Title: Message
I'm using
spamassassin 2.6, spamc/spamd
I'm trying to set
the timeout.
so i set
spamc -t
30
for
example.
but what i notice is
that spamd doesn't die until it finishes.
when timeout occurs,
i get the following message
spamd[27771]:
SIGPIPE received - reopening log so
At 12:31 PM 10/3/03 -0700, Mike Bethune wrote:
Hi,
is it possible to configure spamassassin to automatically report high
scoring spam to razor?
If not, what would be a good way to do this? I suppose I could write a
filter to call spamassassin -r ...
(I'm using it on a relay server and so right n
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
New to the list. Just saying Hello to everyone.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (FreeBSD)
iD8DBQE/fkBHOlwzeMhXmLgRAprDAJ9sMKaMVsbUO+gfRpUjO8DcfeFQgACfS8K3
LMUwzqu10uOgekxBxm2ItQI=
=BtU/
-END PGP SIGNATURE-
---
On 2003-10-03 17:01:08 -0400, Louis LeBlanc wrote:
> Isn't there a page somewhere that posts these recipes as the Virii
> come out? I realize this is starting to get a little OT, but I know a
> good number of people here are fairly procmail savvy.
Search the procmail list archives.
The procmail
On Fri, 3 Oct 2003, Michael Schaap wrote:
> On 1-Oct-2003 01:11, David B Funk wrote:
>
> >Don't /dev/null the spam, reject it. Unlike the procmail/qmail/posfix-ites
> >you have the tools that enable you to "Do the right thing"(tm).
> >With SA+milter+sendmail on your incoming gateway you can give a
Re: [SAtalk] PowerMail, PowerMTA, was (Grr, another one!)
http://sourceforge.net/mailarchive/message.php?msg_id=6199187
http://article.gmane.org/gmane.mail.spam.spamassassin.general/31476
http://marc.theaimsgroup.com/?l=spamassassin-talk&m=106521332813096&w=2
Jonathan Nichols <[EMAIL PROTECTED]
> I am one of those that don't believe in auto-reporting due to
> possible
> false positives.
Agreed, there is the temptation though for a server that should only ever receive
infrequent personal mail scoring ~0, to automate the reporting of very high scoring
spam :)
>
> However, the task of
Does anybody have any comments or feedback on using SA with perl 5.8 on
solaris 9 running 64 bit? Or maybe 2.8 running perl 64 bit?
Just seeing if anybody has any issues running perl in 64 bit mode on
solaris.
thanks
adam
---
This sf.net
On 09/29/03 03:46 PM, A nonymous sat at the `puter and typed:
> > I realise that these aren't spam in the exact sense of the word
>
> close cousin though!
>
> > but wondered if anyone had a set of rules that might help filter
> > out this damn annoying messages. We're getting several hundred a
>
On 10/03/03 12:31 PM, Mike Bethune sat at the `puter and typed:
> Hi,
> is it possible to configure spamassassin to automatically report
> high scoring spam to razor? If not, what would be a good way to do
> this? I suppose I could write a filter to call spamassassin -r ...
> (I'm using it on a re
Okay, figured it out. It's the ORBS RBL. It wasn't
responding. Once I removed it, things went very quick
again.
The debug documentation could be a little clearer.
Thanks,
David
--- David Parr <[EMAIL PROTECTED]> wrote:
>
> Hello,
>
> Sometime late last week or early this week, the
> amount
>
Check this out. Here's a header from a common type of spam that slips
through. PowerMTA is *always* the MTA, PowerMail is always the X-Mailer,
and it's jnichols@(fake domain) for
the "from" address.
BAYES_80 always gets hit, but despite jacking up the score, they're still
getting through. :(
I have
On Fri, Oct 03, 2003 at 09:53:46AM -0500, Smart,Dan wrote:
> perl-DB_File-1.75-36.1.73
> Not sure how to check the libdb version, but I'm on RH 7.3
then you shouldn't have any problems, I have the exact same setup. BTW:
$ rpm -qa | grep ^db
db3-3.3.11-6
db3-devel-3.3.11-6
db1-1.85-8
db2-devel-2.
