-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matt Kettler writes:
> At 10:39 AM 10/21/2003, Cliff Browning wrote:
> >I went to the spamassassin.org site today and the list of tests is not
> >there. Could you please put it back.
> >
> >Thanks
>
> Seems to be there and just fine for me...
>
> I
> Charles Gregory wrote:
> > When we first started using SA, I kept a casual eye on the personal files
> > in .spamassassin, and did not see anything particularly problematic, but
> > NOW I see auto-whitelist and 'bayes' files that are exceeding 1MB in size,
> > each. Is this 'normal'?
Any permis
Hi there,
Wi some messages under score are marked as spam sometimes?
Thank´s any help.
Gustavo
---
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want
I'm hopeful that somebody can explain the dcc results to me.
i understand the concept of dcc, however spamassassin docs say that
you should set limits that are numeric. eg. so that dcc doesnt
give false positives.
upon looking at the headers however, i see the following:
X-Spam-DCC: SINE
About a year and a half ago I was on a quest to find a management panel for
an Email gateway. I never found one but what I did find was Webmin
(http://www.webmin.com/). Webmin is a web-based interface for system
administration for Unix. It is entirely written in Perl/CGI. The base uses
a perl-b
This is a common enough header from all the Exchange servers out there that it should
not be acting as a spam or ham indicator. So, I wouldn't worry about it.
From: [EMAIL PROTECTED] on behalf of Mike Schrauder
Sent: Tue 2003-10-21 5:13
To: [EMAIL PROTECTED]
Sub
Kris Deugau wrote:
I found that even this wasn't lightweight enough on the filter server
I'm adminning, so I wrote a microprogram to use the load average
instead. Ideally, this should be hacked into sendmail itself in some
way; I'm not going there myself. I *might* poke it into procmail if I
ge
On Tue, Oct 21, 2003 at 10:32:41AM -0500, Todd Schuldt wrote:
> SA is also file IO intensive. It depends on your hard drive system for the
> file IO as well - using IDE or SCSI or SAN? Hard or soft RAID? If hardware
> RAID what cache size and what mode 0, 1, 5, 10, 50? What drive speed? Also
>
On Mon, Oct 20, 2003 at 01:16:12PM -0400, newsletters wrote:
> summary as the main message. However, in the header it doesn't have the
> same score as the scoring summary.
This means the message is being scanned twice.
--
Randomly Generated Tagline:
"I didn't know Allman was a stand-up comedian
On 21-Oct-2003 Matt Kettler wrote:
> At 10:19 PM 10/20/03 +0200, Marco Calistri wrote:
>Hello, first of all I want to make my compliments to the developers that are
>spending their time to fight the SPAM and of course, among these thanks to SA
>Team.
>My first question (the first of a long series
At 10:39 AM 10/21/2003, Cliff Browning wrote:
I went to the spamassassin.org site today and the list of tests is not
there. Could you please put it back.
Thanks
Seems to be there and just fine for me...
It's possible you caught the site in the middle of an update.. the "tests"
list is built dai
At 07:50 AM 10/21/2003, Thomas Kinghorn wrote:
Do all custom rules have to be added to the /etc/mail/spamassassin/local.cf
file OR
can a seperate .cf file be placed in the spamassassin directory?
SA will by default parse *.cf in /etc/mail/spamassassin. Thus, you can put
them in a separate CF file
Hello List,
I habe installed spamassassin 2.6, Perl 5.8 on a Debian Machine from the
debian packages. Everything seems to work fine, but there are always
the following messages in my logs:
Oct 21 14:30:23 localhost spamd[26484]: Use of uninitialized value in
string ne at /usr/sbin/spamd line 11
Just to echo Todd's suggestions. Disk I/O is your primary issue. I
recommend using RAID mirroring instead of RAID 5 since RAID5 has such
crappy write performance. Physical memory is important if your box is
slow enough to queue up multiple spamd processes, but any modern machine
will clear t
I have SA running as
a Filter/Relay on a RH 7.3 box. It is a Celeron 1.4Ghz. It
processes mail for about 250 users. It has a single 7200RPM IDE
drive and 768MB of PC100 RAM. I process around 4000 messages a day (Most
of it spam)
- Original Message -
From:
Wiebren
Br
Simon Byrnand wrote:
> I imagine it would, however single threaded delivery mode just isn't
> an option for any kind of real world use. Until such time as sendmail
> implements a *proper* local delivery concurency setting, my method
> works very well...
