Good evening, all,
On Wed, 8 Oct 2003, Daniel Quinlan wrote:
> Scott A Crosby <[EMAIL PROTECTED]> writes:
>
> > The thing is that a gibberish token (not-with the statistics of $LANG,
> > not-dictionary) should, as a new token, be given a different bayes
> > catagory than one that is in a diction
Scott A Crosby <[EMAIL PROTECTED]> writes:
> The thing is that a gibberish token (not-with the statistics of $LANG,
> not-dictionary) should, as a new token, be given a different bayes
> catagory than one that is in a dictionary, etc.
Perhaps. It would probably be somewhat expensive to test ever
On 08 Oct 2003 17:34:44 -0700, Daniel Quinlan <[EMAIL PROTECTED]> writes:
> Scott A Crosby <[EMAIL PROTECTED]> writes:
>
> > Sure. The goal of that is to add in new tokens that are unique and
> > have never been seen before. Those can bias an email toward neutral.
>
> Bayes could also just track
Scott A Crosby <[EMAIL PROTECTED]> writes:
> Sure. The goal of that is to add in new tokens that are unique and
> have never been seen before. Those can bias an email toward neutral.
Bayes could also just track never-seen-before tokens as an artificial
token. My initial testing indicates that ne
Patrick/Adam -
Yes, works *fine* w/ GNU patch binary. Thanks A Bunch!! -paul
Date: Wed, 8 Oct 2003 19:12:13 -0400
From: Adam Denenberg <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] Razor2.patch croaks under Solaris 8
try using GNU Patch instead of the on
try using GNU Patch instead of the one with solaris, i get this all the
time. It will fix your problems.
adam
On Wednesday, October 8, 2003, at 06:47 PM, [EMAIL PROTECTED] wrote:
Under Solaris 8, applying the Razor2.patch to fix the taint problem
Dies
horribly:
I cd to: /usr/local/lib/perl5
At 04:44 PM 10/8/2003, Marc Steuer wrote:
1. Is it possible to re-set AWL scores to 0 for particular e-mail
addresses?
Yep, see the manpage for spamassassin:
spamassassin --remove-addr-from-whitelist
---
This SF.net email is sponsored by: SF.
[EMAIL PROTECTED] wrote:
Under Solaris 8, applying the Razor2.patch to fix the taint problem Dies
horribly:
Are you using Solaris's "patch," or the GNU one? If you're not using
GNU's, you might give it a shot.
smime.p7s
Description: S/MIME Cryptographic Signature
This message is intended
Under Solaris 8, applying the Razor2.patch to fix the taint problem Dies
horribly:
I cd to: /usr/local/lib/perl5/site_perl/5.8.0/sun4-solaris/Razor2
[EMAIL PROTECTED] Razor2#] ls -la
total 100
drwxr-xr-x 5 root other512 Oct 8 18:02 .
drwxr-xr-x 6 bin bin 512 Oct 8
Thanks to Kai and Colin but I don't believe I made it clear with my other
post.
My whitelist is not working no matter where I put it.
The /etc/mail/spamassassin/local.cf file is working because I can change the
score value
and it reads the changes.
BUT, if I put my black/white list entries in t
Matt Kettler wrote on Tue, 07 Oct 2003 10:57:08 -0400:
> I was refering to the eating memory problem. And in general I'd expect
> bayes to cause some kind of slow increase too.
No, I really can't see any increase over the time. It stays almost exactly at
the same level over days and weeks.
>
Stephen Bradley wrote on Wed, 8 Oct 2003 16:06:14 -0400:
> I use spamd/spamc and I know it reads the /etc/mail/spamassassin/local.cf
>
Just put all stuff in that directory! sa/spamd reads all files in there.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: htt
You can put the configuration commands for white/blacklists directly in your
local.cf file or into any other .cf file you place in the
/etc/mail/spamassassin directory. There is also a usr/share/spamassassin
directory that contains .cf files that you can modify but bear in mind that
these files wil
On Tue, Oct 07, 2003 at 01:28:03PM -0700, Eric Sobalvarro wrote:
> 1. "Still running as root"
Running the milter as spamd user is nice. Create the user,
make a homedir for it, edit the spamass-milter initscript
so its started properly. Check sendmail settings.
