RE: [SAtalk] Rule for no reverse DNS

2003-09-10 Thread Covington, Chris
> -Original Message- > I've noticed that Columbia University has an SA rule for no > reverse DNS: CU_NO_RDNS on > http://www.columbia.edu/acis/email/filters/spamscore.html I'd imagine I'd only give it minimal points. Chris --- This s

[SAtalk] spamd vs spamassassin from .forward files

2003-09-10 Thread John Schneider
Please forgive me if this is already answered in the list archives. But, if it is, I didn't find it: My config is sendmail and procmail with SA 2.55 on FreeBSD Unix. I am currently running SpamAssassin through procmail for individual users. Their .forward files have the command: "|exec /usr/loc

Re: [SAtalk] spamd performance

2003-09-10 Thread Matt Kettler
At 06:21 PM 9/10/03 -0400, Paul Farber wrote: Whats causing the 3X difference in msg scanning? Are you using _ANY_ network checks? DNS blacklists, razor2, dcc, pyzor, etc all have wildly varying times because they are heavily dependant on the load at the remote server and the load of every inter

[SAtalk] Rule for no reverse DNS

2003-09-10 Thread Covington, Chris
Hello, I've noticed that Columbia University has an SA rule for no reverse DNS: CU_NO_RDNS on http://www.columbia.edu/acis/email/filters/spamscore.html Does anyone know how to implement this rule? thanks Chris --- This sf.net email is sponsor

[SAtalk] Rules for hoaxes

2003-09-10 Thread Tom Meunier
I'm mulling over whether to make some SA rules for some of the more common urban legends and virus hoaxes. Has anyone played with this, that is willing to share experiences? -tom --- This sf.net email is sponsored by:ThinkGeek Welcome to gee

Re: [SAtalk] Install problem

2003-09-10 Thread Rick Macdougall
Hi, Alastair Battrick wrote: I'm having a problem installing SA 2.55 The server is running Redhat 7.2 (I think) has 256Mb RAM and plenty of spare disk space. When I go to cpan, I can get and make Mail::SpamAssassin no problems, but when I 'make test' I get this: -- Running ma

Re: [SAtalk] spamd performance

2003-09-10 Thread Robin Lynn Frank
On Wednesday 10 September 2003 03:21 pm, Paul Farber wrote: > hello all > > new install of spamassassin 2.55 on a RH 9.0 machine (custom kernel build) > > PC is an 800Mhz VIA Eden C-3 processor, 512Mb RAM 20Gb HDD. THe primary > mail server uses spamc to toss the mail to the scanner. > > Heres a

[SAtalk] vm-pop3d MailScanner Postfix

2003-09-10 Thread Jerry Carter
I have MailScanner installed and running well for normal unix users using postfix +Spamassassin+McAfee. All mail is scanned for viruses and spam. I am also using vm-pop3d for virtual users. All virtual users mail is scanned for viruses but not spam. Has this anything to do with the fact that all vi

[SAtalk] spamd performance

2003-09-10 Thread Paul Farber
hello all new install of spamassassin 2.55 on a RH 9.0 machine (custom kernel build) PC is an 800Mhz VIA Eden C-3 processor, 512Mb RAM 20Gb HDD. THe primary mail server uses spamc to toss the mail to the scanner. Heres a taste of the spamd times: first column is time (seconds) second column i

Re: [SAtalk] Maildir, procmail, and SA

2003-09-10 Thread Keith Olmstead
Procmail does support Maildir format: 1999/11/22: v3.14 Support delivery to maildir mailboxes I have installed 3.22, but I believe that I know why it is not creating the dir correctly, but don't know how to fix it. Maybe someone can help. I will also post this in the procmaillist. I have add

[SAtalk] Install problem

2003-09-10 Thread Alastair Battrick
I'm having a problem installing SA 2.55 The server is running Redhat 7.2 (I think) has 256Mb RAM and plenty of spare disk space. When I go to cpan, I can get and make Mail::SpamAssassin no problems, but when I 'make test' I get this: -- Running make test PERL_DL_NONLAZY=1 /us

