Re: [SAtalk] Goodbye

2003-01-07 Thread Matt Sergeant
On Tue, 2003-01-07 at 15:40, Vivek Khera wrote: > >>>>> "MS" == Matt Sergeant <[EMAIL PROTECTED]> writes: > > MS> Due to the recent aquisition of DeerSoft by NAI, a competitor of ours, I > MS> have to quit working on this project. I'll still

Re: [SAtalk] Deersoft acquisition

2003-01-07 Thread Matt Sergeant
On Tue, 2003-01-07 at 11:44, Lars Hansson wrote: > On Tue, 2003-01-07 at 18:16, Matt Sergeant wrote: > > > Of course the downside is we probably lose two good developers, as the > > FAQ states that Justin and Craig will spend their time working on the > > proprietary s

[SAtalk] Goodbye

2003-01-07 Thread Matt Sergeant
Due to the recent aquisition of DeerSoft by NAI, a competitor of ours, I have to quit working on this project. I'll still watch the mailing lists, but I won't be able to make any contributions due to this conflict of interest. I feel really gutted about this, since I'm very committed to open source

Re: [SAtalk] Deersoft acquisition

2003-01-07 Thread Matt Sergeant
On Tue, 2003-01-07 at 06:09, Jeff Morton wrote: > Which brings me to a question... what exactly did they purchase? If > they purchased Deersoft, does that give them the right to enforce the > trademark and prevent the open source Unix style SpamAssassin product > from using that name? Do they

Re: [SAtalk] Deersoft acquisition

2003-01-07 Thread Matt Sergeant
On Tue, 2003-01-07 at 04:35, Theo Van Dinter wrote: > On Mon, Jan 06, 2003 at 11:18:44PM -0500, Interservers Administration wrote: > > McAfee SpamKiller(TM) Enterprise > > Yeah, but "killer" makes me think of some guy named bubba with a > baseball bat. "assassin" is much more sexy. Like using it

Re: [SAtalk] base 64 encoding

2003-01-06 Thread Matt Sergeant
On Mon, 2003-01-06 at 15:33, [EMAIL PROTECTED] wrote: > Hi, > Just found that many spammers are using base64 to encode their text/html msg body to >avoid the radar. Does spamassassin detect such tricks? I did some tests and looks >like the answer is no... The answer is yes. What tests did you do

[SAtalk] Re: [SAdev] MIME-headers with comments in them

2003-01-06 Thread Matt Sergeant
On Mon, 2003-01-06 at 15:42, Tony L. Svanstrom wrote: > (Somewhat stolen from a posting by [EMAIL PROTECTED] to the procmail-list) > > http://www.virusbtn.com/resources/viruses/indepth/junkmail.xml > > > a header like that: > > MIME-Version: 1.0 > Content-Type: multipart/mixed; >

Re: [SAtalk] CPAN

2002-12-19 Thread Matt Sergeant
On Thu, 2002-12-19 at 16:56, Tom Allison wrote: > Is 2.50 in CPAN? No, it's a development version in CVS only. --- This SF.NET email is sponsored by: Geek Gift Procrastinating? Get the perfect geek gift now! Before the Holidays pass you by. T

Re: [SAtalk] I LOVE Spamassassin!!!

2002-12-19 Thread Matt Sergeant
On Thu, 2002-12-19 at 16:31, Jonathan Duncan wrote: > I really do!! How can I contribute to the spamassassin program? Is there a > donation page somewhere? Is there some service I can render? Anything? Or > can I merely be happy that spamassassin exists and praise those who devised > it and

Re: [SAtalk] question regarding spamc/spamd performance for largeemail services, and the spamc/spamd "protocol"

2002-12-13 Thread Matt Sergeant
Albert Croft said the following on 13/12/02 09:26: Two questions, which I hope someone may be able to point me in the direction of resources for. Question 1: What has the performance of spamassassin (particularly the spamc/spamd combination) been like for mailservers handling medium-to-lar

Re: [SAtalk] Anti-spam-assassination?

2002-12-12 Thread Matt Sergeant
Justin Mason said the following on 11/12/02 23:08: Kurt Andersen said: Seen this blurb from today? I can't quite figure out how I feel about it. yeah, me too. Both are SpamAssassin btw. IMO, it's overall a good thing as (a) it lets legit publishers avoid relatively-obvious trouble areas

Re: [SAtalk] spamassassin performance

2002-12-05 Thread Matt Sergeant
Justin Mason said the following on 05/12/02 17:56: Matt Sergeant said: [EMAIL PROTECTED] said the following on 05/12/02 17:15: Need performance boost on spamassassin. Any good suggestions? Buy faster machine. But seriously -- try turning off some body tests. They're killers, speed

Re: [SAtalk] spamassassin performance

2002-12-05 Thread Matt Sergeant
[EMAIL PROTECTED] said the following on 05/12/02 17:15: Hi, Need performance boost on spamassassin. Any good suggestions? Buy faster machine. Matt. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com

Re: [SAtalk] qmail catch-22?

