RE: [SAtalk] BigEvil.cf

2004-01-05 Thread Ed Kasky
At 4:01pm -0600 1/5/04, David B Funk wrote: On Mon, 5 Jan 2004, Ed Kasky wrote: > Any other way to monitor the file's effectiveness? Ed Create a simple test mail message that contains a URL fabricated using any one of the hosts listed in BigEvil.cf. Feed the test message to "spamc

RE: [SAtalk] BigEvil.cf

2004-01-05 Thread Ed Kasky
Found a few... 3.0 BigEvilList_192URI: Generated BigEvilList_192 Thanks! Ed . . . . . . . . "We made too many wrong mistakes." -- Yogi Berra, 1960 At 10:46 AM Monday, 1/5/2004, Gary Smith wrote -=> Wait for a while to get some spams. Then check the log file. Also, check the h

RE: [SAtalk] BigEvil.cf

2004-01-05 Thread Ed Kasky
At 08:56 AM Monday, 1/5/2004, Tom Meunier wrote -=> With bigevil.cf in /etc/mail/spamassassin, all I see that remotely relates to the file is the following: spamd[22495]: debug: using "/usr/share/spamassassin" for default rules dir spamd[22495]: debug: using "/etc/mail/spamassassin" for site r

[SAtalk] Thank You!

2003-12-24 Thread Ed Kasky
sane holiday! Ed Kasky . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Two wrongs do not make a right - it usually takes three or more. --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or

Re: [SAtalk] Highest Score

2003-10-06 Thread Ed Kasky
At 07:23 AM Friday, 10/3/2003, Matthias Fuhrmann wrote -=> On Fri, 3 Oct 2003, Ed Kasky wrote: > Our highest score since Sunday: > spamd[21411]: identified spam (55.0/7.0) > > Total number of emails processed by the spam filter : 1242 > Number of spams :

Re: [SAtalk] auto reporting to razor

2003-10-04 Thread Ed Kasky
amassassin to automatically report high scoring spam to razor? If not, what would be a good way to do this? I suppose I could write a filter to call spamassassin -r ... (I'm using it on a relay server and so right now it is a manual process for me if I want to submit a mail.) Ed Kas

RE: [SAtalk] Highest Score

2003-10-03 Thread Ed Kasky
do you get that output? Thanks, Dan > -Original Message- > From: Ed Kasky [mailto:[EMAIL PROTECTED] > Sent: Friday, October 03, 2003 9:35 AM > To: Mike Carlson > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Highest Score > > Our highest score since Sunday: > spamd

Re: [SAtalk] Highest Score

2003-10-03 Thread Ed Kasky
Total spam volume : 1134 kbytes Total clean volume : 5 Mbytes On Fri, 3 Oct 2003, Mike Carlson wrote: > Out of curiosity, what is the highest scoring anyone has seen SA give a > message? I had one come through at 37.54 the other day.

Re: [SAtalk] 30 seconds to process an email???

2003-09-30 Thread Ed Kasky
nce upgrading to 2.6, I have seen message take as little as .5 second up to over a minute. I just haven't had time to debug and see where it's slowing down at times... Ed Kasky Los Angeles, CA . . . . . . . . "Opportunities multiply as they are

[SAtalk] Re: Anyone using DCCifd?

2003-09-24 Thread Ed Kasky
At 07:57 PM Wednesday, 9/24/2003, Bernd Kuhls wrote -=> On Mi 24 Sep 2003 06:21:34p Ed Kasky wrote: > >debug: DCCifd is not available: no r/w dccifd socket found. Sep 24 16:03:23 router dccifd[861]: 1.2.7 listening to /etc/apache/mail/dcc/dccifd My netsat: unix 2 [ ACC ]

[SAtalk] Anyone using DCCifd?

2003-09-24 Thread Ed Kasky
I just installed 2.60 and while checking my install noticed the following: >debug: DCCifd is not available: no r/w dccifd socket found. I saw in the change logs that support was now built into SA and was wondering it it was worth the effort to get it running... Ed Kasky Los Angeles,

RE: [SAtalk] DCC vs Razor2 vs Pyzor

2003-07-31 Thread Ed Kasky
.0, the more accurate the rule is at correctly picking spam without picking up nonspam.) Ed Kasky Los Angeles, CA . . . . . . . . I would have made this shorter, but I ran out of time. . . --- This SF.Net email sponsored by: Free pre-built ASP

[SAtalk] Getting stuck on certain tests

2003-07-13 Thread Ed Kasky
result, instead of seeing .3 to 1.5 seconds, I am seeing 5 to 15 seconds. I double checked dns and router settings and they seem to be functioning normally - no dropped packets, etc. Any suggestions as to how you to approach this or where to look next are greatly appreciated... Ed Kasky Los

