I've just installed Spamassassin 2.55 on a RH Linux system, enabled it for a single user via the users .procmailrc file and made minor cusotmizations via the /etc/mail/spamassassin/local.cf
file:
rewrite_subject 1required_hits 4.4
I know my changes are taking effect because the headers for ma
Daniel Carrera wrote:
On Thu, Jul 24, 2003 at 12:00:13AM +0100, Nix wrote:
Spam actually seems to differ quite a lot between individuals,
Really? Why would that be the case? The whole point of spam is that it's
intended for no one in particular and they make no research to find out if
> -Original Message-
> From: Shane Hickey [mailto:[EMAIL PROTECTED]
>
> Howdy all,
Howdy Shane! A good procmail book is "The Procmail Companion" by Martin
McCarthy.
> | spamassassin -e
I could be wrong but I don't think you are limited to this. I'll attempt
this but just looking a
Hi all,
I’ve been using spamassassin on my home network for a month or so now and am quite
happy with it. However, I don’t think I’m getting the full benefit of the Bayesian
analysis part of it because of the way I have my network set up.
Basically, I use a site-wide procmailrc control file (in /
> -Original Message-
> From: Shane Hickey [mailto:[EMAIL PROTECTED]
>
> Howdy all,
Howdy Shane! A good procmail book is "The Procmail Companion" by Martin
McCarthy.
> | spamassassin -e
I could be wrong but I don't think you are limited to this. I'll attempt
this but just looking a
On 7/24/03 11:00 AM, "Jim Blevins" <[EMAIL PROTECTED]> wrote:
(B
(B> How does one go about blacklisting an entire network, say for example
(B> [EMAIL PROTECTED] does not seem to work?
(B>
(B
(Byou'd want to block it at your MTA or possibly using a firewall setting.
(B
(B
(B
(Bhowever, bl
> I can't help but notice how many more spams have begun to show up with
> scores of 4.5, or 4.0. or 4.8.
>
> I know this may have been mentioned before, but maybe the spammers are
> using SA to design their spams??
Maybe,
But I think Spam has just evolved somewhat since 2.55 came out, and theres
On Wed, 23 Jul 2003, Matt Kettler wrote:
> At 07:24 PM 7/23/03 -0500, Bob Apthorpe wrote:
> >It kept hanging here too, but turning off network checks fixed that.
> >Apparently Net::DNS on Win32 is less than reliable. Accuracy is down but
> >reliability is up.
>
> That's because the windows versio
I can't help but notice how many more spams have begun to show up with
scores of 4.5, or 4.0. or 4.8.
I know this may have been mentioned before, but maybe the spammers are
using SA to design their spams??
mh
---
This SF.Net email sponsored
How does one go about blacklisting an entire network, say for example
[EMAIL PROTECTED] does not seem to work?
Thanks,
DD
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums
At 08:43 PM 7/23/2003 -0400, Jack Gostl wrote:
> > > Yes it does and its not that hard. Its called SAproxy. Get it from
> > > http://saproxy.bloomba.com. I'm using it right now on the Window
2000 Pro
> > > machine with two Eudora personalities. Works great - a little slow at
> > > times but i
At 07:24 PM 7/23/03 -0500, Bob Apthorpe wrote:
It kept hanging here too, but turning off network checks fixed that.
Apparently Net::DNS on Win32 is less than reliable. Accuracy is down but
reliability is up.
That's because the windows version of perl doesn't support alarms, so any
DNS timeouts don
On Wed, 2003-07-23 at 18:25, william f guyton jr wrote:
A good point, I have attached the two image spams I have been testing
the gateway with.
> At 05:46 PM 7/23/2003 -0500, william f guyton jr wrote:
>
> > I am trying to up the score site wide using the local.cf file, I added the
> > follow
At 04:10 PM 7/23/03, Theo Van Dinter wrote:
>Re [SAtalk] Razor 2.34 SA 21..ems
Arghh -- brain dead mail client. Thanks for the M::SA::DNS... tip.
I found out something even more interesting while I was doing some testing
today.
If I
su - spamd
spamassassin -tD < sample-spam.txt
I find that th
Howdy all,
I am messing around with bogofilter and I want to have spamassassin
train it. There is an example as to how to do this on the bogofilter
FAQ at
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/*checkout*/bogofilter/bogofilter/doc/bogofilter-faq.html#spamassassin
but my problem wit
> > > Yes it does and its not that hard. Its called SAproxy. Get it from
> > > http://saproxy.bloomba.com. I'm using it right now on the Window 2000 Pro
> > > machine with two Eudora personalities. Works great - a little slow at
> > > times but it works just fine.
