I wonder why spamassassin didn't calculate a higher score for this mail.
Are not "adu1t", "p0rn", and "m0vies" words that trigger some spam
points?
The mail with the relevant headers is appended.
--
andreas
Date: Sat, 24 Jan 2004 19:54:27 GMT
From: Oadqn Xazazagis <[EMAIL PROTECTED]>
To:
--On Friday, January 23, 2004 10:18 AM -0800 JR <[EMAIL PROTECTED]>
wrote:
But now I'm faced with the daunting task of upgrading (via CPAN on RH
7.2, and I don't know squat about CPAN) from 2.55.
7.2 has been end-of-lifed, so you might think about starting from scratch.
I'd suggest getting a spa
I just made a related post minutes after this original post. I am
experiencing the exact same issue and included my headers with the original
post entitled "Strange Headers - no score assigned"
Thanks in advance for any help you can provide.
James
-Original Message-
From: [EMAIL PROTECT
At 02:00 AM 1/28/2004, Simon Byrnand wrote:
Has anyone else noticed frequent timeouts with Razor2 ?
I disabled it Friday due to timeouts.
In my experience, razor often has short-term problems that last a couple
days then clear up.
Right now they're probably experiencing high load, just like ever
me either
> -Original Message-
> From: Tim B [mailto:[EMAIL PROTECTED]
> Sent: 26 January 2004 06:44
> To: Spamassassin List
> Subject: [SAtalk] the list itself???
>
>
> did I get booted off the list, no list traffic or is
> sourceforge down?
> I haven't gotten anything really since fr
Matthew Trent wrote:
> John Wilcock wrote:
> That would also help with the problem of the report exceeding Exim's
header
> size limit when a ton of TW or BH rules hit.
I need to do more testing, here is the early results from my personal
corpus.
It appears with the current score, the rules are les
>From: Matthew Trent <[EMAIL PROTECTED]>
>Subject: [SAtalk] Re: Meta-tripwire idea
>To: [EMAIL PROTECTED]
>Date: Tue, 27 Jan 2004 08:06:41 -0800
...
>That would also help with the problem of the report exceeding
>Exim's header size limit when a ton of TW or BH rules hit.
I suspect this is the pr
Thank you for your answer!
One thing - the blackhair.cf, should it be part of my current local.cf,
or will it work by simply adding the file to "/etc/mail/spamassassin/"?
Will I need to modify anything else to refer to this file?
On Mon, 2004-01-26 at 13:46, Adam D. Lopresto wrote:
> Actually
Wow. I sent that e-mail out last *week*, and it is just dribbling in today.
Received: from intrepid.intrepid.com ([192.195.190.1]
ident=[1qHbG1J2WyZEN0gY3ydWgHO2WHps6+zg])
by sc8-sf-mx1.sourceforge.net with esmtp (TLSv1:AES256-SHA:256)
(Exim 4.30) id 1Ak5VT-TZ-H9
for [
Hey,
i have a _very_ large bayes DB with about 2million tokens. I dont want
to lose all my token data but for some reason bayes wont expire. I keep
getting the following error.
synced Bayes databases from journal in 88 seconds: 52849 unique entries
(83822 total entries)
debug: bayes: expiry ch
> I have messages I am desperatly trying to whitelist from SA.
> I am using SpamAssassin on a Solaris 8 server using sendmail
> 8.12.10 and MIMEDefang.
>
> I have tried various lines in
> /etc/mail/spamassassin/sa-mimedefang.cf to no avail:
>
>whitelist_from [EMAIL PROTECTED]
>whitelis
On Wed, 21 Jan 2004, Matt Kettler wrote:
> At 10:41 PM 1/20/04 -0600, C. Bensend wrote:
> >Is the problem that I'm _forwarding_ the tagged emails from one host
> >to the other? I don't have the capability to bounce, I can only forward.
>
> A forwarded message is a brand new message. That bran
At 10:22 AM 1/23/2004, JRiley wrote:
HolyMoly...69.27 seconds?!
