We are using Sendmail under Linux and Apache 1.3.28. The path is
/usr/sbin/sendmail.
-Original Message-
From: Abigail Marshall [mailto:[EMAIL PROTECTED]
Sent: Sunday, September 21, 2003 8:02 PM
To: Mike Shkolnik
Subject: Re: [SAtalk] Autodeleting spam based on score without deleting
all
Selon Hannu Liljemark <[EMAIL PROTECTED]>:
> You shoud be seeing a lot more of those... 'is not known spam' and
> 'is known spam'. Make sure you have use_razor2 set to 1 and network
> tests enabled. Do some test with 'spamassassin -t -D < testmail' and
> see if there's anything about razor.
Thanks for answer, I'd like the same. But the problem is, that we have virtual
accounts only and we do not use saving settings. The GUI is simple as possible, we had
remove almost everything, that only reading/answering mails is possible in the IMP.
I have the problem, that SAM/spamassassin is de
Hi,
On Sun, 21 Sep 2003 21:09:09 -0700 "Mike Klein" <[EMAIL PROTECTED]> wrote:
[...]
> When I attempt to run the verification tests, spamassassin just sits there
> doing nothing it seems.
>
> spamassassin -t sample-nonspam.txt
>
> Just 'hangs'.
>
> What might I need to configure/reconfigure?
On Sun, Sep 21, 2003 at 02:16:57PM +0200, Antoine Jacoutot wrote:
> I just have one question regarding smapassassin and razor.
> How can I tell if spamassassin uses razor ?
> I have nothing in my razor logs exept when starting spamd, I get this:
> Sep 21 14:14:29.666323 check[50778]: [ 1] [bootup]
I have installed SpamAssasin on a pretty much stock RH9 system (using
sendmail, procmail?).
A caveat...I'm not a sendmail jock...I've been able to make simple
adjustments to my sendmail.mc/.cf files but by no means really 'understand'
what the %$#^%$ I'm actually doing...sendmail is quite complex
Hello Mike,
Saturday, September 20, 2003, 6:31:39 PM, you wrote:
MS> Any tips on how to auto-delete spam based on score without deleting all
MS> spam?
MS> Criteria:
MS> Mark anything scoring 5 or above as Spam. (already doing that)
MS> Delete anything scoring 15 or above FROM THE SERVER. (how?)
At 12:34 PM 9/20/03 -0500, Philip Mak wrote:
Can SpamAssassin do something about these messages? There's been a big
flood of them recently, and they're all slipping through the filter.
Well they're viruses from the sven worm, not spams, so your best bet would
be to install a virus scanner and let
At 06:34 PM 9/21/03 -0400, landy wrote:
any idea why this pass thru SA
Well, first, that message is not spam, it's a virus. It's the result of a
newer mail worm/virus called the swen worm.
SpamAssassin sometimes tags viruses, but that's not it's job in life. It's
job is to identify spam and take
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello landy,
Sunday, September 21, 2003, 2:58:29 AM, you wrote:
l> its amazing the amount of spam thas has pass thru saturday
Oh? Not counting the latest virus, I had a total of six spams get through
the filtering system, with one FP, from Sund
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Tomá,
Sunday, September 21, 2003, 6:46:38 AM, you wrote:
TM> I'm just developing something for our Webmail based on Horde+SAM+Imp.
We use Horde here for webmail. Don't know whether SAM or Imp is in use.
TM> In the IMP you can mark the message
On Sun, Sep 21, 2003 at 06:53:14PM -0700, Morris Jones wrote:
> I'm seeing the same thing when procmail calls spamc from "nobody". Not sure
> what's going on there, but I haven't looked at the source.
imnsho, it's another issue with razor not being taint safe. I haven't
seen that error at all th
At 07:17 PM 9/21/03 -0400, landy wrote:
how does this sum 4.0,
Not to be rude, but this is so easy you really should be able to answer it
yourself. The scores of the rules are added together.
So, looking at 50_scores.cf and yanking out the score lines we get:
score FREE_TRIAL 0.0 0.0 0.0 0.017
s
At 09:07 PM 9/21/03 +0200, Jim Knuth wrote:
Hallo SA-List,
how can I add an entry in the blacklist.
