At 02:52 AM 12/13/03 +0100, Kai Poppe wrote:
Ho list !
I just did a nice .cf that deactivates SA's old deka-step-html-percentage
tests and does a hundred tests ranging from 0% to 100% (naturally *g*).
Hope you find it useful, comments appreciated !
http://www.poppe-online.de/spamassassin/55_html_p
After setting-up spamassassin, RTFM and monitoring the list I am still very confused
about the correct way to set-up and run
spamassassin with bays (sa-learn).
The basics:
I am running Post.Office as a MTA on OS X client 10.2.8. Post.Office has a plug-in
that calls SA, checks the spam status a
On Sat, Dec 13, 2003 at 03:25:44PM +1000, Peter Kiem wrote:
> Well it definately was a LOT higher than 20 so I guess that means my
> Bayes database is stuffed :(
:(
> So I delete the bayes_seen and bayes_tok files and start again with my
> spam collection?
Sounds like a plan.
> Or would just de
Robert Nicholson wrote:
>
> Anybody who's installed A 2.61
>
> Can you tell me what the score for the following email was
>
> From: Advance in Pay <[EMAIL PROTECTED]>
> Subject:Need cash in the bank ASAP?
> Date: December 12, 2003 4:28:24 PM CST
> To:
Your double address was different if you compare it to the one below.
yours only has
one set of angle brackets.
Anyway I'm not suggesting that this is suitable criteria for
determining spam. It's just a reliable
signature for this particular spammer.
On Dec 12, 2003, at 10:09 PM, JRiley wrote:
Hi Theo,
> The # ham/spam count doesn't change during an expire. If it is 20 now,
> it was 20 before.
Well it definately was a LOT higher than 20 so I guess that means my
Bayes database is stuffed :(
So I delete the bayes_seen and bayes_tok files and start again with my
spam collection?
Or wou
On Sat, Dec 13, 2003 at 02:17:49PM +1000, Peter Kiem wrote:
> Number of spams = 20? It was over 1500 at least! It must have been
> Bayes expiring out heaps of stuff.
The # ham/spam count doesn't change during an expire. If it is 20 now,
it was 20 before.
> Should Bayes be expiring messages
Hello Regis,
Friday, December 12, 2003, 9:35:18 AM, you wrote:
RW> One type of spam I receive is a weirdly formatted HTML that is exactly 74
RW> characters wide with an "=" at the end of each line. This may be in a
RW> normal speicification. You can set your own scores. For me, the score has
R
At 08:52 PM 12/12/2003, Kai Poppe wrote:
I just did a nice .cf that deactivates SA's old deka-step-html-percentage
tests and does a hundred tests ranging from 0% to 100% (naturally *g*).
Hope you find it useful, comments appreciated !
http://www.poppe-online.de/spamassassin/55_html_perc_tests.cf
Hi,
Looking over the mrtg graphs of my server last night I noticed a period
of about 7 hours where cpu was at 100% and couldn't find any reason for
it.
I just noticed that Bayes is no longer working in my amavis-d/SA setup
and the sitewide Bayes database is about half it's normal size.
sa-learn
Then it sounds as though your SA isn't set up/ installed right.
It would seem like asking Evolution to fire up a shell to run a perl
script would be somewhat wasteful of system resources, especially is SA
is running somewhere else already. And, IIRC, sending a message through
SA twice is a Very B
At 09:39 PM 12/12/2003, Robert Nicholson wrote:
Anybody who's installed A 2.61
Can you tell me what the score for the following email was
Rather than hoping one of us has a copy of the exact same email, if you
want someone to test, why not just attach a copy of the email?
-
At 08:56 PM 12/12/2003, J. S. Greenfield wrote:
Correction...it seems to be working now. Not sure why nothing happened on
my first test message. Perhaps a minimum amount of content is required in
the message for it to trigger autolearning?
AFAIK there's no minimum content, but you need to keep
Anybody who's installed A 2.61
Can you tell me what the score for the following email was
From: Advance in Pay <[EMAIL PROTECTED]>
Subject: Need cash in the bank ASAP?
