I've been using Spamassassin for 1-2 months now. For a while, I was
getting Bayes scores in my mail but I'm not getting them any longer. I
just looked at another user on the system (my wife) and her spams are
still being marked with BAYES_90, etc. in the headers but mine aren't.
Are there any ch
I rec'd the following mail...It had only run 1 test and rec'd a score of
only 0.1...any ideas why?
thanks,
jpf
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Envelope-To:[EMAIL PROTECTED]
Received: (qmail 54054
On Wed, 10 Sep 2003, Jim wrote:
> On Tue, Sep 09, 2003 at 12:18:10AM -0400, Debbie D wrote:
> > 3 times today I noticed the server running very high loads of 4-6 and as
> > high as 10, normally I run 1% or lower usually closer to .3-.6%. Three days
> > in a row I have gotten over load notices.. To
On Tue, Sep 09, 2003 at 12:18:10AM -0400, Debbie D wrote:
> 3 times today I noticed the server running very high loads of 4-6 and as
> high as 10, normally I run 1% or lower usually closer to .3-.6%. Three days
> in a row I have gotten over load notices.. Tonight I got an out of memory
> notice and
Larry, I think you're right, might be a bug for that rule. Here's from a
message I sent a bit ago, and it didn't hit the MSGID_GOOD_EXCHANGE.
Message-ID: <[EMAIL PROTECTED]>
It has a forty char string. The other thing in that rule is (if I'm reading
it correctly, a regex tends to gimme a heada
>Message-ID: <[EMAIL PROTECTED]>
>From: "Mike Kuentz (2)" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: [SAtalk] [RD] Subject rule question
>X-Original-Date: Tue, 9 Sep 2003 15:04:25 -0400
>Date: Tue, 9 Sep 2003 15:04:25 -0400
>Status: R
>
Hi Mike,
RE: [SAtalk] [RD] Subject rule question
I
Weyland wrote:
Which is intresting because it spurred me to check mine.
I'm using RH8 with Sendmail, supposedly using Bayes (I've been training it for
a long time now, at least...), and didn't get *anything* when I cat and grep
for "bayes". Nothing at all.
So how *do* you know it's working?
if y
Francis wrote:
I'm now using the default rules and receive some spam on my PC.
I put those spam in a spam box on my PC.
How can I use this box to to work with sa_lear on my Unix Server to find new
rules?
copy the box to your unix server and run
sa-learn --mbox --spam /path/to/spam/mbox
(assuming
I know that this “really” is the wrong list to
be posting this question to…. BUT… The amavis-user list is
not working at the moment (at least for me) and I am wondering if perhaps one
of you may have the answer to these questions….. So… At the
risk of MUCH flame……
From my understandin
3 times today I noticed the server running very high loads of 4-6 and as
high as 10, normally I run 1% or lower usually closer to .3-.6%. Three days
in a row I have gotten over load notices.. Tonight I got an out of memory
notice and jumped right on to tail the mail log.. The sheer amount of spam
Hi,
I just created /usr/lib/courier-imap/etc/maildirshared and put
SpamSetting /home/vpopmail/shared
in it.
Regards Rick
Nigel Wilkinson wrote:
On Tue, 09 Sep 2003 11:00:36 -0400
Scott Blomquist <[EMAIL PROTECTED]> wrote:
Thanks Scott I'll give it a try
Cheers
Nigel
Nigel Wilkinson wr
>
> Really to analyze one I'd have to see the body clean and unmodified (ie:
> not copy-pasted).. Is the original message really a text/plain, or is that
> just a copy-paste you made that lost the HTML encoding?
>
Nope, no HTML. It was really plain ol' text..
> A lot of garbage burried in the HTML
James Herschel wrote:
> Tailing the maillog
> ... /var/qmail/.spamassassin/.spamassassin/bayes_seen
> Running your command:
> ... /root/.spamassassin/bayes_toks
Your two sets of information are from different databases. I suggest
either symlinking /root/.spamassassin to /var/qmail/.spamassassin;
Matt Tencati writes:
> We receive lots of SPAM that is addressed to several users at our site some of which
> are
> old and basically spam traps. I'd like for that message to be tagged as spam for all
> users not just for the spamtrap delivered email.
