Re: [SAtalk] OT: pyzor

2002-10-12 Thread Kerry Nice
s for this possibility and changes how it calls python so that it uses python 2.2.x. In your case, make sure that the script in /usr/bin/pyzor calls python instead of python2. Kerry. - Original Message - From: "Robin Lynn Frank" <[EMAIL PROTECTED]> To: "Kerry Nice&quo

Re: [SAtalk] OT: pyzor

2002-10-06 Thread Kerry Nice
Robin Lynn Frank wrote: > On Sunday 06 October 2002 05:35, Kerry Nice wrote: > >>rpm -q python2 > > > ]# rpm -q python > python-2.2-9mdk > > Is the problem that it is looking for python2 rather than python? No, the problem is that the boolean False is functiona

Re: [SAtalk] OT: pyzor

2002-10-06 Thread Kerry Nice
You need to upgrade Python2. False was added in some later version. I don't remember all the dependencies I had to satify to get this version working, but this is what I have now and pyzor works on my machine. [nice@mothlight nice]$ rpm -q python2 python2-2.2.1-2 Kerry. - Original Message

Re: [SAtalk] URL blacklist

2002-10-03 Thread Kerry Nice
From: "Daniel Rogers" > On Mon, Sep 30, 2002 at 03:29:08PM -0700, Matthew Cline wrote: > > Geez, that's worse than using open relays. To what depths *won't* spammers > > sink to? > > None, clearly. It's only a matter of time before they start breaking in to > people's houses to send mail on thei

Re: [SAtalk] Re: [SAdev] Scoring Yahoo Ads

2002-07-25 Thread Kerry Nice
Here are a bunch to try. I've had to whitelist all of these at some point or another. And if you get the html versions and digest versions of other things, that makes them much more likely to trip SA. http://www.thedenverchannel.com/news/email-newsletters.html http://www.weather.com/services/ h

[SAtalk] Re: Porn mail deleting for school

2002-04-17 Thread Kerry Nice
You didn't say what the software/hardware setup for this is, but this is how I would do it. Setup a linux (bsd or whatever makes you happier) mail server, create all the accounts for the students, and set the forward to another user so that no incoming mail ends up in their inboxes. So, maybe yo

Re: [SAtalk] unsub...

2002-04-09 Thread Kerry Nice
I was wondering about things like this. As I understand it, each of the rules are scored individually based on how many times they occur in the corpus. Are the rules combined in anyway. What I'm saying is, shouldn't seeing an unsubscribe in an email count a whole lot less if the header isn't

[SAtalk] Coming twist of obfuscation

2002-03-25 Thread Kerry Nice
I just saw this one posted over on spamcop. Does SA ignore html comments. Looks like at least one spammer is breaking up key words and phrases that would normally get caught by filters with html comments. Imagine what these people could do if they put this much effort into getting a real job and

Re: [SAtalk] SA's performance with mailing lists

2002-03-21 Thread Kerry Nice
Well, I guess I'm a bit of an exception in the world, a computer geek with English and Film degrees. That probably explains a few things. I like to think I have a wide variety of interests rather than being fluffy. If it seems worthwhile, I would be happy to set up an account on my machine and

Re: [SAtalk] SA's performance with mailing lists

2002-03-20 Thread Kerry Nice
I did email Chris Prillo of Lockergnome and tried to enlighten him. His response basically was that he was mad that people were using something that they didn't know how to use and it was too powerful. Ok fine, but I think it is misdirected anger, but I see why he is mad since his newsletter, wh

Re: [SAtalk] Dumb question

2002-03-19 Thread Kerry Nice
The beginning of my ~/.procmailrc file has: MAILDIR=$HOME/mail # You'd better make sure it exists so a rule like: :0: * ^From:.*cnn.com journals will go to /home/nice/mail/journals If you don't have the MAILDIR variable or if that directory doesn't exist, I have no idea what happens, if y

[SAtalk] SA's performance with mailing lists

2002-03-18 Thread Kerry Nice
I saw in the Lockergnome newsletter I received today, Spamassassin was slammed big time. I do see his point though. Does SA really do that great of a job with newsletters and journals? Just as an exercise, I ran though my journals folder though SA and it wasn't pretty. These are all mailing

Re: [SAtalk] Messed emails

2002-03-15 Thread Kerry Nice
I've noticed that there is a bulk email program that seems to do this. I assume it is a bug in their software. When they are using the open relay, they put a line feed somewhere in the header and the mailer interprets that as the beginning of the body. I get a couple of these a week on my hotma

