Re: [SAtalk] autolearning spam as ham?

2004-01-30 Thread Bob Apthorpe
ctorant impertinent aft conceit chilean morel delude godfrey > deniable capstan actinic studio chloride copter caustic speedy cottrell fit piper > beta dialect wendy role collapsible total baptiste lofty crowberry enforceable > huckleberry sinclair tied > > > --95731644074591056620

Re: [SAtalk] Re: Installation failure

2004-01-30 Thread Bob Apthorpe
On Thu, 29 Jan 2004 15:28:31 + (UTC) Peggy <[EMAIL PROTECTED]> wrote: > Does anyone know where to download HTML::Parser 3.24 for SunOS 5.9 from as I > always got the following warning when I run the command "perl Makefile.PL > PREFIX=${Prefix} SYSCONFDIR=/prod/config" for Mail-SpamAssassin-2

Re: [SAtalk] stats

2004-01-30 Thread Bob Apthorpe
Hi, On Mon, 26 Jan 2004, AltGrendel wrote: > On Fri, 2004-01-23 at 15:19, Justin Mason wrote: > > > > svn co http://svn.apache.org/repos/asf/incubator/spamassassin/trunk > > > > or http://svn.apache.org/viewcvs.cgi/incubator/spamassassin/trunk/?root=Apache-SVN > > I tried those and got a connecti

Re: [SAtalk] stats

2004-01-29 Thread Bob Apthorpe
On Fri, 23 Jan 2004, AltGrendel wrote: > On Fri, 2004-01-23 at 00:14, Bob Apthorpe wrote: > > Hi, > > > > On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One <[EMAIL PROTECTED]> wrote: > > > > > On 1/22/2004 1:15 PM, Bob Apthorpe wrote: > > > &g

Re: [SAtalk] stats

2004-01-28 Thread Bob Apthorpe
Hi, On Fri, 23 Jan 2004 17:15:19 -0600 "Smart,Dan" <[EMAIL PROTECTED]> wrote: > I would suggest you use SpamStats from http://www.gryzor.com/tools/ > I ran both, and SpamStats reported more of both Spam and Ham. I > suspect sa-stats is missing some records. Actually, I'm starting to believe the

Re: [SAtalk] stats (Slightly OT)

2004-01-28 Thread Bob Apthorpe
Hi, On Mon, 26 Jan 2004 22:09:28 -0600 "Vermyndax" <[EMAIL PROTECTED]> wrote: > Bob... > > Once again, excellent work. Thanks - I give back what I can. > I think my only complaint now is that my master.cf is messing with your > script's ability to report the top spam receivers. [section on us

[SAtalk] spamsources.sh - see who's spamming your Postfix server

2004-01-22 Thread Bob Apthorpe
Hi, Use Postfix? Use spamd? Have a small mail log? Ever wonder which hosts are sending the most spam into your system? Wonder no longer - spamsources.sh is here to answer all your questions about who is spamming you. Maybe. http://www.cynistar.net/~apthorpe/code/sa-contrib/spamsources.sh This 's

Re: [SAtalk] stats

2004-01-22 Thread Bob Apthorpe
Hi, On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One <[EMAIL PROTECTED]> wrote: > On 1/22/2004 1:15 PM, Bob Apthorpe wrote: > > > Note: I think this my hacked-up version of sa-stats.pl at > > http://www.cynistar.net/~apthorpe/code/sa-contrib/sa-stats.pl > > > &

Re: [SAtalk] stats

2004-01-22 Thread Bob Apthorpe
Hi, On Fri, 23 Jan 2004 00:25:02 +0100 (MET) Matthias Fuhrmann <[EMAIL PROTECTED]> wrote: > On Thu, 22 Jan 2004, Vermyndax wrote: > > > Matthias... > > > > Argh, that looked abysmally easy. I guess I could have taken a crack at > > that after all. > > may i take this as a sign of success (my e

RE: [SAtalk] stats

2004-01-22 Thread Bob Apthorpe
Hi, On Thu, 22 Jan 2004, Vermyndax wrote: > I know you probably don't want to hear this, but I still get the same > results. I'm with you, I'm sure the regexp is wrong, but I don't know > perl so I'm not helping I'm sure. The bug is a known issue and IIRC it's been resolved in sa-stats.pl beyon

RE: [SAtalk] stats

2004-01-22 Thread Bob Apthorpe
Hi, On Thu, 22 Jan 2004, Vermyndax wrote: > Hi Bob... > > Thanks for the suggestions. I downloaded the latest sa-stats.pl from > www.sf.net CVS (v1.3) and tried as you suggested, but I'm still getting > all zeros. > > Details... > > My mail logs are at /var/log/mail/maillog. Try this: sa-stats

Re: [SAtalk] stats

2004-01-22 Thread Bob Apthorpe
Hi, On Thu, 22 Jan 2004 06:57:02 -0600 "Vermyndax" <[EMAIL PROTECTED]> wrote: > Greetings all... > > I am trying to implement a way to generate statistics for Spamassassin. > I've tried numerous perl scripts but most of them return all zeros for > the stats. The biggest example I can think of i

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Bob Apthorpe
Hi, On Wed, 21 Jan 2004 10:51:12 + "Spyros Tsiolis" <[EMAIL PROTECTED]> wrote: > Hello list ! > > I am kinda new here chaps, so please bare with me. > > A simple question (which I didn't pose on the xmail forum in case I > get flamed/cursed) :-) This list is usually civil, probably the mos

Re: [SAtalk] [OT] - The current state spam.