> >
> > I had to give up on i
Hi,
On Wed, 23 Jul 2003, Jack Gostl wrote:
> > Yes it does and its not that hard. Its called SAproxy. Get it from
> > http://saproxy.bloomba.com. I'm using it right now on the Window 2000 Pro
> > machine with two Eudora personalities. Works great - a little slow at
> > times but it works just
On Thu, Jul 24, 2003 at 12:00:13AM +0100, Nix wrote:
> Spam actually seems to differ quite a lot between individuals,
Really? Why would that be the case? The whole point of spam is that it's
intended for no one in particular and they make no research to find out if
you are at all likely to in
On Tue, 22 Jul 2003, Daniel Carrera stipulated:
> Hi all,
>
> Does anyone have a pool of spam they can lend me? ;)
>
> I'm trying to teach SA's Bayesian filer. I have no shortage of ham to
> give it. I brought the ham pool almost to 500 messages just today. But I
> only have 60 spams to gi
At 05:46 PM 7/23/2003 -0500, william f guyton jr wrote:
I am trying to up the score site wide using the local.cf file, I added the
following to the local.cf file and resent three spams which are mostly
images, and I dont see the HTML_IMAGE_ONLY_02
test being checked: running v2.55
I hate to poin
On Tue, 22 Jul 2003, John McGivern stated:
> I did the \ in front of the @ and the . and that works great. So a \
> goes in front of any symbol that means something in regex to negate it
> and treat it like a character.
It's called `escaping' (negation is something quite different in
regexps), bu
Daniel J. Andrea II wrote:
Well, I've had SpamAssassin running for a long time now and really
liked how it's working, except for one thing. I've NEVER had the
Bayes part working in my install. :-/
I've got it installed on a Redhat 9 box. It appears that the bayes
database is being updated by SA
I am trying to up the score site wide using the local.cf file, I added the following to the local.cf file and resent three spams which are mostly images, and I dont see the HTML_IMAGE_ONLY_02
test being checked: running v2.55
Start SpamAssassin results
7.10 points, 5 required;
* -0.3 --
> Yes it does and its not that hard. Its called SAproxy. Get it from
> http://saproxy.bloomba.com. I'm using it right now on the Window 2000 Pro
> machine with two Eudora personalities. Works great - a little slow at
> times but it works just fine.
I had to give up on it. It kept hanging.
At 05:06 PM 7/23/2003 -0400, Adam Denenberg wrote:
debug: is spam? score=-4.2 required=5 tests=BAYES_01,HTML_10_20
Received: from localhost [127.0.0.1] by mx1
with SpamAssassin (2.55 1.174.2.19-2003-05-19-exp);
Wed, 23 Jul 2003 16:59:08 -0400
yet the headers in the actual email yiel
I wanted to , but just tooo many :)
Keep the rules coming! I'm editing away. I'll update tomorrow around lunch
time. I think this will help move along the discussion wiki when people see
the collection of rules.
I've already learned a bunch of new things, seen many rules that could be
written m
Hi all...when I pipe a message through 'spamassassin -r', I get the
following messages (Nx means repeated that many times).
20 x
Malformed UTF-8 character (unexpected continuation byte 0xa0, with no
preceding start byte) in transliteration (tr///) at
/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssass
matt,
i apologize. not sure how, but is seems that my email address got
obscured in the auto-whitelist somehow (maybe testing too much spam to
myself?). Any way to remove my entries from the awl ?
check_whitelist output
50.1 (50.1/42) -- [EMAIL PROTECTED]|ip=10.176
5.8
On Wed, Jul 23, 2003 at 03:31:12PM -0500, Rich Duzenbury wrote:
> OK, I'll settle for a bit of documentation on how SA calls razor. Anyone
> know which module calls razor, or have any details about how it's done? I
> don't mind fooling with it a bit...
I actually know quite a bit about it. To
hmm.. when piping the mail thru spamassassin -tD it yields
debug: is spam? score=-4.2 required=5 tests=BAYES_01,HTML_10_20
Received: from localhost [127.0.0.1] by mx1
with SpamAssassin (2.55 1.174.2.19-2003-05-19-exp);
Wed, 23 Jul 2003 16:59:08 -0400
yet the headers in the actu
At 03:47 PM 7/23/2003 -0400, Adam Denenberg wrote:
nevermind i found it, thanks.
SO report_safe 2 will mark _ALL_ html mail as spam ?
Sigh. Where'd you get that idea? I never said, or even remotely implied
that.. GTUBE is the one that will force a message to get tagged.