But it's not a must, I guess.
> 2
On Tue, Oct 07, 2003 at 12:21:51PM -0500, Mike Carlson wrote:
> When I run spamstats I dont get any output for message count.
> This is all I get:
>
> altair# /usr/local/bin/spamstats.pl -number=5 -file=/var/log/maillog.2.gz
> File /var/log/maillog.2.gz : from Oct 4 00:00:00 to Oct 5 00:00:00
>
I dunno. I've had mine turned off forever and I've had ZERO FNs since
upgrading to 2.60 and dumping about 200 messages through sa-learn.
On Wed, 8 Oct 2003, Brian Morrison wrote:
> On Wed, 8 Oct 2003 13:45:54 -0500 (CDT) in
> [EMAIL PROTECTED] "Robert A.
> Hayden" <[EMAIL PROTECTED]> wrote:
>
On Wed, Oct 08, 2003 at 04:06:14PM -0400, Stephen Bradley wrote:
> I cannot figure out where to put my hard coded white/black
> lists now.
>
> I use spamd/spamc and I know it reads the
> /etc/mail/spamassassin/local.cf file because I can change
> the score and it shows up after a restart.
>
> SA
On Wed, Oct 08, 2003 at 10:54:58AM +0200, Kristian Köhntopp wrote:
> razor2 check skipped: Illegal seek
> Insecure dependency in connect while running setuid at
> /usr/lib/perl5/5.8.0/i586-linux-thread-multi/IO/Socket.pm line 114.
2.6. I upgraded to 2.6x and get "razor2 check skipped":
http://
Matt Kettler wrote:
Is there a list for amavisd-new? Someone here might know the answer,
but if not, that'd probably be the better place to ask.
Yes I've asked the question on the amavisd-new mailing list and looked
over the amavisd-new docs. It seams that amavisd-new doesn't have that
level
On Wed, 8 Oct 2003 13:45:54 -0500 (CDT) in
[EMAIL PROTECTED] "Robert A.
Hayden" <[EMAIL PROTECTED]> wrote:
> A few things I can recommend that speed things up:
>
> 1) Turn off RBL lookups
How much additional spam did you want to have to look at?
--
Brian Morrison
bdm at fenrir dot org dot u
> > I run a cron job to --force-expiry every 4 hours because I
> cant get it
> > to do it automatically, that is why it last expired at Noon. If I
> > look at my spamd debug log, I see this
>
> Unless you get a billion mails an hour (ish), this isn't
> going to help you much.
>
approx 2
Friends,
I'm new to SA and have two questions to pose to the group.
1. Is it possible to re-set AWL scores to 0 for particular e-mail
addresses?
2. is there a Win32 version of an Outlook to RFC822 mailbox converter, (to
use with messages destined for sa-learn).
Thanks,
Marc
---
I have been using SA for a long long time now and upgraded to 2.60 this
week.
I cannot figure out where to put my hard coded white/black lists now.
I use spamd/spamc and I know it reads the /etc/mail/spamassassin/local.cf
file because
I can change the score and it shows up after a restart.
SA is
On Wed, Oct 08, 2003 at 01:33:34PM -0500, Dallas L. Engelken wrote:
> [EMAIL PROTECTED] spamassassin]# echo "select FROM_UNIXTIME(1065632593)" |
> mysql
> FROM_UNIXTIME(1065632593)
> 2003-10-08 12:03:13
e. talk about overkill.
#!/usr/bin/perl
print scalar localtime($ARGV[0]),"\n";
> I run a
At 02:14 PM 10/8/2003, Roger wrote:
Right now I've setup amavisd-new to tag email w/ a scrore above 6 and
delete email w/ a score above 20 BUT I'd like to have a setup that says -
domain_a/user_x wants all spam tagged - domain_b/user_b wants all spam
deleted.
