[SAtalk] New user need help with Spamassassin

Hi I'm using MailShiled 3.1 and Spamassassin, I try to stop the virus mail "Microsoft update" which contain exe file. I configure the SpamDetect Engine "score 9". Under "user_prefs" I configure "score MICROSOFT_EXECUTABLE 2 2 2 2" and under "local.cf" I configure special text: body virustest1

Re: [SAtalk] Deleting e-mail from a blacklisted site on a mail relay

Allyn Baskerville <[EMAIL PROTECTED]> wrote: > Everything is working properly, but I would like > to delete all e-mails from blacklisted sites, and just tag the > other potential spam before forwarding to the internal server. When you say "blacklisted sites", do you mean IP addresses listed in a

RE: [SAtalk] Popcorn & Weeds & Backhair

Hi Tom, I have not been using Bayes but have been considering how to properly implement it on my gateway. I had some ideas about using output from SA as input for Postfix smtpd/header/body rejections. At the end of July Jason Jordan put together a Perl script that would tail the "maillog for "55

RE: [SAtalk] CPAN or RPM's?

> -Original Message- > From: Theo Van Dinter > Sent: Wednesday, October 15, 2003 5:11 PM > To: Chris > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] CPAN or RPM's? > > > On Wed, Oct 15, 2003 at 04:52:39PM -0400, Chris wrote: > > ANYWAY.. we are completely focused on the wrong part of my

Re: [SAtalk] evilrules.cf including in local.cf?

At 04:02 PM 10.15.2003 -0700, Kelson Vibber wrote: >Matt Kettler <[EMAIL PROTECTED]> wrote: >>There's no need to do an include. SA will parse _every_ file in >>/etc/mail/spamassassin, not just local.cf > >Wait, *every* file, or every file ending in .cf? If it's every single >file, I'd better get

RE: [SAtalk] Regex Detail (was RE: Popcorn, Backhair, and Weeds)

First, I want to give credit where credit is due. Jennifer Wheeler authored a set of rules to catch text being obfuscated by HTML and script tags. They are housed at http://spamhammers.nxtek.net/ and moving (?) to http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm. The long thread abo

RE: [SAtalk] Spamassassin updates

> -Original Message- > From: Theo Van Dinter > Sent: Wednesday, October 15, 2003 5:03 PM > On Wed, Oct 15, 2003 at 04:57:33PM -0400, Gilson, Larry wrote: > > You have done this way more than I. I just feel cozy > > updating one RPM at a > > A little bit. ;) > > > time. I like increm

[SAtalk] Deleting e-mail from a blacklisted site on a mail relay

We have a mail relay server in our firewall's DMZ, whose purpose is to send e-mails to our internal mail server and to forward the e-mails from the internal mail server to those on the Internet. This is a RH 9 running the latest qmail and spamassassin. Everything is working properly, but I w

Re: [SAtalk] Possible rule - excessive punctuation in subject

Martin Radford <[EMAIL PROTECTED]> wrote: > I'll bugzilla this tomorrow. You should add it to bug 2584: http://bugzilla.spamassassin.org/show_bug.cgi?id=2584 I started looking for rules to handle that obfuscation method, but I've found that the one I suggested on bugzilla isn't that good. -

RE: [SAtalk] OOPS! Razor2 Problem Still There!

Well, a follow-up:   I figgered out that I probably had to “remake” and “remake install”, etc.   Which I then proceeded to do, and then *BOOM!* I get a “compile error” on Razor2.   Bear in mind that I had no problem installing it before. Further bear in mind that I even erased the who

Re: [SAtalk] Swap Space

On Wed, Oct 15, 2003 at 06:02:09PM -0500, Mike Carlson wrote: > 128MB of RAM with a 238MB swap partition. It was the defaults from the > FreeBSD install. I never thought it would use it all up. All it does is > handle email. > > --Mike Are you running SpamAssassin as spamd, and do you have a lim

Re: [SAtalk] Regex Detail (was RE: Popcorn, Backhair, and Weeds)

Kai MacTane <[EMAIL PROTECTED]> wrote: > /[>\s]\w{1}<[-\w\s\$&!]{0,150}>\w{1}\W/ Writing '{1}' serves no purpose. It means "exactly one of the preceding thing", but the thing by itself already matches exactly once if there's no quantifier. So you can write it this way: /[>\s]\w<[-\w\s\$&

