Re: [SAtalk] New Announcements Mailing List

2002-05-14 Thread Derek Broughton
> On Mon, May 13, 2002 at 08:32:48AM -0300, Derek Broughton wrote: > > The one available from the sourceforge.net/projects/spamassassin page? It > > asks me for a userid & password. I don't mind helping you out with a > > survey, but I'm not going through th

Re: [SAtalk] New Announcements Mailing List

2002-05-13 Thread Derek Broughton
> I also created a survey to give us all a better sense of who's using SpamAssassin. > It's just 3 questions, all multiple choice :) -- if you have 3 seconds while > signing up for the announcements list, go ahead and click through the survey > too. The one available from the sourceforge.net/proj

Re: [SAtalk] Bad Dialups

2002-05-07 Thread Derek Broughton
> On Tue, 7 May 2002, Derek Broughton wrote: > > > It's unlikely to be a truly false positive - ie, it may not be spam but I > > can pretty much guarantee you that he's trying to email you from an SMTP > > server on his own, dial-up, link instead of via Earthlink

Re: [SAtalk] what am I doing wrong?

2002-05-07 Thread Derek Broughton
From: "Miles Fidelman" <[EMAIL PROTECTED]> > On Tue, 7 May 2002, Doug Crompton wrote: > > > I don't know. I changed mine in the 50_scores file. It obviously works > > there. > > I think I'll try that next. > > I was just hoping to avoid making changes in the rules files, to keep > upgrading simp

Re: [SAtalk] Re: Delivered notifications problems

2002-05-07 Thread Derek Broughton
Daniel Pittman wrote: > On Tue, 7 May 2002, Gilles Nedostoupof wrote: > > I rewrote your message into RFC2822 compliance; please reply *below* the > body text and *quote* existing text when replying. Your message was > impossible to reply to as delivered. :/ > Top quoting is ugly & evil, but ther

Re: [SAtalk] Bad Dialups

2002-05-07 Thread Derek Broughton
> Where is the data for KNOW_BAD DIALUPS stored? I am getting a false > negative from a friend who uses earthlink.net and that pushes it over the > top. I greped for a number of things in rules but did not find anything. I > hesitate to eliminate the rule altogether but that might also be an > opt

Re: [SAtalk] [Fwd: I have some exclusive information for you.]

2002-05-04 Thread Derek Broughton
From: "Craig R Hughes" <[EMAIL PROTECTED]> > Derek Broughton wrote: > > DB> From: "CertaintyTech - Ed Henderson" <[EMAIL PROTECTED]> > DB> > they used to improve rules or just added the spam corpus? > DB> > DB> Aren't the

Re: [SAtalk] Brute force spam prevention for NSP's

2002-05-03 Thread Derek Broughton
From: "Viraj Alankar" <[EMAIL PROTECTED]> > > Now by being able to see this traffic, we can do some interesting things. If > anyone has played with dsniff, there are 2 tools in that package that come to > mind: mailsnarf and tcpkill :). For those that do not know, mailsnarf > basically dumps out S

Re: [SAtalk] [Fwd: I have some exclusive information for you.]

2002-05-03 Thread Derek Broughton
From: "CertaintyTech - Ed Henderson" <[EMAIL PROTECTED]> > > > > These should goto spamassassin-sightings, not spamassassin-talk (unless > > you think there's a discussion in store for this spam.) > > What exactly happens to the emails that are sent to spamassassin-sightings? > I have sent alot of

Re: [SAtalk] X-Spam-Status: No, hits=5.0 required=5.0

2002-05-03 Thread Derek Broughton
Craig wrote: > Well, I think that better than comparing the rounded number, we should > instead compare the real numbers, and just round down instead. > So 4.9 would be > displayed as 4.9 not 5.0 -- it's less mathematically correct, but makes it > clearer why 5.0 < 5.0 sometimes. Which is fi

Re: [SAtalk] What is the cleanest mail server to use with SA ?

2002-05-02 Thread Derek Broughton
From: "Charlie Watts" <[EMAIL PROTECTED]> > On Wed, 1 May 2002, Derek Broughton wrote: > > _nothing_ beats Exim. Exim installation on a Debian system is almost > > trivial. Spamassassin installation on top of Exim, and it wouldn't need to > > be De

Re: [SAtalk] X-Spam-Status: No, hits=5.0 required=5.0

2002-05-02 Thread Derek Broughton
> Might be worth doing the check on the rounded number, just to eliminate > the visual confusion. I wouldn't say _just_ to eliminate the visual confusion. If the header had been: X-Spam-Status: No, hits=4.999 required=5.0 it would have been correct. If the header tells me the hit count wa

[SAtalk] X-Spam-Status: No, hits=5.0 required=5.0

2002-05-02 Thread Derek Broughton
This looks strange - it hit my triggering limit exactly, and isn't considered spam. Why? -- Derek Broughton --- Begin Message --- BIZ and .INFO Available Here Dear sir/madam, The Internet Corporation for Assigned Names and Numbers [ICANN] has recently approved the addition of new exten

Re: [SAtalk] What is the cleanest mail server to use with SA ?

2002-05-01 Thread Derek Broughton
From: "Dave Strickler" <[EMAIL PROTECTED]> > Looks like SendMail uses Milter(s) to hook in... > Looks like ProcMail has easy hooks... > > Anyone have a preference for ease of use / clean install / less > headaches? The box it will run on will be dedicated to SA and nothing > else. _nothing_ beat

Re: [SAtalk] What are these messages?

2002-04-25 Thread Derek Broughton
From: "Matt Sergeant" <[EMAIL PROTECTED]> > > > They may also have the text "I need your advice on this" or some such > > nonsense. The attachment is usually a .pif file that shows up with the > > type "Audio/X-WAV" as below. SA does not catch it as spam. At least not > > with the stock setting

Re: [SAtalk] How do I avoid this being spam?

2002-04-24 Thread Derek Broughton
Bart wrote: > On Tue, 23 Apr 2002, Doug Crompton wrote: > > > The following message (headers below) was tagged as spam. It is not. What > > I don't understand is why does it say yahoo.com is a forged address and > > via a tagged relay? > > SA says the yahoo.com address was forged because the From

Re: [SAtalk] false positive

2002-04-22 Thread Derek Broughton
> I've been using SA for about 2 months now and have been running with the > default threshold of 5 hits. > > With the new version 2.20 I got a false positive with a newsletter > I receive. My very first hit with SA was on a subscribed newsletter, mostly caused by CTYPE_JUST_HTML. Within a day I

Re: [SAtalk] FORGED_*_RCVD scores low?

2002-04-19 Thread Derek Broughton
Ken Causey wrote: > I realize that most of the scores in SA were GA derived, and I agree > that that seems like a very good technique. However, I have to wonder > at the scores for forged recieved headers. Is there any case in which a > "valid" email has forged recieved headers? Why don't thes

Re: [SAtalk] Porn mail deleting for school

2002-04-17 Thread Derek Broughton
CertaintyTech - Ed Henderson wrote: > No you can't. Q-S will only run spamc and doesn't block or quarantine any > Spam messages. It has to be done further down the delivery pipe using > maildrop or procmail. > > > > Maybe there's a way to do this in qmail-scanner which I use with > > pamd? --