RE: [SAtalk] importing spam from exchange users for sa-learn?

The way we have it setup is we have a public folder on the exchange server for spam (and/or ham) and there is a script on our spam server that reads the public folder, creates a file for each message, and deletes the message from the public folder. Then all you have to do is run sa-learn on the

RE: [SAtalk] SpamAssassin and SendMail

On Wed, 17 Dec 2003, Steven Rocha wrote: > Scott, > I think there is some merit and I was thinking the same thing. I have > made some changes to Sendmail, Mimedefang, and SA for my installation > and think a configuration repository that puts them all together would > be great. > > I would be

[SAtalk] HTML emails not being scanned and scored correctly

Hello Does anyone know what would cause Spam Assassin to not properly scan and score HTML emails? We just installed Spam Assassin and it is not properly scanning and scoring HTML emails. Thanks, Mike --- This SF.net email is sponsored by: IBM

Re: [SAtalk] RBL timeouts

On Wed, 2003-12-17 at 15:03, [EMAIL PROTECTED] wrote: > For some reason the following RBL are timing out, while others are > working. Is there a way to avoid checking the ones timing out? I am > running RH 9/SA 2.61/Sendmail. > > debug: RBL: success for 8 of 17 queries > debug: RBL: timeout for ds

Re: [SAtalk] Test hit results report or log

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Chris, Tuesday, December 16, 2003, 9:34:48 PM, you wrote: CA> Is there a way to get a report or log of the test CA> results hits that spamassasin finds. ... I've begun to do something like this using the mass-check functionality within SA's ma

Re: [SAtalk] importing spam from exchange users for sa-learn?

Hi Mensaje citado por Aaron Everett <[EMAIL PROTECTED]>: > We are running RedHat 7.3/Postfix/Amavis-new/SpamAssassin 2.61 and have > Razor2 and DCC working. This box sits in front of our corporate > Exchange environment with the sole task of tagging spam. Postfix sends > to Amavis, which calls

RE: [SAtalk] regex expansion tool

have you looked at the regex coach? Available for Linix & win32 Mike > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Kirk Moore > Sent: Wednesday, December 17, 2003 6:40 PM > To: Gary Funck; Spamassassin List

Re: [SAtalk] regex expansion tool

On Wed, Dec 17, 2003 at 03:39:58PM -0800, Kirk Moore wrote: > Sorry, What I am looking for is a tool to take an existing regex rule and > expand it out and show all the expresions that it looks for., man regex -- Dan Wilder <[EMAIL PROTECTED]> --

Re: [SAtalk] regex expansion tool

Sorry, What I am looking for is a tool to take an existing regex rule and expand it out and show all the expresions that it looks for., Kirk - Original Message - From: "Gary Funck" <[EMAIL PROTECTED]> To: "Spamassassin List" <[EMAIL PROTECTED]> Sent: Wednesday, December 17, 2003 3:02 PM

Re: [SAtalk] regex expansion tool

On Wed, Dec 17, 2003 at 02:37:46PM -0800, Kirk Moore wrote: > Is there a tool that would take and expand out a regex rule showing all the > possibilities that rule makes? If I recall my Computer Science classes correctly, the answer is no. Which doesn't mean the trivial regexps aren't possible to

[SAtalk] importing spam from exchange users for sa-learn?

We are running RedHat 7.3/Postfix/Amavis-new/SpamAssassin 2.61 and have Razor2 and DCC working. This box sits in front of our corporate Exchange environment with the sole task of tagging spam. Postfix sends to Amavis, which calls SA, then hands back to Postfix which sends to Exchange. There is n

RE: [SAtalk] regex expansion tool

I think I got the original pointer from this list; maybe this program is what you're looking for? http://weitz.de/regex-coach/ Abstract The Regex Coach is a graphical application for Linux and Windows which can be used to experiment with (Perl-compatible) regular expressions interactively. It ha

