[SAtalk] SA with locale-enabled tests

2004-01-21 Thread Eugene M. Zheganin
Hi. I started using SA a year ago. I use it in a site-wide confuguration- spamd + milter + sendmail. Now I noticed that the amount of spam written in russian increased, and from this time I need to filter it. Since 90% of the mail on my relay is in russian (cp1251/koi8-r) I can't simply say in

Re: [SAtalk] Catching padding within html tags / title

2004-01-21 Thread Robert Menschel
Hello sckot, Wednesday, January 21, 2004, 2:09:51 PM, you wrote: s>I've noticed several spam mails with a lot of quoted text (quotes from s> Dave Barry, some of Moby Dick, that sort of thing. Usually all s> punction is stripped out, but not always.) included within brackets or s> an HTML titl

Re: [SAtalk] SA missed an 'invisible font'?

2004-01-21 Thread Robert Menschel
Hello Charles, Wednesday, January 21, 2004, 8:14:50 AM, you wrote: CG> Example HTML below. SA seems to have not recognized the EE font as CG> 'invisible', perhaps because it is just one or two points outside the CG> 'range' permitted by SA? But also note that they have used a ZERO point CG> s

[SAtalk] Help: Still getting through the 2.62

2004-01-21 Thread Thomas Kinghorn
Hi List. I have attached a few mails that are still getting through. These are scoring extremely low. The number of mails like these that slip through is on the increase. Any ideas as to how I can block them? I am using SA2.62, Exim 4.30 (with the exiscan 4.30 patch), SA-exim 3.1 . Thank you

Re[2]: [SAtalk] Recieved From database

2004-01-21 Thread Robert Menschel
Hello Sylvain, Wednesday, January 21, 2004, 7:54:09 AM, you wrote: SR> On Wed, 21 Jan 2004, Christian Nygaard wrote: SR> A friend of mine also has suggested the following (the coding is my own, SR> so if it doesn't work, I've poorly implemented the suggestion): SR> header SYL_BAD_XOIP X-Ori

Re[6]: [SAtalk] Set up

2004-01-21 Thread Robert Menschel
Hello George, Wednesday, January 21, 2004, 9:30:33 PM, you wrote: GM> Yes this basically my family site but my main email for most things so. I GM> will probably be setting up alias's for ebay, shopping, etc. I find that very handy. I have email accounts for [EMAIL PROTECTED], [EMAIL PROTECTED

RE: Re[4]: [SAtalk] Set up

2004-01-21 Thread George Matos
Bob, Thank you very much and everyone for all the help!! Yes this basically my family site but my main email for most things so. I will probably be setting up alias's for ebay, shopping, etc. George -Original Message- From: Robert Menschel [mailto:[EMAIL PROTECTED] Sent: Wednesday, J

Re[4]: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Robert Menschel
Hello Scott, John, Wednesday, January 21, 2004, 9:07:01 PM, you wrote: SW> John, SW> After this I started adding custom cf's like Bigevil,backhair, SW> etc. I also started pushing some of the default scores up and down SW> according to what my beta testers were seeing. I'm now starting to SW>

Re[4]: [SAtalk] Set up

2004-01-21 Thread Robert Menschel
Hello George, Wednesday, January 21, 2004, 8:10:02 PM, you wrote: GM> Thanks seems to be v2.63 Good. Your host is up to date. That bodes well indeed. GM> X-RWH-MailScanner: Found to be clean, Found to be clean GM> X-Spam-Status: No, hits=0.9 required=8.0 GM> tests=PRIORITY_NO_NAME,RCVD_I

Re[4]: [SAtalk] Set up

2004-01-21 Thread Robert Menschel
Hello George, Wednesday, January 21, 2004, 7:58:31 PM, you wrote: GM> I believe I am limited to what my host has in the cpanel already. GM> Yes I am on shared server sorry. GM> I do have fantastico which will let me install some things but GM> doesn't look related to anything like SA. On your

RE: Re[2]: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Scott Williams
John, I also experienced what you see with the threshold. Out of the box , SA threshold of 5.0 did not cut the spam flow by much at all. I estimated atleast 70% of the spam still came through. I was using a test group that had there spam marked but passed through. This way I could tighten

Re: [SAtalk] trusted_networks being ignored at times?

2004-01-21 Thread David B Funk
On Wed, 21 Jan 2004, Justin Mason wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Will McCutcheon writes: > >I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22. [snip..] > >A's IP as being in an RBL of dynamic IP's, despite my setting in > >/etc/mail/spamassassi

Re: [SAtalk] trusted_networks being ignored at times?