2002-12-04 Thread Matt Sergeant
Mike Burger said the following on 04/12/02 15:21: Haven't run into that problem on any of the 5 or 6 systems on which I run spamd...including 2 fairly high traffic systems. None of my computers have ever been hacked into. But I sure as hell take precautions to make sure it doesn't happen. Exp

Re: [SAtalk] blacklists of spamfriendly urls. (and suggestion fornew test, if it doesn't exist)

2002-12-04 Thread Matt Sergeant
Jon Gabrielson said the following on 04/12/02 14:52: To my knowledge, spamassassin only uses blacklists on headers, i think that it should use it on urls in the body as well. EVERY piece of spam out there has contact info, or they can't sell their product, and that contact info is probably one of

Re: [SAtalk] qmail catch-22?

2002-12-04 Thread Matt Sergeant
Mike Burger said the following on 04/12/02 12:37: On Wed, 4 Dec 2002, Matt Sergeant wrote: [EMAIL PROTECTED] said the following on 03/12/02 22:23: On that note, is it best to just run spamd standalone in the background or inetd (not interested in using daemontools unless it's really n

Re: [SAtalk] qmail catch-22?

2002-12-04 Thread Matt Sergeant
[EMAIL PROTECTED] said the following on 03/12/02 22:23: Thanks for the help, Mike, Matt and Dave! I misunderstood the qmail-scanner docs to mean that SA just needed to be installed properly. not that spamd needed to be running. On that note, is it best to just run spamd standalone in the backgro

Re: [SAtalk] Bayesian hybrid

2002-12-03 Thread Matt Sergeant
Christopher Eykamp said the following on 03/12/02 17:29: Would it make sense to do a Bayesian analysis using not only on individual words, but also the SpamAssassin regex tests in order to detect phrases and patterns that would be missed using a naive word-by-word analysis? And if that worked,

Re: [SAtalk] qmail catch-22?

2002-12-03 Thread Matt Sergeant
[EMAIL PROTECTED] said the following on 03/12/02 05:09: Need to get spamassassin working system-wide with: qmail (with the qmail-queue patch) tcpserver maildrop sqwebmail (w/ vpopmail, but no virtual users) All the docs I could find (including the archives to this list) say to use qmail-scanner

Re: [SAtalk] spamarchive.org corpuses have quite low success rateswith SA

2002-12-02 Thread Matt Sergeant
Matthew Davis said the following on 01/12/02 22:18: * Michael Bell ([EMAIL PROTECTED]) wrote: Agreed. I think it's worthless too. Just wanted to bring up the topic, so we could all be prepared for newbies asking the question. Now we have a thread to point to Here's an example of their substan

[SAtalk] Fwd: Spamassassin :-)

2002-11-30 Thread Matt Sergeant
Begin forwarded message: From: Ashley Hamilton <[EMAIL PROTECTED]> Date: Sat Nov 30, 2002 16:25:18 Europe/London To: [EMAIL PROTECTED] Subject: Spamassassin :-) Hi Matt, I saw your post on /. and thought you had a cool e-mail address and that it's great that you work on SpamAssassin, which I/

[SAtalk] [JOB] Anti-Spam Software Engineer, England

2002-11-28 Thread Matt Sergeant
Justin said it's OK to post this here, since it's directly relevant. Software Engineer required for this expanding company that represents the development department for both MessageLabs and Star Internet. The position will be working for the Senior Anti-Spam Technologist, developing tools to iden

Re: [SAtalk] bouncing as an alternative to /dev/null

2002-11-25 Thread Matt Sergeant
Vivek Khera said the following on 25/11/02 16:10: "MS" == Martin Schroeder <[EMAIL PROTECTED]> writes: MS> On 2002-11-24 17:05:47 -0600, Jon Gabrielson wrote: Anyways, i thought that I would throw up a page explaining how I bounce spam instead. I bounce MS> Automatically bouncing spam is

Re: [SAtalk] bouncing as an alternative to /dev/null

2002-11-25 Thread Matt Sergeant
John Rudd said the following on 25/11/02 12:01: If you wish to not receive the spam at all, and let the spammer know about it, implement a spam filter in your SMTP engine and 550 the sender. I use qpsmtpd, and it's spamassassin plugin. It's very easy to extend it to 550 any high scoring spam (b

