Peggy
Search for it at http://search.cpan.org
Alan
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Peggy
> Sent: 29 January 2004 15:29
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Re: Installation failure
>
>
> Hi,
>
>
>
> Does anyone kno
I think that given that there is a virus storm going on right now, that this
sort of behaviour could be expected.
Alan
>
> I actually just noticed this now. The razor2 servers aren't
> responding
> properly it would seem. Haven't since yesterday.
-
Chris
Likewise... I have a client who designs websites with ColdFusion.
He was having a nightmare time with spam so I routed his mail through my
server...
The consequence of this was that we could see that all of the mail he
originated from his web sites were scoring high.
Now he has re-written
Yes, and now it appears to be mirrored by Spamhaus at xbl.spamhaus.org
I've used them on the firewall and have swapped there order. Whichever is
first takes all the hits, Whichever is second gets 0.
These sites account for 60% of the total rejects I see for mail.
regards
Alan
> -Original
Look at: http://www.spamassassin.org/doc/Mail_SpamAssassin_Conf.html
Scroll down to the section: NETWORK TEST OPTIONS
regards
Alan
> Can someone point me to any docs on network tests and/or how
> to switch them
> on?
>
> Thanks
>
> Dougie
---
> hmm, sorry mate.
> i should have said this earlier, so i do it now. i was able
> to fix it for
> sendmail/milterassassin/spamd . at laest the spam/ham count
> works ( top
> spam receiver dont).
> it works here using 'spamstats0.4b5.pl-fixed /var/log/syslog'
> w/o any further options, grabbing
I used to be part of a group trying to specify how to look after 65000 PC
users.
We determined that we only had three types of user:
1) Those that knew that they did not know what they were doing.
Easy to support as they did not touch anything.
2) Those that knew what they were doing.
Chris
> -Original Message-
> From: Chris Thielen [mailto:[EMAIL PROTECTED]
> Sent: 21 January 2004 14:17
> To: Alan Munday
> Subject: RE: [WL] [SAtalk] Yikes.. rules_du_jour
>
>
> On Wed, 2004-01-21 at 20:12, Alan Munday wrote:
> > Chris
> >
>
Does this not boil down to the globally effective legal footprint for
Habeas?
That is if you are a spammer and originate from outside this footprint you
won't have any problems abusing the mark.
My 0.02 English pence worth.
Alan
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto
Mark
Look at this howto: http://advosys.ca/papers/postfix-filtering.html
Check the section on filtered domains.
You can put domain.com or [EMAIL PROTECTED] selectively in this file.
Alan
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Mark S
Chris Santerre [mailto:[EMAIL PROTECTED]
> Sent: 15 January 2004 21:46
> To: 'Alan Munday'; [EMAIL PROTECTED]
> Subject: RE: [SAtalk] FP on MY_HTTP_ODD_PORT
>
>
> We are working on a way to manage the custom rules A LOT
> better. Also we
> will have some of t
r [mailto:[EMAIL PROTECTED]
> Sent: 15 January 2004 21:13
> To: Alan Munday; [EMAIL PROTECTED]
> Subject: Re: [SAtalk] FP on MY_HTTP_ODD_PORT
>
>
> At 03:41 PM 1/15/2004, Alan Munday wrote:
> >Just had the mail below trigger on:
> >
> > 2.0 MY_HTTP_ODD_POR
Just had the mail below trigger on:
2.0 MY_HTTP_ODD_PORT URI: Link to a server on nonstandard port
Why Vailresorts would want to go to the effort of declaring port 80 in their
link is a mystery.
However it is clearly not a non-standard port.
Alan
-Original Message-
From: e-Mount
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Charles Gregory
> Sent: 13 January 2004 15:29
> To: [EMAIL PROTECTED]
> Subject: Re: [WL] Re: [SAtalk] OT: forged habeus mark
>
>
> What I *would* suggest, to help habeas win the fight, is
> set
> > Send them to [EMAIL PROTECTED] I dug through my spam
> corpus and found
> > 8 so far this month and just sent them off. We'll see what happens.
