Re: [SAtalk] spamassassin is ignoring every config file

I had something similar happen to me (fiddling around with Trustic stuff), and it took me a little bit to realize what was going on. Maybe the same thing is going on with you. What I didn't realize was that, as I was running spamd and using spamc to contact it, spamassassin was not being re-run fo

Re: [SAtalk] Problem installing spamassassin via per l -MCPAN

On Wed, Jul 30, 2003 at 08:49:00PM +0300, Jason Williams wrote: > My question is, i'm trying to learn SA as much as I can, so in > the future, I can adjust rules accordingly as well as setup > bayes. Is the SA home web site the best place to find out info > for that? Yes, the documents on the web

Re: [SAtalk] Spam Folder

--On Wednesday, July 30, 2003 9:58 PM -0500 Ken Marcum <[EMAIL PROTECTED]> wrote: I have not done something correctly in my installation. I get messages marked as Spam but they still come to my Inbox and do not go to my Spam folder. What do I need to do? Thanks for the help, You've done everyth

Re: [SAtalk] Spam Folder

At 09:58 PM 7/30/03 -0500, Ken Marcum wrote: I have not done something correctly in my installation. I get messages marked as Spam but they still come to my Inbox and do not go to my Spam folder. What do I need to do? Thanks for the help, Ken Marcum Based on your headers, it sounds like you're usin

Re: [SAtalk] spam flag NO despite high score

Luiz, (B (BOn 2003$BG/(B July$B7n(B 31$BF|(B Thursday, at 11:01 AM, Luiz L Souza wrote: (B (B> Thanks for the prompt reply. (B> Here are two examples of spamassassin info from emails I received: (B> (B> (1) From: Tail Wagging Offers News Letter (B> <[EMAIL PROTECTED]> (B> X-Sp

[SAtalk] Help

I have not done something correctly in my installation. I get messages marked as Spam but they still come to my Inbox and do not go to my Spam folder. What do I need to do? Thanks, Ken Marcum --- This SF.Net email sponsored by: Free pre-buil

[SAtalk] Spam Folder

I have not done something correctly in my installation. I get messages marked as Spam but they still come to my Inbox and do not go to my Spam folder. What do I need to do? Thanks for the help, Ken Marcum --- This SF.Net email sponsored by:

Re: [SAtalk] spam flag NO despite high score

Hmm.. I'm not really familiar with mimedefang, and the output it's put there isn't very informative. My first question would be how did you set your spam threshold to 1.5? What exact configuration file and command did you use? My next question would be can you generate a X-Spam-Status header,

Re: [SAtalk] spam flag NO despite high score

Thanks for the prompt reply. Here are two examples of spamassassin info from emails I received: (1) From: Tail Wagging Offers News Letter <[EMAIL PROTECTED]> X-Spam-Score: 5 X-Spam-Level: * (5) X-Spam-Flag: NO X-Scanned-By: MIMEDefang 2.28 (www.roaringpenguin.com/mimedefan

Re: [SAtalk] [RD] rule discussion

Raul Dias writes: >BTW, you don't need to localize $_ . >$_ is already localized per block {}. !? are you sure? --j. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are

Re: [SAtalk] 2.6 release - when?

On Thu, 31 Jul 2003, Simon Byrnand wrote: > At 10:40 29/07/2003 -0400, Tom Gwilt wrote: > >I am scanning around 50,000 messages in a 24 hour period for the 700 or so > >users who use SA. > > You're probably doing so already, but just to check, are you using DB_File > ? Any of the other database m

RE: [SAtalk] [RD] rule discussion

Em Qua, 2003-07-30 às 21:05, Phil Iovino escreveu: > > But I would agree that those who don't speak Perl should not > > attempt to > > write their own eval functions. (Basically, "if you don't > > speak Perl, don't > > try writing some Perl. Especially if it's going to affect > > your mail del

Re: [SAtalk] [RD] rule discussion

Em Qua, 2003-07-30 às 18:14, Mark escreveu: [...] > sub check_for_blackholed_recipients { > local $_; > my ($self) = @_; >($_ = $self->get('ToCc')) =~ s/\(.*?\)//g; > return (check_for_blackholes ((m/([EMAIL PROTECTED](?:[\w.-]+\.)+\w+)/g))); > } BTW, you don't need to localize $_

RE: [SAtalk] [RD] rule discussion

> Hey, lots of people don't know Perl. Maybe they've been > concentrating on C, > or Python, or they're too busy with becoming expert at the > ins and outs of > their MTA, MDA, and related systems. It doesn't make them > "blithering idiots". > > But I would agree that those who don't speak Pe

Re: [SAtalk] Bayesian Filter is rather CPU Hungry

At 13:04 29/07/2003 +0200, Rabie van der Merwe wrote: I upgraded for SpamAssassin 2.44 to 2.55 and now my box has gone from a loadaverage of about 0.5 - 2 to about 1.5 - 20+ and I am running a dual 2.4G Zeon Proliant ml350 with 2Gb of ram and 4 36Gb Raid 0+1. Looking at vmstat and other I can see t

Re: [SAtalk] 2.6 release - when?