I use "whitelist_from [EMAIL PROTECTED]" in
~/.spamassassin/user_pref to whitelist newsletters and mailing lists,
but in some cases this might not be reliable.
So I'm looking for a way to use the Message ID, List-ID or
X-Mailing-List header entries to whitelist such messages, how can this
be a
Matt Kettler writes:
>At 12:42 AM 10/3/03 -0400, Christopher M. Iarocci wrote:
>>Hi, I'm using SpamAssassin 2.60 being called through Amavisd-new. Dynablock
>>(along with a few others) is scoring on lots of messages that it shouldn't
>>because the first hop is a dial up. I put the following line
spamassassin --lint
I imagine I am told to run this somewhere in the various doc's but
missed it. Thanks, it works now.
Matt Kettler wrote:
At 02:22 PM 10/3/2003, JJensen wrote:
I have it at the bottom of my /etc/mail/spamassassin/local.cf
I restarted services.
I sent the test spam
"/usr/sh
"Christopher M. Iarocci" writes:
>I'd have to say that a bug exists then. Also, the bug seems to exist with
>multiple RBLs, not just DYNABLOCK as the message hit NJABL and NJABL_DIALUP
>which I also checked, and again, none of the IPs but the originating one was
>listed.
BTW could you post the m
Hi,
is it possible to configure spamassassin to automatically report high scoring spam to
razor?
If not, what would be a good way to do this? I suppose I could write a filter to call
spamassassin -r ...
(I'm using it on a relay server and so right now it is a manual process for me if I
want to
At 03:19 PM 10/3/2003, Ricardo Kleemann wrote:
I don't understand all the
dynamics, but I would have thought that a BAYES_80 with the
FORGED_HOTMAIL_RCVD would be sufficient for a higher score.
My mistake.
That's ok.. the real dynamics are actually very complex. Even the spam vs
nonspam hitrate c
At 02:22 PM 10/3/2003, JJensen wrote:
I have it at the bottom of my /etc/mail/spamassassin/local.cf
I restarted services.
I sent the test spam "/usr/share/doc/spamassassin-2.44/sample-spam.txt"
and added "braintmr" in the subject line (with out the quotes) and it was
still tagged as spam.
head
At 03:05 PM 10/3/2003, Ricardo Kleemann wrote:
Hmmm why would you say I'm not using 2.60? Because I am.
I state that because no combination of 2.60's BAYES_80 and
FORGED_HOTMAIL_RCVD can add to 4.4. The highest those two can add to is 2.942.
Or are there other rules involved that you did not men
At 01:53 PM 10/3/2003, Ricardo Kleemann wrote:
I didn't see a response to my original post so I'm posting
again... ;-)
I received a spam that got scored only 4.4 yet it had
BAYES_80 as well as FORGED_HOTMAIL_RCVD.
I'm not very familiar with how much these tags _should_ be
scored, but shouldn't a FO
Hi,
- Original Message Follows -
>
> At 03:05 PM 10/3/2003, Ricardo Kleemann wrote:
>
> >Hmmm why would you say I'm not using 2.60? Because I am.
>
> I state that because no combination of 2.60's BAYES_80 and
> FORGED_HOTMAIL_RCVD can add to 4.4. The highest those two
> can add to is 2
On 10/03/03 12:22 PM, JJensen sat at the `puter and typed:
>
>I have it at the bottom of my /etc/mail/spamassassin/local.cf
>I restarted services.
>I sent the test spam
>"/usr/share/doc/spamassassin-2.44/sample-spam.txt" and added
>"braintmr" in the subject line (with out the q
On Fri, 2003-10-03 at 13:22, JJensen wrote:
> I have it at the bottom of my /etc/mail/spamassassin/local.cf
>
> I restarted services.