How'd you port SpamAssassin to run on a Commodore Vic-20?
Something tells me that most of that time is likely due a couple of network
tests that are timing out for _every_ email.
ie: he might have DCC installed, but not allow the UDP
A couple days ago, I wrote:
> Some archive searching has revealed that multi-line matching isn't
> available yet. Is there another way to rework this rule that I'm
> missing, using meta rules perhaps? It would single-handedly get a lot of
> spam that I get, which is consistantly of the form o
At Fri Jan 23 19:44:34 2004, Brett Dikeman wrote:
>
> Also- maybe it's just me, but it seems rather silly to not allow the
> user to auto-learn messages that have been whitelisted, either sitewide
> or user-specific. Could someone a)explain the reasoning here and b)tell
> me how to change this?
At Fri Jan 23 21:30:58 2004, Martin Radford wrote:
Five days to reach the list! I hoped SF would have cleared the
backlog sooner than that!
> This seems to be a signature with these mails, but I haven't put
> together a rule for them yet. The following *might* work:
>
> header L_SPAMMY_RCVD R
Hi,
I am trying to install SpamAssassin 2.63 under SunOS 5.9 by making
libsnp.a; however, I keep encountering the following error:
gcc -I. -c -o snprintf.o snprintf.c
snprintf.c: In function `__uqtoa':
snprintf.c:183: error: conversion to non-scalar type requested
snprintf.c:185: error: incom
On Fri, 2004-01-23 at 15:19, Justin Mason wrote:
>
> svn co http://svn.apache.org/repos/asf/incubator/spamassassin/trunk
>
> or http://svn.apache.org/viewcvs.cgi/incubator/spamassassin/trunk/?root=Apache-SVN
>
> - --j.
I tried those and got a connection timeout. Anyone else have this
problem?
Hello Matt,
Wednesday, January 28, 2004, 7:59:48 PM, you wrote:
MK> Sweet.. thanks man, I've been meaning to run mass-check on it myself..
MK> I've been wondering about the FPs in the MALEDYSFUNCTION rules.. it's
MK> obvious all the FPs hit both it and obfu, which is weird.
MK> I've had several
Martin Radford wrote:
It might be because you get the occasional false positive that you
want to avoid (but all the rest come under your threshold). You
probably would want these autolearned as ham.
Actually, at the moment the bayes engine thinks 99% of the messages
going through it are spam, si
Hello,
I don't know if this is anything, but I figured that I would ask anyway. When I run
make test to test if my build is fine I get the following error message in my log.
Jan 23 15:15:46 spamtest.server.net spamc[8880]: [ID 990649 mail.error]
connect(AF_INET) to spamd at 127.0.0.1 failed, r
At Wed Jan 28 09:39:06 2004, jean-christophe valiere wrote:
> I agree with what you said, the probleme is that in the mail I attached the word
> have some swaped letters like:
> Hi,
>
> Genierc and Sepur Viarga (Caiils) available online!
> Most trusted online source!
>
>
>
I was wondering that same thing, and have noticed that setting it to 0
will still update the database with information. Any way to completely
turn this functionality off?
Gavin
> At 04:40 PM 1/23/04 +0200, snowchyld wrote:
>>how do you turn _off_ AWL ?
>
>
> Depends on version, but in 2.6x it i
Hello PieterB,
Monday, January 26, 2004, 8:03:45 AM, you wrote:
P> Is there some way to prevent spamassassin from using SA-talk messages
P> for Bayes auto_learning. My bayes filter seems to be less effective
P> since a lot of spamphrases/tokens are discussed on this list.