>
> Does this make sense and if so is anyon
Your FEATURES go in your sendmail macro file for creating your sendmail.cf.
Should be /etc/mail/freebsd.mc on FreeBSD and /etc/mail/sendmail.mc on Red Hat.
-Original Message-
From: Céline REDON [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 12:39 PM
To: '[EMAIL PROTECTED]'
That works! I'll give it a small score to fend off those FPs. Maybe
combine it with a another test like:
header SILD Subject =~ /Sildenafil Citrate/i
:) Thanks!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 4:20 PM
To
> -Original Message-
> From: Mike Kuentz (2) [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 09, 2003 3:04 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] [RD] Subject rule question
>
>
> I see a lot of spams coming through hiding the subject masked using
> ISO-8859, like this
>
>
Forward from me too just to keep in on-list.
I haven't seen any mention of licensing and haven't looked at the
tarball as yet. Is it GPL?
--
AltGrendel <[EMAIL PROTECTED]>
--- Begin Message ---
Hi
Update:
The stats are online now at
http://spam-fitz.de
More before/after info when all the users
Hi
> > Why install it ?
> > - The results of the AI alone are as good as Spamassassin's results.
> > Combined it is therefor better.
> > - It learns very fast. After learning 20 Hams and 20 Spams the results
> > become very good
> > - Even with lesser mails to learn it is useable, but it won't sto
On Tue, 9 Sep 2003, Matt Tencati wrote:
> Hi,
>
> We are using SpamAssassin in a site-wide configuration and I've been investigating
> the
> concept of spamtraps. Basically those old email addresses that collect nothing but
> spam.
> I'm curious if most people setup a mailbox to handle this or
On Tue, 09 Sep 2003 11:00:36 -0400
Scott Blomquist <[EMAIL PROTECTED]> wrote:
Thanks Scott I'll give it a try
Cheers
Nigel
>
>
> Nigel Wilkinson wrote:
>
> > Hi folks
> >
> > the spammassassin FAQ suggests creating public folders on an imap
> > server for moving missed spam and false spam in
I run a Gentoo Linux box, and yesterday upgraded SA via emerge from version
2.55 to 2.60. After the upgrade, SA does not appear to be scoring all of
the email that is being received. I run SA via /etc/procmailrc, calling
spamc, and the spamd process is running.
Logs show spamd processing the ema
Title: Message
use UNINST=1 when you upgrade your installation
like:
perl
Makefile.PL
make
make
test
make
UNINST=1 install
-Original Message-From: Chuck Baker
[mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 10:55
AMTo: [EMAIL PROTECTED]Subject:
[SAtalk] sa
Hi,
We are using SpamAssassin in a site-wide configuration and I've been investigating the
concept of spamtraps. Basically those old email addresses that collect nothing but
spam.
I'm curious if most people setup a mailbox to handle this or if they add the addresses
as
rules in SpamAssassin so
Larry, I think you're right, might be a bug for that rule. Here's from a
message I sent a bit ago, and it didn't hit the MSGID_GOOD_EXCHANGE.
Message-ID: <[EMAIL PROTECTED]>
It has a forty char string. The other thing in that rule is (if I'm reading
it correctly, a regex tends to gimme a heada
Hi all,
How I setup a limit for message size using SA??
We are using qmail+vpopmail+qmailadmin+SA+Clamav
Thanks,
Marlon
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
__
On Tue, 9 Sep 2003, Sam Kalet wrote:
> I have a site where there are two external MXs and I have the same sitewide
> whitelist on each MX. The whitelist is defined in a separate config file
> (named local_whitelist.cf). I keep the authoritative copy of this file on an
> internal system. After m
Mike Kuentz (2) writes:
> I see a lot of spams coming through hiding the subject masked using
> ISO-8859, like this
>
> Subject: =?ISO-8859-1?b?SGFsZiBQcmljZWQgU2lsZGVuYWZpbCBDaXRyYXRl?
> which translates back to a subject of:
>
> Half Priced Sildenafil Citrate
>
> obviously I can look for "Hal
Thanks for the cool software. After turning it up on the Sendmail mail
server I get errors like these in /var/spool/maillog:
Sep 9 13:55:02 mailserver mimedefang-multiplexor: Slave 3 stderr: Use of
uninitialized value in substitution iterator at
/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.p
Hi
Am Die, 2003-09-09 um 03.41 schrieb Kenneth Porter:
> > - The results of the AI alone are as good as Spamassassin's results.
