On Thu, Oct 02, 2003 at 03:49:18PM -0700, Jill U'Ren wrote:
> Would it be possible to immediately "flush" anything that
> scores 8.0 (and higher) while keeping email that scores
> 5.0 - 7.99 tagged as possible spam and still delivered to
> the recipient?
Depends on how exactly your SpamAssassin i
Hi Jill,
I agree with Scott - it is possible but you should really think this
through. If there is a problem letting the end-user make the decision, it
would be better to forward to an administrative account for review. Having
worked for the Department of Education for over three years, I can sa
Hi, I'm using SpamAssassin 2.60 being called through Amavisd-new. Dynablock
(along with a few others) is scoring on lots of messages that it shouldn't
because the first hop is a dial up. I put the following line in my
/etc/mail/spamassassin/local.cf
header IGNORE_FIRST_IP_DYNABLOCK eval:check_rb
At 03:38 3/10/2003 +0200, Michael Schaap wrote:
On 1-Oct-2003 01:11, David B Funk wrote:
Don't /dev/null the spam, reject it. Unlike the procmail/qmail/posfix-ites
you have the tools that enable you to "Do the right thing"(tm).
With SA+milter+sendmail on your incoming gateway you can give an SMTP
When installing SpamAssassin 2.6 from CPAN onto at redhat linux 9.0 box with
perl 5.8 from redhat i get the following message.
I ran this before install all the modules from CPAN export LANG=C since i
had done that before for SpamAssassin 2.55 and everything worked fine. Not
sure what that did sinc
On 1-Oct-2003 01:11, David B Funk wrote:
Don't /dev/null the spam, reject it. Unlike the procmail/qmail/posfix-ites
you have the tools that enable you to "Do the right thing"(tm).
With SA+milter+sendmail on your incoming gateway you can give an SMTP
reject status to an attempt to hand you spam (or
Jill U'Ren wrote:
Would it be possible to immediately "flush" anything that scores 8.0 (and
higher)
It is possible, but are you sure that you *want* to do that? What if a
legitimate message is discarded? IMHO, it's best to simply tag the
messages and let the end-user make these decisions.
---
Robert Krüger wrote:
Where is the 'patch' executable supposed to come from?
Most likely in a directory that's not in your PATH. ;-)
find /usr -name patch -print
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://t
Hi Fred,
Peter Richards wrote:
>
>> On 2003-10-01 02:36:52 +, Peter Richards wrote:
>
> If the bulk of this is being caused by a virus, then I'd like to be a
> bit pro-active about it. Is there anyway I can inform the original
> sender that they have a virus ??
No, this virus (like many others
Robert Krüger wrote:
> I've tried to apply the razor2-patch like it's described in the
> Readme and FAQ, but it doesn't work.
>
> I tried to execute: patch -p0 < Razor2.patch
>
> but I only got "command not found". Where is the 'patch' executable
> supposed to come from? What do I have to install
Best to do this as "root". Or try "/usr/bin/patch".
William L. Polhemus, Jr. P.E.
Polhemus Engineering Company
Katy, Texas USA
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert
Krüger
Sent: Thursday, October 02, 2003 4:58 PM
To: [EMAIL PROTECTED]
Su
On Thu, Oct 02, 2003 at 11:57:35PM +0200, Robert Kr?ger wrote:
> Hi there,
>
> I've tried to apply the razor2-patch like it's described in the Readme
> and FAQ, but it doesn't work.
>
> I tried to execute: patch -p0 < Razor2.patch
>
> but I only got "command not found". Where is the 'patch' exe
All-
The institution where I work is currently running SpamAssassin on a Red Hat
7.2 box. The SysAdmin before me installed it and left it's defaults running
(it's not even the end of my first week yet). I've figured out how to
change the threshold, etc, but my boss came up with an interesting qu
[[ Dangit -- I hate Eudora's "CTRL-E" for Send Immediately! It clashes
*really hard* with *nix's Go To End Of Line! Sorry Everybody!!! ]]
Just to let everyone know - I did fix my problem - by killing the patient!
