[SAtalk] sa-learn: Does --forget ignore the headers?

2003-08-28 Thread Carlo Wood
I have the following setup: 1) Firewall receives mail, pipes it through spamd and adds a header marking it as spam. 2) Firewall sends the mail through to internal machine. 3) Internal machine adds a 'Received:' line. 4) Internal machine detects that this is not spam but also not ham an

[SAtalk] internal domain mail getting blocked

2003-08-28 Thread Robin Witkop-Staub
I have instances where users try to email me a block of messages they want blacklisted. The spam filter will see them all and tag the message as SPAM. Is there a way I can tell spamassassin not to mark internal mail as spam or make a filter giving internal users +points? Robin Witkop-Staub Raven

RE: [SAtalk] score based on time of day rec'd?

2003-08-28 Thread Larry Gilson
Read the archives under the subject "Mail arrival time may be a criteria". The following is a useful link: http://www.gryzor.com/tools/spamstats-pics.html --Larry > -Original Message- > From: jpf > I was wondering if there are any tests that score based on > what time of day > the ma

Re: [SAtalk] DNS Timeout Issues

2003-08-28 Thread Justin Mason
David Birnbaum writes: >With respect to the OSIRU DNS problems recently, we had the situation >where SpamAssassin suddenly went from taking one second to process a >message to 30 seconds or more. Mail suddenly started backing up, and we >ended up with a real train wreck - mail volume was much hig

[SAtalk] Change points in AWL

2003-08-28 Thread Jim Knuth
Hello, how can I change the points in awl.db? I have an wrong entry in this. (9.8 (9.8/1) -- [EMAIL PROTECTED]|ip=66.151) Thanks and cu Jim --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.c

[SAtalk] List domain

2003-08-28 Thread Boily Sylvain
Hi, Does it possible to make a list of a domain who want to be check for spam or not ? Thanks Regards, Sylvain --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _

[SAtalk] Re: Whitelisting To: Addresses

2003-08-28 Thread jpf
FYI: Another method for growing my whitelist_from ... I use Outlook Express...I have checked "automatically add reply addresses to address book". Then I periodically dump my addressbook as CSV and create a whitelist_from list from the users I have replied to. I do this manually so I can pick onl

Re: [SAtalk] microsoft_executeable

2003-08-28 Thread Russ
Take a look at MailScanner.  Works seamlessly with SA and provides for (among a lot of other things) file extension filtering www.mailscanner.info.   russ... - Original Message - From: Cornelius Bolten To: [EMAIL PROTECTED] Sent: Thursday, August 28, 2003 7:41

Re: [SAtalk] microsoft_executeable

2003-08-28 Thread Cornelius Bolten
seems to be a nice addon..but! i would have to patch qmail plus adding qmail-qfilter. problem: i have absolute no idea how to do that :( and the so called "install-instructions" aren't that easy to understand...   - Original Message - From: Thomas Reed To: [EMAIL PROTEC

[SAtalk] MICROSOFT_EXECUTEABLE

2003-08-28 Thread Cornelius Bolten
heya list, i'm very new to spamassassin, but managed to setup qmail+vpopmail+sa yet :) is there any solution to filter or score attachments (like *exe or *pif) with spamassassin ?   i saw something like:     score MICROSOFT_EXECUTABLE 0.100 but i'm not sure what happens if there is an exec.

[SAtalk] DNS Timeout Issues

2003-08-28 Thread David Birnbaum
Folks, With respect to the OSIRU DNS problems recently, we had the situation where SpamAssassin suddenly went from taking one second to process a message to 30 seconds or more. Mail suddenly started backing up, and we ended up with a real train wreck - mail volume was much higher than usual due t

[SAtalk] score based on time of day rec'd?

2003-08-28 Thread jpf
I was wondering if there are any tests that score based on what time of day the mail is being rec'd ... seems like I get most of my SPAM overnight and HAM during the workday...it might be a useful rule to play with. Does anyone have time-of-day stats? Maybe this isn't a true pattern. Any help ske

Re: [SAtalk] question about mysql sa with qs

2003-08-28 Thread Jonas Pasche
Hi Patrick, > I cannot get spamc to pass the proper owner to spamd so it can pull out the > proper userprefs out of the mysql db. This seems to be a simple bug in the newly introduced code in qmail-scanner. Edit sub-spamassassin.pl, and change: $cmdline_recip=~/^([EMAIL PROTECTED])$/; into:

RE: [SAtalk] spamd & user_prefs

2003-08-28 Thread Larry Gilson
> -Original Message- > From: Kris Deugau > In order to get spamd/spamc to use per-user prefs in > ~/.spamassassin, you have two requirements: > > 1) spamd must run as root, otherwise it can't fork and drop > priviledges to the user in question. Among other things, > this lets it cre

Re: [SAtalk] Blocking cleaned virus messages.

