Re: [SAtalk] yahoo redirect

2003-10-23 Thread Keith Ivey
There's nothing secure about it. You can use those redirection URLs for anything, just like the old ones. Try it: http://srd.yahoo.com/drst/akkfasgkfj/*http://www.kjagkjkajskjfs.com The rule should be modified. -- Keith C. Ivey <[EMAIL PROTECTED]> Washingotn, DC --

[SAtalk] spamd -m stable?

2003-10-23 Thread Cheryl L. Southard
Hi All, When we were running spamd V2.43 on our Solaris 8 computer, we found that the '-m' flag made spamd very unstable. The program would crash frequently so that no spamd would be running and no filtering was done. Does anyone know if the "-m" flag is now more stable? We've since upgraded t

RE: [SAtalk] IP Blocks to kill at the firewall?

2003-10-23 Thread Ian Douglas
> http://www.stearns.org/sa-blacklist/sa-blacklist.current What's the best way to implement this? Add it on to the end of my MailScanner's pref's file for SA? -id --- This SF.net email is sponsored by: The SF.net Donation Program. Do you like

RE: [SAtalk] [RD] yahoo redirect

2003-10-23 Thread Colin A. Bartlett
Chris Santerre Sent: Thursday, October 23, 2003 1:36 PM > No. It looks to me the http(s) is optional. the '?' tells me so. Except the current regex says "rd.yahoo.com" and the bugger that emailed me used "srd.yahoo.com" This is what it is now: /^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|

Re: [SAtalk] Cannot open bayes databases...: tie failed:

2003-10-23 Thread Theo Van Dinter
On Thu, Oct 23, 2003 at 11:45:00PM +0300, Juha Nieminen wrote: > But as I said, now it's different. Now there are no external signs > of something being broken. Spamassassin works even though the bayesian > classifier doesn't (earlier neither would work) and it has been several > days this way.

[SAtalk] RE: Amavisd-new and logging untrusted relays... was: RE: [SAtalk] [OT ] What is next step?

2003-10-23 Thread Stewart, John
> > Unfortunately, the $untrusted variable always seems to be > blank. This is > > what I see in the logs: > > my bad. try > > my $untrusted = $per_msg_status->_get_tag > ("RELAYSUNTRUSTED"); > > no _'s. Awesome! That did it! I'm now getting logging of untrusted relays from ama

Re: [SAtalk] spamass-milter

2003-10-23 Thread Hannu Liljemark
On Thu, Oct 23, 2003 at 04:21:10PM -0400, Mark Merchant wrote: > now, the spamass-milter daemon seems to stop running every few > minutes. > > is spamassassin 2.60 not comapatible with milter anymore? > did the install whack something unobvious? Have you tried running the milter with increased l

RE: [SAtalk] help with sa-learn

2003-10-23 Thread Gator
I've just been struggling with the same thing. When I ran sa-learn in debug mode with the -D it complained that I hadn't loaded DB_File which is required for the Bayesian filter. I just loaded that Perl module and now it works fine - or at least it is working. -- Jack -Original Message-

Re: [SAtalk] Re: [OT] What is next step?

2003-10-23 Thread Scott Blomquist
VonEssen, John wrote: If you go this route then, maybe it might be easier to just aggressively post invalid email addresses all over the internet. By invalid, I mean a mx record exists, but the address will result in a 550. As a result the harvesting of addresses will become a dirtier process, yie

Re: [SAtalk] Cannot open bayes databases...: tie failed:

2003-10-23 Thread Juha Nieminen
On Thu, 23 Oct 2003, Theo Van Dinter wrote: > > Until now I have been able to fix this problem by waiting for a day > > and then running "sa-learn --rebuild" which fixes the bayes database files. > > I don't know why I have to wait a day, but sa-learn won't work earlier > > (but will print messa

Re: [SAtalk] [RD] Domain has digits - test rules

2003-10-23 Thread Jacob S.
On Thu, 23 Oct 2003 16:47:26 -0400 Chris Santerre <[EMAIL PROTECTED]> wrote: > > WOW! Nice set and beautifully written CF file!! I like these rules for > "flavoring" . Meaning I would personally use these as low. I like the > rules that hit domaine123domain a LOT! I would score them slightly > h

