Re: Re[2]: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread William Stearns
Good evening, Justin, On Mon, 17 Nov 2003, Justin Mason wrote: > >>> Are there ways to improve the performance of the checks? I ask > >>> because these URI rules are tripping on about 50-60% of my current > >>> spam - much more than the corresponding source domain blacklist rules. > > Quick spe

[SAtalk] Re: URI database lookup feature (was Sanity checking new uri rules?)

2003-11-17 Thread David B Funk
On Mon, 17 Nov 2003, Justin Mason wrote: > BTW, given that a URI DB cannot use regular expressions, or patterns, > would this really be useful? > > Basically with a DB you only gain efficiency when looking up exact > strings. So for this to be useful against URIs, you'd have to pick out > *just*

RE: [SAtalk] SA and Microsoft Mail Internet Headers

2003-11-17 Thread Fritz Mesedilla
We are only a part of this big company who implements exchange as the main way of getting email. To protect our small company, I implemented a linux firewall and mail relay. So I guess I really have to find a way to make this work. Cheers, fritz --- + Basta Ikaw Lord -Original Messa

Re: Re[2]: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Menschel writes: >What I have been able to measure is the time needed for a mass check. >When I run mass-check against my now 50k corpus (that's 50k email >messages), it takes 15-16 minutes to run for a single rule. Adding a >small number of ru

Re: [SAtalk] [OT] Switching OS for Gateway

2003-11-17 Thread Jacob S.
On Mon, 17 Nov 2003 21:01:24 -0500 Larry Gilson <[EMAIL PROTECTED]> wrote: > I am running Postfix with SA, Procmail, and Webmin on Red Hat 8.0. I > want to move away from RH and am soliciting opinions. Well, you've heard the Slackware/FreeBSD side from Rick, so I'll represent Debian. :-) I got

Re[2]: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Chris, William, Monday, November 17, 2003, 10:52:10 AM, Chris wrote: CS> My 1700 rules CRUSHED busy servers. This is why I sort them now by CS> order of hits. So people can prune the rules to the heavy hitters if CS> they wish. It was the only

Re: [SAtalk] Spam-trapping and Bayes

2003-11-17 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Kurt, Monday, November 17, 2003, 11:03:24 AM, you wrote: KB> I've just put up 2.60 on FreeBSD, and consider myself a bit of a KB> newb, but I've been reading the man page for spamassassin, and found KB> a section on spamtrapping. We've got 40 o

RE: [SAtalk] [OT] Switching OS for Gateway

2003-11-17 Thread Larry Gilson
Thanks Rick! I appreciate your input and time. Your input is very consistent with everything I read. It is great to have direct and experienced feedback. I know this is a religious subject so I appreciate the balanced response. Regards, Larry > -Original Message- > From: Rick Macdou

Re: [SAtalk] [OT] Switching OS for Gateway

2003-11-17 Thread Rick Macdougall
Flame wars abound!!! Seriously, both Slackware (with Swaert) and FreeBSD (with ports) will give you a very stable system that is easily update able. I personally would stay away from Debian, which has probably the best update system, just because they are slow to update to recent versions of s

[SAtalk] [OT] Switching OS for Gateway

2003-11-17 Thread Larry Gilson
I am running Postfix with SA, Procmail, and Webmin on Red Hat 8.0. I want to move away from RH and am soliciting opinions. I figure that for me, I have 3 viable choices: FreeBSD, Debian, and Slackware. I want a free OS so I don't want to use SuSE, Mandrake, or the like. Nothing against the dist

[SAtalk] Install test fails repeadedly

2003-11-17 Thread Josh Kropf
I am attempting to install spamassassin and it seem to fail on the tests. The spamc_B.t test fails 100% and several others fail between 20% and 80%. I believe I have all the required modules and I experience this problem regardless if I try and build the package from the downloaded package or if I

[SAtalk] why won't changing the display language work ???