IIRC, you posted this method seom time ago-
On Tue, Oct 21, 2003 at 10:01:24AM -0400, Chris Santerre wrote:
[ Describes plan for DDOS attack on spam-friendly ISPs, comprising
synchronized complaints about as many copies as possible of each
spam originating from said ISP ]
> We could clean them up one by one.
>
> What do you guys think?
H
Charles Gregory wrote:
> When we first started using SA, I kept a casual eye on the personal files
> in .spamassassin, and did not see anything particularly problematic, but
> NOW I see auto-whitelist and 'bayes' files that are exceeding 1MB in size,
> each. Is this 'normal'?
For users with lots o
> On Mon, 20 Oct 2003 11:50:49 -0400,
> Chris Santerre <[EMAIL PROTECTED]> (cs) writes:
cs> This is an annoying little spammer trick. You simply need to create 2 meta
cs> rule. If it is from your whitelisted email but doesn't contain your server
cs> IP address in the header, then add +103
Vittorio Muth <[EMAIL PROTECTED]> wrote:
I've read in the FAQ, that spamassassin does not drop mails. OK.
Is there anyone who got it, to configure spamassassin like that:?
As it says in the FAQ, SpamAssassin does not do that.
HOWEVER, you can have another program - generally the program calling S
I do it using a procmail recipe, such as:
=BEGIN PROCMAIL RECIPE==
:0
* ^X-Spam-Status: Yes
{
# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's delete them
# completely.
:0:
* ^X-Spam-Level
Cliff Browning wrote, Tuesday, October 21, 2003 3:39 PM
> I went to the spamassassin.org site today and the list of tests is not
> there. Could you please put it back.
It's still at http://www.spamassassin.org/tests.html - easily reachable via
the `Tests' link about half-way through the set of li
Mike Schrauder wrote:
I get:
debug: tokenize: header tokens for X-MimeOLE = "Produced By Microsoft Exchange
V6.0.5762.3"
Can anyone tell me if this is screwing up the reclassification
of these msgs as spam? Do I have to strip out all headers that were
added after the spam got past the postfix bo
Thomas Kinghorn Sent: Tuesday, October 21, 2003 7:50 AM
> Do all custom rules have to be added to the
/etc/mail/spamassassin/local.cf
> file OR can a seperate .cf file be placed in the spamassassin directory?
They can be in any .cf file within the /etc/mail/spamassassin folder.
cheers,
Colin
Co
At 11:29 AM 10/21/2003, Philippe Van Hecke wrote:
#header RECEIVED_FROM_OTHER_THAN_MY_DOMAIN Received
!~/(server1||server2|server3|server4|server5)(\.fw)?\.foo\.bar/i
the commented header RECEIVED_FROM_OTHER_THAN_MY_DOMAIN never match
and so the FORGED_MY_DOMAIN is never trigered but the firs
Sorry, I should've left a note. I had brought it to the printers to get
a banner made, and thought I'd take it out for a nice ice cream sundae
too. It's back now, though.
I put it at http://www.spamassassin.org/tests.html
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL
> -Original Message-
> From: Thomas Kinghorn [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, October 21, 2003 6:50 AM
> To: Spamassassin-Talk (E-mail)
> Subject: [SAtalk] custom rules >> local.cf
>
>
> Hi List.
>
> Just a quick question.
>
> Do all custom rules have to be added to the
> /e
Hello!
We've only just started using SA. For a while we were running 2.4, and
just last week we upgraded to 2.6.
When we first started using SA, I kept a casual eye on the personal files
in .spamassassin, and did not see anything particularly problematic, but
NOW I see auto-whitelist and 'bayes'
Thomas Kinghorn wrote:
Hi List.
Just a quick question.