Date: December 12, 2003 4:28:24 PM CST
To: Robert David Nicholson <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]
One suggestion, if you're running Bayes site wide (particularly on
a busy server) turn on journaling, it will help to avoid file locking
problems. Add the following line to your config file:
bayes_learn_to_journal 1
Currently, this is lightly loaded test system, on which I'm just trying
to exp
On Fri, 12 Dec 2003, J. S. Greenfield wrote:
> I've been experimenting with configuration of spamassassin for sitewide
> use (in particular, using spamassassin 2.60 with sa-exim 3.1 and exim
> 4.30, under Solaris 8), and for the life of me, I can't seem to get
> bayesian classification and autolea
Correction...it seems to be working now. Not sure why nothing happened
on my first test message. Perhaps a minimum amount of content is
required in the message for it to trigger autolearning?
Anyway, thanks for the help!
Jonathan
J. S. Greenfield wrote:
Thanks. I installed BerkeleyDB, DB_F
At 08:50 PM 12/12/2003, J. S. Greenfield wrote:
Thanks. I installed BerkeleyDB, DB_File, and corrected bayes_path as you
indicated. No apparent change in behavior.
Any other thoughts?
try manual learning using sa-learn with debug mode on, see if it complains..
sa-learn -D --ham some_single_em
Ho list !
I just did a nice .cf that deactivates SA's old deka-step-html-percentage
tests and does a hundred tests ranging from 0% to 100% (naturally *g*).
Hope you find it useful, comments appreciated !
http://www.poppe-online.de/spamassassin/55_html_perc_tests.cf
REgards
Kai
--
On Fri, 2003-12-12 at 19:44, Chris Thielen wrote:
> I haven't updated the version history because exit0 appears to be down,
> but the main link (http://sandgnat.com/cmos/cmos.pl) or the cgi
Er... I'm dumb. Make that http://sandgnat.com/cmos/obfu.pl
... sure wish this list thing had a cancel but
Thanks. I installed BerkeleyDB, DB_File, and corrected bayes_path as
you indicated. No apparent change in behavior.
Any other thoughts?
Thanks,
Jonathan
Matt Kettler wrote:
At 06:37 PM 12/12/2003, J. S. Greenfield wrote:
bayes_path /etc/mail/spamassassin/bayes
bayes_file_mode
On Fri, 2003-12-05 at 12:05, Chris Thielen wrote:
> [EMAIL PROTECTED] said:
>
> > If I enter a single-character string in the "easy mode" text box, the
> > rules will somehow manage to drop the character from the obfuscated
> > rules. I.e. for the input "d" I get the regex /(?!\bd\b)\b/i (and not
On Fri, 2003-12-05 at 13:22, Chris Thielen wrote:
> Adam D. Lopresto said:
> >> My solution was to split the tokens into word/nonword classes and group
> >> them. The characters in the word character class get the \b word
> >> boundary
> >> check, while the non-word character classes simply match
On Fri, 2003-12-05 at 14:37, Chr. von Stuckrad wrote:
> Hi!
>
> I just found a perfectly legitimate E-Mail
> which neighter contained Spam-Text nor any html
> in my Spambox, hit by two 'ofsucation checks'.
>
> One I had generated with https://sandgnat.com/cmos/cmos.jsp
> in response to the ever i
> "Scott Williams , Area4" wrote:
>>
>> If you see two spammers hang hopefully a 100 will stop or atleast move
>> off shore.
>
> I was just thinking, I know spam is a big problem, and all that, but
> reading the article, I don't know. I hate to sound schizophrenic, but I
> mean, surely these guy
"Scott Williams , Area4" wrote:
>
> If you see two spammers hang hopefully a 100 will stop or atleast move
> off shore.
I was just thinking, I know spam is a big problem, and all that, but
reading the article, I don't know. I hate to sound schizophrenic, but I
mean, surely these guys are not "
At 05:10 PM 12/12/2003, Dan Tappin wrote:
Hi Matt,
I created in a custom .cf file in /etc/mail/spamassassin
Dan
Hmm, then that should work correctly...