2003-11-17 Thread Samuel Murez
Hello-- Could somebody please take just a minute to tell me how to do this ? It seems very simple but I've tried many solutions and nothing's working ! I would like one of my users to receive spamassassin template messages in french, while the rest continue receiving them in english. I know the

Re: [SAtalk] whitelist_from_rcvd

2003-11-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David B Funk writes: >whitelist_from_rcvd needs appropriate values for the trusted_networks >parameter before it works. >Given that you have a firewall configuration with internal/exteral >addresses on that SA box, it might be confused when trying to

RE: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Todd Schuldt
All scripts are located at: http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm Popcorn/Weeds/Blackhair Combined: http://www.merchantsoverseas.com/wwwroot/gorilla/popcorn.cf We use the abridged evil: http://www.merchantsoverseas.com/wwwroot/gorilla/evilrules11.cf Place these in /etc/m

Re: [SAtalk] whitelist_from_rcvd

2003-11-17 Thread David B Funk
On Mon, 17 Nov 2003, Martin McWhorter wrote: I am having a problem with whitelist_from_rcvd not working. I have Spamassassin running on a redhat 9 box with sendmail 8.12.8 as our companies gateway MTA. I have MIMEdefang running as well, but with the Spamassassin portion of the defang.conf comment

Re: [SAtalk] whitelist_from_rcvd

2003-11-17 Thread Martin McWhorter
Try explicitly setting trusted_networks. Sorry I should have meantioned that I do have the trusted_networks in my conf: trusted_networks 104. trusted_networks 10. Other possiblity, that "Add to Address Book" stuff in the 'From:' field might be confusing SA. That is just some WANK that Yahoo! adds

[SAtalk] procmail and stale spamassassin.lock

2003-11-17 Thread Chip Paswater
Does anyone else have trouble with procmail not cleaning up spamassassin.lock when it's done? I see a series of these in the procmail log: procmail: Locking "spamassassin.lock" procmail: [2425] Mon Nov 17 14:06:56 2003 procmail: Locking "spamassassin.lock" procmail: [2425] Mon Nov 17 14:07:04 20

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Brian Godette
On Monday 17 November 2003 01:29 pm, Bart Schaefer wrote: > On Mon, 17 Nov 2003, Brian Godette wrote: > > On Monday 17 November 2003 11:22 am, Bart Schaefer wrote: > > > :0 c : $HOME/.sa$LOCKEXT > > > > > > * ^X-Spam-Checker-Version:.*-$SAVERSION > > > * ^X-Spam-Status: Yes.*autolearn=ham > > > > >

Re: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread William Stearns
Good evening, Justin, Thanks for taking the time to answer. On Mon, 17 Nov 2003, Justin Mason wrote: > -(Modified PGP heading)- > Hash: SHA1 > > BTW, given that a URI DB cannot use regular expressions, or patterns, > would this really be useful? > > Basically with a DB you only

Re: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 BTW, given that a URI DB cannot use regular expressions, or patterns, would this really be useful? Basically with a DB you only gain efficiency when looking up exact strings. So for this to be useful against URIs, you'd have to pick out *just* the d

[SAtalk] bl.csma.biz

2003-11-17 Thread Fred I-IS.COM
Is anyone on this list using bl.csma.biz?  I see they have a rule on their site to use them with SA, just wondering how effective and if many FP's? http://bl.csma.biz Frederic TaraseviciusInternet Information Services, Inc.http://www.i-is.com/

Re: [SAtalk] problem with Razor and spamd

2003-11-17 Thread Peter Buonora
Just wanted to mentioned that I figured out what the issue was with getting spamd to work with razor. I had started spamd using the -L option. Once I did not use -L it worked. The reason I used -L was that I had seen it used in many examples for startup scripts. Oh, I also set username=spamfi

RE: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread Larry Gilson
Hey Chris, I may be oversimplifying the problem, but I don't think the db code is elaborate. I wrote Perl DB_File routines for squidGuard. What is needed is a hook to develop custom eval functions. Otherwise you run the risk of the eval function not surviving updates. Even if one would maintai

Re: [SAtalk] Validate Sender Users

2003-11-17 Thread David B Funk
On Mon, 17 Nov 2003, Eduardo Alfonso wrote: > Hi > > I've been trying to configure SpamAssasin to check for the existence of the user on > the local machine that is > trying to send the message and I couldn't find how to do this. > > Is it possible ?? > > Thanx > > I'm using sendmail MTA in a Re

Re: [SAtalk] SA-Learn. Clarification question.

