RE: [SAtalk] Sendmail line

2003-12-27 Thread Brian Sneddon
spamass.sock is a UNIX socket and will be created automatically when you start the milter. Brian -Original Message- From: Robt. Miller [mailto:[EMAIL PROTECTED] Sent: Saturday, December 27, 2003 2:17 PM To: [EMAIL PROTECTED] Subject: [SAtalk] Sendmail line I installed Spamassassin and

[SAtalk] Re: SA not adding any headers

2003-12-27 Thread Andrew
Thanks for the response. I received a reply off list that told me basically the same thing. I rewrote my .qmail file so that spamc wouldn't run into a dead-end and everything is working now. In case anyone is interested, here is what it looks like now. |/usr/local/bin/ifspamh andrew andrew-spam

[SAtalk] Re: [RD] Offered Rules

2003-12-27 Thread Robert Menschel
In addition to the body rules I offered earlier today, here are some URI rules that look as if they would be beneficial in the distribution set. Please look over and test the following rules, and let me know if they work for you. Use your own scoring -- my scores tend to be high, since I use a 9.

[SAtalk] V 2.70

2003-12-27 Thread Jim Knuth
Hallo und guten Morgen SA-List, what is the difference between V 2.61 and V 2.70? Except for, that it is an developerversion ( I mean V 2.70):-) -- Viele Grüße, best regards Jim Knuth [EMAIL PROTECTED] - Zufalls-Text - Wenn du einen Menschen glücklich machen willst, d

[SAtalk] [RD] Offered Rules

2003-12-27 Thread Robert Menschel
Last month I offered some header rules for possible inclusion in a future distribution. Those that passed muster have been formally submitted via bugzilla. I've now completed review of my "body phrase" rule set, and feel they're ready for similar review. Please look over and test the following ru

Re: [SAtalk] Sendmail line

2003-12-27 Thread Mattias Ahnberg
>> "RM" == Robt Miller <[EMAIL PROTECTED]> writes: RM> I installed Spamassassin and I want to run it with Sendmail. I'm RM> supposed have a line in the sendmail.cf file that says.. RM> INPUT_MAIL_FILTER(`spamc', `S=local:/var/run/sendmail/spamass.sock, F=, RM> T=C:15m;S:4m;R:4m;E:10m')dnl No, yo

Re: [SAtalk] Sendmail line

2003-12-27 Thread Theo Van Dinter
On Sat, Dec 27, 2003 at 02:17:05PM -0500, Robt. Miller wrote: > INPUT_MAIL_FILTER(`spamc', `S=local:/var/run/sendmail/spamass.sock, F=, > T=C:15m;S:4m;R:4m;E:10m')dnl > .. I checked and there's no spamass.sock anywhere in the system. I've > installed it twice and it's not there, what should I try?

[SAtalk] Re: Bigevil 2.05d posted and regex question....

2003-12-27 Thread Scott A Crosby
On Mon, 22 Dec 2003 15:16:34 -0500, Chris Santerre <[EMAIL PROTECTED]> writes: > Updated from this weekends spam. That one Guy selling the Vdrug had about 8 > more domains. > > If I work the regex even further so it reads: > > (?:domain1|domain2|domain3)\.com > > rather then: > > (?:domain1\.

[SAtalk] Some spam getting very low scores despite consistently using sa-learn

2003-12-27 Thread Ricardo Kleemann
Hi, I sent a message last week but I guess for some reason it didn't get properly distributed, maybe because I attached a tarball with some copies of the spam messages. Anyway, is there an address I can send a tarbal with a bunch of these messages? I keep getting spam which SA (using 2.60) consis

Re: (PROBABLY SPAM) [SAtalk] odd problem with spamassassin missing messages...

2003-12-27 Thread Warren Johnson
The irony is that this message was trapped by SA (even with a -4.9 BF Score) and filtered out. He forwarded a spam that my filters (using backhair, bigevillist, BF, Realtime black lists ETC ETC) would have given like a 15+ score ;-). == Warren D. J

RE: [SAtalk] Ruleset for RND UC CHAR spam

2003-12-27 Thread Kenneth Porter
Another pattern I notice is that the plain text part always has 3 lines of random words, all lower case, no punctuation except apostrophe in the contractions. Some have a blank line (one space) before the 3 lines of text. Maybe we could add a low-valued body rule for that pattern? The HTML part

[SAtalk] Sendmail line

2003-12-27 Thread Robt. Miller
I installed Spamassassin and I want to run it with Sendmail. I'm supposed have a line in the sendmail.cf file that says.. INPUT_MAIL_FILTER(`spamc', `S=local:/var/run/sendmail/spamass.sock, F=, T=C:15m;S:4m;R:4m;E:10m')dnl .. I checked and there's no spamass.sock anywhere in the system. I've inst

Re: [SAtalk] Cron job messages

2003-12-27 Thread Bob Apthorpe
On Sat, 27 Dec 2003 09:25:24 -0800 "Dr. John W. Glendening" <[EMAIL PROTECTED]> wrote: > After using spamassassin 2.60 on a RH 7.3 linux box with no problems for > four months, suddenly yesterday "root" started receiving emails every > 10 minutes ala the attached - based on the subject line I ga

[SAtalk] Cron job messages

2003-12-27 Thread Dr. John W. Glendening
After using spamassassin 2.60 on a RH 7.3 linux box with no problems for four months, suddenly yesterday "root" started receiving emails every 10 minutes ala the attached - based on the subject line I gather it is a spam assassin problem, though I was not aware that SA would create cron jobs!

Re: [SAtalk] X-Originating-IP isn't a number

2003-12-27 Thread Anthony Martinez
On Sat, Dec 27, 2003 at 10:50:18AM -0500, Fred carved this out of pure phosphors: > > Something about this causes it to hit on every message which does not > contain a X-Originating-IP header. I think you need a meta test to check if > that tag exists before checking if it *doesn't* contain that

Re: [SAtalk] X-Originating-IP isn't a number

2003-12-27 Thread Fred
- Original Message - From: "Anthony Martinez" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, December 25, 2003 11:23 PM Subject: [SAtalk] X-Originating-IP isn't a number > I got a spam today where the X-Originating-IP header wasn't a number. Hotmail > always puts the dotted

Re: [SAtalk] Re: eBay Spoof

2003-12-27 Thread Fred
Kelson Vibber wrote: > Ebay has an email address for reporting spoofs. They ask that you > forward them (inline) to [EMAIL PROTECTED], at least in theory so that > they can investigate the spoofers. > > http://www.ebay.com/securitycenter/ > http://pages.ebay.com/education/spooftutorial/ I have

Re: [SAtalk] SA not adding any headers

2003-12-27 Thread Jeremy Kister
On Saturday, December 27, 2003 3:26 AM, I wrote: > issue. each line of a .qmail-username file is one instruction, each having [...] > just put in the .qmail-username (all one line): please substitue my '.qmail-username' references with '.qmail' it's all just relative to how you have qmail set up

Re: [SAtalk] SA not adding any headers

2003-12-27 Thread Jeremy Kister
On Friday, December 26, 2003 8:31 PM, Andrew wrote: > Here is what my .qmail file looks like. > > |/usr/local/bin/spamc -u andrew > ./Maildir/ > Anyone have any idea what's happening? this is an issue do to your qmail configuration; it's not a spamassassin issue. each line of a .qmail-username f