Re: [SAtalk] 2.60 message/scan count

2003-09-10 Thread Theo Van Dinter
On Wed, Sep 10, 2003 at 03:04:45PM -0400, Pete O'Hara wrote: > and couldn't find how to how many messages have been scanned in 2.60. It > looks like the old bayes_msgcount file is no longer used. sa-learn yes, it's no longer used. And you can't find out scan count from SA any longer. -- Rando

[SAtalk] routing only non-local mail to spamassassin

2003-09-10 Thread Test, James
I currently have the following router statement (using exim 4.22): spamcheck_router: driver = accept transport = spamcheck local_parts = lsearch;/etc/mail/spamusers no_verify condition = "${if and { {!def:h_X-Spam-Flag:} \ {!eq {$received_protocol}{spam-scanned}

RE: [SAtalk] Is no message-id header a good measure of spam?

2003-09-10 Thread James Herschel
Thanks for the input ... gives me a better understanding of the implications ... I tried to grep for MSG_ID in the cf files and could not find anything ... this could be a useful rule to incorporate I think as it was blocking A LOT of spam for us. James Herschel -Original Message- From:

Re: [SAtalk] China shuts a few spammers down

2003-09-10 Thread Rich Puhek
Chris Santerre wrote: http://www.washingtonpost.com/wp-dyn/articles/A48060-2003Sep9.html Yesss!!! Of course they didn't do anything until 'they' started to recieve the spam. Now if only Korea would follow! Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchan

[SAtalk] regarding autolearning

2003-09-10 Thread Nick Patavalis
Consider the following spamassasin setup: auto_learn_threshold_nonspam 4.99 auto_learn_threshold_spam 5.0 (that is: auto-learn from *every* message) Messages identified as spam are saved (by procmail) in a "spam" mbox. All others go to the inbox. Whenever I see (in my inbox) a message that

[SAtalk] 2.60 message/scan count

2003-09-10 Thread Pete O'Hara
Hi, RTFM me if this is obvious but I looked googled, archived and read docs and couldn't find how to how many messages have been scanned in 2.60. It looks like the old bayes_msgcount file is no longer used. sa-learn --dump doesn't seem to provide this info either. From: 2.60: lib/Mail/SpamAssas

Re: [SAtalk] Is no message-id header a good measure of spam?

2003-09-10 Thread Vivek Khera
> "JH" == James Herschel <[EMAIL PROTECTED]> writes: JH> What I'm asking is: JH> 1. Is the lack of a message-id header an accurate measure of spam? I think it is, but that's only from observing SPAM I receive; I rarely poke into the headers of my wanted mail. However, when my father used t

Re: [SAtalk] Bayes works for some users but not others

2003-09-10 Thread Andrew Clarke
Well, on further examination, it seems I'm now automagically getting the Bayes scores in my emails again. I've been reading on a parallel discussion that it doesn't show up for emails like BAYES_50, so maybe every single spam I've looked at in the last few days has fallen in that range. Strange,

Re: [SAtalk] Getting slammed with virri and spam

2003-09-10 Thread Scott Rothgaber
Debbie D wrote: server running very high loads One of my servers, which normally receives 10,000 messages per day, has seen 25,000+ in the last few days. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek

[SAtalk] Rouge spamd processes

2003-09-10 Thread Douglas Pace
I've started seeing "rouge" spamd processes on one of our Unix servers here. They start to suck up 8%+ of the cpu cycles on a not small Solaris machine and they fill up /var/log because of repetative failures to the syslog. Here is a small sample of the errors we see. Sep 9 04:02:26 jan.ucc.nau

Re: [SAtalk] No BAYES_* ?