Do all custom rules have to be added to the /etc/mail/spamassassin/local.cf
file OR
can a seperate .cf file be placed in the spamassassin directory?
Either will probably work, but it depends a bit on how you call
SpamAssassin. Generally
Yes.
William L. Polhemus, Jr. P.E.
Polhemus Engineering Company
Katy, Texas USA
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thomas
Kinghorn
Sent: Tuesday, October 21, 2003 6:50 AM
To: Spamassassin-Talk (E-mail)
Subject: [SAtalk] custom rules >> local.
Hi all,
I´m wondering here why SA-2.60, which I begin to use today, mark as spam
messages with score less than 10 (my default score).
Any idea how to avoid this?
Thank´s any help.
Gustavo
---
This SF.net email is sponsored by OSDN
Any of this possible .. you just have to post process the headers of
the email
You would just look at the X-Spam-Status
eg.
X-Spam-Status: No, hits=0.0 required=0.6 tests=none autolearn=no
version=2.60
How you determine the score will depend on you are invoking SA.
On Tuesday, October 21, 20
Yes, any *.cf file in that directory will be parsed for rules / config
options.
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/
Thomas Kinghorn wrote:
> Hi List.
>
> Just a quick question.
>
> Do all custom rules have to be added to the
> /etc/mail/spamassassin/lo
Hello,
Sorry if this is a bad question for the list. I'm writing a freelance
magazine article (for Processor magazine, processor.com) on anti-spam
software, and looking to interview some folks. I could use help both from
the maintainers/developers of anti-spam software as well as IT managers
tha
SA is also file IO intensive. It
depends on your hard drive system for the file IO as well – using IDE or
SCSI or SAN? Hard or soft RAID? If hardware RAID what cache size
and what mode 0, 1, 5, 10, 50? What drive speed? Also depends on OS
choice and MTA.
I use RH 7.3 with CommuniGa
Good points. Trust me, I know how to follow the spam :) Most that come from
Korea are actually sent from the U.S. (creating twice the traffic.)
I completely agree with you on law enforcement! I've called them all! FBI,
CIA, Local PD, ect... and the only thing they will ever attempt to go after
is
Hi i have installed these custome header check into my config.
header FROM_MY_OWN_DOMAIN From =~/foo\.bar/i
score FROM_MY_OWN_DOMAIN 0.01
header TO_MY_OWN_DOMAIN TO =~/foo\.bar/i
score TO_MY_OWN_DOMAIN 0.01
header RECEIVED_FROM_OTHER_THAN_MY_DOMAIN Received !~/
\.foo\.bar|\.fw\.foo\.bar/i
#hea
> >
> >i disabled both and now dont have any problems. spamd badly needs a
> >child timeout setting. and awl and bayes need RDMBS support so each
> >request doesnt have to lock the db's... except on inserts of which
> >row-level locking might be an option.
>
> When you say you "disabled" baye
I went to the spamassassin.org site today and the list of tests is not
there. Could you please put it back.
Thanks
Cliff
---
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product kno
Hi List.
Just a quick question.
Do all custom rules have to be added to the /etc/mail/spamassassin/local.cf
file OR
can a seperate .cf file be placed in the spamassassin directory?
This is for a system wide installation.
Thanks in advance.
Regards,
Tom Kinghorn
---
Hi,
Im working on a book on computer security and would like to get a firsthand
account of someone who is completely infested by spam and how theyre trying to
fight it. Please reply to this address if you have a moment to talk about your
spam woes.
Best,
John Biggs
--- --- ---
BigWide
[EMAIL PROTECTED] wrote:
Is it possible to send the mail elaborated from spamd to another
external server.
I use smtproutes in order to select the relay with
AntiVirus and/or AntiSpamming.
domain1.com:localhost:2525#antivirus
domain2.com:localhost:783 #antispamming
===
Vittorio Muth wrote:
I've read in the FAQ, that spamassassin does not drop mails. OK.
Is there anyone who got it, to configure spamassassin like that:?
As you read in the FAQ, SpamAssassin doesn't drop e-mails. Warnings
that deleting mail SpamAssassin marks as spam aside, it's impossible to
sa
* Vittorio Muth <[EMAIL PROTECTED]> [2003-10-21 15:07]:
> I've read in the FAQ, that spamassassin does not drop mails. OK.
