[SAtalk] sa-learn and bayes

2003-12-12 Thread Dan Tappin
After setting-up spamassassin, RTFM and monitoring the list I am still very confused about the correct way to set-up and run spamassassin with bays (sa-learn). The basics: I am running Post.Office as a MTA on OS X client 10.2.8. Post.Office has a plug-in that calls SA, checks the spam status a

RE: [SAtalk] Rule Help...

2003-12-12 Thread Dan Tappin
ct: Re: [SAtalk] Rule Help... > > > At 02:50 PM 12/12/2003, Dan Tappin wrote: > >Here is a custom rule for a PayPal spoof virus that is going around. I > >can't get this to trigger a hit in SA. I have linted my > >rules and my config files are being loaded pro

[SAtalk] Rule Help...

2003-12-12 Thread Dan Tappin
Here is a custom rule for a PayPal spoof virus that is going around. I can't get this to trigger a hit in SA. I have linted my rules and my config files are being loaded properly. header PAYPAL_VIRUS_001 Subject =~ /YOUR PAYPAL\.COM ACCOUNT EXPIRES/i describe PAYPAL_VIRUS_001 Wonderfull PayPal

RE: [SAtalk] Re: SA Long Process Times / Memory Utilization (Possible Bug?)

2003-12-12 Thread Dan Tappin
gt; (Possible Bug?) > > > On Thu, 11 Dec 2003 15:42:55 -0700, Dan Tappin > <[EMAIL PROTECTED]> posted to spamassassin-talk: > > My hunch, which could be totally wrong, is that when parsing these > > messages the multiple headers in the Outlook attached messages is >

[SAtalk] SA Long Process Times / Memory Utilization (Possible Bug?)

2003-12-11 Thread Dan Tappin
I have tracked down an issue with my SA installation that has been reported by others on the list. Basically large messages (one with multiple attachments in this case) being hung up by SA. I just tried to send a 1 MB e-mail with multiple message and pdf attachments. SA sat there for over 6 mi

RE: [SAtalk] Changing user spamd runs as

2003-12-05 Thread Dan Tappin
I have the same issue also. No matter how I configure bayes in my config files spamd continues to look in the user directories for the bayes database. I have sa-learn updating to /var/spool/spamassassin/ but spamd keeps trying to create user files in my home directory. I have tried the -x flag

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
I am a bit lost. Here is my basic local.cf file: required_hits 5 skip_rbl_checks 0 use_bayes 1 bayes_file_mode 0700 bayes_path /var/spool/bayes/bayes Am I missing anything here. I want to try bayes and I am still feeding sa-learn spam and ha

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
> -Original Message- > From: Pete Henshall [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 04, 2003 1:53 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] spamds that don't finish > > > Hi dan, list, > > > I think it's simply a function of load. The first sys

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Pete > Henshall > Sent: Thursday, December 04, 2003 12:28 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] spamds that don't finish > > > Do you two use bayes and do you have sin

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
I am running SA on OS X 10.2.8 and I have the same issue. I get the same one or two spamd processing just sitting there. I also eventually need to go in an manually kill these processes. I am currently running SA as my mta user. If I lint my config files I get the following: [firewall:~] adm

RE: [SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
gt; Step 7: Repeat steps 5 and 6 every once in a while. > > Contact me off list if you want to see some examples of my own pretty > graphs. > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Dan > Tappin > Sent: Thursday, November 27, 2003 1:43 PM

RE: [SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
hard reboot is required. This system has 700+ MB or RAM. Dan > -Original Message- > From: Robert A. Hayden [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 27, 2003 11:35 AM > To: Dan Tappin > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Run Away SA... >

[SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
I have a 2.6 SA installation that has recently started to take off process wise. SA starts and then runs normally for 5 to 10 minutes then the processes start to pile up. I get 10 to 15 spamd processes spawning and they soon consume all the system resources and eventually hangs the machine. 't

[SAtalk] sa-learn and message format?