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or
Hi All
I have been running spamassassin for my .qmail for a while with excellent
success rate. But now I like to use it for a group alias
This is how I have it set up
# .qmail-group
| /usr/local/bin/spamassassin | forward [EMAIL PROTECTED]
Is it a valid setup ? I did receive a test email se
At 06:37 PM 12/12/2003, J. S. Greenfield wrote:
bayes_path /etc/mail/spamassassin/bayes
bayes_file_mode 0666
where both the bayes_path directory, and the spamd home directory (it's
parent), are owned by spamd, and world writeable, at this point, for good
measure.
There's part
At 06:33 PM 12/12/2003, pacho baratta wrote:
I have a fresh installation of SA, a default local.cf (attached) and
nothing more. Now SA acts great on GTUBE test, but when I forward to my
new SA protected account a spam message nothing happens.
What's the trick?
"forwarded spam" is not the same as
I've been experimenting with configuration of spamassassin for sitewide
use (in particular, using spamassassin 2.60 with sa-exim 3.1 and exim
4.30, under Solaris 8), and for the life of me, I can't seem to get
bayesian classification and autolearn working.
No matter what I do, my X-Spam-Status
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
"Mike Vanecek" writes:
>On Fri, 12 Dec 2003 14:30:09 -0800, Justin Mason wrote
>
>[snip]
>
>> >http://bugzilla.spamassassin.org/show_bug.cgi?id=2569
>>
>> Missed that one; I've just set it to be fixed for 2.62. It seems pretty
>> complex; either the
If you see two spammers hang hopefully a 100 will stop or atleast move
off shore.
SCott
At 01:40 PM 12/12/2003, Larry Rosenman wrote:
--On Friday, December 12, 2003 14:33:34 -0500 Greg Cirino - Cirelle
Enterprises <[EMAIL PROTECTED]> wrote:
No noticeable decrease in spam here...
did the
Title: how it works
I have a fresh installation of SA, a default local.cf (attached) and nothing more. Now SA acts great on GTUBE test, but when I forward to my new SA protected account a spam message nothing happens.
What’s the trick?
pacho
El dom, 30-11-2003 a las 01:28, Chris Thielen escribió:
> Dr Aldo Medina said:
> > Using Debian Sarge with spamassassin-2.60-2 deb package and
> > procmail-3.22-7.
> >
> > Even when it used to work, since a few weeks it seems like spamassassin
> > doesn't follow my local.cf rules. For example, even
On Fri, 12 Dec 2003 14:30:09 -0800, Justin Mason wrote
[snip]
> >http://bugzilla.spamassassin.org/show_bug.cgi?id=2569
>
> Missed that one; I've just set it to be fixed for 2.62. It seems pretty
> complex; either there's several failure cases, or nobody has yet done
> enough diagnosis to get to
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Vivek Khera writes:
>Great news...
>
>Any idea on how a rather nasty bug can be addressed before the next
>release? I had hoped it would be addressed in 2.61 (I've been away
>from the list for a while so I didn't see the pre-announcements). It
>appa
Hi Matt,
I created in a custom .cf file in /etc/mail/spamassassin
Dan
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Matt
> Kettler
> Sent: Friday, December 12, 2003 1:05 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Rule Help
> "JV" == Jonathan Vanasco <[EMAIL PROTECTED]> writes:
JV> AOL IM
JV> Maybe its an ichat only thing -- because everyone i know running iChat
JV> gets 10+ AOL IM spams a day. I'm averaging 15.
zero for me, and I run iChat. none on my yahoo, either. i
occasionally get some troller randomly
On Fri, Dec 12, 2003 at 12:33:26PM -0800, sabat wrote:
> The spamassassin manpage talks about setting up an alias to report spam,
> piping the mail to spamassassin -r. Since this reports to DCC and Razor,
> shouldn't one clean up the headers first? Isn't there risk of getting
> your own domain n
Great news...
Any idea on how a rather nasty bug can be addressed before the next
release? I had hoped it would be addressed in 2.61 (I've been away
from the list for a while so I didn't see the pre-announcements). It
apparently is affecting a fair number of people aside from myself:
http://bug
Archive of this:
http://marc.theaimsgroup.com/?t=10613675441&r=1&w=2
Analyze letter frequency for normal words, and detect non-normal letter
frequency of gibberish.