Opting out of spam checking is no p
We are receiving near this much mail traffic, I get about 1 connection every
2 seconds, average of 50k messages per day.
I am using spamD on 3 different servers to spread the load around, it's
working great!
In am also running my own creation (WinSpamC) which allows for
load-balancing between mul
I am running 2.6 on a P4-2.4GHz that gets about 1/3 that amount of traffic
and most of my analyses are completed in under .25 seconds. The box is
running RH9.0 and using postfix to call procmail.
A few things I can recommend that speed things up:
1) Turn off RBL lookups
2) Run a local cachin
Hallo VonEssen, John,
am Mittwoch, 8. Oktober 2003, 20:09:39, schriebst Du:
> 3. Run /your/path/to/cdcc 'info' and make sure it returns a list of
this is the result:
# 10/08/03 20:45:13 CEST /var/dcc/map
# Re-resolve names after 22:19:23
# 196.24 ms threshold, 168.70 ms average12 total, 11
I'd like to get some granularity in how SA works. Currently I have
Spamassassin setup w/ razor and clamav all running fine - tied together
with amavisd-new. However some users want tagged spam others want
deleted spam. Under amavisd-new I can setup spam_lovers or bypass_spam
on a per-domain
At 01:12 PM 10/8/2003, Jim Knuth wrote:
I wont to know, why DCC not working.
I`ve just installed on my system. ( Debian 3.0 )
The output is:
You won't be able to tell anything about DCC by looking at message headers.
It could just be that the message in question was listed in razor and
pyzor, but
Hallo Matt Kettler,
am Mittwoch, 8. Oktober 2003, 20:13:24, schriebst Du:
> At 01:12 PM 10/8/2003, Jim Knuth wrote:
>>
>>I wont to know, why DCC not working.
>>I`ve just installed on my system. ( Debian 3.0 )
>>The output is:
> You won't be able to tell anything about DCC by looking at message h
At 02:22 PM 10/8/2003, Rob Mangiafico wrote:
So, with SA 2.6x and having an autolearn bayes db per user setup, is the
journal method recommended, or is it not needed in such a setup? Just
trying to figure out the best configuration for per user bayes
autolearning.
To be honest with you, I can't hel
I'm trying to figure out why auto-expiration of bayes tokens is not
working here local.cf contains
[EMAIL PROTECTED] spamassassin]# cat /etc/mail/spamassassin/local.cf | grep
bayes
# bayes
use_bayes 1
bayes_auto_learn1
bayes_auto_learn_thre
> >So this means we cannot run multiple sessions?
> >
> >I'm running SA 2.6 spamd/spamc, and getting this same error log.
> Not without error messages... however, as Theo very correctly pointed out
> the errors aren't fatal, it just means that an attempt at autolearning
> failed. SA itself keeps
On Mon, Oct 06, 2003 at 04:49:24PM -0400, Colin A. Bartlett wrote:
> SA 2.60 is much faster on the tests. I recently upgraded and I noticed a
> speed increase.
>
> Also, if your times are all just over 30 seconds it's because the default
> time out is 30 secs. You can change the timeout in your lo
Just food for thought for the next release...
I have been seeing more and more spam using different phrases for
"remove me" phrases.
Some use the work "cease":
Cease offer(s)
Cease update(s)
Cease email
Cease mailing(s)
John
-Original Message-
From: Scott A Crosby [mailto:[EMAIL PROT
Jim,
The obvious things to do are:
1. If you are behind a firewall, make sure proper settings are in place to allow the
DCC communications inbound/outbound on UDP port 6277. There are previous posts about
this as it is extremely important. Incorrect firewall settings cause excessive load on
th
I'm using SA 2.6 spamd/spamc
I'm using it in a very loaded server, I get arround 2 mail connections
per second.
I want to know if there are people having this kind of load, or even
bigger, cause I don't think this should be a big load for the server.
