[SAtalk] More Perl problems?? re: Bayes.pm

2004-01-27 Thread Jack L. Stone
# break up blocks of separator chars so they become their own tokens $boundary =~ s/([-_\.=]+)/ $1 /gs; $val .= $boundary; } # stop-list words for Content-Type header: these wind up totally gray $val =~ s/\b(?:text|charset)\b//; $val; } Best regards, Jack L.

Re: [SAtalk] SA-2.6x causing server crash/reboots

2004-01-22 Thread Jack L. Stone
At 05:36 PM 1.22.2004 -0500, Theo Van Dinter wrote: >On Thu, Jan 22, 2004 at 04:05:49PM -0600, Jack L. Stone wrote: >> >From what I have read, we don't meed to move up on perl (perl5.8x) until >> SA-2.70 is released. > >2.70 (which is actually going to be 3.0.0) o

Re: [SAtalk] SA-2.6x causing server crash/reboots

2004-01-22 Thread Jack L. Stone
At 09:44 AM 1.22.2004 -0800, Douglas Kirkland wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >On Thursday 22 January 2004 07:53, Jack L. Stone wrote: >> Perhaps this question needs to be directed to Theo Van Dinter who most >> likely knows the answer I need.

Re: [SAtalk] SA-2.6x causing server crash/reboots

2004-01-22 Thread Jack L. Stone
At 05:17 PM 1.22.2004 +0100, Chr. von Stuckrad wrote: >On Thu, Jan 22, 2004 at 09:53:23AM -0600, Jack L. Stone wrote: >> Theo and/or anyone -- please help if you know the answer. I would like to >> keep using this function now disabled. >> >> BTW: here are a few of the

[SAtalk] SA-2.6x causing server crash/reboots

2004-01-22 Thread Jack L. Stone
rican /kernel: pid 1884 (perl5.00503), uid 2: exited on signal 10 Jan 22 07:13:31 sage-american /kernel: pid 1968 (perl5.00503), uid 2: exited on signal 10 Jan 22 07:23:59 sage-american /kernel: pid 2101 (perl5.00503), uid 2: exited on signal 10 Best regards, Jack L. Stone, Administrator Sage A

[SAtalk] perl5.00503 exited on signal 10

2004-01-21 Thread Jack L. Stone
outs like that. I have tweaked everything I can think of, but they keep on coming. More spam is getting through too, maybe as a result of the above. Anyone have any suggestions how to fix this?? Thanks! Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL

Re: [SAtalk] common patterns / improving bigevil

2004-01-18 Thread Jack L. Stone
ki.org/PieterB > > >--- >The SF.Net email is sponsored by EclipseCon 2004 >Premiere Conference on Open Tools Development and Integration >See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. >http://www.eclipsecon.

Re: [SAtalk] Ann: "Rules De Jour": An automated way to keep upwith the latest rulesets

2004-01-18 Thread Jack L. Stone
f Eclipse activity. February 3-5 in Anaheim, CA. >http://www.eclipsecon.org/osdn >___ >Spamassassin-talk mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > Best regards, Jack L. Stone, Admini

Re: [RulesEmporium] RE: [SAtalk] New HTML spam body obfuscation.

2004-01-13 Thread Jack L. Stone
> 10970 6083 48870.555 0.000.00 (all messages) >> 2201.000 1.00 1.00 JAVASCRIPT_ENCODING_2 >> 18 1620.865 0.60 1.00 JAVASCRIPT_ENCODING_1 >> 0000.500 0.00 1.00 JAVA

Re: [SAtalk] Changed spammer technique ?

2003-11-09 Thread Jack L. Stone
laiming to be >from my own domain)?? > >Regards > >/Brian > This works for me: ## Catch SPAMs with name in From and To :0: * $^From:.*\<$\LOGNAME\> * $^To:.*\<$\LOGNAME\> $REVIEW Best regards, Jack L. Stone, Administrator Sage American h

Re: [SAtalk] evilrules.cf including in local.cf?