--luke
> I have noticed that many SPAM emails, end with seversl lines of gibberish,
> such as:
>
> lvwpdfobv qkviylqr qlm
To any of you running SpamAssassin 2.60+ with SendMail and spamass-milter
0.2.0 I am curious as to whether the -notfirsthop rules (such as Dynablock)
are working correctly for you. (I'm aware of its move to SORBS) When
SpamAssassin processes email through spamass-milter it's rarely matching
Dynab
Anybody have any suggestions??
--Keith
On Thu, 4 Dec 2003, Keith Olmstead wrote:
Date: Thu, 4 Dec 2003 14:32:56 -0500 (EST)
From: Keith Olmstead <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [SAtalk] SA + Openldap problem
---
This SF.n
At 04:06 PM 12/12/2003, Ken Gordon wrote:
BigEvilList_170 catches vnunet.com. Is that appropriate?
Depends on what you consider "appropriate"..
bigevil is autogenerated from some piles of spam. As such, it's going to be
prone to FP cases.
Bounce a message to Chris S and ask him to double-check h
In Evolution:
Tools->Filters->Add
If:
"Specific Header" "X-Spam-Status" is "Yes"
Then:
Move to Folder "Junk"
OK.
The search for the specific header is case sensitive... make sure you're
looking for hte right thing. Also, I assume that Evo will strip the
trailing ":" from the header, so no need to
BigEvilList_170 catches vnunet.com. Is that appropriate?
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash
At 03:33 PM 12/12/2003, sabat wrote:
The spamassassin manpage talks about setting up an alias to report spam,
piping the mail to spamassassin -r. Since this reports to DCC and Razor,
shouldn't one clean up the headers first? Isn't there risk of getting your
own domain name into the spam report?
The spamassassin manpage talks about setting up an alias to report spam,
piping the mail to spamassassin -r. Since this reports to DCC and Razor,
shouldn't one clean up the headers first? Isn't there risk of getting
your own domain name into the spam report? (Or at least into your own
Bayes db?
> > > I agree. It seems funny to do a check for SPAM and not do
> > > any sort of check for open relay.
>
> I'm no expert on Received headers, but:
>
> Received: from 212.214.136.47 (EHLO smtp-fe2.ballou.se)
> (212.214.136.47) by mta128.mail.sc5.yahoo.com with SMTP; Thu,
> 11 Dec 2003
>
> I had a problem earlier where SA was hanging up incoming messages. the
> spamd process would spawn but never finish till my box was 100% busy.
>
> apparently the problem had to do with an upgrade of 2.44 to 2.60. I
> removed
> the old whitelist and bayes files for all my users and spamd recreat
Hello there (I'm pretty newbiew on SA) and maybe my questions are stupid,
but any way,
1. When I run SA-Lear on HAM and SPAM confirmed directories (let's talk
about 800 mails on each one), but after that I still getting some SPAM that
aren't detected, If I wan to run SA-learn again, do I have to
At 02:50 PM 12/12/2003, Dan Tappin wrote:
Here is a custom rule for a PayPal spoof virus that is going around. I
can't get this to trigger a hit in SA. I have linted my
rules and my config files are being loaded properly.
Which configfile did you add your rule to? local.cf or user_prefs?
Do you
Dan Tappin wrote:
> Here is a custom rule for a PayPal spoof virus that is going around.
I missed that one, try this out, they work for all previous scams I've seen.
header __RCVD_PAYPAL Received =~ /paypal\.com/i
header __FROM_PAYPAL From =~ /paypal\.com/i
uri __URI_PAYPAL /paypal\.com/i
head
Gentian, to help alleviate mail processing do also try
any of a number of RBLs out there. these tend to be IP-based so your
server will never actually receive mail.
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
JRileySent: Wednesday, December 10,
the site says one can enter an e-mail address OR a domain name, but if I
enter a domain name (unchecking the Username and FullAddress checkboxes) it
complains:
: The input was not a valid email address as defined by RFC822. Please go
: back and enter an address which conforms to RFC822
I want to
Here is a custom rule for a PayPal spoof virus that is going around. I can't get this
to trigger a hit in SA. I have linted my
rules and my config files are being loaded properly.
header PAYPAL_VIRUS_001 Subject =~ /YOUR PAYPAL\.COM ACCOUNT EXPIRES/i
describe PAYPAL_VIRUS_001 Wonderfull PayPal
--On Friday, December 12, 2003 14:33:34 -0500 Greg Cirino - Cirelle
Enterprises <[EMAIL PROTECTED]> wrote:
No noticeable decrease in spam here...
did they get the right guys?
