RE: [SAtalk] Spam forward

2003-11-12 Thread Zlatko Hristov
I use Postfix and amavisd-new, many options including send spam to mailbox. Zlatko. -Original Message- From: Dan [mailto:[EMAIL PROTECTED] Sent: Thursday, November 13, 2003 8:34 AM To: SATalk list Hey guys! Does anyone know if spam can be forwarded onto another mailbox? Right now I h

[SAtalk] Spamassassin blocking by words

2003-11-12 Thread Zlatko Hristov
Title: SignatureENCH Stationery Can SA block messages that contain certain words in the /header/body/subject ?   Thank you.   Zlatko.

Re: [SAtalk] Attachments

2003-11-12 Thread David B Funk
On Wed, 12 Nov 2003, Matt Kettler wrote: > At 01:38 PM 11/12/2003, Scott Antonivich wrote: > >but can attachments be tagged as spam per user? If > >so, what do I need to place in this users config file? > > You'd have to create a custom rule to look for mime boundaries.. > > However, to do it per-

[SAtalk] help

2003-11-12 Thread Mueller, Chris
Title: Message Please remove me from the mailing list... Thanks in advance. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 12, 2003 3:46 PMTo: [EMAIL PROTECTED]Subject: Spamassassin-talk digest, Vol 1 #1721 - 34 msgsSe

Re: [SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Edward Shornock
Matt Kettler wrote: At 02:14 PM 11/12/2003, Pedro Sam wrote: I had SA learn it as spam, and it never bothered me again :) Perhaps this is not the proper way of using SA, but it works. Or you can add "comingsoon.pool.com" to your /etc/mail/access file with a 550 rejection :) Received: from m

Re[2]: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Frank, Wednesday, November 12, 2003, 6:51:01 AM, you wrote: >> > Is anyone else experiencing more junk mail getting through >> > since installing >> > 2.60? FP> I've been seeing a lot more spam *period*. Perhaps it's not that FP> more is gett

Re: [SAtalk] global whitelist in MySQL

2003-11-12 Thread Edward Shornock
Willi Burmeister wrote: Hi, we have a list of email addresses stored in MySQL. We now would like to use this MySQL list as a global whitelist in spamassassin. For every incoming email this MySQL list should be checked before the user white/blacklist is used. Is this possible with spamassassin?

RE: [SAtalk] Spam forward

2003-11-12 Thread ian douglas
> Now you've got me interested. how did you get those stats? I can't take credit for it. I turned on logging in SpamAssassin and MailScanner, and Mike Andrews on the list here submitted a script a few weeks ago that I tweaked a tiny bit although his worked fine on its own. My maillogs rotate on

Re: [SAtalk] CPU Usage while sa-learning?

2003-11-12 Thread Chip Paswater
Also, check vmstat or top instead of relying on your system load average. The load average is not necessarily indicitave of your actual system load. If you find it taking too many resources, try bumping it's nice level way down when you run it. On Tue, Nov 11, 2003 at 11:30:21PM +0100, Christophe

RE: [SAtalk] Spam forward

2003-11-12 Thread mwestern
Now you've got me interested. how did you get those stats? -Original Message- From: ian douglas [mailto:[EMAIL PROTECTED] Sent: Thursday, November 13, 2003 8:34 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Spam forward > err, i'm not sure how you setup your spamassasin but i have > ma

Re: [SAtalk] spamassassin is deleting ALL incoming mails!

2003-11-12 Thread Chris Thielen
Oops, I accidentally replied directly to Paulo in the original message... Replying to the list: Paulo, I don't use Sendmail and therefore don't have any experience with its config files, however I don't see anything out of the ordinary here. How are you calling spamassassin? via Procmail? (I se

Re: [SAtalk] Bayes versioning?

