We run around 50%. And that's by count. With the MS worms flying in we
have noticably more spam by volume than real mail.
On Sun, 12 Oct 2003, landy wrote:
> i cant believe today i have so fat 21% spam
>
>
> File /var/log/mail : from Oct 12 00:05:27 to Oct 12 21:10:54
> Total number of emails
My previous setup involved a combination of procmail, spamassassin call
from filtmail which is a perlscript that runs
from my .procmailrc.
I am reimplementing the lot in perl using SpamAssassin and Mail::Audit
with qmail.
so far everything works quite nicely.
However, in the past I used my own
> -Original Message-
> From: Roger Merchberger [mailto:[EMAIL PROTECTED]
[ ]
>
> 2) Is there any way of setting up logging to know which rules
> are being hit & which ones aren't without grabbing all of the
> message headers? I'd like to be able to profile which rules
> are being hi
Call it with spamd and limit the number of spamd processes with the -m
switch.
For comparison sake, I have a light-volume postfix/spamd gateway server
that handles about 1000 messages per hour during business hours. It's a
PII-400 with 512mb RAM.
I can't give you spamstats time statistics outpu
So I'm loving the rules http://spamhammers.nxtek.net/ that Jennifer
Wheeler wrote , but I'm up against a few (philosophical?) questions, and
would like to invite discussion.
I've noticed that about 95% of the time when these rules are hit,
they're listed as BAYES_99. In this case, should I even b
Okay, are you running spamassassin as root? If not, you'll probably
want to specify bayes_path in your local.cf - so that when you do a
spamassassin -D it reflects the ACTUAL location of the Bayes databases.
Then run it again, and see if you actually have zero spams in the
database. It will tell
i cant believe today i have so fat 21% spam
File /var/log/mail : from Oct 12 00:05:27 to Oct 12 21:10:54
Total number of emails processed by the spam filter : 171
Number of spams :36 ( 21.05%)
Number of clean messages: 135 ( 78.95%)
Average me
Hi David,
> spamd starts up ok, but the minute an email is sent through the MTA,
> calling spamc, spamd jumps to the top of the process table (via 'top')
> with memory usage in the 75%-95% range. The system slows to a crawl
> and within a minute crashes with "Out of memory" in the system logs,
>
On Fri, Oct 10, 2003 at 11:23:23AM -0400, Covington, Chris wrote:
> Is there any spam correlation between a message using a Message-ID from
> my own domain vs. its own Message-ID? I've noticed some in my corpus
> uses my MX's Message-IDs vs. their own.
No - you are probably confusing the fact tha
How do you call SpamAssassin? Please be specific with your answer. :)
If you use spamc/spamd it defaults to only scanning up to 250kb,
configurable with the -s switch. No config file necessary, you set it
as a switch on the line that you call spamc with.
http://www.spamassassin.org/doc/spamc.ht
One of my users periodically sends large office documents. Unfortunately,
scanning these files causes a time-out in Postfix.
How do I go about setting Spamassassin so it passes along large attachments
without scanning them? (Please be specific with your answer -- parameter to
set and location o
--On 10-10-03 6:47 pm +0100 Alan J Fitton wrote:
All the ways to use sa-learn I've seen only appear to be relevant when
mail is scanned as the user who is receiving it, ie. with procmail.
I'm using a milter (mail filter) in sendmail for site wide scanning, which
works very well. I would like for ea
Ok, kinda found the problem, the libraries of Perl are not installed
where they should be, they are installed in:
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi/HTML
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi/auto/HTML
and the simlynk doesn't work because It get's:
Starting
Thanks everyone for the comments and suggestions (too many to reply
individually to everyone). I'm working on an update to the guide, which
should be ready / posted in a day or two.
BTW, if anyone is in Chicago October 14-16, I'll be speaking at the
Security Decisions conference (http://securit
Title: Re: [SAtalk] GA Question
> > 1) The documentation says a large corpus is necessary. How
> > large are we talking? 1000? 10,000? 1,000,000 messages?
>
>Hi Philip --
>
>we used about 200,000 last time.
We're getting about 80%/5% true positive / false positive rates right no
I fixed the problem, I't wasn't spamassassin, I had installed a wrong
version of Perl:Html. Now it finally starts :)
So, it starts now but it doesn't proccess the email, I have sendmail
installed but haven't configured the procmail yet. Is there a good howto
explaining how to get it working?
Tha
Hi larry,
This seems to work, it matches what I think you're trying to do, but
It's otherwise untested. (matched 'work')
/[>\s]\w{1,7}<\/?\s?[\w\s]{1,20}\S{1}[\w\s]{1,20}\/?\s?>\w{1,7}\W/i
I'd test it out before I gave it much of a score. Maybe you can do
something with that. There is a rule i
--On 10-10-03 6:47 pm +0100 Alan J Fitton wrote:
All the ways to use sa-learn I've seen only appear to be relevant when
mail is scanned as the user who is receiving it, ie. with procmail.
I'm using a milter (mail filter) in sendmail for site wide scanning, which
works very well. I would like for ea
Hi Again, I solved the problem of @INC by inserting these two lines:
use lib
"/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi/auto/HTML/Parser";
use lib "/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi/HTML";
in /usr/bin/spamd
But I still get
# /etc/init.d/spamassassin start
St
Ok, kinda found the problem, the libraries of Perl are not installed
where they should be, they are installed in:
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi/HTML
/usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi/auto/HTML
and the simlynk doesn't work because It get's:
Starting
At Sat Oct 11 13:13:23 2003, Tom Wentworth wrote:
>
> In searching through this list I found a reference to a test named
>
> HTTP_ENTITIES_HOST
>
> Yet, I don't see this in the current list of tests on the website.
> Has it been done away with? If it has, why?
>
> SA 2.55, Razor 2
The rule its
Thanks Chris. That's all it was: restart spamd.
:-))
Is there a good help reference available for local.cf? I have searched on
Google and looked on th SA website but haven't foud anything so far. There is
no local.cf man page on my system.
Cheers,
Brad
On Saturday 11 October 2003 02:58, you
22 matches
Mail list logo
