RE: [SAtalk] SpamAssassins local.cf

2003-12-19 Thread Gilson, Larry
Hi Matt, I am confused. Mail::SpamAssassin::Conf states the following: "This operates additively, so a trusted_networks line after another one will result in all those networks becoming trusted." What does this really mean? --Larry > -Original Message- > From: Matt Ket

RE: [SAtalk] New to Spamassassin

2003-11-26 Thread Gilson, Larry
> -Original Message- > From: McWhirter,Julia > > This rule worked thanks, also upgraded to mimedefang 2.39 and > spamassassin 2.60 which help with some other spam that was slipping > through. But I think you will get a lot of FPs with that one. C.B.S., N.B.C., B.B.C. --Larry L.G.

RE: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Gilson, Larry
> -Original Message- > From: David B Funk > Sent: Wednesday, November 12, 2003 2:45 AM > To: Larry Gilson > Cc: 'Robban'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] SMTP gateway/filter > > > On Tue, 11 Nov 2003, Larry Gilson wrote: > > > The preferred method is any way you prefer. ;) T

RE: [SAtalk] [RD] Trojaned machines

2003-10-23 Thread Gilson, Larry
Hi Chris, I have been using the following uri test for about 3 weeks without issue: describe MY_URI_TCP_PORTMY: Non-standard TCP port in URL uri MY_URI_TCP_PORT/:\d{2,4}\D/ scoreMY_URI_TCP_PORT2.0 It will boost the score on top of what SA already chatches but will also catch

RE: [SAtalk] Spamassassin updates

2003-10-15 Thread Gilson, Larry
You have done this way more than I. I just feel cozy updating one RPM at a time. I like increments. I almost feel like an old man writing like that! --Larry > -Original Message- > From: Theo Van Dinter > Sent: Wednesday, October 15, 2003 4:47 PM > To: Larry Gilson > Cc: Charles Grego

RE: [SAtalk] Trouble getting spamd working with postfix

2003-09-19 Thread Gilson, Larry
Yes, there is an option. You could have a custom script that would send the message to smtpd on a different port. The master.cf would need a special configuration for that port to prevent mail loops. Some people use it. I think SecuritySage has an outline for such a configuration. The FILTER_R

RE: [SAtalk] Trouble getting spamd working with postfix

2003-09-17 Thread Gilson, Larry
Hi Jason, My opinion only, but I would abandon this second method you are using and go back to the original single script that reinjected the mail using Postfix's sendmail binary (/usr/sbin/sendmail). It is better to use a simple method than this alternate method. If you go back to this method,

RE: [SAtalk] Logfile of spamrecognized mails

2003-09-17 Thread Gilson, Larry
Just to add to this, I setup logging like this (please forgive the wrap on the formail line): LOGFILE = /var/merlin/log/procmaillog VERBOSE = off LOGABSTRACT = off TRAP='echo "=~=~=~=~=~=~=~=~=~="; \ echo "Date:$DATE"; \ formail -XFrom: -XTo: -XSubject: -XX-Merlin -XX-Spam-Status: -XX-Sp

RE: [SAtalk] no spam today uses SA?

2003-09-15 Thread Gilson, Larry
Deersoft was bought by NAI. Deersoft made SpamAssassin Pro and SpamAssassin Enterprise products. Justin should be able to tell you for sure but I believe that Deersoft trade marked the specific products and not the SpamAssassin name itself. http://www.cio.com/archive/020103/et_company.html "Dee

RE: [SAtalk] Is no message-id header a good measure of spam?

2003-09-11 Thread Gilson, Larry
Hi James, > -Original Message- > From: James Herschel > What I'm asking is: > 1. Is the lack of a message-id header an accurate measure of spam? > 2. Is this a rule in SpamAssassin? I haven't seen it in any reports The Message-Id is an optional field. From what I have seen from posts ov

RE: [SAtalk] Message ID

2003-08-26 Thread Gilson, Larry
Good numbers to see Martin. Thanks! Regards, Larry > -Original Message- > From: Martin Radford > From my own collections: > >with FQDNwith hostname only > ham: 2331 (85.6%) 391 (14.4%) > spam: 1925 (76%) 608 (24%) > > While

RE: [SAtalk] tests=none

2003-08-14 Thread Gilson, Larry
>-Original Message- >From: mailinglists >This is maillog: > >Aug 13 15:40:40 mailbox spamd[2469]: connection from localhost >[127.0.0.1] at port 3182 >Aug 13 15:40:40 mailbox spamd[2612]: processing message ><[EMAIL PROTECTED]> >for filter:520. >Aug 13 15:40:41 mailbox spamd[2612]: cl

RE: [SAtalk] New Install of SA

2003-08-11 Thread Gilson, Larry
> -Original Message- > From: Angel Gabriel > On Fri, 2003-08-08 at 18:03, Larry Gilson wrote: > > > > > > > -Original Message- > > > From: Angel Gabriel > > > > > I don't see anything from spamassassin in the mail headers. > > > I'm not even sure how to check that spamassass

RE: [SAtalk] Question about what users get their mail processed through SA

2003-08-01 Thread Gilson, Larry
> -Original Message- > From: Matt Kettler > At 05:37 PM 8/1/03 -0400, Steven W. Orr wrote: > >But there is no specific user associated with a mailing list. > > > >1. Is this why mail is not going through SA if it's bound for a > > list? > >2. Is there a way to make all mail go through

RE: [SAtalk] sa-learn and exchange

2003-08-01 Thread Gilson, Larry
> -Original Message- > From: Covington, Chris > > Hi all, > > Has anyone thought of/found an automated solution to removing > messages from an Exchange system and cronning sa-learn on them? > Right now I have users move spam that makes it past SA/Postfix into > a Public Folder, and the

RE: [SAtalk] DCC vs Razor2 vs Pyzor

2003-08-01 Thread Gilson, Larry
Hey Matt, Thanks for the lengthy reply. You gave me more than I was looking for and it is very much appreciated! Would anyone else like to comment on the effectiveness of each check and where they think it they are weak and strong. Also, what scores you give for each specific check? Thanks aga

RE: [SAtalk] Want to turn off AWL (at least for my address)

2003-07-28 Thread Gilson, Larry
Hey Vicki, > Do I simply set auto_whitelist_factor 0? Does that turn off > AWL checking? Is there a "better" solution? You might want to read the FAQ below. It does not specifically answer your question but may help. http://spamassassin.taint.org/faq/index.cgi?req=show&file=faq01.013.htp If yo

RE: [SAtalk] Razor question

2003-07-24 Thread Gilson, Larry
Great suggestions Raul, Thanks! --Larry > -Original Message- > From: Raul Dias > > Now that is an interesting dilema. Since I don't run Bayes > > I don't run into that situation. Your situation is like asking > > SA to score your experience and score someone else's experience. > > If

RE: [SAtalk] procmail to train bogofilter with SA

2003-07-23 Thread Gilson, Larry
> -Original Message- > From: Shane Hickey [mailto:[EMAIL PROTECTED] > > Howdy all, Howdy Shane! A good procmail book is "The Procmail Companion" by Martin McCarthy. > | spamassassin -e I could be wrong but I don't think you are limited to this. I'll attempt this but just looking a