> DBF> On Fri, 7 Nov 2003, Robert Menschel wrote:
>
> >> Or better: what if we specified in the rule a maximum score to accumulate
> >> to? Maybe something like:
> >>
> >> accumbody T_SAMPLE /(?:word1|word2|word3|word4|word5)/i,max=2.5
> >> describe T_SAMPLE Message has medical words frequentl
On Friday 07 November 2003 06:24 pm, Robert Menschel wrote:
> Or better: what if we specified in the rule a maximum score to accumulate
> to? Maybe something like:
>
> accumbody T_SAMPLE /(?:word1|word2|word3|word4|word5)/i,max=2.5
> describe T_SAMPLE Message has medical words frequently used
On Fri, 7 Nov 2003, Robert Menschel wrote:
> So you'd be suggesting something like:
>
> body T_SAMPLE /(?:word1|word2|word3|word4|word5)/i
> describe T_SAMPLE Message has medical words frequently used in spam
> score T_SAMPLE 0.5
> accum T_SAMPLEA ( T_SAMPLE > 5 )
> score T_S
It seems to me that many accumulator rules (including many that
have been proposed on the list) would require a way of
specifying a minimum number of occurrences below which there
would be no score at all. I don't think a single long string
of consonants, for example, is worth any points, but
I have a question.
Maybe I have something configured incorrectly.
Is it standard procedure for spamassassin to skip
checks if they are coming from localhost, or sent from the local
machine?
SA works great with mail coming in from the outside
world, but skips checks if sent by a loca
> -Original Message-
> From: Keith C. Ivey
>
> Larry Gilson <[EMAIL PROTECTED]> wrote:
>
> > Or, you could just say any redirection is not a good thing.
> >
> > describe MY_URI_REDIRECTMY: Trying to hide real URL by redirect
> > uri MY_URI_REDIRECT/https?:\/\/.*\/\*http:\/\/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello David,
I like your idea -- improves efficiency by providing a "stop" point,
while maintaining the ability to reasonably accumulate hits. Thanks.
Bob Menschel
-BEGIN PGP SIGNATURE-
Version: PGP 8.0
iQA/AwUBP6xw6JebK8E4qh1HEQLrwQCgrDC8
Hello all,
I'm running debian woody 3.0r1 with all security patches, and
postfix/spamassassin that comes with debian. After an article in the dutch
linux magazine from oktober, I tried to install spamassassin (postfix was/is
already running) with the step by step guide enclosed with it. I've done
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello maarten,
Friday, November 7, 2003, 3:09:20 PM, you wrote:
mvdB> Following up to myself, since I want to clarify something here...
mvdB> Another aspect that is relevant to me (but arguably not to most
mvdB> users of SA and I'm aware of that...)
On Fri, 7 Nov 2003, Robert Menschel wrote:
> Or better: what if we specified in the rule a maximum score to accumulate
> to? Maybe something like:
>
> accumbody T_SAMPLE /(?:word1|word2|word3|word4|word5)/i,max=2.5
> describe T_SAMPLE Message has medical words frequently used in spam
> score
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello maarten,
Friday, November 7, 2003, 1:25:05 PM, you wrote:
mvdB> ... Upon looking at those rules I see al LOT of inconsistencies.
mvdB> For instance, I found these rules that have score of zero(!) (and
mvdB> these are merely the top of a large i
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Bart,
Friday, November 7, 2003, 10:42:32 AM, you responded to Justin Mason:
BS> Rather than give a rule a score and accumulate the score each time it
BS> hits, have a META rule that accumulates the number of matches on the
BS> regex, and then s
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Justin,
Friday, November 7, 2003, 10:19:15 AM, you wrote:
>>Many of us are finding we hit limits with simple regex rules. To me, an
>>accumulator eval for rules is the next logical step.
>>
>>Make sense?
JM> BTW, SpamAssassin originally start
Justin Mason <[EMAIL PROTECTED]> wrote:
> BTW, SpamAssassin originally started with accumulating rules. But I took
> it out, as it meant a long hammy mail had a much higher chance of FP'ing,
> due to containing more text.