2003-10-15 Thread Jack L. Stone
in on running --LINT Otherwise, maybe I need those extra files because SA sure does a good job as is... Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] --- This SF.net email is sponsor

Re: [SAtalk] Maintaining a list of IP numbers

2003-09-20 Thread Jack L. Stone
stian > Research has led me to believe that the "envelope from" is the most reliable source of the actual sender. I am prepared to be corrected though and would like to be. Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED]

Re: [SAtalk] New virus posing as Microsoft

2003-09-20 Thread Jack L. Stone
block at a certain spam threshhold. So, doesn't it get that score weight from SA.??? I'm blocking a huge amount of spams with spamass-milter this way. That stops them just a little sooner I would think Best regards, J

Re: [SAtalk] System goes down

2003-09-02 Thread Jack L. Stone
At 03:18 PM 9.2.2003 -0400, [EMAIL PROTECTED] wrote: > >FWIW, Sendmail 8.12.9 (and possibly prior versions) supports a limit: > >define(`confMAX_DAEMON_CHILDREN', `24')dnl > > >Tony Nelson Tony, how does one arrive at the limit '24'.? Best regards, Ja

[SAtalk] Re: Returned mail: "Zone rejected due to abuse." FORRIE.COM

2003-08-30 Thread Jack L. Stone
iler: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) >Date: Sat, 30 Aug 2003 14:45:50 -0500 >To: Forrest Aldrich <[EMAIL PROTECTED]>, > [EMAIL PROTECTED] >From: "Jack L. Stone" <[EMAIL PROTECTED]> >Subject: Re: [SAtalk] OT: Weird logs from the mailing list >In

Re: [SAtalk] OT: Weird logs from the mailing list....

2003-08-30 Thread Jack L. Stone
r=prog, pri=232254, dsn=2.0.0, stat=Sent > > > >--- >This sf.net email is sponsored by:ThinkGeek >Welcome to geek heaven. >http://thinkgeek.com/sf >___ >Spamassassin-talk mailing l

Re: [SAtalk] Deleting Spam Messages

2003-08-22 Thread Jack L. Stone
rded to the user -- still NO losses! I always divert the marginals to a "review" mail folder. And, as more insurance, ALL SPAMs are placed in an archive which can be searched later if a user realizes one may be lost Best regards, Jack L. Stone, Administrator Sage American http://ww

Re: [SAtalk] Deleting Spam Messages

2003-08-22 Thread Jack L. Stone
TopPost: Correction to my list below. "spamd" should be "spamass-milter" for the threshold blocking. Sorry. >Date: Fri, 22 Aug 2003 10:32:21 -0500 >To: Abigail Marshall <[EMAIL PROTECTED]>, "Daniel Kaliel" <[EMAIL PROTECTED]> >From: "

Re: [SAtalk] Configure to delete messages

2003-08-22 Thread Jack L. Stone
, this is probably the single most efficient way to shoot >yourself in the foot with any spam filter. > Yes, if you just limit your system to this point-blank method Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] ---

Re: [SAtalk] Configure to delete messages

2003-08-21 Thread Jack L. Stone
e. This has diverted many MBs of bandwidth consumption and dropped the quantity of spam from entering the user accounts to less than 1%. This is a custom system involving several programs to filter and identify the spam. I may be contacted offlist about the method if you like.

RE: [SAtalk] Configure to delete messages

2003-08-20 Thread Jack L. Stone
he users are ecstatic -- most are shocked to see that they are not nearly as "popular" as they had thought once they only download real good emails. Common sense must apply in implementing a deletion program(s) Best regards, Jack L. Stone, Administrator Sage American http://www.sa

Re: [SAtalk] counting spam?

2003-08-18 Thread Jack L. Stone
At 03:15 PM 8.18.2003 +0200, Luca Benassi wrote: >On Mon, 18 Aug 2003, Jack L. Stone wrote: >[K] >> Here is how I do mine for all spams, but you could easily modify to run >for >> each user. Also, my script does more than just count spams, so I carved out >> the coun

Re: [SAtalk] counting spam?

2003-08-18 Thread Jack L. Stone
;X-Spam-Status:" $SPAMSH > totalspams # /bin/date >> qtyspams /usr/bin/wc -l totalspams >> qtyspams mail -s "Qty of Spams Today" < qtyspams [EMAIL PROTECTED] # /usr/bin/grep "X-Spam-Status:" $SPAMARCHIVE >> $COUNTMONTH /usr/bin/wc -l $COUNTMONTH >> $

Re: [SAtalk] Re: How to detect *only* obfuscated strings?

