I would like to know if there is a way with spamassassin to
disociate the analyze phase.
What's i want to ask here is if there exist a way to tell to spamassassin
1) analyse this mail . put rules match in the mail header.
2) later for the same mail tell to spamassassin compute only scorring based
On Wed, Oct 22, 2003 at 07:51:02PM -0500, Greg Thorne wrote:
> It seems that the old HTML::Parser is installed on the main site, but
> according to @INC, it should find the one in ~/perlmods first. Anyone
> have any ideas?
@INC gets modified by spamassassin when it runs. If you edit the script
--On Tuesday, October 21, 2003 3:00 PM -0200 Listas - OPEN Internet
<[EMAIL PROTECTED]> wrote:
Hi all,
I´m wondering here why SA-2.60, which I begin to use today, mark as spam
messages with score less than 10 (my default score).
Any idea how to avoid this?
Thank´s any help.
How about
Thanks Larry,
I do understand that 9 is what the documentation says, but thank
you for clearing up the headers vs config for me.
I am a bit concerned though, the docs make reference to setting the
number very high, but they give us no indication or real understanding
of the dcc tests.
I u
Tom Meunier wrote:
>
Even on good mail?
Duh! Sorry for that half-baed description. Spams are marked 99%. It is
not falsely classifying good messages. Actually, I saw two 90% scores today.
---
This SF.net email is sponsored by OSDN developer re
Chris Santerre <[EMAIL PROTECTED]> wrote:
> http://203.232.101.125:3344
>
> This smells of a trojaned box for spamming. I'm thinking of
> writing a rule that looks for http links with IP addresses and a
> port number. I'm thinking the FP rate would be low.
>
> It is tough to remember everything
I am trying to install SpamAssassin 2.6, and I keep getting the message:
$ ./spamassassin
HTML::Parser version 3.24 required--this is only version 3.05 at
/home/gthorne/perlmods/lib/site_perl/5.6.0/Mail/SpamAssassin/HTML.pm
line 8.
Even though I installed the newest HTML::Parser locally (under
Todd Joseph <[EMAIL PROTECTED]> wrote:
> He could be one of these folks:
>http://www.tbray.org/ongoing/When/200x/2003/10/12/SpamPlan27.
More likely one of these:
http://www.rhyolite.com/anti-spam/you-might-be.html
--
Keith C. Ivey <[EMAIL PROTECTED]>
Washington, DC
--
At 09:37 PM 10/22/03 +0200, Andreas Fuchs wrote:
I see allot of such errors in my syslog. I think they apear only if i enable
RAZOR, with Razor disabled i never saw such an error, any idea ? Can i
change the timeout somewhere ?
What kind of setup are you using? It's hard to give a whole lot of advi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stewart, John writes:
> I'm guessing the ->get_report function (object? Not sure the terminology
> with this OO stuff) is simply the text that normally appears at the bottom
> of an email when you do "spamassassin -t". Alas, this would not contain the
John Stewart (not the talk show host, nor the singer) wrote:
> > I'm sure SA must parse each of the Received headers to
> determine the SMTP
> > servers, so at some point this information is available. Would it be
> > possible to get this information logged somehow with the spam level?
[EMAIL PR
On Wed, Oct 22, 2003 at 03:23:28PM -0700, Ian Douglas is rumored to have said:
>
> Currently I have most of Asia Pacific blocked since I don't personally
> know anybody over there that would have any need to Email me or the few
> remaining web hosting clients I have on my server.
I use cn-kr.blac
> Altho not thru SA, I created a set of programs that scan my qmail queue for
> doublebounces & whatnot, scan the headers of normal messages and/or
> doublebounces & log the IP addresses into a postgresql database.
sendmail has an operative for double bounces to redirect those messages to
another
Rumor has it that Stewart, John may have mentioned these words:
[snippety]
One thing that might be very useful is for every email coming through that
is scanned, to log not only the spam level (which is already done with
amavisd-new, and I would assume for those using spamd) but the previous hop
of
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stewart, John writes:
> I'm not sure if this would be something that SpamAssassin could do, or if it
> would need to be integrated into amavisd-new, for those of us using that
> excellent tool.
>
> (BTW, I just wanted to say 2.60 is the bee's knees.
