[SAtalk] Does 2.63 put lines into msg body?

2004-01-26 Thread Harry Putnam
Just wanted to find out if verson 2.63 inserts lines into message body of messages it sees as spam. Currently using 2.60 which does do that. Or maybe its configurable and I can set it so it doesn't do that. Confining insertion to headers only?

[SAtalk] Re: Rules for not alphanumeric characters

2002-11-02 Thread Harry Putnam
Daniel Quinlan <[EMAIL PROTECTED]> writes: > "Steve Thomas" <[EMAIL PROTECTED]> writes: > >>> It looks like you're looking for SUBJ_FULL_OF_8BITS. See if these messages >>> are triggering that rule. I /dev/null anything that hits on that

[SAtalk] Re: Rules for not alphanumeric characters

2002-11-02 Thread Harry Putnam
"Steve Thomas" <[EMAIL PROTECTED]> writes: > It looks like you're looking for SUBJ_FULL_OF_8BITS. See if these messages > are triggering that rule. I /dev/null anything that hits on that one. None of those posted show having hit that rule. For example: The message with subject: 1O. 14-Oct [ 2

[SAtalk] Rules for not alphanumeric characters

2002-11-01 Thread Harry Putnam
Setup: RedHat 7.3 Spamassassin 2.50 (Running as daemon) In the many rules that spamassasin parses for each message, are some of them devoted to identifying a subject line that has too many non-alphanumic characters? Some kind of percentage deal... Can someone identify any such rule

[SAtalk] Why no message-id in debug log

2002-06-27 Thread Harry Putnam
I still see no evidence of a message-id being inserted into debug logs to allow tracking. Or any evidence of time stamping. This bug was supposed to have been subsumed and corrected by another one, but these two factors have never appeared in my logs as of cvs yesterday (2.40). Maybe I don't un

Re: [SAtalk] how does one accomplish prefix=dir

2002-06-26 Thread Harry Putnam
David T-G <[EMAIL PROTECTED]> writes: > ...and then Harry Putnam said... > % > % I'm a little lost in installing spamassassin without using the > % ./configure approach. For example: How does one instruct the > % `make install' to use /usr/local instead of /us

[SAtalk] how does one accomplish prefix=dir

2002-06-26 Thread Harry Putnam
I'm a little lost in installing spamassassin without using the ./configure approach. For example: How does one instruct the `make install' to use /usr/local instead of /usr? I don't know much about makefiles but looking at the one in the distro Makefile.PL and resulting Makefile, I couldn't te

[SAtalk] Re: CVS version still 2.21

2002-06-26 Thread Harry Putnam
Matt Sergeant <[EMAIL PROTECTED]> writes: > Harry Putnam wrote: >> Am I getting my cvs from the wrong source tree? Just reupped my cvs >> today and I see the version still says 2.21. > > try: > > cvs update -A -d Trying as directed I see no difference

[SAtalk] CVS version still 2.21

2002-06-26 Thread Harry Putnam
Am I getting my cvs from the wrong source tree? Just reupped my cvs today and I see the version still says 2.21. --- This sf.net email is sponsored by: Jabber Inc. Don't miss the IM event of the season | Special offer for OSDN members! Jab

[SAtalk] Re: Displaying values of hit rules in header?

2002-06-26 Thread Harry Putnam
John Goggan <[EMAIL PROTECTED]> writes: > X-MailScanner-SpamCheck: SpamAssassin (score=9.9, required 7, > FROM_ENDS_IN_NUMS (0.382), CLICK_BELOW (1.531), EXCUSE_7 (1.305), EXCUSE_3 > (1.080), DOUBLE_CAPSWORD (1.050), CLICK_HERE_LINK (0.847), MAILTO_LINK > (0.782), NO_MX_FOR_FROM (1.8), MSG_ID_ADD

[SAtalk] Warning message in recent cvs

2002-06-26 Thread Harry Putnam
I'm running beta 5.8.0 perl Getting the latest cvs spamassassin then running perl Makefile.PL Gives this curt warning: reader # perl Makefile.PL WARNING: PL_FILES takes a hash reference not a string/number. Please inform the author. Checking if your kit is complete... Looks good W