>
> I agree on reporting them. But it should be obvious in the
> short term, if
> these things become annoying, just set the score for the
> habe
Carl
I think you will find that there are many different ways that people
configure there SA.
Here I:
mark at 5.0 (occasional FP's)
Delete at 10.0 (No FP's.. Yet)
Alan
> -Original Message-
> Behalf Of Carl Chipman
> Sent: 12 January 2004 15:33
> To: [EMAIL PROTECTED]
> Subject: [SAtalk
BH> Bryan Hoover wrote:
BH> >
BH> > Alan Munday wrote:
BH> > >
BH> > > Is anyone finding pyzor reporting a bit hit and miss?
BH> >
BH> > Just got my first spam in days today. Taught Bayes,
BH> reported to Razor2,
BH> > and you reminded
Is anyone finding pyzor reporting a bit hit and miss?
Reporting using:
$ formail -s spamassassin -r < /var/spool/mail/spamtrap
Gave a pyzor error for each of the messages:
Pyzor -> report failed: Exited with non-zero exit code 1
Running:
Pyzor report --mbox < /var/spool/mail/spamtrap
Came b
I've seen a number of these a few weeks ago. Mostly came in via a mail list.
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stewart,
John
Sent: 09 January 2004 15:43
To: [EMAIL PROTECTED]
Subject: [SAtalk] Empty spam?
I, as well as many others
Look at http://www.spamassassin.org/doc/Mail_SpamAssassin_Conf.html
You will probably be interested in the add_header and the tags.
These are some that I use:
add_header all Status _YESNO_, hits=_HITS_ required=_REQD_
autolearn=_AUTOLEARN_ version=_VERSION_
add_header ham Report _REPORT_
add_
If they exist, can someone point me to where the options are for add_header
for Razor2 please?
Thanks
Alan
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advan
If they exist, can someone point me to where the options are for add_header
for Razor2 please?
Thanks
Alan
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advan
That's OK then.
What probably made it more confusing was that I put them in to a dir called
bayes.
Alan
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: 06 January 2004 19:34
To: Alan Munday; 'Spamassassin-Talk (E-mail)'
Subject: Re: [SAtalk] Baye
Just in case this this is not common knowledge...
I moved to using a site-wide bayes DB this week.
In doing so I needed to set the following in my local.cf:
bayes_path /var/spool/spamassassin/bayes/bayes
The odd bit for me was that I expected the path to be:
/var/spool/spamassass
I don't think AWL is working on my system.
All elements appear to be in place...
In local.cf:
# Auto Whitelist
auto_whitelist_path /var/spool/spamassassin/auto-whitelist
auto_whitelist_file_mode0666
I've also opened up the perms on this dir (0770).
And SPAMD is being called with
Chris
I can't get past so-1-0-0.bbr2.NewYork1.Level3.net
I have not been able to get there for a few hours now and assumed a routing
issue.
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chris
Santerre
Sent: 06 January 2004 16:14
To: Spamassassi
Andrew
Having a home server one of the configurations I use is:
Fetchmail -- to get the POP mail to -- Postfix -- Which calls -- SA.
I had Postfix and Fetchmail running before I started then used the Advosys
guide (http://advosys.ca/papers/postfix-filtering.html) to add SA and Anomy.
HTH
Alan
Jennifer's Backhair rules catch this.
Go see http://www.emtinc.net/spamhammers.htm
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chip
Sutton
Sent: 02 January 2004 18:21
To: [EMAIL PROTECTED]
Subject: [SAtalk] Obfuscation using bogus tags in text
I think it all depends on how you want to call SA.
If you take a look at the Advosys
(http://advosys.ca/papers/postfix-filtering.html) site they run SA from a
script which allows you to configure your desired action.
Here I changed this so that I filter some and delete others.
regards
Alan
Larry
Closer... But that gets me back to a Digest::SHA1 error which I've been
running around with for a while now.
