Re: [SAtalk] /etc/mail/spamassassin/local.cf is ignored

"John A. Hengstler" wrote: > > I have noticed this as well. > > I am using spamd on a separate server, and local.cf on that server is > ignored. I can put rules into /usr/local/share/spamassasin and the pull in > just fine. But putting new rules into local.cf are getting ignored per > doc

Re: [SAtalk] /etc/mail/spamassassin/local.cf is ignored

Matt Kettler wrote: > > >But when messages > >are passed via sendmail (dual config) and amavis, the config file > >in /etc/mail/spamassassin/local.cf is not used. > > > >What is wrong here ? > > what signs of said failure are you seeing? There is no full failure but some additional rules and cha

Re: [SAtalk] spamassassin + vpopmail + qmail

[EMAIL PROTECTED] wrote: Hi to the spamassassin group, I still have not been able to get spam assassin running on my machine. I suggest that you try a dual qmail installation w/ amavisd-new as the glue... Installed qmail in /var/qmail_in /var/qmail_out /var/qmail_in will listen on port 25 a

[SAtalk] Matching a list of strings quickly.

A few weeks ago I described a technique to automatically convert a list of strings into a factored regexp for faster matching. You know, from foobat foobang fooziit to foo(bat|bang|ziit) Well, I've got a prototype complete and available here: http://www.cs.rice.edu/~scrosby/datami

RE: [SAtalk] bigevil location

Thank you very much Matt! Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: Matt Yackley [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 20, 2004 12:13 PM To: Fritz Mesedilla Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] bigevil location > > Hello folks! > I wanted to u

RE: [SAtalk] bigevil location

Thank you Bill! I gotta delete the other one now to avoid confusion. Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: Bill Randle [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 20, 2004 12:14 PM To: Fritz Mesedilla Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] bigevil l

Re: [SAtalk] Turning off Habeas?

Quoting Michael Satterwhite <[EMAIL PROTECTED]>: > I know what habeas is *SUPPOSED* to do, but right now it really isn't > working. and > > Personally, I've set its scoring to zero, but I do understand those that > are > giving it a positive score. You'd have to agree that a message with the

RE: [SAtalk] Bayes mis-learning problem

Thanks for clarifying Justin! --Larry > -Original Message- > From: [EMAIL PROTECTED] > Sent: Monday, January 19, 2004 11:35 PM > To: Larry Gilson > Cc: 'Ross Vandegrift'; [EMAIL PROTECTED] > Subject: Re: [SAtalk] Bayes mis-learning problem > Larry Gilson writes: > > > In a broader sens

Re: [SAtalk] Bayes mis-learning problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Larry Gilson writes: > > In a broader sense though, shouldn't fields like To: be excluded by > > default? It seems like if I receive more than 50% spam, this is a > > receipe for disaster. Of course, some spam won't have a valid To: > > field, but i

Re: [SAtalk] Missing Spam Headers? Why?

On Mon, Jan 19, 2004 at 10:18:58PM -0500, Larry Gilson wrote: > > -Original Message- > > From: [EMAIL PROTECTED] > > On Behalf Of Scott Lambert > > Sent: Monday, January 19, 2004 7:32 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [SAtalk] Missing Spam Headers? Why? > > > > http://www.

Re: [SAtalk] bigevil location

> > Hello folks! > I wanted to update my bigevil list but when I did a locate on them I got > this: > > /var/amavis/.spamassassin/bigevil.cf > /etc/mail/spamassassin/bigevil.cf > > Now I really forgot where the correct location is. Both files are > identical. > I know bigevil list is being used bec

Re: [SAtalk] bigevil location

On Mon, 2004-01-19 at 19:49, Fritz Mesedilla wrote: > > Hello folks! > I wanted to update my bigevil list but when I did a locate on them I got this: > > /var/amavis/.spamassassin/bigevil.cf > /etc/mail/spamassassin/bigevil.cf > > Now I really forgot where the correct location is. Both files are

Re: [SAtalk] Rules_Du_Jour idea

On Mon, 2004-01-19 at 17:18, Robert Leonard III wrote: > Something I added in here, but is also an easy to do seperate cron job is to > update Razor2 and Pyzor (if being used)... 'course I'm a newbie Linux Hack > and this may be a horribly bad idea... but it helped me out once, so I > thought