2004-01-20 Thread Bob Apthorpe
Hi, On Wed, 21 Jan 2004 00:44:35 -0500 Pedro Sam <[EMAIL PROTECTED]> wrote: > I take an opposite view point. ISP's should disable a user's account, > if that account is found to be launching any malicious attacks, > regardless of whether that account was intentionally malicious or was > simply h

Re: [SAtalk] More obfuscation

2004-01-20 Thread Bob Apthorpe
Hi, On Tue, 20 Jan 2004, Marcus Frischherz wrote: > Charles Gregory wrote: > > >I'm starting to see mail with TEXT obfuscation, such as: > > I heard you need viagrPa. > >Note the capital P thrown in to our favorite 'v' word. > >It is really beginning to look like we need a genuine spelling chec

Re: [SAtalk] Spam Assassin Problems

2004-01-20 Thread Bob Apthorpe
On Tue, 20 Jan 2004 15:28:00 +0200 Marc Morgan <[EMAIL PROTECTED]> wrote: > Hi There, > > I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail > is installed and has been patch with QMAILQUEUE. I installed the latest > version, but had errors when starting spamd or spamas

Re: [SAtalk] SpamAssassin 2.62 is released!

2004-01-19 Thread Bob Apthorpe
On Mon, 19 Jan 2004 10:55:58 -0500 (EST) "Steven W. Orr" <[EMAIL PROTECTED]> wrote: > Any idea when we'll get RPMs available for the new release? It's (usually) not difficult to build your own. This initial directory is for SuSE; Red Hat hides their build tree elsewhere, like /usr/src/redhat: #

[SAtalk] Forgery rules for outblaze/mail.com & rambler.ru

2004-01-18 Thread Bob Apthorpe
Hi, Based on SPAM-L posts from admins at Outblaze (Suresh) and rambler.ru, I conjured up a few simple rules to detect forgeries from these domains: header RAA_FORGED_FROM_OUTBLAZE Received =~ /\.mr\.outblaze\.com/ describe RAA_FORGED_FROM_OUTBLAZE Received line forged to implicate

Re: [SAtalk] Newbie queries, install and configuration

2004-01-18 Thread Bob Apthorpe
Hi, On Sat, 17 Jan 2004 15:44:14 +0200 "Hylton Conacher (ZR1HPC)" <[EMAIL PROTECTED]> wrote: > My query is this: Can I use SA if I am using Mozilla as my MTA to send > and receive my POP email ie no sendmail, qmail, fetchmail, just Mozilla > and sorting it into my local folders on Mozilla? Ye

RE: [SAtalk] Improvement: Image Recognition as spam criteria

2004-01-15 Thread Bob Apthorpe
Hi, On Thu, 15 Jan 2004, Rose, Bobby wrote: > From: Alexander Litvinov > > > Hint: I think we should store these things in a SQL database instead > > of in the file system, shouldn't we? > Can't you hide messages in jpeg? If they created an engine that > embedded a hidden random word in the ima

Re: [SAtalk] Spamwriter

2004-01-14 Thread Bob Apthorpe
Hi, On Wed, 14 Jan 2004, Mike Batchelor wrote: > --On Wednesday, January 14, 2004 8:28 AM -0600 Bob Apthorpe > <[EMAIL PROTECTED]> wrote: > > > IDP broadband > > providers that give their customers direct access to port 25 on remote > > systems by default. >

Re: [SAtalk] Spamwriter

2004-01-14 Thread Bob Apthorpe
On Wed, 14 Jan 2004 13:48:00 +0100 Kristian Köhntopp <[EMAIL PROTECTED]> wrote: > Please have a look at the article at http://www.jerf.org/writings/ > bayesReport.html from Jeremy Bowers. Jeremy has written a tool shown at > http://www.jerf.org/images/spam.writer.full.png that assists in writing

Re: [SAtalk] SA Performance .......

2004-01-13 Thread Bob Apthorpe
Hi, On Tue, 13 Jan 2004, Jeff Koch wrote: > We run SA 2.55, qmail-mail scanner (with F-Secure) and vpopmail on a 2.4Ghz > P4 Dell Server with 1GB RAM and 120GB 10K ATA drive. Last week the server > virus/spam filtered and popped 423,325 messages. During the last 2.5 days > the server's handled 37

RE: [WL] [SAtalk] How to count pattern matches?