My method:
1) I subscri
Hello David,
Saturday, January 24, 2004, 8:01:24 PM, you wrote:
DH> I've been playing with bayes on my home machine and have been very impressed
DH> with it. I was however wondering to what degree everyone else trusts
DH> BAYES_99? Is it generally accepted as a sure spamsign or do you expect ti
At 08:10 AM 1/28/04 +0200, Thomas Kinghorn wrote:
My spamd is running as xadmin
xadmin 17057 1 0 Jan27 ?00:00:22 /usr/bin/perl -T -w
/usr/bin/spamd -d -a -u xadmin
Do I need to run sa-learn as xadmin
If so, I could kick myself, I have been training it while logged in as
root...
i'm new to this list, so hi to all first...
i have the following problem here:
i want to use the userprefs, stored in a sql database.
i start spamd with "-a -x -q -D"
spamass-milter is started with -u and in my logs i get the messages,
that a sql query is done:
Jan 26 12:41:34 explorer s
Hi,
I failed to install spamassassin 2.63 on Unix 5.9. When I tried to make
libsnp.a, I got the following error:
[EMAIL PROTECTED] 569> gmake libsnp.a
gcc -I. -c -o snprintf.o snprintf.c
snprintf.c: In function `__uqtoa':
snprintf.c:183: error: conversion to non-scalar type requested
Matt Thoene Sent: Saturday, January 24, 2004 2:09 PM
> Sorry for this, I stopped receiving spamassassin-talk emails late
> Friday night...
Doesn't look like anyone's been getting them. Either that or we all decided
to take a break this weekend. Any theories? There's nothing in the archive
at gman
On Thu, 2004-01-22 at 11:48, Atif Faruqui wrote:
> Hi,
>
> I am running Qmail-1.03 running qmail-scanner-1.16 which calls SpamAssassin-2.61.
> This is running on a Solaris 9 box. This is a relay configuration in which relay
> server
> accepts mail, do spam filtering (spamassassin) and virus check
> is this list working today?
Seems off and on... I posted a few hours ago and haven't seen it yet. I've
also gotten several copies of mail sent over the weekend.
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on O
How is the resource useage with clamav? I'm tempted to install it, but
the cpus on that server are already pretty stressed just dealing with
spamc (I already offloaded spamd to another box) and everything else it
has to do, and am hesitant to add much more...
TIA,
On Wed, 28 Jan 2004, Richard B
I think that given that there is a virus storm going on right now, that this
sort of behaviour could be expected.
Alan
>
> I actually just noticed this now. The razor2 servers aren't
> responding
> properly it would seem. Haven't since yesterday.
-
Ah, I see now. It's probably the link to exclaimer.co.uk which is a
product that puts boilerplate disclaimers at the end of Exchange 200x
emails. Lawyers love those things. Idunno why it's in there.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
>
Hello John,
Monday, January 26, 2004, 5:10:32 AM, you wrote:
JW> It struck me that since individual tripwire rules are at risk of FPs,
JW> but that multiple tripwire hits on the same message are much less so,
JW> it might be worthwhile assigning a significantly higher score to
JW> messages that h
Chris
Likewise... I have a client who designs websites with ColdFusion.
He was having a nightmare time with spam so I routed his mail through my
server...
The consequence of this was that we could see that all of the mail he
originated from his web sites were scoring high.
Now he has re-written
Greetings,
Has anyone implemented SpamAssassin on a mail server running sendmail
and Cyrus's IMAP Server? If so, did you run into any problems?
Regards,
Pete
Peter P. Benac, CCNA
Emacolet Networking Services, Inc
Providing Systems and Network Consulting, Training, Web Hosting Services
P
Thanks for all the help guys. I've installed clamav and set it to quietly
refuse the Novarg virus (rather than trying to bounce all back to
non-existent senders), and it seems to be successfully stomping on the
beasty.
Thanks again -
Regards,
Richard
-Original Message-
From: [EMAIL PRO
On Fri, 23 Jan 2004, AltGrendel wrote:
> On Fri, 2004-01-23 at 00:14, Bob Apthorpe wrote:
> > Hi,
> >
> > On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One <[EMAIL PROTECTED]> wrote:
> >
> > > On 1/22/2004 1:15 PM, Bob Apthorpe wrote:
> > >
> > > > Note: I think this my hacked-up version of sa-stats.p
Matt Kettler wrote:
> At 10:19 AM 1/23/2004, Mark Squire wrote:
> >Hi all,
> >I have been training SA manually for a couple of weeks now. I estimate
> >a good 2000 emails for both Spam and Ham have been learned by it.