2003-11-12 Thread Ted Cabeen
Theo Van Dinter <[EMAIL PROTECTED]> writes: > On Tue, Nov 11, 2003 at 01:15:43PM -0800, Ted Cabeen wrote: >> Okay. I'll give that a try. What's the best way to quiesce the bayes >> system without making spamassassin unavailable during the import? >> Will setting auto_learn to 0 in the running us

Re: [SAtalk] Spam forward

2003-11-12 Thread Matt Kettler
At 04:34 PM 11/12/2003, Dan wrote: Does anyone know if spam can be forwarded onto another mailbox? Right now I have being trapped in /var/virusmails. That totally depends on what tool you're using to call SA. SA itself can't even trap them in /var/virusmails, much less forward messages. It's the

Re: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Martin Radford
At Wed Nov 12 14:51:01 2003, Frank Pineau wrote: > > I've been seeing a lot more spam *period*. Perhaps it's not that more > is getting through. I'd be interested to see his ham/spam ratio and to > know if it's changed any in the last few months. I'm getting four to five times as much spam as I

RE: [SAtalk] Spam forward

2003-11-12 Thread ian douglas
> err, i'm not sure how you setup your spamassasin but i have > mailscanner going well cos it supports a virus scanner as well. I second that opinion. MailScanner/ClamAV/SA 2.60, and working great on a small-volume server: Spam/Mail Statistics; Total spamassassin rejected scanne

Re: [SAtalk] CPU Usage while sa-learning?

2003-11-12 Thread Martin Radford
At Tue Nov 11 22:30:21 2003, Christopher Kunz wrote: > > I have been initializing our Bayes databases after a system rebuild and > 2.60 upgrade, and have noticed that feeding it very large mbox files > causes some undesired behavior - namely an extremely high load of > between 9 and 12. > > This

Re: [SA Says: 05.40] [SAtalk] spamassassin is deleting ALL incoming mails!

2003-11-12 Thread Scott Blomquist
Have you checked your spamtrap folder? Here is the score I got on your message: Paulo Lenz wrote: This mail is probably spam. The original message has been attached along with this report, so you can recognize or block similar unwanted mail in future. See http://spamassassin.org/tag/ for more

[SAtalk] Razor Timeout Case SpamAssassin to stop?

2003-11-12 Thread mwestern
Hi All, I had a strange thing last night. my spam assassin stop processing messages. sendmail was still receiving. i stopped and restarted MailScanner (which is what i use) once and it complained about address in use. i then stopped it and saw that sendmail was still running and did a killall o

RE: [SAtalk] Spam forward

2003-11-12 Thread mwestern
err, i'm not sure how you setup your spamassasin but i have mailscanner going well cos it supports a virus scanner as well. in my mailscanner.conf file i have the option of: # # What to do with spam # # # This is a list of actions to take when a message is spam. # It can b

Re: [SAtalk] Help on SpamAssasin

2003-11-12 Thread Chris Thielen
Sounds like you have this: Internet email goes to a routable IP address on a Linux PC. Linux PC (w/routable IP) runs NAT, port 25 is forwarded to Windows PC Windows PC (w/non-routable IP; 10.0.0.x or 192.168.0.x are common) runs a MTA on port 25 and receives the forwarded connections. But you wan

Re: [SAtalk] spamassassin is deleting ALL incoming mails!

2003-11-12 Thread Chris Thielen
Paulo: This is almost certainly a misconfiguration of your MTA. Please provide details of your server configuration. (SA does *not* delete email) -- Chris Thielen Easily generate SpamAssassin rules to catch obfuscated spam phrases: http://www.sandgnat.com/cmos/ Paulo Lenz said: > Im having a

RE: [SAtalk] spamassassin is deleting ALL incoming mails!