RE: [SAtalk] Swap Space

At 18:02 15/10/2003 -0500, Mike Carlson wrote: 128MB of RAM with a 238MB swap partition. It was the defaults from the FreeBSD install. I never thought it would use it all up. All it does is handle email. 128MB is not enough in my experience. I found that with 128MB of ram that I had to limit concu

[SAtalk] Re: SpamAssassin Site-Wide "off by default" in USAGE document

I intend to route all mail for our site to this spam filter server, have it then forward to our Exchange server...so initially I'd like it to forward all mail, not checking for spam, and then select (by changing a config file) a few users to have spam filtered, ie forward all email unfiltered excep

Re: [SAtalk] Re: Too many rules?

At 18:35 10/15/2003 -0400, [EMAIL PROTECTED] wrote: But the way qmail-rbl works it will deny the mail based on the lookup, not weight it appropiatly. Then put the more 'sane' rbls[1] in your run script which will reduce a bit of your incoming spam (that SA won't have to scan), and the ones you wi

Re: [SAtalk] Swap Space

At 16:35 15/10/2003 -0500, Mike Carlson wrote: I have a FreeBSD box running sendmail/spamass-milter and spamassassin. This morning the box decided to run out of swap space and it kept killing the perl process. Anyone seen this before? How much swap space should I dedicate to the box? I process abou

RE: [SAtalk] CPAN or RPM's?

> -Original Message- > From: Theo Van Dinter > Sent: Wednesday, October 15, 2003 7:06 PM > Well, it depends what you mean by "paying customer" ... Meaning someone who purchases Enterprise products. There are a lot of RH installations in the world. I can certainly understand that devel

Re: [SAtalk] CPAN or RPM's?

On Wed, Oct 15, 2003 at 06:31:36PM -0400, Larry Gilson wrote: > I don't think they are willing to send the message to the world that they > will not support what they have created. This is conjecture on my part. > But if I were a paying customer and I saw that happen, I would probably look > for a

RE: [SAtalk] Swap Space

128MB of RAM with a 238MB swap partition. It was the defaults from the FreeBSD install. I never thought it would use it all up. All it does is handle email. --Mike -Original Message- From: Terry Shows [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2003 5:45 PM To: Mike Carlson

Re: [SAtalk] evilrules.cf including in local.cf?

Matt Kettler <[EMAIL PROTECTED]> wrote: There's no need to do an include. SA will parse _every_ file in /etc/mail/spamassassin, not just local.cf Wait, *every* file, or every file ending in .cf? If it's every single file, I'd better get rid of things like local.cf.bak. Kelson Vibber SpeedGate Co

[SAtalk] OOPS! Razor2 Problem Still There!

Okay, so I applied the patch as shown at:   http://spamassassin.taint.org/faq/index.cgi?req=show&file=faq02.006.htp   But I get the following message, STILL:   razor2 check skipped: No such file or directory Insecure dependency in open while running with -T switch at /usr/lib/perl5/s

RE: [SAtalk] Popcorn, Backhair, and Weeds

Chris Santerre wrote: > I'm hoping to get some feedback from the people who's system slowed to a > crawl with the first update. Evilrules is basically cut in half now. Chris, the new update kicks. When I added the last one it crashed my box, 256 MB was just not enough RAM on my 400 Mhz PII. This

[SAtalk] Re: Too many rules?

But the way qmail-rbl works it will deny the mail based on the lookup, not weight it appropiatly. Roger Merchberger writes: At 21:43 10/14/2003 -0400, Paul Farber wrote: I tried the evilrules.cf on my dual AMD 1Gb 2 Ultra-SCSI qmail server and it died in minutes. I run 100K+ emails in a 24

RE: [SAtalk] Regex Detail (was RE: Popcorn, Backhair, and Weeds)

Thanks Kai! > -Original Message- > From: Kai MacTane [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 15, 2003 4:40 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Regex Detail (was RE: Popcorn, Backhair, and Weeds) > > > At 10/15/03 11:37 AM , Larry Gilson wrote: > >Keep adding cha

Re: [SAtalk] CPAN or RPM's?

