaw
Steven W. Orr wrote: Add this to your sendmail.mc and you will get no mail from china. FEATURE(dnsbl,`cn.countries.nerd.dk', `SPAM from China:$&{client_addr} rejected' )dnl Except that Joe's relaying out via a Postfix server ;) Tony -- Tony Earnshaw I love the music of Wagner. The only sound th

[SAtalk] Nedd help with procmail filtering

2003-07-18 Thread Bruno Pereira
I have a procmail file like this: LOGFILE=/var/log/procmail.log VERBOSE=yes :0fw * < 256000 |/usr/bin/spamassassin -D :0e { EXITCODE=$? } :0: * ^X-Spam-Status: Yes /usr/log/SPAM OK this makes a log of every spam that enter in my ma

[SAtalk] SA and Razor

2003-07-18 Thread Ryan Lumsden
Hi Simple quiestion, does Razor2 work with RA 2.20 R --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the

Re: [SAtalk] Configure Bayes Path

2003-07-18 Thread Mark
- Original Message - From: "Gorm Jensen" <[EMAIL PROTECTED]> To: "spamassassin" <[EMAIL PROTECTED]> Sent: Friday, July 18, 2003 9:54 AM Subject: [SAtalk] Configure Bayes Path > To get a single database instead of one for each user, I added > "bayes_path /this/that/bayes" to the local.cf fi

[SAtalk] OT - Spamstats problem.

2003-07-18 Thread Jim Ford
Hi, I'm trying spamstats, but there seems to be insufficient logging for it to return meaningful stats. Spamd logs OK, but spamstats appears to need sendmail logging info in addition. Sendmail will probably forever remain a mystery to me (I'm scared of the reputedly difficult creation of the conf

Re: [SAtalk] blacklist with ip address

2003-07-18 Thread Aldo Mari
the problem is that I have the line too slow so if I make a test an send an e-mail from my mail-server1 to my mail-server2 (are on my lan) it takes 30-40 seconds to arrive.(are two biprocessor DELL with scsi drive)..because we are waiting the response of rbldns...(osirusoft ,mail abuse...

[SAtalk] Configure Bayes Path

2003-07-18 Thread Gorm Jensen
To get a single database instead of one for each user, I added "bayes_path /this/that/bayes" to the local.cf file. The database was formed and is being populated by sa-learn; however, when mail is evaluated, the error "Cannot open bayes_path /this/that/bayes R/O: Permission denied" is generated.

Re: [SAtalk] blacklist with ip address

2003-07-18 Thread Aldo Mari
Yes but I'm using qmail..(this is not the problem because I think that qmail have the possibility to block the mail arriving from an ip address )...in my opinion the problem is that you througth out the e-mail and here we are speaking about of "possible" spam mail .not sure...because no one lis