2004-01-13 Thread Bob Apthorpe
Hi, On Tue, 13 Jan 2004, Dallas L. Engelken wrote: > o.k... now a little off topic :) > > what would really be nice, is to be able to return a score from an > eval... instead of just true/false and then scoring based on a "score > RULENAME" line. > > that would prevent having to call an eval a do

Re: [SAtalk] whitelist by ip and logging issues

2004-01-13 Thread Bob Apthorpe
Hi, On Tue, 13 Jan 2004, Matt Kettler wrote: > At 03:31 AM 1/13/2004, DanB wrote: > >Just installed spamassassin 2.60 - there are two things I haven't > >figured yet: > > > >- can I whitelist somebody by the ip of the mta that gives me that > >mail? > > Within SA, no What about the trusted_n

Re: [SAtalk] forged habeus mark

2004-01-12 Thread Bob Apthorpe
Hi, On Sun, 11 Jan 2004 23:58:37 -0800 "Gary Smith" <[EMAIL PROTECTED]> wrote: > As with all all other attempts we really need to see the proof in the > pudding... If the zombies start using it then who do you sue? The same people you always sue: the people with the money. :) > Then we receive

Re: [SAtalk] forged habeus mark

2004-01-12 Thread Bob Apthorpe
Hi, On Mon, 12 Jan 2004 02:10:17 -0500 (EST) Chuck Peters <[EMAIL PROTECTED]> wrote: > > I think I received my first " Habeas SWE (tm)" email today and what do you > know, it's V|@gra spam. There's a lot of that going around today. My copy came from an open proxy in SBC netowrk space somewhere

RE: [SAtalk] how to filter the MS Update virus?

2004-01-09 Thread Bob Apthorpe
Hi, On Fri, 9 Jan 2004, Gary Smith wrote: > In postfix I use the body.regexp for the body checks. > file: /etc/postfix/main.cf > body_checks = regexp:/etc/postfix/body_checks.regexp > > Contents (only three in there at this time) > > /^RSLxwtYBDB6FCv8ybBcS0zp9VU5of3K4BXuwyehTM0RI9IrSjVuwP94xfn0wg

Re: [SAtalk] SA for home use, with POP server at ISP?

2004-01-05 Thread Bob Apthorpe
Hi, On Mon, 5 Jan 2004, Andrew Lazarewicz wrote: > Hello -- I'd like to try again -- as a home user, I connect to a POP > server at my ISP, download my mail -- and that's it. I run Mandrake 9.2 > linux only, with KMail as my mail "client". [...] > > Is it possible to run SA in my configuration a

Re: [SAtalk] Configuring SA on on RH8 with Sendmail (was: no subject)

2004-01-05 Thread Bob Apthorpe
[N.B. Resubjecticated] On Mon, 5 Jan 2004 08:55:38 -0500 "Bill" <[EMAIL PROTECTED]> wrote: > > Can Anybody tell me how to configure spamassassin on redhat > > 8.0/ sendmail > > > > With Regards, > > Sarvesh Singhal > > > > Abhikalak Consultants > > (Systems and Security Division) > > B-326, Sa

Re: [SAtalk] Useful to compare sender domain with relay?

2004-01-02 Thread Bob Apthorpe
On Fri, 02 Jan 2004 20:35:21 -0500 "Keith C. Ivey" <[EMAIL PROTECTED]> wrote: > Scott Harris <[EMAIL PROTECTED]> wrote: > > > Would a useful check be to reject anything where the relay domain is not > > part of the sender domain? > > Or would this be to restrictive? > > > > My first thoughs are

Re: [SAtalk] Script to update bigevil.cf

2004-01-02 Thread Bob Apthorpe
On Fri, 02 Jan 2004 17:47:43 + Barry Porter <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 02/01/2004 16:03, Brad Koehn wrote: > [...] > > Yes, I'm paranoid, but the spammers have been going after sites using > > increasingly sophisticated techniques (DD

Re: [SAtalk] Postfix unknown user (peripherally related)

2004-01-02 Thread Bob Apthorpe
Hi, On Tue, 30 Dec 2003 11:40:22 -0800 "Gary Smith" <[EMAIL PROTECTED]> wrote: > -Original Message- > From: [EMAIL PROTECTED] on behalf of Greg Webster > Sent: Tue 12/30/2003 11:31 AM > > Not 100% a spamassassin issue, but I've got a ton of spammers trying any >

Re: [SAtalk] Integrating additional spam filters into SpamAssassin

2004-01-01 Thread Bob Apthorpe
On Thu, 01 Jan 2004 22:47:39 -0500 Joe Landman <[EMAIL PROTECTED]> wrote: > Hi Folks: [...] > I did not want to monkey around with the base system scoring if > possible. I simply wanted to integrate another spam filter with its own > scoring into SpamAssassin. As I have been playing with bogof

Re: [SAtalk] Postfix unknown user (peripherally related)

2003-12-30 Thread Bob Apthorpe
On Tue, 30 Dec 2003 11:31:29 -0800 Greg Webster <[EMAIL PROTECTED]> wrote: > Hey folks, > > Not 100% a spamassassin issue, but I've got a ton of spammers trying any > address they possibly can on my domain. Postfix responds to each one > with a 'reject: unknown user', but of course spammers don't

Re: [SAtalk] False positives

2003-12-28 Thread Bob Apthorpe
On Sun, 28 Dec 2003 23:38:15 +0200 cami <[EMAIL PROTECTED]> wrote: > > I do not know if this is the right place to complain as I could not find an > > email address that offers feedback to the company. This arrogance stinks, > > too. As if software developers don't need public feedback about the