--On Wednesday, October 15, 2003 10:37 AM -0400 Chris <[EMAIL PROTECTED]> wrote: > Now as I look more closely at CPAN I now see it's a perl replacement (or at > least I think it is) for the RPM method. Bearing in mind the comments on > whether or not RH will release another non-commerical version,

Re: [SAtalk] CPAN or RPM's?

Ok, cool. So now let's get back to the original question!! One thing to add is that there definitely needs to be more published notes on installing via RPM's if that's the preferred method for some people. I'm definitely more comfortable with RPM's and am new to CPAN which leaves me a little expo

Re: [SAtalk] Spamassassin updates

--On Wednesday, October 15, 2003 3:50 PM -0400 Charles Gregory <[EMAIL PROTECTED]> wrote: > The docs say that 'local.cf' will not be affected by updates - it's the > "safe" place to put your local rules. Those error messages would seem to > suggest that is not quite true. That depends on how your

Re: [SAtalk] [RD] Smaller and slightly better Evilrules!!!

At 13:18 10/15/2003 -0400, Chris Santerre wrote: Ok, I just did another update. I took the spamtrap for the last 15 days and got this down to 944 rules. This should be much better and fresher. I also edited the reg2rule.pl script to include the trailing 'i' so case doesn't matter anymore. I also sa

RE: [SAtalk] CPAN or RPM's?

This is a "Which tool is better?" question. You will get different answers from different people depending on perspective. For Red Hat systems, I would always choose RPM even if I had to make it. It is a very nice database that will tell you a lot of information. Any choice you make, you will h

Re: [SAtalk] Spamassassin updates

On Wed, 15 Oct 2003 16:25:10 -0400 in [EMAIL PROTECTED] Larry Gilson <[EMAIL PROTECTED]> wrote: > The sequence I use is : > 1) perl-Mail-SpamAssassin-vers# > 2) spamassassin-tools-vers# > 3) spamassassin-vers# Why not simply rpm -Uvh spamassassin.rpm spamassassin-tools.rpm perl-Mail-SpamAssassin.

RE: [SAtalk] Popcorn, Backhair, and Weeds

I just noticed something else Chris :) ...sorry! I believe you have the rules on your site as they stood before Keith took out the garbage. They still work as you have them... so don't panic! I used them that way for about a month. The Tidied up version are still on http://spamhammers.nxtek.n

[SAtalk] bless errors

this is kind of a repost. sorry, my last post of it wasnt very clear. perl 5.8, sa 2.6, redhat9 caling the following: my $spamtest = Mail::SpamAssassin->new(dont_copy_prefs => '1') gives the following error Can't bless non-reference value at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm

RE: [SAtalk] Popcorn, Backhair, and Weeds

LOL you are the one!! I get so many emails, and my fingers get overly happy I deleted it after I read it! Yes, I'm using Textpad, THANK YOU!!! It is a nice editor! I saved the files under ANSI and UNIX, that's why I got so frustrated when peolple said it didn't work. But it apears that it may not

RE: [SAtalk] Popcorn, Backhair, and Weeds

Did you try TextPad? I always have to force a UNIX format save. PC is the native save. I forgot to mention that it also searches with a POSIX regex. I never have a problem with TextPad and that is why I started using it. --Larry > -Original Message- > From: Chris Santerre [mailto:[EMA

[SAtalk] Swap Space

I have a FreeBSD box running sendmail/spamass-milter and spamassassin. This morning the box decided to run out of swap space and it kept killing the perl process. Anyone seen this before? How much swap space should I dedicate to the box? I process about 2000 to 3000 messages a day on a PII 400. I n

Re: [SAtalk] CPAN or RPM's?

I reached that conclusion based on a posting on this site yesterday. It's a surprise and frankly I find it hard to believe.. ANYWAY.. we are completely focused on the wrong part of my question which is CPAN verses RPMs. Let's not worry about RH EOL and look at the main question of my initial post

[SAtalk] SA doesn't learn?

SA doesn't appear to learn from my SPAM mailbox: sa-learn --mbox --spam /home//SPAM Learned from 0 message(s) (521 message(s) examined). Does anyone know why this is? --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.

Re: [SAtalk] evilrules.cf including in local.cf?

On Wed, Oct 15, 2003 at 04:55:49PM -0400, Matt Kettler wrote: > There's no need to do an include. SA will parse _every_ file in > /etc/mail/spamassassin, not just local.cf *.cf anyway, iirc. -- Randomly Generated Tagline: Lisa, if you don't like your job you don't strike. You just go in every

Re: [SAtalk] CPAN or RPM's?