>
> I sent the test spam
> "/usr/share/doc/spamassassin-2.44/sample-spam.txt" and added
> "braintmr" in the subject line (with out the quotes) and it was still
> t
Highest I've got is a 75.8, but that was with SA 2.55 and with a few RBL
scores set to 2.5 or 3.0 in local.cf (still would have been right around
70 with defaults though)
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Scott Rothgaber wrote
Title: Message
I have it at the bottom of my /etc/mail/spamassassin/local.cf
I restarted services.
I sent the test spam "/usr/share/doc/spamassassin-2.44/sample-spam.txt"
and added "braintmr" in the subject line (with out the quotes) and it
was still tagged as spam.
header
Brain_TMR
Hi,
I didn't see a response to my original post so I'm posting
again... ;-)
I received a spam that got scored only 4.4 yet it had
BAYES_80 as well as FORGED_HOTMAIL_RCVD.
I'm not very familiar with how much these tags _should_ be
scored, but shouldn't a FORGED_HOTMAIL_RCVD have a
reasonably high
Mail::SpamAssassin::NoAudit implements accept
Never mind I found this in it's accept implementation
# we don't support maildir or qmail here yet. use the real Mail::Audit
# for those.
On Saturday, October 4, 2003, at 12:06 AM, Rich Puhek wrote:
Robert Nicholson wrote:
Currently I have my perls
For reference, I've verified Christopher M. Iarocci's report that 2.60
incorrectly processes headers when doing RCVD_IN_DYNABLOCK, as it fails to
skip the first hop IP address
I've even verified it using SA's own debug output with -D rbl=-64.
I've gone ahead and created a bug, and attached a sa
Robert Nicholson wrote:
when running with qmail on a plex box with virtual users where will
spamassassin look for the "users" spamassassin configuration? ie. what
normally is ~/.spamassassin
It won't. If the user has no home directory, it won't use user prefs
(since there's no place to put the
On Friday 03 October 2003 18:21 CET Robert Nicholson wrote:
> when running with qmail on a plex box with virtual users where will
> spamassassin look for the "users" spamassassin configuration? ie. what
> normally is ~/.spamassassin
I guess you want to use 'spamd --vpopmail' and connect with spamc
Currently I have my perlscript running on a non-plex box and everything
works fine in that
everything is shell account based and SA picks up my ~/.spamassassin
I'll probably have to configure it via the perl APIs to look for same.
Sounds like a non problem.
I just hope Mail::Audit (which folks
Robert Nicholson wrote:
I'm calling SA from within a perlscript. ie. I'm using the
Mail::Spamassassin apis.
I would assume that the script is what's concerned with the mail storage
format, then.
Q.
when running with qmail on a plex box with virtual users where will
spamassassin look for th
On Friday 03 October 2003 17:59 CET Mike Carlson wrote:
> Is it possible for sa-learn to learn too much?
From 'man sa-learn':
| SpamAssassin remembers which mail messages it's learnt
| already, and will not re-learn those messages again,
| unless you use the --forget option. Me
Lately I've been noticing multi-part spam messages where the plain text part
of the message was some kind of news article and the HTML part was a totally
unrelated advertisement. (See the example below.) I assume this is another
spammer trick to try to corrupt Bayes, since most email clients won'
"Robert Leonard III" wrote:
Here is what I see when I run spamassassin --lint -D
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: Pyzor: got response: 66.47.67.162:24441 TimeoutError:
debug: leaving helper-app run mode
debug: Pyzor: couldn't grok response "66.4
> At 12:42 AM 10/3/03 -0400, Christopher M. Iarocci wrote:
> >Hi, I'm using SpamAssassin 2.60 being called through Amavisd-new.
Dynablock
> >(along with a few others) is scoring on lots of messages that it
shouldn't
> >because the first hop is a dial up. I put the following line in my
> >/etc/ma
Mike Carlson wrote:
what is the highest scoring anyone has seen SA give a
message? I had one come through at 37.54 the other day.