Re: [SAtalk] False positives

2003-12-28 Thread Bob Apthorpe
On Thu, 25 Dec 2003 23:00:14 -0800 "schafer" <[EMAIL PROTECTED]> wrote: > To Spamassassin: > > My publication is double-opted in by 15,000 families with children with > autism. We are routinely victimized by incompetent software like > spamassassin because of false positives. This is just as in

Re: [SAtalk] running spamassassin without installing perl on the mail server (was: (no subject))

2003-12-28 Thread Bob Apthorpe
On Tue, 23 Dec 2003 17:00:20 -0500 "Padmanabha Vegesna" <[EMAIL PROTECTED]> wrote: > I am the system administrator for my company. We are in the process of > creating an autoresponder and are willing to download the SpamAssassin > for the spam filter for the email sent through the autoresponder. >

Re: [SAtalk] Fwd: Rude Rape actions

2003-12-28 Thread Bob Apthorpe
On Fri, 26 Dec 2003 18:37:34 -0500 "Alex J. Avriette" <[EMAIL PROTECTED]> wrote: > Yow, how am I supposed to stop spam like this? There isn't anything to filter > on except the word 'adult'. I guess 'rape' works as well.. But I'm not really > inclined to filter messages with the word rape in them

Re: [SAtalk] Cron job messages

2003-12-27 Thread Bob Apthorpe
reviously saved in a file. This file can be either the one specified by the -f flag or, by default, the standard system activity daily data file." hth, -- Bob Apthorpe --- This SF.net email is sponsored by: I

Re: [SAtalk] Deleting Messages tagged as spam

2003-12-24 Thread Bob Apthorpe
Hi! On Tue, 23 Dec 2003 23:22:27 -0800 (PST) [EMAIL PROTECTED] (Don Caprio) wrote: > I looked through the FAQ and couldn't find the answer. So sorry if I missed > it. Check the mailing list archives at http://marc.theaimsgroup.com/?l=spamassassin-talk&r=1&w=2 or http://news.gmane.org/thread.ph

Re: [SAtalk] SA in nontaint mode

2003-12-16 Thread Bob Apthorpe
Hi, On Tue, 16 Dec 2003, News wrote: > Does anyone know how to run SpamAssassin in non taint-mode? You don't want to do that. Read on. > I'm using Vipul's Razor version 2.36 which won't work with SA 2.61 > running in taint mode (the default). How do you turn it off? I know > it's a security f

[SAtalk] META: Does spamassassin-talk have a working mail archive?

2003-12-10 Thread Bob Apthorpe
Hi, After spending tireless minutes directing people to the SA-Talk archives[1], I can't seem to get at them. Does http://sourceforge.net/mailarchive/forum.php?forum=spamassassin-talk work, and if not, is there a better place to peruse the archives? Just covering all my bases here... -- Bob [1]

RE: [SAtalk] [RD] raw/rare/folded/plain/alphed body/subject rendering streams

2003-12-10 Thread Bob Apthorpe
On Wed, 10 Dec 2003, Gary Funck wrote: > Soundex might be a practical solution. Perhaps a manageable approach > is to first apply a spelling check using both a regular dictionary > and augmenting it with a set of spammer mis-spellings. Then, send the > output of that step into Soundex. The Soundex

Re: [SAtalk] Re: Bug#223399: spamassassin: not_ok_languages, no way to split Chinese

2003-12-10 Thread Bob Apthorpe
Hi, > While gargling concrete, "Dan Jacobson" <[EMAIL PROTECTED]> spewed: > > > However, anything in language [X] is always spam, so let me ban [X] > > without having to unban every other possible language. > > Pretty Draconian. Must be nice to be able to do that. Not 'nice' but 'convenient'; I d

Re: [SAtalk] filtering spam tagged email before hitting exchange 2000

2003-12-10 Thread Bob Apthorpe
Hi, [N.B. Reformatted into a sensible whole. Please trim your posts, line wrap and (I know this sounds petty) please don't top post if you expect follow-ups. Thanks.] On Wed, 10 Dec 2003 09:22:06 -0600 "JRiley" <[EMAIL PROTECTED]> wrote: > From: Efren Pedroza > > On Behalf Of gentian > > > I a

Re: [SAtalk] reject messages

2003-12-09 Thread Bob Apthorpe
Hi, [Note: please set your mailer to wrap lines] On Tue, 9 Dec 2003 10:01:24 -0500 "gentian" <[EMAIL PROTECTED]> wrote: > I am a baby to spamassassin and before I start getting my hands dirty on > it I am still collecting information about it. > No Spam Today for windows (which implements spamas

Re: [SAtalk] Delete mail with a score above n

2003-12-08 Thread Bob Apthorpe
On Mon, 8 Dec 2003 12:25:56 -0500 "Bill" <[EMAIL PROTECTED]> wrote: > IMHO, the best way to handle html mail is bit-bucket the message and send a > note to the sender that html messages are not accepted by the server and > include a link on how to kill html in their mailer. ... except that most s

Re: [SAtalk] Delete mail with a score above n

2003-12-07 Thread Bob Apthorpe
On Thu, 04 Dec 2003 10:59:13 -0800 Mike D <[EMAIL PROTECTED]> wrote: > Does anyone know how to config spamassassin to delete messages with a score > above a certain threshold? This question gets asked every 3-5 days and really ought to be in the FAQ. Answers generally focus on: a) procmail b)