The server is Pentium III 1 ghz, 512 MB ram.
At 11:53 AM 10/8/2003, Wiesiek wrote:
I just installed spamassassin 2.60. It's work, but i see in mail.log
strange errors
That sounds like your upgrade failed to correctly upgrade your rulefiles.
BALANCE_FOR_LONG isn't a rule in sa 2.60, so it looks like you've got the
ruleset for some older
Hallo ,
I wont to know, why DCC not working.
I`ve just installed on my system. ( Debian 3.0 )
The output is:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp)
X-Spam-Pyzor: Reported 11 times.
X-Spam-DCC: :
X-Spam-Level: *
X-Spam-Status: Yes, h
headerLOCAL_FUNNY_SUBJSubject =~ /g00d.{1,30}pr0/i
describe LOCAL_FUNNY_SUBJ Looks like a funny subject I seen once!
score LOCAL_FUNNY_SUBJ 1.0# score whatever you want.
Add something like the rule above to your local.cf or user_prefs file.
A good article on Regular expressio
On Wed, 8 Oct 2003 08:34:46 -0700 (PDT), [EMAIL PROTECTED] writes:
> Wow... 10 false negatives this morning. =/
>
> Is 2.60's bayes really a lot better than 2.55's?
> Here's an example of a FN that came through this morning:
> Notice the gobbledygook text at the end -
Sure. The goal of that i
Hello List!
I just wanted to let those interested people know that we have
a working port of spamC for windows named WinSpamC, also a document explaining
howto run SpamD on windows with cygwin.
http://sourceforge.net/projects/winspamc/
Thank you!
Frederic TaraseviciusInternet Information S
[EMAIL PROTECTED] wrote:
Is it possible to write in log the IP of the source server and not
127.0.0.1?
I use qmail->qmail-scanner ->spamd (spamassassin)
Thanks
Sep 8 07:03:47 email spamd[7832]: connection from localhost
[127.0.0.1] at port 40938
Sep 8 07:03:47 email spamd[18364]: chec
Hi Anne,
I have seen a lot of hard-to-get tag messages come through. I am still
using v2.55 so more messages could possibly get caught with 2.60. However,
I have spent some time creating custom rules to tag the messages and that
has worked very well for me.
--Larry
> -Original Message
Upgrading our copy of Mailscanner fixed this.
Rob
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Jeffrey Wheat
Sent: Tuesday, October 07, 2003 3:06 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] 2.60 lock errors
I haven't found a real answer in the archives
At 12:50 AM 10/8/2003, Diego Weinstein wrote:
So this means we cannot run multiple sessions?
I'm running SA 2.6 spamd/spamc, and getting this same error log.
I'm receiving about 2 mail connections to the mta per second, so I have
sometimes about 20 spamd processes running, that's my top because I
Original Message -
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 08, 2003 5:03 PM
Subject: [SAtalk] Spamd log
Is it possible to write in log the IP of the source server and not
127.0.0.1?
I use qmail->qmail-scanner ->spamd (spamassassin)
Hello
I just installed spamassassin 2.60. It's work, but i see in mail.log
strange errors
This is example:
spamd[11715]: clean message (3.9/5.0) for nobody:65534 in 4.1 seconds, 1420
bytes.
spamd[17414]: connection from localhost [127.0.0.1] at port 1884
spamd[22299]: info: setuid to nobody
Wow... 10 false negatives this morning. =/
Is 2.60's bayes really a lot better than 2.55's?
Here's an example of a FN that came through this morning:
Notice the gobbledygook text at the end -
Return-Path: <[EMAIL PROTECTED]>
Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87])
> -Original Message-
> From: O-Zone [mailto:[EMAIL PROTECTED]
> On Wednesday 08 October 2003 13:40, Tom Meunier wrote:
> > (I must be annoying SOMEBODY) Hi Oz, Which
> > machine(s) have spamassassin? I know domini does, but does
> siena also
> > have spamassassin? That would cause
At 03:34 PM 10/8/03 +0100, David Leggett wrote:
So how do I tell sa-learn to use /var/mail/domain/user/.spamassassin/bayes_*
instead of /root/.spamassassin/bayes_*
in local.cf or user_prefs add this config line:
bayes_path /var/mail/domain/user/.spamassassin/bayes
And yes, the bayes needs t
Is it possible to write in log the IP of the
source server and not 127.0.0.1?