Re: [SAtalk] bouncing as an alternative to /dev/null

2002-11-25 Thread Matt Sergeant
John Rudd said the following on 25/11/02 08:15: I haven't had any problems. The problems associated with bouncing spam aren't your problems - they are problems you inflict on the person you bounce to (which almost always isn't the spammer). I get about 10 bounce messages a day from invalid em

Re: [SAtalk] Re: Slashdot Article

2002-11-22 Thread Matt Sergeant
Justin Mason said the following on 22/11/02 15:59: Diffenderfer, Randy said: Consider this -- if this were a front for a bunch on enterprising spammers, it might be a wonderful source of __valid__ addresses of all the poor folks who send in their spam! It could happen... :-) It could, but not

Re: [SAtalk] Is to identify yourself by return email necessary inthe future?

2002-11-21 Thread Matt Sergeant
Ronald Wiplinger said the following on 21/11/02 13:50: I just come accross the article at http://slate.msn.com/?id=2074042 which describes that each new sender must first himself identify by answering a return message. I love that idea! Is such a module available within SpamAssassin? I would lik

Re: [SAtalk] Slashdot Article

2002-11-21 Thread Matt Sergeant
Tom Allison said the following on 21/11/02 10:27: "SpamArchive.org has just been launched. SpamArchive.org is a community resource that provides a database of known spam to be used for testing, developing, and benchmarking anti-spam tools. The goal of this project is to provide a large reposi

Re: [SAtalk] Bayesian attack

2002-11-20 Thread Matt Sergeant
Sean Redmond said the following on 20/11/02 16:16: Matt Sergeant wrote: Disclaimers are so common I don't think they would be considered in the calculation, right? Wrong. How do you delimit them? I see all sorts here at work. Some up to 150 lines, including at the top and at the b

Re: [SAtalk] Bayesian attack

2002-11-20 Thread Matt Sergeant
Sean Redmond said the following on 20/11/02 15:25: Matt Sergeant wrote: Also I understand his explanation, only the most interesting tokens are considered in calculating the likelyhood that it's spam, so watering down the body of the message should only makes the interesting things

Re: [SAtalk] Bayesian attack

2002-11-20 Thread Matt Sergeant
Sean Redmond said the following on 19/11/02 21:42: Assuming they could solve the problem of the headers, the spam of the future will probably look something like this: Hey there. Thought you should check out the following: http://www.27meg.com/foo because that is about as much sales pitch as c

Re: [SAtalk] Re: Spammer forums?

2002-11-20 Thread Matt Sergeant
David Masterson said the following on 19/11/02 18:44: Couldn't they use an encryption scheme? That is, they sign their email with a string that has to (crypto-) match the IP of the system that the email originates from? SpamAssassin (and others) could check this as a means of allowing the SPAM t

Re: [SAtalk] Server Load

2002-11-19 Thread Matt Sergeant
Keith Olmstead said the following on 19/11/02 16:11: Hello, A quick question. After doing some reading, I noticed alot ppl have SA running on Intel boxes. Is anyone running SA on Solaris boxes? Will be processing about 600k emails/day on one mail server and was wondering how it would fair. It

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Matt Sergeant
Bob Apthorpe said the following on 19/11/02 15:54: First, start with Larry Gonick's fantastic "The Cartoon Guide To Statistics": http://www.powells.com/cgi-bin/biblio?inkey=7-0062731025-0 I shall try and get hold of that :-) [OT: I have the "Cartoon History of Time", which looks similar in it's

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Matt Sergeant
Ross Vandegrift said the following on 19/11/02 14:17: On Tue, Nov 19, 2002 at 09:39:13AM +, Matt Sergeant wrote: The spammers have. An even better way they've found is to include a snippet from a legit mailing list, but put it in a white text on white background box. This was discuss

Re: [SAtalk] Re: Spammer forums?

2002-11-19 Thread Matt Sergeant
David Masterson said the following on 18/11/02 20:31: Matt Sergeant writes: Matthew Cline said the following on 16/11/02 03:14: Anyone know some forums or mailing lists where spammers discuss their trade? I'd like to take a look at some of them, just out of curiosity. Th

Re: [SAtalk] Bayesian attack

2002-11-19 Thread Matt Sergeant
Christopher Eykamp said the following on 18/11/02 23:15: Hello, I've implemented a Bayesian filtering scheme on my system that runs concurrent with SpamAssassin. It works really well, but I am starting to think there is an easy attack that would render the filtering useless. What if, at the e

Re: [SAtalk] Spammer forums?