At 10:40 29/07/2003 -0400, Tom Gwilt wrote: Hi all, Just wondering what the date is scheduled for the 2.6 release? I'm running 2.55 on a production mail server using bayes filtering, and the constant bayes database updates (for lack of a better term) are killing me. I have tried all the tricks in

[SAtalk] SA enhancement idea: report_safe threshold

I've been pondering an idea for an improvement to SA. Would anyone else find the following to be useful: report_safe_attach_threshold -- set threshold above which a mail has to score to have report_safe level 1 applied (attach original message as MIME part) report_safe_defang_threshold -- set

[SAtalk] Is there a way to use a directory path for the userprefs_filename or site_rules_filename instead of a single file, to have multiple .cf files loaded?

SpamAssassin 2.55, personal use (single user install) Mail::SpamAssassin Is there a way to use a directory path for the userprefs_filename or site_rules_filename instead of a single file, to have multiple .cf files loaded? I am passing rules_filename a directory path for the main rules and t

[SAtalk] local eval rules

Mark writes: >Local eval tests are really very useful. The only thing I do not like, is >that you have to edit the existing source (EvalTests.pm). I had rather seen >something like "user_eval:", which is like "eval:", but only looks for the >subs in, say, UserEval.pm (initialized like EvalTests.pm

RE: [SAtalk] Newbie... some questions

> -Original Message- > From: AltGrendel > On Tue, 2003-07-29 at 17:32, Bonny wrote: > > In data 29 Jul 2003 15:31:04 -0400 > > AltGrendel <[EMAIL PROTECTED]> scriveva: > > > > > Yes, but you will probably have to use the nodeps option. > > > > Why this? I mean, when UNinstalling, what

RE: [SAtalk] [RD] rule discussion

At 7/30/03 01:35 PM , Chris Santerre wrote: > If you don't speak Perl, then learning it should be your > first step in > trying to write any new eval rules. And learning Perl is > outside the scope > of any SA or rule-writing documentation. Ah! So the first thing of eval test should be "Perl for b

Re: [SAtalk] [RD] rule discussion

- Original Message - From: "Yorkshire Dave" <[EMAIL PROTECTED]> To: "spamassassin list" <[EMAIL PROTECTED]> Sent: Wednesday, July 30, 2003 7:41 PM Subject: RE: [SAtalk] [RD] rule discussion At 7/30/03 10:29 AM , Yorkshire Dave wrote: >I managed to figure how to write my own eval test by

[SAtalk] ReWrite

Hi, I'm using SA+qmail+vpopmail Can I rewrite the top header of each mail? example: I want to add "Report this email as spam" (with a link) I need this to build a script to do sa-learn more automatic... thanks -- --- Flavio Caetano Administrador de Redes http://w

RE: [SAtalk] [RD] rule discussion

> -Original Message- > From: Kai MacTane [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 30, 2003 3:12 PM > To: spamassassin list > Subject: RE: [SAtalk] [RD] rule discussion > > > At 7/30/03 10:29 AM , Yorkshire Dave wrote: > > >I managed to figure how to write my own eval test by r

Re: [SAtalk] WHITELIST QUESTION

At 01:12 PM 7/30/2003 -0600, Alan Fullmer wrote: I have a question for someone. What does Whitelist_from actually look at? all headers? or a single one? Is there a way to whitelist this line: From: "Alan Fullmer" <[EMAIL PROTECTED]> any ideas? thanks in advance. w

Re: [SAtalk] WHITELIST QUESTION

On Wed, 30 Jul 2003, Alan Fullmer wrote: > I have a question for someone. > > What does Whitelist_from actually look at? all headers? or a single one? > > Is there a way to whitelist this line: From: "Alan Fullmer" > <[EMAIL PROTECTED]> Here is how I would do it: whitelist_from [EMAIL PROTEC

Re: [SAtalk] What are the rules for whitelist_from file-glob-stylepatterns?