I basically rewrote ifspamh in Python, and included a basic Maildir
delivery mecha
Just to let everyone know - I did fix my problem - by killing the patient!
I basically rewrote ifspamh in Python, and included a basic Maildir
delivery mechanism for the larger files, so that it didn't need to be
spawned again later in the .qmail file.
I believe that's where
Rumor has it that
Hi there,
I've tried to apply the razor2-patch like it's described in the Readme
and FAQ, but it doesn't work.
I tried to execute: patch -p0 < Razor2.patch
but I only got "command not found". Where is the 'patch' executable
supposed to come from? What do I have to install? SA runs on a RH7.3
Look at /usr/share/doc/spamassassin-2.60/sample-spam.txt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Eduardo Gargiulo
Sent: Thursday, October 02, 2003 4:46 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] spam test
Hi all
This is my first message to the
Attached is a header of a sender that keeps getting flagged as spam.
I have whitelisted the sender as follows:
whitelist_from [EMAIL PROTECTED]
whitelist_from_rcvd [EMAIL PROTECTED] collicutt.com
whitelist_from_rcvd [EMAIL PROTECTED] telus.com
Can any one see an
> I've got lotsa syslog entrys like the following ones:
>
> [...]
> spamd[23223]: Use of uninitialized value in numeric eq (==) at /opt/gnu/bin/spamd
> line 707, line 69
I'm seeing these as well in testing 2.60
> lines from my spamd:
>
> 707: $msgid||= "(unknown)";
> 708: $curr
Thursday 2 Oct at 12:55pm, Dan Roberts wrote:
> I have been sending enough test message stuff through my system that the
> auto-whitelist or auto-blacklist seems to now be screwing me up. Good
> or bad, my notes are now caught and sent into my spam folder.
>
> How do I get it to "forget" this beh
i posted this earlier but it didnt show up in the list, wierd..
A repost of my previous question. But i dont see any use of
check_for_sender_no_reverse that shows up in EvalTest.pm. Can i use
this and apply my own score to it? Why is there no score associated
with this test?
thanks
adam
--
I have been seeing 'byte count boosting' where spammers fill type emails with large sets of meaningless
garbage (e.g 'asdlfkjl lksdjf lkajsdf') to up the byte count of their
messages. This enrages me because I drop all messages with '
I am wanting to write a framework with the features below for my corporation
as an upgrade to our current spam blocking solution. I would suggest them
as ideas for SpamAssassin v3.
Create a framework where the message comes into the daemon and is translated
to 'feeds' by 'feed modules' aka prepro
I have been sending enough test message stuff through my system that the
auto-whitelist or auto-blacklist seems to now be screwing me up. Good
or bad, my notes are now caught and sent into my spam folder.
How do I get it to "forget" this behavior?
--
Presently, because of limited system resources, I've set a very conservative
max-scan-size for spamc - I don't want to burden the system with grinding
through those large files. However, this generally means that large messages
come straight through :)
In almost all cases, very large messages get
Hi all
This is my first message to the list. I was using qmail (standard,
vmailmgr and vpopmail) for the last four years. Tired of receive tons of
spam, I've decided to install spamassassin.
I have added the line
QMAILQUEUE="/usr/local/bin/spamassassin -P"; export QMAILQUEUE
in my qmail-smtpd ru
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/10/2003 08:21 Paul Hutchings wrote:
> I played with the howto on openandhome, it seems really simple to get
> spamassassin up and running on windows, the problem seems to be finding a
> Windows MTA that can take an email, pipe it out then re-inj
Malte S. Stretz <[EMAIL PROTECTED]> wrote:
> On Wednesday 01 October 2003 17:36 CET Chris Barnes wrote:
>> [...]
>> What am I missing?