2003-08-28 Thread Kris Deugau
Charles Mount wrote: > Gauntlet, like most commercial virus protection software does not offer the > option of discarding virus infected messages; the only option is cleaning. > Changing firewall software or routing of mail are not options. > When Gauntlet detects a virus infected attachment, it re

Re: [SAtalk] configuration

2003-08-28 Thread Jon Fraley
This is only to scan incoming local mail. Actually the server will set between a virus appliance and our email server. Jon On Thu, 2003-08-28 at 14:30, AltGrendel wrote: > On Thu, 2003-08-28 at 13:51, Jon Fraley wrote: > > I am trying to get Spamassassin 2.55, spamass-milter-0.2.0 and > > sendm

[SAtalk] How to install SpamAssassin?

2003-08-28 Thread pcastane
I have Email Server with Red Hat 8.0, Sendmail y POP3. I installed perl-Mail-SpamAssassin-2.55.rpm, spamassassin-2.55.rpm and spamassassin-tools-2.55.rpm. But, I don't know what more to do, in the instruccions say: after rpm -ivh then cd Mail-Spamassassin-* perl Makefile.PL make make i

[SAtalk] Going after more than OsiruSoft?

2003-08-28 Thread AltGrendel
Latest news: http://slashdot.org/article.pl?sid=03/08/28/1832215&mode=thread&tid=111&tid=126 -- AltGrendel <[EMAIL PROTECTED]> --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf __

Re: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Duncan Findlay
On Thu, Aug 28, 2003 at 09:10:09AM +0200, Rainer Sokoll wrote: > On Wed, Aug 27, 2003 at 12:44:20PM -0700, Justin Mason wrote: > > Good morning, > > > Larry Gilson writes: > > >There was another suggestion that the tests could be commented out in > > >20_head_tests.cf. Which is the best and/or r

Re: [SAtalk] spamd & user_prefs

2003-08-28 Thread Kris Deugau
Jason McCormick wrote: > I just upgraded to 2.55 and followed the directions for changing > local.cf (allow_user_rules 1) to allow the user_prefs file to be read > from ~/.spamassassin however I'm still not seeing spamd reading this > file. I just installed spamc to run as a filter in postfix an

[SAtalk] Whitelisting To: Addresses

2003-08-28 Thread wrolf . courtney
I have had great success with a home-grown anti-spam system using - sendmail - some RBLs - scripts to search our sendmail logs for addresses we have sent to, since they are presumably people we want to hear from - scripts to search our LDAP accessible (Notes) database of customers, who we

Re: [SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Justin Mason
Chris Barnes writes: > Justin Mason <[EMAIL PROTECTED]> wrote: > > If DB_File is not installed, everything else will work -- but Bayes > > will not. > > Not a complaint - just a question (from a novice - so this might be a > dumb question): > > What is the "default" for a new SA installation? >

Re: [SAtalk] configuration

2003-08-28 Thread AltGrendel
On Thu, 2003-08-28 at 13:51, Jon Fraley wrote: > I am trying to get Spamassassin 2.55, spamass-milter-0.2.0 and > sendmail-8.11.6-26.72 running with Red Hat AS 2.1. I have installed > everything and have started all process, however no emails are being > sent through SA. Spamd is running and ther

Re: [SAtalk] [RD] this is the spam I'm fighting, and why rules don't hit.

2003-08-28 Thread Chris Trudeau
Looks like its time to upgrade this will likely catch the darn pic.gif stuff to then??? Chris? CT - Original Message - From: "Justin Mason" <[EMAIL PROTECTED]> To: "Chris Santerre" <[EMAIL PROTECTED]> Cc: "Spamassassin-Talk (E-mail)" <[EMAIL PROTECTED]> Sent: Thursday, August 28, 2003

Re: [SAtalk] [RD] this is the spam I'm fighting, and why rules do n't hit.