On Wed, Oct 15, 2003 at 04:52:39PM -0400, Chris wrote: > ANYWAY.. we are completely focused on the wrong part of my question which is > CPAN verses RPMs. I like RPMs for everything. CPAN's nice, but 1) it's different from everything else on the system, 2) it's easier to know what modules are inst

Re: [SAtalk] evilrules.cf including in local.cf?

At 05:11 PM 10/15/2003, Theo Van Dinter wrote: *.cf anyway, iirc. Yes, you most definitely do recall correctly, thanks for pointing that out Theo. I meant all cf files, but said all files.. oops. --- This SF.net email is sponsored by: SF

Re: [SAtalk] Spamassassin updates

On Wed, Oct 15, 2003 at 04:25:10PM -0400, Larry Gilson wrote: > spamassassin-tools depends on perl-Mail-SpamAssassin. So I wind up having > to use the --nodeps option: > rpm -Uvh --nodeps something.rpm Ewww! > The sequence I use is : > 1) perl-Mail-SpamAssassin-vers# > 2) spamassassin-tools-ve

Re: [SAtalk] CPAN or RPM's?

No RedHat will still be called Redhat,they are still going to be in the software business but will not be giving out a product for free anymore. Fedora is a project, Redhat a product: http://fedora.redhat.com/ The point here is there will be no more updates to existing "RedHat Linux Distribut

Re: [SAtalk] Failed to parse line in SpamAssassin configuration

Arlo Gilbert wrote: Spamassassin 2.6, perl 5.8 on a redhat 9 machine called from perl i get the following debug messages even though it appears to read those two settings as sa does abide by them. debug: Failed to parse line in SpamAssassin configuration, skipping: report_header 1 debug: Faile

[SAtalk] Possible rule - excessive punctuation in subject

Hi all, I've just received a message containing this in the headers: Subject: _'P*R0"VE,N* ;T0. ;E;N:HA_N:C*E -P_E"Nl'S--,;fmgkkeb There were no rule hits on the Subject line (this is 2.60). It struck me that *any* subject line containing this much punctuation is suspicious, so I hacked tog

Re: [SAtalk] Spamassassin updates

On Wed, Oct 15, 2003 at 04:57:33PM -0400, Gilson, Larry wrote: > You have done this way more than I. I just feel cozy updating one RPM at a A little bit. ;) > time. I like increments. I almost feel like an old man writing like that! I can understand that. I figure you should never have to us

RE: [SAtalk] Obfuscate Invisible Font Color

Sorry Justin. I have not had the chance to test the upgrade on my test box yet so I am still running 2.55 on production and test. Tested it in 2.55 which does not catch it. I certainly will test when I can upgrade the test box. --Larry > -Original Message- > From: [EMAIL PROTECTED] >

Re: [SAtalk] evilrules.cf including in local.cf?

At 02:37 PM 10/15/2003, Mike Schrauder wrote: I have sa/spamd setup on postfix - debian using Duncan Findlay's deb to protect an exchange server. All is working well, but I am getting a LOT of false negatives now. I would like to include the evilrules.cf to see if that might help. What syntax wo

Re: [SAtalk] Failed to parse line in SpamAssassin configuration

On Wed, Oct 15, 2003 at 03:20:37PM -0500, Arlo Gilbert wrote: > called from perl i get the following debug messages even though it > appears to read those two settings as sa does abide by them. > > debug: Failed to parse line in SpamAssassin configuration, skipping: > report_header 1 > debug: Fa

[SAtalk] Regex Detail (was RE: Popcorn, Backhair, and Weeds)

At 10/15/03 11:37 AM , Larry Gilson wrote: Keep adding characters as needed. Additionally, since the script tags characters inside '< >' are optional, you could reduce the complexity of the rule to: # I don't think '!' needs escaping - true/false? /[>\s]\w{1}<[\w\s\$&!-]{0,150}>\w{1}\W/ Having

RE: [SAtalk] Spamassassin updates

The best thing to do before you actually pull the trigger is to: rpm -Uvh --test something.rpm Whenever I update perl-Mail-SpamAssassin, it complains that spamassassin-tools depends on perl-Mail-SpamAssassin. So I wind up having to use the --nodeps option: rpm -Uvh --nodeps something.rpm The