RE: [SAtalk] 'Bad' HTML tag obfuscation

> > -Original Message- > > From: Scot E. Wilcoxon [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, December 17, 2003 3:13 PM > > To: Dallas L. Engelken > > Cc: SA-Talk; [EMAIL PROTECTED] > > Subject: RE: [SAtalk] 'Bad' HTML tag obfuscation > > > > > > > ...you need backhair rules from jennif

Re: [SAtalk] regex expansion tool

Sometime in December Kirk Moore assaulted the keyboard and produced: | Hello everyone. | | Is there a tool that would take and expand out a regex rule showing all the | possibilities that rule makes? i'm not quit sure i understand this question. for example the regular expression m#\d\d# would

[SAtalk] regex expansion tool

Hello everyone…   Is there a tool that would take and expand out a regex rule showing all the possibilities that rule makes?   Kirk

[SAtalk] Re: bayes permission errors

On 06 Dec 2003, at 16:19, Lukreme wrote: [stuff] I seem to keep having problems with bayes and permissions: bayes: bad permissions on journal, can't read: /home/kremels/.spamassassin/bayes_journal Learned from 0 message(s) (0 message(s) examined). bayes: bad permissions on journal, can't read:

Re: [SAtalk] SpamAssassin and SendMail

There is already a very well documented sendmail/SA/MIMEDeFang how-to available. Links to it and other sendmail/procmail/postfix SA articles are available on www.spamfighter.org anyway, heres the sendmail/SA/MIMEDeFang how-to: http://www.rudolphtire.com/mimedefang-howto/ -JR - Original Messa

RE: [SAtalk] RBL timeouts

thanks -Original Message- From: Larry Gilson [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 17, 2003 4:09 PM To: 'Richard Humphrey'; 'Spamassassin-List' Subject: RE: [SAtalk] RBL timeouts Just find the testname: http://useast.spamassassin.org/tests.html I'll just use SORBS as an

RE: [SAtalk] RBL timeouts

Just find the testname: http://useast.spamassassin.org/tests.html I'll just use SORBS as an _example_: Test name: RCVD_IN_SORBS local.cf or custom .cf entry: score RCVD_IN_SORBS 0 Setting the score to 0 will prohibit the test from running. --Larry > -Original Message- > From: Ri

Re: [SAtalk] Anyone been able to get SA to work with SCO Office 2.x ?

--On Wednesday, December 17, 2003 15:52:46 -0600 JD White <[EMAIL PROTECTED]> wrote: We have been trying to get SA to work with SCO Office 2.x for about 2 weeks and can't get it to function correctly. Please no hate mail we purchased it before SCO filed the law suite and we don't have the mone

RE: [SAtalk] RBL timeouts

Sorry for my ignorance but what would be the syntax for scoring these to 0 in my local.cf? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Kettler Sent: Wednesday, December 17, 2003 3:38 PM To: [EMAIL PROTECTED]; Spamassassin-List Subject: Re:

[SAtalk] Anyone been able to get SA to work with SCO Office 2.x ?

We have been trying to get SA to work with SCO Office 2.x for about 2 weeks and can't get it to function correctly. Please no hate mail we purchased it before SCO filed the law suite and we don't have the money to change at this time. --- Thi

RE: Permission Denied (was Re: [SAtalk] Desperate Plea - RESOLVED...almost)

I did get this fixed. Change owner and group to the user running spamd. Works great then. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raquel Rice Sent: Wednesday, December 17, 2003 3:46 PM To: [EMAIL PROTECTED] Subject: Permission Denied (was Re:

Re: [SAtalk] Need a rule for IE Exploit

However On Thu, Dec 11, 2003 at 03:51:17PM -0800, [EMAIL PROTECTED] wrote: > This may be redundant to the existing rule: > 2.4 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname That rule checks for an %-escape without preceding whitespace. There's a comment from Theo about # Have

Re: [SAtalk] RBL timeouts

At 04:03 PM 12/17/2003, [EMAIL PROTECTED] wrote: For some reason the following RBL are timing out, while others are working. Is there a way to avoid checking the ones timing out? I am running RH 9/SA 2.61/Sendmail. you can disable them by setting their score to 0. ---