>
> TFM, the FAQ and sa-learn --import.
Ok, good suggestion. Did that and it told me:
import failed, original files saved with "old" prefix
Next suggestion?
On Thu, 2 Oct 2003, John Biggs wrote:
> I'm torn: I like Spamassassin and I like ASK (Active Spam Killer). Has
> anyone been able to filter spam through SpamAssassin first and then hit
> a CR system like ASK for extra protection?
Pet peeve time ...
C/R systems employ what's called "cost shifting
[EMAIL PROTECTED] wrote:
X-Spam-Report: * 0.1 HTML_MESSAGE BODY: HTML included in message * 0.1
HTML_TITLE_EMPTY BODY: HTML title contains no text * -4.9 BAYES_00 BODY:
Bayesian spam probability is 0 to 1% * [score: 0.] * 2.7
SUBJ_HAS_UNIQ_ID Subject contains a unique ID * 99 AWL AWL:
Auto-whit
Again, this is a job...
FOR PROCMAIL!
(Admitting surprise that most don't use PROCMAIL along with SA...)
William L. Polhemus, Jr. P.E.
Polhemus Engineering Company
Katy, Texas USA
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Oliver
Neubauer
Sent: Thu
Ah, but I do think that copying emails to a folder with a cron-ed scan
will accomplish what I am after very neatly.
Thank you.
Sean McCrohan wrote:
On Thu, Oct 02, 2003 at 11:38:59AM -0400 or thereabouts, Chris Santerre wrote:
Sorry, but SA doesn't deliver emails. I don't think i
Subject [SAtalk] new mail with old headers
Is there a score for mail that comes in more than 4
days old? I had Nigerian spam come in today, that
was properly flagged as such, and the date/time
stamps from my server are accurate, but I would like
to add additional weight for spamishness when all t
Here is what I see when I run spamassassin --lint -D
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: Pyzor: got response: 66.47.67.162:24441 TimeoutError:
debug: leaving helper-app run mode
debug: Pyzor: couldn't grok response "66.47.67.162:24441
TimeoutError:
On Thu, Oct 02, 2003 at 11:38:59AM -0400 or thereabouts, Chris Santerre wrote:
>
> Sorry, but SA doesn't deliver emails. I don't think it ever will, and I
> think that is good. I feel your pain on what you want to do. But SA won't do
> it. Why not just setup an alias or something? I'm not familiar
Sure:
sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/in/*orourke.ca
Dan Tappin wrote:
I have created spam and ham accounts to utilize sa-learn. I am using
Tenon's Post.Office on OS X as a mail server.
I was running sa-learn like this:
sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/
Oops... drop the --dir parameter (assuming your copy of SA is updated
-- the --dir and --file parameters are deprecated).
Patrick Morris wrote:
Sure:
sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/in/*orourke.ca
Dan Tappin wrote:
I have created spam and ham accounts to utilize sa-learn
I’m torn: I like Spamassassin
and I like ASK (Active Spam Killer). Has anyone been able to filter spam
through SpamAssassin first and then hit a CR system
like ASK for extra protection? Kind of like boots and a rainslicker,
you know.
Thanks in advance,
JB
---
John Biggs, Tec
Make sure that the SA account has permission to run the pyzor
executable. For months I would run spamassassin -tD and Pyzor would
run, but SA was being run systematically as another user who didn't have
permission to execute Pyzor. Needless to say I never got any Pyzor hits
until I chowned/chmodd
I have created spam and ham accounts to utilize sa-learn. I am using
Tenon's Post.Office on OS X as a mail server.