The problem exists anyway, since long nonspam messages are more
likely to
Maarten J H van den Berg <[EMAIL PROTECTED]> wrote:
> List 1:
> score ALL_CAP_PORN 0.650 0.669 0 0
> score PENIS_ENLARGE2 0.500 0.590 0 0.501
> score UPPERCASE_50_75 0.794 1.137 0 0
> score V+AG+A_ONLINE 1.100 1.101 3.151 4.056
>
> If it were up to me, I'd say that giving only half a point to a m
> Yeah I can confirm a spamd startup script works
>
> Send yours, also send what you use from the command line, what OS you
> use. etc. etc.
>
> tm.
I did send that stuff before - trying to save some list bandwidth. Ce'st la
vie. Here goes:
RedHat 6.2, Perl 5.6.1, SpamAssassin 2.55
Hello,
maarten van den Berg <[EMAIL PROTECTED]> wrote:
> There is not a single rule that scores
> higher than 4.999. That is plain wrong in my book; let's say we encounter the
> word "vicodin" (which is totally absent in the current rules by the way!).
> I would then say "let's score that 5.50 immedia
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Carl R. Friend writes:
>Greetings Assassins!
>
>I've got a silly question that can be answered with a simple "Yes"
> or "No" (or a "go sod off you stupid git", although I hope it won't
> come to _that_).
>
>Is it possible for an eval() t
At 04:25 PM 11/7/2003, maarten van den Berg wrote:
Upon looking at those rules I see al LOT of
inconsistencies. For instance, I found these rules that have score of zero(!)
(and these are merely the top of a large iceberg)
score CASHCASHCASH 0
score ADDRESSES_ON_CD 0
score BLANK_LINES_90_100 0
scor
maarten van den Berg <[EMAIL PROTECTED]> wrote:
> I know you can teach SA to recognize spam in ones' own
> language, but what is missing right now is a simple way to make
> SA much more immune to the abundant english spam, which arguably
> is by FAR the bulk of all spam...
There is a way: the Ba
Greetings Assassins!
I've got a silly question that can be answered with a simple "Yes"
or "No" (or a "go sod off you stupid git", although I hope it won't
come to _that_).
Is it possible for an eval() test to return a value to be used as
the ultimate score for a given test? To wit, I w
Larry Gilson <[EMAIL PROTECTED]> wrote:
> Or, you could just say any redirection is not a good thing.
>
> describe MY_URI_REDIRECTMY: Trying to hide real URL by redirect
> uri MY_URI_REDIRECT/https?:\/\/.*\/\*http:\/\//i
> scoreMY_URI_REDIRECT4.0
Have you seen any site other
maarten van den Berg said:
>
> Following up to myself, since I want to clarify something here...
>
> Another aspect that is relevant to me (but arguably not to most users of
> SA
> and I'm aware of that...) is that for me, english is not my native
> language,
> neither am I a resident of an english
Following up to myself, since I want to clarify something here...
Another aspect that is relevant to me (but arguably not to most users of SA
and I'm aware of that...) is that for me, english is not my native language,
neither am I a resident of an english-speaking country. And because of this,
The CASHCASHCASH rule tests for the string '$$$' not for the phrase
CASH! CASH! CASH!
The ADDRESSES_ON_CD rule caught almost as much ham when tested against a
half-million message corpus as it did spam.
The BLANK_LINES_90_100 caught MORE ham than it did spam.
http://search.cpan.org/src/JMASON/Mail
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chris Thielen writes:
>I'm not criticizing your viewpoint, but with a little tweaking, SA really
>"works for me"!
Yeah -- and that's the important thing. It's really very easy to train
the Bayes stuff, in particular.
The aim is to:
- work well f
P.S. I did a manual entry of a spam message to razor and it works fine.
razor-check -d < test.email Connects returns valid results.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Paul
Hirschorn
Sent: 07 November 2003 16:47
To: [EMAIL PROTECTED]
Subject: [
Hi,
On Fri, 7 Nov 2003, maarten van den Berg wrote:
> On Friday 07 November 2003 22:34, David B Funk wrote:
> > IIRC, this was due to a bug in one of the versions of CPAN.