Re: [SAtalk] Blacklists

2003-12-05 Thread Bob Apthorpe
_Compared.html and the current (11/22/2003) effectiveness comparison here http://www.sdsc.edu/~jeff/spam/cbc.html As always, YMMV... -- Bob Apthorpe --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX

Re: [SAtalk] Possible FP on big evil list

2003-12-04 Thread Bob Apthorpe
On Thu, 4 Dec 2003 11:59:13 -0500 Chris Santerre <[EMAIL PROTECTED]> wrote: > CC'd to list for opinions. > > OK, this one actually bothers me. The URIs hitting are Pull\.xmr3\.com and > xmr3\.com . Googleing on these shows many people blocking this domain. Has > this person signed up for this "Sa

Re: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-02 Thread Bob Apthorpe
On Tue, 02 Dec 2003 15:29:37 -0600 Larry Rosenman <[EMAIL PROTECTED]> wrote: > --On Tuesday, December 02, 2003 16:26:11 -0500 Vee Persaud > <[EMAIL PROTECTED]> wrote: > > > [EMAIL PROTECTED] wrote: > > > BIG HUGE NEWS > > > This seems awesome. If I never used EvilRules before, is it easy t

Re: [SAtalk] Bayes DB

2003-12-02 Thread Bob Apthorpe
Hi, On Tue, 2 Dec 2003, Scott Renda wrote: > I am running SA 2.60 with Postfix, it has simply done an amazing job since > implemented. I did have several questions though. > > 1. Can anybody tell me how to read the values obtained from sa-learn --dump? > The results of my dump are below: > > 0.0

Re: [SAtalk] Disable a User who does not want SA

2003-12-01 Thread Bob Apthorpe
> please all). > > tried |/usr/bin/spamassasin -x in procmailrc since i read no user_prefs no > spam handling. > tried ~/.no-spamfilter > > Done a google search but not found an answer to disable on a per user basis. Take a look at perldoc Mail::SpamAssassin::Conf especia

Re: [SAtalk] Ideas

2003-11-26 Thread Bob Apthorpe
#x27;ve whitelisted > [EMAIL PROTECTED]). Works like a charm. If none of your mailservers HELO as example.com and your organization is the only one that might legitimately send mail with that HELO, why bother accepting the traffic at all? This sounds like a job for your MTA's access list. Bonu

Re: [SAtalk] What is marked as spam

2003-11-23 Thread Bob Apthorpe
Hi, On Sat, 22 Nov 2003 19:56:07 -0800 John Oliver <[EMAIL PROTECTED]> wrote: > On Sat, Nov 22, 2003 at 06:24:38PM -0800, Robert Menschel wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Hello John, > > > > Saturday, November 22, 2003, 4:24:01 PM, you wrote: > > > > JO> I s

RE: [SAtalk] Bayes Expiry limits and Journal size

2003-11-20 Thread Bob Apthorpe
Hi, On Thu, 20 Nov 2003, Smart,Dan wrote: > Is there a reason that the Bayes scoring is NOT a normal distribution from > 50% to 100%, and negative from 0% to 50%? Yes, check the [SAtalk] list archives; this may well be a FAQ. Short answer: all scores including those from Bayes are generated by a

[SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Bob Apthorpe
Hi, Can one of the mailing list Powers That Be disable whichever subscriber is routing mail to thewizard.net? I'm tired of pool.com's useless autoack ads, especially due to a suspicious piece of their URL (below.) Thanks, -- Bob On Wed, 12 Nov 2003 [EMAIL PROTECTED] wrote: > We were unable to

Re: [SAtalk] Rule is blocking everything

2003-11-12 Thread Bob Apthorpe
Hi, On Wed, 12 Nov 2003, Dan wrote: > Hey guys! > > Yesterday we were talking about blocking certain words. The suggestion came > up to put the following in: > body LOCAL_SWEARWORD /\b(?:word1|word2|word3|word4)\b/i > > I put this in the bottom of my /etc/mail/spamassassin/local.cf > > It see

Re: [SAtalk] spamassasin without the mess

2003-11-11 Thread Bob Apthorpe
Hi, On Tue, 11 Nov 2003, Tyler Montbriand wrote: > Not having ever run a UNIX mail server, I find the existing > documentation and configuration info for spamassasin quite mystifying. > I'd prefer not to go with the UNIX method of handling mail and > mailboxes, and I certainly don't want it screw

Re: [SAtalk] Irritating address verifier

2003-11-10 Thread Bob Apthorpe
Hi, On Mon, 10 Nov 2003, Frank Pineau wrote: > So, I get this message in my inbox this morning. Unless I'm totally > misreading the headers, it appears that it actually is from oem-cd.biz. Nope, it's from an AOL dialup [172.190.115.221]: $ nslookup 221.115.190.172.dynablock.easynet.nl Non-auth

Re: [SAtalk] installation fails [perl]

2003-11-07 Thread Bob Apthorpe
Hi, On Fri, 7 Nov 2003, maarten van den Berg wrote: > On Friday 07 November 2003 22:34, David B Funk wrote: > > IIRC, this was due to a bug in one of the versions of CPAN. > > Try updating your CPAN > > I already doubted this, so thanks a lot for that info. However, I'm kinda > stuck since insta

Re: [SAtalk] training...

