Re: [SAtalk] mysql user-prefs script?

2003-09-18 Thread rODbegbie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Farber wrote: The spamassassin mentions several times about a user-prefs script using mysql as a backend.. but the link to the spamassassin site does not list the file. It's in the sql/ directory when you expand the distribution tarball. rOD. -

Re: [SAtalk] does it work with solaries7?

2003-09-18 Thread Nix
On Thu, 18 Sep 2003, Muhannad Tamemi spake: > > Thanks for answering . > again please i need to be sure of sendmail version , i have sendmail 8.9.3 , does it > work ??!! As long as you apply the appropriate patches to fix the multiple severe security holes known in this version, yes, it does. (

[SAtalk] SpamC question

2003-09-18 Thread Fred I-IS.COM
I need help from the dev team! In the docs for spamD, it has the following: ---cut--- When spamd receives a connection, it spawns a child to handle the request.  The child will expect to read an email message from the network socket, which should then be closed for writing on the other end (so

Re: [SAtalk] Trouble getting spamd working with postfix

2003-09-18 Thread Jim
On Thu, Sep 18, 2003 at 11:20:18PM +0200, Alex van den Bogaerdt wrote: > I'm under the impression that using "-x" takes care of that. Incorrect? I don't think so. "-x" is a counter to "-f" which relates to being (un)able to connect to spamd -- not being (un)able to fork a child process to pipe t

[SAtalk] mysql user-prefs script?

2003-09-18 Thread Paul Farber
The spamassassin mentions several times about a user-prefs script using mysql as a backend.. but the link to the spamassassin site does not list the file. is it gone? Can I get a copy? Thanks -- Paul Farber Farber Technology 570-628-5303 www.f-tech.net -

[SAtalk] No X-Spam-Report for ham?

2003-09-18 Thread James Herschel
Hi all, Trying searching the archives and Google for this, but I can't see a way to force a breakdown for ham. The X-Spam-Report works great for spam, but I'd like a breakdown for ham so I can see which rules are getting hit and/or need to be tweaked. Is there a way to do this? - James

Re: [SAtalk] Trouble getting spamd working with postfix

2003-09-18 Thread Alex van den Bogaerdt
On Thu, Sep 18, 2003 at 12:56:57AM +, Jim wrote: > On Wed, Sep 17, 2003 at 11:36:52PM +0200, Alex van den Bogaerdt wrote: > >argv=/usr/bin/spamc -x -e /usr/sbin/sendmail -i -f $sender $recipient > > Keep in mind this snippet from the spamc man page wrt '-e': > >Note that there

Re: [SAtalk] Trouble getting spamd working with postfix

2003-09-18 Thread Alex van den Bogaerdt
On Wed, Sep 17, 2003 at 07:52:59PM -0400, Larry Gilson wrote: > Hi Alex, > > How are you reinjecting the mail into Postfix? Are you using Postfix's > sendmail? Of course ! Is there an option? :) --- This sf.net email is sponsored by:ThinkGee

Re: [SAtalk] Grrr...Bayes db corrupted again!

2003-09-18 Thread Abigail Marshall
Hello up, Thursday, September 18, 2003, 11:51:42 AM, you wrote: u3a> The last time this happened, the only way I could get sa-learn to start u3a> working again was to remove _journal, _msgcount, _seen and _toks, which u3a> presumably wipes out all existing bayes data. Is there a better way?

[SAtalk] Scan Message Max Size

2003-09-18 Thread Jeff Funk
So what does the average person set for the threshold of largest message scanned by SA. Right now I'm at 32768 bytes. How large is it safe to go??? Jeffrey J Funk Chief Technology Officer Farin & Associates, Inc. 608.661.4240 [EMAIL PROTECTED] --

RE: [SAtalk] Scan Message Max Size

2003-09-18 Thread Tom Meunier
Define "safe" - I stick with the default of 250kb and have never had an issue with it. I can't see receiving a spam anywhere near that size, that wouldn't also trigger an attachment blocking rule on my gateway MTA. -tom > -Original Message- > From: Jeff Funk [mailto:[EMAIL PROTECTED] >

[SAtalk] Spamassassin & Q-Mail "Proxy" Server

2003-09-18 Thread Christopher Tarricone
I am going to be setting up a q-mail ³proxy² server in between the Internet and one of my Exchange servers. I am using qmail and qmail-scanner to handle viruses and I have other mail server that simply use q-mail, courier, SA and QSS. There is a specific need for Exchange so I am stuck with it. I w

Re[2]: [SAtalk] Spam slipped through, why no Bayes?