[SAtalk] Failed to parse line in SpamAssassin configuration

Spamassassin 2.6, perl 5.8 on a redhat 9 machine called from perl i get the following debug messages even though it appears to read those two settings as sa does abide by them. debug: Failed to parse line in SpamAssassin configuration, skipping: report_header 1 debug: Failed to parse line in Sp

[SAtalk] BAYES_* no longer appear in logs

I set up Spamassassin for the company I work for and we have been testing it out for almost a month. I noticed that BAYES_00-99 are no longer showing up in the x-spam headers (oct. 9 was the last appearance). Does the Bayesian filtering stop working if the database becomes too lopsided? I set up

[SAtalk] help - Spamassassin wont read DSN settings

Running it from perl with debug enabled...Settings all properly configured in the /etc/mail/spamassassin/local.cf and it wont read them. Attempting to pass the info into the new mail::spamassassin via ( user_scores_dsn => 'DBI:whatever:whatever:whatever' ) gives me a bunch of bless errors and b

RE: [SAtalk] Popcorn, Backhair, and Weeds

Oh then I do have it right. I saved them ANSI + UNIX and just dropped them into the ftp. However popcorn wasn't resaved until around 3 pm EST today. but wget and lynx -source seem to work best for others. Thanks for helping! > -Original Message- > From: Larry Rosenman [mailto:[EMAIL P

Re: [SAtalk] Obfuscate Invisible Font Color

Larry Gilson writes: >Nice way to try to obfuscate invisible font color: > > ho zok hkvwkvpntva >u c re >gudegkz pz color=ff>qduw x ks h scugcoszoprupkbz > >Does 2.60 catch this? Yeah, I think so -- but because you didn't bother trying it out to see, I won't either ;) Seriously, try it ou

RE: [SAtalk] evilrules.cf including in local.cf?

> -Original Message- > From: Mike Schrauder [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 15, 2003 2:38 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] evilrules.cf including in local.cf? *snip* > if that might help. What syntax would I use in my local.cf > to (include?) > the evilr

[SAtalk] SA 2.60 and amavisd-new - more bayes issues?

I finally got around to installing 2.60 today in my system, running it with amavisd-new (which I also bumped up to the latest, 20030616. I'm very happy that the bayes opportunistic expiration is now configurable with the bayes_auto_expire option. However, there seems to be some other contention

RE: [SAtalk] Popcorn, Backhair, and Weeds

the others were fine. should ascii, with unix line-ends. If you are doing FTP, type ASCII as the type if you are coming from a M$ environment. LER --On Wednesday, October 15, 2003 15:46:53 -0400 Chris Santerre <[EMAIL PROTECTED]> wrote: ARGH What should the encoding be: ANSI, DOS, or UTF-8

Re: [SAtalk] Spamassassin updates

On Wed, 15 Oct 2003, Theo Van Dinter wrote: > On Wed, Oct 15, 2003 at 02:59:58PM -0400, Charles Gregory wrote: > > And now that I look at it, that particular file is my local.cf that I > > didn't want over-written! So does this mean it aborts, is half way done, > > or WHAT? Have I just munched my S

RE: [SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

Well, it’s not just “spam,” It’s “Ham” as well. This happens anytime I try to feed it any chunk of stuff more than just a few messages.   I first noticed it when I was trying to feed it all the stuff that had been “trapped” by my “Sanitizer” procmail rules and put in quarantine (this is e

RE: [SAtalk] Popcorn, Backhair, and Weeds

ARGH What should the encoding be: ANSI, DOS, or UTF-8? IT could be the way I'm ftping it? WHy is something so simple so difficult. Oh wait, because I'm doing it! ;) Chris > -Original Message- > From: Larry Rosenman [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 15, 2003 3:22

Re: [SAtalk] Spamassassin updates

On Wed, Oct 15, 2003 at 02:59:58PM -0400, Charles Gregory wrote: > And now that I look at it, that particular file is my local.cf that I > didn't want over-written! So does this mean it aborts, is half way done, > or WHAT? Have I just munched my Spamassassin 2.44? Could someone please > post COMPLE