2002-11-18 Thread Matt Sergeant
Matthew Cline said the following on 16/11/02 03:14: Anyone know some forums or mailing lists where spammers discuss their trade? I'd like to take a look at some of them, just out of curiosity. There's Clickz.com, but I think they're mostly legit (opt-in) marketers there now talking about how t

Re: [SAtalk] Is this a threat? [SA hate mail sent to me]

2002-11-18 Thread Matt Sergeant
Kelsey Cummings said the following on 15/11/02 19:29: I just had to pass this along, wonder how many of the other developers got this? [snip] Just remember what happened to the guy that used to run spamcop.com You can't justify what you are doing. Aww darn it. Why can't he have sent one

Re: [SAtalk] spamassassin new rule..newbie alert

2002-11-15 Thread Matt Sergeant
Raghu Arni said the following on 15/11/02 17:24: Hi, I would like to add a new rule which is checking to see if the "To:" field in the recvd email is ALL CAPS and then trash that mail.. header MY_ALL_CAPS_TO To =~ /^[A-Z\s]+$/ score MY_ALL_CAPS_TO 100 See perldoc Mail::SpamAssassin::Conf Plus,

Re: [SAtalk] Razor being attacked?

2002-11-15 Thread Matt Sergeant
Dave Slusher said the following on 15/11/02 03:23: Is there someone out there attacking the razor trust system? I'm seeing more and more righteous e-mails that have been reported to Razor2, including the Slashdot daily mailings and the Ambrosia Software and Winamp announce newsletters. I've been r

Re: [SAtalk] Mail::SpamTest::Bayesian

2002-11-13 Thread Matt Sergeant
Tom Allison said the following on 12/11/02 23:04: I was looking for Bayesian filters and found this in CPAN. Not sure how well it works or if it is event going to play nice with Mail::Audit objects. Does anyone have any experience or suggestions with the use of Bayesian filters? I've seen a f

Re: [SAtalk] A patent on Bayesian (and other methods) ?

2002-11-11 Thread Matt Sergeant
Rick Macdougall said the following on 09/11/02 14:51: Hi All, Saw this on one of the grc newsgroups... Does this Microsoft patent cause trouble? Here's the link to the document. http://makeashorterlink.com/?V27615462 Most of the claims in the patent relate to client side bayesian stuff. Tha

Re: [SAtalk] Why was -S option depreciated?

2002-11-08 Thread Matt Sergeant
Paul Fries said the following on 07/11/02 18:34: Ahh now it all makes sense. :) Thanks Matt. Hopefully we will see this feature again. It is a great idea. So I assume that SA3 will be running all of its negative rules first then? One of the plans for SA3 is to have pluggable rule runners. The

Re: [SAtalk] Why was -S option depreciated?

2002-11-07 Thread Matt Sergeant
Paul Fries said the following on 07/11/02 16:46: I use spamd, and in my configuration, I like to have SpamAssassin stop processing the message once the threshold has been reached. The -S option to spamd does this. This option is still working fine in the latest release, however I notice that th

Re: [SAtalk] SpamAssassin in a sendmail milter

2002-11-07 Thread Matt Sergeant
Marsh, Ian said the following on 07/11/02 15:28: All, I'm about to embark on the process of writing a new corporate spam filter and rather than 're-invent the wheel' I'm thinking of using SpamAssassin as the main engine and write the filter around it. Unfortunately I have not been able to det

Re: [SAtalk] Spamming through returned mail

2002-11-05 Thread Matt Sergeant
John Schutz said the following on 05/11/02 16:25: One of my users has been getting these about once a day. What it looks like is happening is that since AOL doesn't immediately report back with a 550 user unknown, the spammer can fill in a return address of my user, so the bounce ends up in hi

Re: [SAtalk] Older Versions

2002-11-04 Thread Matt Sergeant
Steve Evans said the following on 01/11/02 18:18: Where can I find an older version of SpamAssassin? I'm looking for a 2.3x version. My false negative rate on 2.43 is through the roof. CPAN. --- This SF.net email is sponsored by: ApacheCo

Re: [SAtalk] Implementation with qmail?