Hi Clark, On Wed, 30 Jul 2003, Clark I Anderson wrote: > What are the detailed requirements for file-glob-style patterns used for > items in whitelist_from, Etc.? > > How extensively can you use asterisks? (e.g.: [EMAIL PROTECTED] > *elsewhere* )? > > What is the minimum part of an email

[SAtalk] spamassassin is ignoring every config file

I've got spamassassin working on my machine, by and large. It does its thang. But, I've got a config in /etc/spamassassin/local.cf (as I had had on a prior machine) that has, among other things, "report_safe 0". Further, in my own directory, I've got .spamassassin/user_prefs which has

RE: [SAtalk] [RD] rule discussion

At 7/30/03 10:29 AM , Yorkshire Dave wrote: I managed to figure how to write my own eval test by reading the source code. Anyone who isn't at a level where they can do that really shouldn't be trying to, or they're going to shoot themselves in the foot. I'm not trying to dissuade anyone from tryin

[SAtalk] SA 2.55 & mySQL Problem

I'm currently using SA 2.55 with qmail-1.03+vpopmail+qmail-scanner. I don't have a problem with SA running per se. I'm using mySQL to store my preferences, using HORDE's SAM module to modify it. Here's my actual problem: users can't seem to override the @GLOBAL defaults set in the table. Here a

RE: [SAtalk] [RD] tiny comment 'gaps', --lint

> > But I purposely set one of my rules to "awbody" instead of > > "rawbody" and --lint didn't catch it. > > Which version of SA are you running? 2.55 --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports,

[SAtalk] WHITELIST QUESTION

I have a question for someone.   What does Whitelist_from actually look at?  all headers? or a single one?   Is there a way to whitelist this line:  From: "Alan Fullmer" <[EMAIL PROTECTED]>     any ideas?  thanks in advance. Alan Fullmer Owner / Administrator

RE: [SAtalk] [RD] tiny comment 'gaps', --lint

On Wed, 30 Jul 2003, Ian Douglas wrote: > > Also Spammassassin -d --lint is only going to say something if you get a > > syntax wrong. So your doing a great job if you don't get anything. That is > > what you want. > > But I purposely set one of my rules to "awbody" instead of "rawbody" and --lint

[SAtalk] sa-learn hanging?

This started happening yesterday on one of my servers, and just now on another server and I can't seem to diagnose it (that is, I don't know what to start looking for). When I run sa-learn on known spam/ham, I get output like this: .

Re: [SAtalk] [RD] tiny comment 'gaps'

At 10:17 AM 7/30/2003 -0700, Ian Douglas wrote: Also, what exactly is "spamassassin --lint" supposed to do for me when I point it at my rules file? It always just returns to the shell prompt, never outputs anything. the --lint option will show you any syntactic complaints SA has while trying to pa

RE: [SAtalk] [RD] tiny comment 'gaps', --lint

> rawbody MY_HTML_OBFU /|<[^pbiu]>/i > describe MY_HTML_OBFU too long or short HTML comments > score MY_HTML_OBFU 1.55 kay, I added a t in the [^pbiu] check since I send out newsletters with tables in HTML format as well as receive copies of those messages. Wouldn't want those misappropriately def

Re: [SAtalk] pyzor (help needed)

Hi, I had a similar problem when I installed pyzor. In my case, I am running spamd with a spamd user with its $HOME dir set to /var/lib/spamassassin. The only way to solve this was to set -H /var/lib/spamassassin/ in the line I call spamd in my initscript. I think that the cause of this is that s

RE: [SAtalk] [RD] tiny comment 'gaps'

> -Original Message- > From: Ian Douglas [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 30, 2003 1:17 PM > To: SpamAssassin list > Subject: [SAtalk] [RD] tiny comment 'gaps' > > > Hey all, > > Got a spam with a whole bunch of or or some other > letter of the > alphabet separating

RE: [SAtalk] [RD] rule discussion

> hmm, eval tests for idiots, kinda sounds like loaded shotguns for > idiots, should reduce the idiot count but is that really what is > desired? :) Oh, I'd be quite happy with less idiots in the world ;o) Wait, was that out loud? -id --- Th

RE: [SAtalk] [RD] rule discussion

On Wed, 2003-07-30 at 15:13, Chris Santerre wrote: > 3) This seems to be the topic recently. People would like to get a little > better then simple rule writing. I haven't looked into writing eval tests at > all. I think there is a good reason why there is little to no info on this. > Devs don't n

Re: [SAtalk] spam flag NO despite high score

At 11:01 AM 7/30/2003 -0400, Luiz L Souza wrote: My mail provider uses spamassassin. I have set the spam threshold to a low value, 1.5, and added some entries to my 'allow' and 'deny' lists in order to reduce the number of spam that gets through spamassassin. Most of the spam is correctly identif