[SAtalk] bigevil location

Hello folks! I wanted to update my bigevil list but when I did a locate on them I got this: /var/amavis/.spamassassin/bigevil.cf /etc/mail/spamassassin/bigevil.cf Now I really forgot where the correct location is. Both files are identical. I know bigevil list is being used because I can see them

[SAtalk] Webmin and amavis

Has anyone managed to get the amavisd webmin module to work? I could not, and just wondered if what other people's experience was. Hope this wasn't too far off topic. Thanks, Mark --- The SF.Net email is sponsored by EclipseCon 2004 Premiere

Re: [SAtalk] Turning off Habeas?

On Mon, Jan 19, 2004 at 09:01:36PM -0600, Michael Satterwhite is rumored to have said: > > You'd have to agree that a message with the > headers is more likely spam than not ... right now. ...unless you converse with me via e-mail with any regularity... Have you actually checked to see how many

RE: [SAtalk] Missing Spam Headers? Why?

Hi Scott, I tried the link and wound up with a 404 page not found error message. Thanks, Larry > -Original Message- > From: [EMAIL PROTECTED] [mailto:spamassassin-talk- > [EMAIL PROTECTED] On Behalf Of Scott Lambert > Sent: Monday, January 19, 2004 7:32 PM > To: [EMAIL PROTECTED] > Cc:

Re: [SAtalk] Turning off Habeas?

On Monday 19 January 2004 19:56, Matt Yackley wrote: > Don, > The default tests and scores can be found in /usr/share/spamassassin > > Search Google or the archives for a *lot* of talk about the HABEAS_SWE > test and the recent problems. People like Theo use the Habeas mark in > their messages, s

[SAtalk] What's up with OPT_HEADER rule?

The OPT_HEADER (in 2.5x and 2.6x) rule does not make much sense to me: header __OPT_HEADER_SUBJ ALL =~ /^(?:Resent-)?Subject:.*opt.?(in|out|oem|ed|ion-in|[EMAIL PROTECTED])(?:\b|\d|\@)/im header __OPT_HEADER_ALL ALL =~ /opt.?(?:in|out|oem|ed|ion-in|[EMAIL PROTECTED])(?:\b|\d|\@)/i meta OPT_HEADE

[SAtalk] Re: user_prefs on a gateway machine

Jonathan Nichols <[EMAIL PROTECTED]> wrote: >I'm working on a spamassassin gateway machine, and I'm a bit confused > on how to set up the machine so users can have their own user_prefs files. > * The machine has no local users at all > [ deletia ] > Will spamd create the directory for each

[SAtalk] spamassassin + vpopmail + qmail

Hi to the spamassassin group, I still have not been able to get spam assassin running on my machine. What I have tried so far is as follows, /etc/default/spamassassin # Change to one to enable spamd ENABLED=1

[SAtalk] Configuration question

Hi all, I was paging through the wiki: http://wiki.spamassassin.org/w/IntegratedInMta and noticed that the tagging configuration is specified twice, once in amavisd.conf, and again in /etc/mail/spamassassin/local.cf. There doesn't seem to be any reason as to why one setting is specified in one p

Re: [SAtalk] SpamAssassin 2.62 is released!

On Mon, Jan 19, 2004 at 10:55:58AM -0500, Steven W. Orr wrote: > Any idea when we'll get RPMs available for the new release? I made them available today: http://www.spamassassin.org/released/RPMs/ :) -- Randomly Generated Tagline: And in the limiting case where the optimizer is completely broke

Re: [SAtalk] Awfully OT but entertaining nontheless: Interesting Job Posting

> Aren't there newsgroups that person can go to to find people ... ahem ... > intimately familiar with goats? Nothing to say, just the tagline. -- Adam Lopresto http://cec.wustl.edu/~adam/ "The Web brings people together because no matter what kind of a twisted sexual mutant you happen to be, yo

[SAtalk] SA Rule idea: whois

I've been thinking about a new rule, either for Bayes or for more normal processing, and I'd like the group's opinion. It has to do with URLs in the message. My original thought came to me when running SpamCop on a bunch of messages. Taking a peek at the SC output I see that they whois the host

Re: [SAtalk] Turning off Habeas?