I use qmail->qmail-scanner ->spamd
(spamassassin)
Thanks
Sep 8 07:03:47
email spamd[7832]: connection from localhost [127.0.0.1] at port 40938
Sep 8 07:03:47 email spamd[18364]: checking message <[EMAIL PROT
g00d dTbt c0ns0lidati0n pr0graAm
what would catch the subject line as shown above
Eric
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US pr
At 07:41 AM 10/8/03 +0200, Thomas Kinghorn wrote:
"Failed to create default user preference file //.spamassassin/user_prefs"
Sounds like you're using spamd and spamc, and not passing -u to either. In
this case, spamd will fall back to the user "nobody" and try to use that
home directory for the u
At 10:48 AM 10/8/03 -0400, Jennifer Fountain wrote:
So, I have to use a reverse not a forward zone? Here is what I have
currently:
Well, it's a forward zone.. note that the records returned are A records,
not PTR.. However, the queries are built in a reverse-dns style, kind of
like how "in-addr.
On Wednesday 08 October 2003 13:40, Tom Meunier wrote:
> (I must be annoying SOMEBODY)
> Hi Oz,
> Which machine(s) have spamassassin? I know domini does, but does siena
> also have spamassassin? That would cause this behavior.
Yes, also Siena have Spamassassin ! It's wrong ? Why ? :O
Thanks a
Is anyone else having problems with a *lot* more spam getting through
spam assassin in the last week than ever before? I've updated
spamassassin, my blacklists, and done an sa-learn. None of it seems to
be making a dent. Spamassassin is catching spams, but not nearly
enough--we are having ma
Hi All,
I have been successfully using the rule that tests for content after the
ending HTML tag. One problem I don't quite understand how to fix is if the
content is not on the same line as the tag but after a line break. If I
understand correctly, rawbody will not work with line breaks but bod
So, I have to use a reverse not a forward zone? Here is what I have
currently:
2.0.0.127 IN A 127.0.0.2
209.216.97.250 IN A 127.0.0.2
200.85.197.158 IN A 127.0.0.2
200.32.95.150 IN A 127.0.0.2
81.49.53.180IN A 127.0.0.2
206.131
Hi all,
I am using spamassassin sitewide with qmail + qmailqscanner scanning avg 1K
messages an hour. Tonight spamd suddenly stopped logging. I know that spam
was being marked correctly during this time and functionally everything was
ok, but no logs. System CPU jumped to 5 times normal for the l
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello list subscribers
How can I specify the path to bayes_* files when using sa-learn to add more
tokens to the database?
Currently if I run
sa-learn --ham /var/mail/domain/user/Maildir/.Filter.Ham/cur/*
as root, as expected the db files are store
Nope. None of those.
It was for 1 person, cost like $25 a year, and left people enroll a
domain then manage multiple aliases to handle overspammed addresses.
Can't remember the name -- the closest thing to it i've found is
simplicato
On Tuesday, October 7, 2003, at 09:40 PM, Larry Gilson wro
(I must be annoying SOMEBODY)
Hi Oz,
Which machine(s) have spamassassin? I know domini does, but does siena
also have spamassassin? That would cause this behavior.
-tom
- headers -
On Wednesday 08 October 2003 13:25, you wrote:
> It's difficult to see because you're not incl
On Wed, Oct 08, 2003 at 12:40:02PM +0200, Oliver Thalmann wrote:
> is it techically possible to merge those 2 separate bayes databases to
> one "big reference" bayes db, which i would then recopy to both
> instances ?
Yes, it's technically possible to do.