RE: [SAtalk] 'Bad' HTML tag obfuscation

> -Original Message- > From: Scot E. Wilcoxon [mailto:[EMAIL PROTECTED] > Sent: Wednesday, December 17, 2003 3:13 PM > To: Dallas L. Engelken > Cc: SA-Talk; [EMAIL PROTECTED] > Subject: RE: [SAtalk] 'Bad' HTML tag obfuscation > > > > ...you need backhair rules from jennifer. > > Ah, so

Re: [SAtalk] unix dgram message

On Wed, Dec 17, 2003 at 11:20:03AM -0500, Mark Wendt (Contractor) wrote: > I recently upgraded from 2.55 to 2.61, and upon starting spamd, I get this > message: unix dgram connect: Socket operation on non-socket at > /usr/local/bin/spamd line 282. I'm running Solaris 8 on the server, latest > p

Re: [SAtalk] Problem installing Win32 version of Spam Assassin - nmakeerrors

Samuel, Michael Bell (the author of the HOWTO) recommends using ActivePerl 5.6.1 as that's what he's tested with, using builds 631, 632, 633, and 635. ActiveState hsa build 635 available for download. From the HOWTO: "ActiveState now has Perl 5.8 available. SpamAssassin currently has a few issu

[SAtalk] RBL timeouts

For some reason the following RBL are timing out, while others are working. Is there a way to avoid checking the ones timing out? I am running RH 9/SA 2.61/Sendmail. debug: RBL: success for 8 of 17 queries debug: RBL: timeout for dsbl after 12 seconds debug: RBL: timeout for dsbl after 12 seconds

RE: [SAtalk] SpamAssassin and SendMail

> --On Wednesday, December 17, 2003 10:47 AM -0800 Scott Harris > <[EMAIL PROTECTED]> wrote: > >> I too love this combo and have a question for the group. I was thinking >> of documenting my configuration over the holiday break. Do people >> generally feel this would be useful? Basically, I don'

[SAtalk] Problem installing Win32 version of Spam Assassin - nmake errors

Hello, I hope I can get some help from the experts. I tried to install Spamassassin on our Windows 2000 Professional server. I installed ACtivePerl 5.8.1.807 smoothly. Nmake 1.5 was installed with out any problem. I got spamassassin 2.61 from the site and got the perl makefile.pl done. I followe

RE: [SAtalk] could not locate your pod2man program

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Muhannad Tamemi Sent: Wednesday, December 17, 2003 2:11 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] could not locate your pod2man pro

Re: [SAtalk] Report scripts?

> Is it possible to generate, say, daily and weekly reports of spamassains > statistices? If so, where are teh logfiles stored? > > And does anyone have sample scripts to start from? I use a FreeBSD system, and I dropped the following Perl script into my /etc/periodic/daily/ directory. It could be

RE: [SAtalk] SpamAssassin and SendMail

Yeah that was the other way! Milter. I was going to do that. But again, wanted some of the cool features I could do with procmail down the line. I have also heard nothing but great things about the mimedefang method. So much that I thought about changing over, but eh, if it ain't broke..

[SAtalk] Report scripts?

Is it possible to generate, say, daily and weekly reports of spamassains statistices? If so, where are teh logfiles stored? And does anyone have sample scripts to start from? -- "They that would give up essential liberty for temporary safety deserve neither liberty nor safety."

RE: [SAtalk] Desperate Plea - RESOLVED...almost

Thank you to everyone who helped with this. I have gotten a system to function very well, mail is moving through very quickly and seems to be doing its job. I do however have a couple of problems. First of all I am getting an awful lot of: Dec 17 14:08:30 nabu spamd[31410]: Cannot open bayes da

RE: [SAtalk] bigevil 2.04 posted

Actually my email gateway is behind a firewall :) I do some really crazy stuff because I'm a paranoid security nut. Never on the same machine. 1 machine for 1 job. No other processes, no remote access, local only. I don't firewall a lot. You have to really bother me to get placed in the list.