2002-11-04 Thread Matt Sergeant
David McCall said the following on 26/10/02 18:29: Hi all, Should be a simple question, but, I've looked thru the archives and havn't found an implementation for Spamassassin with Qmail, specifically on a Solaris platform. Can someone throw me a pointer? I tried qmailscanner first, and while it

Re: [SAtalk] TOD score for SPAM

2002-10-25 Thread Matt Sergeant
SpamTalk said the following on 24/10/02 19:44: Would the delivery time of day be a useful value for nudging the score for spam. Is there an easy way to test this in the GA? It's been tested. Basically spam arrives fairly consistently throughout the day, whereas your regular email tends to be du

Re: Red Hat 8.0 perl borked? (was Re: [SAtalk] spamd error messagefrom logs )

2002-10-25 Thread Matt Sergeant
Justin Mason said the following on 24/10/02 21:12: (cc'ed to ILUG) [EMAIL PROTECTED] said: On RedHat 8.0, perl 5.8, SA 2.43 I get this error message often in my logs: Oct 24 13:37:09 blacktip spamd[24511]: Malformed UTF-8 character (unexpected continuation byte 0xa0, with no preceding start b

Re: [SAtalk] Sitewide use of spamassassin

2002-10-24 Thread Matt Sergeant
Bryant, Eric D. said the following on 19/10/02 21:01: 4. How well does it perform at large sites? (We process around 5-700,000 emails a day) We do about 10 million a day, but then we have over 400 mail servers. SpamAssassin can seriously overload a box, so be very careful. 5. What MTA do y

Re: [SAtalk] 2.43 in CPAN?

2002-10-23 Thread Matt Sergeant
Simon Matthews said the following on 23/10/02 07:08: CPAN does not seem to have 2.43 yet -- I just tried an install and it told me everything was up to date. I have 2.42 installed. What's up? Me. I just forgot. Done now. Should propogate tonight.

Re: [SAtalk] help with goldfish

2002-10-22 Thread Matt Sergeant
Sidney Markowitz said the following on 22/10/02 17:43: Milt Epstein <[EMAIL PROTECTED]> wrote: there are different definitions of what spam is, and I'm sure it fits some of them. [...] appears to the person receiving the mail, it looks like spam and can be dealt with as if it were spam. It

Re: [SAtalk] help with goldfish

2002-10-22 Thread Matt Sergeant
Milt Epstein said the following on 22/10/02 16:54: Anyway, if you're talking about theoretical/technical distinctions, perhaps it is virus-related. But there are different definitions of what spam is, and I'm sure it fits some of them. I didn't really want to get into a discussion of whether it

Re: [SAtalk] Spam I got today...

2002-10-11 Thread Matt Sergeant
Malte S. Stretz wrote: > On Friday 11 October 2002 14:39 CET Matt Sergeant wrote: > > | Erhalten Sie Langsam Reich > | Möchten Sie für Zeitihr zahlend erhalten angeschlossen dem Internet > | Wenn ja dann Überprüfung diese Liste der Bezahlung, zum von von Programmen >

[SAtalk] Spam I got today...

2002-10-11 Thread Matt Sergeant
Said: "Get Rich Slowly" SpamAssassin missed it ;-) --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [EMAIL PROTECTED

Re: [SAtalk] Installing 2.4.2 via CPAN

2002-10-08 Thread Matt Sergeant
Odhiambo Washington wrote: > I did try installing 2.4.2 via CPAN > > perl -MCPAN -e 'install Mail::SpamAssassin' > > > ..this ended up tryingto install ver 5.8.0 of CPAN and a loop that never > ended > > Anyone seen that? Try: perl -MCPAN -e 'install CPAN' first. Then upgrade SpamAssass

Re: [SAtalk] messages scoring under required_hits marked spam

2002-10-08 Thread Matt Sergeant
Mike Whitaker wrote: > Debian woody install of spamassassin, unchanged from the defaults except > for some additions to the whitelist: > > Running > > zcat sample-nonspam.txt.gz | spamassassin -t > > gets me the following headers inserted: > > >>X-Spam-Status: No, hits=0.2 required=5.0 >> t

Re: [SAtalk] Best upgrade practice or method?

2002-10-07 Thread Matt Sergeant
Bart Schaefer wrote: > On Mon, 7 Oct 2002, Matt Sergeant wrote: > > >>Probably easiest to go via the CPAN shell, as that way your dependencies >>get met automatically. Also make sure you're not using SpamAssassin for >>email delivery, as that will break things

Re: [SAtalk] Best upgrade practice or method?

2002-10-07 Thread Matt Sergeant
Chris Santerre wrote: > I've already upgrades from SA 2.31 to 2.40. I'm now going to 2.42 and > figured I'd ask a simple question. What is the easiest method of upgrading? > CPAN or straight .tar? I can't remember if CPAN will keep my config files > intact. I saw no upgrade info on the FAQ. Is thi

Re: [SAtalk] URL blacklist

2002-10-04 Thread Matt Sergeant
Kerry Nice wrote: > From: "Daniel Rogers" > > On Mon, Sep 30, 2002 at 03:29:08PM -0700, Matthew Cline wrote: > > > Geez, that's worse than using open relays. To what depths *won't* > spammers > > > sink to? > > > > None, clearly. It's only a matter of time before they start breaking in > to

Re: [SAtalk] Combination scoring?