> > Try updating your CPAN
>
> I already doubted this, so thanks a lot for that info. However, I'm kinda
> stuck since insta
> my @otherstuff = sort {
> (my $numa) = ($a =~ m/\.(\d+)\./);
> (my $numb) = ($b =~ m/\.(\d+)\./);
> $numa <=> $numb || $a cmp $b
> } @stuff;
you rock, i owe ya a beer ;o)
-id
---
This SF.Net email sponsored by: Apac
> SpamAssassin drinking game:
>
> sips for "How can I get SpamAssassin to delete spams?
> sips for "Unsubscribe me please"
> sips for "Subscribe me please"
> sips for "Quit reading my e-mail!"
For every good, tested rule you create that works, everyone else takes
sips
---
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Philip Tucker writes:
> What's the best way to add a MIME header for the connecting IP address
> such that SpamAssassin can access it (we have a system where the
> received header is not added until after SpamAssassin sees the message)?
> It looks lik
SA labels other spam just not my internal RBL. I removed the -t option
and the header does pass.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, November 07, 2003 4:52 PM
To: Jennifer Fountain
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] SpamAssassin
Hi,
On Fri, 7 Nov 2003, Evan Platt wrote:
> --On Friday, November 07, 2003 12:06 PM -0800 Jeff Lasman
> <[EMAIL PROTECTED]> wrote:
>
> > What's likely to happen if I run these 563 spams without running any
> > hams?
>
> I thought I recall the help file stating that running HAMS without SPAM (or
>
Hiya Maarten!
This is going a bit off topic, but the spam I receive is 90% porn. I
haven't had one slip through in months. The secret? Adding bayesian and
network checks into the mix. Given, I'm the only user on my system as
well as the admin, but I've seen 100% accuracy for quite some time no
Sorry, I rushed through your post...I thought you were referring to the
problem with the subject not being re-writtenwell, if anyone running
spamd and spamc from qmail-scanner is wondering why it doesn't work, here
it is :)
On Fri, 7 Nov 2003, Jennifer Fountain wrote:
> SA labels other spam
I am trying to get a fresh install of SpamAssassin + Razor working and i
seem to be having some problem with razor.
At first i had some issues with Digest::SHA1 which i remedied by deleting
all so the .pm and.so files related to Digest::SHA1 then reinstalling the
agents sdk and the razor client.
Title: connecting IP address header
What's the best way to add a MIME header for the connecting IP address such that SpamAssassin can access it (we have a system where the received header is not added until after SpamAssassin sees the message)? It looks like X-Originating-IP or X-Apparently-
i didn't get any responses to this message, so i though i'd give it
another shot.
i looked in the archives for an answer, but may have missed it. please
excuse me if i'm brining up an already answered question.
i have recently ditched the perl api in favor of the spamd/spamc
combination for our m
I just figured this out the other day. This is not an SA issue, but a
qmail-scanner.pl issue. To address it directly, edit this line in
qmail-scanner.pl:
my $spamc_subject='***SPAM***';
The one downside is that having (_HITS_/_REQD_) doesn't work. I suspect
that if you rebuild qmail-scanner.p
On Friday 07 November 2003 22:34, David B Funk wrote:
> On Fri, 7 Nov 2003, Maarten J H van den Berg wrote:
> > I eventually found the reason for this behaviour after I noticed that
> > root could start it okay, but the unpriv user spamd couldn't...:
> >
> > machine:~ # ls -la /usr/lib/perl5/site_p
On Friday 07 November 2003 18:43, Matt Kettler wrote:
> At 10:29 AM 11/7/2003, Maarten J H van den Berg wrote:
> >Sorry if this has been discussed in the past...