On Tue, 21 Oct 2003, Ian Douglas wrote:
> > > NOW I see auto-whitelist and 'bayes' files that are exceeding 1MB in size,
> > > each. Is this 'normal'?
>
> Any permission issues to take into account if you make the owner of the file
> something other than the user's login name?
Minor issues. I am
Hello
I see allot of such errors in my syslog. I think they apear only if i enable
RAZOR, with Razor disabled i never saw such an error, any idea ? Can i
change the timeout somewhere ?
Oct 22 19:54:11 tschuggen amavis[3870]: (03870-02) SA TIMED OUT, backtrace:
at /usr/lib/perl5/site_perl/5.8.0/
At 10:35 AM 10/22/2003, Anne Ramey wrote:
when I sa-learn on a folder of spam it takes almost no time and says
"learned 1" no matter how many where in the file but when I do an sa-learn
of ham, it works fine. Ideas?
What command line did you use? and what format is the mail in?
If you're giving
Fred I-IS COM <[EMAIL PROTECTED]> writes:
> Update of OBFU chr's rule.
> rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
> body __FVGT_b_OBFU_J /j(b|c|f|g|w)/i
You really really need to use character classes.
/j[bcfgw]/i
> Is this rule syntax legal? I didn't know I could c
At Wed Oct 22 16:21:27 2003, Bill Larson wrote:
> Most of the spam in question is originating in China. You may wish to send
> complaints to the following addresses
>
> role: APNIC Hostmaster
> e-mail: [EMAIL PROTECTED]
> notify: [EMAIL PROTECTED]
I don't think sending mail t
I'm not sure if this would be something that SpamAssassin could do, or if it
would need to be integrated into amavisd-new, for those of us using that
excellent tool.
(BTW, I just wanted to say 2.60 is the bee's knees. Bayes learning seems to
be even more improved than the already good 2.55 learni
On October 22, 2003 10:35 am, Anne Ramey wrote:
> when I sa-learn on a folder of spam it takes almost no time and says
> "learned 1" no matter how many where in the file but when I do an
> sa-learn of ham, it works fine. Ideas?
If the folder is of mbox format, you may want to specify the "--mbox"
> If you allow shell access, you therefore effectively allow any user to
> meddle with any other user's SA prefs, AWL, and Bayes files if you do
> per-user Bayes as well. :/
Not an issue with chroot'd shell access though ;o)
-id
---
This SF.
--On Wednesday, October 22, 2003 10:35:28 -0400 Anne Ramey
<[EMAIL PROTECTED]> wrote:
when I sa-learn on a folder of spam it takes almost no time and says
"learned 1" no matter how many where in the file but when I do an
sa-learn of ham, it works fine. Ideas?
what format(s) are the 2 mailboxes
Hi Michael,
There is definitely a dependency order. You need to upate installed RPM.
If you want to update each RPM, one at a time, you will need to use the
--nodeps option. Just understand that if you update each RPM one at a time,
you *have* to update them all. Otherwise you will have one con
Hello list's friends.
I have FreeBSD box with sendmail+spamassassin+procmail. As it comes more and
more spam messages I realize to prepare rules for spam deletion. I have done
3 months work on spam mesgs+senders+scores analysis. Now I'm ready to do it,
but I'm not very familiar with procmail. I pr
Anyone here running mailman lists via postfix and
uses spamassassin to score/filter messages sent to the lists? Preferably
everything tagged as spam should be trashed/rejected.
Off-list contacts are fine.
Thanks,
Christian
He could be one of these folks:
http://www.tbray.org/ongoing/When/200x/2003/10/12/SpamPlan27.
Or, he could actually have something that's won't inspire Spam Houses
to become "approved" Mail Relays. Or, maybe he's planning to boycott the
Hormel product?
In the same way that I'm drawn to readi
Update of OBFU chr's rule.
rawbody __FVGT_rb_ATTACHMENT /Content-Disposition: attachment/i
body __FVGT_b_OBFU_J /j(b|c|f|g|w)/i
body __FVGT_b_OBFU_OTHER /(vj|vk|xj|xk|yy|zf|zj)/i
body __FVGT_b_OBFU_Q0 /(j|k|p|q|t|v|w|z)q/i
body __FVGT_b_OBFU_Q1 /q(a|f|h|j|k|m|n|s|y)/i
body __FVGT_b_OBFU_V
Of course, I do not write to the list, if I did not look anywhere I had some
idea to look.
