[SAtalk] Text in Subject: Triggering BODY Rule?

2003-08-21 Thread Kai MacTane
I've got a weird situation going on with some rules I'm testing. I'm trying to set up rules to catch various combinations of the real names (and nicknames) of my users. (Not all of this information is found in the /etc/passwd GECOS field, and I have few enough users that I can do this by hand.)

Re: [SAtalk] virus bounce rules

2003-08-21 Thread Yorkshire Dave
On Thu, 2003-08-21 at 03:29, [EMAIL PROTECTED] wrote: > as to routing them somewhere else... > > does SA have a custom header even possible? > > ie – if certain tests pass, throw in a SA: Virus_Bounce > > cos the only way i can think of tossing them into another bucket would > be to run a serie

RE: [SAtalk] FreeBSD + Sendmail

2003-08-21 Thread AltGrendel
On Wed, 2003-08-20 at 19:43, Mike Carlson wrote: > Well I got spamass-milter installed and when I send the test mail outlined in > the activation.txt file, my root user gets the messages and they are properly > marked, but when I set up my forwarding to my exchange box, none of the mail > that gets

[SAtalk] ver ystrange

2003-08-21 Thread landy
someone seems ot have fake my email address to send and i got this in return? From: Mail Delivery Subsystem <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Returned mail: see transcript for details Date: Tue, 19 Aug 2003 15:34:06 -0500 (CDT) The

Re: [SAtalk] Spam dropoff?

2003-08-21 Thread Nels Lindquist
On 20 Aug 2003 at 11:36, Stewart, John wrote: > I had a couple of users ask me today if there was a change to our mail > config, as the number of spams they received had dropped off considerably. I > personally didn't notice much (750+ spams since Sunday), but I'm wondering > if anyone else has no

Re: [SAtalk] auto_report_threshold

2003-08-21 Thread Patrick Morris
It's no longer an option in recent versions. It used to be the score at which a message would automatically be reported as spam to DCC, Razor, et al. For various reasons (all of them good ones, IMHO), it was removed. Louis LeBlanc wrote Most of this I understand, and I know some of this has c

Re: [SAtalk] virus bounce rules

2003-08-21 Thread AltGrendel
On Wed, 2003-08-20 at 15:28, Justin Mason wrote: > So I'm being driven nuts by AV software which mails "your message contains > a virus" notifications even when the virus is known to forge From addrs. > > Since they're not really anti-spam rules -- SpamAssassin's raison d'etre > -- I don't think t

Re: [SAtalk] Threaded lookups PLEASE!

2003-08-21 Thread Justin Mason
Glen Stewart writes: > The serial execution of queries and response-waiting really slows > SpamAssassin down. Can it be threaded so all the messages are loaded > and queries in parallel? em, it is. 2.60 has a much better algorithm too. --j. -

Re: [SAtalk] Deleting Spam Messages

2003-08-21 Thread Abigail Marshall
Hello Daniel, Wednesday, August 20, 2003, 9:09:09 AM, you wrote: DK> I am looking for documentation on how to configure DK> Spamassassin to delete all messages marked as spam DK> instead of the header change. I spoke to the partners in DK> company on the risk of doing this, however they have DK>

Re: [SAtalk] Configure to delete messages

2003-08-21 Thread Martin Radford
At Wed Aug 20 16:24:55 2003, Daniel Kaliel wrote: > I have been trying to find documentation on how to do this, but have not fo= > und any. I spoke with the partnership of my company on this and how it is = > safer not to, instead filtering email on there email client, however, they = > have deci

Re: [SAtalk] SpamAssassin 2.60 rc 1 released

2003-08-21 Thread Jim Knuth
> OK, this is 2.60 release candidate 1; it should work pretty excellently, > but we want to give it a day or two before it gets an official thumbs-up. > Download it from http://SpamAssassin.org/downloads.html . > Ok, fine. :-) How can I updating my system? (Debian 3.*) Just in time I use V 2.55 (

RE: [SAtalk] Exporting spam to txt file, then feeding to sa-learn, Howto?