2003-11-07 Thread Bob Apthorpe
Hi, On Fri, 7 Nov 2003, Evan Platt wrote: > --On Friday, November 07, 2003 12:06 PM -0800 Jeff Lasman > <[EMAIL PROTECTED]> wrote: > > > What's likely to happen if I run these 563 spams without running any > > hams? > > I thought I recall the help file stating that running HAMS without SPAM (or >

Re: [SAtalk] Re: the autolearning function

2003-11-03 Thread Bob Apthorpe
Hi, On Mon, 3 Nov 2003 17:37:10 -0500 "Dave Malone" <[EMAIL PROTECTED]> wrote: > I am a lawyer, not a programmer, so many of the technical discussions I have > found on the web have been less than useful. All I want to know is this: > If I have collected 1,000 e-mails in my SPAM folder through S

Re: [SAtalk] MH mail folder of spams

2003-11-03 Thread Bob Apthorpe
me the command? `perldoc sa-learn` or `sa-learn --help` Try sa-learn --showdots --spam /path/to/spam/folder sa-learn --showdots --ham /path/to/ham/folder Get rid of --showdots once you're confident sa-learn is working for you. hth, -- Bob Apthorpe --

Re: [SAtalk] Razor2 patch applied, still getting Bad file descriptor errors

2003-11-03 Thread Bob Apthorpe
On Mon, 3 Nov 2003, Daniel wrote: > So does nobody have an idea for the problem below? Have you restarted spamd after patching Razor (assuming you're using spamc/spamd)? -- Bob --- This SF.net email is sponsored by: SF.net Giveback Program. D

Re: [SAtalk] using spamd/spamc to reject SMTP connection

2003-10-31 Thread Bob Apthorpe
On Fri, 31 Oct 2003 11:30:29 -0800 "Josiah DeWitt" <[EMAIL PROTECTED]> wrote: > I just installed SpamAssassin and got it working, but it just drops or > marks spam after it has already accepted it. While this /dev/null type > behavior is great, I would rather discourage spammers by refusing the >

Re: [SAtalk] How filter ...

2003-10-31 Thread Bob Apthorpe
es at each end, and will make it case > insensitive (ie: to match penis or peNiS) I wonder how /\bP[^[:alpha:]\s]{0,3}e[^[:alpha:]\s]{0,3}n[^[:alpha:]\s]{0,3}i[^[:alpha:]\s]{0,3}s\b/i would fare... -- Bob Apthorpe --- This SF.net email is

Re: [SAtalk] Rule for reverse lookup similarities

2003-10-31 Thread Bob Apthorpe
On Fri, 31 Oct 2003 09:47:07 -0700 "Steven Manross" <[EMAIL PROTECTED]> wrote: [...] > I see everyone's concerns, and they are duly noted. Yes, real > businesses have IPs in dynamic/DSL ranges for real reasons. No doubt the huge price difference between 'residential-class' and 'business-class' s

Re: [SAtalk] Rule for reverse lookup similarities

2003-10-31 Thread Bob Apthorpe
On Thu, 30 Oct 2003 19:50:49 -0800 Patrick Morris <[EMAIL PROTECTED]> wrote: > Steven Manross wrote: > > >I'm seeing a few/lot of spam that has a reverse lookup name that is like the > >originating IP. > > > >i.e. If it were 192.168.52.45 that was the originating IP, the reverse > >lookup might

Re: [SAtalk] Re: [RD] Open source is Naughty!!!

2003-10-30 Thread Bob Apthorpe
On Thu, 30 Oct 2003 10:24:19 -0500 Chris Santerre <[EMAIL PROTECTED]> wrote: > /* era */ wrote: > > > > Yrg'f ubcr gurl qba'g qvfpbire Havpbqr nal gvzr fbba. > > Ook. ?huh? ^^ perldoc Crypt::Rot13 :) -- Bob --- This SF.net em

Re: [SAtalk] updating rules without upgrading SpamAssassin

2003-10-30 Thread Bob Apthorpe
out updating the full application. -- Bob Apthorpe --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! C

Re: [SAtalk] [RD] 4c-2v-3c

2003-10-29 Thread Bob Apthorpe
On Wed, 29 Oct 2003 09:50:37 -0500 "Jennifer Wheeler" <[EMAIL PROTECTED]> wrote: > Hi Larry > > > I have had some very good success with a rawbody and subject test > which > > looks for > > > > 4 or more consonants > > followed by 1 or 2 vowels > > followed by 3 or more consonants or digit

Re: Re[2]: [SAtalk] White & black lists on server

2003-10-28 Thread Bob Apthorpe
On Tue, 28 Oct 2003 21:08:14 -0800 Robert Menschel <[EMAIL PROTECTED]> wrote: > Tuesday, October 28, 2003, 9:00:23 PM, you wrote: > >> If you have the flexibility, use a different email program. My > >> personal favorite is The Bat!; Eudora is also very good. > >> Netscape's Messenger is also exce