Re: [SAtalk] Some more rule ideas

2002-03-14 Thread Kerry Nice
one digit in it? Otherwise, I could certainly live with this in my personal rules. Kerry. Matthew Cline wrote: > On Tuesday 12 March 2002 09:03 am, Kerry Nice wrote: > >>Would it be possible to come up with a rule for those >>random things that are the final lines of a lot

Re: [SAtalk] Outlook Express

2002-03-13 Thread Kerry Nice
Ok, a bit of a hack and there is probably a better way to do this, but it works for me. Anything that gets past all the filters and ends up in my inbox I move to the 1spam folder and an hourly cron job routes it to spamcop and other places. Kerry. #hourly.spam.report.sh #!/bin/sh grep "From "

Re: [SAtalk] Messages with empty bodies?

2002-03-12 Thread Kerry Nice
I see those on occasion. I assume it is the same sort of thing as seeing a spam with a bit that says . Some idiot just downloaded their new spamware and is ready to make their first 31k in a week, and after sending out a few million emails realize that maybe they should have put some sort of mes

[SAtalk] Some more rule ideas

2002-03-12 Thread Kerry Nice
Would it be possible to come up with a rule for those random things that are the final lines of a lot of spams? These are the kind of things that break razor, since the hash is different. I cut some samples out of some recent spams: 2720IGVV3-313KAAA5557ymez4-032l28 2968HyRF6-424hl13 7347ZCuj5-

Re: [SAtalk] Misc. rule ideas

2002-03-12 Thread Kerry Nice
mine. And somebody else on this list wrote something sort of like this and they skipped it if it had an entire address. This makes sense. I get bounces sometimes that have my entire address in the subject. Kerry. Greg Ward wrote: > On 09 March 2002, Kerry Nice said: > >>#this one

Re: [SAtalk] Negative weightings for positive rules?

2002-03-12 Thread Kerry Nice
Frontpage, yeah, that was me. I found there are two types of these and recently changed my personal rule to this to: rawbody FRONTPAGE /(FrontPage.Editor|CONTENT=\"Microsoft FrontPage)/ describe FRONTPAGE FrontPage used to create message score FRONTPAGE 2.00 > (Re: rule for meta tag indicating M

Re: [SAtalk] Misc. rule ideas

2002-03-10 Thread Kerry Nice
d via a relay in relays.osirusoft.com SPAM:[RBL check: found 33.139.179.208.relays.osirusoft.com., type: 127.0.0.9] SPAM: SPAM: End of SpamAssassin results ----- >>Kerry Nice wrote: > > >>>#this one will only work for me, but

Re: [SAtalk] Lot's of spam gets thru because of missing rules

2002-03-10 Thread Kerry Nice
Here are some rules you can add to your /etc/mail/spamassassin/local.cf file to catch a few of the things you mentioned here and how to create new rules. If you have an old spam folder, it is easy to test your expressions to see how they work. Your word list, I just stuck them together and t

[SAtalk] Re: Matching on attribution lines (was Re: Misc. rule ideas)

2002-03-09 Thread Kerry Nice
Well, that wasn't what this rule does, but it does make a good point. If I get an email with a subject like 'Hello kerry_nice, get your free porn here', it is spam, no question about it. I'm not looking to whitelist these. But what would be nice, and maybe is needed to really make this thing

Re: [SAtalk] Misc. rule ideas

2002-03-09 Thread Kerry Nice
Here are some rules I added to my local.cf that seem to be catching a few things. #Seems to be a broken bulk mail program that puts some of the headers in the email body rawbody MESSAGEIDINBODY /^Message-Id: <.*\@message-Id>$/ describe MESSAGEIDINBODY Distictive Message ID in email body score

[SAtalk] A Front Page rule?

2002-03-05 Thread Kerry Nice
Is Front Page ever used in non-spam. Would a check for some of these things be useful? At least as the beginning of a message, possibly somebody might send an attached page with some of this stuff in it. UUnleaded Gasoline Just out of curiousity, I looked quickly though my mail.2002Feb

Re: [SAtalk] Rule idea: "real name" == local part

2002-03-04 Thread Kerry Nice
The one I see a lot that gives me the Publisher's Clearing House customized warm fuzzy is a customized subject. I've never seen a customized dear that I can remember. I see a lot of subjects like: Hello, kerry_nice, get your free porn here I wouldn't be sure how to write something like that, ma