Yeah, but there are tons more to get :-(.
the Policy Enforcement Director where I work was glad to see them caught,
b
No noticeable decrease in spam here...
did they get the right guys?
g
- Original Message -
From: "Scott Rothgaber" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 12, 2003 2:20 PM
Subject: [SAtalk] Virginia Busts Spammers
| http://www.cnn.com/2003/TECH/internet/12/12
Thanks for the insight.
When I run mass-check-results-to-mbox I get:
---
# sort -rn +1 ham.log | head -20 | ./mass-check-results-to-mbox
open /usr/local/src/confham.1173754 failed: at ./mass-check-results-to-mbox
line 125, <> line 1.
X-Mass-Check-Warning: open /usr/local/
http://www.cnn.com/2003/TECH/internet/12/12/spam.charges/index.html
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything fr
I get the "justified" part of your rule, but what about the rule references
HTML? I'd consider renaming your rule to JUSTIFIED_74_EQUAL or some such.
> -Original Message-
> From: Regis Wilson [mailto:[EMAIL PROTECTED]
> Sent: Friday, December 12, 2003 9:35 AM
> To: [EMAIL PROTECTED]
> Sub
On 12/12, Steve Thomas wrote:
> spamassassin -t < email.txt
On 12/12, Matt Kettler wrote:
> pipe it through spamassassin -t
>
> Note: -t mode FORCES sa to generate a report, and it WILL contain text
Works beautifully, thank you both. I swear I looked at the man page...
don't know how I missed
I had a problem earlier where SA was hanging up incoming messages. the
spamd process would spawn but never finish till my box was 100% busy.
apparently the problem had to do with an upgrade of 2.44 to 2.60. I removed
the old whitelist and bayes files for all my users and spamd recreated them
and
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Barb Bautista
> Sent: Wednesday, December 10, 2003 9:47 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] SA tests performed
>
> Thanks T,
>
> Can you recommend a good site for building/customi
Barb Bautista said:
> Thanks T,
>
> Can you recommend a good site for building/customizing rule sets.
>
> Thanks.
A good place to get started is www.exit0.us
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX
For those times that I'm on the road and not able to fire up Evolution
(bummer...), I use SquirrelMail on my server for webmail access. It's
fast, clean, and It Just Works(tm).
If you don't use Procmail on your IMAP server, it's VERY simple to add a
rule to Evo to grab messages with the *SPAM
At 10:50 AM 12/12/2003, Kai Poppe/Redaktion SDCE wrote:
Nope, mine does not. SpamAssassin 2.61 is the version.
Hmm, you're right..
It looks like that rounding behavior is hard-coded.. you'd have to modify
the source code to change it.
---
Th
from looking at the eval test that runs for that rule, it checks against
an English dictionary. Maybe you should disable the test
score SUBJ_HAS_UNIQ_ID 0
Mike
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Mika A
> Sent: Friday, December 1
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Smart,Dan writes:
> I'm trying to do the mass-check corpus cleanup using the method in
> CORPUS_SUBMIT file. My hard-sorted spams and hams are stored in MBOXs.
>
> I'm assuming that the scripts: mass-check-results-to-mbox, mboxget, and
> extract-mes
--On Friday, December 12, 2003 1:31 PM -0500 Rubin Bennett
<[EMAIL PROTECTED]> wrote:
Now I have *no* rules in my Evolution
filters, and a simple .procmailrc in my home directory that grabs all
the X-Spam-Status: Yes marked mails and dumps them into my "Junk" IMAP
folder.
After getting frustrated
--On Friday, December 12, 2003 1:35 PM -0500 [EMAIL PROTECTED] wrote:
> How can I see a spamassassin report of an email ? I'd like to do
> something like pipe the email through a command.
spamassassin < filename1 > filename2
filename1 is the input, filename2 is the output. Or alternately,
spa
Hi.
503 is the userid of the spamd user.