RE: [SAtalk] [RD] yahoo redirect

2003-10-23 Thread Larry Gilson
> -Original Message- > From: Chris Santerre [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 23, 2003 3:08 PM > To: 'Colin A. Bartlett'; Patrick Morris > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] [RD] yahoo redirect > > > > > > > This is what it is now: > > /^https?\:\/\/rd\.y

Re: [SAtalk] help with sa-learn

2003-10-23 Thread Matt Kettler
At 08:55 AM 10/23/2003, Joseph P. Wetstein wrote: When I do a: "sa-learn --mbox --spam kill" I get: Learned from 0 message(s) (127 message(s) examined). First, I'd check for file permission issues.. make sure you've got the ability to create files in ~/.spamassassin. It's really easy to do somet

RE: [SAtalk] [RD] Trojaned machines

2003-10-23 Thread Gilson, Larry
Hi Chris, I have been using the following uri test for about 3 weeks without issue: describe MY_URI_TCP_PORTMY: Non-standard TCP port in URL uri MY_URI_TCP_PORT/:\d{2,4}\D/ scoreMY_URI_TCP_PORT2.0 It will boost the score on top of what SA already chatches but will also catch

[SAtalk] Sa-learn vpopmail support

2003-10-23 Thread Michel Gallant
There`s support in spamd and spamc for vpopmail installations, is there such a thing for sa-learn?

[SAtalk] spamass-milter

2003-10-23 Thread Mark Merchant
not sure if this is a spamassassin or milter issue, but here goes. i've been running spammassassin 2.54 & spamass-milter for 6 months or so. yesterday i decided to upgrade to 2.6 ( via cpan ). now, the spamass-milter daemon seems to stop running every few minutes. is spamassassin 2.60 not comapati

Re: [SAtalk] Re: [OT] What is next step?

2003-10-23 Thread Steve Prior
It doesn't seem like spammers clean their lists at all. I've got some virtual userids in my domain which reject incoming mail at the time of connection to sendmail (not by a return error email) and have been invalid userids for several years at this point. They are still getting hammered on a da

RE: [SAtalk] obfuscating comments

2003-10-23 Thread Larry Gilson
Search the archives a custom rule discussion with the subject "Popcorn, Backhair, and Weeds". Links: http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm http://spamhammers.nxtek.net/ --Larry > -Original Message- > From: jenni baier [mailto:[EMAIL PROTECTED] > Sent: Thursda

[SAtalk] RE: Amavisd-new and logging untrusted relays... was: RE: [SAtalk] [OT ] What is next step?

2003-10-23 Thread Stewart, John
Okay, I whacked together a perl script to do some very rudimentary parsing of the SMTP relays logging I hacked into amavisd-new. I filtered out any host that delivered less than 2 emails, or had an average spam level of less than 5. This is what I ended up with for this afternoon's mail (since I

[SAtalk] DCC question

2003-10-23 Thread Jim Knuth
Hallo und guten Tag SA-List, I never seem to get DCC hits, even though I should. Why? I have read the faq and make the test: spamassassin -tD < spam.txt This test give an output with dcc-header. But in the "normal" use is nothing to seen. --snip X-Spam-DCC: : --snap How must I use the dcc? --

Re: [SAtalk] Problems upgrading to 2.60

2003-10-23 Thread Theo Van Dinter
On Thu, Oct 23, 2003 at 05:59:57PM +0300, Stuart Gall wrote: > I am not realy sure what else I can do to diagnose the problem. run with -D and see what it says. -- Randomly Generated Tagline: If it's *that* good, why *are* you selling it? pgp0.pgp Description: PGP signature

Re: [SAtalk] Re: [OT] What is next step?