I was running sa-learn like this:
sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/in/
which resulted in 7 messages being learned. Can I specify just the
*orourke* files someh
> > I'd like to have all mail marked as possible spam copied to a
> > separate
> > address (like [EMAIL PROTECTED])one possible way is to pass all
> > mail through a regex and redirect accordingly, but I'm
> > finding qmail's
> > facilities for that a bit cumbersome, and probably a waste
OK... here I go:
header _LOCAL_RCVD_TRUSTED_SASKNET Received =~ /.{0-20}\.sasknet\.sk\.ca/i
header _LOCAL_RCVD_TRUSTED_TELUS Received =~
/priv-.{0-20}\.telusplanet\.net/i
meta LOCAL_RCVD_TRUSTED (_LOCAL_RCVD_TRUSTED_SASKNET ||
_LOCAL_RCVD_TRUSTED_TELUS)
score LOCAL_RCVD_TRUSTED -10.0
Thanks for t
> -Original Message-
> From: Oliver Neubauer [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 02, 2003 10:56 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] possible to forward messages marked as spam to
> seperate account?
>
>
> Hello all,
>
> I reallize that this question might hav
At 09:09 AM 10/2/03 -0600, Dan Tappin wrote:
So if I wanted multiple ISP's in the same rule can I do an OR operator or
can I just create multiple header rules with the same lable?
All rules must have different names.. if two rules have the same name, the
first is over-written.
There is a regex O
What to do with a spam that includes this garbage at the bottom, in a hidden font?
Bayes freaked, I'm kinda glad it didn't auto-learn it. I'd rather have the false
negative than that. (Only snipped the Bayes poison from the mail, I think maybe
Mozilla TBird put all the = in there.)
-tom
---
I see that Pyzor is now running.. When I run 'top' I see it get called..
however I am not seeing it's results in any of my SA scores.. is there
something else/more that needs to be done for SA to once again use Pyzor..
Thanks everybody!
- Original Message -
From: "Malte S. Stretz" <[EMA
I got the following spam message, which has a low rating. The
construction of the To: line is "To: user <[EMAIL PROTECTED]>"I've
seen this in a lot of spam, and can't imagine how a real message sent
to me would have this form, so I would like to create a test for this
situation. Has anyon
Where can I find good, step by step documentation and which pieces I
need on installing
SpamAssassin 2.6 on a Sun system running Solaris 8 and iPlanet as the
mail handler. I
want to install SpamAssassin at the gateway as part of the MTA. This is
where I have
Sophos running so everything is scann
Hello all,
I reallize that this question might have more to do with my MTA (qmail)
than spamassassin, so I'll apologize now.
I currently have spamassassin set up on my mailserver and it is reliably
flagging possible spam that passes through it. I'm fairly happy with
it's accuracy and lack of f
Thanks again Matt,
So if I wanted multiple ISP's in the same rule can I do an OR operator or
can I just create multiple header rules with the same lable?
Example:
priv-edtnes56.telusplanet.net
priv-edtnes57.telusplanet.net
misav02.sasknet.sk.ca
header LOCAL_RCVD_TRUSTED_SMTP Received =~
/priv-?
- Original Message -
From: "Dave Sill" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 02, 2003 3:35 PM
Subject: Re: [SAtalk] Re: spamd & qmail, round 2...
> "Ralf Guenthner" <[EMAIL PROTECTED]> writes:
>
> > As you can see it works even without the -s stderr and ther
I am trying to implement a rule to check for no reverse DNS of the
sender ip (similar to the -p flag of tcpserver).
I notice these in EvalTests.pm, especially in function
check_received_helos
my $no_rdns = $rcvd->{no_reverse_dns}.
However i am having trouble tracking down where that is actuall
On Thu, Oct 02, 2003 at 08:50:47AM -0500, Smart,Dan wrote:
> That worked. I did a --forget for both ham and spam files then relearned
> them.
> Now the --dump magic looks right. Thanks for the suggestions.
>
> Mission control, I think we have a problem here...
Just to check: are you learning t
Thanks for the help -
Now, although the Spam point value is working and I only get modified
subject line when it's over threshold, each and every message comes
through with the following - this is actualy from my confirmation note
to this list which had an X-Spam-Score of 0.3 (end cr
Ah, I see, the BAYES_50 score would be ignored when scoring it for
autolearning.