Thanks
Alan
-Original Message-
From: Larry Gilson [mailto:[EMAIL PROTECTED]
Sent: 18 December 2003 22:29
To: 'Alan Munday'
Cc: 'Spamassassin-List&#
Dam... Yet another attempt to install Razor2 foiled.
I get failed dependency errors for Mail::Internet and Digest::Nilsimsa when
I try and rpmbuild from the src.rpm
However when I use CPAN its telling me they are up to date.
Seems as if I'm never destined to get Razor installed. :-(
Alan
:-)
Does this include the SDK?
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Theo Van
Dinter
Sent: 18 December 2003 16:44
To: Larry Gilson
Cc: 'Spamassassin-List'
Subject: Re: [SAtalk] Source RPMs - Razor2 and DCC
On Thu, Dec 18, 2003 at 09:38:32AM -0
cember 2003 19:29
To: Alan Munday; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Pyzor
Alan:
Do you find any value running Pyzor? I gave up on it long ago, as it never
seemed to hit on any quantity of Spam.
BTW: I normally test things by doing a sp
EMAIL PROTECTED] On Behalf Of Alan
Munday
Sent: 17 December 2003 11:06
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: [SAtalk] SA/DCC issues.
Having installed DCC (1.2.21) all looked good when I ran test mail through
SA (2.61) in debug mode.
However I've noticed that all delivered
Having installed DCC (1.2.21) all looked good when I ran test mail through
SA (2.61) in debug mode.
However I've noticed that all delivered mails have blank DCC header entries
of "X-Spam-DCC: :" e.g.
Date: Wed, 17 Dec 2003 02:36:06 -0800 (PST)
X-Spam-DCC: :
X-Spam-Checker-Version: SpamAssassin
I think its pretty much the same for all nix's if it is supported (check
google).
I have the following line in my fstab:
tmpfs /var/spool/filter tmpfs size=100M 0 0
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Network
Admin
Sent: 15 December
] Pyzor
on 12/16/03 5:36 AM, Alan Munday at [EMAIL PROTECTED]
wrote:
> I installed Pyzor last night (0.4.0 on SA 2.60)
>
> All seems well. I can run it from the command line, have done the discover
> and checked with Spamassassin -D (as root and the mail user) which
detected
> pyzor a
Martin
Thanks... Found it.
I'm calling spamassassin from a script file driving anomy (from the Advosys
postfix/spamassassin/anomy howto)
That was using -L which I've now removed.
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Martin,
Jeremy
Sen
] Pyzor
on 12/16/03 5:36 AM, Alan Munday at [EMAIL PROTECTED]
wrote:
> I installed Pyzor last night (0.4.0 on SA 2.60)
>
> All seems well. I can run it from the command line, have done the discover
> and checked with Spamassassin -D (as root and the mail user) which
detected
> pyz
I installed Pyzor last night (0.4.0 on SA 2.60)
All seems well. I can run it from the command line, have done the discover
and checked with Spamassassin -D (as root and the mail user) which detected
pyzor and reported the mail.
So... This morning I'm browsing through a few hundred of the overnig
I've hit a problem upgrading to 2.61... (on RedHat 8)
I think the root of the problem is that having installed 2.60 I then
proceeded to install Razor2. Instead of installing the razor-agents-sdk
package, I tried installing the Perl modules from CPAN:. When this failed,
due to perl dependency error
You could just try:
subject_tag [SPAM-_HITS_]
In your spamassassin local.cf
Which will give you something like:
[SPAM-5.76] {rest of subject}
[SPAM-13.80] {rest of subject}
Your mail client can then sort on subject and the scores will be in order.
Alan
-Original Message
With various threads talking, and questioning, about blacklists I have
started to try and understand these a bit more.
My own setup uses those lists given below, though these run from my firewall
mail proxy rather than from any of the mail handling applications.
>From this weeks mail log I have
Oz
It is not so clear from a header when the mail does not get marked as spam.