2002-09-24 Thread Matt Sergeant
Neulinger, Nathan wrote: > Does SA do any scoring based on the combination of rules? Yes. See perldoc Mail::SpamAssassin::Conf. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _

Re: [SAtalk] chinese language

2002-09-23 Thread Matt Sergeant
LuChris wrote: > How can i make SA recongize chinese and prevent it from labelling:- > 4.5 -- Headers include 3 consecutive 8-bit characters > 4.3 -- Subject is full of 8-bit characters Upgrade to 2.4? --- This sf.net email is sponsored by:T

[SAtalk] HUMOUR: annoying product

2002-09-23 Thread Matt Sergeant
I just got this in my inbox at home. Thought you guys would all get a kick out of it... Date: Sat, 21 Sep 2002 12:43:23 -0700 From: Sue Guss <[EMAIL PROTECTED]> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Subject: spamassassin How do I make this very annoying product go away??? -

Re: [SAtalk] Trouble with non-english mails.

2002-09-18 Thread Matt Sergeant
LuChris wrote: > Does SA support languages other than english? I have problem with the > scores on 8-bit characters. Some emails i recieve all purely chinese, > even the header is in chinese which caused very high score. Is there a > way i can work around to accept chinese language in the heade

Re: [SAtalk] Re: RFC: New documentation? (Re: Re: Linus Torvaldsuses SpamAssassin)

2002-09-13 Thread Matt Sergeant
Adrian Hill wrote: >>Once identified, the mail can then be optionally tagged as spam for >>later filtering using the user's own mail user-agent application. > > Yeah, I suppose it does seem clear, on reflection, although I missed this > first time round, and it was previously pointed out that the

Re: [SAtalk] false positives on rules

2002-07-17 Thread Matt Sergeant
Justin Mason wrote: > David Young said: > > >>1. DOUBLE_CAPSWORD matches lines where there are no double capswords. This >>is because it finds "URI:", which is text that spamassassin inserted itself >>while processing the message. > > > I don't know how long that rule's going to last, it gets

[SAtalk] Talk at O'Reilly OSCon

2002-07-15 Thread Matt Sergeant
If anyone is attending, I'm giving a talk on SpamAssassin at O'Reilly's Open Source convention in San Diego next Friday. Hope to see any of you there. http://conferences.oreillynet.com/os2002/ Matt. --- This sf.net email is sponsored by

Re: [SAtalk] Spam report

2002-07-15 Thread Matt Sergeant
Theo Van Dinter wrote: >>are all tests run? Or are tests run until it has "enough" points to be >>considered spam? > > > By default, all tests are run. There's a short-circuit flag (-S) > which tells SA to run through all the negatively scored tests, then > run the positively scored tests unti

Re: [SAtalk] Not caught: Luis Boma $30M

2002-07-12 Thread Matt Sergeant
Andre Bonhote wrote: > Hi SA-folks! > > This just dropped in this morning and got -0.3 hits. There might be > something wrong somewhere. > X-Spam-Status: No, hits=-0.3 required=4.0 tests=DEAR_SOMEBODY,US_DOLLARS_2 >version=2.20 SpamAssassin is time-dependant software. It is not, and will neve

Re: [SAtalk] porn rules vs. linux-kernel -- SOLVED

2002-07-11 Thread Matt Sergeant
Justin Mason wrote: >>... >>ReportedBy: [EMAIL PROTECTED] >>Namely, they trigger on every instance of 'aic7xxx' for me. :) >>... > > > aha, now it makes sense ;) Gratuitous use of \b should fix that. Matt. --- This sf.net email is

Re: [SAtalk] SA with no limits

2002-07-09 Thread Matt Sergeant
Paulo Henrique Baptista de Oliveira wrote: > Hi, > lets fix a mean email size of 50k. So we can do calculations. > We want to know if SA is a feasible solution to implement in these two >situations or not? > Any hints? If that's your mean email size, you'll probably need

Re: [SAtalk] Bolting SA into EZMLM lists

2002-07-09 Thread Matt Sergeant
Jason Baker wrote: > Before I start wandering down this path, I thought I'd check to see if it's > already been done (and a quick google came up emptyhanded). > > Has anyone added spamassassin into EZMLM mailing lists? I'm essentially > thinking to bounce to moderator if the score is above the