Re: [SAtalk] could not locate your pod2man program

i went to www.spammassassin.org then i went to new web site , i clicked on FAQ and i got empty page !! nothing and i could not find the solution . can you help me plz >From: Theo Van Dinter <[EMAIL PROTECTED]> >To: Muhannad Tamemi <[EMAIL PROTECTED]> >CC: [EMAIL PROTECTED] >Subject: Re: [SAtalk]

RE: [SAtalk] SpamAssassin and SendMail

I use SA + SendMail + SpamAss-Milter on FreeBSD.   1. Install FreeBSD   2. Install SpamAssassin from the ports collection: cd /usr/ports/mail/p5-Mail-SpamAssassin; make install clean;   3. Install SpamAss-Milter cd /usr/ports/mail/spamass-milter/; make install clean;   I then follow the instruct

RE: [SAtalk] bigevil 2.04 posted

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Gary Funck > Sent: Wednesday, December 17, 2003 11:51 AM > To: Spamassassin List > Subject: RE: [SAtalk] bigevil 2.04 posted > > > Hi Chris, welcome back. I've been running with the prior > ver

RE: [SAtalk] 'Bad' HTML tag obfuscation

> ...you need backhair rules from jennifer. Ah, so that's what happened to JenniCam. --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Le

RE: [SAtalk] bigevil 2.04 posted

Hi Chris, welcome back. I've been running with the prior version of BigEvil, and their working great. Thanks for all your hard work. quick question: > For fun, check out http://www.rollie.biz/ , yeah that IP got a listing in > my firewall now. When you say "firewall", above, does that mean in

Re: [SAtalk] "Bad" HTML tag obfuscation

Thanks for your suggestions! This is what I was looking for. Free CableTV read the archives.. you need backhair rules from jennifer. http://www.emtinc.net/spamhammers.htm Those rules, along with weeds.cf, popcorn.cf and bigevil.cf are catching 99.5% of the junk that comes my way. -

RE: [SAtalk] Pyzor

Dan Early days in terms of volumes, so I'll hold off from a decision on that. Right now it appears that DCC and Pyzor seem to be hitting about the same quantity of mail. The positive effects have been to push more of what would have been false negatives to positives and more of what I mark at (5

RE: [SAtalk] "Bad" HTML tag obfuscation

> > Free CableTV > read the archives.. you need backhair rules from jennifer. http://www.emtinc.net/spamhammers.htm --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign

RE: [SAtalk] SpamAssassin and SendMail

Scott, I think there is some merit and I was thinking the same thing. I have made some changes to Sendmail, Mimedefang, and SA for my installation and think a configuration repository that puts them all together would be great. I would be interested in contributing. Steve _

[SAtalk] "Bad" HTML tag obfuscation

I've noticed a fair amount of uncaught spam seeping through SA via obfuscating the message in "bad"/invalid HTML tags. For example, Free CableTV It appears they're running the message against an SA tester. I've seen sites that advertise "prevent your sales pitch from being filtered by SA" ser

RE: [SAtalk] Pyzor

Alan: Do you find any value running Pyzor? I gave up on it long ago, as it never seemed to hit on any quantity of Spam. BTW: I normally test things by doing a spamassassin -D --lint <> | -Original Message- | From: Alan Munday [mailto:[EMAIL PROTECTED] | Sent: Tuesday, December 16,

Re: [SAtalk] One persistent spammer defeating SA.