2003-11-12 Thread Scott Antonivich
Check the maillog file. Does it have any error messages? Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Paulo Lenz Sent: Tuesday, November 11, 2003 9:23 PM To: [EMAIL PROTECTED] Subject: [SAtalk] spamassassin is deleting ALL incoming mails! Im havi

RE: [SAtalk] Spam forward

2003-11-12 Thread Colin A. Bartlett
Dan Sent: Wednesday, November 12, 2003 4:34 PM > Does anyone know if spam can be forwarded onto another mailbox? I too am interested in this. I could never get my corpus exported from outlook so I would like to copy spammy messages to another mailbox. Or even to a folder within my mailbox. That w

RE: [SAtalk] Attachments

2003-11-12 Thread Colin A. Bartlett
Matt Kettler Sent: Wednesday, November 12, 2003 2:40 PM > At 01:38 PM 11/12/2003, Scott Antonivich wrote: > >but can attachments be tagged as spam per user? If > >so, what do I need to place in this users config file? > > You'd have to create a custom rule to look for mime boundaries.. > > However

Re: [SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Matt Kettler
At 02:14 PM 11/12/2003, Pedro Sam wrote: I had SA learn it as spam, and it never bothered me again :) Perhaps this is not the proper way of using SA, but it works. Or you can add "comingsoon.pool.com" to your /etc/mail/access file with a 550 rejection :) Received: from mx10.comingsoon.pool.com (

RE: [SAtalk] scoring system and values... (Bayes scoring)

2003-11-12 Thread Smart,Dan
I don't use Razor or Pyzor partly for this reason, and partly due to delay issues. By the way... When discussing why certain rules have certain scores, the set of scores that make no sense to me is the scoring given to Bayes: --50_scores.cf -- score BAYES_00 0 0 -4.901 -4.900 sco

[SAtalk] spamassassin is deleting ALL incoming mails!

2003-11-12 Thread Paulo Lenz
Im having a problem with spamassassin,   After I installed it, I am not receiving any more mails... I think its deleting all the mails when thay arrive, because they are not returning to the sender...   Could anyone help me ?   Thanks, Paulo

RE: [SAtalk] [RD] simple rule for consumption

2003-11-12 Thread Regis Wilson
>I had several false positives today based on the BAD_X_HEADERS rule. I'm >using the rules from Chris' site (Nov02). The legitimate emails had an >"X-URL" header. All of the FPs where from a single mailing list. For what >ever reason, they are providing a valid link to some content within this >

RE: [SAtalk] Attachments

2003-11-12 Thread Dan Kohn
This would also catch HTML mail (which uses the same MIME formatting as attachments). The user probably doesn't want this. You could alternatively use a procmail rule to discard mail above a certain size, like 2 (20 KB). However, removing attachments in general is pretty unlikely to be a goo

[SAtalk] WhiteList problem

2003-11-12 Thread Kiryl Hakhovich
Hello guys, I guess i'm doing something totaly WRONG herebut can't figure out what. I have spamassassin 2.60. I have placed a file whitelist.cf in my /etc/mail/spamassassin/ the file has following: def_whitelist_from_rcvd [EMAIL PROTECTED] goodwillny.org def_whitelist_from_rcvd [EMAIL P

RE: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Gilson, Larry
> -Original Message- > From: David B Funk > Sent: Wednesday, November 12, 2003 2:45 AM > To: Larry Gilson > Cc: 'Robban'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] SMTP gateway/filter > > > On Tue, 11 Nov 2003, Larry Gilson wrote: > > > The preferred method is any way you prefer. ;) T

[SAtalk] Combining spamc options

2003-11-12 Thread Regis Wilson
I would like to combine the two options "-c" and "-y" for spamc. I would like to retain the functionality of printing the hits/required score and setting the exit code while also printing out the rules hit. I want to log the hits to the rules for accounting purposes, but spamc does not appear to

RE: [SAtalk] Attachments

2003-11-12 Thread Matt Kettler
At 03:51 PM 11/12/2003, Colin A. Bartlett wrote: I would think you could write a mime boundries rule like Matt suggests but score it 0 on the site wide config. Then just score it something higher on the individual users config file. Crew, am I wrong here? Good point.. that way you wouldn't need to

RE: [SAtalk] newb-level Bayes question (sa-learn)