2004-01-21 Thread Scott Lambert
On Wed, Jan 21, 2004 at 05:29:08PM -0500, Will McCutcheon wrote: > One of the web sites I host on my server (let us call this server A) > has a mailing list that actually lives on a different server (server > B). So, I have a forward in Sendmail on server A that redirects > messages sent to the

Re: [SAtalk] doing a kind of "! whitelist_from_rcvd" possible ?

2004-01-21 Thread Tim B
Matt Kettler wrote: At 04:56 PM 1/21/2004, you wrote: Hi SA offers the possibility of having a "smarter" whitelist which whitelists only if the sending relay is "related" to the sending email, like whitelist_from_rcvd [EMAIL PROTECTED] example.com is there a possibility to somehow do the oppos

RE: Re[2]: [SAtalk] Set up

2004-01-21 Thread George Matos
Bob, Thanks seems to be v2.63 X-RWH-MailScanner: Found to be clean, Found to be clean X-Spam-Status: No, hits=0.9 required=8.0 tests=PRIORITY_NO_NAME,RCVD_IN_SORBS autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dorothea.rwhmax.net X-Spam-Level: X-RWH

Re[2]: [SAtalk] Set up

2004-01-21 Thread Robert Menschel
Hello George, Wednesday, January 21, 2004, 7:24:29 PM, you wrote: GM> Sorry everyone I am very new to this and am reading the documentation just a GM> bit much. I have set the required hits to 8 and understand white/black GM> list. Good start! GM>From what I have read it seems SA will learn on

Re: [WL] Re: [SAtalk] More obfuscation

2004-01-21 Thread David B Funk
On Tue, 20 Jan 2004, Charles Gregory wrote: > Right now, there would be no statistics, because the text obfu has just > started. But as a side note, we don't have the disk space to run Bayes for > all our users though I'm getting awfully tempted to talk the boss into > an extra disk or two. So

Re[2]: [SAtalk] Set up

2004-01-21 Thread Robert Menschel
Hello George, Wednesday, January 21, 2004, 7:05:57 PM, you wrote: RM> George Matos wrote: >> I just got my domain name and am trying to setup spam assassin. I have >> never used it before so I was looking for some setup instructions etc. >> >> Wife won't switch emails till I have it setup. R

RE: [SAtalk] doing a kind of "! whitelist_from_rcvd" possible ?

2004-01-21 Thread Mitch \(WebCob\)
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Matt > Kettler > Sent: January 21, 2004 2:52 PM > To: Oliver Thalmann > Cc: Spamassassin > Subject: Re: [SAtalk] doing a kind of "! whitelist_from_rcvd" possible ? > > > > For example: > > header __FROM_

RE: Re[2]: [SAtalk] Set up

2004-01-21 Thread George Matos
Bob thanks. I believe I am limited to what my host has in the cpanel already. Yes I am on shared server sorry. I do have fantastico which will let me install some things but doesn't look related to anything like SA. -Original Message- From: Robert Menschel [mailto:[EMAIL PROTECTED] S

Re: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Tim B
Jennifer Wheeler wrote: Hello spam peeps Adam Lopresto and I have recently begun working together on Chickenpox, and while working on that set, it occurred to him how to fix the limitations in Backhair, using similar ideas we're using in pox. This change in essence "combines" Backhair & Popcorn.

Re: [SAtalk] SpamAssassin 2.63 is released!

2004-01-21 Thread Bill Randle
Updated RPMS for Mandrake Linux 9.2 are available here: ftp://ftp.neocat.org/perl-Mail-SpamAssassin-2.63-1mdk.i586.rpm ftp://ftp.neocat.org/spamassassin-2.63-1mdk.i586.rpm ftp://ftp.neocat.org/spamassassin-tools-2.63-1mdk.i586.rpm and the SRPM: ftp://ftp.neocat.org/spamassassin-2.63-1mdk.

Re: [SAtalk] Set up

2004-01-21 Thread William Stearns
Good evening, George, On Wed, 21 Jan 2004, George Matos wrote: > I just got my domain name and am trying to setup spam assassin. I have > never used it before so I was looking for some setup instructions etc. > > Wife won't switch emails till I have it setup. > > Thanks in advance.