I mean a faked to-address (this is not mine)
The sender added like so?
--snip
spamassassin [EMAIL PROTECTED]
--snap
Thank you for help.
That command adds it to the AWL system, and is NOT a static b
I'm seeing the same thing when procmail calls spamc from "nobody". Not sure
what's going on there, but I haven't looked at the source.
Mojo
On Fri, 19 Sep 2003, Steve Thomas wrote:
> I just installed this and am now seeing this in the logs when Razor2 is called (yes,
> I patched razor [2.36] b
is there a way to see the list of test triggered during an entire day
on incoming email
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassi
> "Dave" == Dave Kliczbor <[EMAIL PROTECTED]> writes:
Dave> Before you subscribe to the list, you should add some lines to your
Dave> spamassassin config:
Dave> bayes_ignore_header X-Spam-Flag
Dave> bayes_ignore_header X-purgate
Dave> bayes_ignore_header X-purgate-ID
Dav
how does this sum 4.0, and the best way to make it score 5.0
Subject: Buy Low, Sell High "CMKK" Headed for $3 - Profit Now!
X-Spam-Status: No, hits=4.0 required=5.0
tests=FREE_TRIAL,NO_REAL_NAME,RCVD_IN_SBL,STOCK_PICK,SUBJ_BUY
version=2.55
X-Spam-Level:
--
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ian Southam wrote:
> There are 4 great open source MTAs out there : Postfix, Exim, sendmail and
> qmail.
>
> 3 support spam and AV scanning with no patching.
Addendum from me: There is also the Courier MTA. With some tweaking in
maildrop it works also
any idea why this pass thru SA
From:
MS Security
Services
<[EMAIL PROTECTED]>
To:
Commercial Partner
<[EMAIL PROTECTED]>
Subject:
New Microsoft
Critical Update
Date:
Sun, 21 Sep 2003
18:13:41 -0400
Microsoft
All Products | Support |
Se
Hi,
> you will also need something like qmail-scanner,
> and need to patch and
> recompile qmail to support calling another
> queue...
One appendum to that advice ...
There are 4 great open source MTAs out there : Postfix, Exim, sendmail and
qmail.
3 support spam and AV scanning with no pat
Forrest Aldrich <[EMAIL PROTECTED]> writes:
> Has anyone filters for Spamassassin that will correctly identify this
> virus? I'd like to score this one high so they are rejected (via
> spamass-milter)... it's been a huge problem all day.
header _VIRUS_h0_SWEN_A SUBJECT =~ m{(Current|Newest|New|
What I talk about is assassinating spam depending on Mail Attribute
characteristics, like name.
Chris Santerre wrote:
You can see some of the custom virus rules at www.exit0.us I don't believe
you will ever see them in releases of spamassassin. But you can always add
the ones that are custom wri
I found a posting in some newsgroup and modified the rules a bit. they
work for me very nice. here you go:
header MDS_Swen_A_0From=~
/(email|inet|internet|mail|microsoft|ms|net|network)/i
header MDS_Swen_A_1From=~ /(section|service|system)/i
header MDS_Sw
I just installed this and am now seeing this in the logs when Razor2 is called (yes, I
patched razor [2.36] before compiling):
razor2 check skipped: Bad file descriptor Insecure dependency in connect while running
setuid at /usr/lib/perl5/5.6.1/i386-linux/IO/Socket.pm line 108.
I wasn't getting
Can SpamAssassin do something about these messages? There's been a big
flood of them recently, and they're all slipping through the filter.
143 N Sep 19 Inet Mail Deliv (140K) returned message returned to mailer
144 N Sep 19 Mail Storage Sy (141K) undeliverable message: returned to sender
1
> -Original Message-
> From: Jim
> On Sun, Sep 21, 2003 at 02:48:14PM -0400, Larry Gilson wrote:
> > The sender, meaning the header From does change. However,
> > the envelopesender is consistent if mail is coming from the same
> > user/machine. However,the envelope sender may change
--On Saturday, September 20, 2003 11:37 AM -0400 "Steven W. Orr"
<[EMAIL PROTECTED]> wrote:
By using spamass-milter you have the option of rejecting the
message before reception completes. This way, the spammer knows that you
have rejected his message and that you have not received it.