2003-08-14 Thread Jack L. Stone
n the case of a correct spelling. > >Scott > Scott: This rule looked useful & I just tried it but SA says it can't parse either line...?? What did I miss... thanks! Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED]

Re: [SAtalk] Big problem - SA crashing

2003-07-25 Thread Jack L. Stone
...and will the -m switch work for spamd without losing any filtering...?? Appreciate any feedback thanks! Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] --- This SF.Net email sponsor

Re: [SAtalk] Changing global scores for tests

2003-07-20 Thread Jack L. Stone
ough. > >- Original Message - >From: "Tim" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Sunday, July 20, 2003 11:55 AM Is your threshold set at 5.0 also? If so, either lower the thresold or raise the score while testing. Sorry if a dumb sugge

[SAtalk] SA-Learn - Yes or Not at All?

2003-06-02 Thread Jack L. Stone
d like to teach SA about the spam missed, but if I am to wait to accumulate an equal quantity of ham, I'll never feed it any spam for a long time. What would y'all suggest I do.?? Best regards, Jack L. Stone, Administrator Sage Amer

RE: [SAtalk] Spamd won't start

2003-01-16 Thread Jack L. Stone
ther information that may be needed >to help solve this issue. > >Thank You, > >Mike > First, suggest you look for sure as to status of spamd: # ps -auxw | grep spamd If you see spamd loaded, that's the problem. Kill it with this: kill `ps -auxw | grep spamd | awk '{print

Re: [SAtalk] FormMail.pl spam

2003-01-14 Thread Jack L. Stone
At 06:30 PM 1.14.2003 +, Justin Mason wrote: > >Jack L. Stone said: >> Ed, your info about Formmail is not correct and is very stale. In fact >> there are more than 2 Million users and the security hole was patched. That >> doesn't mean that some have not kept up

Re: [SAtalk] FormMail.pl spam

2003-01-14 Thread Jack L. Stone
likely the ones you are receiving. The newer versions of formmails cannot be sent from any other domain but the authorized host nor to any other recipients but the one designated by the authorized host. Best regards, Jack L. Stone, Adminis

Re: [SAtalk] Razor2 Problems

2003-01-12 Thread Jack L. Stone
At 11:49 AM 1.12.2003 -0500, Theo Van Dinter wrote: >On Sun, Jan 12, 2003 at 10:09:21AM -0600, Jack L. Stone wrote: >> Jan 12 10:01:21 sage-american spamd[91734]: razor2 check skipped: Bad file >> descriptor IO::Socket::INET: Interrupted system call ...propagated at >>

Re: [SAtalk] Razor2 Problems

2003-01-12 Thread Jack L. Stone
At 11:49 AM 1.12.2003 -0500, Theo Van Dinter wrote: >On Sun, Jan 12, 2003 at 10:09:21AM -0600, Jack L. Stone wrote: >> Jan 12 10:01:21 sage-american spamd[91734]: razor2 check skipped: Bad file >> descriptor IO::Socket::INET: Interrupted system call ...propagated at >>

[SAtalk] Razor2 Problems

2003-01-12 Thread Jack L. Stone
0+ seconds delay on every email. Would appreciate any tips maybe disable razor2 completely if need be. Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] --- This SF.NET email is sp

[SAtalk] Known Mail Lists

2003-01-06 Thread Jack L. Stone
embarrassing to some subscribers. Help appreciated. Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf

[SAtalk] NEW Newbie Question spamd message

2002-12-28 Thread Jack L. Stone
mal to see the above message every time??? ...or what do I need to tweak..?? Tips appreciated Thanks! Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] --- This sf.net email is

Re: [SAtalk] config for Razor

2002-12-28 Thread Jack L. Stone
>That's all. I'm not seeing anything about Razor and the message headers >don't seem to mention Razor at all. > > Have you tried grep?: # grep razor maillog Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] ---

[SAtalk] sh: turning off NDELAY mode

2002-12-25 Thread Jack L. Stone
seen this? The error on the console: "sageame@sage-american$ sh: turning off NDELAY mode" Thanks for any tips & Happy Holidays! Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED] ---

Re: [SAtalk] Increase in low scoring spam?

2002-12-24 Thread Jack L. Stone
elcome to geek heaven. >http://thinkgeek.com/sf >_______ >Spamassassin-talk mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > Best regards, Jack L. Stone, Administrator Sage American http://www.sage-ameri

Re: [SAtalk] blacklisting ipadress

2002-11-29 Thread Jack L. Stone
uot; file is used for blocking: For an IP: 200.000.000.000 550 Access denied A network might be: 200.000.000.0/24550 Access denied ...or by domain: [EMAIL PROTECTED] 550 Access denied Best regards, Jack L. Stone, Administrator Sage American http