> > Combined it is therefor better.
>
> What would make the combined result better?
My experiences with a practical use of spamassassin with fitz show the
following res
At 03:04 PM 9/9/2003 -0400, Mike Kuentz (2) wrote:
Does SA translate that before hand and that's why it's not hitting?
Yes, QP and base64 are decoded. They are decoded so that they can't avoid
SA's normal subject rules so easily.
body rules also get html tags stripped and end-of-lines removed pr
I'm using spamd which shows 139 spam registered now - I'm thinking I need a
different command because running your suggested command below strangely
reports that only 56 spams are in the DB ...
Tailing the maiilog
Sep 9 15:56:43 ahnold spamd[18508]: debug: bayes: 18508 tie-ing to DB file
R/O /var
Has anyone had any luck integrating the latest Kaspersky smtpscanner 4.5 into a
working SA + Exim config? The new KAV uses two instances of Exim - a listener and
your regular config.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to
Yes, you're not running spamd as root, but you ran spamassassin -D --lint as root.
Note the different paths to the bayes databases in your output.
> -Original Message-
> From: James Herschel [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 09, 2003 3:07 PM
> To: Tom Meunier; [EMAIL P
> Does anyone have any solutions for synchronizing whitelists (and by
> extension Baysian DBs, but that's not as important to me) across
> multiple servers?
..
> Anyone doing this? Anyone have suggestions? Thanks.
I have a site where there are two external MXs and I have the same sitewide
whitel
My Bayesian filter had stopped working. The best I can tell is it
happened about 20 days ago. I am checking this by grepping BAYES in my
maillog files.
The number of nspam and nham are both above 200. As far as I know, I
have not made any configuration change that would cause bayes to stop
work
I am using SpamAssassin (2.53 currently) in a world wide corporate
environment. I have more problems with false positives from Europe, Asia,
Africa, and even Australia than in North and South America.
I am using Sendmail-Switch and call SpamAssassin from MimeDefang with
"action_discard", so I ha
if you run spamassassin -D --lint it will show you a dbug line:
debug: bayes corpus size: nspam = [number], nham = [number]
> -Original Message-
> From: James Herschel [mailto:[EMAIL PROTECTED]
> Plus I'd just like to know how much further I
> have to go before the Bayes kicks in
Am I doing something wrong?
This is the statement I have in my
list:
whitelist_from_rcvd [EMAIL PROTECTED] xnote.com
but it isn't working. do i have the syntax
right?
where [EMAIL PROTECTED] is my email
address.
At 10:57 AM 9/9/2003 -0400, James Herschel wrote:
Is it not taking the Bayes into consideration because I'm below 200 emails
in the DB right now, or am I missing something here?
Correct. SA has only been trained with 132 spam messages so far, and will
not activate bayes until the database has been
Forwarding this back to the list, as I think the technical details would be
of general interest.
Forwarded Message
Date: Tuesday, September 09, 2003 9:57 AM +0200
From: Thorsten Sick <[EMAIL PROTECTED]>
To: Kenneth Porter <[EMAIL PROTECTED]>
Subject: Re: [SAtalk] Fitz, a
Thanks for your input so far! This is odd though. I sent an unmarked spam
to my spam mailbox and ran "/usr/bin/sa-learn --spam --dir
/home/spam/Maildir/new/" to learn the spam. I did not see the amount of
spams reported in the Bayes DB increase.
Is there anyway to list the emails in the Bayes D
At 06:00 PM 9/9/2003 +0200, Céline REDON wrote:
Here is my config : SA Proxy Daemon 2.55 , Postfix
I am currently testing SA with some users.
I did not yet activate Razor /Dcc/Pyzor.
But I am wondering if the tests are really all activated? and if the RBL
are
used ??
How can I be sure of it ???