RE: [SAtalk] Set up

2004-01-21 Thread George Matos
Sorry everyone I am very new to this and am reading the documentation just a bit much. I have set the required hits to 8 and understand white/black list. >From what I have read it seems SA will learn on it's own and with my help correct? MTA I can't answer it's being hosted by realwebhost.net O

Re: [SAtalk] Set up

2004-01-21 Thread Frank Pineau
On Wed, 21 Jan 2004 20:21:07 -0600, you wrote: >I have >never used it before so I was looking for some setup instructions etc. Have you tried any of the fairly extensive documentation on the SpamAssassin website? What, specifically, are you looking for help with? --

Re: [SAtalk] Set up

2004-01-21 Thread Rick Macdougall
George Matos wrote: I just got my domain name and am trying to setup spam assassin. I have never used it before so I was looking for some setup instructions etc. Wife won't switch emails till I have it setup. Hi, MTA, MTU, and any other information would be helpful. Regards, Rick

Re: [SAtalk] RFC822ness of a message

2004-01-21 Thread Rick Macdougall
Justin Mason wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Macdougall writes: Please learn to set your email client to wrap your messages. SA does not add a thread-index or X-Mail-Format-Warning header to any email it process's. I'd check on any other programs that may be handli

[SAtalk] Set up

2004-01-21 Thread George Matos
I just got my domain name and am trying to setup spam assassin.  I have never used it before so I was looking for some setup instructions etc.   Wife won't switch emails till I have it setup.   Thanks in advance. 

Re: [SAtalk] trusted_networks being ignored at times?

2004-01-21 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will McCutcheon writes: >I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22. > >I have a mail server running on a cable modem whose IP is a dynamic >pool, so I of course am blacklisted in several RBL's. I am a good boy, >so I h

Re: [SAtalk] Phoneme and Grammar anti-noise scanning ?

2004-01-21 Thread Matthew Cline
On Wednesday 21 January 2004 12:09 am, John August wrote: > This just an idea, in the tradition of 'I've got a good idea and hope > someone else will carry it through'. I don't expect it, but thought I'd > throw it in :) > > I've noticed a lot of spam which tries to dilute scanners by including a >

Re[2]: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Robert Menschel
Hello John, Wednesday, January 21, 2004, 6:42:34 AM, you wrote: JF> I'm pretty new too, and I'd like some clarification about what is "stock" in JF> SA and what's custom. ... Stock rules are anything installed into the SA rules directory when you install SA. Custom is anything else. JF> I see v

[SAtalk] trusted_networks being ignored at times?

2004-01-21 Thread Will McCutcheon
I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22. I have a mail server running on a cable modem whose IP is a dynamic pool, so I of course am blacklisted in several RBL's. I am a good boy, so I have my mail server direct all outgoing mail through my ISP's mail server and

Re: [SAtalk] perl(Digest::SHA1) dependency problem

2004-01-21 Thread Theo Van Dinter
On Wed, Jan 21, 2004 at 09:39:27AM -0700, Joshua Thornburg wrote: > error: Failed dependencies: > perl(Digest::SHA1) is needed by spamassassin-tools-2.63-1 > > I added Digest::SHA1 via perl -MCPAN -e shell and it took with no problems. > But I still get the same dependency error. Any sugg

Re: [SAtalk] /etc/mail/spamassassin/local.cf is ignored

2004-01-21 Thread Ralf Vitasek
Scott Lambert wrote: On Tue, Jan 20, 2004 at 07:35:04AM +0100, Claude Frantz wrote: "John A. Hengstler" wrote: I have noticed this as well. I am using spamd on a separate server, and local.cf on that server is ignored. I can put rules into /usr/local/share/spamassasin and the pull in

[SAtalk] perl(Digest::SHA1) dependency problem

2004-01-21 Thread Joshua Thornburg
Greetings all, First time post, long time SA user. Solved several problems because of the list, but this one I'm totally stuck on. I'm trying to upgrade to the latest version (2.63) of SA from 2.60 and I keep getting this error for the spamassassin tools i386 rpm. error: Failed dependencies:

[SAtalk] Phoneme and Grammar anti-noise scanning ?

2004-01-21 Thread John August
This just an idea, in the tradition of 'I've got a good idea and hope someone else will carry it through'. I don't expect it, but thought I'd throw it in :) I've noticed a lot of spam which tries to dilute scanners by including a lot of strings of random characters put together as words, or real

Re: [SAtalk] Spamassassin on Suse 9.0?