I thought it would only
OK, I'll settle for a bit of documentation on how SA calls razor. Anyone
know which module calls razor, or have any details about how it's done? I
don't mind fooling with it a bit...
Thanks.
Regards,
Rich
At 10:06 PM 7/22/03, Rich Duzenbury wrote:
Hi all,
I've been using SA for some time wit
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Mike,
> > dcarrera ~$ # The following step takes about 1.5 hours.
> > dcarrera ~$ sa-learn --spam --showdots --mbox spam_borrowed_10
> > ...
> > Learned from 11 messages.
> > dcarrera ~$ grep 'Subject: ' spam_borrowed_10 | wc -l
> > 6
On Wed, 23 Jul 2003 12:31:10 -0400, you wrote:
>You are denying a message I sent to the spamassassin list and you! You are
>denying it because it looks like spam! Please don't do this for posts to the
>SA list or direct replies to you from a post you made on the SA list, or 90%
>of the reply/posts
On Wed, 23 Jul 2003 16:04:11 -0400, you wrote:
>
>
>> -Original Message-
>> From: Michael W. Cocke [mailto:[EMAIL PROTECTED]
>> Sent: Wednesday, July 23, 2003 4:00 PM
>> To: Chris Santerre
>> Subject: Re: [SAtalk] FW: Returned mail: see transcript for details
>>
>>
>> On Wed, 23 Jul 2003
Raul Dias wrote:
So, what is the largest spam size you have seen?
What size limit are you working with (if there is a limite at all)?
Someone on the Amavis list mentioned 50MB lately. That was not a spam,
but one of his user's demands for an MPEG or something like that for
file transfer via smtp
Chris Santerre wrote:
You are denying a message I sent to the spamassassin list and you! You are
denying it because it looks like spam! Please don't do this for posts to the
SA list or direct replies to you from a post you made on the SA list, or 90%
of the reply/posts will be denied!
An increasin
[EMAIL PROTECTED] wrote:
you can do exim compiled in with spamassassin. there's a patch that
does this called sa-exim
sa-exim.sf.net
exim.org
someone asked how to do this last week, and there were some posfix and
sendmail approaches as well
Basically, one has to have a really good idea
nevermind i found it, thanks.
SO report_safe 2 will mark _ALL_ html mail as spam ? I thought it would
only "defang" html mail tagged as spam ?
I tried sending a few random html emails to myself and they all got
tagged. I would like to only defang html email marked as spam, is this
possible ?
On Wed, Jul 23, 2003 at 10:26:57AM -0700, C. Regis Wilson wrote:
> I would also like to see if this is a useful concept: a time of day rule that
> can add a score to mail sent in "the dead of night". This is probably not
> universally desired, and maybe should only be a localized setting. That's
At 03:32 PM 7/23/2003 -0400, Adam Denenberg wrote:
sorry, what is the GTUBE string exactly ?
adam
requoting an old email of mine (pardon minor lack of proper context)
--
Better yet, SA has a EICAR-ish feature called GTUBE, use that.
Any email containing the GTUBE gets 1,00
sorry, what is the GTUBE string exactly ?
adam
On Wed, 2003-07-23 at 14:04, Matt Kettler wrote:
> At 12:06 PM 7/23/2003 -0400, Adam Denenberg wrote:
> >Is there any way to test the results of report_safe 2?
> >
> >thanks
> >adam
>
> Send yourself an HTML-only message with the GTUBE string in it
I would also like to see if this is a useful concept: a time of day rule that
can add a score to mail sent in "the dead of night". This is probably not
universally desired, and maybe should only be a localized setting. That's
fine. What I'd like (for example):
TIMEZONE = Eastern
TIMEOFDAY_1900
On Wed, 23 Jul 2003, Joe Julian wrote:
> I have a list of specific trusted addresses in my whitelist, but it
> still won't autolearn from them. Why not? Their scores are quite
> negative, way below -2, but it still won't autolearn from them. It looks
> like it's ignoring the whitelist when checkin
Ok, I've seen lots of requests and no responce for a SpamAssassin rules
wiki. Maybe I'm wrong, but I don't recall any responses saying "I have
one here".
In an attempt to give back to the community, I've setup a wiki at
www.exit0.us that can be use for this purpose.
Please consider this a formal
At 12:06 PM 7/23/2003 -0400, Adam Denenberg wrote:
Is there any way to test the results of report_safe 2?
thanks
adam
Send yourself an HTML-only message with the GTUBE string in it and see if
it gets converted to a text/plain attachment?