>
> It's been discussed many times.. It's very common for people to have a very
> deep misunderstanding of how SA scoring works. Most peo
On Fri, 7 Nov 2003, Maarten J H van den Berg wrote:
>
> I eventually found the reason for this behaviour after I noticed that root
> could start it okay, but the unpriv user spamd couldn't...:
>
> machine:~ # ls -la /usr/lib/perl5/site_perl/5.6.0/Mail/SpamAssassin
> drwx--2 root root
On Fri, 7 Nov 2003, Justin Mason wrote:
> BTW, SpamAssassin originally started with accumulating rules. But I took
> it out, as it meant a long hammy mail had a much higher chance of FP'ing,
> due to containing more text.
>
> I'd be worried that accumulating hits would reintroduce the same
> prob
--On Friday, November 07, 2003 12:06 PM -0800 Jeff Lasman
<[EMAIL PROTECTED]> wrote:
> Since my original training a few weeks ago I've gotten 563 spams in my
> "spamuncaught" folder for further bayes training.
>
> What I don't have, is 500 or so ham emails that haven't been run through
> befo
#!/usr/bin/perl
my @stuff = (
'maillog.11.gz',
'maillog.2.gz',
'maillog.10.gz',
'maillog',
'maillog.1.gz',
'maillog.3.gz',
);
my @otherstuff = sort {
(my $numa) = ($a =~ m/\.(\d+)\./);
(my $numb) = ($b =~ m/\.(\d+)\./);
$numa
SpamAssassin drinking game:
sips for "How can I get SpamAssassin to delete spams?
sips for "Unsubscribe me please"
sips for "Subscribe me please"
sips for "Quit reading my e-mail!"
I'll work on a guestbook application to allow people to add their
suggestions. :)
Evan
--
Hello,
I thought that spamd would suid to the user that called spamc and use
that users config if the -H option was selected. Anyway, when I run the
spamassassin --lint -D it shows that razor is working and is available.
When I start spamd with the username=spamfilter, then log in as
spamfilt
At 02:16 PM 11/7/2003, Jennifer Fountain wrote:
am using an internal RBL list. When I test a header that is in the
list using the following command: /usr/bin/spamassassin -t
--prefs-file=/var/qmail/.spamassassin/user_prefs -D <
/home/tmp/spam_test.txt,
it labels it as spam. However, when an ema
My new mailstats.pl script (matt's script with a few tweaks) is giving me
some grief.
My maillog files are named:
maillog (for today)
maillog.1.gz
maillog.2.gz
etc
maillog.10.gz
etc
When Matt's script does the 'sort', it sorts it as:
maillog
maillog.1.gz
maillog.10.gz
maillog.11.gz
maillog.2.gz
On Thu, 6 Nov 2003, Peter Buonora wrote:
> Ok, I am running on Solaris 8, latest version of Spamassassin, perl 5.8.
>
> For some reason when using the 'spamassassin' executable, razor works.
> When I try to switch over to spamc/spamd everything works except razor.
> There isnt even anything in the
Since my original training a few weeks ago I've gotten 563 spams in my
"spamuncaught" folder for further bayes training.
What I don't have, is 500 or so ham emails that haven't been run through
before.
What's likely to happen if I run these 563 spams without running any
hams?
I do have lots o
On Fri, 7 Nov 2003, Chr. von Stuckrad wrote:
>
> Hi
[snip..]
> The mail also contained a broken variant of the wrong/forgotten
> Parameter of their Spam-Mailer: ' $RANDOM IZE '
>
> So:
>
> body RANDOM_IZE / \$RANDOM IZE /
> score RANDOM_IZE2
> describe RANDOM_IZE contains brok
Chip Paswater wrote:
Hey Guys,
I apologize if these questions are asked somewhere, but I did browse the
FAQ and documentation and didn't see an answer.
I have a good understanding of Razor v2, but I just started using SA.
1. When reporting spam via spamassassin -r, can I supply an mbox instead
In looking at the rewritten messages that SA produces, it looks like a
"=\r" is getting inserted at various points in the message and seems to
break the displaying of various characters in an HTML mail destined for
my Exchange Server and Outlook XP. Namely, an "=" seems to get inserted
in the plac
I am using an internal RBL list. When I test a header that is in the
list using the following command: /usr/bin/spamassassin -t
--prefs-file=/var/qmail/.spamassassin/user_prefs -D <
/home/tmp/spam_test.txt,
it labels it as spam. However, when an email from the same server
arrives, it is not lab
Greetings All!