2004-01-21 Thread Mike Grau
Any thoughts on the simplest way of installing spamassassin _and_ keeping it current? On Redhat I used CPAN, no problems with it, guess I'm not 100% sure on the benefits of doing it using CPAN vs RPM. Any other "gotchas" with Suse and Spamassassin that I should know of? Quick search of the archi

Re: [SAtalk] RFC822ness of a message

2004-01-21 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Macdougall writes: >Steven Manross wrote: > >> I use a tool called "Outlook Redemption" (http://www.dimastr.com/Redemption ) to: >> -save an Outlook message as an RFC822 file >> -then run that file through SA, >> -then reimport that message

Re: [SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Robert Menschel
Hello Bret, Wednesday, January 21, 2004, 2:35:06 PM, you wrote: BM> Has anyone successfully made SA on Windows with Perl 5.8.2? I finally BM> gave up on it and went back to Perl 5.6.1. Any suggestions? Had no problem here (under Cygwin): > > spamassassin --version > SpamAssassin version 2.62 >

Re: [SAtalk] RFC822ness of a message

2004-01-21 Thread Rick Macdougall
Steven Manross wrote: I use a tool called "Outlook Redemption" (http://www.dimastr.com/Redemption ) to: -save an Outlook message as an RFC822 file -then run that file through SA, -then reimport that message file back to Outlook (my mailbox only). I am having issues where SA reports incorrect

Re: [SAtalk] SA under MIMEDefang, how to I get autolearn flags added?

2004-01-21 Thread Ian White
On Jan 21, 2004, at 15:36, Mike Batchelor wrote: SA 2.6x run by itself out of .procmailrc or spamc/spamd seems to add an autolearn=X flag to tell you what happened to the message as it interacted with the autolearn system. But I run SA+MD on a relay, and I don't get these flags when calling sp

RE: [SAtalk] UPDATES Tripwire 1.16 and Bigevil 2.06k

2004-01-21 Thread Chris Santerre
Soon there will be one place to go ;) > -Original Message- > From: Frank Pineau [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 20, 2004 8:51 PM > To: Spamassassin-Talk (E-mail) > Subject: Re: [SAtalk] UPDATES Tripwire 1.16 and Bigevil 2.06k > > > > >http://www.merchantsoverseas.com/

Re: [SAtalk] Surprise mail from myself

2004-01-21 Thread Kelson Vibber
At 04:27 PM 1/21/2004, Matt Kettler wrote: If you bring in more context, rather than use whitelist_from_rcvd, he wrote his own rule. Sorry, not reading carefully enough. Kelson Vibber SpeedGate Communications --- The SF.Net email is sponsor

[SAtalk] RFC822ness of a message

2004-01-21 Thread Steven Manross
I use a tool called "Outlook Redemption" (http://www.dimastr.com/Redemption ) to: -save an Outlook message as an RFC822 file -then run that file through SA, -then reimport that message file back to Outlook (my mailbox only). I am having issues where SA reports incorrect RFCness in the export

Re: [SAtalk] SA under MIMEDefang, how to I get autolearn flags added?

2004-01-21 Thread Mike Batchelor
--On Wednesday, January 21, 2004 5:06 PM -0700 Nels Lindquist <[EMAIL PROTECTED]> wrote: What exactly are you trying to accomplish? Maybe there's another way. I want to generate some kind of record in the logs, or record in the mail headers, indicating what the autolearn disposition of the mess

Re: [SAtalk] Surprise mail from myself

2004-01-21 Thread Matt Kettler
At 06:56 PM 1/21/2004, Kelson Vibber wrote: I suspect he did: >At 04:43 PM 1/21/2004, Brad Hazledine wrote: >>However, the rule seems to pick up the "by fargo.caledoncard.com" in the >>header and thinks that all is well. No, he did not use whitelist_from_rcvd. If you bring in more context, rather

[SAtalk] 99_FVGT_Tripwire creates large headers?

2004-01-21 Thread David Watson
I'm using SA 2.60 through spamd with exim 4.30 and exiscan-acl 4.30-14. After adding Tripwire to my rules (some local, bigevil, popcorn) I began to get the following errors in mainlog: 2004-01-17 12:46:35 1AhpqL-0004TL-Bz string_sprintf expansion was longer than 8192 When I remove tripwir

Re: [SAtalk] SA under MIMEDefang, how to I get autolearn flags added?