2003-08-21 Thread Chris Santerre
> -Original Message- > From: Angel Gabriel [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 20, 2003 12:29 PM > To: Spam Assassin > Subject: [SAtalk] Exporting spam to txt file, then feeding to > sa-learn, > Howto? > > > I'm considering exporting all my spam to a txt file, and then

Re: [SAtalk] SpamAssassin 2.60 rc 1 released

2003-08-21 Thread Theo Van Dinter
On Thu, Aug 21, 2003 at 01:11:50PM +0100, Paul Hutchings wrote: > Excellent! Any idea roughly how long until it's on CPAN? being a release candidate, I would think it wouldn't appear on cpan. -- Randomly Generated Tagline: "I think it's wrong that only one company makes the game monopoly."

[SAtalk] Seperate Logfile for spamc

2003-08-21 Thread Jens Strohschnitter
Hi there, is it possible to write a seperate logfile for spamd/spamc that logs all spam-recognized mails ? The parameterlist of spamd/spamc showes me no command that I can use for. -- Regards, Jens Strohschnitter - *!!!LINUX LINUX LINUX LINUX LINUX!!!*

Re: [SAtalk] joe-jobs anyone?

2003-08-21 Thread Bob Proulx
Erick Calder wrote: > I'm getting a bunch of mails from MAILER-DAEMONs around the world > complaining mostly that [EMAIL PROTECTED] does not exist. > these are generated by dictionary spammers who are using my e-mail address > for the reply-to header. Are you sure they are spammers? I am getting

[SAtalk] trying something new to stop the 'enlarge your member' spam

2003-08-21 Thread Louis LeBlanc
My new method of stopping the spam . . . Good day sir. I am writing to inform you that I would like to be removed from every bulk email list your products are peddled through. I am writing to you at this address because, although the unsolicited messages I am receiving do contain a link to unsu

Re: [SAtalk] Appliances vs SA

2003-08-21 Thread Alan Leghart
On Wednesday, August 20, 2003, at 02:09 PM, K Old wrote: My problem is the IT Director loves SA too, but is wanting to purchase one of the Spam Appliances that handles all the updating, etc. for a fee. I can't see that it would be a wise investment as the appliances are at least $1500 and yearly

[SAtalk] reporting

2003-08-21 Thread Landy
i tried this but i get this error please help [EMAIL PROTECTED]:~> spamassassin -r < Mail/virustrack razor2 report failed: No such file or directory Razor2 report requires authentication at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Reporter.pm line 99. Warning, unable to report spam

[SAtalk] reporting

2003-08-21 Thread Landy
how would i use -r to report a message as spam, do i need to save it to a file? --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novel

Re: [SAtalk] (no subject)

2003-08-21 Thread Hannu Liljemark
On Wed, Aug 20, 2003 at 08:04:00PM +0300, Jchen22 wrote: > does anyone know spam sender "[EMAIL PROTECTED]"? There's little point in looking at the From: header to figure out who's sending the spam. Most of the addresses are almost as random as the addresses in the To: (well, or envelope recipien

[SAtalk] spamass-milter or mimedefang ?

2003-08-21 Thread Marcus Schopen
Hi, what's the best way to integrate spamassassin via sendmail's milter functionality in sendmail: spamass-milter or mimedefang? What are the basic differences between spamass-milter or mimedefang? Thanks, Marcus -- Marcus Schopen(0> P.O. Box 10 25 25 //\ Deutsche Zope User Grou

Re: [SAtalk] Repost: how does auto-learn work?