2003-10-23 Thread E R
if I may point out an anecdote, I left a dialup isp 7 years ago, when I worked for them as a consultant 2 years ago, they recreated my account. The first 100 or so emails to that address were spam...  Apparently that address was still selling well after 4-5 years of deletion... Alan Hodgson w

[SAtalk] Problems upgrading to 2.60

2003-10-23 Thread Stuart Gall
Hello , I have a system running Exim, SA 2.55 with Razor 2.34 I tried to upgrade to 2.6 as foillows I still have the Razor source tree, so I cd to the razor directory applied the patch to the source tree, seemed to go ok I then did make make install in the razor 2.34 directory Next I did mak

RE: [SAtalk] [RD] Domain has digits - test rules

2003-10-23 Thread Chris Santerre
> I created a > set of rules to > look for domains that include numbers. > > IE: www.domain3.com > IE: www.domain3domain.com > Etc.. > > Take a look at the attachment, I'm looking for criticism both > good and bad. > > Frederic Tarasevicius > Internet Information Services, Inc. > http://www.i

Re: [SAtalk] help with sa-learn

2003-10-23 Thread Chris
I had trouble with sa-learn too and it was permission problems in the end. Make sure you are running the command as the person you want to check rather than root. Also, use the debug flag (-D) and then you'll get a lot more info. - Original Message - From: "Joseph P. Wetstein" <[EMAIL P

Re: [0.1] RE: [SAtalk] How to update old version of SpamAssassin

2003-10-23 Thread Charles Gregory
On Wed, 22 Oct 2003, Michael Emdy wrote: > spamassassin-2.44-11.8.x > Anybody update SA on RedHat 9 with any success? Yup. The secret is to UNinstall the spamassassin 2.44 rpm before you install the 2.6 modules. rpm -e --repackage spamassassin The 'repackage' option will place a copy of the old

Re: [SAtalk] [RD]Consonant and Vowel Pairs or Sequences

2003-10-23 Thread Fred I-IS.COM
Taking advice from the group, I've switched these rules to using chr set's [] body __FVGT_b_OBFU_J /j[bcfgw]/i body __FVGT_b_OBFU_OTHER /(vj|vk|xj|xk|yy|zf|zj)/i body __FVGT_b_OBFU_Q0 /[jkpqtvwz]q/i body __FVGT_b_OBFU_Q1 /q[afhjkmnsy]/i body __FVGT_b_OBFU_V /[fgqw]v/i body __FVGT_b_OBFU_X

Re: [SAtalk] IP Blocks to kill at the firewall?

2003-10-23 Thread Chris Trudeau
Found this linked from the Emporium :) http://www.stearns.org/sa-blacklist/sa-blacklist.current You can probably use this... CT - Original Message - From: "John L" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 23, 2003 4:10 PM Subject: [SAtalk] IP Blocks to kill

Re: [SAtalk] remove

2003-10-23 Thread Evan Platt
Follow the headers listed in every message: List-Unsubscribe: , Oh, and turn off HTML - you scored a 3.3. X-Spam-Report: 3.3/5.0 EXTRA_MPART_TYPE (0.0 points) Message with extraneous Content-t

[SAtalk] obfuscating comments

2003-10-23 Thread jenni baier
Hello... I've done a search of the archives and, I saw a post back in May that is similar to what I'm dealing with. Here's a snippet from the archives: > Subject: Re: Obfuscating HTML Comment Rule Not Working > From: Matthew Cline nightrealms.com> > Date: Sat, 3 May 2003 16:26:30 -0700 > Newsg

[SAtalk] IP Blocks to kill at the firewall?

2003-10-23 Thread John L
Does anybody have a good list of SPAMMER IP's they'd like to share for blocking at the firewall? We have one mail server we're hosting that is just getting crushed running SA. We'd have a pretty good list in the sendmail access list, but we're looking for a good one to block at the firewall too.