Since the first header indicates the localhost, my guess is that the mail
was sent from the postfix machine itself, and not from another machine using
it as a relay.
Best regards.
Bruno Guerreiro
-Original Message-
From: Gary Funck [mailto:[EMAIL P
Thanks for the reference!
If anyone wants to use blackhole.securitysage.com in SpamAssassin,
here's how:
header BLACKHOLE_SSAGE eval:check_rbl_from_host('ssage',
'blackhole.securitysage.com')
describe BLACKHOLE_SSAGE Blacklisted as per
blackhole.securitysage.com
tflags BLACKHOLE_SSAG
hi
spamassassin,
i have to write an essay about
spamassassin. my english is not very good. so is there a chance to get a german
translation of your website or some other information??
greetings
Stephen,
| RH9, amavisd-new (p6), spamassassin 2.6 :
|
| I believe the config path that spamassassin is using is
| /usr/share/spamassassin.
| However, I want it to use my chrooted amavis directory of
| /var/amavisd/usr/share/spamassassin.
|
| How and where can I change this ?
You need to change
Compiled list of domains that are known spammers and compiled list of various subject
lines used by spammers.
http://www.exit0.us/index.php/SpamDomainBlackList
or
http://www.spamfighter.org/bb/article.php?42.0
---
This SF.net email is sponsore
Hi all,
(Firstly, I'm not on this list, I'm only using it to log a bug.
can you please reply directly to me, Thanks)
I am seeing rather bad memory leak issue running spamd on Solaris 9
(sparc).
I have Exim + Exiscan MTA, this allows parsing the messages off to SA
for scanning,
it's been runnin
"Hamilton, Kent" <[EMAIL PROTECTED]> wrote in message
news:<[EMAIL PROTECTED]
com>...
> On your Linux box create three mail aliases (In sendmail syntax)
> spamlearn:"|/usr/local/bin/sa-learn --spam --norebuild"
> hamlearn: "|/usr/local/bin/sa-learn --ham --norebuild"
> spamfor
Hi all,
I recently moved from SpamAssassin 2.2 to 2.6 and I have an error which
has totally stumped me.
SpamAssassin is catching spam (see below) but every now and then I don't
actually get the original spam message, 60 % of the time I do, it's very
temperamental.
Eg:
Dec 11 14:34:44 spamd[1059
I read through the readme and made a config change
to the way procmail and spamassassin work together, however I now get the
error:
couldn't create or rename temp file.
"/var/spool/mail/il -oi [EMAIL PROTECTED]
I have a default /etc/procmailrc with the
lines
:0fw: spamassassin.lock
* <
I've been using SA for a little while now but am still not up to speed on
all it can do. We are mostly a Windows shop here so we have very few techs
who know Linux that well. We're using SPAMD to filter email and use a
Windows-based email proxy to send/receive info to/from the SPAMD host.
It d
Joop,
how come our SA 2.60 matches this subject-header:
Subject: Opetusteknologia-valmistelua
with SUBJ_HAS_UNIQ_ID-rule?
The subject is perfectly legit finnish and doesn't seem that unique...
Thanks!
--
Mika Aleksandroff - IT Services, Kymenlaakso Polytechnic
--
hi all,
will shortly be installing SA 2.61.
i'd like to have a report sent to me with a breakdown of SA's activity,
either daily or weekly or whatever.
ideally, for it to list Sender, Recipient, Subject and Spam Score for all
mails that have been marked as Spam.
was thinking of writing a shell
Per,
| I'm having trouble with a newly installed server.
| OpenBSD 3.4 GENERIC#0 i386
| amavisd-new latest stable
| amavisd is running chroot'ed
|
| /usr/local/libdata/perl5/site_perl/i386-openbsd/Net/DNS/RR/.pm
| exists on the system.
| Not all mails will trigger the following error, I'm c
On Fri, Dec 12, 2003 at 01:35:09PM -0500, [EMAIL PROTECTED] is rumored to have said:
>
> How can I see a spamassassin report of an email ? I'd like to do something
> like pipe the email through a command.
spamassassin -t < email.txt
--
"I've had a wonderful time, but this wasn't it."