On Sun, 2003-12-07 at 01:28, Robert Nicholson wrote: > I've got a mailbox full of messages that got past SA > > They are all from the same spammer. > SNIP!! > All of these scored less the 0.6 hits > > I've posted abbreviated headers for brevity. > > Do we have a way of dealing with the spamme

RE: [SAtalk] SpamAssassin and SendMail

--On Wednesday, December 17, 2003 1:52 PM -0500 "Billy A. Pumphrey" <[EMAIL PROTECTED]> wrote: > > I too love this combo and have a question for the group. I was thinking > of documenting my configuration over the holiday break. Do people > generally > feel this would be useful? Basically, I

RE: [SAtalk] SpamAssassin and SendMail

--On Wednesday, December 17, 2003 10:47 AM -0800 Scott Harris <[EMAIL PROTECTED]> wrote: > I too love this combo and have a question for the group. I was thinking > of documenting my configuration over the holiday break. Do people > generally feel this would be useful? Basically, I don't want t

RE: [SAtalk] SpamAssassin and SendMail

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Justin > Sent: Wednesday, December 17, 2003 9:08 AM > To: Brian Sneddon > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] SpamAssassin and SendMail > > On Wed, 17 Dec 2003, Brian Sneddon wrote: > >

RE: [SAtalk] SpamAssassin and SendMail

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Justin > Sent: Wednesday, December 17, 2003 9:08 AM > To: Brian Sneddon > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] SpamAssassin and SendMail > > On Wed, 17 Dec 2003, Brian Sneddon wrote: >

RE: [SAtalk] daily / weekly reports

Hey, Can you repost the perl script but in a text file or resend it to me? The email got mangled and I'm not a good enough perl monkey to fix it. Gary Smith [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jens Madsen Sent: Sund

Re: [SAtalk] spamassassin -r: Clean Mail Before Reporting?

-r removes the X-Spam markup, I assume you mean -- or it removes your own domain somehow? At any rate, I whipped up a perl script to clean up the headers before reporting spam or for whitelisting. It's pasted below; you're (all) free to ignore it, use it, or improve it as you want. #!/usr/loca

Re: [SAtalk] unix dgram message

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Wendt (Contractor) writes: > I recently upgraded from 2.55 to 2.61, and upon starting spamd, I get this > message: unix dgram connect: Socket operation on non-socket at > /usr/local/bin/spamd line 282. I'm running Solaris 8 on the server, late

Re: [SAtalk] How can I confirm that spamassian is actully using razor and DCC?

On Wed, Dec 17, 2003 at 10:57:03AM -0600, Chris Thielen wrote: > stan said: > > I've installed spamassain and razor and dcc on my debian system. When I > > run > > spamassain -rD, I see the message is reported to razor and DCC. However, > > glancing at the results of messages that have been filterd

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On Wed, Dec 17, 2003 at 11:32:48AM -0500, Pedro Sam wrote: > On December 17, 2003 11:20 am, stan wrote: > > On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > > > On December 17, 2003 10:16 am, stan wrote: > > > > NTW, I've got a macro that runs sa-lar, and another that runs > > > > spama

RE: [SAtalk] SpamAssassin and SendMail

On Wed, 17 Dec 2003, Brian Sneddon wrote: > Do any good docs exist on using SpamAssassin with Sendmail as a gateway to > an Exchange server? This is how I configured the spam filter we use here at > work (Sendmail+SpamAssassin+spamass-milter) and if there aren't any good > docs on this (and peopl

Re: [SAtalk] How can I confirm that spamassian is actully using razor and DCC?

stan said: > I've installed spamassain and razor and dcc on my debian system. When I > run > spamassain -rD, I see the message is reported to razor and DCC. However, > glancing at the results of messages that have been filterd coing in, I > have > yet to see any indication of spam detection using t

[SAtalk] Can I feeda whole mailbox to spamassain -r?

Sometime in December stan assaulted the keyboard and produced: | OK, if the problem exists, I should have it. But I'm a newbie here. Tell me | how to check my tokens, and I'll reprt back. ok i have things like this: 0.000 0 2 0 non-token data: bayes db version 0.002

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On December 17, 2003 11:34 am, Theo Van Dinter wrote: > On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > > Why did I suspect that 3 did not work? because I found many tokens in > > the bayes database that could only had come from SA markup. Tokesn like > > "BAYES_99" were considered V

[SAtalk] bigevil 2.04 posted

few sham FPs moved. Few more domains added. I got so few spams this morning, I found it theroputic to just add missed domains into bigevil by hand :) For fun, check out http://www.rollie.biz/ , yeah that IP got a listing in my firewall now. If you report an FP, please include the entire messag