---
At 11:54 AM 7/23/2003 -0500, Sean O'Neill wrote:
>SpamAssassin doesn't generally run on a windows desktop type computer
(it's quite difficult to do so). It's usually run by ISP's and companies
on their mailservers.
Yes it does and its not that hard. Its called SAproxy. Get it from
http://sapr
Hi Chris,
Great site/idea!
Let me do one sugestion.
For every file/contribution append some PREFIX based on the author
for each rule.
e.g. SUBJECT_LIGHT would be CHRIS__SUBJECT_LIGHT if the author is Chris.
This would:
1 - Give proper credit to the authors as it would be more visible in
t
Matt Kettler wrote:
>
> SpamAssassin doesn't generally run on a windows desktop type computer
> (it's quite difficult to do so). It's usually run by ISP's and
> companies on their mailservers.
Hi,
it does here for some months. And I got running SpamD/SpamC since two
weeks. It's fast and without p
At 11:35 AM 7/23/2003 -0400, Matt Kettler wrote:
At 02:16 PM 7/23/2003 +0200, Chris Schuepp wrote:
Hi there -
I never intentionally downloaded SpamAssassin and it's not on my computer
either... However, I receive "this is probably spam"-messages every now
and then when I send out stuff through a
>If you read the bug entry, there's a work-arround in there to use a custom
>rule to have the same basic functionality.
>
>http://bugzilla.spamassassin.org/show_bug.cgi?id=883
>
This worked perfectly. Thank you very much. I did two things: Renamed it
for me to LOCAL_BAD_TO_ADDRESS and also adde
You are denying a message I sent to the spamassassin list and you! You are
denying it because it looks like spam! Please don't do this for posts to the
SA list or direct replies to you from a post you made on the SA list, or 90%
of the reply/posts will be denied!
CC'd to the list so that others wo
Ok, I did it real quick.
Web site with a bunch of rules is up. Please send me your rules! I have rules
from people but I don't have permission to post to web. So If you send them to
me I will add them and give you credit.
The more the better! I'm
already working on the next version becaus
Is there any way to test the results of report_safe 2?
thanks
adam
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an
Utter, utter crap from women.
And I've been a lesbian *all my life*. Always preferred women to men.
There's gratitude for you, boyo.
Tony
--
Tony Earnshaw
Sometimes I'd rather read top-posted messages.
I wonder why ...
http://j-walk.com/blog/docs/conference.htm
http://www.billy.demon.nl
Mail: [
At 02:16 PM 7/23/2003 +0200, Chris Schuepp wrote:
Hi there -
I never intentionally downloaded SpamAssassin and it's not on my computer
either... However, I receive "this is probably spam"-messages every now
and then when I send out stuff through a couple of yahoogroups-based email
lists that I
At 05:22 PM 7/23/2003 +1000, Rod wrote:
Hello.
I have just implemented Spamassassin into my E-mail filter and
would like some help with sa-learn.
I have all e-mail incomming going to directory /var/spool/mail/user
I'm running Linux, the OS version I doubt would b
Tony Earnshaw wrote:
I had the attached Abacha masterpiece slip through. No problem,
Hmmm. Don't look lik Mozilla 1.4 made such a good job of the attachment,
at first sight.
"Knip 'n plak" below:
__
From [E
On Wed, 23 Jul 2003 14:16:11 +0200 "Chris Schuepp" <[EMAIL PROTECTED]> wrote:
> Hi there -
>
> I never intentionally downloaded SpamAssassin and it's not on my
> computer either... However, I receive "this is probably spam"-messages
> every now and then when I send out stuff through a couple of
>
I will be out of the office starting 07/23/2003 and will not return until
07/24/2003.
I am out of the office attending the GOVSEC expo in Washington, DC. I will
respond to your message when I return. If you need anything that is of an
urgent nature, please contact Leslie Branch x 2826 or Carl
Hi Everyone,
I have SA 2.55 with qmail/vpopmail et al and I'm calling spamc in my .qmail-default
file and it works fine. One thing I can't get to work is the X-Spam-Status:Yes/No and
other header info written into the headers of emails. I have tried a few different
options in my local.cf file
I have a list of specific trusted addresses in my whitelist, but it
still won't autolearn from them. Why not? Their scores are quite
negative, way below -2, but it still won't autolearn from them. It looks
like it's ignoring the whitelist when checking whether or not it should
autolearn. What can I
Hello,
I've updated the spamassassin 2.55
French translation,
i tried to avoid types errors,
orthography errors
thanks a lot for
Spamassassin
Arnaud
Bled
30_text_fr.cf
Description: Binary data
you can do exim compiled in with spamassassin. there's a patch that
does this called sa-exim
sa-exim.sf.net
exim.org
someone asked how to do this last week, and there were some posfix and
sendmail approaches as well
On Wednesday, July 23, 2003, at 09:29 AM, Christopher M. Iarocci wrote:
I h
Hi there -
I never intentionally downloaded SpamAssassin
and it's not on my computer either... However, I receive "this is probably
spam"-messages every now and then when I send out stuff through a couple of
yahoogroups-based email lists that I run. It's always the "toner cartridge" that
d
- Original Message -
From: "mikea" <[EMAIL PROTECTED]>
To: "SA List" <[EMAIL PROTECTED]>
Sent: Wednesday, July 23, 2003 2:28 PM
Subject: Re: [SAtalk] Pyzor not working?