[SAtalk] Spamassassin updates

Excuse me, but WHY do people post 'easy' instructions like the following and leave out whatever steps are needed to make them work? I just tried these: wget http://spamassassin.org/released/RPMs/spamassassin-2.60-1.src.rpm rpmbuild --rebuild spamassassin-2.60-1.src.rpm rpm -Uvh spamassas

[SAtalk] error in the build DB_File::AUTOLOAD

When I do the build for spam-assassin with perl 5.6.1 I am getting errors. I can make it just find but when doing make test I get the following errors: t/db_based_whitelist.ok 1/8Use of uninitialized value in numeric gt (>) at /pkg/perl-5.6.1-elf/lib/perl-5.6.1/i386-netbsd/DB_File.pm line 255. Dee

[SAtalk] "Razor2 Check Skipped" - Anyone seen this?

Running SA 2.60, I am seeing the following in my procmail logs:   razor2 check skipped: No such file or directory Insecure dependency in open while running with -T switch at /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Razor2/Client/Config.pm line 414, line 1.     Can any

RE: [SAtalk] Popcorn, Backhair, and Weeds

Hi Jennifer, You are probably sick of seeing my posts by now. -- You raise some very good points. After testing for a while, I am drawing a similar conclusion as you. I really don't like the number of rules and I have been trying to avoid that. However, I really think you have some valid poin

Re: [SAtalk] "Razor2 Check Skipped" - Anyone seen this?

On Wed, Oct 15, 2003 at 01:46:12PM -0500, Bill Polhemus wrote: > Can anyone tell what might be the cause of this? http://spamassassin.taint.org/faq/index.cgi?req=show&file=faq02.006.htp -- Randomly Generated Tagline: Complex problems have easy to understand wrong answers. pgp0.pgp Descri

RE: [SAtalk] SA 2.60 occasionally does no markup on spam

If it times out, does spamd decline to markup the header? I would think that it would mark up with the score that it has, without the timed-out tests. -Original Message- From: Jack Gostl [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2003 2:17 PM To: Rich Puhek Cc: Martin, Jeffrey

[SAtalk] evilrules.cf including in local.cf?

I have sa/spamd setup on postfix - debian using Duncan Findlay's deb to protect an exchange server. All is working well, but I am getting a LOT of false negatives now. I would like to include the evilrules.cf to see if that might help. What syntax would I use in my local.cf to (include?) the ev

RE: [SAtalk] Popcorn, Backhair, and Weeds

> -Original Message- > From: Ray Dzek [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 15, 2003 1:58 PM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Popcorn, Backhair, and Weeds > > > Okay .. silly question then... > > Do you just copy the evilrules.cf to /etc/mail/spamassassin

Re: [SAtalk] Popcorn, Backhair, and Weeds

I always use wget or curl for grabbing web "stuff". - Original Message - From: "Chris Santerre" <[EMAIL PROTECTED]> To: "'Ray Dzek'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, October 15, 2003 11:43 AM Subject: RE: [SAtalk] Popcorn, Backhair, and Weeds > > > > -Origina

Re: [SAtalk] SA 2.60 occasionally does no markup on spam

> > I have been seeing this also, with 2.55 and 2.6. I had been working with > > the theory that it had to do with Postfix's content filter system. but > > since you are using procmail, perhaps that is not the case. My guess was > > that spamd was taking too long, and the message was getting forwa

Re: RE : [SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

On Wed, Oct 15, 2003 at 01:27:19PM -0400, Jean-S?bastien Guay-Leroux wrote: > Maybe you can make the spam corpus available on a web page so other people > can test if it segfaults on their machine too ? if you're getting a segfault, there's either a problem with perl, perl modules, or the librarie

Re: [SAtalk] Popcorn, Backhair, and Weeds

Okay .. silly question then... Do you just copy the evilrules.cf to /etc/mail/spamassassin and restart SA and then SA will just process whatever .cf files are in the folder? Or do I cat that to the local.cf file? --- This SF.net email is spon

Re: [SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 how many mails is full? i just fed sa-learn a Maildir with over a thosand messages and it was fine... On Wednesday 15 October 2003 18:16, Bill Polhemus wrote: > I noticed that if I try to feed SA-LEARN a mailbox full of SPAM, it now > "craps out" cla

RE: [SAtalk] Popcorn, Backhair, and Weeds

Hi Mike, You can get them here: http://spamhammers.nxtek.net --Larry --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better se

