> -Original Message-
> I've noticed that Columbia University has an SA rule for no
> reverse DNS: CU_NO_RDNS on
> http://www.columbia.edu/acis/email/filters/spamscore.html
I'd imagine I'd only give it minimal points.
Chris
---
This s
Please forgive me if this is already answered in the list archives. But, if
it is, I didn't find it:
My config is sendmail and procmail with SA 2.55 on FreeBSD Unix.
I am currently running SpamAssassin through procmail for individual users.
Their .forward files have the command:
"|exec /usr/loc
At 06:21 PM 9/10/03 -0400, Paul Farber wrote:
Whats causing the 3X difference in msg scanning?
Are you using _ANY_ network checks? DNS blacklists, razor2, dcc, pyzor, etc
all have wildly varying times because they are heavily dependant on the
load at the remote server and the load of every inter
Hello,
I've noticed that Columbia University has an SA rule for no reverse DNS:
CU_NO_RDNS on http://www.columbia.edu/acis/email/filters/spamscore.html
Does anyone know how to implement this rule?
thanks
Chris
---
This sf.net email is sponsor
I'm mulling over whether to make some SA rules for some of the more common urban
legends and virus hoaxes. Has anyone played with this, that is willing to share
experiences?
-tom
---
This sf.net email is sponsored by:ThinkGeek
Welcome to gee
Hi,
Alastair Battrick wrote:
I'm having a problem installing SA 2.55
The server is running Redhat 7.2 (I think) has 256Mb RAM and plenty of spare
disk space.
When I go to cpan, I can get and make Mail::SpamAssassin no problems, but
when I 'make test' I get this:
--
Running ma
On Wednesday 10 September 2003 03:21 pm, Paul Farber wrote:
> hello all
>
> new install of spamassassin 2.55 on a RH 9.0 machine (custom kernel build)
>
> PC is an 800Mhz VIA Eden C-3 processor, 512Mb RAM 20Gb HDD. THe primary
> mail server uses spamc to toss the mail to the scanner.
>
> Heres a
I have MailScanner installed and running well for normal unix users
using postfix +Spamassassin+McAfee. All mail is scanned for viruses and
spam. I am also using vm-pop3d for virtual users. All virtual users mail
is scanned for viruses but not spam. Has this anything to do with the
fact that all vi
hello all
new install of spamassassin 2.55 on a RH 9.0 machine (custom kernel build)
PC is an 800Mhz VIA Eden C-3 processor, 512Mb RAM 20Gb HDD. THe primary mail
server uses spamc to toss the mail to the scanner.
Heres a taste of the spamd times:
first column is time (seconds) second column i
Procmail does support Maildir format:
1999/11/22: v3.14
Support delivery to maildir mailboxes
I have installed 3.22, but I believe that I know why it is not creating the dir
correctly, but don't know how to fix it. Maybe someone can help. I will also post
this in the procmaillist.
I have add
I'm having a problem installing SA 2.55
The server is running Redhat 7.2 (I think) has 256Mb RAM and plenty of spare
disk space.
When I go to cpan, I can get and make Mail::SpamAssassin no problems, but
when I 'make test' I get this:
--
Running make test
PERL_DL_NONLAZY=1
/us
On Wed, Sep 10, 2003 at 03:04:45PM -0400, Pete O'Hara wrote:
> and couldn't find how to how many messages have been scanned in 2.60. It
> looks like the old bayes_msgcount file is no longer used. sa-learn
yes, it's no longer used. And you can't find out scan count from SA any longer.
--
Rando
I currently have the following router statement (using exim 4.22):
spamcheck_router:
driver = accept
transport = spamcheck
local_parts = lsearch;/etc/mail/spamusers
no_verify
condition = "${if and { {!def:h_X-Spam-Flag:} \
{!eq {$received_protocol}{spam-scanned}
Thanks for the input ... gives me a better understanding of the implications
...
I tried to grep for MSG_ID in the cf files and could not find anything ...
this could be a useful rule to incorporate I think as it was blocking A LOT
of spam for us.
James Herschel
-Original Message-
From:
Chris Santerre wrote:
http://www.washingtonpost.com/wp-dyn/articles/A48060-2003Sep9.html
Yesss!!! Of course they didn't do anything until 'they' started to
recieve the spam. Now if only Korea would follow!
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchan
Consider the following spamassasin setup:
auto_learn_threshold_nonspam 4.99
auto_learn_threshold_spam 5.0
(that is: auto-learn from *every* message)
Messages identified as spam are saved (by procmail) in a "spam"
mbox. All others go to the inbox.
Whenever I see (in my inbox) a message that
Hi,
RTFM me if this is obvious but I looked googled, archived and read docs
and couldn't find how to how many messages have been scanned in 2.60. It
looks like the old bayes_msgcount file is no longer used. sa-learn
--dump doesn't seem to provide this info either.
From: 2.60: lib/Mail/SpamAssas
> "JH" == James Herschel <[EMAIL PROTECTED]> writes:
JH> What I'm asking is:
JH> 1. Is the lack of a message-id header an accurate measure of spam?