2003-11-12 Thread Scott Antonivich
Sam I am? SorrysorryI simply couldnt resist. Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of ian douglas Sent: Wednesday, November 12, 2003 3:00 PM To: [EMAIL PROTECTED] Subject: [SAtalk] newb-level Bayes question (sa-learn) Sorry for the con

[SAtalk] Help on SpamAssasin

2003-11-12 Thread a3
Hello, I have a Debian Linux Firewall, configured by someone I know that is no longer available. For my work I program on Windows platforms, so I don't know much about Linux, just some basic things. The problem I am facing has to do with mail spam. Behind the firewall is a mailserver (wind

[SAtalk] Spam forward

2003-11-12 Thread Dan
Hey guys! Does anyone know if spam can be forwarded onto another mailbox? Right now I have being trapped in /var/virusmails. I would like to have it all sent to [EMAIL PROTECTED] Thoughts? Dan --- This SF.Net email sponsored by: ApacheCon 2

RE: [SAtalk] Detailed Scores in Header

2003-11-12 Thread Colin A. Bartlett
Greg Miller Sent: Wednesday, November 12, 2003 11:48 AM > Having being using SA, and have searched the archive, so be kind. > > I would like to have the score assigned for the various rules appear in > the header of the message instead of just the aggregate score and the > names of the rules that

Re: [SAtalk] newb-level Bayes question (sa-learn)

2003-11-12 Thread Theo Van Dinter
On Wed, Nov 12, 2003 at 12:00:03PM -0800, ian douglas wrote: > If I accidentally run sa-learn on a message as spam that really was *ham*, > can I simply run "sa-learn --ham" on the message to cancel it out without > using the "--forget" flag first? yes. -- Randomly Generated Tagline: "We love th

Re: [SAtalk] WhiteList problem

2003-11-12 Thread Kiryl Hakhovich
On Wed, 2003-11-12 at 13:39, Matt Kettler wrote: > At 12:13 PM 11/12/2003, Kiryl Hakhovich , [EMAIL PROTECTED] wrote: > >am I missing something here? > > > >here is a headers for email that should be going through: > > > >--- > > > >Received: from > >mail-gateway.exchan

RE: [SAtalk] Attachments

2003-11-12 Thread Scott Antonivich
Hmmm... ok, I thought I saw a MICROSOFT executables rule in the archive, so I figuredif you could flag executablesyou could also flag other attachments... Oh wellthanks for the info... Scott Antonivich -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wed

[SAtalk] timed out

2003-11-12 Thread Chris Trudeau
All, I'm not sure what the problem is with my MailScanner/SpamAssassin installation. I'm using exactly the same configuration as in another location. RedHat 7.3 DCC Razor2 SpamAssassin 2.60 MailScanner 4.22-5 (testing with same system thats in production) I have validated that DCC is working th

Re: [SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bob Apthorpe writes: > Hi, > > Can one of the mailing list Powers That Be disable whichever subscriber is > routing mail to thewizard.net? I'm tired of pool.com's useless autoack > ads, especially due to a suspicious piece of their URL (below.) I'd

[SAtalk] FROM_AND_TO_SAME Rule does not seem to work

2003-11-12 Thread Gerhardt, Scott
Title: FROM_AND_TO_SAME Rule does not seem to work Derek Jennings [EMAIL PROTECTED] wrote: > Most of the few spams that make it to my inbox are from > "some_name" [...] I've been having pretty good luck with a meta-rule that compares addresses in "From:" with the IP address in "Received:"

Re: [SAtalk] Attachments

2003-11-12 Thread Matt Kettler
At 01:38 PM 11/12/2003, Scott Antonivich wrote: but can attachments be tagged as spam per user? If so, what do I need to place in this users config file? You'd have to create a custom rule to look for mime boundaries.. However, to do it per-user, you'll need to have per-user configs, and per-user

[SAtalk] newb-level Bayes question (sa-learn)

2003-11-12 Thread ian douglas
Sorry for the confusion on this... I have some custom code that splits MailScanner's archive of all incoming mail into known spam and ham, then I manually move what's left in the archive into the spam/ham mbox files and then run sa-learn on the spam/ham mailboxes and then append them to archives o