Re: [SAtalk] Forged yahoo.com in recieved

2002-06-04 Thread Harry Putnam
Bart Schaefer <[EMAIL PROTECTED]> writes: >> describe FORGED_YAHOO_RCVD Forged yahoo.com 'Received:' header found >> >> Comes no nearer to making it clear what is really happening. > > Hrm. This was reported once before, and I thought the description had > been updated then. Sorry, I should

Re: [SAtalk] Debug output

2002-06-04 Thread Harry Putnam
Duncan Findlay <[EMAIL PROTECTED]> writes: [...] >> Going to the debug output, how can I find the output that pertains to >> that message? No date no msgid. >> I don't see why its being overlooked either. Its not a restart >> problem though. But can't find debug info to help out. >> > > Fi

Re: [SAtalk] Forged yahoo.com in recieved

2002-06-04 Thread Harry Putnam
Bart Schaefer <[EMAIL PROTECTED]> writes: > On Tue, 4 Jun 2002, Harry Putnam wrote: > >> This line appears in mail: >> X-Spam-Status: Yes, hits=2.2 required=2.0 tests=Repeat_Any_Allcap,\ >> FORGED_YAHOO_RCVD version=2.20 >> >> Yet a grep of the re

[SAtalk] Debug output

2002-06-04 Thread Harry Putnam
Can we make Debug output more usefull? Maybe adding a date prefix and something to crossreference what message is being read? A msgid would be very handy. Its kind of useless as it stands unless you are doing only one message. An example might be that I see a message where FROM_MALFORMED was g

[SAtalk] Forged yahoo.com in recieved

2002-06-04 Thread Harry Putnam
This line appears in mail: X-Spam-Status: Yes, hits=2.2 required=2.0 tests=Repeat_Any_Allcap,\ FORGED_YAHOO_RCVD version=2.20 Yet a grep of the received headers reveal no instance of yahoo. It is from a yahoo.com user, but the message mentiones rec'd, not from. __

Re: freespeech Re: *****SPAM***** [SAtalk] Re: Spamassassin-talkdigest, Vol 1 #456 - 14 msgs

2002-06-04 Thread Harry Putnam
"Michael Moncur" <[EMAIL PROTECTED]> writes: > I'm confused. Your message has spamassassin-talk in the To: field. So does > this one. In my scan through the last 24 hours worth of messages to SAtalk > and SAdev, 100% of them had the list's address in either the To: or Cc: > field. No, I'm confus

Re: freespeech Re: *****SPAM***** [SAtalk] Re: Spamassassin-talkdigest, Vol 1 #456 - 14 msgs

2002-06-03 Thread Harry Putnam
Bryan Hoover <[EMAIL PROTECTED]> writes: > Harry Putnam wrote: > >> I'm not sure I see how whitelist_from or to will work, unless the >> `from' is a reference to the berkely format `From ' (note the >> missing :) >> > > It works because

Re: [SAtalk] Re: [SAdev] [Bug 390] New: Spamassassin does not usewhitelist entries

2002-06-03 Thread Harry Putnam
Duncan Findlay <[EMAIL PROTECTED]> writes: > On Mon, Jun 03, 2002 at 08:51:25PM -0700, Harry Putnam wrote: >> I'm running spamd like this: >> spamd -d -D -L -S > > Once spamd daemonizes (with the -d option) it's debugging output is > sent to /dev/null (I

Re: [SAtalk] Re: [SAdev] [Bug 390] New: Spamassassin does not usewhitelist entries

2002-06-03 Thread Harry Putnam
Bryan Hoover <[EMAIL PROTECTED]> writes: > [EMAIL PROTECTED] wrote: > >> I have listed a number of whitelist entries in my user_prefs file. >> >> Regardless of an identifying header being listed in the whitelist, >> spamassassin still marks some mail which should be protected by the >> whitelist