> It appears to me (I could be wrong) that SA is trying to check the
> mail against a Pyzor server, and that it got n
I have a task in front of me that includes setting up a Linux server with an
MTA that is using SpamAssassin to filter email. The server's job will
simply be to filter incoming mail, and relay it to the POP server. My
question is, which MTA would be best for this task in your opinion. Also,
the M
Hi,
I am currently working with a message size limit of 512000 bytes.
However, I am starting to get non filtered spam that have some
images attached to it which makes the mail larger than the 500KB
limit.
So, what is the largest spam size you have seen?
What size limit are you working with (if t
> -Original Message-
> From: Michael W. Cocke [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, July 23, 2003 7:43 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Rule problem
>
>
> Everytime I think I'm starting to understand this thing... GR.
>
> Could come kind person tell me what I
On Wed, Jul 23, 2003 at 12:42:34AM -0400, Daniel Carrera wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> I'm trying to teach SA. I just fed it a about 7,000 spam messages and it
> claims to have only learned from 11. Here is the output:
>
> dcarrera ~$ # The following step takes a
At 07:43 AM 7/23/2003 -0400, Michael W. Cocke wrote:
Everytime I think I'm starting to understand this thing... GR.
Could come kind person tell me what I'm doing wrong? As near as I can
figure, this rule -
body IPURL /http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/i
describe IPUR
On Tue, 22 Jul 2003, Justin Mason wrote:
> Nik Conwell writes:
> >Just curious why you didn't implement code to walk the breadth of the namespace
> >of the object and delete every member variable? Performance issues?
>
> Hmm, never occurred to me ;) That would be a worth a try.
Sorry, I've go
On Wed, Jul 23, 2003 at 12:13:03AM +0200, Jim Knuth wrote:
> Hi, what mean this?
> This is the output from "spamassassin -lint -D < sample-spam.txt"
>
>
> debug: executable for pyzor was found at /usr/bin/pyzor
> debug: Pyzor is available: /usr/bin/pyzor
> debug: entering helper-app run mode
> de
Hi, what mean this?
This is the output from "spamassassin -lint -D < sample-spam.txt"
debug: executable for pyzor was found at /usr/bin/pyzor
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: leaving helper-app run mode
Pyzor -> check failed: no response
The h
Everytime I think I'm starting to understand this thing... GR.
Could come kind person tell me what I'm doing wrong? As near as I can
figure, this rule -
body IPURL /http:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/i
describe IPURLReceived has URL link to IP address
score
> -Original Message-
> From: John Rudd [mailto:[EMAIL PROTECTED]
>
> Why? Because what I want is something that has the features of
> MailScanner (spam assasin + many configurable/pluggable virus
> scanners + attachment filename rules checking + a few other
> checks + configurable ac
Hello.
I have just implemented Spamassassin into my E-mail filter and would
like some help with sa-learn.
I have all e-mail incomming going to directory /var/spool/mail/user
I'm running Linux, the OS version I doubt would be of benafit, I'm just
looking for the propper syntax of the sa-lea
John Rudd wrote:
>
> Why? Because what I want is something that has the features of
> MailScanner (spam assasin + many configurable/pluggable virus scanners
> + attachment filename rules checking + a few other checks +
> configurable actions for various things), but with a mechanism like
> spamc/s
John Rudd wrote:
Did I see, at some point, a message indicating that someone was going
to write a generalized spamd that could be used for checking many
different things besides just spam assassin tests?
or was that wishful thinking on my part?
Searching through the archives, I found a thread ta
On Tue, 22 Jul 2003 17:49:55 +0200 Tony Earnshaw <[EMAIL PROTECTED]> wrote:
> Luis Hernán Otegui wrote:
>
> > Hi, folks, between yesterday and today I've been suffering DOS attacks
> > using messages like the one I've attached.
> > Many times I've received messages of such this style, but they w
80 matches
Mail list logo