>
> Is there anyone who got it, to configure spamassassin like that:?
>
> Score 5.0 = mark as spam and forward
> Score 15 = move mail to /dev/null or send it to [EMAIL PROTEC
I use spam assassin milter for Sendmail.
It has a "-r" option to reject emails with a score higher than a certain
threshold. I set mine to 25.
I believe the high scoring spam gets rejected with a 550 error or
similar.
-Original Message-
From: Vittorio Muth [mailto:[EMAIL PROTECTED]
Sent
I use postfix-SA2.6 in front of an exchange box. When someone
gets a false negative, they place a copy of the spam in a public
folder on exchange. I then use mutt - imap to get to my spam
public folder on Exchange and then do
>sa-learn -D --mbox --spam spam10-17-03.mbox
I get:
debug: tokenize:
hmm ... well, i can't reproduce. those results came right after i upgraded
from 2.6 to 2.53, before i killed the database and redid it.
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0
debug: bayes corpus size: nspam = 2611, nham =
Hey SA Gang,
I've only been using SA for about 3-4 weeks and I keep turning additional
spam checks to see see how things go.
What i've got going on is messages that get marked in the subject as
SPAM, the real email gets put into an attachment and the scoring
summary as the main message.
I wonder most of emails I receive include both in header and body
my own email username.
Does sa-learn add that as token in the spam and ham training phase?
Does that fact influences my ham being considered as spam by SA?
Is there a way to remove *just* a token form the db? (or to avoid be
Chris Santerre Sent: Monday, October 20, 2003 3:38 PM
> Lets say I can track the spammer to the source. What avenue do we have to
> stop them? Should I work with local legislation next? Don't flame me on
this
> question, but should ISPs be held more accountable? Like Comcast? (Should
be
> called s
Have any of you tried the following?
Basically I am looking for a script that will run from micro_httpd (or
another tiny httpd) that will ask for an email address, add it to the
whitelist file (no SQL) sort that file in alphabetical order and
stop/start amavisd.
I am sure that this is almost t
I am buying a new server to
scan e-mails with spamassassin. What is the optimal ratio
of processor capacity, memory and cache. it will probably become a Intel xenon 3.05 GHz processor so
what matters is how much cache and memory optimal is to go with this processor.
How much e-mails per
Hi,
[not subscribed to list, please cc: me on replies]
I've been trying for a while now on and off to get SA correctly working with
exim, using spamc as an exim filter and running the mail through exim a
second time for delivery (so that I can still use my exim filtering .forward
file).
For the
well, i get false positives with an empty body ...
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 38912 invoked by uid 19047); 17 Oct 2003 07:23:43 -
Received: from unknown (HELO mpls-qmqp-02.inet.qwest.net) ([63.231.195.113])
(envelope-sender <[EMAIL PROTECT
Hello,
I've read in the FAQ, that spamassassin does not drop mails. OK.
Is there anyone who got it, to configure spamassassin like that:?
Score 5.0 = mark as spam and forward
Score 15 = move mail to /dev/null or send it to [EMAIL PROTECTED]
thanks in advance,
Vittorio
--
Is it
possible to send the mail elaborated from spamd to another external
server.
I use smtproutes in order to select
the relay with AntiVirus and/or AntiSpamming.
domain1.com:localhost:2525 #antivirus
domain2.com:localhost:783
#antispamming
=
I am buying a new server to
scan e-mails with spamassassin. What is the optimal
ratio of processor capacity, memory and cache. it will probably become a Intel xenon 3.05 GHz processor so
what matters is how much cache and memory optimal is to go with this processor.
How much e-mails per
--On Monday, October 20, 2003 5:19 PM -0400 Roger Merchberger
<[EMAIL PROTECTED]> wrote:
Get rid of SMTP. Create an entirely new protocol on an entirely new port,
and have it *trusted* every step of the way. Even if we had to licence
its use [gawd, I'd hate that!] with abuse of this new protocol
58 matches
Mail list logo