2003-08-21 Thread Ricardo Kleemann
Thanks again Matt. Question... if I have a false-negative which gets auto-learned as ham, and then I subsequently run sa-learn on it as spam, how does bayes handle that? Will the message be replaced as spam, or will there be some sort of internal conflict? Ricardo - Original Message Follows

[SAtalk] auto_report_threshold

2003-08-21 Thread Louis LeBlanc
I have a question. I was browsing the FAQ at spamcop, and the page at http://spamcop.net/fom-serve/cache/331.html has the following configuration recommendations: * skip_rbl_checks 1 * required_hits 10 * auto_report_threshold 30 * rewrite_subject 0 * report_header 1 * use_

Re: [SAtalk] SA & MySQL Setup Question

2003-08-21 Thread Jim
On Wed, Aug 20, 2003 at 01:41:48PM -0500, Eric Ochoa wrote: > I've searched through the lists and haven't found enough information to go > about this on my own so here goes: I have successfully installed SA+Razor > sitewide, I use qmail. I have a MySQL database running and the SASQL > plugin for

Re: [SAtalk] Crash while "make test" in 2.55 - how t o skip spamd?

2003-08-21 Thread Hannu Liljemark
On Wed, Aug 20, 2003 at 07:18:00PM +0300, Ulrich Babiak wrote: > I wanted to upgrade to 2.55 and ran into the following > problem: compiling works fine, but when the tests are > executed (make test) the machine just silently crashes > completely up to the point where even Ctrl-Alt-Delete does > no

Re: **SPAM RATING 12.50** [SAtalk] I've got a couple more I want to go after

2003-08-21 Thread Louis LeBlanc
On 08/22/03 10:00 AM, Simon Byrnand sat at the `puter and typed: > > I've gotten a couple interesting spams lately. Well, interesting > > in the sense that I am perplexed by them. > > > > Here's a couple attached. They are from two different domains, > > watchmeandlearn.com and ofcourseitwill.com

[SAtalk] (no subject)

2003-08-21 Thread Thomas Skaret Larsen
 

[SAtalk] 2.60 rc1 broke my Razor2?

2003-08-21 Thread Jim
debug: Razor2 is not available debug: running raw-body-text per-line regexp tests; score so far=2.077 debug: running uri tests; score so far=2.077 debug: uri tests: Done uriRE debug: running full-text regexp tests; score so far=2.077 debug: Razor2 is not available debug: Current PATH is: /sbin:/bi

Re: [SAtalk] Repost: how does auto-learn work?

2003-08-21 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Ricardo, Wednesday, August 20, 2003, 9:02:12 PM, you wrote: RK> I'm wondering how it is possible to keep bayes "fresh" with RK> both spam and ham, and understand how can SA do RK> auto-learning? RK> How exactly does SA automatically provide ha

RE: [SAtalk] new to spamassassin and do not know what the heck I am doing!

2003-08-21 Thread List
Hi Jenn, I don't know what your usage is but the following is a great howto. http://lawmonkey.org/anti-spam.html --Larry >-Original Message- >From: Jennifer Fountain >I am reading the online help and googling but I am not getting a clear >picture as to what to do. :( >Can anyone poi

FW: [SAtalk] Appliances vs SA

2003-08-21 Thread List
-Original Message- From: Chad Leigh > I've been using SA for at least a year or two now and love it! We > combine it with MailScanner with ClamAV and out of 20,000 emails per > week receive no viruses and block out around 4,000 pieces of > spam.and really only about 100 pieces of sp

[SAtalk] new to spamassassin and do not know what the heck I am doing!

2003-08-21 Thread Jennifer Fountain
I am reading the online help and googling but I am not getting a clear picture as to what to do. :( Can anyone point me to a good - here's how to install spamassasin and configure it? I searched the archives but I might just be too stupid 'cause I can't find anything :( Thanks to all! Cheers, Je

Re: [SAtalk] SA and razor not playing nice

2003-08-21 Thread Dale LaFountain
Hi Jeff, We have been having some hardware problems (we think) with our mail server, so I just installed a new hardware and software load yesterday including: G4 dual 1Ghz, 1GB RAM, dual 120GB drives with a trailing mirror OSX 10.2.6 w/ latest security patches Communigate 4.1.1, CLI.pm 2.6.2 Spa

Re: [SAtalk] Future of eval test?