2003-11-17 Thread Martin Radford
At Sat Nov 15 16:34:09 2003, Alan Munday wrote: > > Martin > > Thanks for the response. It lead to another question > > If I'm using Anomy (as I am) do I need to keep a copy of the raw > original or undo the anomy defang'ing? I don't know anything about Anomy. I'd say that you'll need to

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Bart Schaefer
On Mon, 17 Nov 2003, Brian Godette wrote: > On Monday 17 November 2003 11:22 am, Bart Schaefer wrote: > > :0 c : $HOME/.sa$LOCKEXT > > * ^X-Spam-Checker-Version:.*-$SAVERSION > > * ^X-Spam-Status: Yes.*autolearn=ham > > | sa-learn --forget > > There's one problem with the above and that's spam t

[SAtalk] Message Preprocessing - Body Rules

2003-11-17 Thread Larry Gilson
SA 2.55 I am aware that HTML tags and line breaks are remvoed for 'body' rule tests. I was wondering what the line breaks are replaced with. Are they replaced with spaces? If I start or end a search with a space, like: body MY_BDY_PDS_S3P1/ [a-z]{3}\.[a-z]{1}/i body MY_BDY_PDS_1P3S

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael V. Sokolov writes: > >I've noticed message with such headers: > >X-Spam-Flag: YES >X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on antispam >X-Spam-Level: ** >X-Spam-Status: Yes, hits=6.0 required=5.0 tests=BAYES_99 aut

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Brian Godette
On Monday 17 November 2003 11:22 am, Bart Schaefer wrote: > My solution is this little bit of procmail: > :0 c : $HOME/.sa$LOCKEXT > > * ^X-Spam-Checker-Version:.*-$SAVERSION > * ^X-Spam-Status: Yes.*autolearn=ham > > | sa-learn --forget > > Replace $SAVERSION with whatever appears in your version_

Re: [SAtalk]

2003-11-17 Thread Michael Weber
I've had a rule filtering out that font color for several months with no complaints. I tag it with the description "Spammers favorite color" ;-) -Michael >>> "Mose', Mark" <[EMAIL PROTECTED]> 11/14/03 02:33PM >>> Folks: Anybody have any experience in flagging this type of obscuration: w

RE: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Erik Slooff
> -Oorspronkelijk bericht- > Van: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Namens > MIKE YRABEDRA > Verzonden: maandag 17 november 2003 17:37 > Aan: SPAMASSASSIN > Onderwerp: Re: [SAtalk] Upgrade or Stay? > > > on 11/17/03 10:13 AM, Todd Schuldt at [EMAIL PROTECTED] wrote: > > > S

[SAtalk] whitelist_from_rcvd

2003-11-17 Thread Martin McWhorter
I am having a problem with whitelist_from_rcvd not working. I have Spamassassin running on a redhat 9 box with sendmail 8.12.8 as our companies gateway MTA. I have MIMEdefang running as well, but with the Spamassassin portion of the defang.conf commented out and spamassassin running with the sp

Re: [SAtalk] spam stats

2003-11-17 Thread Jack Coates
On Mon, 2003-11-17 at 03:03, Thomas Kinghorn wrote: > Hi List. > > Does anyone know of any good spam stats software / scripts available. > > I tried spamstats but could not get it to work properly. > > ... A brute force approach, effective if you don't have much volume. One of these days I'll