Nope, he p
On Sun, Sep 21, 2003 at 02:48:14PM -0400, Larry Gilson wrote:
> The sender, meaning the header From does change. However, the envelope
> sender is consistent if mail is coming from the same user/machine. However,
> the envelope sender may change if it is a multi-user host.
The envelope sender ca
On Sun, 21 Sep 2003, Michael W. Cocke wrote:
>
>
> I thought qmail was supposed to be SIMPLER than sendmail.
Heh, just follow lifewithqmail and get it all working. Then start
playing with it. It takes a bit of getting used to, but I like the way it
works. I tend to use either exim or qmail (exi
Hallo SA-List,
how can I add an entry in the blacklist.
I mean a faked to-address (this is not mine)
The sender added like so?
--snip
spamassassin [EMAIL PROTECTED]
--snap
Thank you for help.
--
Viele Grüße
Best regards
Jim Knuth
[EMAIL PROTECTED]
-
Yes, qmail is simpler, but you must sometimes apply some patches...
On Sun, 21 Sep 2003, Michael W. Cocke wrote:
>
>
>
> I thought qmail was supposed to be SIMPLER than sendmail.
>
> Thanks.
>
> Mike-
>
> On Sun, 21 Sep 2003 15:03:05 GMT, you wrote:
>
> >you will also need something like qmail-
On Sun, Sep 21, 2003 at 12:30:57PM -0400, Michael W. Cocke wrote:
>
> On Sun, 21 Sep 2003 15:03:05 GMT, you wrote:
>
> >you will also need something like qmail-scanner, and need to patch and
> >recompile qmail to support calling another queue...
> >
> >http://qmail-scanner.sourceforge.net/
> -Original Message-
> From: Kai Schaetzl
> Jack L. Stone wrote on Sat, 20 Sep 2003 10:08:51 -0500:
>
> > Research has led me to believe that the "envelope from" is the
> > most reliable source of the actual sender. I am prepared to be
> > corrected though and would like to be.
> >
no, thanks a lot for your interest. I want something for qmail. I read the mail
including text that says "Yes, qmail is supported" before the mail including
"sorry...", so that's my mistake.
I'm really sorry
On Sun, 21 Sep 2003, Steven W. Orr wrote:
> On Sunday, Sep 21st 2003 at 15:39 +0200, q
Thank you all for help, hopefully it will help me.
On Sun, 21 Sep 2003, Brad Tarver wrote:
> http://savannah.nongnu.org/projects/spamass-milt/
>
> -Original Message-
> From: Tomáš Macek [mailto:[EMAIL PROTECTED]
> Sent: Sunday, September 21, 2003 08:40 AM
> To: [EMAIL PROTECTED]
> Subje
I thought qmail was supposed to be SIMPLER than sendmail.
Thanks.
Mike-
On Sun, 21 Sep 2003 15:03:05 GMT, you wrote:
>you will also need something like qmail-scanner, and need to patch and
>recompile qmail to support calling another queue...
>
>http://qmail-scanner.sourceforge.net/
>
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tom Meunier wrote:
> Train it with as much of your own spam as you can get. (Quit deleting
> it for a while!)
You may also subscribe to a mailinglist that provides you with spam :-)
To subscribe to the list, send a mail to
[EMAIL PROTECTED]
Subject
On Sun, Sep 21, 2003 at 03:55:48AM -0700, Mike Shkolnik wrote:
> I'm on a virtual server that has SpamAssassin implemented. I have access
> to the user prefs file. I'm not sure what else. I would like to stick
> with SpamAssassin. I'm not looking to install a whole new system.
One way you could do
you will also need something like qmail-scanner, and need to patch and
recompile qmail to support calling another queue...
http://qmail-scanner.sourceforge.net/
http://freshmeat.net/articles/view/857/
http://www.linux-mag.com/2002-03/potm_01.html
wfg
john writes:
On Sat, 20 Sep 2003
Oh pooh. Ignore me. Of course Patrick is right; it doesn't support qmail.
> -Original Message-
> From: Tom Meunier
> Sent: Sunday, September 21, 2003 9:51 AM
> To: 'Tomáš Macek'; [EMAIL PROTECTED]
> Subject: RE: [SAtalk] Autodeleting spam based on score
> without deleting all spam
>
Why, Google of course!
http://savannah.nongnu.org/projects/spamass-milt/
Yes, it works with qmail.