Re: [SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Pedro Sam
I had SA learn it as spam, and it never bothered me again :) Perhaps this is not the proper way of using SA, but it works. Pedro On November 12, 2003 01:44 pm, Bob Apthorpe wrote: > Hi, > > Can one of the mailing list Powers That Be disable whichever subscriber is > routing mail to thewizard.n

Re: [SAtalk] WhiteList problem

2003-11-12 Thread Matt Kettler
At 12:13 PM 11/12/2003, Kiryl Hakhovich , [EMAIL PROTECTED] wrote: am I missing something here? here is a headers for email that should be going through: --- Received: from mail-gateway.exchange.goodwillny.org ([10.0.1.27]) by winxchnge2-2kab.exchange.goodwillny.org

[SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Bob Apthorpe
Hi, Can one of the mailing list Powers That Be disable whichever subscriber is routing mail to thewizard.net? I'm tired of pool.com's useless autoack ads, especially due to a suspicious piece of their URL (below.) Thanks, -- Bob On Wed, 12 Nov 2003 [EMAIL PROTECTED] wrote: > We were unable to

[SAtalk] Attachments

2003-11-12 Thread Scott Antonivich
I have spamassassin working great with postfix on RedHat9. I have a user that would like to tag all attachments as spam. I realize SpamAssassin is not virus protectionbut can attachments be tagged as spam per user? If so, what do I need to place in this users config file? I assume it has somet

[SAtalk] Attachments

2003-11-12 Thread Scott Antonivich
Hello, I searched the archives and did not find an answer so I am asking the list. I have a user that wishes to have all attachments tagged as SPAM. How can this be done? I realize that it is not virus protection but they want to have all attachments tagged. Scott Antonivich -

Re: [SAtalk] Rule is blocking everything

2003-11-12 Thread Matt Kettler
At 12:15 PM 11/12/2003, Dan wrote: Yesterday we were talking about blocking certain words. The suggestion came up to put the following in: body LOCAL_SWEARWORD /\b(?:word1|word2|word3|word4)\b/i I put this in the bottom of my /etc/mail/spamassassin/local.cf It seems to block all mail? Any idea

[SAtalk] WhiteList problem

2003-11-12 Thread Kiryl Hakhovich
Hello guys, I guess i'm doing something totaly WRONG herebut can't figure out what. I have spamassassin 2.60. I have placed a file whitelist.cf in my /etc/mail/spamassassin/ the file has following: def_whitelist_from_rcvd [EMAIL PROTECTED] goodwillny.org def_whitelist_from_rcvd [EMAIL P

Re: [SAtalk] Rule is blocking everything

2003-11-12 Thread Bob Apthorpe
Hi, On Wed, 12 Nov 2003, Dan wrote: > Hey guys! > > Yesterday we were talking about blocking certain words. The suggestion came > up to put the following in: > body LOCAL_SWEARWORD /\b(?:word1|word2|word3|word4)\b/i > > I put this in the bottom of my /etc/mail/spamassassin/local.cf > > It see

RE: [SAtalk] scoring system and values...

2003-11-12 Thread Covington, Chris
Definitely FPs. I think SA has a very difficult time with solicited commercial email, even with Bayes feeding. I had to up my site-wide installation to 10.0 to get only the worst of the worst and to stop people's solicited Princeline / Day's Inn, etc. hotel confirmations and travel/real estate de

Re: [SAtalk] New Spam Source? Rules for this yet??