2004-01-21 Thread Nels Lindquist
On 21 Jan 2004 at 15:36, Mike Batchelor wrote: > SA 2.6x run by itself out of .procmailrc or spamc/spamd seems to add an > autolearn=X flag to tell you what happened to the message as it interacted > with the autolearn system. But I run SA+MD on a relay, and I don't get > these flags when call

Re: [SAtalk] Surprise mail from myself

2004-01-21 Thread Kelson Vibber
At 02:53 PM 1/21/2004, Matt Kettler wrote: Why not change your domain whitelist to a whitelist_from_rcvd command, instead of whitelist_from. I suspect he did: At 04:43 PM 1/21/2004, Brad Hazledine wrote: However, the rule seems to pick up the "by fargo.caledoncard.com" in the header and thinks th

Re: [SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Chuck Campbell
On Wed, Jan 21, 2004 at 03:34:07PM -0800, Bret Miller wrote: > > I downloaded the .srpm and built it. It just uses make. > > (all of this under cygwin). > > > > If this isn;t your environment, I'm not sure how I can help > > further. I did want you to know that it is working under > > Perl 5.8

[SAtalk] SA under MIMEDefang, how to I get autolearn flags added?

2004-01-21 Thread Mike Batchelor
SA 2.6x run by itself out of .procmailrc or spamc/spamd seems to add an autolearn=X flag to tell you what happened to the message as it interacted with the autolearn system. But I run SA+MD on a relay, and I don't get these flags when calling spam_assassin_check() from mimedefang-filter's filt

RE: [SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Bret Miller
> I downloaded the .srpm and built it. It just uses make. > (all of this under cygwin). > > If this isn;t your environment, I'm not sure how I can help > further. I did want you to know that it is working under > Perl 5.8.0 though. OK... I'm running it under ActivePerl 5.6.1 natively in Windows

FW: [SAtalk] How to stop this kind of stuff?

2004-01-21 Thread Kurt Buff
Ooops. Try that again... Full headers at bottom of message: |-Original Message- |From: Evan Platt [mailto:[EMAIL PROTECTED] |Sent: Wednesday, January 21, 2004 15:03 |To: SpamAssassin |Subject: Re: [SAtalk] How to stop this kind of stuff? | | | | |--On Wednesday, January 21, 2004 2:52 PM -

Re: [SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Chuck Campbell
On Wed, Jan 21, 2004 at 02:35:06PM -0800, Bret Miller wrote: > Has anyone successfully made SA on Windows with Perl 5.8.2? I finally > gave up on it and went back to Perl 5.6.1. Any suggestions? > > Bret Bret, I've just made it using Perl v 5.8.0 today and it is working perfectly AFAICT. I know

Re: [SAtalk] How to stop this kind of stuff?

2004-01-21 Thread Evan Platt
--On Wednesday, January 21, 2004 2:52 PM -0800 Kurt Buff <[EMAIL PROTECTED]> wrote: > This one got through, yet it's obvious. > > I'm including two different versions of the message, both saved from our > Exchange 5.5 server. > > Any thoughts appreciated - we're running the new consolidated >

Re: [SAtalk] [RD]FP Backhair - minor change

2004-01-21 Thread Matthias Fuhrmann
On Wed, 21 Jan 2004, Jennifer Wheeler wrote: > Added another more obscure tag. Thanks Kelson. Version 1.3 > thanks for all your work ! regards, Matthias --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools

Re: [SAtalk] Surprise mail from myself

2004-01-21 Thread Matt Kettler
Why not change your domain whitelist to a whitelist_from_rcvd command, instead of whitelist_from. You'll avoid the forgery problem outright. At 04:43 PM 1/21/2004, Brad Hazledine wrote: Has anyone written a rule that catches mail supposedly sent by yourself to yourself? Example here... Receive

[SAtalk] trusted_networks being ignored at times?

2004-01-21 Thread Will McCutcheon
I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22. I have a mail server running on a cable modem whose IP is a dynamic pool, so I of course am blacklisted in several RBL's. I am a good boy, so I have my mail server direct all outgoing mail through my ISP's mail server and

[SAtalk] How to stop this kind of stuff?

2004-01-21 Thread Kurt Buff
This one got through, yet it's obvious. I'm including two different versions of the message, both saved from our Exchange 5.5 server. Any thoughts appreciated - we're running the new consolidated backhair/popcorn, chickenpox, nov2rules, evilnumbers, bigevil, and a few custom rules that I've glean

Re: [SAtalk] More on: user_prefs on a gateway machine

2004-01-21 Thread Jonathan Nichols
Hi, How are you running spamd ? The filter.sh script shows it running spamassassin, not spamc. If you've modified it to run spamc instead of spamassassin, are you passing the username with the -c option to spamc ? Are you running spamd with the -q option to tell it to use SQL preferences?

Re: [SAtalk] doing a kind of "! whitelist_from_rcvd" possible ?