[SAtalk] Turning off network tests individualy vs. Running spamd with -L

2003-11-17 Thread JC
Here is my local.cf: required_hits 5 rewrite_subject 1 subject_tag [SPAM] skip_rbl_checks 1 bayes_auto_learn 0 use_dcc 0 use_pyzor 0 check_mx_attempts 0 use_razor2 0 I'm pretty sure I've turned all network tests off with that, but I am seeing scan times around 30-50, very erratic times, too. Somet

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Bart Schaefer
On Mon, 17 Nov 2003, Brian Godette wrote: > > X-Spam-Status: Yes, hits=6.0 required=5.0 tests=BAYES_99 autolearn=ham > > version=2.60 > > In my opinion this is an annoying flaw in 2.6 as any spam that doesn't > hit any of the standard rules is learned as ham, if the default > auto-learn t

[SAtalk] Question about user prefs.

2003-11-17 Thread Paul Hirschorn
I have been working on a variety of scenarios of how to handle per user spam prefs on a mail gateway machine. Through trial and error found a couple of interesting things. In order to user prefs to be read from SQL I need to invoke the -u "username" flag in spamc. I have my SQL tables setup and

[SAtalk] Spam-trapping and Bayes

2003-11-17 Thread Kurt Buff
Howdy, I've just put up 2.60 on FreeBSD, and consider myself a bit of a newb, but I've been reading the man page for spamassassin, and found a section on spamtrapping. We've got 40 or so addresses of former employees that would be ideal for this purpose, but I'm not much interested in Razor/DCC, e

Re: [SAtalk] Problem with spamd spinning on bayes_toks

2003-11-17 Thread Bob Amen
David B Funk wrote: On Fri, 14 Nov 2003, Bob Amen wrote: We've been seeing a problem with spamd that happens at random times. You didn't say what version of SA you were running, so I'll assume it's 2.60. (or 2.55 using DB_File). DB_File is based upon the Berkekey_DB kit (www.sleepycat.com). Usual

RE: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread Chris Santerre
My 1700 rules CRUSHED busy servers. This is why I sort them now by order of hits. So people can prune the rules to the heavy hitters if they wish. It was the only way I could think to make them still usefull for people. Also they can adjust scores for the ones that hit the most often. --Chris "Ki

Re: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Chris Trudeau
Mike, Check out Chris Santerre's emporium... http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm CT - Original Message - From: "MIKE YRABEDRA" <[EMAIL PROTECTED]> To: "SPAMASSASSIN" <[EMAIL PROTECTED]> Sent: Monday, November 17, 2003 11:37 AM Subject: Re: [SAtalk] Upgrade o

Re: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread William Stearns
Good afternoon, Robert, On Fri, 14 Nov 2003, Robert Menschel wrote: > Friday, November 14, 2003, 12:53:45 PM, you wrote: > > WS> I'm now trying > WS> to take these domains and check the URI's in the body for them as well. > WS> My first attempt to do URI rules is at > WS> http://www.stearns.o

[SAtalk]

2003-11-17 Thread M.
Folks:   Has anybody created rule to "score" the obscuration technique that is "tunneling" through bayes? What were your results (more false positives for SPAM)?   Mark M.

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Brian Godette
On Monday 17 November 2003 08:16 am, Michael V. Sokolov wrote: > I've noticed message with such headers: > > X-Spam-Flag: YES > X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on > antispam X-Spam-Level: ** > X-Spam-Status: Yes, hits=6.0 required=5.0 tests=BAYES_99 autolearn=ha

Re: [SAtalk] DCC/Razor/RBLs

2003-11-17 Thread Matthias Fuhrmann
On Mon, 17 Nov 2003, Josh Endries wrote: [...] > Razor, Pyzor, and DCC are different or separate from using RBLs. If so, > what list(s) does SA check? have a look at: .../share/spamassassin/20_dnsbl_tests.cf > Now for the main course. DCC has a few different ways of running: > milter, daemon, pr