2003-11-25 Thread Dan Tappin
I am currently trying to implement bayes on my SA system. I was using spamcop before and I started using a spamcop reporting plug-in for my sa-learn reporting. I could configure the plug-in to redirect my spam, headers and all to the learning account of my choosing. I have just realized that t

[SAtalk] header reports missing??

2003-11-21 Thread Dan Tappin
I have recently installed SA 2.60 from the source code on OS X along side Tenon's Post.Office mail server. This was a manual upgrade from the Tenon supplied SA 2.55 release to be used with their supplied SA 'plug-in'. All is well and e-mail is being filters via SA except SA is not adding the sc

[SAtalk] SA Header Re-Write...

2003-11-20 Thread Dan Tappin
I have recently installed SA 2.60 from the source code on OS X along side Tenon's Post.Office mail server. This was a manual upgrade from the Tenon supplied SA 2.55 release to be used with their supplied SA 'plug-in'. All is well and e-mail is being filters via SA except SA is not adding the sc

RE: [SAtalk] Log Question...

2003-10-31 Thread Dan Tappin
k] Log Question... > > > At 11:18 AM 10/31/2003, Dan Tappin wrote: > >Below is a snippet from a recent post to the list: > > > > > Oct 30 14:12:40 ns1 MailScanner[3201]: > > > > > >Is there a config option to have these triggered rules logged > like th

[SAtalk] Log Question...

2003-10-31 Thread Dan Tappin
Below is a snippet from a recent post to the list: > Oct 30 14:12:40 ns1 MailScanner[3201]: Message h9UMAPR07828 from > 61.59.154.73 () > to userdomain.com is spam, SpamAssassin (score=28.325, required > 5, BAYES_99 > 6.00, FORGED_AOL_RCVD 4.10, FORGED_MUA_OUTLOOK 2.57, > FORGED_OUTLOOK_HTML 1.00,

[SAtalk] Whitelist / Rule Question...

2003-10-30 Thread Dan Tappin
I am going nuts. I can't resolve this. I have SA 2.55 running with out any other major issues except for a nagging issue of an external user that continues to be identified as spam no matter how I try to white list them. I have marked up the offending header below by adding `000` to the end of a

[SAtalk] Whitelist / Rule Question...

2003-10-24 Thread Dan Tappin
I have posted on this before so forgive me if I am repeating myself. I have several whitelist_from entries in my config files but the odd message continues to get trapped as spam. It seems to be the same sender over and over again. I have created a custom rule for this but I must have made a mis

RE: [SAtalk] whitelist_from simply does not work for me

2003-10-10 Thread Dan Tappin
D] > Subject: Re: [SAtalk] whitelist_from simply does not work for me > > > At 02:47 PM 10/10/2003, Dan Tappin wrote: > >and on each occasion the mail is not whitelisted. > > > >Am I missing something here??? > > Yes, the message headers.. Is th

[SAtalk] whitelist_from simply does not work for me

2003-10-10 Thread Dan Tappin
I am running SA 2.55 and have been adding e-mail addresses and domains to a whitelist config file in /etc/mail/spamassassin/. I have run spamassassin -D --lint and have found no error reports. My /etc/mail/spamassassin/ files are being loaded because I created a /etc/mail/spamassassin/local.cf fi

RE: [SAtalk] whitelist not working...

2003-10-07 Thread Dan Tappin
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Dan > Tappin > Sent: Thursday, October 02, 2003 2:57 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] whitelist not working... > > > Attached is a header of a sender that keeps getti

[SAtalk] whitelist not working...

2003-10-02 Thread Dan Tappin
Attached is a header of a sender that keeps getting flagged as spam. I have whitelisted the sender as follows: whitelist_from [EMAIL PROTECTED] whitelist_from_rcvd [EMAIL PROTECTED] collicutt.com whitelist_from_rcvd [EMAIL PROTECTED] telus.com Can any one see an

[SAtalk] sa-learn question?