> Hi, > > There is a feature called "habeas" that gives spam a negative weight. > It is apparently a mark that certifies that e-mail is not spam. It does > not > work and all the spam I am getting now is because of that mark. I can't > imagine I would be missing anything if I just disabled

Re: [SAtalk] New Ruleset: EvilNumbers

>> The rules should already account for the optional ( & ) around the area >> codes, the (\s|-|\.) only appeared after the area code. Maybe this will >> have to change soon now that the rules are "in the wild" :) >> --example-- >> /\(?203\)?(\s|-|\.)(?:234(\s|-|\.)0292|286(\s|-|\.)2187)/ >> --exam

Re: [SAtalk] Weeds Question

> I'm getting really confused on all these custom rules... > > There is a weeds.cf and a weeds_2.cf. Should I be running both of them or > is weeds_2.cf an updated version of weeds.cf? > > -- > Gerry > Hi Gerry, Weeds2 in a more restrictive version of weeds for those that are worried about false

[SAtalk] Turning off Habeas?

Hi, There is a feature called "habeas" that gives spam a negative weight. It is apparently a mark that certifies that e-mail is not spam. It does not work and all the spam I am getting now is because of that mark. I can't imagine I would be missing anything if I just disabled this. Wou

Re: [SAtalk] SpamAssassin 2.62 is released!

--On Monday, January 19, 2004 11:07 AM -0600 Bob Apthorpe <[EMAIL PROTECTED]> wrote: > rpm -ta SOURCES/Mail-SpamAssassin-2.62.tar.gz That should be rpmbuild, not rpm. In later versions of rpm the installer no longer automagically calls the builder, and you have to invoke it directly. You can als

Re: [SAtalk] Missing Spam Headers? Why?

On Mon, Jan 19, 2004 at 02:16:45PM -0800, Jae Chang wrote: > Hi, I am noticing a disturbing trend within the past month. I'm > noticing mails coming thru without any of the normal Spam headers, > such as: > > X-Spam-Checker-Version: > Level: > Status: > > These mails inevitably are *never* cau

Re: [SAtalk] New Ruleset: EvilNumbers

> The rules should already account for the optional ( & ) around the area > codes, the (\s|-|\.) only appeared after the area code. Maybe this will > have to change soon now that the rules are "in the wild" :) > --example-- > /\(?203\)?(\s|-|\.)(?:234(\s|-|\.)0292|286(\s|-|\.)2187)/ > --example--

[SAtalk] Weeds Question

I'm getting really confused on all these custom rules... There is a weeds.cf and a weeds_2.cf. Should I be running both of them or is weeds_2.cf an updated version of weeds.cf? -- Gerry "The lyfe so short, the craft so long to learne" Chaucer ---

Re: [SAtalk] Awfully OT but entertaining nontheless: Interesting Job Posting

Aren't there newsgroups that person can go to to find people ... ahem ... intimately familiar with goats? I'd rather not find out. :P --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integr

Re: [SAtalk] Awfully OT but entertaining nontheless: Interesting Job Posting

--On Monday, January 19, 2004 3:30 PM -0800 Jonathan Nichols <[EMAIL PROTECTED]> wrote: > Heh. > > If computers ever drive you nuts, there's always GOAT HERDING! > > http://www.craigslist.org/nby/etc/22688691.html > > I'd apply, but I lack the experience. :P Aren't there newsgroups that person

[SAtalk] Awfully OT but entertaining nontheless: Interesting Job Posting

Heh. If computers ever drive you nuts, there's always GOAT HERDING! http://www.craigslist.org/nby/etc/22688691.html I'd apply, but I lack the experience. :P -Jonathan --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference

[SAtalk] Rules_Du_Jour idea

Something I added in here, but is also an easy to do seperate cron job is to update Razor2 and Pyzor (if being used)... 'course I'm a newbie Linux Hack and this may be a horribly bad idea... but it helped me out once, so I thought I'd pass the idea on :) --

RE: [SAtalk] Missing Spam Headers? Why?