2003-08-28 Thread Justin Mason
Chris Santerre writes: >Is that from the email I sent to list, or did you get this spam directly? >You mean without the HTML code decoded, SA 2.60 decoded it and checked it? I >just want to really clarify that, so I can stop working on it. It SA 2.60 >decoded the base64 then check it, then the dev

[SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Chris Barnes
Justin Mason <[EMAIL PROTECTED]> wrote: > If DB_File is not installed, everything else will work -- but Bayes > will not. Not a complaint - just a question (from a novice - so this might be a dumb question): What is the "default" for a new SA installation? That is (to rephrase), is DB_File insta

Re: [SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Louis LeBlanc
On 08/28/03 09:33 AM, Justin Mason sat at the `puter and typed: > > Douglas J Hunley writes: > > Louis LeBlanc shocked and awed us all by speaking: > > > Ok, just so I'm prepared, this means that the Berkley DB format > > > will remain? I'm afraid I've always been a little to DB shy for > > > my

[SAtalk] configuration

2003-08-28 Thread Jon Fraley
I am trying to get Spamassassin 2.55, spamass-milter-0.2.0 and sendmail-8.11.6-26.72 running with Red Hat AS 2.1. I have installed everything and have started all process, however no emails are being sent through SA. Spamd is running and there are three instances of spam-milter running. 29164 27

RE: [SAtalk] [RD] this is the spam I'm fighting, and why rules don't hit.

2003-08-28 Thread Chris Santerre
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 1:37 PM > To: Chris Santerre > Cc: Spamassassin-Talk (E-mail) > Subject: Re: [SAtalk] [RD] this is the spam I'm fighting, and > why rules > don't hit. > > > > Chris Santerre wri

[SAtalk] Blocking cleaned virus messages.

2003-08-28 Thread Charles Mount
My environment includes a firewall mail relay running a product called Gauntlet, followed by a Sendmail Switch mailhub running MimeDefang to call SpamAssassin, then ultimately Exchange( plus some Lotus Notes, GroupWise, UNIX mail, VAX mail and others). Gauntlet, like most commercial virus protectio

Re: [SAtalk] [RD] this is the spam I'm fighting, and why rules don't hit.

2003-08-28 Thread Justin Mason
Chris Santerre writes: > I finally got one of these boogers above a 7 so I had the raw in my trap. > Take a look at this raw mbox email and why SA rules don't hit. The MUA > decodes the email and shows the spam when read. After the * is > what the decoded base64 looks like. Headers don

Re: [SAtalk] Reporting *to* razor via SA

2003-08-28 Thread Matt Kettler
At 11:15 AM 8/28/2003 -0500, David Dyer-Bennet wrote: I seem to be looking incoming spam up in razor okay (I sometimes see hits on those rules in the reports). But when I send a spam into spamassassin --report, I always get an error that it was "unable" to report to Razor. In debug mode it's stil

[SAtalk] question about mysql sa with qs

2003-08-28 Thread cyko
I'm using qmail-scanner-1.20rc2 with spamassassin-2.60rc2 (mysql) and vpopmail- 5.3.24. I cannot get spamc to pass the proper owner to spamd so it can pull out the proper userprefs out of the mysql db. I keep getting this in my maillog: Aug 28 13:34:02 fbsd spamd[99929]: processing message <

Re: [SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs innon-DB_File formats

2003-08-28 Thread Kenneth Porter
--On Thursday, August 28, 2003 11:14 AM -0500 Joe Breu <[EMAIL PROTECTED]> wrote: > Perl module. It can be found on CPAN (install DB_File). For RPM-based systems, choose one of these: --

Re: [SAtalk] Spamassassin and Mail Relay

2003-08-28 Thread Paul Hutchings
I use postfix, I think general opinion is that it's a little simpler than sendmail for a beginner (which I certainly was), plus it's had fewer security issues that I've been able to find. I do the same thing you want to do, but with Exchange behind it on a box running Redhat 9.0, Postfix and Spama

Re: [SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Justin Mason
Douglas J Hunley writes: > Louis LeBlanc shocked and awed us all by speaking: > > Ok, just so I'm prepared, this means that the Berkley DB format will > > remain? I'm afraid I've always been a little to DB shy for my own > > good, so I'm a little unschooled here. If this doesn't refer to > > Ber

RE: [SAtalk] Spamassassin and Mail Relay

2003-08-28 Thread Tom Meunier
Oh yeah: If I were running Imail (I don't, but I play a person who does on TV) I'd at least give a cursory glance to IMGATE. http://imgate.meiway.com/ > -Original Message- > From: John B. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 11:23 AM > To: [EMAIL PROTECTED] > Sub

Re: [SAtalk] SA+SQL called by Qmail-Scanner problems..

2003-08-28 Thread Jonas Pasche
Hi Steve, > I configured SA to use SQL for the whitelist/blacklist etc. It is called > via Qmail-Scanner, which runs as a user called "qmailq". The SQL lookups > are occuring, but SA keeps searching for the user "qmailq", not the user > that is having the e-mail delivered. Yes, that's right,

RE: [SAtalk] Spamassassin and Mail Relay

2003-08-28 Thread Tom Meunier
1. Don't delete your user's mail. Just mark it and let them make rules client-side. If you've an intermediary gateway that can do some content filtering, you can use that to delete or quarantine especially high-scoring spam. 2. See (3.) 3. http://lawmonkey.org/anti-spam.html http://www.geoc

[SAtalk] [RD] this is the spam I'm fighting, and why rules don't hit.