Re: [SAtalk] Cannot open bayes databases...: tie failed:

2003-10-23 Thread Theo Van Dinter
On Thu, Oct 23, 2003 at 06:52:47PM +0300, Juha Nieminen wrote: > Cannot open bayes databases /home/warp/.spamassassin/bayes_* R/O: tie failed: > Cannot open bayes databases /home/warp/.spamassassin/bayes_* R/W: tie failed: > Cannot open bayes databases /home/warp/.spamassassin/bayes_* R/W: tie fail

[SAtalk] remove

2003-10-23 Thread Darrellm (mis)
      Pure WorldWide Internet 510 W. RiverSide Ave Suite 208 Spokane, Wa. 99201   IncrediMail - Email has finally evolved - Click Here

Re: [SAtalk] Re: [OT] What is next step?

2003-10-23 Thread AltGrendel
On Thu, 2003-10-23 at 12:11, Alan Hodgson wrote: > On Thu, Oct 23, 2003 at 11:13:52AM -0400, VonEssen, John wrote: > > We also assume that they clean their list when address appears to be bad. > > I've seen no evidence of this. The only thing I've seen for certain is > that the older an E-mail ad

Re: [SAtalk] Extending the AWL concepts to URIs found in Spam Body

2003-10-23 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Pleiner writes: > Fellow Spamfighter, > > while preparing some slides for an anti-spam workshop I reread Paul > Graham's "Will Filters Kill Spam" at > . > > Wouldn't the URIs mentioned in Spam be good keys f

RE: [SAtalk] [RD] Domain has digits - test rules

2003-10-23 Thread Ian Douglas
My primary domain is w98.us, my other domain is wild98.com ... so effectively you'd cancel out my Email, correct? -id > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Fred > I-IS.COM > Sent: Thursday, October 23, 2003 12:24 PM > To: Spamassassin-Talk

[SAtalk] [RD] Domain has digits - test rules

2003-10-23 Thread Fred I-IS.COM
I'll have to admin, I was bored this morning. I created a set of rules to look for domains that include numbers. IE: www.domain3.com IE: www.domain3domain.com Etc.. Take a look at the attachment, I'm looking for criticism both good and bad. The rules look for 0-9, 01-09, and 11-99 to appear in

[SAtalk] Cannot open bayes databases...: tie failed:

2003-10-23 Thread Juha Nieminen
I am using a Sparc/Solaris system with perl 5.8.0 and SpamAssassin 2.60 installed (SpamAssassin as a local installation). I am having occasional problems with the bayes databases. From time to time the bayesian classifier will fail with messages like: Cannot open bayes databases /home/warp/.

Re: [SAtalk] Problems installing SpamAssassin 2.6

2003-10-23 Thread gthorne
It is set, look at my first email. This works: perl -e 'use HTML::Parser 3.24;' This doesn't: perl -T -e 'use HTML::Parser 3.24;' Quoting Theo Van Dinter <[EMAIL PROTECTED]>: > On Thu, Oct 23, 2003 at 09:37:28AM -0500, [EMAIL PROTECTED] wrote: > > So, where do I go from here? Do I have to edit

Re: [SAtalk] yahoo redirect

2003-10-23 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Colin A. Bartlett writes: >Can anyone hazard a guess as to why a message with an image and several >links in this fashion did not match the test YAHOO_REDIR... > >src="http://srd.yahoo.com/drst/accomplished/*http://www.grestccd.com/k.jpg";> That's a

RE: [SAtalk] [RD]Spammer uses address in hosted domain

2003-10-23 Thread Chris Santerre
> -Original Message- > From: Marc Steuer [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 23, 2003 10:35 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] [RD]Spammer uses address in hosted domain > > > Hi list-members, > > How should SA be configured to handle the following situation?

RE: [SAtalk] [RD] yahoo redirect

2003-10-23 Thread Chris Santerre
> > This is what it is now: > /^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir\b)/i > > This is the URL the email I got used: > http://srd.yahoo.com/drst/accomplished/*http://www.grestccd.com/k.jpg > > What if we change it to: > /^https?\:\/\/s?rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir

Re: [SAtalk] [RD]Spammer uses address in hosted domain

2003-10-23 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 "Marc Steuer" writes: >Hi list-members, > >How should SA be configured to handle the following situation? > >An account in one of my hosted domains received a spam message with his own >e-mail address as the counterfeit "from" and "reply-to" address