I think it is, but that's only from observing SPAM I receive; I
rarely poke into the headers of my wanted mail.
However, when my father used t
Well, on further examination, it seems I'm now automagically getting the
Bayes scores in my emails again. I've been reading on a parallel
discussion that it doesn't show up for emails like BAYES_50, so maybe
every single spam I've looked at in the last few days has fallen in that
range. Strange,
Debbie D wrote:
server running very high loads
One of my servers, which normally receives 10,000 messages per day, has
seen 25,000+ in the last few days.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek
I've started seeing "rouge" spamd processes on one of our Unix servers
here. They start to suck up 8%+ of the cpu cycles on a not small Solaris
machine and they fill up /var/log because of repetative failures to the
syslog. Here is a small sample of the errors we see.
Sep 9 04:02:26 jan.ucc.nau
On Wed, Sep 10, 2003 at 10:36:33AM -0400, Matt Kettler wrote:
> At 03:55 PM 9/10/03 +0200, Carlo Wood wrote:
> >The attached mail got through spam-assassin without a problem...
> >Why? Where is the BAYES_* test?
> >Does this mean that the bayes engine thinks this is less than 10%
> >chance to be s
Adding to myself. I sent an almost empty formmail myself which came thru
as ham and then pasted the same text in we got from the first spam-tagged
message. And again, the message was tagged as spam. But this time it added
a hefty 4.1 from the AWL which makes me wonder, how that could happen,
be
http://www.washingtonpost.com/wp-dyn/articles/A48060-2003Sep9.html
Yesss!!! Of course they didn't do anything until 'they' started to
recieve the spam. Now if only Korea would follow!
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroo
I've decided to switch solely to using spamassassin for rejecting mail
from open relays.
Previously I used sendmail rbl checks and then spamassassin to
filter/reject mail.
I currently use 22 rbl's in sendmail via dccdnsbl or enhndnsbl and I would
like to move the lookpus into sa, to lower my rbl fa
We've got two mail servers in place right now - one is my spam gateway with
spamassassin that is running with a small group of test users, and the other
is the primary email server running Eudora Interent Mail Server (yuck). A
colleague of mine put a bunch of filters on the EIMS server, which incl
On Wed, Sep 10, 2003 at 07:17:46AM -0400, [EMAIL PROTECTED] wrote:
> Is it normal for all bayes files to be replaced during an upgrade? Doesn't
> this mean that all previous learning is lost?
Did you read the instructions on making sure you have DB_File installed,
doing "sa-learn --import" if nece
At 12:52 PM 9/10/03 +, Michael V. Sokolov wrote:
Why?
The much of the "undecided" mid-range bayes has a zero score, thus never
shows up. For example, if the bayes engine calls it an even 50/50 chance of
being spam/nonspam, there's no points assigned. And that makes sense since
bayes is more-
Hi,
Does anybody know if there is a tool like WEBALIZER (for Apache) for
Spamassassin ?
If the answer is YES where ?
I'm running Spamassassin on FreeBSD 4.3-RELEASE-p20 with sendmail,
Qpopper, procmail etc..
Thanks,
Sorin Chiorean
Network Specialist
Computer Partners
-
Hmmm ... this isn't good. After reading through the FAQ again, it seems
that I'm doing something a little careless. I'm running spamd under the
user "spamd" - but I run sa-learn out of root's crontab.
I'll fix it so that sa-learn runs as spamd as well, but is there a way to
combine the two separ
At 03:55 PM 9/10/03 +0200, Carlo Wood wrote:
The attached mail got through spam-assassin without a problem...
Why? Where is the BAYES_* test?
Does this mean that the bayes engine thinks this is less than 10%
chance to be spam? That would be ridiculous!
How can I test on which keywords it is basin
On Wed, Sep 10, 2003 at 10:31:34AM +0100, Yoav Aner wrote:
> sure email is not scanned twice, and even if it was - then it would be the
> case for all messages rather than just few.
that would be true if you only get mail going through the same path
all the time. it's likely not you scanning twic
Hi there, I'm running the following
RedHat8
Postfix
Amavis
ClamAV
Squirrelmail
Spamassassin 2.55
Spamassassin is new to me, so please bear with me
1. For each of my mail users, is it possible to move identifed spam to a
junk folder/directory, away from the their inbox ?
2. Or otherwise, deleted
Title: Message
RH8
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday,
September 10, 2003 8:40 AMTo:
[EMAIL PROTECTED]Subject: [SAtalk] Help,
Where are the awards, List of companies using it?
P.S. Anyone know
when spamassassin was i
On Wed, Sep 10, 2003 at 03:55:41PM +0200, Carlo Wood wrote:
> The attached mail got through spam-assassin without a problem...
> Why? Where is the BAYES_* test?
It turns out that NO mail is having the BAYES_* test anymore
all of a sudden...
Why?
How can I debug what is going on please?
--
Car
http://people.freenet.de/ukrebs/dbxconv.html
This will let you convert to the MBOX format needed for SA.