-Original Message- I've seen that happen on SA servers/mailserver running SA, that are "under-powered" (for lack of a better term), or over-processed. Either processor or memory utization is being drained by either the SA processes or the MTA, or a combination of the two (or other services

Re: [SAtalk] New Ruleset: EvilNumbers

> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Monday 19 January 2004 13:36, Sylvain Robitaille wrote: >> I changed all occurrences (in my own copy, of course) of '(\s|-|\.)' to >> '[\s\-\.]+', in an effort to ensure that any number of any combination >> of those characters could not be u

Re: [SAtalk] New Ruleset: EvilNumbers

> Lets not forget parentheses. Here is how I would have it look. > [\s(\(|\-|\)\.]+ > Well I hope it is correct. [\s\(\)\-\.]+ -- Chris Petersen Programmer / Web Designer Silicon Mechanics: http://www.siliconmechanics.com/ Blade Servers: http://www.siliconmechanics.com/c292/blade-server

Re: [SAtalk] SpamAssassin 2.62 is released!

On Mon, Jan 19, 2004 at 11:07:13AM -0600, Bob Apthorpe wrote: > It's (usually) not difficult to build your own. This initial directory > is for SuSE; Red Hat hides their build tree elsewhere, like > /usr/src/redhat: Yeah. I put one up though, it ought to get out to the released area in the next

Re: [SAtalk] New User

SpamAssassin doesn't "dump", delete, block, redirect,etc ANY emails. It simply, scans, scores, and stamps the header. It is up to your MTA or email client to determine what is done with messages that receive a score that is at or above your determined spam threshold. -JR - Original Me

Re: [SAtalk] Missing Spam Headers? Why?

Title: Message I've seen that happen on SA servers/mailserver running SA, that are "under-powered" (for lack of a better term), or over-processed. Either processor or memory utization is being drained by either the SA processes or the MTA, or a combination of the two (or other services runni

Re: [SAtalk] Stoopid site administrators

Ugghhh. Hiding head in sand. Today really _is_ Monday... However, you'll notice I said "Dominant", and NOT the BEST... There's a reason for that (actually, there are thousands) ;^) Also note the exclusion of servers from that statement... The unwritten addendum to that bit of marketing vomit i

[SAtalk] Missing Spam Headers? Why?

Title: Message Hi, I am noticing a disturbing trend within the past month. I'm noticing mails coming thru without any of the normal Spam headers, such as: X-Spam-Checker-Version:X-Spam-Level:X-Spam-Status:   These mails inevitably are *never* caught as spam. I can't even check what score they

Re: [SAtalk] New Ruleset: EvilNumbers

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 19 January 2004 13:36, Sylvain Robitaille wrote: > I changed all occurrences (in my own copy, of course) of '(\s|-|\.)' to > '[\s\-\.]+', in an effort to ensure that any number of any combination > of those characters could not be used to obf

Re: [SAtalk] SpamAssassin checks on Received headers (and RBL's such as RCVD_IN_SORBS)

I'm actually listed because it originates from a dynamic ip-range. Nothing more. It surprises me that they lists ip's for only beeing dynamic, but then I discovered the way RBLs are being used by mailservers and then it actually made sense. It doesn't make sense the way SA uses it. :) I'm awar

RE: [SAtalk] Problems running begevil and tripwire together (possibly solved)

At 12:06 PM 1/17/2004, Scott Harris wrote: After a lot of research and trial and error I believe I've found the solution. Mimedefang needed a lot of tuning on the per process multiplexor processes as well as the number of min and max slaves. It appears as though I needed to increase the memory fro

[SAtalk] RE: [SA-Announce] SpamAssassin 2.62 is released!

I just tried to install 2.62 through CPAN and it now fails, haven't had any install problems through CPAN with all prior versions including 2.61. The following test summary was reported: Failed Test Status Wstat Total Fail Failed List of failed

[SAtalk] 7245 Habeas and counting

I ran a report looking for HABEAS_SWE matches and got 7245 to date. Am I really going to report all of them? No, not on your life. I've sent in two; I've done my duty. The Habeas mark is actually a scam on everyone: Habeas customers don't really have any protection for their mail; spammers don

[SAtalk] RE: [SA-Announce] SpamAssassin 2.62 is released!