[SAtalk] help with sa-learn

2003-10-23 Thread Joseph P. Wetstein
When I do a: "sa-learn --mbox --spam kill" I get: Learned from 0 message(s) (127 message(s) examined). When I do sa-learn --dump all I get: 0.000 0 0 0 non-token data: bayes db version 0.000 0 0 0 non-token data: nspam 0.000 0

RE: [SAtalk] Looking for some interview subjects

2003-10-23 Thread Covington, Chris
It's probably a TMDA or pay-for-email service. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nigel Metheringham Sent: Wednesday, October 22, 2003 4:45 AM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Looking for some interview subjects On Wed, 200

[SAtalk] RE: Amavisd-new and logging untrusted relays... was: RE: [SAtalk] [OT ] What is next step?

2003-10-23 Thread Stewart, John
Clueless hacker wrote: > > Is there any way to get this _RELAYSUNTRUSTED_ data into the > > Mail::SpamAssassin object somehow? Then I think I could > hack amavisd-new to > > log this relay information. jm wrote: > Hmm -- I suppose you could do > > my $untrusted = $per_msg_status->_get_tag

Re: [SAtalk] Problems installing SpamAssassin 2.6

2003-10-23 Thread gthorne
AHA! $ perl -e 'use HTML::Parser 3.24;' $ perl -T -e 'use HTML::Parser 3.24;' HTML::Parser version 3.24 required--this is only version 3.05 at -e line 1. BEGIN failed--compilation aborted at -e line 1. So, where do I go from here? Do I have to edit @INC inside SpamAssassin? Or, should I just r

Re: [SAtalk] Problems installing SpamAssassin 2.6

2003-10-23 Thread Matt Kettler
At 07:51 PM 10/22/03 -0500, Greg Thorne wrote: I am trying to install SpamAssassin 2.6, and I keep getting the message: $ ./spamassassin HTML::Parser version 3.24 required--this is only version 3.05 at /home/gthorne/perlmods/lib/site_perl/5.6.0/Mail/SpamAssassin/HTML.pm line 8. $ perl -e 'use HT

[SAtalk] [RD]Spammer uses address in hosted domain

2003-10-23 Thread Marc Steuer
Hi list-members, How should SA be configured to handle the following situation? An account in one of my hosted domains received a spam message with his own e-mail address as the counterfeit "from" and "reply-to" addresses. The hosted domain is included SA's "whitelist_from", to avoid the possi

Re: [SAtalk] Message being marked as spam with less score

2003-10-23 Thread Patrick Morris
Guessing from the incomplete stuff you posted, it appears you're running SA through another package -- amavisd, maybe. Check there -- whatever package you're using probably has a lower spam threshold set than the one you've set in SpamAssassin. ---

Re: [SAtalk] Message being marked as spam with less score

2003-10-23 Thread Matt Kettler
At 10:30 AM 10/23/2003, Listas - OPEN Internet wrote: Hei Evan, Here goes the example. Content analysis details: (7.3 points, 10.0 required) You aren't by any chance running all your mail through spamassassin with the -t parameter are you? If you use the -t parameter, you're forcing SA

RE: [SAtalk] [RD] yahoo redirect

2003-10-23 Thread Colin A. Bartlett
Patrick Morris Sent: Thursday, October 23, 2003 10:15 AM > Unless I'm reading this regex incorrectly: > /^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir\b)/i > it's pretty specific about looking for "http[s]://rd.yahoo.com". Thanks. I wasn't sure of where to look for the regex for the rul

Re: [SAtalk] Re: [OT] What is next step?

2003-10-23 Thread Alan Hodgson
On Thu, Oct 23, 2003 at 11:13:52AM -0400, VonEssen, John wrote: > We also assume that they clean their list when address appears to be bad. I've seen no evidence of this. The only thing I've seen for certain is that the older an E-mail address is (once it has gotten on at least one spammer's list

RE: [SAtalk] Re: [OT] What is next step?