[SAtalk] [RD] tiny comment 'gaps'

Hey all, Got a spam with a whole bunch of or or some other letter of the alphabet separating various 'catch' words/phrases. I'd like to do something like this: body COMMENT_GAPS_1/<\![A-Z]>/i describe COMMENT_GAPS_1 etc score COMMENT_GAPS_10.1 body COMMENT_GAPS_2

RE: [SAtalk] Hebrew "i" ?? male organ spam

this is exactly what I was looking for. Thank you for pointing me in the right direction! However, I'm still unable to make it work. When you pointed out the hex representation to me, it turned on the light and now I know I can paste those characters in multi edit and look at it in hex mode if I

[SAtalk] Re: [AMaViS-user] Amavis-new and Spamassassin question

Well, I setup my user as vscan with the home directory of /var/amavis [EMAIL PROTECTED] bird]# getent passwd vscan vscan:x:501:502::/var/amavis:/bin/bash [EMAIL PROTECTED] bird]# ls -lad /var/amavis/ drwxr-x---5 vscanvscan4096 Jul 29 17:36 /var/amavis/ drwx--2 vscanvsca

Re: [SAtalk] [OT] Interesting results from emporium :)

You know that's implying that spammers as "bright" as the average script-kiddie? Isn't that being a bit generous? /tongue in cheek On Tuesday 29 July 2003 03:36 pm, Justin Mason wrote: > yes -- now and again. > > They're not really from Korea and China -- those are open proxies > or rooted machi

Re: [SAtalk] order of processes

On Wed, Jul 30, 2003 at 10:19:23AM -0500, Dana Holland wrote: > I just installed SpamAssassin with mimedefang and milter. It's working > fine, but I'm curious about the order in which processes are run. It > appears that the anti-spam software is processing before the access.db > table that I'

[SAtalk] order of processes

I just installed SpamAssassin with mimedefang and milter. It's working fine, but I'm curious about the order in which processes are run. It appears that the anti-spam software is processing before the access.db table that I've created. Is this correct? There are certain addresses that I wou

[SAtalk] spam flag NO despite high score

My mail provider uses spamassassin.  I have set the spam threshold to a low value, 1.5, and added some entries to my 'allow' and 'deny' lists in order to reduce the number of spam that gets through spamassassin.  Most of the spam is correctly identified. The problem is that some emails are f

Re: [SAtalk] Bayes ratios?

Thanks! I am thinking I will scp /var/spool/mail/thomas.cameron to my relay server and "sa-learn --ham" it once a week or so. -- Thomas Cameron, RHCE, CNE, MCSE, MCT Cameron Technical Services, Inc. http://www.camerontech.com/ (512) 454-3200 - Original Message - From: "Robert Menschel" <[

RE: [SAtalk] newbie: SA not catching contents in HTML

> -Original Message- > From: Gary Lopez [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 29, 2003 3:42 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] newbie: SA not catching contents in HTML > > > Good afternoon, > I'm sure I'm not unique to this, but I have search the > archives an

RE: [SAtalk] [RD] Random characters in SPAM

NICE! That's why I love this list! This is the kind of stuff we should be seeing in the wiki. Good call. This is why I tend to score my stuff low. Granted I haven't seen these in many of our emails, but one could add such words to a "Counter Q with no U" rule. There didn't seem to be that many...

Re: [SAtalk] [RD] Random characters in SPAM

Chris Santerre wrote: -Original Message- From: Daniel Bird [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2003 7:06 AM To: SA List Subject: [SAtalk] [RD] Random characters in SPAM Hi all, Someone posted a rule a while back to catch those little buggers, but for the life of me I can't

RE: [SAtalk] [RD] rule discussion

> -Original Message- > From: David Cary [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 29, 2003 3:00 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] [RD] rule discussion > > > Dear people annoyed at spam, > > I have an idea for a few rules, but I don't have any idea how > to implement

RE: [SAtalk] spamc/spamd not checking all messages

> -Original Message- > From: Dave Sill [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 30, 2003 8:03 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] spamc/spamd not checking all messages > > > I'm using 2.55 under Red Hat 8 and qmail with qmail-scanner-1.16. I > *think* this problem sta

RE: [SAtalk] [RD] Random characters in SPAM

> -Original Message- > From: Daniel Bird [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 30, 2003 7:06 AM > To: SA List > Subject: [SAtalk] [RD] Random characters in SPAM > > > Hi all, > Someone posted a rule a while back to catch those little buggers, but > for the life of me I can'