- Grouc
One type of spam I receive is a weirdly formatted HTML that is exactly 74
characters wide with an "=" at the end of each line. This may be in a
normal speicification. You can set your own scores. For me, the score has
been wildly successful, 3000 spam in a week, no ham.
full JUSTIFIED_HTML
Hi,
Can any one tell me the procedure to configure spamassassin with
sendmail. I have sendmail 8.12.8 running, my case is a relay
server(HUB) with no local accounts. i have installed spamassassin which
runs as spamd. I want all the spam mails figured should be redirected to
one of the var/spool/ma
What I want to do is skip an message that originates from our domain...
I have the following in the /etc/procmailrcfile:
:0:
* [EMAIL PROTECTED]
${DEFAULT}
# From system.rose-hulman.edu
:0:
* [EMAIL PROTECTED]
${DEFAULT}
#
This seems to work most of the time we when certain messages have
rose-hul
Thanks T,
Can you recommend a good site for building/customizing rule sets.
Thanks.
-Original Message-
From: Terry Milnes [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 10, 2003 10:45 AM
To: Barb Bautista
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] SA tests performed
Barb Bautis
Hello. My first post here, so be gentle ;-)
I got Spamassassin 2.61 installed and it's working. Bayes is enabled, but
when I try to train it or do anything with sa-learn I get something like
this:
Use of uninitialized value in numeric lt (<) at
/usr/lib/perl5/site_perl/5.8.1/Mail/SpamAssassin/Baye
How can I see a spamassassin report of an email ? I'd like to do something
like pipe the email through a command.
With spamprobe I do "spamprobe -T score", and it tells me everything it
thought about the email.
In my SA preferences I have:
rewrite_subject 0
report_safe 0
clear_headers
add_heade
What exactly are you trying to do? I use Sendmail->Procmail->SA on my
mailserver (Mandrake 9.2). I access my email via IMAP using Evolution
1.4. I used the Evolution filters successfully for quite some time
until I started using SA. Now I have *no* rules in my Evolution
filters, and a simple .p
> >
> > Ah. That's what I was starting to think as I typed up my
> > original message.
> >
> > I agree. It seems funny to do a check for SPAM and not do
> > any sort of check for open relay.
I'm no expert on Received headers, but:
Received: from 212.214.136.47 (EHLO smtp-fe2.ballou
I've tried everything I can think of to get the Evolution (1.4) mail
client to use SA (2.60) as a filter for spam mail but have come up MT.
The Evo FAQ states that "Use Specific Headers" and "X-Spam-Flag" (Yes)
will work but it doesn't. Neither does any other "X-*" header value of
the many I've tr
At 11:12 AM 12/12/2003, Nayana Hettiarachchi wrote:
i have made few customs rules and i was playing around with them little
more and i was kinda curious if a rule like this will actually work, as
per my experiment i noticed that it is not working.
meta TTOFFICE_BLOCK (__TOOFFICE && (!_
Matt Kettler Sent: Friday, December 12, 2003 11:16 AM
> At 10:10 AM 12/12/2003, Colin A. Bartlett wrote:
> >I have found that AWL works quite well and I keep it enabled. The only
time
> >that it is a pain is if I send myself or someone else a test using GTUBE.
> >That f's up the AWL until I send a
At 09:34 AM 12/12/2003, Smart,Dan wrote:
I'm assuming that the scripts: mass-check-results-to-mbox, mboxget, and
extract-message-from-mbox are used to help in this process to check and
purge improperly sorted mails out of the mbox. How are these used? Don't
see any docs anywhere, and nothing in t
> >I'm just curious. I've NEVER seen Yahoo! tagged bulk email
> with SA tags.
>
> Odds are the open relay that the spammers sent the mail
> through was running SA.
>
> Yes, you'd think anyone using SA would check for open relay,
> but it does
> happen.. I've gotten spam like this before.
Hm
Oops. I sent my reply directly to Matt instead of the list...
-Joe
> -Original Message-
> From: Kang , Joseph S.
> Sent: Friday, December 12, 2003 10:17 AM
> To: 'Matt Kettler'
> Subject: RE: [SAtalk] Mysterious SA tags in SPAM message?
>
>
> > From: Matt Kettler [mailto:[EMAIL PROTEC
1 - 100 of 121 matches
Mail list logo