> >Coupla questions though . . . I want to put it into auto-learn mode
> >becaus
It's great, I run it at the MTA level and it drops tons of junk without
any false positives to date (after about 4 months usage).
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
Wilder
Sent: Monday, January 26, 2004 5:50 PM
To: Spamassassin Lis
Sorry about that.
My spamd is running as xadmin
xadmin 17057 1 0 Jan27 ?00:00:22 /usr/bin/perl -T -w
/usr/bin/spamd -d -a -u xadmin
Do I need to run sa-learn as xadmin
If so, I could kick myself, I have been training it while logged in as
root...
Thanks
Tom
> -Original
I received a report of an FP in bigevil. The domain was
playaudiomessage.com. A quick google shows tons of hits in
news.admin.net-abuse.sightings. It had been my hope the bigevil would be
ZERO fp. However I'm not going to let the fact that a domain may be used 90%
by spammers and 10% by legit sway
On Mon, 2004-01-26 at 13:06, Douglas Kirkland wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On Monday 26 January 2004 07:28, Thorsten Schacht wrote:
> > Hey,
> >
> > What is your opinion to that cf's?
> > Does it make sence to take them all, or maybe only parts of them?
> > Is it a
On Tue, 27 Jan 2004, Robert Menschel wrote:
> I submit all my rules through the online Bugzilla system, following the
> documentation at http://wiki.spamassassin.org/w/ContributingNewRules
Well, thank you yet again, for your help. I have (finally?) submitted
this proposed rule as bug #2982.
I k
On Wed, Jan 28, 2004 at 11:17:15AM -0500, Robb Bryn wrote:
> Is there anyway to clear all the HAM for Bayes and retrain it without
> loosing all the SPAM?
If you have all the messages you've learned from, you could loop over
each one and do a "sa-learn --forget".
Otherwise, no.
--
Randomly Gene
--On Thursday, January 22, 2004 6:17 PM -0600 Kenneth Andresen
<[EMAIL PROTECTED]> wrote:
That the mail box users are going to /dev/null have been a practice from
the server administrators before me. I don't know the original reason
for why /dev/null was selected, however I can surely change it i
On Mon, 26 Jan 2004, Regis Wilson wrote:
> As was noted before, a negative test will false-positive when there is
> no X-O-IP header.
Right, but I did resubmit the rule with an [if-unset] clause added. If
you missed that message, I can resend you a copy off-list, but the gist
is to simply append
Chris .. when are you gonna have the "I *heart* BigEvil" apparel and gifts
on cybercafe? :) (see my notes below)
- Original Message -
From: "Chris Santerre" <[EMAIL PROTECTED]>
To: "Spamassassin-Talk (E-mail)" <[EMAIL PROTECTED]>
Sent: Friday, January 23, 2004 9:30 AM
Subject: [SAtalk]
A couple days ago, I wrote:
> Some archive searching has revealed that multi-line matching isn't
> available yet. Is there another way to rework this rule that I'm
> missing, using meta rules perhaps? It would single-handedly get a lot of
> spam that I get, which is consistantly of the form o
I am attaching my current .procmailrc (it's not long). I would like to
tweak this to help make things run both faster and smoother for me.
1) instead of just checking the subject line for messages with the SA
markup from my ISP (which is redunant), I would simply like to use
promail to remove the
> Just wanted to find out if verson 2.63 inserts lines into
> message body of messages it sees as spam. Currently using
> 2.60 which does do that.
>
> Or maybe its configurable and I can set it so it doesn't do
> that. Confining insertion to headers only?
It shouldn't be modifying the body of a m
52 matches
Mail list logo