Re: [SAtalk] Virginia Busts Spammers

2003-12-13 Thread Gorm Jensen
- Original Message - From: "Greg Cirino - Cirelle Enterprises" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 12, 2003 2:33 PM Subject: Re: [SAtalk] Virginia Busts Spammers > No noticeable decrease in spam here... > > did they get the right guys? > > g Usually, 2-3

[SAtalk] Bayes Poison

2003-11-29 Thread Gorm Jensen
Bayes is working very well for me, but I am concerned about poisoning the database with extraneous, obfuscating words that many spam messages contain. A few postings to this list say that there is no problem, but I don't want to spoil a good thing. Are there some rules of thumb on what to sa-lear

[SAtalk] Spam or Bounce?

2003-11-29 Thread Gorm Jensen
The attached email looks like a legitimate bounce, but I'm not sure whether it is just a spam message masquerading as a bounce. How can one tell which is correct? >From root Sat Nov 29 07:30:07 2003 Return-Path: <[EMAIL PROTECTED]> Received: from typhoon.skynet.be (typhoon.skynet.be [195.238.2.8

[SAtalk] Bayes File Ownership

2003-11-21 Thread Gorm Jensen
I run sa-learn as root using SA 2.55 and 2.6 on two redhat systems. Both systems run spamd and call spamc from procmail with -u user1 (or user2). Because there are only two users, each system has a common bayes database with file access permitted to both users. Occasionally, I have discovered tha

Re: [SAtalk] Razor connection times out

2003-11-14 Thread Gorm Jensen
> Razor doesn't seem to be working. This is the output I get with > spamassassin -D: > > Nov 14 08:56:05.758908 report[31327]: [ 8] Checking with Razor Discovery Server 216.52.3.2 > Nov 14 08:56:05.758989 report[31327]: [ 6] No port specified, using 2703 > Nov 14 08:56:05.759036 report[31327]: [

[SAtalk] SA 2.60-1 installation

2003-11-13 Thread Gorm Jensen
I am installing 2.60-1 via RPM packages on a redhat 7.2 system, and running into dependency problems. Putting all three packages (spamassassin, perl-Mail-SpamAssassin and spamassassin tools) on the same command line still gave dependency errors, so I installed those 3 packages with nodeps. Errors

[SAtalk] Rule Syntax

2003-10-05 Thread Gorm Jensen
I am using SA 2.55 on a redhat 7.2 machine. I want to catch email with subjects that begin with: =?us-ascii? I used: header gej_US_ASCII Subject =~ /\=\?us-ascii\?/i describe gej_US_ASCII blah blah score gej_US_ASCII 1.0 Checked with --lint, but there was no hit on the rule. Variations

Re: [SAtalk] Newbie - Why no score for equal From: and To: address?

2003-08-08 Thread Gorm Jensen
> I filter on the received line: > > received: from mokes [210.58.26.191] by gwdg.de with > MailMXPro(2195.5766); > > The MailMXPro seems to be unique for some spam mails. I did not found > this word in any other mail. > I tried to make a rule based on this observation, but when I ran --lint, I r

Re: [SAtalk] Newbie - Why no score for equal From: and To: address?

2003-08-08 Thread Gorm Jensen
>> received: from mokes [210.58.26.191] by gwdg.de with >> MailMXPro(2195.5766); >> >> The MailMXPro seems to be unique for some spam mails. I did not found >> this word in any other mail. >> >I tried to make a rule based on this observation, but when I >ran --lint, I received a "failed to parse l

[SAtalk] Configure Bayes Path

2003-07-18 Thread Gorm Jensen
To get a single database instead of one for each user, I added "bayes_path /this/that/bayes" to the local.cf file. The database was formed and is being populated by sa-learn; however, when mail is evaluated, the error "Cannot open bayes_path /this/that/bayes R/O: Permission denied" is generated.

Re: [SAtalk] Whitelist Problem

2003-07-16 Thread Gorm Jensen
Close. I whitelisted myself, and the spam's "Return-Path" points to me. Thanks, Bob. > Even without seeing the missing attachment, I'm guessing the message > matched something in the default whitelists in > /usr/share/spamassassin/60_whitelist.cf > > Amazon? > > -- Bob ---

[SAtalk] Whitelist Problem

2003-07-15 Thread Gorm Jensen
I run spamassassin 2.55 on a Redhat 7.2 system The attached email is spam, but it was not filtered because of the "USER_IN_WHITELIST" assessment. I studied my whitelist, and neither the originator nor strings containing the originator are listed, so I don't see how/why the message passed. Can an