Hi Thanks, I am running: This is perl, version 5.005_03 built for i386-freebsd Will the known issue be resolved in a future release or should I consider upgrading? Regards, Shannon -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Monday, January 19, 2004 8:38 AM

blackhair problem (Re: RE: [WL] [SAtalk] Yikes.. rules_du_jour)

Hi, > Correct. The only set going through frequent revisions right now is > "Chickenpox". I think I'm about to post a revision on Backhair/Popcorn, > but that will be the first change in months. Still, they will not go i've found a major problem with blachhair set today: it catches most of the

RE: [SAtalk] Three that got through yesterday

Yoda has turned to the DIM side and started spamming. :) ^^^ Should we classify spammers as evil, or just incredibly lack-witted? > -Original Message- > From: Evan Platt [mailto:[EMAIL PROTECTED] > Sent: Monday, January 19, 2004 11:36 AM > To: SpamAssassin > Subjec

Re: [WL] [SAtalk] Yikes.. rules_du_jour

One problem: If a spamassassin --lint fails (because if you, oh, had outdated directives in your sa-mimedefang.cf file), then once you correct that, on the next run, rules_du_jour won't update anything, because it thinks everything is up to date. - Original Message - From: "Chris Thielen"

[SAtalk] New User

I just started using spam assassin today. I think everythings working good, but I have a question. It is set to 5.0 to say spam or no spam and I have gotten messages that are at like 12.3 and so on. How can I get it to just dump them instead of sending them through when they are that high.

RE: [SAtalk] BigEvil Archive

Bah! What was that quote? Something about real men put there files on the internet and letting the world be their backup? Theo has it. :) --Chris (OH I hate EDI! Standard my #$^!) > -Original Message- > From: Gary Smith [mailto:[EMAIL PROTECTED] > Sent: Monday, January 19, 2004 4:21 PM >

RE: [SAtalk] Bayes mis-learning problem

> -Original Message- > From: Ross Vandegrift [mailto:[EMAIL PROTECTED] > Sent: Monday, January 19, 2004 4:07 PM > To: Larry Gilson > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Bayes mis-learning problem > > On Mon, Jan 19, 2004 at 03:21:06PM -0500, Larry Gilson wrote: > > http://useas

RE: [SAtalk] BigEvil Archive

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Gary Smith > Sent: Monday, January 19, 2004 1:21 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [SAtalk] BigEvil Archive > > Chris, > > Not to sound real bad but you should also b

Re: [SAtalk] New Ruleset: EvilNumbers

On Mon, 19 Jan 2004, Matt Yackley wrote: > EvilNumbers.cf version 1.11 is now available! Many thanks to Matt for this, and to many others for submitting rules which have provided us all with improved spam filtering. I had a look at evilnumbers.cf, and expect to use it, though with the following

RE: [SAtalk] BigEvil Archive

> -Original Message- > From: SpamTalk [mailto:[EMAIL PROTECTED] > Sent: Monday, January 19, 2004 3:32 PM > To: [EMAIL PROTECTED] > Subject: RE: [SAtalk] BigEvil Archive > > > > -Original Message- > > From: Chris Santerre [mailto:[EMAIL PROTECTED] > > Sent: Monday, January 19, 2

RE: [SAtalk] BigEvil Archive

Chris, Not to sound real bad but you should also be making your own local copies. I have scripted the download, compare, copy if different and then archive. I run it every hour. If there is ever a problem I can just go to one of my archives and then recover. You should probably consider doing

RE: blackhair problem (Re: RE: [WL] [SAtalk] Yikes.. rules_du_jour)

> Hi, > > > Correct. The only set going through frequent revisions right now is > > "Chickenpox". I think I'm about to post a revision on Backhair/Popcorn, > > but that will be the first change in months. Still, they will not go > > i've found a major problem with blachhair set today: it catch

Re: [SAtalk] Bayes mis-learning problem

On Mon, Jan 19, 2004 at 03:21:06PM -0500, Larry Gilson wrote: > http://useast.spamassassin.org/doc/Mail_SpamAssassin_Conf.html#learning%20op > tions > > bayes_ignore_header header_name ::bangs head on wall:: How did I miss *that*? Thanks for correcting my careless reading. In a broader sense

[SAtalk] Logging?