Re: [SAtalk] Desperate Plea

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 16 December 2003 19:08, Dan Spray wrote: > By default what does spamassassin do with bounces? Nothing! The bigger question is how are you getting the mail to spamassassin and what are you doing with the output? Douglas -BEGIN PGP SIG

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > Why did I suspect that 3 did not work? because I found many tokens in the > bayes database that could only had come from SA markup. Tokesn like > "BAYES_99" were considered VERY spammy. I was going to tell you that it's not a valid a

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On December 17, 2003 11:20 am, stan wrote: > On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > > On December 17, 2003 10:16 am, stan wrote: > > > NTW, I've got a macro that runs sa-lar, and another that runs > > > spamassian -r. If I run the 2nd one first, I get a message about 0 > > > m

FW: [SAtalk] SpamAssassin and SendMail

Man, I did it again! I meant to send this to the list and not solely to Chris... -Joe > -Original Message- > From: Kang , Joseph S. > Sent: Wednesday, December 17, 2003 10:20 AM > To: 'Chris Santerre' > Subject: RE: [SAtalk] SpamAssassin and SendMail > > > > From: Chris Santerre [mail

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > On December 17, 2003 10:16 am, stan wrote: > > NTW, I've got a macro that runs sa-lar, and another that runs spamassian > > -r. If I run the 2nd one first, I get a message about 0 messages learned > > from, if I run the first one. Whereas

RE: [SAtalk] SpamAssassin and SendMail

I did the exact same. I klugged it together from all over the google world. (pun intended! Many thanks Theo!) I've been meaing to write how I did mine. There is an effort to get different install howto's done on the wiki at www.exit0.us so if you write one up, please copy it there. I say this every

[SAtalk] unix dgram message

I recently upgraded from 2.55 to 2.61, and upon starting spamd, I get this message: unix dgram connect: Socket operation on non-socket at /usr/local/bin/spamd line 282. I'm running Solaris 8 on the server, latest patches. Messages are written to syslogd, and everything otherwise seems to be w

RE: [SAtalk] SpamAssassin and SendMail

> From: Brian Sneddon [mailto:[EMAIL PROTECTED] > > Do any good docs exist on using SpamAssassin with Sendmail as > a gateway to an Exchange server? This is how I configured > the spam filter we use here at work > (Sendmail+SpamAssassin+spamass-milter) and if there aren't > any good docs on

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On December 17, 2003 10:16 am, stan wrote: > NTW, I've got a macro that runs sa-lar, and another that runs spamassian > -r. If I run the 2nd one first, I get a message about 0 messages learned > from, if I run the first one. Whereas, If I reverse the order, I get 1 > message learned. So it looks to

Re: [SAtalk] autoreply to spam.

On Wed, Dec 17, 2003 at 08:08:44AM -0500, AltGrendel wrote: > On Tue, 2003-12-16 at 20:45, Dan Wilder wrote: > > > > > The reasons I would never in a million years set up such an > > autoresponder are: > > > > * It only increases the burden on the Internet and on one's own > >mail servers,

[SAtalk] @i*something* email addresses

Hello everyone, I've been receiving several pieces of spam from different senders and the only similarity in the messages that I've found so far is that their >From email address domains all start with the letter "i". A few are: @ifallover.com @iexcelleration.com @idetermination.com As I said t

RE: [SAtalk] SpamAssassin and SendMail

I don't know of any. However maybe you seen this already but a program called MailScanner is really popular and spamassassin is used in conjuction with MailScanner. Its pretty cool. I don'tknow much about it yet, but we use it here at my work and I'm having to dig into it so that I know how t

RE: [SAtalk] SpamAssassin and SendMail

Do any good docs exist on using SpamAssassin with Sendmail as a gateway to an Exchange server? This is how I configured the spam filter we use here at work (Sendmail+SpamAssassin+spamass-milter) and if there aren't any good docs on this (and people would find one helpful) then I'll tidy up the ins