2003-08-28 Thread Chris Santerre
I finally got one of these boogers above a 7 so I had the raw in my trap. Take a look at this raw mbox email and why SA rules don't hit. The MUA decodes the email and shows the spam when read. After the * is what the decoded base64 looks like. Headers don't matter. I've looked at them a

[SAtalk] Spamassassin and Mail Relay

2003-08-28 Thread John B.
I am new to the list (and the linux community) and I am hoping that someone could give me a step in the right direction. I have a Windows 2k server running IMAIL of wich end users connect to download their email. I have setup a Linux box with the intent to have the box act as aq relay (all the ma

[SAtalk] Reporting *to* razor via SA

2003-08-28 Thread David Dyer-Bennet
I seem to be looking incoming spam up in razor okay (I sometimes see hits on those rules in the reports). But when I send a spam into spamassassin --report, I always get an error that it was "unable" to report to Razor. In debug mode it's still not at all clear to me why; I see it fiddling around

Re: [SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs innon-DB_File formats

2003-08-28 Thread Joe Breu
> color me confused as well. Are we talking about a Perl module that needs to be > installed? If so, which one? > - -- > Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778 > http://doug.hunley.homeip.net && http://www.linux-sxs.org Perl module. It can be found on CPAN (install

Re: [SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Theo Van Dinter
On Thu, Aug 28, 2003 at 11:27:13AM -0400, Douglas J Hunley wrote: > color me confused as well. Are we talking about a Perl module that needs to be > installed? If so, which one? DB_File -- Randomly Generated Tagline: "Linux poses a real challenge for those with a taste for late-night hacking (

[SAtalk] Re: heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Douglas J Hunley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Louis LeBlanc shocked and awed us all by speaking: > Ok, just so I'm prepared, this means that the Berkley DB format will > remain? I'm afraid I've always been a little to DB shy for my own > good, so I'm a little unschooled here. If this doesn't ref

[SAtalk] Bayes and its effectiveness

2003-08-28 Thread Pete O'Hara
Hi, Sorry if this has been discussed before. I looked through the archives and didn't see mention of this in any titles. Feel free to flame if this has been a beaten horse. I am looking for a tool/script that can tell me what percentage of spam was caught due to the additional Bayes points or

RE: [SAtalk] Spamassassin and Razor

2003-08-28 Thread Larry Gilson
Hi Mike > -Original Message- > From: Mike Burkhouse > Hi All, > > I am trying to clarify how Spamassassin works with Razor. > Here is my setup: > > RedHat 7.3 > Qmail 1.03 > Spamassassin 2.55 (running spamd) > Qmail-scanner 1.20rc1 > ClamAV 6.0 > Vipul's Razor 2.36 - installed today

RE: [SAtalk] Spamassassin and Razor

2003-08-28 Thread Tom Meunier
http://www.spamassassin.org/tests.html It adds points to the total score, as in any other SA test. See the RAZOR2_CHECK and RAZOR2_CF_RANGE rules. > -Original Message- > From: Mike Burkhouse [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 9:24 AM > To: [EMAIL PROTECTED] > Su

Re: Debian stable backport (was: [SAtalk] Trademark improperly used in deceptive ad?)

2003-08-28 Thread Bob Proulx
Adam D. Barratt wrote: > Bob Proulx wrote: > > I assume you found Duncan's backport area? Just making sure. > > > > deb http://people.debian.org/~duncf/debian/ woody main > > That only appears to include 2.54. If you review what changed between 2.54 and 2.55 you will find that there is no func

Re: [SAtalk] How long should a GA run take?

2003-08-28 Thread Theo Van Dinter
On Wed, Aug 27, 2003 at 09:43:50PM -0700, Bob Dickinson (BSL) wrote: > We've read the readme's and looked at the code, but can't quite piece it > together. We tried a variety of things, including running Heh... > rewrite-cf-with-new-scores, then another runGA with a command line argument > to tr

RE: [SAtalk] microsoft_executeable

2003-08-28 Thread Larry Gilson
Hi Cornelius, You might want to look at this post: http://marc.theaimsgroup.com/?l=spamassassin-talk&m=106199230731192&w=2 --Larry -Original Message- From: Cornelius Bolten heya list, i'm very new to spamassassin, but managed to setup qmail+vpopmail+sa yet :) is there any solution to