Re: freespeech Re: *****SPAM***** [SAtalk] Re: Spamassassin-talkdigest, Vol 1 #456 - 14 msgs

2002-06-03 Thread Harry Putnam
Bryan Hoover <[EMAIL PROTECTED]> writes: > Harry Putnam wrote: > >> Maybe a little different approach wouldn't require as much huffing >> and puffing: >> header Spama X-BeenThere =~ spamassassin-.*@lists >> score Spama -100 >> >> So to ge

Re: freespeech Re: *****SPAM***** [SAtalk] Re: Spamassassin-talkdigest, Vol 1 #456 - 14 msgs

2002-06-03 Thread Harry Putnam
Bryan Hoover <[EMAIL PROTECTED]> writes: [...] > Not sure what's going on though. I just switched to Digest mode. The > devel group did not have a problem (that I know of, and the digest got > through). > > Here's what's in my user_prefs: > > whitelist_to [EMAIL PROTECTED] > whitelist_to [EMAI

[SAtalk] How can I make spamassassin report line number or full lineverbatim

2002-06-02 Thread Harry Putnam
Using body based rules like this one posted here a few days ago: (It had a different name, which I've lost but the regex is the same) body Repeat_Any_Allcap /\b([A-Z]{3,})\b.*?\1/ My understaning was that it would notice the repeating of any string of allcaps containing 3 or more chars, that

Re: [SAtalk] Too few clues in debug messages

2002-06-02 Thread Harry Putnam
John Horne <[EMAIL PROTECTED]> writes: > On Fri, 2002-05-31 at 23:13, Harry Putnam wrote: >> John Horne <[EMAIL PROTECTED]> writes: >> Your observation got me closely checking my home made rules and >> edits. I checked by commenting them all then, uncommenting

Re: [SAtalk] Too few clues in debug messages

2002-05-31 Thread Harry Putnam
Harry Putnam <[EMAIL PROTECTED]> writes: > It really a two part rule: > score FW_LOG -100 > header FW_LOG Subject /\[0030AB066D5C\]/ > > But the last part is what causes the error: > > Failed to run header SpamAssassin tests, skipping some: syntax error &g

Re: [SAtalk] Too few clues in debug messages

2002-05-31 Thread Harry Putnam
John Horne <[EMAIL PROTECTED]> writes: >> [...] >> Failed to run header SpamAssassin tests, skipping some: syntax error >> at (eval 6) line 11, near ") ~" >> >> syntax error at (eval 6) line 19, near ") ~" >> syntax error at (eval 6) line 568, near "; >> }" >> [...] > [snipped] >> >

Re: [SAtalk] Too few clues in debug messages

2002-05-31 Thread Harry Putnam
John Horne <[EMAIL PROTECTED]> writes: > On 31-May-2002 at 09:29:47 Harry Putnam wrote: >> Still experimenting with getting my setup pretty close to a good >> working config, but suddenly ran into some problems I'm having trouble >> debugging. >> > [...

[SAtalk] Too few clues in debug messages

2002-05-31 Thread Harry Putnam
Setup: OS Redhat Linux Spamassassin 2.20 Running in spamd/spamc mode through procmail(sendmail) Still experimenting with getting my setup pretty close to a good working config, but suddenly ran into some problems I'm having trouble debugging. spamd is started like this: spamd -d

Re: [SAtalk] Score isn't overridded

2002-05-30 Thread Harry Putnam
Harry Putnam <[EMAIL PROTECTED]> writes: > default info for COPY_DVDS: > body COPY_DVDS /copy.{1,20}dvd/i > describe COPY_DVDS Containts 'Copy DVDs' > score COPY_DVDS 2.746 > > > I've attempted to

Re: [SAtalk] Score isn't overridded

2002-05-30 Thread Harry Putnam
Theo Van Dinter <[EMAIL PROTECTED]> writes: > On Thu, May 30, 2002 at 11:55:07AM -0700, Harry Putnam wrote: >> cat /etc/mail/spam/local.cf > > do you mean /etc/mail/spamassassin/local.cf? yup >> I know that /etc/mail/spam/local.cf is being read because of other >