F
On Tue, 2003-09-09 at 12:26, Weyland wrote:
> On Tuesday 09 September 2003 10:57 am, James Herschel spake:
>
> > Hello, I've been training the Bayesian filter for some time now and I watch
> > it get called upon in /var/log/maillog. Problem is that it doesn't look
> > like it is adding to my spam
I see a lot of spams coming through hiding the subject masked using
ISO-8859, like this
Subject: =?ISO-8859-1?b?SGFsZiBQcmljZWQgU2lsZGVuYWZpbCBDaXRyYXRl?=
which translates back to a subject of:
Half Priced Sildenafil Citrate
obviously I can look for "Half Priced Sildenafil Citrate" in the subje
At 10:54 AM 9/9/2003 -0500, Chuck Baker wrote:
Why am I getting this since I upgraded to 2.60 and what can I do to remedy it?
From the looks of it, the upgrade was somewhat abortive and didn't
correctly upgrade.Those messages indicate SA code didn't get correctly
installed and the old code is run
Hi Pat,
Thank you for giving me yours , but how do you make them active ?
I cannot find 'FEATURES' as a key word to put in the local.cf
???
Thank you for your help
CR
-Message d'origine-
De : Pat Masterson [mailto:[EMAIL PROTECTED]
Envoyé : mercredi 27 août 2003 19:15
À : Céline REDON
O
Daniel Quinlan wrote:
"Jennifer Fountain" <[EMAIL PROTECTED]> writes:
Some of my users sign up for newsletters that SA views as spam (which is
correct due to the nature of the email). How can I allow these types of
emails through - are whitelists the only way? Any other options? I use
SA with q
At 11:34 AM 9/9/2003 -0400, K Old wrote:
Also, they tech guy from the company
was able to connect to port 22, but how? We got a connection refused.
For ssh to be able to validate a key it has to at least allow a
connection. Does anyone have any idea how they achieve this kind of
security?
This ki
I think RC3 contains some tests which do no good. Here is what I just got
in:
X-Spam-Status: Yes, hits=6.2 required=5.0
tests=BAYES_44,FORGED_YAHOO_RCVD,
MIME_HEADER_CTYPE_ONLY,MSGID_FROM_MTA_SHORT autolearn=no
version=2.60-rc3
X-Spam-Report: * 0.0 BAYES_44 BODY: Bayesian spam probability i
You are correct. It needs 68 more spams.
> -Original Message-
> From: James Herschel [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 09, 2003 9:58 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Not sure if my Bayesian filter is adding to
> the score
> ...
>
>
[snip]
> Sep 9 10:
Why am I getting this since I upgraded to 2.60 and what can I do to remedy it?
sa-learn --showdots --spam --mbox ~/evolution/local/Spam/mbox
configuration file "/usr/share/spamassassin/20_dnsbl_tests.cf" requires version 2.60 of SpamAssassin, but this is code version 2.55. Maybe you need to us
On Tuesday 09 September 2003 10:57 am, James Herschel spake:
> Hello, I've been training the Bayesian filter for some time now and I watch
> it get called upon in /var/log/maillog. Problem is that it doesn't look
> like it is adding to my spam scores. I have "use_bayes 1" turned on in my
>
Hello, I've been training the Bayesian filter for some time now and I watch
it get called upon in /var/log/maillog. Problem is that it doesn't look
like it is adding to my spam scores. I have "use_bayes 1" turned on in my
config file and run sa-learn nightly on spam and ham mailboxes I've set up.
Hi all,
Here is my config : SA Proxy Daemon 2.55 , Postfix
I am currently testing SA with some users.
I did not yet activate Razor /Dcc/Pyzor.
But I am wondering if the tests are really all activated? and if the RBL
are
used ??
How can I be sure of it ???
** Here are my logs *
Aug
Yeah, must be an installation problem. Without bayes I got:
MONEY_BACK (1.0 points) BODY: Money back guarantee
HTML_FONT_COLOR_UNSAFE (0.1 points) BODY: HTML font color not within
safe 6x6x6 palette
HTML_FONT_COLOR_RED (0.1 points) BODY: HTML font color is red
HTML_50_60 (0.5 poi
On Tue, 2003-09-09 at 01:30, Daniel Quinlan wrote:
> "Jennifer Fountain" <[EMAIL PROTECTED]> writes:
>
> > Some of my users sign up for newsletters that SA views as spam (which is
> > correct due to the nature of the email). How can I allow these types of
> > emails through - are whitelists the o
Nigel Wilkinson wrote:
Hi folks
the spammassassin FAQ suggests creating public folders on an imap server
for moving missed spam and false spam into so that the bayesian stuff
can learn. Could someone point me to some documentation or give me a
pointer on how to create these please.