> if i understand correctly, sa-learn --i
Hi Doug,
The answer to your question varies depending on what version of
SpamAssassin you're using, and what RBL's you're seeing scores on. This
is crucial information to answering your question.
Since this is a well-documented issue with versions before 2.60, I'm
going to assume that, and that y
On Wed, Oct 08, 2003 at 11:30:21AM +0300, Kai Risku wrote:
> As I debugged the code a bit more, I came to the conclusion that
> the power-of-two approach just had trouble coping with by database.
> Perhaps it had something to do with my recent upgrade from 2.55
> to 2.60, but it seemed like most of
Okay, so SpamAssassin is working fine. The mail is properly marked up
when it leaves SpamAssassin at the original place SpamAssassin is
called. Then the next process is what's marking it as 0.0. It almost
looks as if it's running spamassassin twice, once on the original mail
and once on the alr
Thanks, this helped a lot.
-Original Message-
From: Kai Risku [mailto:[EMAIL PROTECTED]
Sent: Miércoles, 08 de Octubre de 2003 05:17 a.m.
To: [EMAIL PROTECTED]
Cc: Diego Weinstein
Subject: RE: [SAtalk] 2.60 lock errors
Enabling the Bayes journal should help ("bayes_learn_to_journal 1"),
On Wednesday 08 October 2003 03:33, David B Funk wrote:
> spamassassin -D --lint
>
> If that looks OK, try feeding the test-spam message to spamassassin
> (again as your 'spamfilter' user and with -D ).
See with your eyes what i get:
debug: Score set 0 chosen.
debug: running in taint mode? yes
Hello,
On the server where QMail 1.03 + spamassassin + clamav + Qmail-scanner
I'd like execute a script before SA treat the mail
In this script, I'd like to load (depend of the domain where the mail is send) a
specific configuration file.
IS it possible to load in SA other file than local.cf ?
Hi,
i plan on having 2 mail gateways on the internet for our domain, and as
each gateway has it's own smtp + spamassassin bayes db, their learnings
(and thus their bayesian estimation) will certainly differ over time, as
one gateway will never see the other gateway's mail
is it techically possibl
Diego,
My understanding so far is this affects the ability to auto-learn but not scan
for spam.
Jeff
-Original Message-
From: Diego Weinstein [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 08, 2003 12:51 AM
To: 'Matt Kettler'; Jeffrey Wheat; [EMAIL PROTECTED]
Subject: RE:
Oct 8 10:52:59 p15104972 spamd[9320]: razor2 check skipped: Illegal seek
Insecure dependency in connect while running setuid at
/usr/lib/perl5/5.8.0/i586-linux-thread-multi/IO/Socket.pm line 114.
since upgrading to 2.60.
Razor 2.36 seems to be the most current download from their site?
Any id
Daniel Quinlan wrote:
In theory, it's safe. In practice, it's slow and ... ?
In practice, in my case, it's not slow at all -- But NetApps seem to
have a pretty decent NFS implementation. Access to a lot of stuff
(though I haven't clocked Bayes specifically) is often faster than local
disk
As I debugged the code a bit more, I came to the conclusion that
the power-of-two approach just had trouble coping with by database.
Perhaps it had something to do with my recent upgrade from 2.55
to 2.60, but it seemed like most of the tokens had the same atime,
because expiring entries older than
Enabling the Bayes journal should help ("bayes_learn_to_journal 1"),
as that allows concurrent processes to open the bayes database in
read-only mode most of time, with only an occasional journal syncing
needing a full write lock on the database.
--
[EMAIL PROTECTED] GSM +358-40-767 8282
>
>On Tue, 2003-10-07 at 10:55, Frederic Goudal wrote:
>
>> >anybody want to put in their $.02 to bayes over NFS.
>>=20
>> I do, it works. Or maybe I don't see the problem.
>
>Among other things, NFS has been known to have file-locking issues. This c=
>an cause problems with multiple processes a
78 matches
Mail list logo