Procmailrc.example was the first one I found on my drive.
Anywhere, it is only very basic to procmail rules.
Please, any other idea to start with ?
Peter Rosa
- Original Message -
From: "Morris Jo
Hi everyone,
I have SA 2.60 running on a Redhat 8 system with CommuniGate Pro. The
setup works very well except that auto-learning doesn't work. When I
send myself a ham that is below the threshold, I see the Bayesian
attempting to learn, only to fail on creating a temporary lockfile:
Oct 22
Ian Douglas wrote:
> Any permission issues to take into account if you make the owner of
> the file something other than the user's login name? If you change
> the owner of the filename but maintain writable permission to the
> files otherwise, you effectively have no quota issue as someone else
>
Michael Emdy wrote:
> I've been trying to upgrade my Spam Assassin install on RedHat 9
> unsuccessfully so far.
> I get this when trying to use the RPM from the SA site.
>
> [EMAIL PROTECTED] src]# rpm -Uvh spamassassin*
> warning: spamassassin-2.60-1.i386.rpm: V3 DSA signature: NOKEY, key ID
> e5
At 10:18 AM 10/22/2003, Chris Santerre wrote:
It is tough to remember everything SA looks for. Does 2.60 have something
like this? Comments?
rawbody MY_TROJANED_HOST
/http:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{2,4}\//
describe MY_TROJANED_HOST Possible Trojaned box used for spam hosting
score
when I sa-learn on a folder of spam it takes almost no time and says
"learned 1" no matter how many where in the file but when I do an
sa-learn of ham, it works fine. Ideas?
Anne Ramey
---
This SF.net email is sponsored by OSDN developer re
Bill Larson wrote:
You clearly don't understand that most spam complaints do not go to the
spammers. It's called a joe job and it's something I am suffering under
right now. We have received well over 5,000 spam complaints from mostly
automated ignorant systems in the last 2 weeks.
I don't believe
I am getting this in my logs when I send a test message.
Oct 22 11:39:23 hades sendmail[2157]: h9MGZNQk002157: Milter (spamassassin):
timeout before data read
Oct 22 11:39:23 hades sendmail[2157]: h9MGZNQk002157: Milter (spamassassin):
to error state
Any ideas?
--Mike
Hi all,
Just did a clean install of 2.6 using Ports on freebsd 4.8p13. Using
spamd, and a config files from 2.42 with (i think!) deprecate options
removed.
[EMAIL PROTECTED] /usr/local/etc/mail/spamassassin 516$ sudo
spamassassin --lint
[EMAIL PROTECTED] /usr/local/etc/mail/spamassassin 517$
He
On Tue, Oct 21, 2003 at 05:11:13PM -0300, Guillermo Delmastro wrote:
> Hi list
> I have installed spamassassin-2.60, mimedefang-2.38 and sendmail-8.12.10 on
> a BSDi system (BSDOS4.3) with perl-5.6.1
> And I discovered that spamassassin makes the following error: Out of memory!
> And I don?t know w
On Tue, Oct 21, 2003 at 08:09:33PM -0400, Kris Deugau wrote:
> Patrick Morris wrote:
> > Unless I'm misunderstanding what your procmail recipes are doing,
> > it's *alread* been hacked into Sendmail.
>
> The whole point was to keep accepting *new* mail, while making sure that
> *concurrent* procma
> You should call me. I'm starting a company that will eliminate spam for
> good. Not just filter it. Filtration won't scale. We'll be eliminating
> spam for good.
>
> CP
> --
> Chris Paul
> Rex Consulting - Messaging and Security Solutions - www.rexconsulting.net
http://www.rexconsulting.net...
We're super lightweights, peak at 500 foreign inbounds/hour with overnight
lows at 15 per hour and we don't scan authenticated internal-to-internal
mailings. We stress tested our setup by suspending the processing queue,
loading 5000/50k (about 244mb) test messages (19.5 score each) sent to a
dumm
On Tue, 21 Oct 2003, Chris Paul wrote:
> You should call me. I'm starting a company that will eliminate spam
> for good. Not just filter it. Filtration won't scale. We'll be
> eliminating spam for good.