[SAtalk] Spamassassin and Razor

2003-08-28 Thread Mike Burkhouse
Hi All, I am trying to clarify how Spamassassin works with Razor. Here is my setup: RedHat 7.3 Qmail 1.03 Spamassassin 2.55 (running spamd) Qmail-scanner 1.20rc1 ClamAV 6.0 Vipul's Razor 2.36 - installed today I have been using spamd to mark up the header of a message and then filter at the MU

RE: [SAtalk] Message ID

2003-08-28 Thread Chris Santerre
> -Original Message- > From: Larry Gilson [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 12:15 AM > To: 'Martin Radford' > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Message ID > > > > > > -Original Message- > > From: Martin Radford > > > > On Tue, Aug 26, 200

Re: [SAtalk] microsoft_executeable

2003-08-28 Thread Thomas Reed
I use anomy mail filter to remove ms executable attachment and couldn't be more pleased with the results.  This may be an option you want to consider.   http://mailtools.anomy.net/     Thomas ReedSystem AdministratorCity of La Vergne, TN[EMAIL PROTECTED] - Original Message - From

Re: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Nigel Metheringham
On Thu, 2003-08-28 at 11:50, Carlo Wood wrote: > Are you 100% sure that is also the case for RBL checks? > It seems 'weird' that this test will indeed be completely > turned off if, and only if, all six related scores are set > to 0 (and not when you forget one). That seems like an > almost compli

Re: [SAtalk] heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Louis LeBlanc
On 08/28/03 05:44 PM, Simon Byrnand sat at the `puter and typed: > > Hi all -- > > > > We've decided, in light of several serious bugs (including crash and > > concurrency bugs) that the non-DB_File database modules are not reliable > > enough for use with Bayes. > > > > As a result, 2.60 will drop

[SAtalk] SA - Almost there

2003-08-28 Thread Jennifer Fountain
Ok after great direction by the list, I finally got SA running (well sort of); however, I am gettng this error in my maillog and qmail-queue.log Aug 27 22:01:02 chopin X-Qmail-Scanner-1.20rc1: [chopin10620360624552246] cannot run < /var/spool/qmailscan/working/new/chopin10620360624552246 - No su

[SAtalk] sa-learn and 'gibberish entry found'

2003-08-28 Thread Joe Breu
Got this while running sa-learn debug: Score set 0 chosen. debug: running in taint mode? no debug: using "/var/spool/mail/filer/bayesian_database2/sa-learn.cf" for default rules dir debug: using "/etc/mail/spamassassin" for site rules dir debug: using "/root/.spamassassin/user_prefs" for user pr

[SAtalk] microsoft_executeable

2003-08-28 Thread Cornelius Bolten
heya list, i'm very new to spamassassin, but managed to setup qmail+vpopmail+sa yet :) is there any solution to filter or score attachments (like *exe or *pif) with spamassassin ?   i saw something like:     score MICROSOFT_EXECUTABLE 0.100 but i'm not sure what happens if there is an exec.

RE: [SAtalk] Envelope sender as part of the SA protocol

2003-08-28 Thread Larry Gilson
> -Original Message- > From: [EMAIL PROTECTED] > Jim writes: > >qmail also sets Return-Path. > > > >Recent versions of Postfix can add an X-Original-To header. > > Just to confirm -- that's what's used in RCPT TO: , right? > > >Another nice method of passing these data along would be t

RE: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Larry Gilson
Mail::SpamAssassin::Conf indicates that: "Setting a rule's score to 0 will disable that rule from running.". --Larry > -Original Message- > From: Carlo Wood > Are you 100% sure that is also the case for RBL checks? > It seems 'weird' that this test will indeed be completely > turned

Re: [SAtalk] RBL

2003-08-28 Thread Carlo Wood
On Thu, Aug 28, 2003 at 11:51:02PM +1200, Simon Byrnand wrote: > Yes there is, you do what I suggested, which is run a test message > (preferably a nice spammy piece of spam) through SpamAssassin in debug > mode and look at the output. Eg: > > spamassassin -D &1 | more Thanks, I tried this and I

Re: [SAtalk] RBL

2003-08-28 Thread Simon Byrnand
> On Thu, Aug 28, 2003 at 10:31:50PM +1200, Simon Byrnand wrote: >> RBL checks are on by default, but you have to have the Net::DNS perl >> module installed for them to work. > > Woah! > > I DON'T have that installed! And I never got a warning anywhere?! > I thought it was working! > > Hmmpf. The

Re: [SAtalk] RBL

2003-08-28 Thread Carlo Wood
On Thu, Aug 28, 2003 at 10:31:50PM +1200, Simon Byrnand wrote: > RBL checks are on by default, but you have to have the Net::DNS perl > module installed for them to work. Woah! I DON'T have that installed! And I never got a warning anywhere?! I thought it was working! Hmmpf. I just installed t

Re: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Carlo Wood
On Thu, Aug 28, 2003 at 09:56:59AM +0100, Nigel Metheringham wrote: > Remember that scoring a test as zero inhibits the test being run at all, Are you 100% sure that is also the case for RBL checks? It seems 'weird' that this test will indeed be completely turned off if, and only if, all six relat

Re: Debian stable backport (was: [SAtalk] Trademark improperly used in deceptive ad?)