There must have been something else wrong, though, since after I copied
the Bayes db from the production system, I get:
-Spam-Status: Yes, hits=6.2 required=6.0 tests=BAYES_99,HTML_MESSAGE,
MIME_HTML_ONLY,REMO
"Ralf Guenthner" <[EMAIL PROTECTED]> writes:
> As you can see it works even without the -s stderr and there's also no need
> for a separate /log/run script.
> But there's more than one way to do it, obviously.
This is off-topic for this list, but, yes, there's a need for a
separate log/run script
Hi
please forget my request. I solved it with whitelist_from.
thanks anyway.
Philipp
> -Ursprüngliche Nachricht-
> Von: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Auftrag von
> mailinglists
> Gesendet: Donnerstag, 2. Oktober 2003 14:42
> An: [EMAIL PROTECTED]
> Betreff: [SAtalk] postf
That worked. I did a --forget for both ham and spam files then relearned
them.
Now the --dump magic looks right. Thanks for the suggestions.
Mission control, I think we have a problem here...
<>
| -Original Message-
| From: Smart,Dan
| Sent: Wednesday, October 01, 2003 9:53 AM
| To:
| -Original Message-
| From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
| Sent: Wednesday, October 01, 2003 5:58 PM
| It's got to be reading the wrong files.
|
| Do an "sa-learn" of a small number of mails with -D on. Then run
| "sa-learn -D --dump magic". Post the 2 log files and
On Thu, Oct 02, 2003 at 09:21:10AM -0400, Martin, Jeffrey wrote:
> I just upgraded a test system to 2.6, and it is doing something strange.
> The header indicates that messages are being autolearned that shouldn't
> be. The auto_learn settings in /usr/share/spamassassin are:
>
> 10_misc.cf:auto_le
>
> If you run spamd under daemontools, would you be kind enough
> to share the files you use in /service/spamd (or whatever you
> named it)?
>
here is what i do... run through daemontools with a 96MB membytes
softlimit (feel free to set whatever you think is necessary) on spamd.
i run with g
On Thu, Oct 02, 2003 at 09:35:44AM -0400, Martin, Jeffrey wrote:
> But the example scored 0.4, so it still shouldn't be autolearned, right?
run with -D and read the Mail::SpamAssassin::Conf doc, specifically the
section about bayes_auto_learn.
--
Randomly Generated Tagline:
"I develop for Linux
Oops, I was on the wrong system. The real settings on this one are;
10_misc.cf:# learning system automatically, to train the Bayesian
scanner.
10_misc.cf:bayes_auto_learn_threshold_nonspam 0.1
10_misc.cf:bayes_auto_learn_threshold_spam 12.0
10_misc.cf:# Set this to 0 to turn off aut
Jeff Koch wrote on Thu, 02 Oct 2003 00:24:10 -0400:
> Interesting that you are using MailCorral. We spent a few weeks testing it
> with about 20 email accounts and it would tend to crash and hang - thereby
> refusing to accept mail. This was two or three months ago and the developer
> was unabl
I just upgraded a test system to 2.6, and it is doing something strange.
The header indicates that messages are being autolearned that shouldn't
be. The auto_learn settings in /usr/share/spamassassin are:
10_misc.cf:auto_learn_threshold_nonspam -2
10_misc.cf:auto_learn_threshold_spam15
This i
On Thu, Oct 02, 2003 at 09:34:23AM +0100, Darren Coleman wrote:
> My .spamassassin directory structure now looks like this (post-upgrade):
> -rw---1 qmailq qmail 82304 Oct 2 09:29 bayes_journal
> -rw---1 qmailq qmail21401600 Oct 2 09:29 bayes_seen
> -rw---1 q
Hi
I run a SpamAssassin 2.43 with Postfix 2.0.16. As it looks like spamd seems to check
its whitelist against the helo name of the remote server . Thus it happens that if the
helo name is not equal to the mail from:<> domain, SA marks the mail as spam. I had
to turn off Postfix' helo restricti
No, this virus (like many others) is using a forged From line, the only way
you can tell who is infected is through the IP addresses in the received
header.