2003-09-18 Thread Abigail Marshall
Hello Jeff, Thursday, September 18, 2003, 1:01:29 PM, you wrote: JF> So what does the average person set for the threshold of largest message JF> scanned by SA. Right now I'm at 32768 bytes. How large is it safe to JF> go??? Depends on your system and volume of email. Right now I've been run

Re: [SAtalk] RE: Trying to add my own custom test...

2003-09-18 Thread Abigail Marshall
Hello Mitch, Thursday, September 18, 2003, 10:15:26 AM, you wrote: MW> In my original post I'd asked if there was a way to whitelist or something - MW> maybe consider this test authoritative if it succeeds - cut down on the MW> effort - 80% of my mail is inter-client, about 20% outside - which is

[SAtalk] Auto Learn Question

2003-09-18 Thread Eyvonne Sharp
I am using SA 2.55 on a mail server for only a few select users.  We have auto_learn turned on for those users using procmail (I am not running the daemon).       .procmailrc ###:0fw| /usr/bin/spamassassin -P -a:0* ^X-Spa

RE: [SAtalk] Spam slipped through, why no Bayes?

2003-09-18 Thread Jeff Funk
So what does the average person set for the threshold of largest message scanned by SA. Right now I'm at 32768 bytes. How large is it safe to go??? Jeffrey J Funk Chief Technology Officer Farin & Associates, Inc. 608.661.4240 [EMAIL PROTECTED] ---

Re: [SAtalk] Spam slipped through, why no Bayes?

2003-09-18 Thread Patrick Morris
1. Did you enable rules in user prefs in the system sa config? The default settings don't allow rules to be defined in user prefs (See man Perl::SpamAssassin::Conf). 2. The Bayes rules that score 0 (most of the mid-range of Bayes checks) don't show up in the report, but that doesn't mean Bayes ch

[SAtalk] Grrr...Bayes db corrupted again!

2003-09-18 Thread up
The last time this happened, the only way I could get sa-learn to start working again was to remove _journal, _msgcount, _seen and _toks, which presumably wipes out all existing bayes data. Is there a better way? Cannot open bayes_path /usr/local/etc/mail/spamassassin/ R/W: Inappropriate file ty

[SAtalk] Spam slipped through, why no Bayes?

2003-09-18 Thread Chris Barnes
2 questions: 1) why is SA not using my custom rule in my ~/.spamassassin/user_prefs file? 2) Why was Bayes not run on this message? Information: The ~/.spamassassin/user_prefs contains: bayes_ignore_header X-PerlMx-Spam header LOCAL_PERLMX_TAG_90 /X-PerlMX=~ /\b Probability=9[0-9]\%/ score LO

Re: [SAtalk] RE: Trying to add my own custom test...

2003-09-18 Thread Rich Puhek
Mitch (WebCob) wrote: In my original post I'd asked if there was a way to whitelist or something - maybe consider this test authoritative if it succeeds - cut down on the effort - 80% of my mail is inter-client, about 20% outside - which is where all the spam comes from of course... so I've added

[SAtalk] reporting problem

2003-09-18 Thread Ken Gordon
Suddenly today I have begun to get the following error when I try to report (SpamAssassin 2.60-rc4) SpamAssassin: no Internet hashing methods available, so couldn't report. Warning, unable to report spam For more information, re-run with -D option to see debug output. Running spamassassin -r -D -

Re: [SAtalk] Questions for a newbie

2003-09-18 Thread Kris Deugau
Steve Frazier wrote: > I installed RH 9.0. It has Spamassassin installed along with > sendmail. There has been talk about procmail, does that mean > Spamassassin doesn't work with sendmail? sendmail on its own does not really know how to talk to SpamAssassin. If you were inclined to experiment,

Re: [SAtalk] FORGED_MUA_OUTLOOK from a mac

2003-09-18 Thread Bill Leuze
Thanks Tony and Martin. I've added the email headers as comment# 27 to bug#1970 On Thu, 2003-09-18 at 00:29, Tony Finch wrote: > On Wed, 17 Sep 2003, Martin Radford wrote: > > > > Your best bet is to open a bug at http://bugzilla.spamassassin.org/ > > and attach a sample message (at a minimum the

Re: [SAtalk] [SAdev] SpamAssassin 2.60 rc5 released

2003-09-18 Thread Joe Breu
On Tue, 2003-09-16 at 16:46, Theo Van Dinter wrote: > On Tue, Sep 16, 2003 at 10:12:46PM +0100, Brian Morrison wrote: > > Built this from .spec file, updated the rpms, identifies as 2.60-rc4 > > AFAICS. > > > > Slip up,or maybe I'm still running rc4 and the rpm -U failed? > > To build the RPM fro

[SAtalk] Trying to add my own custom test...