2003-08-21 Thread Carl R. Friend
Gentlemen (and ladies), > Chris Santerre writes: > > I'm just curious as to something that was hinted on before. Will future SA > > versions allow users to write other evaltest files like .cf files now? > Yeah, it's definitely on the cards -- we have to do something like this. Oh, *please*

[SAtalk] using spamassasin with qmail

2003-08-21 Thread Jennifer Fountain
Hi, New to spamassassin - just installed it on my redhat 8.0 linux box. I have been looking for instructions on how to configure spamassassin with qmail. I located two docs via google but they are somewhat different: http://sylvestre.ledru.info/howto/howto_qmail_spamassassin.php http://www.magma

Re: [SAtalk] Maildir, procmail, and SA ****help

2003-08-21 Thread butrus orman
NONE of these emails are arriving at my account at [EMAIL PROTECTED] can someone shed some light --- Chris Thielen <[EMAIL PROTECTED]> wrote: > Procmail does support Maildir. However, I don't > think it will create the > Maildir directories for you, if they don't exist > already. > > > Jari Fr

Re: [SAtalk] verifying spam assassin list

2003-08-21 Thread butrus orman
none of these emails i recieve at [EMAIL PROTECTED] can someone shed some light --- butrus orman <[EMAIL PROTECTED]> wrote: > please ignore > using a diff email address to see if posting makes > it > please dont consider this a spam but i am having > problems posting to the list [i think] > > >

Re: [SAtalk] Maildir, procmail, and SA

2003-08-21 Thread Chris Thielen
Procmail does support Maildir. However, I don't think it will create the Maildir directories for you, if they don't exist already. Jari Fredriksson said: > Kai MacTane wrote: >> At 8/20/03 07:27 AM , Keith Olmstead wrote: >> >>> $home/Maildir/ >>> >>> It is not creating the Maildir dir, but inst

Re: [SAtalk] what a great tool

2003-08-21 Thread Chris Thielen
I assume you meant 8-10 per day? I don't think 3-5 spams per month would massively affect my productivity! ;) But, yeah... SA is a great tool. I'm down to about 1 FN per week from about 10 daily. Chris S.M.C Butler said: > > hi all, > > i've been running SA for about 4 months now and have to s

[SAtalk] verifying spam assassin list

2003-08-21 Thread butrus orman
please ignore using a diff email address to see if posting makes it please dont consider this a spam but i am having problems posting to the list [i think] __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.c

Re: [SAtalk] Configure to delete messages

2003-08-21 Thread Jack L. Stone
At 09:24 AM 8.20.2003 -0600, Daniel Kaliel wrote: I have been trying to find documentation on how to do this, but have not found any. I spoke with the partnership of my company on this and how it is safer not to, instead filtering email on there email client, however, they have decided to ha

Re: [SAtalk] Maildir, procmail, and SA

2003-08-21 Thread Jari Fredriksson
Kai MacTane wrote: > At 8/20/03 07:27 AM , Keith Olmstead wrote: > >> $home/Maildir/ >> >> It is not creating the Maildir dir, but instead just creating the >> cur, new, and tmp dir. > > You know that, for a Maildir delivery, you should already have the > /tmp, /new and /cur directories created, ri

[SAtalk] what a great tool

2003-08-21 Thread S.M.C Butler
hi all, i've been running SA for about 4 months now and have to say that it is an awesome app. i get less than 5 spams a month now compared to the 8-10 i used to get.. its made a massive impact on my producitivity. thx alot!! --- This SF.

RE: [SAtalk] catching the Banned CD spam!

2003-08-21 Thread John McGivern
Guess what I found out! The banned CD really does work! My copy arrived in the mail today and so far I've changed my identity, spied on my boss, evaded my taxes, I even have a date with Brittany Spears! Its really really great Mick Jagger I'm just kidding, its not Mick, really, just John.