Sorry to bust your bubble, but I see those several times per day. ;-)
I have even seen a few with scores in the low 40s.
--
That particular report was generated using:
http://www.gryzor.com/tools/#spamstats
I also use another script that I found that works in conjunction with MRTG
to generate graphs:
http://users.2z.net/rpuhek/scripts_public/spamd/
HTH...
Ed
At 11:17 AM Friday, 10/3/2003, you wrote -=>
How do you
Hello,
Sometime late last week or early this week, the amount
of time that spamd is taking to process each message
went from 2-3 seconds to 32-33 seconds. This makes me
think that there is a timeout connecting to a
blacklist somewhere.
However, -D debug doesn't tell me that. Is there a way
to fi
I'm calling SA from within a perlscript. ie. I'm using the
Mail::Spamassassin apis.
Q.
when running with qmail on a plex box with virtual users where will
spamassassin look for the "users" spamassassin configuration? ie. what
normally is ~/.spamassassin
On Friday, October 3, 2003, at 10:41 P
Is it possible for sa-learn to learn too much?
I have an old users mailbox that we have basically been using as a spam trap
for the last year or so. There are 6000 messages in it right now and a lot
are dupes. Do duplicate messages cause the learn process any problems? If I
dedupe it I get about 4
Robert Nicholson wrote:
Any Maildir afficionados here?
My ISP has just moved from mailboxes to Maildir with qmail.
Anybody know if qmail will support box folder types concurrently?
Likewise courier-imap is the imap server I need to communicate
with.
No, spamassassin does not support Maildir...
Hi,
I remember this being discussed sometime, but I coudn't fint it in my
archieves.
I migrate to 2.60 and now my header X-Spam-Report is not breaking up
correctly. here is an example:
---
X-Spam-Report: * -4.9 BAYES_00 BODY: Bayesian spam probability is 0 to
1% * [score:
I've been able to re-discover pyzor servers (and it always winds up with the same
server) and get pyzor working for a couple hours before the "couldn't grok response
'...TimeoutErrors'" begins again. I've disabled Pyzor and just written it off to my
own ignorance. Basically once it starts not
OK,
I'm thinking this has something to do with my config. Will tell you what I
come up with when done testing.
<>
| -Original Message-
| From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
| Sent: Friday, October 03, 2003 10:04 AM
| To: Smart,Dan
| Cc: [EMAIL PROTECTED]
| Subject: Re: [SAt
On Friday 03 October 2003 15:36 CET Robert Nicholson wrote:
> Any Maildir afficionados here?
>
> My ISP has just moved from mailboxes to Maildir with qmail.
>
> Anybody know if qmail will support box folder types concurrently?
>
> Likewise courier-imap is the imap server I need to communicate
> wit
Ah ye'olde Word problem :)
I had this getting FP's before as well. TO be on the safe side, take a look
at the raw email and write some negative rules for the emails written in
word. DON'T use obvious markers Spammers will only try to forge them.
Try using some odd marks to determin it is a Wo
| -Original Message-
| From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
| Sent: Friday, October 03, 2003 9:42 AM
|
| nothing from the SA side. if your libdb/DB_File is out of
| date, you may want to update them.
perl-DB_File-1.75-36.1.73
Not sure how to check the libdb version, but
The solution was given to me yesterday... and it, as many solutions are, was
easy.. if not obvious..
On Pyzors website they state that their servers IP address have changed and
you need to run 'pyzor discover'...
I did.. it re-discovered.. and it now works...
:)
- Original Message -
F
On Fri, Oct 03, 2003 at 09:39:17AM -0500, Smart,Dan wrote:
> Here are the sizes of the source. Yes they are big, but I wouldn't think
> 30,000 messages would be to huge for bayes. Is this not correct?
3 is small, no problem.
> 1. Do I need to feed it less spam to initialize?
up to you.