Re: [SAtalk] Detecting strings of Gibberish

> > > http://www.wot.no-ip.com/cgi-bin/detoken.pl > > > > > > Most of the gibberish I see is encoded tracking information. I plugged > > > in my domain name to the little script thingy, saved the .cf file, and > > > it catches 'em like crazy. > > > > I've added a link for this to the front page

RE: [SAtalk] SpamAssassin and SendMail

> Sendmail is and MTA not a MDA. As far as I know, the MDA has > to call spamassassin (or spamd). This is where I may be > wrong, or maybe this is just the case with sendmail? For clarification to the uninitiated: MTA = Mail Transport Agent. Software used to TRANSFER e-mail messages between ma

RE: [SAtalk] SpamAssassin and SendMail

There's a Sendmail/Procmail howto that I wrote at: http://thatitguy.com/?subj=QandA&target=sa-howto Hope that helps! Rubin On Wed, 2003-12-17 at 09:56, Yackley, Matt wrote: > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On > > Behalf Of Ceva > > Se

Re: [SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

Theo Van Dinter said: > That said, try running the sample-spam.txt message through "spamassassin" and > see what comes out. If it's doing the markup appropriately there, it's > definitely a qmail-scanner issue. If it's not, run with -D and see if it's > complaining about anything. spamassassin

Re: [SAtalk] Detecting strings of Gibberish

On Wed, Dec 17, 2003 at 10:05:41AM -0500, AltGrendel wrote: > On Thu, 2003-12-11 at 11:17, Tom Meunier wrote: > > http://www.wot.no-ip.com/cgi-bin/detoken.pl > > > > Most of the gibberish I see is encoded tracking information. I plugged > > in my domain name to the little script thingy, saved the

[SAtalk] How can I confirm that spamassian is actully using razor and DCC?

I've installed spamassain and razor and dcc on my debian system. When I run spamassain -rD, I see the message is reported to razor and DCC. However, glancing at the results of messages that have been filterd coing in, I have yet to see any indication of spam detection using thes services. How can

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On Wed, Dec 17, 2003 at 09:36:30AM -0500, Pedro Sam wrote: > On December 17, 2003 08:40 am, stan wrote: > > I'm just gettign spamassain twaeked up, and it's working great. Almost no > > spam is making it into my default mailbox. Most is winding up in the > > almost_certianly_spam, and probably_spam

[SAtalk] SORBS in SA 2.55?

Is it possible to implement the SORBS tests in 2.55? I am a little confused looking at the tests. I normally see 'eval:check_rbl' but I notice that 2.61 also uses 'eval:check_rbl_sub'. Should I remove the '_sub' or not implement the tests? Thanks and Regards, Larry ---

RE: [SAtalk] Detecting strings of Gibberish

On Thu, 2003-12-11 at 11:17, Tom Meunier wrote: > http://www.wot.no-ip.com/cgi-bin/detoken.pl > > Most of the gibberish I see is encoded tracking information. I plugged > in my domain name to the little script thingy, saved the .cf file, and > it catches 'em like crazy. > I've added a link for

RE: [SAtalk] SA/DCC issues..... [Solved]

Added, on Dan Smart's recommendations,.. dcc_path /usr/local/bin/dccproc To the other DCC parameters in local.cf use_dcc 1 dcc_home/var/dcc add_header all DCC _DCCB_: _DCCR_ dcc_timeout 20 Running OK now. Alan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROT

RE: [SAtalk] SpamAssassin and SendMail

Ok, I may show my own stupidity here, but I'll give this a shot. Sendmail is and MTA not a MDA. As far as I know, the MDA has to call spamassassin (or spamd). This is where I may be wrong, or maybe this is just the case with sendmail? I use procmail as my MDA. I chose it because of added flexibil

RE: [SAtalk] SpamAssassin and SendMail

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Ceva > Sent: Wednesday, December 17, 2003 8:21 AM > To: [EMAIL PROTECTED]; Matt Kettler > Subject: [SAtalk] SpamAssassin and SendMail > > Thanks for all your help until now. I start to understand