2004-01-21 Thread Matt Kettler
At 04:56 PM 1/21/2004, you wrote: Hi SA offers the possibility of having a "smarter" whitelist which whitelists only if the sending relay is "related" to the sending email, like whitelist_from_rcvd [EMAIL PROTECTED] example.com is there a possibility to somehow do the opposite, ie "blacklist [E

[SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Bret Miller
Has anyone successfully made SA on Windows with Perl 5.8.2? I finally gave up on it and went back to Perl 5.6.1. Any suggestions? Bret --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Int

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Ex change

2004-01-21 Thread Matt Van Gordon
I recommend you follow one of these guides, they both use SpamAssassin     CREATING A SPAMFILTER RELAY SERVER http://www.geocities.com/scottlhenderson/spamfilter.html  Fairly-Secure Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC http://www.flakshack.com/a

Re: [SAtalk] Bayes database per Domain

2004-01-21 Thread Jesse Regier
On 21 Jan 2004 at 13:01, Douglas Kirkland wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Wednesday 21 January 2004 11:59, Jesse Regier wrote: > > Is there a way to have Spamassassin use a seperate bayes database for > > each local domain or group of domains? > > > > It would be

[SAtalk] Catching padding within html tags / title

2004-01-21 Thread sckot
I've noticed several spam mails with a lot of quoted text (quotes from Dave Barry, some of Moby Dick, that sort of thing. Usually all punction is stripped out, but not always.) included within brackets or an HTML title. It's likely being used to counterweight the message against a Bayesian filte

Re: [SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-21 Thread Fernan Aguero
+[ To [EMAIL PROTECTED] <[EMAIL PROTECTED]> (20.Jan.2004 16:09): | | Hi, | | I just installed SpamAssassin-2.6.1 under FreeBSD-4.9. | Installation was from the FreeBSD ports collection. [snipped] | As for the possible cause, yes I have NIS (YP) running. [replying to myself, just for the r

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Fred
Keith Dowell wrote: > I made this point on a mimedefang list. Some people didn't really > like it. I like your point but I have some minor points of interest. > > Computers are too complicated for people to be responsible some said. > > So I tried equating it to maintaining your car in that, if

[SAtalk] Using Mail::SpamAssassin to clean a message

2004-01-21 Thread dap99
I want to be able to take an email message that may contain MIME and HTML and to strip it down to basically nothing but text. (I know that SpamAssassin already does this in large part so that it can analyze the message properly.) So I'm not actually using SpamAssassin to detect spam. Instead, I jus

[SAtalk] doing a kind of "! whitelist_from_rcvd" possible ?

2004-01-21 Thread Oliver Thalmann
Hi SA offers the possibility of having a "smarter" whitelist which whitelists only if the sending relay is "related" to the sending email, like whitelist_from_rcvd [EMAIL PROTECTED] example.com is there a possibility to somehow do the opposite, ie "blacklist [EMAIL PROTECTED] only if the relay

Re: [SAtalk] Why won't SA see my user_prefs?

2004-01-21 Thread Matt Kettler
At 02:00 PM 1/21/2004, [EMAIL PROTECTED] wrote: The spam I was trying to catch doesn't seem to be going through the rules I added. What else do I have to do? I'd start off with a run of spamassassin --lint to make sure you don't have a typo. After that, if it still doesn't work check the debug ou

Re: [SAtalk] More on: user_prefs on a gateway machine

2004-01-21 Thread Rick Macdougall
Jonathan Nichols wrote: Here's my original post, to which I got some great replies (thanks!) but I've run into a bit of an odd snag, detailed below. Ok, so I set up the web interface, the database, and everything that I could think of, but spamd isn't talking to the database. :( I'm callin

[SAtalk] Surprise mail from myself

2004-01-21 Thread Brad Hazledine
Has anyone written a rule that catches mail supposedly sent by yourself to yourself? Example here... Received: from WIN-SYEZX91ADBP ([61.50.222.200]) by fargo.caledoncard.com (8.12.10/8.12.10) with SMTP id i0L6pDT5006761 for <[EMAIL PROTECTED]>; Wed, 21 Jan 2004 01:51:14 -0500 Me

RE: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-21 Thread Alan Munday
Chris > -Original Message- > From: Chris Thielen [mailto:[EMAIL PROTECTED] > Sent: 21 January 2004 14:17 > To: Alan Munday > Subject: RE: [WL] [SAtalk] Yikes.. rules_du_jour > > > On Wed, 2004-01-21 at 20:12, Alan Munday wrote: > > Chris > > > > Maybe the other way to do this is to hav

[SAtalk] More on: user_prefs on a gateway machine

2004-01-21 Thread Jonathan Nichols
Here's my original post, to which I got some great replies (thanks!) but I've run into a bit of an odd snag, detailed below. Hey all, I'm working on a spamassassin gateway machine, and I'm a bit confused on how to set up the machine so users can have their own user_prefs files. * The machin

RE: [SAtalk] Spamassassin on Suse 9.0?