In you example there is "tests=BAYES_00" this will be reducing the score as
the Bayes engine has attributed a very low probability of this message being
spam. It has therefore reduced by the score by the default amount
Matt
Well it certainly passes lint with the extra /
Ignoring comments and blank lines I count line 21.
regards
Alan
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: 26 November 2003 23:42
To: Alan Munday; [EMAIL PROTECTED]
Subject: Re: [SAtalk] Lint and
I'm not sure if this is old news...
If I lint with this in the SaUriCustomRules
uri MY_YAHOO_BOUNCED /http:\/\/srd\.yahoo\.com\/drst\/.*\*
http:\/\/
describe MY_YAHOO_BOUNCED Trying to hide real URL through Yahoo redirect
score MY_YAHOO_BOUNCED0.5
I get a shed load of erro
I tag at 5.0 and delete (don't deliver) at 10.0
I see false positives between 5.0 and 9.9 but not over 10.0
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Chapman
Sent: 24 November 2003 21:58
To: [EMAIL PROTECTED]
Subject: [SAtalk] What leve
TABLE and me
doing a some reading of the manual (that nearly always helps).
regards
Alan
-Original Message-
From: jennifer [mailto:[EMAIL PROTECTED]
Sent: 23 November 2003 23:47
To: 'Alan Munday'; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Rules, rules and more rules
Hi Alan
Just had a mail in which had different *'s and score. I was expecting these
to be the same as I egrep the file and count the stars in post
processing.
X-Spam-Level:
X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_20,HTML_30_40,
HTML_MESSAGE,HTML_RELAYING_FRAME,MICROSOFT_EX
TABLE and me
doing a some reading of the manual (that nearly always helps).
regards
Alan
-Original Message-
From: jennifer [mailto:[EMAIL PROTECTED]
Sent: 23 November 2003 23:47
To: 'Alan Munday'; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Rules, rules and more rules
Hi Alan
as I separate
non-spam, from marked and delivered (5+) and marked and dumped into a
spamtrap (10+).
Regards
Alan
-Original Message-
From: Simon Byrnand [mailto:[EMAIL PROTECTED]
Sent: 23 November 2003 22:54
To: Alan Munday; [EMAIL PROTECTED]
Subject: Re: [SAtalk] Score
>Is there
Thanks to all who responded to me with hints and suggestions.
I had seen all the web sites mentioned but had not completely understood how
they all fitted together. Maybe a topic for the FAQ?
I've tried adding a fair number of rules and, noting comments made, had the
notion of asking if it would
Thanks...
Didn't think to look at the FAQs (Which I normally do).
Shows you what happens when you act on impulse.
Alan
-Original Message-
From: Martin Radford [mailto:[EMAIL PROTECTED]
Sent: 23 November 2003 22:34
To: Alan Munday
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk]
Just had a mail in which had different *'s and score. I was expecting these
to be the same as I egrep the file and count the stars in post
processing.
X-Spam-Level:
X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_20,HTML_30_40,
HTML_MESSAGE,HTML_RELAYING_FRAME,MICROSOFT_EX
Having only recently installed SA I'd like to ask about the various rules
files that abound.
Is there a listing of the common rules and their target?
Are they all just a matter of dropping the .ch into the SA configuration
directory, or is it best to edit before deploying?
Are there any recomme
Bret
Thanks for your response.
I've dropped those recommended onto my system. I'll see how they go.
regards
Alan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bret
Miller
Sent: 21 November 2003 20:54
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Rules,
dford
Sent: 15 November 2003 14:07
To: Alan Munday
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] SA-Learn. Clarification question.
At Fri Nov 14 23:03:42 2003, Alan Munday wrote:
>
> Having just read the FAQ's can I just check the requirements for the
> source SPAM/HAM mail for sa-lea
Having just read the FAQ's can I just check the requirements for the source
SPAM/HAM mail for sa-learn?
Do the contents of the sources messages need to be false positives for the
HAM file and false negatives for the SPAM file?
I can see that I'll be able to assemble 200 false negatives easily, h
58 matches
Mail list logo