I just put a PostFix+SpamAssassin system into production for my
network. The setup is three front-end PostFix which relay all SMTP main
entering our network along with four back-end SpamAssassin (spamd) servers
which process all of the SMTP mail that the PostFix servers rece
At 01:13 PM 11/7/2003, Chip Paswater wrote:
Hey Guys,
I apologize if these questions are asked somewhere, but I did browse the
FAQ and documentation and didn't see an answer.
I have a good understanding of Razor v2, but I just started using SA.
1. When reporting spam via spamassassin -r, can I s
Or, you could just say any redirection is not a good thing.
describe MY_URI_REDIRECTMY: Trying to hide real URL by redirect
uri MY_URI_REDIRECT/https?:\/\/.*\/\*http:\/\//i
scoreMY_URI_REDIRECT4.0
--Larry
> -Original Message-
> From: Mike Kuentz (2) [mailto:[EMAIL PR
Wow! Matt this is an incredibly informative post. Thank you!
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Friday, November 07, 2003 12:43 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [SAtalk] scoring system and values...
At 10:29 AM 11/7/2003, Maart
On Fri, 7 Nov 2003, Justin Mason wrote:
> BTW, SpamAssassin originally started with accumulating rules. But I took
> it out, as it meant a long hammy mail had a much higher chance of FP'ing,
> due to containing more text.
>
> I'd be worried that accumulating hits would reintroduce the same
> pro
Title: Message
Some
additional information to add today... after updating SpamAssassin to 2.60
yesterday, I am now receiving this message when I try to run the nightly cron
job to rebuild the bayes db:
/etc/cron.daily/sa-learn-rebuild:
Cannot open bayes databases //.spamassassin/bayes_* R/
> since http://rd.yahoo.com/*http://taint.org works also
Man, how hard would it be for Yahoo to look at an environment setting to
determine which page referred the user's browser to this redirect, and NOT
redirect if the previous page visited was not a Yahoo home page? Geez...
Would stop this abus
Hey Guys,
I apologize if these questions are asked somewhere, but I did browse the
FAQ and documentation and didn't see an answer.
I have a good understanding of Razor v2, but I just started using SA.
1. When reporting spam via spamassassin -r, can I supply an mbox instead
of a single message?
At 12:09 PM 11/7/2003, Roberto Salazar wrote:
I have Spamassasin with Postfix working . This server is a Gateway for
others internal mail servers (in these are the users accounts).
I need that spamassasin erase spam mails directly (DELETE FILTER ) in my
server gateway and don't send mail to users
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Petre Bandac writes:
> hello
>
> after using several times sa-learn ( I guess it learned by hand less than 50
> spam messages), I found spamassassing running for a very long time for a
> single mail scan (cca 15 minutes).
>
> when I saw the size o
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chris Santerre writes:
>You know, the answer to this, is the answer to many questions. The solution
>is the much needed accumulator eval. Yes you can get some FPs on 3-5
>consonants. But what if you set this rule to only hit if 4+ hits were found
>of
I think this is because Sendmail checks the current peer's IP address
against the RBL, and SA scans all the Received: headers in the e-mail for
matches.
Tim
-Original Message-
From: Bill Polhemus [mailto:[EMAIL PROTECTED]
Sent: Friday, November 07, 2003 10:39 AM
To: 'Gustafson, Tim'
Cc: [
Danita Zanre wrote:
> Of course the real solution to this one is to get Spamcop to back off
> on this particular listing. I find it outrageous myself. Even in the US
> it's not always possible to get a fixed IP address in some locations for
> small businesses and outside the US it's often simply n
At 10:29 AM 11/7/2003, Maarten J H van den Berg wrote:
Sorry if this has been discussed in the past...