2003-08-28 Thread Adam D. Barratt
Bob Proulx wrote, Thursday, August 28, 2003 7:13 AM > Chuck Peters wrote: > > I was having a minor problem with spamassassin 2.53 (OSIRUSOFT) and > > decided to do a search for backports of Debian stable (Google spamassassin > > site:people.debian.org) ... > > I assume you found Duncan's backport

Re: [SAtalk] RBL

2003-08-28 Thread Carlo Wood
On Thu, Aug 28, 2003 at 11:05:01AM +0200, Céline REDON wrote: > Ok , thank you for these details. > > Could you then confirm me it is the parameter "skip_rbl_checks 0" which > enables the RBL checks..? Correct me if I am wrong, but yes (I think), along with NOT using the -L commandline paramete

Re: [SAtalk] RBL

2003-08-28 Thread Simon Byrnand
> Ok , thank you for these details. > > Could you then confirm me it is the parameter "skip_rbl_checks 0" which > enables the RBL checks..? RBL checks are on by default, but you have to have the Net::DNS perl module installed for them to work. The easiest way to do that is through CPAN. perl -M

Re: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Simon Byrnand
> On Wed, Aug 27, 2003 at 12:44:20PM -0700, Justin Mason wrote: > > Good morning, > >> Larry Gilson writes: >> >There was another suggestion that the tests could be commented out in >> >20_head_tests.cf. Which is the best and/or recommended method? >> >> either works fine. This way is easier. > >

Re: [SAtalk] RBL

2003-08-28 Thread Céline REDON
Ok , thank you for these details. Could you then confirm me it is the parameter "skip_rbl_checks 0" which enables the RBL checks..? -Message d'origine- De : Simon Byrnand [mailto:[EMAIL PROTECTED] Envoyé : jeudi 28 août 2003 04:07 À : Céline REDON; [EMAIL PROTECTED]; [EMAIL PROTECTED]

Re: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Nigel Metheringham
On Thu, 2003-08-28 at 08:10, Rainer Sokoll wrote: > On Wed, Aug 27, 2003 at 12:44:20PM -0700, Justin Mason wrote: > > Larry Gilson writes: > > >There was another suggestion that the tests could be commented out in > > >20_head_tests.cf. Which is the best and/or recommended method? > > > > either

Re: [SAtalk] Wow, sourceforge.net has managed to not learn basic lessons of mail filtering...

2003-08-28 Thread Kai Schaetzl
it seems that on Aug 26 SF also started to run all mails thru SA (2.55 ?) and attach a complete report which adds a lot of unnecessary traffic. :-( > X-Spam-Score: 0.0 (/) > X-Spam-Report: 0.0/5.0 > This mail is probably spam. The original message has been attached > along with this report, so

Re: [SAtalk] Scores for OSIRU Tests

2003-08-28 Thread Rainer Sokoll
On Wed, Aug 27, 2003 at 12:44:20PM -0700, Justin Mason wrote: Good morning, > Larry Gilson writes: > >There was another suggestion that the tests could be commented out in > >20_head_tests.cf. Which is the best and/or recommended method? > > either works fine. This way is easier. In this case

[SAtalk] SA+SQL called by Qmail-Scanner problems..

2003-08-28 Thread Steve Fulton
Hi all, I configured SA to use SQL for the whitelist/blacklist etc. It is called via Qmail-Scanner, which runs as a user called "qmailq". The SQL lookups are occuring, but SA keeps searching for the user "qmailq", not the user that is having the e-mail delivered. Here is a log snippet: logm

[SAtalk] SPAMd hanging under certain conditions (SA-2.60-rc2 and older)

2003-08-28 Thread Michael Stauber
Hi all, I have an interesting problem with SpamAssassin-2.60-rc2. Actually that problem has existed since at least SA-2.50 and I'm kinda pulling my hair out on this one. It would be nice to hear some feedback or suggestions as I might be doing something wrong here. Quick description: =

[SAtalk] Re: SA rejection

2003-08-28 Thread Tim Day
On Wed, 2003-08-27 at 19:19, Chris Santerre wrote: > I received 2 spamassassin rejections from your server today. > bottlenose.demon.co.uk > > 1) Orisoft is dead. Remove the test from SA ASAP. it Blacklists everyone > now. > 2) Don't scan the spamassassin list. We often talk about spam. > 3) Sendi

Debian stable backport (was: [SAtalk] Trademark improperly used in deceptive ad?)