[SAtalk] Score isn't overridded

2002-05-30 Thread Harry Putnam
default info for COPY_DVDS: body COPY_DVDS /copy.{1,20}dvd/i describe COPY_DVDS Containts 'Copy DVDs' score COPY_DVDS 2.746 I've attempted to over ride it with: cat /etc/mail/spam/local.cf [...] score COPY_DVDS 1.8 [...] But I still see

[SAtalk] Output of spamd -d -D -L -S

2002-05-30 Thread Harry Putnam
Starting spamd with these flags: spamd -d -D -L -S gives the messages below. The ones I indented look like they are network type checks of some kind. But the -L flag is supposed to derail those kind of checks. Also about the last three lines: What is being scored there? debug: running bod

[SAtalk] A little present for the lists patience

2002-05-29 Thread Harry Putnam
Hope some of you find this script usefull. Its aim is to be fed one of the rule handles and spit out the score, definition and the rule itself by regex so several may be brought up. Its just a simple perl regex finding script that trawls thru your *.cf files for a regex and chops off the lines r

Re: [SAtalk] Is this normal?

2002-05-29 Thread Harry Putnam
dman <[EMAIL PROTECTED]> writes: > That's the "real" time. IOW how long you sat there waching the screen > before you saw a response from the program. > > Notice that the CPU time used by the system while in "userland" > differs by 14.66 seconds (a factor of 123) and the CPU time used in > "syst

Re: [SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Harry Putnam
"Security" <[EMAIL PROTECTED]> writes: > Hi, > > I'm very interested in running SpamAssassin site-wide on a few of my > machines. Currently I'm > Running Postfix for an MTA. Can anyone point me to some good > documentation on setting up SpamAssassin > With Postfix? I've done some searches but c

Re: [SAtalk] Is this normal?

2002-05-29 Thread Harry Putnam
dman <[EMAIL PROTECTED]> writes: > It is normal for the way you're running SA. The way you're using it > (by running 'spamassassin'), for each message : > o start a perl process (not cheap) > o compile lots and lots of regexes (takes lots and lots of CPU) > o do the regex mat

Re: [SAtalk] What is legal format for whitelist_from

2002-05-29 Thread Harry Putnam
dman <[EMAIL PROTECTED]> writes: > The default config file has some examples. Also look at > /etc/spamassassin/60_whitelist.cf (you're using debian, right?). No, not Debian. In this case RedHat 7.1 About those examples in 60_whitelist.cf: There are none that show multiple entries in my copy.

[SAtalk] Re: [SAdev] about how scoring works

2002-05-28 Thread Harry Putnam
[Cross post alert... This should have been posted on `talk' I had my wires crossed for a few posts which will no be posted to `talk'] "Michael Moncur" <[EMAIL PROTECTED]> writes: >> Running some of my spam thru and makine some adjustments, like >> lowering the required score to 2 (default 5).

[SAtalk] What is legal format for whitelist_from

2002-05-28 Thread Harry Putnam
[Cross post alert... This should have been posted on `talk' I had my wires crossed for a few posts which will no be posted to `talk'] The online docs at: http://spamassassin.org/doc/Mail_SpamAssassin_Conf.html Come within a hairs breadth of giving full details of what will work with whitelis

[SAtalk] about how scoring works

2002-05-28 Thread Harry Putnam
[Cross post alert... This should have been posted on `talk' I had my wires crossed for a few posts which will no be posted to `talk'] Just recently installed Spamassassin and using it with procmail. I have a test directory setup to test out procmailr recipes etc and so far am just trying spamas

[SAtalk] Is this normal?

2002-05-28 Thread Harry Putnam
[Cross post alert... This should have been posted on `talk' I had my wires crossed for a few posts which will no be posted to `talk'] Being very new to spamassassin, I'm wondering if I something setup very wrong. I just installed from CPAN and so far have only made a few edits to /etc/mail/spa