2003-09-10 Thread Carlo Wood
On Wed, Sep 10, 2003 at 10:36:33AM -0400, Matt Kettler wrote: > At 03:55 PM 9/10/03 +0200, Carlo Wood wrote: > >The attached mail got through spam-assassin without a problem... > >Why? Where is the BAYES_* test? > >Does this mean that the bayes engine thinks this is less than 10% > >chance to be s

Re: [SAtalk] RC3 problem with some tests and scores

2003-09-10 Thread Kai Schaetzl
Adding to myself. I sent an almost empty formmail myself which came thru as ham and then pasted the same text in we got from the first spam-tagged message. And again, the message was tagged as spam. But this time it added a hefty 4.1 from the AWL which makes me wonder, how that could happen, be

[SAtalk] China shuts a few spammers down

2003-09-10 Thread Chris Santerre
http://www.washingtonpost.com/wp-dyn/articles/A48060-2003Sep9.html Yesss!!! Of course they didn't do anything until 'they' started to recieve the spam. Now if only Korea would follow! Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroo

[SAtalk] Add custom rbl's

2003-09-10 Thread Lucas Albers
I've decided to switch solely to using spamassassin for rejecting mail from open relays. Previously I used sendmail rbl checks and then spamassassin to filter/reject mail. I currently use 22 rbl's in sendmail via dccdnsbl or enhndnsbl and I would like to move the lookpus into sa, to lower my rbl fa

[SAtalk] Is no message-id header a good measure of spam?

2003-09-10 Thread James Herschel
We've got two mail servers in place right now - one is my spam gateway with spamassassin that is running with a small group of test users, and the other is the primary email server running Eudora Interent Mail Server (yuck). A colleague of mine put a bunch of filters on the EIMS server, which incl

Re: [SAtalk] bayes and update to 2.60

2003-09-10 Thread Theo Van Dinter
On Wed, Sep 10, 2003 at 07:17:46AM -0400, [EMAIL PROTECTED] wrote: > Is it normal for all bayes files to be replaced during an upgrade? Doesn't > this mean that all previous learning is lost? Did you read the instructions on making sure you have DB_File installed, doing "sa-learn --import" if nece

Re: [SAtalk] bayes test is absent in some messages

2003-09-10 Thread Matt Kettler
At 12:52 PM 9/10/03 +, Michael V. Sokolov wrote: Why? The much of the "undecided" mid-range bayes has a zero score, thus never shows up. For example, if the bayes engine calls it an even 50/50 chance of being spam/nonspam, there's no points assigned. And that makes sense since bayes is more-

[SAtalk] Statistics for Spamassassin ?

2003-09-10 Thread Sorin Chiorean
Hi, Does anybody know if there is a tool like WEBALIZER (for Apache) for Spamassassin ? If the answer is YES where ? I'm running Spamassassin on FreeBSD 4.3-RELEASE-p20 with sendmail, Qpopper, procmail etc.. Thanks, Sorin Chiorean Network Specialist Computer Partners -

RE: [SAtalk] Not sure if my Bayesian filter is adding to the score ...

2003-09-10 Thread James Herschel
Hmmm ... this isn't good. After reading through the FAQ again, it seems that I'm doing something a little careless. I'm running spamd under the user "spamd" - but I run sa-learn out of root's crontab. I'll fix it so that sa-learn runs as spamd as well, but is there a way to combine the two separ

Re: [SAtalk] No BAYES_* ?

2003-09-10 Thread Matt Kettler
At 03:55 PM 9/10/03 +0200, Carlo Wood wrote: The attached mail got through spam-assassin without a problem... Why? Where is the BAYES_* test? Does this mean that the bayes engine thinks this is less than 10% chance to be spam? That would be ridiculous! How can I test on which keywords it is basin

Re: [SAtalk] Header problem, intermittent, SpamAssassin 2.60 rc3

2003-09-10 Thread Theo Van Dinter
On Wed, Sep 10, 2003 at 10:31:34AM +0100, Yoav Aner wrote: > sure email is not scanned twice, and even if it was - then it would be the > case for all messages rather than just few. that would be true if you only get mail going through the same path all the time. it's likely not you scanning twic

[SAtalk] newbie questions

2003-09-10 Thread Distribution Lists
Hi there, I'm running the following RedHat8 Postfix Amavis ClamAV Squirrelmail Spamassassin 2.55 Spamassassin is new to me, so please bear with me 1. For each of my mail users, is it possible to move identifed spam to a junk folder/directory, away from the their inbox ? 2. Or otherwise, deleted

RE: [SAtalk] Help, Where are the awards, List of companies using it?