2003-08-28 Thread Bob Proulx
Chuck Peters wrote: > I was having a minor problem with spamassassin 2.53 (OSIRUSOFT) and > decided to do a search for backports of Debian stable (Google spamassassin > site:people.debian.org) ... I assume you found Duncan's backport area? Just making sure. deb http://people.debian.org/~duncf/

Re: [SAtalk] heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Simon Byrnand
> Hi all -- > > We've decided, in light of several serious bugs (including crash and > concurrency bugs) that the non-DB_File database modules are not reliable > enough for use with Bayes. > > As a result, 2.60 will drop support for Bayes databases in formats > other than DB_File, and we'll add a n

[SAtalk] Turning off Osirusoft in 2.60

2003-08-28 Thread Dan Kohn
Aren't the directions at only correct for 2.55 and earlier? For 2.60, shouldn't it be: score RCVD_IN_OSIRU 0 score RCVD_IN_OSIRU_DIALUP 0 score RCVD_IN_OSIRU_PROXY 0 score RCVD_IN_OSIR

RE: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Larry Gilson
> Unless you do a LOT of training, I don't see how a purely Bayesian > classifier can perform as well as something as multifacited as > SpamAssassin. (I wonder how well a purely Bayesian classifier > does on the HTML image only spams for example) Unless I am mistaken, death2spam is running a s

Re: [SAtalk] How long should a GA run take?

2003-08-28 Thread Bob Dickinson \(BSL\)
We completed the GA run on the mass check results, then removed the tests in question and ran it again. The results were pretty much as I expected (we're only doing set 0 right now, and the recall dropped from a little over 94% to around 91.5% after removing about 200 tests). So far so good. The

Re: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Chad Leigh -- Shire.Net LLC
On Wednesday, August 27, 2003, at 09:10 PM, Simon Byrnand wrote: By the way, in case anyone thinks I'm slamming them, I wasn't, I'm sure their system is probably a competant implemenation of a Bayesian Classifier, however the claims that were made over the phone and in an email forwarded to me

RE: [SAtalk] Message ID

2003-08-28 Thread Larry Gilson
> -Original Message- > From: Martin Radford > > On Tue, Aug 26, 2003 at 11:21:46AM +0100, Martin Radford wrote: > > > >From my own collections: > > > > > >with FQDNwith hostname only > > > ham: 2331 (85.6%) 391 (14.4%) > > > spam: 1925 (76%

RE: [SAtalk] Message ID

2003-08-28 Thread Larry Gilson
Hi Jim, > -Original Message- > From: Jim > On Wed, Aug 27, 2003 at 04:43:41PM -0400, Larry Gilson wrote: > > And shouldn't the first received line indicate > > that the host that sent the message? > > Not necessarily, > > for example, I use a single copy of Mutt to send mail from > add

[SAtalk] heads-up: 2.60 will drop support for bayes dbs in non-DB_File formats

2003-08-28 Thread Justin Mason
Hi all -- We've decided, in light of several serious bugs (including crash and concurrency bugs) that the non-DB_File database modules are not reliable enough for use with Bayes. As a result, 2.60 will drop support for Bayes databases in formats other than DB_File, and we'll add a new switch to s

Re: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Simon Byrnand
At 18:41 27/08/2003 -0700, Justin Mason wrote: Simon Byrnand writes: >Just got a sales pitch today by phone followed up by email from these guys: > >http://www.death2spam.net.nz/ > >Anybody else heard of them ? Their system claims to be based on Bayesian >filtering and claims to be a lot more effe

Re: [SAtalk] FW: Best Child Pornography Site

2003-08-28 Thread Kai MacTane
At 8/27/03 05:57 PM , Carlo Wood wrote: On Wed, Aug 27, 2003 at 01:30:22PM -0700, Kai MacTane wrote: > I take it you want something a little better thought-out than just > > body CHILD_PORN /child pornography/i > [et cetera...] That seems like a bad idea. Well, I *did* imply, in the first line of q

[SAtalk] SA not attaching emails

2003-08-28 Thread Dave Johnson
Hi everyone: It could be that I'm doing something wrong, but it seems that SA is not attaching detected spam mails to the notification mails. I have SA sitting on top of amavisd-new, on a postfix relay-only mail server. It relays to our Exchange server. SA filters wonderfully, but it does not att