2003-11-12 Thread Christopher X. Candreva
On Tue, 11 Nov 2003, Robert Leonard III wrote: > I have been getting several new spams that seem to get past my SA setup.. > > So far they have come from: > @name-james.com > @name-clark.com > @smegheads.com These guys are on both spamhaus and njabl . We're blocking via these lists at the sendma

RE: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Covington, Chris
My way is easier: http://www.plusone.com/gaptuning/postfix Chris --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more

[SAtalk] Detailed Scores in Header

2003-11-12 Thread Greg Miller
Having being using SA, and have searched the archive, so be kind. I would like to have the score assigned for the various rules appear in the header of the message instead of just the aggregate score and the names of the rules that hit. I want to verify that my changes to the score are actually

RE: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Todd Schuldt
Same here - according to my logs and other records after changing to 2.6 our FP rate dropped and our FN rate dropped which made co-workers happy but overall the number of spams per day has risen roughly 45% over the last 3 months. Also we have smtpi blacklists in place and server connection reject

Re: [SAtalk] Bounce all but whitelist

2003-11-12 Thread Terry Milnes
Beats me, I don't use postfix/postfixfilter I use qmail/vpopmail/procmail. SA does NOT delete mail, that can be accomplished with the filter file. So adjust your filter file to auto delete mail scoring >99 (Assuming of course that a postfixfilter file can do this). Of course if postfix doesn'

Re: [WL] [SAtalk] Bounce all but whitelist

2003-11-12 Thread Charles Gregory
On Tue, 11 Nov 2003, Tim Merkel wrote: > I have a client who wishes to only allow mail into his inbox that is > explicitly allowed via his white list. If you are using procmail, make a whitelist recipe in his .procmailrc file. Technically, his mail will still go through spamassassin, but the white

RE: [SAtalk] Bounce all but whitelist

2003-11-12 Thread Tim Merkel
This is a great start, but how do I tell SA to delete the blacklisted mail just for this user? Blacklisting [EMAIL PROTECTED] in MySQL will tag everything as SPAM but not delete it. Since my users are postfix virtual, they do not have a ~/.procmailrc file, or a home directory for that matter. I w

Re: [SAtalk] Off topic: Threads

2003-11-12 Thread Terry Milnes
This list seems to be worse than most though, go figure . Matt Kettler wrote: At 07:18 AM 11/12/03 -0500, Terry Milnes wrote: Are the threads on this list screwed up by the list program, or is it just users replying to existing mail to create new? Just wondering, because it seems to be terr

[SAtalk] Rule is blocking everything

2003-11-12 Thread Dan
Hey guys! Yesterday we were talking about blocking certain words. The suggestion came up to put the following in: body LOCAL_SWEARWORD /\b(?:word1|word2|word3|word4)\b/i I put this in the bottom of my /etc/mail/spamassassin/local.cf It seems to block all mail? Any ideas? Thanks Dan - O

Re: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Ralf Hildebrandt
* Mark Hepler <[EMAIL PROTECTED]>: > Another how-to you might want to look at if you are considering using > postfix - SA as your gateway to the Exchange server is: > > Postfix - Exchange Server Mail relay > A Postfix mail relay that protects an Exchange Server > http://postfix.state-of-mind.de/p

Re: [SAtalk] RBL dumb question

2003-11-12 Thread Matt Kettler
At 10:23 AM 11/12/03 -0500, Chris Trudeau wrote: How would I go about determining WHICH RBLS are being used currently (I know they are "on"). Look through 20_dnsbl_tests.cf, then check to make sure the RBL in question has a non-zero score in 50_scores.cf.. grep is your friend. And how would I g

[SAtalk] RBL dumb question

2003-11-12 Thread Chris Trudeau
How would I go about determining WHICH RBLS are being used currently (I know they are "on"). And how would I go about adding/extracting an RBL from the SpamAssassin checks? CT --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November

[SAtalk] Re: Updated Corn

2003-11-12 Thread Lukreme
On 11 Nov 2003, at 20:52, Jennifer Wheeler wrote: point bein'...i named them for me to remember, and knowing nobody else would be naming rules similar to mine, so adding rules would not be a problem. When i saw they were fairly lethal, and spammers started being even more blatant with what they d