Re: [SAtalk] Newbie

2003-10-27 Thread Bob Apthorpe
> This SF.net email is sponsored by: The SF.net Donation Program. > Do you like what SourceForge.net is doing for the Open > Source Community? Make a contribution, and help us add new > features and functionality. Click here: http://sourceforge.net/donate/ > _

Re: [SAtalk] 5.0 spampoints

2003-10-25 Thread Bob Apthorpe
Hi, On Wed, 22 Oct 2003 16:22:33 +0200 "Jeffrey Schilperoord" <[EMAIL PROTECTED]> wrote: > What is the easyest way to change the 5.0 spampoints to a higher level ? Add something like required_hits 6.5 to ~/.spamassassin/user_pref

Re: [SAtalk] Building SA 2.60, errors

2003-10-25 Thread Bob Apthorpe
On Sat, 25 Oct 2003 15:57:18 +0100 (BST) Martin Radford <[EMAIL PROTECTED]> wrote: Hi, > At Fri Oct 24 19:38:50 2003, Matt Kettler wrote: > > > goes. There's serious discussion about dumping support for any perl under > > 5.6 in future releases. Apparently trying to make SA work under 5.00x, >

Re: [SAtalk] Re: [OT] What is next step?

2003-10-24 Thread Bob Apthorpe
absorb. And don't top post... :) Have fun! -- Bob Apthorpe [*] Summary of arguments: C/R systems can be abused to mailbomb people (forge many requests to known C/R from a single recipient.) Spammers either a) won't confirm, so you're sending a challenge that won't be a

Re: [SAtalk] lint difference in 2.60

2003-10-19 Thread Bob Apthorpe
int is doing the right thing here. You probably want /free\s+of\s+charge/i or /free\s{0,10}of\s{0,10}charge/i (similar to /free\s*of\s*charge/i) The difference between /b and /s tripped me up for a long time because I kept thinking 'blank' not 'boundary' when I saw '

Re: [SAtalk] infinite-monkeys

2003-10-18 Thread Bob Apthorpe
others to stop using it too. monkeys.com is dead. > When I enable IM in my MailScanner setup for SpamAssassin, all outgoing mail > from my servers gets kicked into la-la land - I scan all outgoing Email - > because it's matching on Infinite-

Re: [SAtalk] One Message 2 results...

2003-10-17 Thread Bob Apthorpe
Hi, On Fri, 17 Oct 2003, Matt Kettler wrote: [...] > > The partiuclar message you were testing against is a common virus email.. > SA isn't designed to catch viruses, and has no rules to catch this one.. if > you really want to catch them, search in the archives of this list for SWEN > and you sh

Re: [SAtalk] System crashing with spamd

2003-10-15 Thread Bob Apthorpe
. > Do you know how to check the DB_File version so I can confirm it's at > 1.806? perl -MDB_File -e 'print $DB_File::VERSION, "\n";' -- Bob Apthorpe --- This SF.net email is sponsored by: SF.net Giveback Program. Sou

RE: [SAtalk] [RD] Evil rules HUGE update!

2003-10-14 Thread Bob Apthorpe
Hi, On Tue, 14 Oct 2003, Stewart, John wrote: > > Nope, it looks like WordPad is a bad place to edit :) > > Apparently it has some > > hidden characters in it. AS of 4:40 EST today, I resaved it > > under MSDOS text > > format in the hopes it fixed it. Did you get the file before then? gvim work

Re: [SAtalk] Is there a way to reject a message before it arrives?

2003-10-09 Thread Bob Apthorpe
Hi, On Thu, 09 Oct 2003 11:56:29 -0300 Fabiano Bonin <[EMAIL PROTECTED]> wrote: > I am using SpamAssassin sice yesterday and i put it in production today, > site wide. > It's amazing. > It's filtering 95% on my daily messages, and all blocked messages are > really spams. > > BUT, in my particula

RE: [SAtalk] SPAM, BLOCK: Death of monkeys.com DNSbl (fwd)

2003-09-27 Thread Bob Apthorpe
Hi, [apologies for this being so far off-topic] On Thu, 25 Sep 2003, Peter P. Benac wrote: > And this lack of response is due to what??? Lazy, stupid, apathetic, incompetent, or ambivalent members of the law enforcement and ISP community? Insufficient network diagnostic and security tools, maki

Re: [SAtalk] SPAM, BLOCK: Death of monkeys.com DNSbl (fwd)

2003-09-24 Thread Bob Apthorpe
Hi, On Wed, 24 Sep 2003 23:13:19 +0100 Daniel Bird <[EMAIL PROTECTED]> wrote: > Forrest Aldrich wrote: > > > A new approach to DNSBL might be considered, where there is a > > peer-to-peer sharing (authentication, scoring whatever) that mirrors > > content -- something of that nature, whereby t

Re: [SAtalk] razor2 setuid issue

2003-09-24 Thread Bob Apthorpe
On Wed, 24 Sep 2003 19:04:35 -0400 "Dan Didier" <[EMAIL PROTECTED]> wrote: > Hi, > > Running redhat8 with qmail and spamassassin as well as trying to get > razor2 working. > > If I look in my log files, I have entries like this: > > Sep 24 19:04:16 sandbox spamd[14130]: connection from localhos