Re: [SAtalk] RBL

2003-08-28 Thread Simon Byrnand
At 19:11 27/08/2003 +0200, Céline REDON wrote: Thanx Bob, Would you know also how to integrate them in Spamassassin? In the local.cf file?? Thanx!! CR Umm, SpamAssassin comes preconfigured with a variety of RBL checks now, and the new version 2.60 which sould be out "any time soon" (tm) adds a

Re: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Simon Byrnand
At 18:41 27/08/2003 -0700, Justin Mason wrote: Simon Byrnand writes: >Just got a sales pitch today by phone followed up by email from these guys: > >http://www.death2spam.net.nz/ > >Anybody else heard of them ? Their system claims to be based on Bayesian >filtering and claims to be a lot more effe

Re: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Justin Mason
Simon Byrnand writes: >Just got a sales pitch today by phone followed up by email from these guys: > >http://www.death2spam.net.nz/ > >Anybody else heard of them ? Their system claims to be based on Bayesian >filtering and claims to be a lot more effective than 6 other spam filtering >programs (

Re: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Simon Byrnand
At 20:51 27/08/2003 -0400, Theo Van Dinter wrote: On Thu, Aug 28, 2003 at 12:40:12PM +1200, Simon Byrnand wrote: > I don't think I'll be switching away from SpamAssassin any time soon... > > Comments anyone ? 98% of all statistics are lies. :) Heheheh... I don't think I could have thought of a bett

RE: [SAtalk] whitelist_from_rcvd question.

2003-08-28 Thread Cowles, Steve
Mike Kuentz (2) wrote: > Steve, did you hear back from any body about this? Any body know the > answer? Mike, I never did get a reply to my orignal post. But I did find a work around to the whitelist_rcvd_from not working with my implementation of postfix/SA. I ended up adding my own custom hea

Re: [SAtalk] OSIRUSOFT cause my subscription to be cancelled??

2003-08-28 Thread Kai MacTane
At 8/27/03 12:38 PM , jpf wrote: > > JPF, looks like our bounce parser has picked up 3 bounce messages per day > > for your address, with the error message "that domain isn't in my list of > > allowed rcpthosts". That error message usually signals a Qmail misconfiguration (or possibly an error in

Re: [SAtalk] Spammer fights back!

2003-08-28 Thread Carlo Wood
On Wed, Aug 27, 2003 at 04:59:42PM +0200, Morten Kjeldgaard wrote: > What can be done to plug this hole? I think that the goal here is to not add invisible words to the bayesian database. Step one is to detect which words are invisible. You could simply look for white words, but the next thing y

Re: [SAtalk] FW: Best Child Pornography Site

2003-08-28 Thread Carlo Wood
On Wed, Aug 27, 2003 at 01:30:22PM -0700, Kai MacTane wrote: > I take it you want something a little better thought-out than just > > body CHILD_PORN /child pornography/i > describe CHILD_PORN Mentions kiddie porn. > score CHILD_PORN 10.0 > > header SUBJ_CHILD_PORN Subject =~ /child pornography/i

Re: [SAtalk] different notification emails depending on domain

2003-08-28 Thread Simon Byrnand
At 09:30 27/08/2003 -0500, Bob Apthorpe wrote: Hi, On Tue, 26 Aug 2003 21:56:02 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: > On Wed, Aug 27, 2003 at 03:34:46AM +0200, Marcus Schopen wrote: > > I use amavisd-0.1. My sendmail is responsible for two domains (privat > > and work stuff). > > > >

Re: [SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Theo Van Dinter
On Thu, Aug 28, 2003 at 12:40:12PM +1200, Simon Byrnand wrote: > I don't think I'll be switching away from SpamAssassin any time soon... > > Comments anyone ? 98% of all statistics are lies. :) -- Randomly Generated Tagline: "Just wanted to let you know that pubexchange is down, something caugh

[SAtalk] Anyone head of these guys ? (Death2Spam)

2003-08-28 Thread Simon Byrnand
Hi All, Just got a sales pitch today by phone followed up by email from these guys: http://www.death2spam.net.nz/ Anybody else heard of them ? Their system claims to be based on Bayesian filtering and claims to be a lot more effective than 6 other spam filtering programs (including SpamAssassi

[SAtalk] OSIRUSOFT cause my subscription to be cancelled??

2003-08-28 Thread jpf
FYI: I got a notice this morning that my subscription was cancelled to something...below is what the list admin sent me back...perhaps OSIRUSOFT related...I have pointed him to appropriate resources regarding the matter... > > JPF, looks like our bounce parser has picked up 3 bounce messages per d

  1   2   >