Re: [SAtalk] SA with no limits

2002-07-09 Thread Matt Sergeant
Paulo Henrique Baptista de Oliveira wrote: > Hi all, > Which resources does SA need in order to scan (15.000 accounts) - 50.000 >emails/day (Hardware/Software)? > And 1.000.000 emails/day (50.000 accounts)? > I have these two email conf to put to work. Are they possible? I

Re: [SAtalk] SpamAssassin is not checking against razor

2002-07-09 Thread Matt Sergeant
Theo Van Dinter wrote: > On Mon, Jul 08, 2002 at 04:03:57PM -0400, Mike Burger wrote: > >>Aaahhh...well, then. Is there any idication of when the current CVS will >>be release ready? > > > Good question. I haven't seen anything on the list about a planned 2.40 > release date yet. Hopefully

Re: [SAtalk] List servers rule

2002-07-09 Thread Matt Sergeant
Rose, Bobby wrote: > Is there a rule that anyone uses for reducing the score for listservs? > I know you can whitelist but I was wondering if there was an easier way > to avoid all the maintenance. CVS has a KNOWN_MAILING_LIST rule. Please also see the following bugzilla bug: http://bugzilla.spa

Re: [SAtalk] Fw: *****SPAM***** EARN UNLIMITED INCOME WORKING ATHOME !

2002-07-09 Thread Matt Sergeant
David B. Bitton wrote: > This got a 35.7. What's your record? Not mine, but it's higher: http://use.perl.org/~davorg/journal/5859 Matt. --- This sf.net email is sponsored by:ThinkGeek Stuff, things, and much much more. http://thinkgeek.com

Re: [SAtalk] Spam Genetics?

2002-07-08 Thread Matt Sergeant
Justin Mason wrote: > "Michael 'Moose' Dinn" said: > > >>Has anyone taken a huge spam database and sent it through some sort of >>genetic learning program to see if spam can be identified that way? >>More of a curiosity thing than anything else. > > > Yes, there's a group in Greece who are doi

Re: [SAtalk] Spam Genetics?

2002-07-08 Thread Matt Sergeant
Michael 'Moose' Dinn wrote: > > Has anyone taken a huge spam database and sent it through some sort of > genetic learning program to see if spam can be identified that way? > > More of a curiosity thing than anything else. We use quite a bit of machine learning stuff plugged into SpamAssassin's

Re: [SAtalk] duplicate rule: FROM_ADDRESS_EQ_REAL

2002-07-03 Thread Matt Sergeant
Justin Mason wrote: > FROM_ADDRESS_EQ_REAL was already implemented as FROM_NAME_EQ_FROM_ADDR ;) > Does it make sense to keep the older one and delete FROM_ADDRESS_EQ_REAL? Are they scored the same? Be really odd if they weren't... Besides, this should be on sa-dev too ;-) Matt.

Re: [SAtalk] How to produce return codes...

2002-07-02 Thread Matt Sergeant
Meino Christian Cramer wrote: > Hi, > > is it possible (and how) to configure spamd/sa-exim that way, that > the spammer gets a return code, which says, that my email address is > permanently not reachable (was it return code 550 ??? I am not > sure...) Do you really think they'll care? Thes

Re: [SAtalk] unnecessary $& and $' in PerMsgStatus.pm

2002-07-01 Thread Matt Sergeant
Pete Hanson wrote: > From PerMsgStatus.pm as distributed with SA 2.31 (line number 1879): > > m/^(()*)/; $_=$&; $leftover=$'; > > This can be replaced with: > > m/^((?:)*)(.*)/ ; $_ = $1 ; $leftover = $2 ; > > and possibly simplified further. As near as I can tell, this is the >

Re: [SAtalk] Autounsubscibe capability for SA

2002-06-28 Thread Matt Sergeant
Robert Strickler wrote: > How does everyone feel about building the logic to create and maintain a > database of unsubscribe/removes that actually remove an address. How will you ever know it's worked? Matt. --- This sf.net email is sponsor

Re: [SAtalk] Local rules page

2002-06-28 Thread Matt Sergeant
Simon Lyall wrote: > I've put up a little page of various local rules people have posted > recently: > > http://www.darkmere.gen.nz/2002/0628.html > > Please lete me know if there are corrections, changes, updates. This sort of thing would be great on a Wiki. Fancy sticking something on http:/

Re: [SAtalk] 64.216.0.0/14 (Listed)

2002-06-28 Thread Matt Sergeant
Dallas Engelken wrote: >> Dallas Engelken wrote: >> >>> http://www.rfc-ignorant.org/ Are you guys fucking serious!! >>> >>> That's blocking over 250,000 hosts!!! The entire SBIS netblock. >>> 64.216.0.0 - 64.219.255.255 >> >> This has nothing to do with SpamAssassin. I'd rather not have t

Re: [SAtalk] 64.216.0.0/14 (Listed)

2002-06-27 Thread Matt Sergeant
Dallas Engelken wrote: > http://www.rfc-ignorant.org/ > Are you guys fucking serious!! > > That's blocking over 250,000 hosts!!! The entire SBIS netblock. > 64.216.0.0 - 64.219.255.255 This has nothing to do with SpamAssassin. I'd rather not have to see this sort of abuse on our list. Matt.