Re: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Frank Pineau
On Wed, 2003-11-12 at 11:09, chupacabra wrote: > I watched all weekend and there was a trifle of spam. At 7:00 am mon > morning it increased greatly till about 1:00 pm when we got mailbombed > and almost took the server down, Steady boatloads of spam since then. > Is there a webalizer for sp

Re: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Mark Hepler
Another how-to you might want to look at if you are considering using postfix - SA as your gateway to the Exchange server is: Postfix - Exchange Server Mail relay A Postfix mail relay that protects an Exchange Server http://postfix.state-of-mind.de/patrick.koetter/mailrelay/ although this how-to

Re: [SAtalk] Off topic: Threads

2003-11-12 Thread Matt Kettler
At 07:18 AM 11/12/03 -0500, Terry Milnes wrote: Are the threads on this list screwed up by the list program, or is it just users replying to existing mail to create new? Just wondering, because it seems to be terribly messed up That is a very common thing for people to do who don't use thread

Re: [SAtalk] more spam since installing 2.60

2003-11-12 Thread chupacabra
I watched all weekend and there was a trifle of spam. At 7:00 am mon morning it increased greatly till about 1:00 pm when we got mailbombed and almost took the server down, Steady boatloads of spam since then. Is there a webalizer for spamassassin? I would like to look at the graphs. Have

[SAtalk] Replicating Bayes DB to other SA Boxes

2003-11-12 Thread Puchalski, Mark
Title: Message We have (3) SA Boxes (2.6) running Mimedefang, fronting Exchange in all 3 of our offices.  One box is at our main office and receives all mail.  The other two offices send outbound mail through their own SA box, and receive mail if the main office is down.   Every night, we're

RE: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Frank Pineau
On Wed, 2003-11-12 at 09:26, Chris Santerre wrote: > > > > Is anyone else experiencing more junk mail getting through > > since installing > > 2.60? > This seems to be a common theme for any new version of SA. I've been seeing a lot more spam *period*. Perhaps it's not that more is getting thr

Re: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Matt Kettler
At 07:16 AM 11/12/03 +0200, Thomas Kinghorn wrote: Is anyone else experiencing more junk mail getting through since installing 2.60? No.. I've experienced a lot less getting through, but I use the bayes engine and keep mine well trained. Also, why are some scores in the tests 0.0? Because the sco

RE: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Chris Santerre
> > Is anyone else experiencing more junk mail getting through > since installing > 2.60? *snip* > > Regards, > Tom Kinghorn This seems to be a common theme for any new version of SA. Seems the spammers are playing around with CSV versions in prep for new releases. But 2.60 has been out for

FW: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Larry Gilson
Sorry if you are getting this twice Dave, I sent it using the wrong account so I am resending. --Larry -Original Message- From: Gilson, Larry Sent: Wednesday, November 12, 2003 9:28 AM To: 'David B Funk' Cc: 'Robban'; [EMAIL PROTECTED] Subject: RE: [SAtalk] SMTP gateway/filter > ---

[SAtalk] Re: Off topic: Threads

2003-11-12 Thread Rick [Kitty5]
Terry Milnes wrote: > Are the threads on this list screwed up by the list program, or is it > just users replying to existing mail to create new? > > Just wondering, because it seems to be terribly messed up Why not pick the group up on www.gmane.org (via the news feed) -- Rick Kitty5 NewMe

Re: [SAtalk] more spam since installing 2.60

2003-11-12 Thread Rajdeep Larha
I am having similar problem, Still not figured out what to do... --Rajdeep - Original Message - From: "Thomas Kinghorn" <[EMAIL PROTECTED]> To: "Spamassassin-Talk (E-mail)" <[EMAIL PROTECTED]> Sent: Wednesday, November 12, 2003 12:16 AM Subject: [SAtalk] more spam since installing 2.60 >

[SAtalk] global whitelist in MySQL

2003-11-12 Thread Willi Burmeister
Hi, we have a list of email addresses stored in MySQL. We now would like to use this MySQL list as a global whitelist in spamassassin. For every incoming email this MySQL list should be checked before the user white/blacklist is used. Is this possible with spamassassin? If yes, how? Thanks W