[SAtalk] DCC/Razor/RBLs

2003-11-17 Thread Josh Endries
I'm looking into testing Razor and/or DCC and have a few questions I can't seem to get answers to from the docs (sorry if I missed them). before I get to that I just want to clarify that using systems like Razor, Pyzor, and DCC are different or separate from using RBLs. If so, what list(s) does

Re: [SAtalk] Validate Sender Users

2003-11-17 Thread Evan Platt
--On Monday, November 17, 2003 1:08 AM +0100 Eduardo Alfonso <[EMAIL PROTECTED]> wrote: > I've been trying to configure SpamAssasin to check for the existence of > the user on the local machine that is trying to send the message and I > couldn't find how to do this. I'm not sure I understand w

Re: [SAtalk] Upgrade or Stay?

2003-11-17 Thread MIKE YRABEDRA
on 11/17/03 10:13 AM, Todd Schuldt at [EMAIL PROTECTED] wrote: > SA 2.6 with popcorn/weeds/evil rulesets added What are these rulesets and how are they added? ++ Mike Yrabedra (President) 323 Incorporated Home of MacDock.com, MacAgent.com and MacShi

[SAtalk] sa-learn problem : filename length

2003-11-17 Thread Dave Stern - Former Rocket Scientist
Anyone notice this? unable to open ./Likelyspam: at /sausr/lib/site_perl/5.8.0/Mail/SpamAssassin/ArchiveIterator.pm line 201. Learned from 251 messages. bayes: cannot open for reading /export/mailhomes/jsmith/.spamassassin/bayes_journal.old cannot write to /export/mailhomes/jsmith/.spa

RE: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Paul Hutchings
It's hard to quantify as we didn't have a great deal get through with 2.5x, but I would have to say that in the short (6 months or so) that I've been using SA, 2.60 is the best version so far.. still staggered that it's all free! regards, Paul -- Paul Hutchings Network Administrator, MIRA Ltd. Tel

RE: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Dan Kohn
2.60 works great. It works much better when you use Bayes and network checks. Note that both of the latter have been significantly improved over 2.55. - dan -- Dan Kohn -Original Message- From: Jess Anderson [mailto:[EMAIL

[SAtalk] autolearn ham ?!

2003-11-17 Thread Michael V. Sokolov
I've noticed message with such headers: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on antispam X-Spam-Level: ** X-Spam-Status: Yes, hits=6.0 required=5.0 tests=BAYES_99 autolearn=ham version=2.60 X-Spam-Report: * 6.0 BAYES_99 BODY: Bayes

RE: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Todd Schuldt
We went to SA 2.6 the day code went final, would never go back to 2.55. Noticed a marked drop in scan times and reduced false positives and false negatives immediately. SuSE 9.0 Pro OS (was RH 7.3 until recently) Communigate Pro 4.1.7 MTA SA 2.6 with popcorn/weeds/evil rulesets added Todd -O

RE: [SAtalk] SA and Microsoft Mail Internet Headers

2003-11-17 Thread Giles Coochey
Hmm.. Well I'm using Microsoft Exchange 2000 and all internet emails have their full complement of Internet Headers. Are you trying to check for spam on non-SMTP emails? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Mesedilla Sent: 17 November 200

Re: [SAtalk] Run spamd as root ?

2003-11-17 Thread Josh Endries
David B Funk wrote: spamd will not run as root, it is a security risk. If you start it as root and you do not tell it who you want to run as (IE leave off the '-u' option) it will automagically switch to user "nobody". Actually, spamd will run as root. It seems to run as root perfectly fine for me

RE: [SAtalk] Re: URI database lookup feature (was Re: Sanity chec king new uri rules?)

2003-11-17 Thread Chris Santerre
Oooh I got goosebumps! *snip out everything. it was all good* I still think that that the best way is to use the AWL code and convert it to auto-blacklist code. The experation stuff and DB stuff is already there. We would just have to put in code to parse out the URIs. This way, the more the spam

Re[2]: [SAtalk] RE: Chunks of legit text fooling Bayes

2003-11-17 Thread Robert Menschel
Hello William, Mike, Sunday, November 16, 2003, 9:49:25 PM, you wrote: WS> On Sun, 16 Nov 2003, Mike Loiterman wrote: >> > I'm getting an increasing number of messages, probably from the >> > same idiot, with just huge paragraphs of current news or giberish >> > tacked on to the end of the messa

[SAtalk] autolearn ham ?!