-tom
> -Original Message-
> From: Tomáš Macek [mailto:[EMAIL PROTECTED]
> Sent: Sunday, September 21, 2003 8:40 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Autodeleting spam based o
A "milter" is a filter program that works exclusively with Sendmail. A
quick Google search found it here:
http://savannah.nongnu.org/projects/spamass-milt
Milters don't work with Qmail.
Tomáš Macek wrote:
Can you tell me, where can I get the "spamass-milter" program?? Is it a script? Does it w
Bayes, RBL checks, Razor, DCC, Pyzor.
-tom
> -Original Message-
> From: Ed Greenberg [mailto:[EMAIL PROTECTED]
> Sent: Sunday, September 21, 2003 8:58 AM
> To: spamassassin talk
> Subject: [SAtalk] Really really simple spams - not enough to
> accumulate 4 points
>
> I've been getting
Hi Ed,
You can either wait until the auto-learning catches up and learns 200
messages, or if you're impatient (like me) and just want to get it
going:
Train it with as much recent good mail as you can get, then make up for
it with older mail. Don't get all wrapped up in the timestamp issue.
Train
I've been getting a bunch of really simplistic messages that are not enough
to generate four points. Something like:
Totally happy ladies open to behave as madly as you ask.
Go for it.
I'm not here
Each one uses different link and remove text.
Has anybody found some good rules to catch these?
I'd like to add Bayes filtering to catch a bit of spam that's passing
through. I have some questions, if I may...
It says I have to send a large corpus of recent mail through it sorted as
spam and non-spam. I have a large corpus of non-spam in my archives, but
it's not recent. Do I have to wor
Yes, that's dangerous - but only if the sa-learn settings is not system wide. Is it
system wide? If so, it's dangerous, otherwise not.
The student would have it's own setting in the home directory and if he doesn't get
the professor's mail, professor will look into the log and will say, that he s
I'm just developing something for our Webmail based on Horde+SAM+Imp.
In the IMP you can mark the messages for deletion or for moving into another folder
and now I want to use this option to save the messages into the system-wide folder,
where would wait sa-learn with the "-spam" parameter (run b
Can you tell me, where can I get the "spamass-milter" program?? Is it a script? Does
it work with qmail?
Thank you for help
On Sat, 20 Sep 2003, Steven W. Orr wrote:
> On Saturday, Sep 20th 2003 at 18:31 -0700, quoth Mike Shkolnik:
>
> =>Any tips on how to auto-delete spam based on score wit
On Sat, 20 Sep 2003, Michael W. Cocke wrote:
>
> I'm about to switch from sendmail to qmail and I was wondering if
> anyone could point me to a decent "how to" on configuring qmail and
> spamassassin.
Not a specific guide in itself, but have a look at the spam section on
your local qmail.org mirr
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi !
I just have one question regarding smapassassin and razor.
How can I tell if spamassassin uses razor ?
I have nothing in my razor logs exept when starting spamd, I get this:
Sep 21 14:14:29.666323 check[50778]: [ 1] [bootup] Logging initiated
Lo
I'm on a virtual server that has SpamAssassin implemented. I have access
to the user prefs file. I'm not sure what else. I would like to stick
with SpamAssassin. I'm not looking to install a whole new system.
Thanks,
-Mike
-Original Message-
From: Benny Pedersen [mailto:[EMAIL PROTECTED]
its amazing the amount of spam thas has pass thru saturday
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAI
Thanks for answering . I read some text about spam assassin ..
But please can anyone give me some more info about spamassassin ??
how does it work , what does it do exactly .
My problem , that i have mail server for up to 5000 user , and those users
keep reciving junk mails , unwanted emails , or
On Sat, 20 Sep 2003, Larry Gilson wrote:
> I think the rule below should work. Give it a try.
>
> body MY_BAD_ATTACHMENTS /name=.*\.(com|pif|scr|exe|bat)("|$)/I
>
> I have found that 'filename=' does not always work so I shortened it to
> 'name='.
You guys are re-inventing the wheel, thoug
56 matches
Mail list logo