Re: [SAtalk] Bounce all but whitelist

2003-11-12 Thread Terry Milnes
Haha I just had to try this Blacklist [EMAIL PROTECTED] in the db for that particular user, then add his acceptable senders as whitelisted entries. Don't know about any negative ramifications, but it does work and will fit in with the way you want it to. tm Tim Merkel wrote: I have a clie

[SAtalk] Off topic: Threads

2003-11-12 Thread Terry Milnes
Are the threads on this list screwed up by the list program, or is it just users replying to existing mail to create new? Just wondering, because it seems to be terribly messed up Terry... --- This SF.Net email sponsored by: ApacheCon 20

Re: [SAtalk] management GUI

2003-11-12 Thread Terry Milnes
Margit Meyer wrote: On Tue, 11 Nov 2003 16:51:51 -0800 "Dan" <[EMAIL PROTECTED]> wrote: All seems good. I am trapping all spam and viruses in /var/virusmail (they are in .gz format) Does anyone have any suggestions on how I can add some better management around spam that we have blocked, that we ne

[SAtalk] Salutation in subject

2003-11-12 Thread Kenneth Porter
Are there any rules to catch the salutation-in-subject pattern? This looks like something requiring an eval rule. It would check if the subject starts with "name,", where "name" is the first word in the To header. For instance, I get a lot of false negatives with "Kenneth," at the beginning of the

Re: [SAtalk] SpamAssassin dont block the default sample spam examples and others

2003-11-12 Thread Joao Pedro
I'm using SA 2.60. I used the sample-spam.txt, sample-GTUBE-spam.txt and others the test spamassassin -tD < sample-spam.txt return this errors to me: debug: Razor2 is available debug: entering helper-app run mode razor2 check skipped: Can't locate object method "do_conf" via package "Razor

RE: [SAtalk] Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

2003-11-12 Thread Bill Polhemus
I'll say. I have mine set at 4, which I have found (for my setup) is pretty near perfect, even though it is lower than the default setting of 5. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

2003-11-12 Thread Bill Polhemus
I added this to my Sendmail configuration a couple of weeks back, and I have been amazed at how much SPAM has been rejected as a result. I prefer to have Sendmail reject it at the get-go, rather than have it come all the way through to SA. William L. Polhemus, Jr. P.E. Polhemus Engineering Compan

Re: [SAtalk] spamd consumes huge amounts of memory

2003-11-12 Thread Margit Meyer
On Mon, 10 Nov 2003 15:40:34 +0100 Margit Meyer <[EMAIL PROTECTED]> wrote: Hi all, I solved my problem: I installed the perl module DB_File 1.806 and BerkeleyDB 2.7.7. Formerly (SpamAssassin 2.55) I used NDBM_File format to save bayes databases. Now spamd is working fine :-)) Margit -

RE: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Paul Hutchings
Robban, I've never used sendmail (too daunting for a newbie!), however, I use postfix + spamassassin on a RH9 box to do filtering on mail that is relayed to our exchange boxes. postfix is really easy to setup for this purpose, and if you take a look at http://postfix.cnc.bc.ca/twiki/bin/view/Main

Re: [SAtalk] management GUI

2003-11-12 Thread Margit Meyer
On Tue, 11 Nov 2003 16:51:51 -0800 "Dan" <[EMAIL PROTECTED]> wrote: > All seems good. I am trapping all spam and viruses in /var/virusmail (they > are in .gz format) > > Does anyone have any suggestions on how I can add some better management > around spam that we have blocked, that we need to f

RE: [SAtalk] SMTP gateway/filter

2003-11-12 Thread David B Funk
On Tue, 11 Nov 2003, Larry Gilson wrote: > The preferred method is any way you prefer. ;) That is really an honest > answer. Everyone has their own preferred method and a lot of times it > depends on your specific situation. Some people will pipe to a filter shell > script, Procmail, maildrop,