2003-09-10 Thread Brad Tarver
Title: Message RH8 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 8:40 AMTo: [EMAIL PROTECTED]Subject: [SAtalk] Help, Where are the awards, List of companies using it? P.S. Anyone know when spamassassin was i

Re: [SAtalk] No BAYES_* ?

2003-09-10 Thread Carlo Wood
On Wed, Sep 10, 2003 at 03:55:41PM +0200, Carlo Wood wrote: > The attached mail got through spam-assassin without a problem... > Why? Where is the BAYES_* test? It turns out that NO mail is having the BAYES_* test anymore all of a sudden... Why? How can I debug what is going on please? -- Car

Re: [SAtalk] Re: Learn

2003-09-10 Thread Fred
http://people.freenet.de/ukrebs/dbxconv.html This will let you convert to the MBOX format needed for SA. Frederic Tarasevicius Internet Information Services, Inc. Francis wrote: > My box is in the format dbx (Outlook Express). > > Is it possible? > > Francis > > - Original Message -

RE: [SAtalk] No BAYES_* ?

2003-09-10 Thread Tom Meunier
If there's no BAYES_ test whatsoever, it isn't thinking it's ham. It's not saying anything whatsoever. Probably based upon the fact that it didn't have sufficient tokens or something. Please note that Bayes doesn't use keywords. It uses tokens, which may or may not resemble words. Also note

[SAtalk] Help, Where are the awards, List of companies using it?

2003-09-10 Thread jjensen
Title: Message I understand spamassassin is award wining and I am using it with amavisd-new on RedHat 9 but I can't find any articles on the web site about these awards.   P.S. Anyone know when spamassassin was included as a default on RedHat?   P.S.S. Is there anything showing official acc

RE: [SAtalk] Logfile of Spam-detected mails

2003-09-10 Thread Test, James
Yes. In your exim config, make sure you have a line in your main section: system_filter = /etc/mail/system-filter (or whatever /path/filename you want to use) Then in the system_filter file: logfile /var/log/spamlog(or whatever /path/filename you want to use) #

[SAtalk] No BAYES_* ?

2003-09-10 Thread Carlo Wood
The attached mail got through spam-assassin without a problem... Why? Where is the BAYES_* test? Does this mean that the bayes engine thinks this is less than 10% chance to be spam? That would be ridiculous! How can I test on which keywords it is basing that this ham? -- Carlo Wood <[EMAIL PROT

RE: [SAtalk] [RD] MSGID_GOOD_EXCHANGE

2003-09-10 Thread Mike Kuentz (2)
All good points, thanks to everyone for the feedback on this. ordb.org lists Exchange as the number 2 MTA when it comes to open relays, so no, I'm not saying it isn't used! :) I guess I'll put a nail in the coffin of this idea. -Original Message- From: Simon Byrnand [mailto:[EMAIL PRO

[SAtalk] Re: SA only ran 1 test??

2003-09-10 Thread jpf
Yes.. I stand corrected...it only HIT one test... I am running a fairly new and standard out-of-box installation of SA, aside from my customized black/whitelist. I would have expected SA to have picked up on several of the keywords...but I guess it was good wordsmithing that got it thru. My apol

Re: [SAtalk] Re: Learn

2003-09-10 Thread Francis
My box is in the format dbx (Outlook Express). Is it possible? Francis - Original Message - From: "Jon Drukman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 09, 2003 6:58 PM Subject: [SAtalk] Re: Learn > Francis wrote: > > I'm now using the default rules and re

RE: [SAtalk] SA only ran 1 test??