I was wondering if there is any logging supported in spamassassin. I was going to look into the possibility of using the tagged spam as a DENY list in sendmail’s access file.   Is there any logging functionality? I didn’t see anything I the documentation about it.   Thanks!   Dave Pad

[SAtalk] Errors from spamd

I just restarted spamd and am getting these errors in the maillog: spamd[9392]: Bareword found where operator expected at /usr/share/spamassassin/20_phrases.cf, rule EXCUSE_22, line 12, near "/\besgic_body_test {my $self = shift;foreach ( @_ ) { ^I #line 1 "/etc" sp

RE: [SAtalk] BigEvil Archive

> -Original Message- > From: Chris Santerre [mailto:[EMAIL PROTECTED] > Sent: Monday, January 19, 2004 2:12 PM > To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] BigEvil Archive > > Huh? That was posted 2 days ago! And I had tested it longer > then that! IF there was an

RE: [SAtalk] Bayes mis-learning problem

Look at: http://useast.spamassassin.org/doc/Mail_SpamAssassin_Conf.html#learning%20op tions bayes_ignore_header header_name If you receive mail filtered by upstream mail systems, like a spam-filtering ISP or mailing list, and that service adds new headers (as most of them do), these headers may

RE: [SAtalk] Three that got through yesterday

--On Monday, January 19, 2004 3:09 PM -0500 Chris Santerre <[EMAIL PROTECTED]> wrote: > Ahahahahahahah I can see him at the keyboard now, with a cig hanging from > his mouth and a bottle of JD in one hand! OH man.I need to photoshop a > pic like that! Too late.

RE: [SAtalk] Three that got through yesterday

> -Original Message- > From: Evan Platt [mailto:[EMAIL PROTECTED] > Sent: Monday, January 19, 2004 12:36 PM > To: SpamAssassin > Subject: Re: [SAtalk] Three that got through yesterday > > > > > --On Monday, January 19, 2004 10:51 AM -0500 "Christopher X. Candreva" > <[EMAIL PROTECTED]

RE: [SAtalk] BigEvil Archive

Huh? That was posted 2 days ago! And I had tested it longer then that! IF there was an error, I would have heard about it within an hour of posting. What kind of errors in the log? ANyone else having a problem --Chris > -Original Message- > From: Carl Chipman [mailto:[EMAIL PROTECTED]

[SAtalk] Bayes mis-learning problem

Hey everyone, We're currently coping with a false-positive crisis that's sweeping our email with 2.60, mostly due to scores of the Bayes filter. We run SA site-wide on an incoming MX host, so individual users do not have access to train the Bayes database. Moreover, our primary client pro

Re: [SAtalk] Where to put new rules...

On Mon, 2004-01-19 at 14:14, Ron Gilbert wrote: > I have two questions: > > 1) Where do i put new rules, or changes to scores. I have heard several > different things, and I'm sure there are reason for each, but i can't figure > it out. As far as i ca tell, there is (RH9): > > ~/.spamassassin

RE: [SAtalk] BigEvil Archive

Please ignore this. The problem was that I somehow downloaded half of the file. Redownloading and deleting the partial file fixed the problem. Carl Chipman Nomadics, Inc. [EMAIL PROTECTED] http://www.nomadics.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

[SAtalk] BigEvil Archive

Does anyone have an older copy of BigEvil.cf? I downloaded todays, and my Kerio mail server wouldn't start... Carl Chipman Nomadics, Inc. [EMAIL PROTECTED] http://www.nomadics.com --- The SF.Net email is sponsored by EclipseCon 2004 Premie

Re: [SAtalk] Where to put new rules...