2003-09-18 Thread Mitch \(WebCob\)
What am I missing? I tacked this on to the end of 20_head_tests.cf (note key info obscured to protect the innocent, but the pattern match works in a test perl script - is there another way to test a rule?) header MY_CLIENTS X-CustomHeader =~ /^MY PATTERN$/ describe MY_CLIENTS Me

Re: [SAtalk] Trying to add my own custom test...

2003-09-18 Thread mikea
On Thu, Sep 18, 2003 at 09:55:12AM -0700, Mitch (WebCob) wrote: > What am I missing? > > I tacked this on to the end of 20_head_tests.cf (note key info obscured to > protect the innocent, but the pattern match works in a test perl script - is > there another way to test a rule?) > > header MY_CLI

[SAtalk] RE: Trying to add my own custom test...

2003-09-18 Thread Mitch \(WebCob\)
In my original post I'd asked if there was a way to whitelist or something - maybe consider this test authoritative if it succeeds - cut down on the effort - 80% of my mail is inter-client, about 20% outside - which is where all the spam comes from of course... so I've added an X-header that I can

[SAtalk] Re: [AMaViS-user] Re: Online petition against Verisign DNS abuse...

2003-09-18 Thread Rich Puhek
9632... Now if they'll only listen! --Rich [EMAIL PROTECTED] wrote: It now has 9369 Signatures Total... - Original Message Follows - http://www.PetitionOnline.com/icanndns/ Currently has about 7700 signatures... Kevin W. Gagel Network Administrator (250) 561-

R: [SAtalk] Strange problem with SA 2.55

2003-09-18 Thread Andrea Riela
Hi > I do not know your configuration. > And my crystal ball is currently in repair. :) Sorry, ... I forget my configuration: required_hits 7.6 rewrite_subject 0 always_add_headers 1 always_add_report 1 report_safe 1 use_terse_report 1 use_bayes 1 auto_learn 1 skip_rbl_checks 1 use_razor2 1 use_

Re: [SAtalk] disable rbls, but keep pyzor, dcc, razor

2003-09-18 Thread Rich Puhek
Covington, Chris wrote: Hi all, I keep getting numerous FPs from not-so-savvy people who have DSL/Cable (ie their machine is usually in some kind of DSL/Cable DHCP pool RBL, though their ISP mail server isn't), use predominantly HTML mail with big colors and weird fonts (i.e. hit HTML_* rules), h

Re: [SAtalk] how do I ask the list a question about

2003-09-18 Thread Kai Schaetzl
[EMAIL PROTECTED] wrote on Thu, 18 Sep 2003 04:32:28 -0600: > How are you doing this black listed regular expression thing to block > any and all ocurrances of the V word? > This is done by Sourceforge, not by the list. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet

Re: [SAtalk] does it work with solaries7?

2003-09-18 Thread Bob Apthorpe
Hi, On Thu, 18 Sep 2003 12:55:46 + "Muhannad Tamemi" <[EMAIL PROTECTED]> wrote: > From: "Chr. von Stuckrad" <[EMAIL PROTECTED]> > > > >On Thu, Sep 18, 2003 at 09:38:53AM +, Muhannad Tamemi wrote: > > > Dear All , > > > > > > Kindly note that am new to spammassassin .. > > > > > > I have Su

Re: [SAtalk] Strange problem with SA 2.55

2003-09-18 Thread Dave Kliczbor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrea Riela wrote: > About 5 minutes ago I've received an email-spam without SA flag. > This is the header: [snipped] > Why? I do not know your configuration. And my crystal ball is currently in repair. Try always_add_headers 1 in your local.cf If

[SAtalk] Strange problem with SA 2.55

2003-09-18 Thread Andrea Riela
Hi folks, About 5 minutes ago I've received an email-spam without SA flag. This is the header: Received: (qmail 11321 invoked by uid 1004); 18 Sep 2003 15:24:32 - Received: from [EMAIL PROTECTED] by observe.nesys.it by uid 1001 with qmail-scanner-1.16 (. spamassassin: 2.55. Clear:SA:0(0/0)