>
The following slips through due to "USER_IN_WHITELIST", however, this
user is not whitelisted in local.cf or user_prefs, nor are the domains.
The server runs postfix+amavisd and I believe the whitelisting takes
place from the amavisd config. I'm unable to figure out how though,
the config is pr
My source files have:
Djs-ham - 9000 records
Djs-spam - 22000 records
Newspam - 9000 records
Here are the sizes of the source. Yes they are big, but I wouldn't think
30,000 messages would be to huge for bayes. Is this not correct?
-rw-r--r--1 filter filter 109323317 Sep 26 12:05 djs-ham
At 12:42 AM 10/3/03 -0400, Christopher M. Iarocci wrote:
Hi, I'm using SpamAssassin 2.60 being called through Amavisd-new. Dynablock
(along with a few others) is scoring on lots of messages that it shouldn't
because the first hop is a dial up. I put the following line in my
/etc/mail/spamassassin
At 03:24 PM 10/3/03 +0200, Per olof Ljungmark wrote:
The following slips through due to "USER_IN_WHITELIST", however, this user
is not whitelisted in local.cf or user_prefs, nor are the domains.
The server runs postfix+amavisd and I believe the whitelisting takes place
from the amavisd config. I
So what is the solution for this problem? sa-learn --rebuild? I'm
getting a lot of FPs from it too, even though my threshold is 8.
Chris
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_
O-Zone wrote:
Hi all,
here's the header of an e-mail of spam passing througth spamassassin. It seems
do not work. Why ?
Date-warning: Date header was inserted by smtp.telnor.net
From: Technical Services <[EMAIL PROTECTED]>
Subject: Newest Network Patch
To: MS Corporation User <[EMAIL PROTECTED]
Hallo Ed,
am Freitag, 3. Oktober 2003, 15:35:27, schriebst Du:
> Our highest score since Sunday:
> spamd[21411]: identified spam (55.0/7.0)
> Total number of emails processed by the spam filter : 1242
> Number of spams : 242 ( 19.48%)
> Number of clean messages
Jack Gostl wrote:
Out of curiosity, what is the highest scoring anyone has seen SA give a
message? I had one come through at 37.54 the other day.
In my current batch of "caught" spam I have some in the high 50s, but I
think I once saw a 70+.
-Mike Carlson
[EMAIL PROTECTED]
http://www.uselesstho
On Thursday 02 October 2003 19:45 CET Robert Leonard III wrote:
> Here is what I see when I run spamassassin --lint -D
>
> debug: Pyzor is available: /usr/bin/pyzor
> debug: entering helper-app run mode
> debug: Pyzor: got response: 66.47.67.162:24441 TimeoutError:
> debug: leaving helper-app run
On Fri, Oct 03, 2003 at 08:33:06AM -0500, Smart,Dan wrote:
> Could the database size have caused all my learned spam/ham to be
> eliminated? I noticed that the database looks like:
> -rw-rw-rw-1 filter filter4718592 Oct 3 08:21 .spamassassin_seen
> -rw-rw-rw-1 filter filter 5885
57.0 points:
Subject: Melt Away Body Fat while you are sleeping wkyhccvlba sltrvf
Content analysis details: (57.0 points, 5.0 required)
pts rule name description
--
--
4.2 DATE_SPAMWARE_Y2K Date heade
The following slips through due to "USER_IN_WHITELIST", however, this
user is not whitelisted in local.cf or user_prefs, nor are the domains.
The server runs postfix+amavisd and I believe the whitelisting takes
place from the amavisd config. I'm unable to figure out how though, the
config is pr
> Out of curiosity, what is the highest scoring anyone has seen SA give a
> message? I had one come through at 37.54 the other day.
In my current batch of "caught" spam I have some in the high 50s, but I
think I once saw a 70+.
>
> -Mike Carlson
> [EMAIL PROTECTED]
> http://www.uselessthoughts.