2003-11-17 Thread Michael V. Sokolov
I've noticed message with such headers: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on antispam X-Spam-Level: ** X-Spam-Status: Yes, hits=6.0 required=5.0 tests=BAYES_99 autolearn=ham version=2.60 X-Spam-Report: * 6.0 BAYES_99 BODY: Bayes

RE: [SAtalk] Sanity checking new uri rules?

2003-11-17 Thread Chris Santerre
> -Original Message- > From: William Stearns [mailto:[EMAIL PROTECTED] > Sent: Saturday, November 15, 2003 12:01 AM > To: Carl R. Friend > Cc: ML-spamassassin-talk > Subject: Re: [SAtalk] Sanity checking new uri rules? > > > Good evening, Carl, > > On Fri, 14 Nov 2003, Carl R. Friend w

[SAtalk] lock failed: File exists

2003-11-17 Thread German Staltari
Hi list, I would like to know how to avoid this locks and under what circumstances it happens. I'm running SA 2.60 with RH 8.0, Perl 5.8.0, DB_File-1.804-55 (RH RPM). Thanks for your help German --- This SF. Net email is sponsored by: GoToMyPC

[SAtalk] SA Check

2003-11-17 Thread Jim Knuth
Hallo und guten Tag SA-List, when I try : spamassassin -D --lint than comes: Can't locate object method "new" via package "Razor2::Client::Agent" What`s this? Thank you for help. SA 2.60 Razor 2.36 -- Viele Grüße, best regards Jim Knuth [EMAIL PROTECTED] - Zufalls-Zitat ---

Re: [SAtalk] SA and Microsoft Mail Internet Headers

2003-11-17 Thread Marcio Merlone
On Mon, 17 Nov 2003 18:07:50 +0800 "Fritz Mesedilla" <[EMAIL PROTECTED]> wrote: > > Hey I have the same problem. So I guess there is no workaround for this yet? (...) > The Headers begin by the line : "Microsoft Mail Internet Headers Version 2.0" > and most useful information has either been remo

Re: [SAtalk] Cannot write to bayes_journal

2003-11-17 Thread Terry Milnes
Marco Schnüriger wrote: Hi all I've got spamassassin 2.60 running (as root, not fine I know). Sendmail is working with spamass-milter which calls spamassassin. My system is a red hat 8.0 box. In /var/log/maillog I see those recurring events: Nov 17 10:19:36 probivirix spamd[30674]: cannot write to

RE: [SAtalk] Test Suggestion

2003-11-17 Thread Giles Coochey
Or perhaps you can use the existing HTML_FONT_INVISIBLE rule? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Sent: 15 November 2003 22:37 To: [EMAIL PROTECTED] Subject: [SAtalk] Test Suggestion HTML_FONT_COLOR_WHITE I've noticed that some spamm

[SAtalk] SPAM Trap Errror

2003-11-17 Thread Albert Whale
I'm running SpamAssassin 2.60 on Linux Mandrake using the MILTER Option for Sendmail. It's working fantastic, with the exception of tracking SPAM for a SPAM Trap. Any suggestions? - The following addresses had permanent fatal errors - "| /usr/bin/spamassassin -r -w somewhere -l /sysadm

Re: [SAtalk] Pyzor and DCC? Are they working?