Re: [SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

On Wed, Dec 17, 2003 at 09:38:09AM -0500, Jason Lieurance wrote: > Received: (qmail 85522 invoked by uid 85); 17 Dec 2003 14:27:45 - > Received: from [EMAIL PROTECTED] by redhat.vipersystems.biz by uid 82 with > qmail-scanner-1.16 > (clamscan: 0.65. spamassassin: 2.61. Clear:SA:0(-8.0/7.5)

Re: [SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

Theo Van Dinter said: > Can you post a header of what you're talking about? It's hard to give an accurate > opinion without seeing it. :) Header example(Sorry, I deleted all my spam ones): *** Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMA

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On December 17, 2003 08:40 am, stan wrote: > I'm just gettign spamassain twaeked up, and it's working great. Almost no > spam is making it into my default mailbox. Most is winding up in the > almost_certianly_spam, and probably_spam mailboxes. > > Now, wanting to be a godd net citizen, I've been ru

Re: [SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

On Wed, Dec 17, 2003 at 09:16:07AM -0500, Jason Lieurance wrote: > It tags the message with X-Spam-Status: YES/NO and the hits number but no list of > the tests it ran, no rewrite of the subject, and no attachment of the original. 2.55 > did all these things and I don't see the problem with my loca

Re: [SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

Theo Van Dinter said: > When you say it does "NOTHING", are there any X-Spam-* headers? It tags the message with X-Spam-Status: YES/NO and the hits number but no list of the tests it ran, no rewrite of the subject, and no attachment of the original. 2.55 did all these things and I don't see the p

Re: [SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

On Wed, Dec 17, 2003 at 08:26:18AM -0500, Jason Lieurance wrote: > tagged a message SPAM yes/no it used to list what tests were done but not anymore > and it does NOTHING to messages tagged as spam. It use to rewrite subject, say the When you say it does "NOTHING", are there any X-Spam-* headers?

Re: [SAtalk] could not locate your pod2man program

On Wed, Dec 17, 2003 at 01:33:31PM +, Muhannad Tamemi wrote: all HTML -- boo! the answer to your question is in the FAQ. -- Randomly Generated Tagline: "Windows 95 is the only true Operating System -- it does whatever it wants. All others should be called Co-Operating Systems." - Unknown

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

On Wed, Dec 17, 2003 at 08:40:49AM -0500, stan wrote: > Will, for instnace spmassaina -r --mbox mailbox_name work? nope. 1) --mbox isn't a spamassassin option, 2) spamassassin only handles 1 message at a time. -- Randomly Generated Tagline: "Choose your weapons to match the war." - Brad

[SAtalk] Can I feeda whole mailbox to spamassain -r?

I'm just gettign spamassain twaeked up, and it's working great. Almost no spam is making it into my default mailbox. Most is winding up in the almost_certianly_spam, and probably_spam mailboxes. Now, wanting to be a godd net citizen, I've been running spamassaiin 0r on each of thes emails, which

[SAtalk] could not locate your pod2man program

Dear All ,   I have Linux Red Hat 9 , and i downloaded  spamassassin in on it  in my home directory.   when i try to install it i get follwoing eror message :       Warning: I could not locate your pod2man program. Please make sure, your pod2man program is in your PATH before you execute

[SAtalk] Upgraded to SA 2.61 from 2.55 followed advice, no rewrite subject

Hello, I posted yesterday about how we upgraded to 2.61 from 2.55 and the subjuct would not rewrite even though the local.cf told it to. Someone advised to run 'spamassassin --lint' and fix the syntex errors which I did but it did not work. Also, when it tagged a message SPAM yes/no it used to lis

[SAtalk] SpamAssassin and SendMail

Thanks for all your help until now. I start to understand how Spamassassin works. Could somebody give me some how-to of how make sendmail to work with spamassassin, or tell where I can find this kind of how-to? I am reading the documentation page of spamassassin site to learn how to write rules to

  1   2   >