2004-01-21 Thread Todd Schuldt
Working great here - about 100 active accounts now on a small mail server, SuSE 9.0. If your MTA uses spamd we found that the startup script for SuSE 8.2 located at http://devel-home.kde.org/~kmail/unsupported/spamd works great. We install only from cpan for SA on SuSE 9. No issues at all. Todd

[SAtalk] Processing spam in batches

2004-01-21 Thread Yusuf Pisan
I am new to SpamAssassin. I did not want to accidentally lose mail, but even with the Subject being re-written getting SPAM mail throughout the day was distracting. My solution was to filter all mailed labeled as SPAM to a special folder using procmail and then run a cron job to deliver all the s

Re: [SAtalk] Bayes database per Domain

2004-01-21 Thread Douglas Kirkland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 21 January 2004 11:59, Jesse Regier wrote: > Is there a way to have Spamassassin use a seperate bayes database for > each local domain or group of domains? > > It would be nice to have something like... > > bayes_path = /var/spool/$DOMA

[SAtalk] Multi-line matching workarounds?

2004-01-21 Thread sckot
Some archive searching has revealed that multi-line matching isn't available yet. Is there another way to rework this rule that I'm missing, using meta rules perhaps? It would single-handedly get a lot of spam that I get, which is consistantly of the form of three "ambiguous product pitch:\

[SAtalk] [RD]FP Backhair - minor change

2004-01-21 Thread Jennifer Wheeler
Added another more obscure tag. Thanks Kelson. Version 1.3 Jennifer --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anahe

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Mike Kercher
I agree...certainly use MailScanner. Ultimately, this is a job for the MTA though. I can give you exact details on how to do it with sendmail. If you use Postfix, someone else will have to help you. Mike > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On >

[SAtalk] Bayes database per Domain

2004-01-21 Thread Jesse Regier
Is there a way to have Spamassassin use a seperate bayes database for each local domain or group of domains? It would be nice to have something like... bayes_path = /var/spool/$DOMAIN_bayes in the spamassassin.cf file. $DOMAIN would be replaced with the domain from the current recipeint addre

Re: [SAtalk] No To line in header

2004-01-21 Thread st semps
I understand. Thanks -- - Original Message - DATE: Wed, 21 Jan 2004 13:10:55 From: Matt Kettler <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: >At 01:02 PM 1/21/2004, st semps wrote: > >>You see I thought that ToCc was valid. I thought I had read that >>somewh

[SAtalk] OT mebby

2004-01-21 Thread Michael H. Collins
Subconsciously, People may be Bayesian http://www.kuro5hin.org/story/2004/1/20/43756/9394 -- Michael H. Collins Admiral, Penguinista Navy It's us against them. Ride like you stole it! http://linuxlink.com --- The SF.Net email is sponsored b

[SAtalk] procmailrc and bayes

2004-01-21 Thread Andres Tello Abrego
If I use a global procmailrc, bayes is used by only one user (spam). So, statistically, is better to have one bayes database per user, so, how to make a single procmailrc to have one bayes databse for each user? Any ideas? Thanxs --- The SF

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Keith Dowell
Microsoft fix? You can't fix it if it isn't broke :) It's a feature. (kidding) On to what you said. Obviously your friend is savvy enough and intelligent enough to know that he doesn't know enough. So he brings it to you. Sorta my point. When I say have more educated users, this is what I'm real

[SAtalk] perl5.00503 exited on signal 10

2004-01-21 Thread Jack L. Stone
I have been running SA-2.61 with spamd/sendmail/spamass-milter/procmail since Jan 14. Yesterday, I starting getting multiple errors in the logs as: /kernel: pid 349 (perl5.00503), uid 2: exited on signal 10 (or signal 11) The above has been going on since yesterday with hundreds of perl5 drop out

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Bill
> The most appropriate response would be to demand Microsoft fix > their software. That is about as effective as trying to catch your breath in a vacuum. :) --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Too