2003-11-17 Thread Matthias Fuhrmann
On Mon, 17 Nov 2003, Geordon VanTassle wrote: > Hello spamassassin-talk, > > I'm moderately new to SA, and completely new to Pyzor and DCC. > I've installed Py and DCC per the instructions (I think. Not getting any > errors, anyway) and I have set SA to add DCC and Pyzor headers, but I'm >

[SAtalk] Can't get Spamassassin to work again

2003-11-17 Thread linda zuidema
If anybody can tell me what I am doing wrong, please tell me. I accidentally uninstalled Saproxy 1.2.0 from my system, don't ask me why, I just wanted to clean up some of my desktop space and didn't realize till later what I just did. So now I reinstalled the program, changed the settings in

[SAtalk] Test Suggestion

2003-11-17 Thread Matthew
HTML_FONT_COLOR_WHITE I've noticed that some spammers hide text in white so that the message looks legit by having more than just a link; they message will have a higher "count" based on the amount of text (even though you can't see it) and should bypass any filters that are setup to ignore/delete

[SAtalk] initiating spamd

2003-11-17 Thread paul . constable
I had a successful configuration running Exim 4.12 SpamAssassin 2.55 Antivir 6,22 all on SuSE 8.2. After reading the SpamAssassin website, where the suggestion was to keep pace with current releases, so I done the 'Installing or Upgrading SpamAssassin

RE: [SAtalk] SA-Learn. Clarification question.

2003-11-17 Thread Alan Munday
Martin Thanks for the response. It lead to another question If I'm using Anomy (as I am) do I need to keep a copy of the raw original or undo the anomy defang'ing? regards Alan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Radford Sent: 1

[SAtalk] spamc only handle ONE smtp session?

2003-11-17 Thread Patrick T. Tsang
Hello, I am trying to integrate the cyrus-imapd virtual user and their own user-defined filter. spamc can now specify the rule by a specified user with "-u" ie. spamc -u [EMAIL PROTECTED] eg. /etc/postfix/master.cf spamc -f -u $(recipient} -e ... The spamd is started with -x -q option to connecti

Re: [SAtalk] SpamAssassin Log??

2003-11-17 Thread James Ervin
At 06:33 AM 11/15/2003 -0500, MIKE YRABEDRA wrote: Does SA generate a log? If no, can it? It would help me do some debugging. I find that spamd logs to my maillog (/var/log/maillog in my case). If I do not use spamd I can not find any logging. If you need really intense logging from procmail,

[SAtalk] not reading local.cf

2003-11-17 Thread russell bell
spamd stopped reading /etc/mail/spamassassin/local.cf this morning after its automatic reset. I rebuilt and otherwise fiddled around, to no avail. I discovered that it read /usr/local/share/spamassassin/10_misc.cf, so I put my settings there. We had used it for a month without a problem, just

[SAtalk] spam stats

2003-11-17 Thread Thomas Kinghorn
Hi List. Does anyone know of any good spam stats software / scripts available. I tried spamstats but could not get it to work properly. Number of spams : n/a Number of clean messages: n/a Average message analysis time : 1.85 sec

[SAtalk] spamc only handle ONE smtp session?

2003-11-17 Thread Patrick T. Tsang
Hello, I am trying to integrate the cyrus-imapd virtual user and their own user-defined filter. spamc can now specify the rule by a specified user with "-u" ie. spamc -u [EMAIL PROTECTED] eg. /etc/postfix/master.cf spamc -f -u $(recipient} -e ... The spamd is started with -x -q option to

[SAtalk] SA and smail

2003-11-17 Thread Ralf Eisele
Hi, I have the following problems with SA and smail: - Mails send to an alias-Adress (e.g. info: User1,User2,User3) are not delivered to the recipients - Recipients in the CC-field don't get Mails, too Any suggestions? Zum Grusse ... Ralf Eisele - eXtension World Wide Connections GmbH

RE: [SAtalk] SA and Microsoft Mail Internet Headers

2003-11-17 Thread Fritz Mesedilla
Hey I have the same problem. So I guess there is no workaround for this yet? Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, November 17, 2003 4:10 PM To: [EMAIL PROTECTED] Subject: [SAtalk] SA and Microsoft Mai