It's been discussed many times.. It's very common for people to have a very
deep misunderstanding of how SA scoring works. Most people fall into the
trap of over-simplifying the problem, and si
Theo Van Dinter wrote:
On Fri, Nov 07, 2003 at 09:55:38AM -0500, Jean-S?bastien Guay-Leroux wrote:
I have a mailbox of approximately 300 emails and I want to learn them using
sa-learn. Prior to learning them, I tried doing a :
`spamassassin --remove-markup < Mailbox`
won't work. spamassassin
you could make it
uri T_YAHOO_REDIR /^http:\/\/s?rd\.yahoo\.com\//i
since http://rd.yahoo.com/*http://taint.org works also
Mike
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Justin Mason
Sent: Thursday, November 06, 2003 11:26 PM
To: Keit
hello
after using several times sa-learn ( I guess it learned by hand less than 50
spam messages), I found spamassassing running for a very long time for a
single mail scan (cca 15 minutes).
when I saw the size of bayes_toks and bayes_toks.new (37, and 41 megs), I
immediately deleted them and
On Fri, Nov 07, 2003 at 12:09:58PM -0500, Roberto Salazar wrote:
> Hi:
>
> I have Spamassasin with Postfix working . This server is a Gateway for
> others internal mail servers (in these are the users accounts).
>
> I need that spamassasin erase spam mails directly (DELETE FILTER ) in my
> serv
Roberto:
This is a FAQ. The short version is: SpamAssassin doesn't delete mail,
you have to configure your MTA to do that. See http://www.exit0.us/ for
more info.
Chris
Roberto Salazar said:
> Hi:
>
> I have Spamassasin with Postfix working . This server is a Gateway for
> others internal mail
> RedHat 6.2, Perl 5.6.1, SpamAssassin 2.55
>
> Hello,
>
> This morning I came into the office to find that qmail-scanner had gone
> insane and lots all nights emails for me. I rebooted the system to try to
> get everything back to ground zero. The problem was that the spamd init
> script decided
Hi:
I have Spamassasin with Postfix working . This server is a Gateway for
others internal mail servers (in these are the users accounts).
I need that spamassasin erase spam mails directly (DELETE FILTER ) in my
server gateway and don't send mail to users (report of points) (FLAGS
FILTER).
It's
> "KC" == Kelsey Cummings <[EMAIL PROTECTED]> writes:
KC> On Thu, Nov 06, 2003 at 08:48:44AM -0800, Bart Schaefer wrote:
[[..]]
>>
>> Follow-ups have already raised issues such as "What if an ISP brings a new
>> mail server on line?"
KC> Then if used in a scoring system, you'll get some num
Sorry if this has been discussed in the past...
I'd like to bring up the subject of the scoring of different rules which
have, IMHO, a very high likelyhood of being spam but are scored rather
low. And I noticed a somewhat related fact, that there is no one rule
that in itself decides somethin
At 08:51 AM 11/7/03 -0500, you wrote:
I am new to Spam Assassin. I see that it checks e-mail against the MAPS
databases, but that it does not appear to check the RBL+ database. Is there
some way for me to add this check to the list?
Well, SA does NOT check maps by default.. it's just got support
At 08:38 AM 11/7/03 -0500, you wrote:
I have noticed that RAzor2 is timing out and slowing down SA 2.6.
Has something changed in the past few months that may have caused this?
Maybe the razorzone has changed? I use razor2.cloudmark.com now.
I don't think the zone itself is likely to change anytime
On Fri, Nov 07, 2003 at 09:55:38AM -0500, Jean-S?bastien Guay-Leroux wrote:
> I have a mailbox of approximately 300 emails and I want to learn them using
> sa-learn. Prior to learning them, I tried doing a :
>
> `spamassassin --remove-markup < Mailbox`
won't work. spamassassin only does 1 mail
Hi,
I have a mailbox of approximately 300 emails and I want to learn them using
sa-learn. Prior to learning them, I tried doing a :
`spamassassin --remove-markup < Mailbox`
to remove any marks spamassassin did, so I won't poisoned the Bayes DB with
invalid data. It didn't worked, all headers
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 07, 2003 2:10 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Re: 'random' character sets
>
>
> On Thu, 06 Nov 2003 10:58:59 -0800, Greg Webster <[EMAIL PROTECTED]>
> posted to spamassassin-
Paul M wrote:
Thanks for your advice Edward, after editing the local.cf file do I have to
restart SA for the changes to take effect?