Re: [SAtalk] Why does "helper-app run mode" take 3 seconds

2003-06-15 Thread Ed Kasky
ifferent user or as root? I tried running it as spamd but then realized I'd have to change permissions on all the home directories and haven't take that leap as of yet. If I remember correctly, Theo put a fix for this into 2.60-cvs... I'll look for it on cpan when it becomes ava

Re: [SAtalk] Why does "helper-app run mode" take 3 seconds

2003-06-15 Thread Ed Kasky
look for one and saves the 3 seconds ?? Jun 15 16:01:19 yoda2 spamd[3543]: debug: entering helper-app run mode Jun 15 16:01:19 yoda2 spamd[3543]: debug: Using results from Razor v2.34 (Or something like that???) Anyway, I have never seen such low speeds doing razor checks and rbl

Re: [SAtalk] Why does "helper-app run mode" take 3 seconds

2003-06-15 Thread Ed Kasky
11738]: [ 6] Found 1 Discovery Servers via DNS in the razor2.cloudmark.com zone Would it help do you think if I put the discovery server entries in the hosts file? Ed Kasky Los Angeles, CA . . . . . . . . Don't let your mouth write no

[SAtalk] Why does "helper-app run mode" take 3 seconds

2003-06-15 Thread Ed Kasky
x27;s 3 to 4.5. Could this be related to cpu speed or dns or my setup? Inquiring minds want to know ;-) Happy Father's day to all the fathers out there!!! Ed Kasky Los Angeles, CA . . . . . . . . Always tell the truth. It's the easiest thing to remember.

Re: [SAtalk] How long for spamd/razor check?

2003-06-13 Thread Ed Kasky
Who learned everything he knows about SA from the members who contribute to this list.. :-) At 07:40 AM Friday, 6/13/2003, Dan O'Brien wrote -=> Special thanks to Ed Kasky for pointing me in the right direction. Ed Kasky Los Angeles, CA . . . . . . . . The washing machine in my he

Re: [SAtalk] mail-abuse.org registration

2003-06-07 Thread Ed Kasky
uch paper. > I'm not bothering! -- Ed Kasky Los Angeles, CA ~~~ Friends: People who know you well, but like you anyway. --- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. D

Re: [SAtalk] .spammassin

2003-06-06 Thread Ed Kasky
On Fri, 6 Jun 2003, Tony Earnshaw wrote: > Better a bozo than a mish man, some might say. We've all been / will be > bozos at some time or another (ever done 'rm -r' in a directory where > you shouldn't?) Curious minds have to know.... What is a "mis

Re: [SAtalk] Warning from Razor

2003-06-05 Thread Ed Kasky
looked at my razor-agent.log, but it's not very infomative. Ed Kasky Los Angeles, CA . . . . . . . . We are born naked and hungry and it's down hill from there. --- This SF.net email is sponsored by: Etnus, makers of TotalView, Th

Re: [SAtalk] rewrite_subject not working

2003-05-30 Thread Ed Kasky
t office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk Ed Kasky Los Angeles, CA . . . . . . . . If you hav

RE: [SAtalk] I hate SpamAssassin

2003-05-27 Thread Ed Kasky
thout warning people what was coming and what they could expect. What are the chances that all their customers read that email? Ed Kasky Los Angeles, CA . . . . . . . . Bad day: Spouse is reading a new book : "Celibacy. The Secret Weapon."

[SAtalk] What exactly is 'ham'??

2003-03-10 Thread Ed Kasky
At the risk of sounding either naive or stupid - or both... What exactly is the difference between 'spam' and 'ham'? (aside from the obvious culinary differences;) Ed Kasky Los Angeles, CA . . . . . . . . "If a man harbors any sort of fear, it percolates through all

Re: [SAtalk] Sendmail and Procmail

2002-11-28 Thread Ed Kasky
skip the filter. Is there something I am missing? Just a shot in the dark, but, did you create any recipes in .procmailrc? Ed Kasky Los Angeles, CA . . . . . . . . There are 3 kinds of people, those who can count & those who can't. ---

Re: [SAtalk] Port used by SA to connect to Razor?

2002-11-09 Thread Ed Kasky
to limit how many ports I open to traffic. Ed Kasky Los Angeles, CA . . . . . . . . "It's not a very big step from contentment to complacency." - Simone De Beauvoir --- This sf.net email is sponsored by:ThinkGeek

[SAtalk] Port used by SA to connect to Razor?

2002-11-09 Thread Ed Kasky
specific port (like 8080) or do I need to open 2703 for the reporting? TIA for any help on this... Ed Kasky Los Angeles, CA . . . . . . . . "Main's Law" For every action there is an equal and opposite government program.