2003-09-10 Thread Tom Meunier
How can you tell it only ran one test? I'd say it ran all of the tests but only hit on one of them. What rule do you feel your example spams broke, that SpamAssassin missed tagging? The only answer to spams like your example is Bayes, RBLs, and distributed checksums such as Razor/Pyzor/DCC, if

RE: [SAtalk] [RD] MSGID_GOOD_EXCHANGE

2003-09-10 Thread Simon Byrnand
> > IMHO, I think finding out if a message is legit carries just as much > weight > as finding out if it is crap. If I can combine x amount of tests to > verify > that it's legitimately from an Exchange server, it would be worth it from > the perspective that I could maybe side line those message

[SAtalk] bayes and update to 2.60

2003-09-10 Thread skopel
I upgraded to version 2.60 and I think all my bayes files were replaced... I think this because when I ran a debug I saw a line that said there were 0 messages in my db... Is it normal for all bayes files to be replaced during an upgrade? Doesn't this mean that all previous learning is lost? Duri

[SAtalk] Logfile of Spam-detected mails

2003-09-10 Thread Jens Strohschnitter
Hi there, is it possible to write a logfile that only contains entries that showes spam-detected mails like: FROM foo TO bar -SPAM- -Time- -> for expample. I'm using spamassin 2.55 as spamd working with exim4.20. -- Regards, Jens Strohschnitter - *!

Re: [SAtalk] Header problem, intermittent, SpamAssassin 2.60 rc3

2003-09-10 Thread Yoav Aner
I'm having the same problem with SA-2.55. I've tried using both spamc and spamassassin piped from procmail to filter the mail and I'm having just a few of the messages scored differently on the header and body. I'm quite sure email is not scanned twice, and even if it was - then it would be the cas

[SAtalk] bayes test is absent in some messages

2003-09-10 Thread Michael V. Sokolov
Why? -- Michael V. Sokolov, SA/Helpdesk --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https

[SAtalk] Re: SA only ran 1 test??

2003-09-10 Thread jpf
and this one got a score of 0.0!! i have the procmail log file available for the first one...but nothing looks abnormal there... i'm stumped...especially since they are formatted similarly... == Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Envelope-To: [EMAIL PROTECTED]

[SAtalk] BAYES : how to collect spam and ham

2003-09-10 Thread Céline REDON
Hi all, I am currently using SA 2.55. without Bayesian filters, and I would like to put them on. I have read the archive of the list , and the official SA site, but I am still wondering about how to collect spam and ham. * As for sure, I understood it was not a good idea that users forward spa

[SAtalk] Implementing sa-learn on system using Outlook via POP

2003-09-10 Thread Jefferson Cowart
I'm running spamassassin site wide on a small server. I have per-user prefs set up in a SQL db, but autowhite list and bayes db's are currently sitewide. What I would like to be able to do is allow users some way to report false positives and negatives to sa-learn. The recommendations I've see to d

Re: [SAtalk] Useful reporting with SA

2003-09-10 Thread Rob Chanter
Sorry about the late follow-up, just catching up on a couple of lists. On Mon, Aug 18, 2003 at 06:42:34PM -0500, Ken Winke wrote: > > - I'd like to be able to create a quick ranking of the most popular > rules, and also the least popular rules that get used on these corpuses. > I think that m

Re: [Fwd: Re: [SAtalk] Fitz, an add-on to Spamassassin]

2003-09-10 Thread Thorsten Sick
Hi It is GPL Thorsten Am Die, 2003-09-09 um 22.31 schrieb AltGrendel: > Forward from me too just to keep in on-list. > > I haven't seen any mention of licensing and haven't looked at the > tarball as yet. Is it GPL? > -- > AltGrendel <[EMAIL PROTECTED]> > > > From: Thorsten Sick <[EMAIL

[SAtalk] bayes test is absent in some messages

2003-09-10 Thread Michael V. Sokolov
Why? -- Michael V. Sokolov, SA/Helpdesk --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https