~/.spamassassin/user_prefs /usr/share/spamassassin /etc/mail/spamassassin Use /etc/mail/spamassassin Are there others? I hope not :) And the second questions is when i add a new .cf file, or change an existing one (including user_prefs), do i need to restart spamd? Is there some kind of log

Re: [SAtalk] user_prefs on a gateway machine

Rick Macdougall wrote: Hi, Since you are already using MySQL, why not use MySQL user prefs? You lose per user bays filtering but other that that it works great. I probably could, as sitewide Bayes will work fine.. but I'm just a bit lost on how to set it up. I have postfix/uw-imap/spamassass

Re: [SAtalk] user_prefs on a gateway machine

Hi, Since you are already using MySQL, why not use MySQL user prefs? You lose per user bays filtering but other that that it works great. Regards, Rick Jonathan Nichols wrote: Hey all, I'm working on a spamassassin gateway machine, and I'm a bit confused on how to set up the machine so

[SAtalk] SpamAssassin and learn messages

Hello,   I’m searching a solution, to send back, mails, who haven’t been detect as spam, on the mail server, for put it on a mail box, or folder, for use the sa-learn command, and give to SpamAssassin more values to catch spams.   How to put mails who have been downloaded on the mail cl

[SAtalk] Where to put new rules...

I have two questions: 1) Where do i put new rules, or changes to scores. I have heard several different things, and I'm sure there are reason for each, but i can't figure it out. As far as i ca tell, there is (RH9): ~/.spamassassin/user_prefs /usr/share/spamassassin /etc/mail/spamassassin Are

[SAtalk] user_prefs on a gateway machine

Hey all, I'm working on a spamassassin gateway machine, and I'm a bit confused on how to set up the machine so users can have their own user_prefs files. * The machine has no local users at all * Mail is merely scanned by SA, f-prot, clamav, amavis, and anomy mailtools before it's passed along

[SAtalk] Stoopid site administrators

So, I got the latest USBank "Phishing" email from some scumbag in Korea (in my "Spam" box, thank you SA!), and so I went to the USBank site, followed their instructions, and mailed a sample (as an attachment) to them. Moments later, I receive the message: Database: d:/notes/data/mail2.box Orig

Re: [SAtalk] Three that got through yesterday

On Mon, 2004-01-19 at 12:35, Evan Platt wrote: > --On Monday, January 19, 2004 10:51 AM -0500 "Christopher X. Candreva" > <[EMAIL PROTECTED]> wrote: > > > Example - one had a subject: > > Subject: mail Real brutal other porn with see young girls most > > Yoda has turned to the dark side and start

Re: [SAtalk] New Ruleset: EvilNumbers

and you can add these to your rules_du_jour by adding this Here are settings for evilnumber EVILNUMBERS=7; # Index of evilnumbers data into the arrays is 7 CF_URLS[7]="http://www.merchantsoverseas.com/wwwroot/gorilla/evilnumbers.cf";; CF_FILES[7]="evilnumbers.c

RE: [SAtalk] Exchange and autolearn

How did you setup all *SPAM* messages to get moved automatically to a Spam folder? Is it setup by the users or system-wide? I'd love to do that system-wide but it's too much to train every user to create rules, etc. so I have mail redirected to a public spam folder for periodic review by

RE: [SAtalk] Blocking a TLD

You should be able to implement that at the MTA level eg. sendmail or whatever. In sendmail you should be able to do it via the access database Mr. Michele Neylon Blacknight Internet Solutions Ltd http://www.blacknightsolutions.ie/ http://www.search.ie/ Tel. + 353 (0)59 9137101 Lowest price domain

Re: [SAtalk] Three that got through yesterday

--On Monday, January 19, 2004 10:51 AM -0500 "Christopher X. Candreva" <[EMAIL PROTECTED]> wrote: > Example - one had a subject: > Subject: mail Real brutal other porn with see young girls most Yoda has turned to the dark side and started spamming. :) Evan ---

RE: [SAtalk] New Ruleset: EvilNumbers

Thanks Matt! --Larry > -Original Message- > From: [EMAIL PROTECTED] [mailto:spamassassin-talk- > [EMAIL PROTECTED] On Behalf Of Matt Yackley > Sent: Monday, January 19, 2004 11:57 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] New Ruleset: EvilNumbers > > Inspired by classic hits such a