1) I hope you have a robust server. The latest spammer tactic is to DOSA
anyone with a good ant
Hi,
I've a newbie's request: after to have modified the local.cf, how could
I restart sa? There is a command, or have you got any script?
Normally the spam daemon starts with: /usr/bin/spamd -d -v -u vpopmail
-x
My system is: openbsd 3.3, sa 2.60
Thanks for all
Andrea
> -Original Message-
> From: Bill Larson [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 22, 2003 11:19 AM
> To: Chris Santerre
> Subject: Re: [SAtalk] [OT] What is next step?
>
>
> You clearly don't understand that most spam complaints do not
> go to the
> spammers. It's called a
> Going from 2.5x to 2.6x should be pretty painless and "just work".. the
> only problem cases I've seen are when people use spamd with "-u root"
> (2.60's spamd bails out if you try to force it to always run as root).
If we're not using spamd, can a CPAN shell 'install' for SA upgrade without a
Hello list's friends.
I have FreeBSD box with sendmail+spamassassin+procmail. As it comes more and
more spam messages I realize to prepare rules for spam deletion. I have done
3 months work on spam mesgs+senders+scores analysis. Now I'm ready to do it,
but I'm not very familiar with procmail. I pr
I've been trying to upgrade my Spam Assassin install on RedHat 9
unsuccessfully so far.
I get this when trying to use the RPM from the SA site.
[EMAIL PROTECTED] src]# rpm -Uvh spamassassin*
warning: spamassassin-2.60-1.i386.rpm: V3 DSA signature: NOKEY, key ID
e580b363
error: Failed dependencie
Oleg,
I know it's going to take a little effort to update Spamassassin. For me
it was fairly straightforward. I just unpacked it from the tarball and
did an install. Others had issues migrating existing databases, but most
of that is covered in the README and INSTALL files in the package.
Most
At 05:15 PM 10/21/2003, =?koi8-r?Q?=22?=Oleg=?koi8-r?Q?=22=20?= wrote:
Can somebody advise me, please, the way in which I can update it?
Can I just do new install from CPAN? Or it will not be enough?
The system is working now and I do not want to screw it,
therefore I need help.
Y
You clearly don't understand that most spam complaints do not go to the
spammers. It's called a joe job and it's something I am suffering under
right now. We have received well over 5,000 spam complaints from mostly
automated ignorant systems in the last 2 weeks. I respond to each and every
complai
I can't thank Bob enough for pointing me to the other spam list regarding
blocks and legal info. Info can be found here:
http://www.claws-and-paws.com/spam-l/
Read the FAQ before posting!
Anywho, I'm reading the archives so I don't look foolish asking questions,
and I see this latest post:
"
D
At 08:36 AM 10/22/2003, Scott Rothgaber wrote:
My Bayes database finally got its 200 spams and hams and kicked in. I've
noticed, however, that it *always* says that the probability is 99%. Is
this normal?
No.. It is however quite normal for nearly all spams to be at 99% and
nearly all nonspam to
I've recently found a great user interface, but don't know what it is using.
I needed to lower the spam rate for my grandfather. 110.net was purchased by
ici.net, who was then owned by conversant. *sigh*
Anywho mail.110.net has a login and then a VERY nice interface for not only
whitelisting, but
Hi Arlo,
> -Original Message-
> From: Arlo Gilbert [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 22, 2003 8:48 AM
> To: Larry Gilson
> Cc: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] dcc returns letters not numbers. docs
> say to limit # 's
>
>
> Thanks Larry,
>
> I do understand
Even on good mail? Or only on Spam? Because when I see spam, I'm 99%
sure it's spam, and a well-trained Bayes engine would be 99% sure also.
If it's on good mail that you're seeing 99%, every time, then your
database is screwed up and you should start over.
> -Original Message-
> From:
Nope these are bogus. I have seperate rules for them in the last Rule
Emporeum update. I used seperate, as they often are seen in pairs. Although
I didn't tag X-Email, because I'm not sure about that one.
--Chris Santerre
> -Original Message-
> From: Regis Wilson [mailto:[EMAIL PROTECTED
My Bayes database finally got its 200 spams and hams and kicked in. I've
noticed, however, that it *always* says that the probability is 99%. Is
this normal?