RE: [SAtalk] SpamAssassin 2.60 rc 1 released

2003-08-21 Thread SRH-Lists
> Excellent! Any idea roughly how long until it's on CPAN? > > regards, > Paul > -- RC's don't go into CPAN, only actual releases, IIRC. -steve --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems

[SAtalk] I've got a couple more I want to go after

2003-08-21 Thread Louis LeBlanc
I've gotten a couple interesting spams lately. Well, interesting in the sense that I am perplexed by them. Here's a couple attached. They are from two different domains, watchmeandlearn.com and ofcourseitwill.com. They have an opt out page, but either it's a mockup, or they just use it to verif

RE: [SAtalk] Newbie Spamd/Spamc

2003-08-21 Thread Céline REDON
-Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] la part de Hannu Liljemark Envoyé : jeudi 14 août 2003 06:54 À : [EMAIL PROTECTED] Objet : Re: [SAtalk] Newbie Spamd/Spamc On Wed, Aug 13, 2003 at 04:48:00PM +0300, Céline REDON wrote: > Mails are going through the wh

RE: [SAtalk] Scanning for an attachment file name

2003-08-21 Thread Satya
On Aug 20, 2003 at 10:05, Matthew Thomas wrote: >/pic.gif/i does not match "pic.gif" Sure it does. It also matches stuff like pic-gif, piclgif, etc. >Try /pic\.gif/i That's probably what the original poster wanted anyway :-) -- Satya. http://satya.virtualave.net/> He's dead Jim! You get his

Re: [SAtalk] (no subject)

2003-08-21 Thread Alan Leghart
--On Wednesday, August 20, 2003 12:11 PM -0700 Evan Platt <[EMAIL PROTECTED]> wrote: --On Wednesday, August 20, 2003 1:04 PM -0400 [EMAIL PROTECTED] wrote: does anyone know spam sender "[EMAIL PROTECTED]"? Yeah, my buddy Jim! What's he doing sending out spam?? Care to expand some more on this

[SAtalk] do not spam list spammer o_0

2003-08-21 Thread Louis LeBlanc
Ok, here's another one that is interesting in the fact that someone has grabbed the 'do not call' concept and decided they could make money with a 'do not spam' service. They want you to pay them $5 to get on their list, and they guarantee only that spammers that cooperate with them will not send

RE: [SAtalk] Mention of SA in the "media"

2003-08-21 Thread Chris Santerre
> -Original Message- > From: Nels Lindquist [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 20, 2003 6:29 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Mention of SA in the "media" > > > Have y'all seen this yet? > > "SpamAssassin Unveils New HomeAssassin Product for Unwelcome >

Re: [SAtalk] Future of eval test?

2003-08-21 Thread Justin Mason
Chris Santerre writes: > I'm just curious as to something that was hinted on before. Will future SA > versions allow users to write other evaltest files like .cf files now? Will > there be a way to test them like --lint'ing rules now? (I'm guessing no, you > would have to feed the test with STDIN

Re: [SAtalk] Newbie Spamd/Spamc

2003-08-21 Thread Hannu Liljemark
On Thu, Aug 21, 2003 at 01:30:00PM +0300, Céline REDON wrote: > *In Postfix , in /etc/postfix/master.cf > the last line calls the filter spamc.sh > filterunix - nn -- pipe > flags=Rq user=filter argv=/var/spool/filter/spamc.sh -f ${sender} -- > ${recipi

RE: [SAtalk] Configure to delete messages

2003-08-21 Thread Simon Byrnand
At 15:23 20/08/2003 -0400, Shayne Lebrun wrote: Well, depending on your setup... What we do is use an IMAP server, but the vast majority of our users are POP3. So, anybody who wants auto deletion or server side filtering gets some mojo applied to their account, so that tagged spam winds up in the

Re: [SAtalk] virus bounce rules

2003-08-21 Thread jvanasco
as to routing them somewhere else... does SA have a custom header even possible? ie – if certain tests pass, throw in a SA: Virus_Bounce cos the only way i can think of tossing them into another bucket would be to run a series of regexs in a filter to toss them elsewhere which amounts to doubl

Re: [SAtalk] Spam dropoff?