Re: [SAtalk] /etc/aliases -> spamassassin

2002-09-13 Thread Ed Kasky
on't remember what MTA is involved but Sendmail using smrsh will complain about a piped alias. I found this out when I added demime to my majordomo aliases. I wound up having to take the latter course in order to run the multiple commands based on an alias. Ed Kasky Los Angeles, CA . . . .

Re: [SAtalk] spamassassin -r in procmailrc?

2002-07-05 Thread Ed Kasky
re than one school of thought on this issue. I am subscribing to the theory that if it's spam, whether SA caught it or not, I report it as described below. > On Thu, 4 Jul 2002, Ed Kasky wrote: >> I had the same thought when I first starting using SA ;-) >> >> I d

[SAtalk] Help with 2.31 install

2002-06-20 Thread Ed Kasky
ssassin/Conf.pm: ``-D'' should be [CB]<-D> /usr/bin/pod2man: bad option in paragraph 301 of lib/Mail/SpamAssassin/Conf.pm: ``-D'' should be [CB]<-D> /usr/bin/pod2man: bad option in paragraph 370 of lib/Mail/SpamAssassin/Conf.pm: ``-R'' should be [C

Re: [SAtalk] Where is the best place to search the archives on this list?

2002-05-30 Thread Ed Kasky
Google is the only way to go... Ed At 02:25 PM Thursday, 5/30/2002, you wrote -=> >Geocrawler is shit. No search features what so ever... Ed Kasky Los Angeles, CA . . . . . . . . "It has been my experience that folks who have no vices have very few virtues." -

Re: [SAtalk] Klez

2002-05-20 Thread Ed Kasky
Sidney - Could you post that procmail recipe to the list? Ed ~~ At 04:27 PM Monday, 5/20/2002, Sidney Markowitz wrote -=> >On Mon, 2002-05-20 at 14:18, Peter Scott wrote: > > Does anyone have a rule for matching the Klez virus? > >Following Craig's suggestion, made earlier on this list, I instal

Re: [SAtalk] 2.20 delayed

2002-04-15 Thread Ed Kasky
At 11:39 AM Monday, 4/15/2002, Craig R Hughes wrote -=> >EK> Outstanding! Another Giants fan.... > >EK> Ed Kasky >EK> Los Angeles, CA > ^^^ > >Ouch! That must suck. Only when I'm stuck in traffic or yearning for Clement St. dim sum on

Re: [SAtalk] 2.20 delayed

2002-04-15 Thread Ed Kasky
At 10:01 AM Monday, 4/15/2002, Craig R Hughes wrote -=> >blame the weather. I was out in the park listening to the Giants on the >radio Outstanding! Another Giants fan Ed ~~ Ed Kasky Los Angeles, CA . . . . . . . . Some people would not recognize subtlety if it hit them on

Re: [SAtalk] dotted decimal

2002-04-12 Thread Ed Kasky
Can the private class-C be excluded from the NORMAL_HTTP_TO_IP test? > >Yes, no traces of https?://10\. in the spam corpus. > >Send me a patch and I'll apply. Ed Kasky Los Angeles, CA . . . . . . . . A closed mind is like a c

Re: [SAtalk] Implementing Razor

2002-04-06 Thread Ed Kasky
extra points when it sees that it is in the database. So >yes, mail that exists in the razor database can still get passed through >if the points aren't beyond the threshold that you set. > >Kenneth > >On Sat, 6 Apr 2002, Ed Kasky wrote: > > > I read the faq at spamAs

Re: [SAtalk] Implementing Razor

2002-04-06 Thread Ed Kasky
n toying with various > > settings for required hits, etc for the past few weeks and am almost > > ready to use it system wide. I have been reading the man pages that come > > with Razor and can't quite decide how exactly to run it if I even need to > > do anything specia

Re: [SAtalk] Help with rules

2002-03-19 Thread Ed Kasky
Not using Exim here. Am I getting closer with the following? To =~ /^?$/i Ed ~~ At 12:52 PM Tuesday, 3/19/2002, dman wrote -=> >On Tue, Mar 19, 2002 at 09:10:08AM -0500, Greg Ward wrote: >| On 18 March 2002, Ed Kasky said: >| > I am in the process of learning regex and hav

[SAtalk] Help with rules

2002-03-18 Thread Ed Kasky
I am in the process of learning regex and have a question if someone has a minute Based on the following headers, is this the correct addition to 20_head_tests.cf? header UNDISC_RECIPTo =~ /^Undisclosed-Recipient*:\s*;$/ describe UNDISC_RECIP Valid-looking To "Undisclo

[SAtalk] Help with new install

2002-03-10 Thread Ed Kasky
anic Mar 10 22:24:21 yoda sendmail[15385]: g2B6OL7F015385: SYSERR(root): savemail: cannot save rejected email anywhere There is a symbolic link in etc/smrch for spamassassin as well. Any pointers, suggestions or ideas are appreciated. Thanks in advance. Ed ~~ Ed K