Cheers
Nigel
Hello everyone,
A couple of weeks ago I mentioned that we were looking at a spam
appliance and wanted suggestions as to why SA is better than any
appliance. Thank you to all who responded.
We ended up ordering the Barracuda from barracudanetworks.com. It had a
30 trial and we took advantage of
I have MailScanner installed and running well for normal unix users
using postfix +Spamassassin+McAfee. All mail is scanned for viruses and
spam. I am also using vm-pop3d for virtual users. All virtual users mail
is scanned for viruses but not spam. Has this anything to do with the
fact that all vi
On Tuesday 09 September 2003 13:28 CET Michael W. Cocke wrote:
> On Sun, 07 Sep 2003 14:11:58 +0200, you wrote:
> >SA thinks mail from TheBat 2.0 is spam:
>
> I've never seen any email from TheBat that WASN'T spam.
I hardly see any mail from Outlook Express that isn't spam ;-)
Cheers,
Malte
--
On Tuesday 09 September 2003 14:19 CET Henrik Schmiediche wrote:
> Can someone send me an example on how to setup 2.60-rc3 with domain path
> sockets? How do you start spamd & do you call spamc with different
> options?
start spamd like this:
spamd -d -r /var/run/spamd.pid --socketpath=/var/run/
Hello,
Can someone send me an example on how to setup 2.60-rc3 with domain path
sockets? How do you start spamd & do you call spamc with different
options?
Is this option the same as switching from TCP to UDP if you are running
spamc/spamd on localhost? I remember vaguely reading about this, bu
On Mon, 2003-09-08 at 09:39, Mike Kuentz (2) wrote:
> We do site wide here, so I've had to make adjustments, too. Not ready to do
> bayes, yet. Not sure how well it would work for a site wide environment.
> We do consulting, so most of our FPs used to come from "Dear Sir, look at my
> resume", fl
> -Original Message-
> From: Gary Shine
> When I run the solaris solaris-rc-script.sh I see this.
>
> unix passed to setlogsock, but path not available at
> /usr/local/bin/spamd line 207
>
> HOWEVER
>
> # ps -ef | grep spamd
> root 4262 4250 0 01:19:39 pts/10:00 grep spamd
HI all, newbie SA question, so don't be too harsh!!!
Just installed SA 2.55 on RH8.0 using exim 3.36
The basics seem to work ok but if i use an exim filter file ( not an
individual .forward ), it doesn't seem to recognise $local_part
Now i know that Exim uses this as in the config it delivers to
On Sun, 07 Sep 2003 14:11:58 +0200, you wrote:
>SA thinks mail from TheBat 2.0 is spam:
I've never seen any email from TheBat that WASN'T spam.
Mike-
Mornings: Evolution in action. Only the grumpy will survive.
-
Please note - Due to the in
I'm running successfully SpamAssassin (spamd) on a freeBSD VPS.
However when I try to train SpamAssassin with sa-learn I get the following error:Can't locate Mail/SpamAssassin/CmdLearn.pm in @INC
I should also mention I had to patch spamd with the following instructions:
http://www.perlcode.org/tu
Hey Mike,
> -Original Message-
> From: Mike Kuentz (2
> Good call, I'm sorry I missed that. What a shame, I was
> hoping I was on to something, if nothing other than
> solidifying the MSGID_GOOD_EXCHANGE rule. Oh well, back to
> the drawing board!
>
> Mike
I am curious, does MSGID_GO
I'm a bit confused. I've installed SA 2.55 last week and everything seemed to
work as planned. I'm running it via procmail using the example shipped. The
problem I'm having is that there is no tagging ( 'X-Spam' ) in the header on
the actuall spam I'm recieving, but the 'real' mail get tagged.
I'm now using the default rules and receive some spam on my PC.
I put those spam in a spam box on my PC.
How can I use this box to to work with sa_lear on my Unix Server to find new
rules?
Francis
---
This sf.net email is sponsored by:ThinkGe
71 matches
Mail list logo