Re: [SAtalk] 2.60 fails to install

2003-09-24 Thread Bob Apthorpe
On Wed, 2 Jan 2002 00:28:59 +1100 Trevor Rhodes <[EMAIL PROTECTED]> wrote: > While installing I get the following error. Anyone have any clue as to why > and what I can do? Looks like make can't find INSTALL. Try touch INSTALL followed by make clean perl Makefile.PL make and see if

Re: [SAtalk] monkeys.dom UPL being DDOSed to death (fwd)

2003-09-23 Thread Bob Apthorpe
Hi, On Tue, 23 Sep 2003, Jonathan Nichols wrote: > Great.. is this going to affect SpamAssassin like it did when osirusoft > went offline? No, not unless Ron does something crazy like blacklisting 0.0.0.0/0. I expect he'd give people fair warning first if he was going to do that. I also expect i

[SAtalk] SPAM, BLOCK: Death of monkeys.com DNSbl (fwd)

2003-09-23 Thread Bob Apthorpe
Hi, Just seen on SPAM-L: Apparently Ron's proxy honeynet hit a nerve in the hardcore spammer community. First Osirusoft, now monkeys.com. Which DNSBL is next? When do the crosshairs move to SpamAssassin? And when will the lawyers and Feds visit the asleep-at-the-wheel instituions and ISPs hosti

[SAtalk] Yet another virus defense rule (vbl.messagelabs.com)

2003-09-23 Thread Bob Apthorpe
the low scores); it should be interesting to see how this behaves. -- Bob Apthorpe --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk

Re: [SAtalk] Are Bayes scores correct?

2003-09-23 Thread Bob Apthorpe
On Tue, 23 Sep 2003 11:41:46 +0200 Federico Giannici <[EMAIL PROTECTED]> wrote: > I'm using SA 2.60 RC6. > I have noticed that Bayesian scores are not monotonically increasing. > For example, score for BAYES_90 is LESS then the score for BAYES_70 > (when network is used)! > > Is this correct? Ye

Re: [SAtalk] Spamd domain sockets implementation

2003-09-23 Thread Bob Apthorpe
Hi, On Mon, 22 Sep 2003 23:45:35 -0500 "Mike Loiterman" <[EMAIL PROTECTED]> wrote: > Just reading the release notes for 2.60 and noticed this: > > - spamd now supports UNIX-domain sockets for low-overhead scanning, > thanks > to Steve Friedl for this. This is strongly recommended if you'r

Re: [SAtalk] Proposal for X-Spam-Status

2003-09-22 Thread Bob Apthorpe
ING 0.0 Also, use sa-learn on those messages that sneak past SA. hth, -- Bob Apthorpe --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-t

Re: [SAtalk] Running spam/nospam tests just sits there/hangs...what is required?

2003-09-21 Thread Bob Apthorpe
Hi, On Sun, 21 Sep 2003 21:09:09 -0700 "Mike Klein" <[EMAIL PROTECTED]> wrote: [...] > When I attempt to run the verification tests, spamassassin just sits there > doing nothing it seems. > > spamassassin -t sample-nonspam.txt > > Just 'hangs'. > > What might I need to configure/reconfigure?

Re: [SAtalk] New virus posing as Microsoft

2003-09-19 Thread Bob Apthorpe
Hi, On Fri, 19 Sep 2003, Forrest Aldrich wrote: > This new virus appears to generate many (random?) subjects, so it's getting > difficult to narrow down. > > Has anyone filters for Spamassassin that will correctly identify this > virus? I'd like to score this one high so they are rejected (via >

Re: [SAtalk] does it work with solaries7?

2003-09-18 Thread Bob Apthorpe
Hi, On Thu, 18 Sep 2003 12:55:46 + "Muhannad Tamemi" <[EMAIL PROTECTED]> wrote: > From: "Chr. von Stuckrad" <[EMAIL PROTECTED]> > > > >On Thu, Sep 18, 2003 at 09:38:53AM +, Muhannad Tamemi wrote: > > > Dear All , > > > > > > Kindly note that am new to spammassassin .. > > > > > > I have Su

Re: [SAtalk] Update of manufacturer strings

2003-09-16 Thread Bob Apthorpe
Hi, On Tue, 16 Sep 2003 18:13:12 +0200 "Hubert Daubmeier" <[EMAIL PROTECTED]> wrote: > Hello > > my postmaster has pointed me to this discussion list > > -- > [...] > I would like to outline a problem and like to ask for updating the > manufacturer strings for Microsoft Out

Re: [SAtalk] Help Unblacklisting RBL

2003-09-16 Thread Bob Apthorpe
Hi, On Tue, 16 Sep 2003, Jennifer Wheeler wrote: > what am i doing wrong here? I am trying to unblacklist an address > getting tagged by Infinite-Monkeys. > > using spamassassin 2.55 > > i put the following line in /etc/mail/spamassassin/local.cf with all my > other rules and whitelisted address

Re: [SAtalk] The Verisign folly

2003-09-16 Thread Bob Apthorpe
AS 5378 - Clueless & Witless .UK *.wsA 216.35.187.246 AS 3561 - Clueless & Witless .US Internet death penalties pending. -- Bob Apthorpe -

  1   2   >