2003-08-21 Thread Angel Gabriel
On Wed, 2003-08-20 at 17:36, Stewart, John wrote: > > I had a couple of users ask me today if there was a change to our mail > config, as the number of spams they received had dropped off > considerably. I personally didn't notice much (750+ spams since > Sunday), but I'm wondering if anyone else

RE: [SAtalk] SpamAssassin 2.60 rc 1 released

2003-08-21 Thread Paul Hutchings
Excellent! Any idea roughly how long until it's on CPAN? regards, Paul -- Paul Hutchings Network Administrator, MIRA Ltd. Tel: 44 (0)24 7635 5378, Fax: 44 (0)24 7635 8378 mailto:[EMAIL PROTECTED] > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: 21 August 2

Re: [SAtalk] Using sa-learn for sitewide databases.

2003-08-21 Thread Hannu Liljemark
On Thu, Aug 21, 2003 at 01:34:00AM +0300, Jefferson Cowart wrote: > Reading the documentation for sa-learn I don't see how to tell > it to use the site-wide databases in stead of the per-user db. > How do I use site-wide bayes db? If you run SpamAssassin as spamd user on the system, su to spamd u

[SAtalk] SpamAssassin 2.60 rc 1 released

2003-08-21 Thread Justin Mason
OK, this is 2.60 release candidate 1; it should work pretty excellently, but we want to give it a day or two before it gets an official thumbs-up. Download it from http://SpamAssassin.org/downloads.html . MD5sum: 5d23aa5ddb1c5381281cd88bf734341f Mail-SpamAssassin-2.60.tar.gz (there's also GPG

Re: [SAtalk] "Inappropriate ioctl for device"

2003-08-21 Thread jeff covey
on Wed, Aug 20, 2003 at 01:30:44PM -0700%, Justin Mason said: justin> You could try using the libdb tools -- db_upgrade, justin> db_dump, db_load etc. to upgrade the files to work with justin> the newer version of libdb. beautiful, that's it! :) (specifically, i had to run db3_upgra

[SAtalk] Mention of SA in the "media"

2003-08-21 Thread Nels Lindquist
Have y'all seen this yet? "SpamAssassin Unveils New HomeAssassin Product for Unwelcome Visitors" http://bbspot.com/News/2003/08/assassin.html Good for a chuckle. :-) Nels Lindquist <*> Information Systems Manager Morningstar Air Express Inc.

Re: [SAtalk] Appliances vs SA

2003-08-21 Thread Chad Leigh -- Shire.Net LLC
On Wednesday, August 20, 2003, at 02:09 PM, K Old wrote: Hello everyone, I've been using SA for at least a year or two now and love it! We combine it with MailScanner with ClamAV and out of 20,000 emails per week receive no viruses and block out around 4,000 pieces of spam.and really only ab

[SAtalk] Repost: how does auto-learn work?

2003-08-21 Thread Ricardo Kleemann
Hi, I posted this but didn't see any replies... Can someone help me understand it better?=a0 =a0 - Message Forwarded on 08/20/03 09:01 pm - From: "Ricardo Kleemann" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: how does auto-learn work? Date: Tue, 19 Aug 2003 07:40:52 -0700 Hi, I'm

Re: [SAtalk] [RD] New header rule for no FQDN ?

2003-08-21 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Chris, Wednesday, August 20, 2003, 7:15:31 AM, you wrote: CS> What do you guys think of this simple header line: CS> Received: from Evan ([81.68.237.96]) CS> How does this regex look? CS> header WRKSTATION_NAME Received =~ /^from \w+ CS>