Re: [SAtalk] RulesDuJour; minor change

2004-01-21 Thread Tim Litwiller
Chris Thielen wrote: On Wed, 2004-01-21 at 18:23, Erik Slooff wrote: Hi Chris, Small change for RulesDuJour: when sa is not in path lint will not succeed (line 313). Maybe you could add a variable that contains the path to sa in the settings? Erik Will do. Should have it up tomorrow, al

[SAtalk] [Ruleset Update] EvilNumbers ver. 1.12 & new language packs

2004-01-21 Thread Matt Yackley
Thanks to Sylvain, Doug K. & Chris P. for their ideas on improving the rules! Changes: Added some more entries (many more to come within the next few days, just need time to process them) Changed "(\s|-|\.)" in phone numbers to "\W+", file should require less memory to run, is easier to read and

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
Thanks! That took care of it. > -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 21, 2004 12:50 PM > To: Jody Cleveland; '[EMAIL PROTECTED]' > Subject: RE: [SAtalk] Not able to run sa-learn > > Correction: the rm should rm bayes.lock, not baye

Re: [SAtalk] autolearn=fail

2004-01-21 Thread Alex S Moore
On Wed, 21 Jan 2004 13:48:30 -0500 Ben Hanson <[EMAIL PROTECTED]> wrote: > I have had Spamassassin running for long enough to have BAYES kick in. > I realized the other day when I checked out all my rulesets with > spamassassin -D --lint, I was getting a BAYES_0 test result. I never > saw suc

[SAtalk] Why won't SA see my user_prefs?

2004-01-21 Thread alayne
I'm running SpamAssassin using spamd, and invoking on my own system through an entry in procmailrc. SpamAssassin runs fine and does indeed properly filter out a lot of spam. Yesterday, I added a number of rules to $HOME/.spamassassin/user_prefs. I ran /home/alayne/sausr/bin/spamassassin -D < /tmp

[SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
Hello, I'm running spamassassin 2.62 with MailScanner on redhat 9. What I'm trying to run is this: sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --mbox /var/spool/mail/bayes But, it just sits there. Sa-learn --rebuild and --force-expire work fine. When I first upgraded from 2.61 to

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Matthew Hunter
On Wed, Jan 21, 2004 at 12:13:26PM -0500, Chris Santerre <[EMAIL PROTECTED]> wrote: > I know tons of people with broadband connections that might be on only a few > times a week. Some don't even notice their cpu is slower. I also know some > pretty intelligent people that despite what they try, sti

Re: [SAtalk] RulesDuJour; minor change

2004-01-21 Thread Chris Thielen
On Wed, 2004-01-21 at 18:23, Erik Slooff wrote: > Hi Chris, > > Small change for RulesDuJour: when sa is not in path lint will not succeed > (line 313). Maybe you could add a variable that contains the path to sa in > the settings? > > Erik > Will do. Should have it up tomorrow, along with so

[SAtalk] autolearn=fail

2004-01-21 Thread Ben Hanson
I have had Spamassassin running for long enough to have BAYES kick in. I realized the other day when I checked out all my rulesets with spamassassin -D --lint, I was getting a BAYES_0 test result. I never saw such a thing from my email. I figured out that I needed to specifically run spamc a

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Matt Kettler
At 01:41 PM 1/21/2004, Jody Cleveland wrote: Here's what I get: debug: Syncing Bayes journal and expiring old tokens... debug: lock: 21404 created /etc/MailScanner/bayes/bayes.lock.mystique.winnefox.org.21404 debug: lock: 21404 trying to get lock on /etc/MailScanner/bayes/bayes with 0 retries The t

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Matt Kettler
Correction: the rm should rm bayes.lock, not bayes_*.lock. My typo. At 01:41 PM 1/21/2004, Jody Cleveland wrote: Here's what I get: debug: Syncing Bayes journal and expiring old tokens... debug: lock: 21404 created /etc/MailScanner/bayes/bayes.lock.mystique.winnefox.org.21404 debug: lock: 21404 tr

[SAtalk] SpamAssassin 2.63 rpms & srpm

2004-01-21 Thread Caleb Maclennan
SpamAssassin 2.63 SRPM: http://rpms.alerque.com/SRPMS/spamassassin-2.63-1.src.rpm SpamAssassin 2.63 RPMS compiled for PLD i686: http://rpms.alerque.com/RPMS/ --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools

RE: [SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Gary Funck
> > I'm not sure I'd do this. One day (for a bunch of reasons) I whitelisted > my own address, and promptly got a bunch of spam "from" myself. > Good point, but all local addresses can (and must) be verified based upon the incoming gateway's Received: header. ---

  1   2   >