Re: [0.5] RE: [SAtalk] SA 2.60 occasionally does no markup on spam

Hiyo! Are we talking about messages that have been processed through spamd but not marked, or ones that somehow bypassed spamd altogether? I find an occasional message gets missed by spamd when I *restart* it to pick up on new rules :-) - Charles On Wed, 15 Oct 2003, Martin, Jeffrey wrote: >

RE: [SAtalk] Popcorn, Backhair, and Weeds

(oops. Sorry Mike, I replied off list) Chris S. now has them on his site in a nice little file. Midway down the page. http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm They are also still on http://spamhammers.nxtek.net with a little explanation, but you will need to copy paste

[Fwd: Re: [SAtalk] Spamassassin 2.60 with Linux and Ensim Pro]

Original Message Subject: Re: [SAtalk] Spamassassin 2.60 with Linux and Ensim Pro Date: Wed, 15 Oct 2003 12:21:09 -0200 From: Sergio Pires Albuquerque <[EMAIL PROTECTED]> To: Diye Wari

Re: [SAtalk] CPAN or RPM's?

I don't know how you arrive at that conclusion, versions prior to 7.1 have reached end of life. RH states that there will be no errata released for those versions. http://www.redhat.com/support/errata/archives/ They also state that versions up to 9 will reach end of life at the end of this ye

RE : [SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

Maybe you can make the spam corpus available on a web page so other people can test if it segfaults on their machine too ?   JS -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Bill Polhemus Envoyé : 15 octobre 2003 13:16 À : [EMAIL PROTECTED] Ob

[SAtalk] [RD] Smaller and slightly better Evilrules!!!

Ok, I just did another update. I took the spamtrap for the last 15 days and got this down to 944 rules. This should be much better and fresher. I also edited the reg2rule.pl script to include the trailing 'i' so case doesn't matter anymore. I also saved it in UNIX format! The only things that you

[SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

I noticed that if I try to feed SA-LEARN a mailbox full of SPAM, it now “craps out” claiming “segmentation fault.” Anyone have any ideas?   William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA     <>

Re: [SAtalk] SA 2.60 occasionally does no markup on spam

Martin, Jeffrey wrote: I have been seeing this also, with 2.55 and 2.6. I had been working with the theory that it had to do with Postfix's content filter system. but since you are using procmail, perhaps that is not the case. My guess was that spamd was taking too long, and the message was gett

Re: [SAtalk] Auto Whitelist assistance?

At 10:27 AM 10/15/03 -0400, James Herschel wrote: I've received a few spams where the AWL has assigned a large negative score. I've attached the headers from a spam I received today "Kobe's Court" (haha). The email address that this came from and went to are, to me, pretty obvious indications of

[SAtalk] Razor2 Scores

Is there any way to modify the Razor2 scores? My system currently only scores 51_100 and 0_50.. I'd like to put in a 0_50, 51_80, 81_90 and 91_100... Thanks! --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net host

RE: [SAtalk] Popcorn, Backhair, and Weeds

where do I get the most up-to-date copy of PB&W? Mike S > -Original Message- > From: Jennifer Wheeler [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 15, 2003 11:45 AM > To: 'Larry Gilson'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] Popcorn, Backhair, and Weeds > > > Ok, now I am i

Re: [SAtalk] spamassassin/cyrus IMAP/sendmail problems (data format error)

On 10/15/03 10:41 AM, Mike Bobbitt sat at the `puter and typed: > Hello all, > > I'm having trouble getting spamassassin to work properly, and I hope someone can > offer some advice. Here's my environment: > > spamassassin 2.60 > sendmail 8.12.10 > cyrus IMAP 2.2.1-BETA > > Because I’m using cy

RE: [SAtalk] A delay on MX DNS check in 2.60

Thanks, but it did not help. Those error messages are gone, but I still have the 15 second delay on the DNS check. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2003 10:24 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [SAtalk] A d

RE: [SAtalk] SA 2.60 occasionally does no markup on spam

I have something like this happen occasionally (once out of about 20k messages scanned). Started when I moved spamd to a different server (spamd was on the same server spamc was being called from). I see this in /var/log/maillog whenever I notice a message without any markup: Oct 12 05:45:04 gre

  1   2   >