RE: [SAtalk] disable rbls, but keep pyzor, dcc, razor

2003-09-18 Thread Tom Meunier
skip_rbl_checks 1 #even though they're default if installed anyway... use_razor2 1 use_pyzor 1 use_dcc 1 You've disabled the Osirusoft tests, I hope. Those hit everything on the Internet. -tom > -Original Message- > From: Covington, Chris [mailto:[EMAIL PROTECTED] > Sent: Thursday, Sept

RE: [SAtalk] Questions for a newbie

2003-09-18 Thread Chris Santerre
I'll give this a stab. -Original Message- From: Steve Frazier [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2003 10:08 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Questions for a newbie >I have read the FAQ and I have some questions. I just joined the list and appreciate a

RE: [SAtalk] writing a filter for masked word

2003-09-18 Thread Chris Santerre
See wiki www.exit0.us > -Original Message- > From: Robin Witkop-Staub [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 17, 2003 10:03 PM > To: Spamassassin List > Subject: [SAtalk] writing a filter for masked word > > > How would be the syntax in a filter in the subject line to

[SAtalk] disable rbls, but keep pyzor, dcc, razor

2003-09-18 Thread Covington, Chris
Hi all, I keep getting numerous FPs from not-so-savvy people who have DSL/Cable (ie their machine is usually in some kind of DSL/Cable DHCP pool RBL, though their ISP mail server isn't), use predominantly HTML mail with big colors and weird fonts (i.e. hit HTML_* rules), hit FROM_ENDS_IN_NUMS, NO_

RE: [SAtalk] Ratware header vomit?

2003-09-18 Thread Chris Santerre
> -Original Message- > From: David B Funk [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 17, 2003 6:30 PM > To: Chris Santerre > Cc: Spamassassin-Talk (E-mail) > Subject: Re: [SAtalk] Ratware header vomit? > > *snip* > > X-Spam-Status: Yes, hits=8.5 required=5.0 > > tests=AF

RE: [SAtalk] Any ideas????

2003-09-18 Thread Chris Santerre
I believe it was too big for SA to scan. But if it did, there are some spam signs below. > -Original Message- > From: Jeff Funk [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 18, 2003 1:48 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Any ideas > > > Microsoft Mail Internet

RE: [SAtalk] Recognising dynamic rr.com IPs

2003-09-18 Thread Chris Santerre
Here is a rule I love! It is one of the few I score aggressivly. I'm well aware of some of the FPs, but I counter with some nice Whitelists and negative rules. The rule is likely broken up by your mail browser. IT should be 3 lines long ;) header MY_DSL Received =~ /\.atlantabroadband\.com|cust

RE: [SAtalk] Any ideas????

2003-09-18 Thread Jeff Funk
Thanks Dave, I guess I didn't think about looking in the RBL list. I rememeber seeing somewhere a long list of blacklisted servers that someone was maintaining also, but I can't seem to find it again. Was that here and does anyone know where it is??? Thanks again, J. -Original Message---

Re: [SAtalk] does it work with solaries7?

2003-09-18 Thread Muhannad Tamemi
Thanks for answering . again please i need to be sure of sendmail version , i have sendmail 8.9.3 , does it work ??!! i executed command ( perl -v ) and i got this output : $ perl -v $ This is perl, v5.8.0 built for sun4-solaris so i have perl 5.8.0 which work with spam assassin right ??? thank

[SAtalk] Online petition against Verisign DNS abuse...

2003-09-18 Thread Rob Hutton
http://www.PetitionOnline.com/icanndns/ Currently has about 7700 signatures... --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk

[SAtalk] DEV SpamD on Win32

2003-09-18 Thread Fred
Hello, I am using ActiveState perl 5.6.1 and SpamAssassin 2.60rc5 on Windows 2000. I have managed to get SpamD running with only 2 minor code changes. Only one issue yet to be resolved is this error which appears on startup: No such signal: SIGHUP at spamd.pl line 434. In order to get SpamD

[SAtalk] how do I test for viagro in the subject

2003-09-18 Thread JJensen
line, in addition to the current tests performed on the body only? --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [E

Re: [SAtalk] does it work with solaries7?