Thanks!
Scott
---
This SF.net email is sponsored by OSDN developer relations
Here's
On [10/21/03 17:56], Chris Paul wrote:
> You should call me. I'm starting a company that will eliminate spam for good.
> Not just filter it. Filtration won't scale. We'll be eliminating spam for good.
The company is just being started, but already has some marketing pitches :)
Good luck :)
>
>
> -Original Message-
> From: Dan Wilder [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, October 21, 2003 12:41 PM
> To: Spamassassin-Talk (E-mail)
> Subject: Re: [SAtalk] [OT] What is next step?
>
>
> On Tue, Oct 21, 2003 at 10:01:24AM -0400, Chris Santerre wrote:
>
> [ Describes plan for D
Let me guess: You're hiring hit men to track down and eliminate, not just
the Spam, but the Spammers themselves!
Then, you're going to invest in genetic research that will find the "Spammer
gene" and provide an inoculation for all the children in the world, to
eradicate any possibility that they w
Hi List,
It seems that I have the same problem that Marco Calistri described a
couple of days ago in his posting "[SAtalk] My first question here[SA &
DCC]" (message-id:[EMAIL PROTECTED]).
I installed DCC and enabled it in my conf, with a timeout of 15
seconds. I used my config for about a mon
Patrick Morris wrote:
> Unless I'm misunderstanding what your procmail recipes are doing,
> it's *alread* been hacked into Sendmail.
Not exactly, there are a few load-based controls on *some* aspects of
sendmail's processing...
> From a sendmail.cf file I've got lying around:
> # load average at
Recently had some false negatives come through. Most of them are one sentence
saying hello, and a URL. I noticed some strange headers, listed here:
X-E:
X-I:
X-ENVID
X-Email
So I wrote a quickie rule and it catches about 126 spam per week.
header BAD_HEADERS ALL =~ /X-(?:E|Email|E
You should call me. I'm starting a company that will eliminate spam for good. Not just
filter it. Filtration won't scale. We'll be eliminating spam for good.
CP
--
Chris Paul
Rex Consulting - Messaging and Security Solutions - www.rexconsulting.net
+1 831.338.7712
Key fingerprint = 588A 289C ADE
Hello all,
We are running SpamAssassin 2.5 (with amavisd, postfix and razor) on Linux machine. But I read that new version of SpamAssassin 2.60 is available now. It took long time to build this anti-spam box and I had a really hard time, but now I should update the SpamAssassin version.
Hi Arlo,
> -Original Message-
> From: Arlo Gilbert [mailto:[EMAIL PROTECTED]
> Sent: Monday, October 20, 2003 4:58 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] dcc returns letters not numbers. docs say
> to limit #'s
>
>
> I'm hopeful that somebody can explain the dcc results to me.
Hi list
I have installed spamassassin-2.60, mimedefang-2.38 and sendmail-8.12.10 on
a BSDi system (BSDOS4.3) with perl-5.6.1
And I discovered that spamassassin makes the following error: Out of memory!
And I don´t know what to do. It is not matter of hw resources, because it is
big enough.
I will a
The problem is allowing end users to manage their whitelists without intevention
and without using vi :) One solution was to export home directories via Samba,
this was shot down due to problems with cr/lf, typographical errors that casue
spamassassin to choke, etc.
Some steps in the right direct
Hello
Recently I had to upgrade perl to 5.8 to accommodate another
application. Before this spamassassin 2.43 was being used with spamd and
vpopmail and always functioned perfectly. After the perl upgrade,
spamassassin stopped writting spam headers for mail that had a 5.0 or over
rating. Ma
Hello all,
We are running SpamAssassin 2.5 (with amavisd, postfix and razor) on Linux machine.
But I read that new version of SpamAssassin 2.60 is available now. It took long time
to build this anti-spam box and I had a really hard time, but now I should update the
SpamAssassin version.
Alright, I am perfectly happy to be larted at this point as long
as I get an answer in the process. I have put an add_header in
my /etc/mail/spamassassin/local.cf just like this one:
add_header all Admin [EMAIL PROTECTED]
but no header is added to the processed mail. I know that my
/etc/mail/s
72 matches
Mail list logo