2003-10-23 Thread VonEssen, John
I am not sure if tar-pitting at a slow kbps rate will work. "If" I were a professional spammer, I would have a cluster of mail servers with aggressive timeouts. The timeouts would only allow mail to go to reasonably fast hosts. I would then use a fallback mx host to deal with all the slow mail. F

RE: [SAtalk] [RD] simple rule for consumption

2003-10-23 Thread Yackley, Matt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Santerre Sent: Wednesday, October 22, 2003 8:21 AM To: 'Regis Wilson'; [EMAIL PROTECTED] Subject: RE: [SAtalk] [RD] simple rule for consumption Nope these are bogus. I have seperate rules for them in

Re: [SAtalk] Re: SA Scalability Was: Swap Space

2003-10-23 Thread Kris Deugau
Dan Wilder wrote: > In our case I took an old workstation, beefed up RAM and swapspace > and dedicated it to running spamd. Servers having swapspace maxed out > solved, and there's no possibility the demands of other processes > will suddenly push a well-tuned spamd off the slippery slope into > t

Re: [SAtalk] Message being marked as spam with less score

2003-10-23 Thread Listas - OPEN Internet
livered to: <[EMAIL PROTECTED]> The message has been quarantined as: /var/virusmails/spam-3dd15ba315919c0fa8ab86ad2f9caa85-20031023-120629-16675- 05.gz SpamAssassin report: Spam detection software, running on the system "zeus.opengate.com.br", has identified this incoming email as po

[SAtalk] yahoo redirect

2003-10-23 Thread Colin A. Bartlett
Can anyone hazard a guess as to why a message with an image and several links in this fashion did not match the test YAHOO_REDIR... http://srd.yahoo.com/drst/accomplished/*http://www.grestccd.com/k.jpg";> An image-only spam like this slipped through my SA with only these tests matched: BAYES_44

[SAtalk] 5.0 spampoints

2003-10-23 Thread Jeffrey Schilperoord
What is the easyest way to change the 5.0 spampoints to a higher level ?   greetings Jeffrey Schilperoord

Re: [SAtalk] A way to disociate analyze and scoring phase.

2003-10-23 Thread Matt Kettler
At 08:30 AM 10/23/03 +0200, Philippe Van Hecke wrote: I would like to know if there is a way with spamassassin to disociate the analyze phase. What's i want to ask here is if there exist a way to tell to spamassassin 1) analyse this mail . put rules match in the mail header. 2) later for the same m

RE: [AMaViS-user] RE: [SAtalk] [OT] What is next step?

2003-10-23 Thread Edward Wildgoose
> With this information logged, another tool could be written (and which I'd > like to play with doing, if no one has as yet) which would track the number > of spams delivered from each specific IP. > > Then you could proavtively turn off this IP at your gateway. Sure, X number > of spams (5? 10?

[SAtalk] help with baysian

2003-10-23 Thread Joseph P. Wetstein
I cannot seem to get sa-learn to work. sa-learn --mbox etc just reports "messages scanned but nothing learned" What am I doing wrong? Note: was installed by SysAdmin, and I am not he. -- Joseph P. Wetstein, P.E. [EMAIL PROTECTED] (707) 202-0600 fax PP/ASEL & KA3VJY

[SAtalk] Mail-SpamAssassin-2.55, spamd question.

2003-10-23 Thread Igor Kashevarov
Good morning, my name is Igor. I try made correct working spamd in my mail server. Installation process was strait, no Errors or Warnings. If I start spamd in my Unix box, I have message: " UNIX passed to setlogsock, but path not available at ./spamd line 204. No configuration text or file found!