Frederic Tarasevicius
Internet Information Services, Inc.
Peter Richards wrote:
> Hi Martin,
>
>> On 2003-10-01 02:36:52 +, Peter Rich
You don't say how you're invoking SA from exim.
I found (from 2.60 where terse_report is a noop) that using exim with the
exiscan patch and always adding a report (spam =nobody:true in exiscan
config) produces the misleading output you report. To get round this you
will need either to configur
On Thu, Oct 02, 2003 at 06:55:22AM -0400, Jack Gostl wrote:
>
> > > Having upgraded to 2.60 I've noticed that every mail that passes the SA
> > > threshold (5.0 on my setup) always has BAYES_99...
> >
> > http://bugzilla.spamassassin.org/show_bug.cgi?id=2413
>
> Are you recommending that the co
> > Having upgraded to 2.60 I've noticed that every mail that passes the SA
> > threshold (5.0 on my setup) always has BAYES_99...
>
> http://bugzilla.spamassassin.org/show_bug.cgi?id=2413
Are you recommending that the code be patched, or should SA be
redownloaded and reinstalled?
>
> Denis D
On Thu, Oct 02, 2003 at 09:34:23AM +0100, Darren Coleman wrote:
> Hi,
>
> Having upgraded to 2.60 I've noticed that every mail that passes the SA
> threshold (5.0 on my setup) always has BAYES_99...
http://bugzilla.spamassassin.org/show_bug.cgi?id=2413
Denis Ducamp.
--
> Having upgraded to 2.60 I've noticed that every mail that passes the SA
> threshold (5.0 on my setup) always has BAYES_99...
I have noticed this, but careful examination shows that one or two spams
have a lower Bayes score. I suspect that the Bayes stuff may be working
well. The vast majority o
Hi Roger
Interesting, what you do in your supervise run script. Here's mine:
exec /usr/bin/spamd -x -L -D -u qmaild 2>&1 | /usr/local/bin/multilog t
s100 /var/log/spamd
As you can see it works even without the -s stderr and there's also no need
for a separate /log/run script.
But there's more
Hi,
Having upgraded to 2.60 I've noticed that every mail that passes the SA
threshold (5.0 on my setup) always has BAYES_99...
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to
100%
[score: 1.]
..in the report. Prior to the upgrade I had a var
I played with the howto on openandhome, it seems really simple to get
spamassassin up and running on windows, the problem seems to be finding a
Windows MTA that can take an email, pipe it out then re-inject it and deal
with it.
regards,
Paul
--
Paul Hutchings
Network Administrator, MIRA Ltd.
Tel:
I wouldn't mind a copy if possible. FWIW I use Outlook/Exchange at work, I
get my users to drag spam into a public folder (so the headers go as well)
then synchronise with Netscape/Mozilla mail as it produces an mbox file
which sa-learn can handle.
regards,
Paul
--
Paul Hutchings
Network Administ
Since you used CPAN to install Pod::Usage and HTML::Parser they won't show
up in the rpm database so you'll get dependency warnings. Use the
--nodeps option for rpm and it will ignore the dependency warnings.
Kev
Chris Boyd <[EMAIL PROTECTED]> writes:
>Trying to install 2.60 using src rpms on RH
* Dan Roberts <[EMAIL PROTECTED]> [20031002 08:53]: wrote:
> Hi all -
> I have been bussy settiing up the new version of Spamassassin 2.6 and
> it's utilities as suggested by the folks at peregrinehw.com. The
> install seemed to go without a problem and I have not
79 matches
Mail list logo