2003-10-02 Thread Dan Tappin
I have created spam and ham accounts to utilize sa-learn. I am using Tenon's Post.Office on OS X as a mail server. I was running sa-learn like this: sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/in/ which resulted in 7 messages being learned. Can I specify just the *orourke* files someh

RE: [SAtalk] Whitelist Issue

2003-10-02 Thread Dan Tappin
OK... here I go: header _LOCAL_RCVD_TRUSTED_SASKNET Received =~ /.{0-20}\.sasknet\.sk\.ca/i header _LOCAL_RCVD_TRUSTED_TELUS Received =~ /priv-.{0-20}\.telusplanet\.net/i meta LOCAL_RCVD_TRUSTED (_LOCAL_RCVD_TRUSTED_SASKNET || _LOCAL_RCVD_TRUSTED_TELUS) score LOCAL_RCVD_TRUSTED -10.0 Thanks for t

RE: [SAtalk] Whitelist Issue

2003-10-02 Thread Dan Tappin
tt > Kettler > Sent: Wednesday, October 01, 2003 9:31 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [SAtalk] Whitelist Issue > > > At 09:26 AM 10/1/03 -0600, Dan Tappin wrote: > >How would I whitelist a machine? > > AFAIK there's no normal whitelist s

RE: [SAtalk] Whitelist Issue

2003-10-01 Thread Dan Tappin
round. Dan > -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 01, 2003 9:09 AM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: [SAtalk] Whitelist Issue > > > At 08:45 AM 10/1/03 -0600, Dan Tappin wrote: > >

[SAtalk] Whitelist Issue

2003-10-01 Thread Dan Tappin
Below is the header of a legitimate mailing list message that keeps getting flagged as spam: Here is part of my local.cf file where I tried to whitelist it: whitelist_from [EMAIL PROTECTED] whitelist_from_rcvd *.tsn.ca tsn.ca whitelist_from [EMAIL PROTECTED] w

RE: [SAtalk] False Positive: Delivery Status Notification (Failure)

2003-09-30 Thread Dan Tappin
ROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Evan > Platt > Sent: Tuesday, September 30, 2003 12:05 PM > To: SpamAssassin > Subject: Re: [SAtalk] False Positive: Delivery Status Notification > (Failure) > > > --On Tuesday, September 30, 2003 11:28 AM -0600 Dan Tappin

[SAtalk] False Positive: Delivery Status Notification (Failure)

2003-09-30 Thread Dan Tappin
I have a bunch of these hotmail failure notices being tagged as SPAM. Does any one have a quick fix for this? I am guessing a rule to give a low score to the <> return path combined with a '[EMAIL PROTECTED]' from header. I am pretty new to SA so any help on creating a rule would be great. I se

RE: [SAtalk] SA Gone Wild???

2003-09-22 Thread Dan Tappin
Sorry everyone, I am a dork. I had another filter at work and mistakenly had it reporting trapped spam to the same monitoring account. I though SA was trapping this spam. Dan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Dan > T

[SAtalk] SA Gone Wild???

2003-09-22 Thread Dan Tappin
Just in the past hour SA has started identifying e-mail as spam that should not be. I have several domains / addresses white listed in my local.cf file and even these are getting tagged as spam. Here is the output of a message filtered at the server as spam but yet the spamc report is contradicto

RE: [SAtalk] WhiteList

2003-09-17 Thread Dan Tappin
Can you whitelist a IP subnet using the same format? Dan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Cornelius Bolten > Sent: Wednesday, September 17, 2003 7:48 AM > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] WhiteList > > > put the followin

[SAtalk] OS X / Post.Office - New User Help

2003-09-13 Thread Dan Tappin
Hello All, I am a new Spam Assassin user via Tenon Intersystems Post.Office mail server. Tenon has release a Spam Assassin plug-in for their OS X based mail server. I have Spam Assassin up and running and trapping spam via Post.Office. The problem is that I can't seem to get the 'always_add_hea