Re: [SAtalk] Looking for some interview subjects

2003-10-23 Thread Chris Paul
Oh no. I didn't mean to mail the entire list. Got to remember to change that To: line. Huge mistake. (I acutally went queue fishing after sending and thought I stopped it it.) OH well! By switching our customers who want ham only to X.400, we will eliminate spam. (OK... Just joking.) Actuall

Re: [SAtalk] Looking for some interview subjects

2003-10-23 Thread Nigel Metheringham
On Wed, 2003-10-22 at 01:56, Chris Paul wrote: > You should call me. I'm starting a company that will eliminate spam > for good. Not just filter it. Filtration won't scale. We'll be > eliminating spam for good. I guess you have a decent source of ICBMs then - and probably a bulk deal on hitmen. >

[SAtalk] Use of unitialized value in Bayes.pm

2003-10-23 Thread Brian Kraemer
(I am not subscribed to sa-talk, so please include me on any replies, thanks.) Ever since I switched from Spamassassin 2.55 to 2.60, I get the following messages in my logs several times a day. I never got these messages with 2.55. Oct 22 07:18:44 kosh spamd[5753]: Use of uninitialized value at

RE: [SAtalk] Looking for some interview subjects

2003-10-23 Thread Tony Hoyle
> -Original Message- > From: Chris Paul [mailto:[EMAIL PROTECTED] > Sent: 22 October 2003 01:56 > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Looking for some interview subjects > > > You should call me. I'm starting a company that will > eliminate spam for good. Not just filter it. F

[SAtalk] About Spamassassin process flow

2003-10-23 Thread Yuan-Chung Hsiao\(蕭淵鐘\)
Dear all: Now I research Spamassassin's Genetic Algorithms, but I don't understand Spamassassin work with GA and bayes classfilter. Does anybody know? Best Regards, -- Yuan-Chung Hsiao(ychsiao), B.S. Student Dept. of Information Managerment & Computer Center SHU-TE University

Re: [SAtalk] spamassassin integrated into postfix & mailman mailing lists

2003-10-23 Thread Lars Andersson
I'm running a mailman listserver with amavisd-new and spamassassin. The setup dosent differ from any other spamassassin setup. Works like a charm. -- Lars At 20:20 2003-10-22, Christian Kuhtz wrote: Anyone here running mailman lists via postfix and uses spamassassin to score/filter messages sen

RE: [SAtalk] [RD] simple rule for consumption

2003-10-23 Thread Regis Wilson
>Nope these are bogus. I have seperate rules for them in the last Rule >Emporeum update. I used seperate, as they often are seen in pairs. Although >I didn't tag X-Email, because I'm not sure about that one. > X-Email: is pretty spammy for me, so it is in there. I grepped my corpus for X-headers

RE: [SAtalk] Looking for some interview subjects

2003-10-23 Thread Darren Coleman
Realistically I think it is impossible to stop spam for good. The only actual practical way of achieving this would be to somehow inhibit (either technologically - removing Internet access, or via the old-fashioned method - execution) spammers ability to .. well, spam. SA, although brilliant, fac

[SAtalk] Extending the AWL concepts to URIs found in Spam Body

2003-10-23 Thread Alex Pleiner
Fellow Spamfighter, while preparing some slides for an anti-spam workshop I reread Paul Graham's "Will Filters Kill Spam" at . Wouldn't the URIs mentioned in Spam be good keys for some kind of auto-whitelisting with a similar mechanism as for AWL? While the f

[SAtalk] Extract domain names from Mail Body (MIME)

2003-10-23 Thread Alex Pleiner
Fellow Spamfighters, while Chris Santerre's Script [1] to extract domain names from a spam corpus is a bit Q&D, I wrote a perl script to extract URIs or domain names from the mail body using MIME::Parser. This will extract domain names from text/* MIME parts and encoded body/parts. The script curr

[SAtalk] MailScanner and SpamAssassin

2003-10-23 Thread Rezk Mekhael
Hi Managers, I have a DS20 Machine with 5.1 unix tru64 operating system, I am running MailScanner, Sopho and SpamAssassin. /opt/MailScanner/etc/MailScanner.conf. MailScanner running perfict without SpamAssassin, one's I turn on the spamAssassin, MailScanner getting this problem in the mail.log

RE: [SAtalk] How to update old version of SpamAssassin

2003-10-23 Thread Michael Emdy
This worked, or at least it installed without complaining. I'll be watching it over the next several hours to see how it performs and start digging through my configs to see if they have been altered. For the lists sake here's how I upgraded my 2.44 version of Spam Assassin on RedHat 9. Downloade