[SAtalk] RC4 logging

2003-09-14 Thread Matt Thoene
Hi, Not sure if this was discussed but does the latest release candidate (4) log spamd calls by default? for some reason, it just stopped logging as of Friday and I have no idea why... -- Regards, Matt --- This sf.n

RE: [SAtalk] Newbie rule submission for SILDENAFIL_GIF

2003-09-14 Thread Larry Gilson
Hi Rob, > -Original Message- > From: Bruce, Rob > I noticed a while ago a focused website dedicated to rule trading, > but now I can't find it. Do you guys know what I'm talking about? The SpamAssassin Custom Rule Emporium http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm

Re[2]: [SAtalk] Has anyone written rules for Sobig:F

2003-09-14 Thread Abigail Marshall
Hello Kristian, KK> There is need for a 100% automated reporting mechanism that KK> integrates with _all_ ISPs, uses a documented standard protocol KK> so that there can be a lot of independent implementations that KK> are nonetheless interoperable, and that are part of the system KK> management

[SAtalk] cygwin + sa?

2003-09-14 Thread Fred
Has anyone on this list installed SA with cygwin? I'd like to start using spamc + spamd and my only option appears to be cygwin.  Is this safe for production? Thanks!   Fred

Re: [SAtalk] Newbie rule submission for SILDENAFIL_GIF

2003-09-14 Thread Satya
On Sep 14, 2003 at 16:59, Bruce, Rob wrote: >I noticed a while ago a focused website dedicated to rule trading, but >now I can't find it. Do you guys know what I'm talking about? http://www.exit0.us/ ? -- Satya. http://satya.virtualave.net/> All wiyht. Rho sritched mg kegtops awound ? --

[SAtalk] Newbie rule submission for SILDENAFIL_GIF

2003-09-14 Thread Bruce, Rob
First time poster here. But I'm so blown away by the amount of spam generated by this one source that help I can't help but submit this rule to the group. rawbody SILDENAFIL_GIF/\/pics\/gv1.gif/i describe SILDENAFIL_GIF Graphic only email with the image of Sildenafil AD I happened t

[SAtalk] Interesting spam content

2003-09-14 Thread Victor Brilon
This morning I got a piece of spam that contained the following lines in it at the bottom. Obviously this was a spam tool gone wrong -- but does anyone see anything useful in this data that could be used to prevent further spam? The dns addresses listed belong ot an outfilt in Florida (why do a

Re: [SAtalk] Can´t learn spam mails with s a-learn

2003-09-14 Thread Bernd Kuhls
Hi, On So 14 Sep 2003 06:26:53a Robert Menschel wrote: > These are completely random names, emails which are not published > on any web site, and have not been used to post to Usenet or such? yes. > That would imply to me that these messages all have the same > message id. Can you confirm wheth

[SAtalk] Re: Annouce: More rules for SA (Brazilian)

2003-09-14 Thread Malte S. Stretz
On Sunday 14 September 2003 06:11 CET Robert Menschel wrote: > Would you have any objection if we added your link to the "Other rules > sites" section of http://www.exit0.us/ ? You might also want to write a short notice/article on news.spamassassin.org -- addresses posted to this list often fall

Re: [SAtalk] Has anyone written rules for Sobig:F

2003-09-14 Thread Bob Apthorpe
Hi, On Sun, 14 Sep 2003 14:31:22 +0200 "Kai Schaetzl" <[EMAIL PROTECTED]> wrote: > Kristian Koehntopp wrote on Sun, 14 Sep 2003 11:33:06 +0200: > > > http://www.lurhq.com/sobig-e.html reports the following: > > I found this article quite interesting, especially this: > > > Servers who check in

[SAtalk] Request: dealing with messages where a duplicate Message-ID is already learnt as spam

2003-09-14 Thread Brian Morrison
Would it be possible to modify SA so that something is added into the headers when another message already learnt as spam has the same Message-ID? I'm seeing lots of high scoring messages that are not auto-learnt as spam and hence end up in my suspected spam folder that I use as a feed for sa-lear

Re: [SAtalk] Has anyone written rules for Sobig:F

2003-09-14 Thread Kai Schaetzl
Kristian Koehntopp wrote on Sun, 14 Sep 2003 11:33:06 +0200: > http://www.lurhq.com/sobig-e.html reports the following: > I found this article quite interesting, especially this: > Servers who check incoming connections for open proxies will be most interested in > checking TCP ports 2280, 2282

Re: [SAtalk] Installing Spam Assassin for site-wide handling

2003-09-14 Thread Julian Field
At 02:22 14/09/2003, you wrote: My questions I guess are: 1 Is it possible to install Spam Assassin for filtering & deleting the spam without altering the existing sendmail configuration? If so, could somoeone point me to some sort of wlakthrough or eail me with some details please. Yes

Re: [SAtalk] 2.60 RC4 deletes local.cf

2003-09-14 Thread Daniel Quinlan
Mike, This should be fixed in the third patch contained in this bug: http://bugzilla.spamassassin.org/show_bug.cgi?id=2452 Please test and let us know if it works. Daniel P.S. You wouldn't happen to be using Perl 5.005, would you? --- Thi

Re: [SAtalk] Re: 2.60rc4: overwrite local.cf

2003-09-14 Thread Daniel Quinlan
German, This should be fixed in the third patch contained in this bug: http://bugzilla.spamassassin.org/show_bug.cgi?id=2452 Please test and let us know if it works. Daniel P.S. You wouldn't happen to be using Perl 5.005, would you? --- T

Re: [SAtalk] Has anyone written rules for Sobig:F

2003-09-14 Thread Kristian Koehntopp
On Sun, Sep 14, 2003 at 01:24:41AM -0700, Abigail Marshall wrote: > computer. Most of these were DLS or cable modem id's - I > figured it would be an easy matter for the ISP to monitor > usage, see the problem, and simply shut down the problem That is consistent with Sobig behaviour. http://www.lu

Re[2]: [SAtalk] Has anyone written rules for Sobig:F

2003-09-14 Thread Abigail Marshall
Hello Kristian, KK> My point was that there is no mechanism to propagate your KK> findings back to the source, either to the owners of these KK> machines or any of their upstream providers. When I first spotted the problem IP's, I sent emails to the abuse departments at the various ISP's alerting

[SAtalk] I'm geting this error

2003-09-14 Thread Thomas Bergstam
Just upgraded to 2.60rc4. In this an error or what? Does my bayes work at all? This may have not worked in 2.55 either. Didn't checked then $ sa-learn --dump all Use of uninitialized value in numeric lt (<) at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm line 1277. 0.000

Re: [SAtalk] Has anyone written rules for Sobig:F

2003-09-14 Thread Kristian Koehntopp
On Sat, Sep 13, 2003 at 10:59:37PM -0700, Abigail Marshall wrote: > KK> There is currently no mechanism at all > KK> that is part of the Internet which can lock out machines that > KK> are dangerous or detrimental to the functions of the network. > KK> There are no processes in place that identify