Frederic Tarasevicius
Internet Information Services, Inc.
Francis wrote:
> My box is in the format dbx (Outlook Express).
>
> Is it possible?
>
> Francis
>
> - Original Message -
If there's no BAYES_ test whatsoever, it isn't thinking it's ham. It's not saying
anything whatsoever. Probably based upon the fact that it didn't have sufficient
tokens or something.
Please note that Bayes doesn't use keywords. It uses tokens, which may or may not
resemble words. Also note
Title: Message
I understand
spamassassin is award wining and I am using it with amavisd-new
on RedHat 9 but I can't find any articles on the web site about these
awards.
P.S. Anyone know
when spamassassin was included as a default on RedHat?
P.S.S. Is there
anything showing official acc
Yes. In your exim config, make sure you have a line in your main section:
system_filter = /etc/mail/system-filter (or whatever /path/filename you want to use)
Then in the system_filter file:
logfile /var/log/spamlog(or whatever /path/filename you want to use)
#
The attached mail got through spam-assassin without a problem...
Why? Where is the BAYES_* test?
Does this mean that the bayes engine thinks this is less than 10%
chance to be spam? That would be ridiculous!
How can I test on which keywords it is basing that this ham?
--
Carlo Wood <[EMAIL PROT
All good points, thanks to everyone for the feedback on this. ordb.org
lists Exchange as the number 2 MTA when it comes to open relays, so no, I'm
not saying it isn't used! :) I guess I'll put a nail in the coffin of this
idea.
-Original Message-
From: Simon Byrnand [mailto:[EMAIL PRO
Yes.. I stand corrected...it only HIT one test...
I am running a fairly new and standard out-of-box installation of SA, aside
from my customized black/whitelist.
I would have expected SA to have picked up on several of the keywords...but
I guess it was good wordsmithing that got it thru.
My apol
My box is in the format dbx (Outlook Express).
Is it possible?
Francis
- Original Message -
From: "Jon Drukman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 09, 2003 6:58 PM
Subject: [SAtalk] Re: Learn
> Francis wrote:
> > I'm now using the default rules and re
How can you tell it only ran one test? I'd say it ran all of the tests
but only hit on one of them.
What rule do you feel your example spams broke, that SpamAssassin missed
tagging? The only answer to spams like your example is Bayes, RBLs, and
distributed checksums such as Razor/Pyzor/DCC, if
>
> IMHO, I think finding out if a message is legit carries just as much
> weight
> as finding out if it is crap. If I can combine x amount of tests to
> verify
> that it's legitimately from an Exchange server, it would be worth it from
> the perspective that I could maybe side line those message
I upgraded to version 2.60 and I think all my bayes files were replaced...
I think this because when I ran a debug I saw a line that said there were
0 messages in my db...
Is it normal for all bayes files to be replaced during an upgrade? Doesn't
this mean that all previous learning is lost?
Duri
Hi there,
is it possible to write a logfile that only contains
entries that showes spam-detected mails like:
FROM foo TO bar -SPAM- -Time-
-> for expample.
I'm using spamassin 2.55 as spamd working with exim4.20.
--
Regards,
Jens Strohschnitter
-
*!
I'm having the same problem with SA-2.55. I've tried using both spamc and
spamassassin piped from procmail to filter the mail and I'm having just a
few of the messages scored differently on the header and body. I'm quite
sure email is not scanned twice, and even if it was - then it would be the
cas
Why?
--
Michael V. Sokolov, SA/Helpdesk
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https
and this one got a score of 0.0!!
i have the procmail log file available for the first one...but nothing looks
abnormal there...
i'm stumped...especially since they are formatted similarly...
==
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Envelope-To: [EMAIL PROTECTED]
Hi all,
I am currently using SA 2.55. without Bayesian filters, and I would like to
put them on.
I have read the archive of the list , and the official SA site, but I am
still wondering about how to collect spam and ham.
* As for sure, I understood it was not a good idea that users forward spa
I'm running spamassassin site wide on a small server. I have per-user prefs
set up in a SQL db, but autowhite list and bayes db's are currently
sitewide. What I would like to be able to do is allow users some way to
report false positives and negatives to sa-learn. The recommendations I've
see to d
Sorry about the late follow-up, just catching up on a couple of lists.
On Mon, Aug 18, 2003 at 06:42:34PM -0500, Ken Winke wrote:
>
> - I'd like to be able to create a quick ranking of the most popular
> rules, and also the least popular rules that get used on these corpuses.
> I think that m
Hi
It is GPL
Thorsten
Am Die, 2003-09-09 um 22.31 schrieb AltGrendel:
> Forward from me too just to keep in on-list.
>
> I haven't seen any mention of licensing and haven't looked at the
> tarball as yet. Is it GPL?
> --
> AltGrendel <[EMAIL PROTECTED]>
>
>
> From: Thorsten Sick <[EMAIL
Why?
--
Michael V. Sokolov, SA/Helpdesk
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https
55 matches
Mail list logo