[SAtalk] Not rewriting subject

2003-11-17 Thread Tanen
Hello, I’m running spamassassin with qmail, qmail-scanner vpopmail etc etc. But i’m wondering about a problem, if i get a message, Spam assassinc heck it, i see the X-Spam-Status: No, hits=-4.6 required=5.0, BUT, my problem is, if the message, is a SPAM, i Spamassasin see it, but not rewri

[SAtalk] emai headers

2003-11-17 Thread Fritz Mesedilla
Greetings! I'm new here. :D I just finished implementing spamassassin with amavisd on postfix. Then I noticed a lot of data on the "tail /var/log/maillog -f" concerning amavisd and spamassassin. How come the email headers don't have any data of it passing through spamassassin? I hope to be able

[SAtalk] Cannot write to bayes_journal

2003-11-17 Thread Marco Schnüriger
Hi all I've got spamassassin 2.60 running (as root, not fine I know). Sendmail is working with spamass-milter which calls spamassassin. My system is a red hat 8.0 box. In /var/log/maillog I see those recurring events: Nov 17 10:19:36 probivirix spamd[30674]: cannot write to /root/.spamassassin/ba

RE: [SAtalk] auto learn is ALWAYS no

2003-11-17 Thread Thomas Kinghorn
disregard the last mail. trashed the bayes tokens etc and rebuilt SA. Working now. Thanks all > -Original Message- > From: Thomas Kinghorn > Sent: 17 November 2003 08:34 > To: Spamassassin-Talk (E-mail) > Subject: RE: [SAtalk] auto learn is ALWAYS no > > > Hi List. > > when doing a

[SAtalk] SA and Microsoft Mail Internet Headers

2003-11-17 Thread Rikhardur.EGILSSON
Since we "upgraded" to Microsoft Exchange 2000, we´re not getting the X-Spam-* headers any more. The Headers begin by the line : "Microsoft Mail Internet Headers Version 2.0" and most useful information has either been removed or replaced by Microsoft proprietary standard.. For example the In-Re

[SAtalk] Pyzor and DCC? Are they working?

2003-11-17 Thread Geordon VanTassle
Hello spamassassin-talk, I'm moderately new to SA, and completely new to Pyzor and DCC. I've installed Py and DCC per the instructions (I think. Not getting any errors, anyway) and I have set SA to add DCC and Pyzor headers, but I'm not seeing them in my mail. Where can I start looki

[SAtalk] Spamassassin: Qmail vs Postfix

2003-11-17 Thread Zlatko
Hello,   Which email server, Qmail or POstfix in your opinion is better with Spamassassin in terms of performance, stability, speed etc...     Thank you.   Regards,   Zlatko.

Re: [SAtalk] RE: Chunks of legit text fooling Bayes

2003-11-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> I'm getting an increasing number of messages, probably from the >> same idiot, with just huge paragraphs of current news or giberish >> tacked on to the end of the message. It's obviously fooling bayes, >> but is there anything we can do about thi

RE: [SAtalk] auto learn is ALWAYS no

2003-11-17 Thread Thomas Kinghorn
Hi List. when doing a sa-learn --dump, i get the following: Use of uninitialized value in numeric lt (<) at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm line 1281. 0.000 0 0 0 non-token data: bayes db version 0.000 0 0 0 no

[SAtalk] email headers

2003-11-17 Thread Fritz Mesedilla
Greetings! I'm new here. :D I just finished implementing spamassassin with amavisd on postfix. Then I noticed a lot of data on the "tail /var/log/maillog -f" concerning amavisd and spamassassin. How come the email headers don't have any data of it passing through spamassassin? I hope to be able

Re: [SAtalk] RE: Chunks of legit text fooling Bayes

2003-11-17 Thread William Stearns
On Sun, 16 Nov 2003, Mike Loiterman wrote: > > I'm getting an increasing number of messages, probably from the > > same idiot, with just huge paragraphs of current news or giberish > > tacked on to the end of the message. It's obviously fooling bayes, > > but is there anything we can do about thi