RE: [SAtalk] [OT] Interesting results from emporium :)

LOL, I'll spell your name right today :) NO worries, mates. I'm locked down tighter then a frog's bum. I actually have execs complaining it is too tight! Thanks for the offers of help. Nice to know I wasn't the only one getting scanned. Chris > -Original Message- > From: William Stearn

Re: [SAtalk] spamc/spamd not checking all messages

On Wed, 2003-07-30 at 09:02, Dave Sill wrote: > I'm using 2.55 under Red Hat 8 and qmail with qmail-scanner-1.16. I > *think* this problem started when I upgraded to 2.55 from 2.50, but > I'm not sure. I'm using nearly the same configuration at home and not > seeing this problem. > > What's happen

Re: [SAtalk] [RD] Random characters in SPAM

On Wed, 2003-07-30 at 07:06, Daniel Bird wrote: > Hi all, > Someone posted a rule a while back to catch those little buggers, but > for the life of me I can't find it. Can someone point me in the right > direction or re post please. > > TIA > > Dan Try Chris's site, he's got a lot of stuff the

[SAtalk] What are the rules for whitelist_from file-glob-style patterns?

What are the detailed requirements for file-glob-style patterns used for items in whitelist_from, Etc.? How extensively can you use asterisks? (e.g.: [EMAIL PROTECTED] *elsewhere* )? What is the minimum part of an email address that will be effective? Clark Anderson

Re: [SAtalk] Newbie... some questions

On Tue, 2003-07-29 at 17:32, Bonny wrote: > In data 29 Jul 2003 15:31:04 -0400 > AltGrendel <[EMAIL PROTECTED]> scriveva: > > > Yes, but you will probably have to use the nodeps option. > > Why this? I mean, when UNinstalling, what is nodeps good for? Ok, maybe I spoke out of turn here. But as I

[SAtalk] spamc/spamd not checking all messages

I'm using 2.55 under Red Hat 8 and qmail with qmail-scanner-1.16. I *think* this problem started when I upgraded to 2.55 from 2.50, but I'm not sure. I'm using nearly the same configuration at home and not seeing this problem. What's happening is that some spam (~5-10/day out of 60-70) is not bein

RE: [SAtalk] Hebrew "i" ?? male organ spam

On Tue, 29 Jul 2003, Jennifer Wheeler wrote: > > Thanks for the suggestion David, but we can't allow only English. We're > running this on a server with international clients. Guess I should > have mentioned that. :) > > > > And "í" is the only character that won't work in this rule... perhaps

[SAtalk] problem with SA+pipe+qmail

Hi, I'm using qmail and SA 2.55. I have this script instead of regular qmail- queue: spamassassin | /var/qmail/bin/queue This script works quite fine. But when I have this script instead of qmail queue...: spamassassin > /tmp/mail_file.txt cat /tmp/mail_file.txt | /var/qmail/b

[SAtalk] [RD] Random characters in SPAM

Hi all, Someone posted a rule a while back to catch those little buggers, but for the life of me I can't find it. Can someone point me in the right direction or re post please. TIA Dan Dan Bird Network and Systems Manager Department Of Information Services

Re: [SAtalk] sa-learn suddenly failing

Hello Giles, Tuesday, July 29, 2003, 4:07:58 PM, you wrote: GC> sa-learn suddenly failingWhenever I run sa-learn now I get the message: GC> Cannot open bayes_path $HOME/.spamassassin/bayes R/O: GC> Cannot open bayes_path $HOME/.spamassassin/bayes R/W: File exists Have you run sa-learn in debu

[SAtalk] pyzor (help needed)

Hello again! If someone has expirience with Pyzor, please help me to solve my problem. When I start "spamassassin -D < spam.txt", I got following strings in the output: [...] debug: Pyzor is available: /usr/local/python/bin/pyzor debug: entering helper-app run mode debug: Pyzor: got response: Tr

RE: [SAtalk] Bayesian Filter is rather CPU Hungry

Title: Untitled What box are you running, this morning my box is getting nailed.PS Perl-DB_File wasnt installed, I'll install and test again. :)Anyone have any other hints/tips.-Original Message-From: Mark [mailto:[EMAIL PROTECTED]Sent: 29 July 2003 14:24To: Rabie van der Merwe; [EMAIL

[SAtalk] new DNS-based RBLs

hei all, just wanted to announce I'm now publishing two dns-based lists of ip addresses that can be used for scoring. these lists comprise addresses of spammers doing dictionary attacks on my server. read about it at: http://nospam.arix.com/dns.php regards - erick