Hmm.. Well I'm using Microsoft Exchange 2000 and all internet emails have their full
complement of Internet Headers. Are you trying to check for spam on non-SMTP emails?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fritz Mesedilla
Sent: 17 November 200
Or perhaps you can use the existing HTML_FONT_INVISIBLE rule?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Matthew
Sent: 15 November 2003 22:37
To: [EMAIL PROTECTED]
Subject: [SAtalk] Test Suggestion
HTML_FONT_COLOR_WHITE
I've noticed that some spamm
As has been discussed previously, when forwarding an email within most
MUAs you lose a lot of the header information of the original email, and
you will also teach bayes that spam looks like the headers that are
produced by your MUA. This happens to be a pretty bad idea.
I've been wondering about
Don't worry about the fact that the spam messages are attachements of
the report (and that the attachment has no headers). Sa-learn will
realise this and strip it out. - at least that's what I've been told,
and bayes is working like a treat for me- with a spam corpus of 3300
messages using libpst a
Your bayes_auto_learn_threshold_nonspam should be a LOT lower than 6.
If you've actually been learning emails which score 5.9 as non-spam then
you've most likely poisoned your bayes database, especially with 2.55 as
many spams are now being proliferated to deliberately score less than 5
with SA2.5
Those emails are Viruses, not Spam - why not get some Anti Virus
Software?
-Original Message-
From: Howard Brazee [mailto:[EMAIL PROTECTED]
Sent: 27 October 2003 14:08
To: [EMAIL PROTECTED]
Subject: [SAtalk] Newbie
My e-mail provider uses Spam Assassin. Lately I have been getting
abo
I use spam assassin milter for Sendmail.
It has a "-r" option to reject emails with a score higher than a certain
threshold. I set mine to 25.
I believe the high scoring spam gets rejected with a 550 error or
similar.
-Original Message-
From: Vittorio Muth [mailto:[EMAIL PROTECTED]
Sent
How Xenophobic!!
-Original Message-
From: HighTechGlass [mailto:[EMAIL PROTECTED]
Sent: 17 September 2003 07:05
To: [EMAIL PROTECTED]
Subject: [SAtalk] unblacklist_from not working
I wanted to block all foreign domains, since all of it is spam, and
SAProxy missed some of it.
# Block a
Don't do that!
gate# host sitefinder.verisign.com
sitefinder.verisign.com has address 12.158.80.10
The chase has begun!!
-Original Message-
From: Ian Southam [mailto:[EMAIL PROTECTED]
Sent: 17 September 2003 09:22
To: Steve Thomas
Cc: Rich Puhek; Lance A. Brown; [EMAIL PROTECTED]
Subject
Interesting Link:
http://www.iab.org/Documents/icann-vgrs-response.html
smime.p7s
Description: S/MIME cryptographic signature
I think they're already looking into it:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: 16 September 2003 14:32
To: [EMAIL PROTECTED]
Subject: Re: [SAtalk] The Verisign folly
This is an appalling unilateral abuse of VeriSign's power.
Forget about the neg
This in your local cf Local.cf:
bayes_file_mode 0770
bayes_path /path/to/bayes
Ensure that your bayes files are owned by dupond and that they are in a
group which contains the user id that you wish to run sa-learn as.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED
Unlike systems like snort IDS, where the rule set are updated quite
frequently compared to the actual detection engine, detecting spam is
based on statistical analysis. It isn't a particularly good idea to
incorporate other people's rules blindly into your own rule set, at
least not before checking
You've probably whitelisted [EMAIL PROTECTED] as all these emails
were sent with a forged From same as the recipient. Nearly all of those
emails scored high scores with my setup.
Thanks
Giles
-Original Message-
From: Hannu Liljemark [mailto:[EMAIL PROTECTED]
Sent: 11 August 2003 11:58
T
1. Messages marked as SPAM will have the following header (or similar):
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
That should identify the version for you. Note only messages that score
will have this header.
2. By default spamassassin makes no changes to the subject
Dave,
In my system local.cf file I have:
bayes_file_mode 0770
Bayes_path /etc/mail/spamassassin/bayes
I have no local users, the server is simply a smart host for all
inbound/outbound email, spamd runs as user nobody.
You can get more information about these options here:
http://www.spamassassi
You could try reporting the message to Razor2 using the "pamassassin -r"
feature. Then hopefully, if enough people do this, the message will be
flagged ass being in the Razor database.
You'll also be helping us all to reduce the false negative rate.
Note though: that sa does not do this automatic
Title: sa-learn suddenly failing
Whenever I run sa-learn now I get the message:
Cannot open bayes_path $HOME/.spamassassin/bayes R/O:
Cannot open bayes_path $HOME/.spamassassin/bayes R/W: File exists
The $HOME is my home folder, actually given in the output. This is with spamassassin 2.55,
here: http://sourceforge.net/projects/ol2mbox
Thanks
Giles Coochey
-Original Message-
From: ian douglas [mailto:[EMAIL PROTECTED]
Sent: 25 July 2003 03:07
To: [EMAIL PROTECTED]
Subject: [SAtalk] sa-learn question
I've been lurking about reading up on training ham mailboxes but don't
gener
I have the following lines in my local.cf:
Bayes_file_mode 0770
Bayes_path /etc/mail/spamassassin/bayes
The files are owned by nobody and group root. I'm using spamc/spamd,
through sendmail milter, which runs as nobody and I do manual learning
as root every so often when I have enough examples of
ached message? (Hard to do when you have Outlook on the client
side!!!)
I had a look through the Archives and found Daniel Carrera recently
asked the same question, but without a reply. Shouldn't this be in the
FAQ?
Thanks
Giles Coochey
System Administrator
Mirada Solutions Ltd
Oxford
21 matches
Mail list logo