RE: [SAtalk] habeas problems

Why don't you reduce the scoring from -8 to -2 or similar? Mr. Michele Neylon Blacknight Internet Solutions Ltd http://www.blacknightsolutions.ie/ http://www.search.ie/ Tel. + 353 (0)59 9137101 Lowest price domains in Ireland > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL

Re: [SAtalk] habeas problems

At 11:27 AM 1/19/2004, Ron Culler wrote: I'm having problems with forged headers allowing email with the habeas tags. What is the best way to force a score for habeas tagged email? I use spamassassin with spamd and sql based user black/white lists but a common bayes db. put something similar to t

Re: [SAtalk] habeas problems

One more suggestion, in addition to reducing the score for HABEAS_SWE, if you use bayes, I'd suggest telling bayes to ignore SWE headers. bayes_ignore_header X-Habeas-SWE-1 bayes_ignore_header X-Habeas-SWE-2 bayes_ignore_header X-Habeas-SWE-3 bayes_ignore_header X-Habeas-SWE-4 bayes_ignore_header

[SAtalk] Blocking a TLD

What is the user prefs entry to block an entire TLD, ie. all .ru or .br e-mail? --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-

Re: [SAtalk] SpamAssassin 2.62 is released!

On Mon, 19 Jan 2004 10:55:58 -0500 (EST) "Steven W. Orr" <[EMAIL PROTECTED]> wrote: > Any idea when we'll get RPMs available for the new release? It's (usually) not difficult to build your own. This initial directory is for SuSE; Red Hat hides their build tree elsewhere, like /usr/src/redhat: #

[SAtalk] virtual-config-dir not getting created.

Hi, I'm trying to setup spamassassin to operate in an environment where the mail server has no local users. I've set the flags on spamd to : -c -x --virtual-config-dir=/etc/mail/spamassassin/users/%u The man page for spamd says that this directory will be created if it doesn't exist, which is

[SAtalk] New Ruleset: EvilNumbers

Inspired by classic hits such as BigEvil, Popcorn, Backhair, Chickenpox and Tripwire! EvilNumbers.cf version 1.11 is now available! EvilNumbers.cf contains street addresses, PO Boxes and phone numbers that have been harvested from spam. Each rule is scored at 2.0 points and normally you will onl

Re: [SAtalk] /etc/mail/spamassassin/local.cf is ignored

At 11:16 AM 1/19/2004, Claude Frantz wrote: But when messages are passed via sendmail (dual config) and amavis, the config file in /etc/mail/spamassassin/local.cf is not used. What is wrong here ? what signs of said failure are you seeing? Keep in mind that any spam-markup changes you apply to loc

[SAtalk] habeas problems

I'm having problems with forged headers allowing email with the habeas tags. What is the best way to force a score for habeas tagged email? I use spamassassin with spamd and sql based user black/white lists but a common bayes db. Ron --- T

RE: [SAtalk] UPDATES Tripwire 1.16 and Bigevil 2.06k

That is a completely different set of rules all together. Not really a set, more like a collection. Soon there will be one cf file with all the heavy hitters from the whole SARE created. Sorted in order of lethality as well. I'm trying to prune the low hanging fruit rules first. So you can go ahe

RE: [SAtalk] UPDATES Tripwire 1.16 and Bigevil 2.06k

Chris, What about http://www.merchantsoverseas.com/wwwroot/gorilla/90_FVGT.cf file you submitted? Is that rule set superceded by bigevil and tripwire? thanks, Donald -Original Message- From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Saturday, January 17, 2004 10:18 PM To: Spamassas

Re: [SAtalk] Help with report pse

At 10:40 AM 1/19/2004, John Fleming wrote: Does that use timing from the sender's computer time, ISP times, or what? It compares the date and time of the "Date:" header against the timestamps added into the Received: headers by the various mail relays. since the error is in the 6-12 hour range,

[SAtalk] /etc/mail/spamassassin/local.cf is ignored

Here is my problem: I'm using SA as spamd and amavisd. SA is running as user "spamd", amavisd is running as user "amavis". When I'm feeding a test message as user "amavis" using "spamassassin -t -x < testmsg" the report is OK and is corresponding to the config file in /etc/mail/spamassassin/loca

  1   2   >