If you have it running via spamd/spamc, yes. Restart spamd and all
should be well. :)
---
This SF.net em
Hello
I am new to Spam Assassin. I see that it checks e-mail against the MAPS
databases, but that it does not appear to check the RBL+ database. Is there
some way for me to add this check to the list?
Thanks.
Tim
---
This SF.net email is sp
hi
I am using SA 2.6 on a Linux box [sendmail/procmail]. Things have
been ok till now. Since 2 days spamd is taking up too much memory. We
had 256 MB RAM, I increased both the RAM and Swap space today. Still
things haven't improved.
What could be wrong? Are there any files in .spammassassin dire
I have noticed that RAzor2 is timing out and slowing down SA 2.6.
Has something changed in the past few months that may have caused this?
Maybe the razorzone has changed? I use razor2.cloudmark.com now.
I have googled this and cannot find any answers.
+--
I eventually found the reason for this behaviour after I noticed that root
could start it okay, but the unpriv user spamd couldn't...:
machine:~ # ls -la /usr/lib/perl5/site_perl/5.6.0/Mail/SpamAssassin
drwx--2 root root 942 Nov 7 11:45 .
Yeah, d'oh, no wonder the modules
Zak McGregor Sent: Friday, November 07, 2003 3:12 AM
> Is there a rule implemented that checks for this? Many spams have subject
lines
> of the form:
>
> "Ha1f Off Perscript1on Meds... [ mk"
> "Your Very Own 'Life Soundtrack'
VYiaBuvv"
> "Re: Hydrocodoneb2cbr333"
Yes, it's cal
I got tired of more or less manually grabbing ham and spam from special
accounts and just implemented the public folder setup also. I created the
ham and spam public folders for users to drag stuff into and then
implemented the scripts at:
http://marc.theaimsgroup.com/?l=spamassassin-talk&m=104806
Hi all
Is there a rule implemented that checks for this? Many spams have subject lines
of the form:
"Ha1f Off Perscript1on Meds... [ mk"
"Your Very Own 'Life Soundtrack' VYiaBuvv"
"Re: Hydrocodoneb2cbr333"
etc etc.
I find that in practice
On 05 Nov 2003, at 18:01, Matt Kettler wrote:
CPAN thinks of them both as 2.60, and doesn't differentiate between
finals and RC's.
Ah... I thought CPAN was smarter than that. Thanks.
--
The older you get the more you need the people you knew when you were
young.
-
On Thu, 06 Nov 2003 10:58:59 -0800, Greg Webster <[EMAIL PROTECTED]>
posted to spamassassin-talk:
> A thought on spammers oft-used sets of 'random' character lists in
> emails...an example:
>
> gnqplleqhzblll
> u
> wfjmvfe upvxoi lwhm
> xqs
> flckwrtsmufx irwajksqsnw er wcfjgfmk jugxfq
H
On Thu, 6 Nov 2003 20:32:29 +0100, Jim Knuth <[EMAIL PROTECTED]> posted to
spamassassin-talk:
> Hallo und guten Abend Edward,
>> Jim Knuth wrote:
>>> of course, I use Debian too. Why read SA in two folders (configs)?
>>> What is with /etc/mail/spamassassin/local.cf ? Ignore? Can I delete this?
On Thu, 2003-11-06 at 11:49, Evan Platt wrote:
> --On Wednesday, November 05, 2003 10:29 PM -0500 Bill Baker
> <[EMAIL PROTECTED]> wrote:
>
> > I received 3 identical spams from the same e-mail address that did not
> > get classified as spam. I tried to do a sa-learn --spam on the message,
> > an
On 6 Nov 2003 Colin A. Bartlett ([EMAIL PROTECTED]) wrote:
> Rick [Kitty5] Sent: Thursday, November 06, 2003 7:33 AM
> > Any suggestions on how I can add some antivirus into the mix, as another
> > procmail recipe perhaps?
>
> Check out ClamAV: http://clamav.elektrapro.com/
Other options are to u
96 matches
Mail list logo