Look, there's a poll for this at
http://news.spamassassin.org/modules.php?op=modload&name=NS-Polls&file=index
Is it inappropriate to suggest that we see who's got the biggest thingy over there?
-tom
---
This sf.net email is sponsored by:Think
That's nothing, I had an 82 once. I wish I had saved it though.
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kai
Risku
Sent: Friday, October 03, 2003 9:24 AM
To: [EMAIL PROTECTED]
Cc: Mike Carlson
Subject: RE: [SAtalk] Highest Score
65.489 usi
On Thursday 02 October 2003 21:19 CET Chris Barnes wrote:
> Malte S. Stretz <[EMAIL PROTECTED]> wrote:
> > On Wednesday 01 October 2003 17:36 CET Chris Barnes wrote:
> >> [...]
> >> What am I missing?
> >
> > TFM, the FAQ and sa-learn --import.
>
> Ok, good suggestion. Did that and it told me:
>
>
65.489 using SA 2.50 and default scores.
tests=AS_SEEN_ON, BANG_EXERCISE, BANG_GUARANTEE, BANG_OPRAH, BAYES_99,
BIZ_TLD, CLICK_BELOW_CAPS, DATE_IN_PAST_06_12, DATE_SPAMWARE_Y2K,
DCC_CHECK, DNS_FROM_RFCI_DSN, FORGED_IMS_HTML, FORGED_IMS_TAGS,
FORGED_MUA_IMS, FORGED_RCVD_NET_HELO, GUARANTEE, HAIR_LO
On Fri, 3 Oct 2003, O-Zone wrote:
> Hi all,
> here's the header of an e-mail of spam passing througth spamassassin. It seems
> do not work. Why ?
[...]
> X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.60
> X-UIDL: +"S!!m@,!!=LF"!lUk"!
well, if spamd is running, have a
| -Original Message-
| From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
| Sent: Thursday, October 02, 2003 9:13 AM
|
| Just to check: are you learning to journal, and did you sync
| the journal before "dump magic"?
I'm not sure I understand your question. If you are asking if I tried a
Our highest score since Sunday:
spamd[21411]: identified spam (55.0/7.0)
Total number of emails processed by the spam filter : 1242
Number of spams : 242 ( 19.48%)
Number of clean messages: 1000 ( 80.52%)
Average message analysis time :
Any Maildir afficionados here?
My ISP has just moved from mailboxes to Maildir with qmail.
Anybody know if qmail will support box folder types concurrently?
Likewise courier-imap is the imap server I need to communicate
with.
---
This sf.net
| -Original Message-
| From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
| Sent: Thursday, October 02, 2003 9:13 AM
| Just to check: are you learning to journal, and did you sync
| the journal before "dump magic"?
Could the database size have caused all my learned spam/ham to be
eliminated
Here's a new twist on the Nigerian mail scam. For what it's worth,
I'm running SA 2.54 and this only scored 1.3. Enjoy!
Don NewcomerDickinson College
Associate Director, S
Out of curiosity, what is the highest scoring anyone has seen SA give a
message? I had one come through at 37.54 the other day.
-Mike Carlson
[EMAIL PROTECTED]
http://www.uselessthoughts.com
---
This sf.net email is sponsored by:ThinkGeek
Welc
Am Donnerstag, 2. Oktober 2003 hat Scott Rothgaber zum Thema
"Re: [SAtalk] Razor Patch" folgendes getippt:
> > Where is the 'patch' executable supposed to come from?
> Most likely in a directory that's not in your PATH. ;-)
> find /usr -name patch -print
I came up with that idea myself, but th
Hi all,
here's the header of an e-mail of spam passing througth spamassassin. It seems
do not work. Why ?
Date-warning: Date header was inserted by smtp.telnor.net
From: Technical Services <[EMAIL PROTECTED]>
Subject: Newest Network Patch
To: MS Corporation User <[EMAIL PROTECTED]>
Message-id: <
78 matches
Mail list logo