2003-09-18 Thread Kristian Koehntopp
On Thu, Sep 18, 2003 at 09:38:53AM +, Muhannad Tamemi wrote: > I need to know and make sure before i start , does spammassassin work with > , solaries7 , sparc4 server and sendmail 8.9.3 ??? Get yourself a recent Perl (5.6.x) from sunfreeware.com, and a recent sendmail (8.12.10) with MILTER e

RE: [SAtalk] unblacklist_from not working

2003-09-18 Thread Giles Coochey
How Xenophobic!! -Original Message- From: HighTechGlass [mailto:[EMAIL PROTECTED] Sent: 17 September 2003 07:05 To: [EMAIL PROTECTED] Subject: [SAtalk] unblacklist_from not working I wanted to block all foreign domains, since all of it is spam, and SAProxy missed some of it. # Block a

[SAtalk] Razor install

2003-09-18 Thread Céline REDON
Hi all, **Exuse me for this newbie quetsion , but I did not find anywhere the answer to my question** 1-Could anyone explain me why, in Razor installation , when running razor-admin create it is useful to change user name from root. What does it imply if user is still root? 2-Which percentage w

[SAtalk] how do I ask the list a question about

2003-09-18 Thread [EMAIL PROTECTED]
the male organ waker upper drug? If I use the V word i'm blocked. How are you doing this black listed regular expression thing to block any and all ocurrances of the V word? Original Message Subject: Undelivered Mail Returned to Sender Date: Wed, 17 Sep 2003 08:54:51 -0600 (MDT

[SAtalk] a question

2003-09-18 Thread Muhannad Tamemi
Dear All , Kindly note tham am new to spammassassin , and i have sun solaries 7 , sparc4 , server . with sendmail 8.9.3 ... can i install Spamassassin or not ???!! Thanks , Muhannad _ Protect your PC - get McAfee.com VirusScan O

[SAtalk] does it work with solaries7?

2003-09-18 Thread Muhannad Tamemi
Dear All , Kindly note that am new to spammassassin .. I have Sun Solaries 7 , sparc4 , mail server machine with sendmail 8.9.3 ... i have many problems with Spam emails . I need to know and make sure before i start , does spammassassin work with , solaries7 , sparc4 server and sendmail 8.9.3

SV: [SAtalk] RD - Here is a rule to check for Verisign redirect domain

2003-09-18 Thread Gert Lynge
>So presumably, looking up a garbage address should also work >even with round-robin. If it was done it should be a dynamic garbage address. If it was hardcodede someone could register it just to break SA (it would be quite easy to reverse engineer SA to discover what address to register). I gu

Re: [SAtalk] FORGED_MUA_OUTLOOK from a mac

2003-09-18 Thread Tony Finch
On Wed, 17 Sep 2003, Martin Radford wrote: > > Your best bet is to open a bug at http://bugzilla.spamassassin.org/ > and attach a sample message (at a minimum the complete headers). > That's the best way to ensure the developers can take this into > account for future versions. See comment #17 on

Re: [SAtalk] Amavis-New, PostFix, SA, MAILTO_TO_SPAM_ADDR

2003-09-18 Thread Jim
On Wed, Sep 17, 2003 at 01:12:03PM -0400, John wrote: > I don't really care about people emailing to known spam > addresses (at least that is what I am assuming with the > test MAILTO_TO_SPAM_ADDR). That's not exactly what it is; see 20_uri_tests.cf: describe MAILTO_TO_SPAM_ADDRIncludes a lin

Re: [SAtalk] Increasing memory with SA 2.55 problem

2003-09-18 Thread Klaus Mueller
Jason Brunette wrote: > Problem is timelog() in Mail::SpamAssassin. Thank you for the expalination. > spamd doesn't have this problem because the timelog log entries are > stored in a forked spamd process which dies after a message is > scanned. The problem occurs if you use a modified version o

RE: [SAtalk] Any ideas????

2003-09-18 Thread Thomas Kinghorn
about I have lots of ideas about lots of things. :o) Whats up? Ciao Tom -Original Message- From: Jeff Funk [mailto:[EMAIL PROTECTED] Sent: 18 September 2003 07:48 To: [EMAIL PROTECTED] Subject: [SAtalk] Any ideas Microsoft Mail Internet Headers Version 2.0 Received: from ban

Re: [SAtalk] Webmail system incorporating sa-learn

2003-09-18 Thread Jim
On Wed, Sep 17, 2003 at 08:54:09PM -0700, Jefferson Cowart wrote: > Sorry if this question has already been answered, but I am unable to find an > answer. In any case is there a webmail system that incorporates sa-learn > functionality? I.e. a system that has a button that I can click to say this >

Re: [SAtalk] Any ideas????

2003-09-18 Thread David B Funk
On Thu, 18 Sep 2003, Jeff Funk wrote: > The header below is from an e-mail that seems to get through sa repeatedly on our > Communigate server. There's no evidence that it's being scanned by sa at all. Is > there something I'm missing here > > Microsoft Mail Internet Headers Version 2.0 >