Re: [SAtalk] how does one accomplish prefix=dir

2002-06-27 Thread Matt Sergeant
Harry Putnam wrote: > David T-G <[EMAIL PROTECTED]> writes: > > >>...and then Harry Putnam said... >>% >>% I'm a little lost in installing spamassassin without using the >>% ./configure approach. For example: How does one instruct the >>% `make install' to use /usr/local instead of /usr? >>

Re: [SAtalk] SpamAssassin idea?

2002-06-27 Thread Matt Sergeant
Olivier Nicole wrote: > Hi, > > >>>Now I see no reason why in real life one should accept such case. I'd >>>say that in real life I only accept connection from machine with valid >>>DNS and reverse DNS. >> >>Sadly ISP's aren't as on-the-ball as you are. I've been trying for >>months to get my I

Re: [SAtalk] SpamAssassin idea?

2002-06-26 Thread Matt Sergeant
Olivier Nicole wrote: >>I believe the only check that for instance sendmail could do, is to >>check if a lookup of the ip gives the hostname, and if the hostname >>lookup doesnt give the IP, then it can block the message. But in >>real life, there are so many situations where this is not the case

Re: [SAtalk] CVS version still 2.21

2002-06-26 Thread Matt Sergeant
Harry Putnam wrote: > Am I getting my cvs from the wrong source tree? > > Just reupped my cvs today and I see the version still says 2.21. try: cvs update -A -d --- This sf.net email is sponsored by: Jabber Inc. Don't miss the IM event of

Re: [SAtalk] Microsoft Outlook Test Message = spam?

2002-06-26 Thread Matt Sergeant
Darren Coleman wrote: > Hi, > > I found this faintly comical but nevertheless it does seem to be a bit > of an anomoly. Is it correct that Microsoft's Outlook test message is > marked as spam in Razor? (I happen to beef up the RAZOR_CHECK score more > than SA default config because I was under t

Re: [SAtalk] Latest version not on CPAN

2002-06-26 Thread Matt Sergeant
William R Ward wrote: > I just tried to install 2.31 using CPAN.pm and it said I am up to > date. I have 2.20. When is 2.31 going to be released to CPAN? http://search.cpan.org/search?dist=Mail-SpamAssassin Maybe you're using a slow/crap mirror? Matt. --

Re: [SAtalk] FORGED_EBAY_RCVD is definitely messed up now

2002-06-25 Thread Matt Sergeant
Vivek Khera wrote: >>"BS" == Bart Schaefer <[EMAIL PROTECTED]> writes: > > > BS> On Mon, 24 Jun 2002, Duncan Findlay wrote: > >>>The problem is it doesn't work at all >> > > BS> It worked, but only for messages that actually did mention ebay in the > BS> headers somewhere. For complet

Re: [SAtalk] spamassassin switches

2002-06-21 Thread Matt Sergeant
David B. Bitton wrote: > if i'm using spamd/spamc, how can I use command switches from spamassassin, > particularly -W? You can't. Try PPerl (from CPAN) instead which does the same job, but doesn't require two separate scripts. Matt. --- S

Re: [SAtalk] CPAN for SA 2.3x?

2002-06-18 Thread Matt Sergeant
Bart Schaefer wrote: > Who usually does the CPAN releases for SA? Any idea when the next one > will be done? Me. I'm firefighting other stuff at work right now. I'll try and squeeze in some tuits for it tonight. Matt.

Re: [SAtalk] Academic Research on Fighting SPAM?

2002-06-18 Thread Matt Sergeant
Vanner Vasconcellos wrote: > A little bit off-topic, but > > Does someone knows if there is any academic research on fighting SPAM? > > Maybe in areas like "Artificial Inteligence" or "Knowledge Discovering"? There's quite a few, the best I found was a bibliographic reference to all the re

[OT] Re: [SAtalk] Replying to list???

2002-06-14 Thread Matt Sergeant
Jim Scott wrote: > How come this list does not have the reply to: set to the spamassassin list? > Every time I want to reply to the list I have to type in the email address. > Or as I see others do they use the reply to all feature and then the user > and the list gets a copy. The biggest reason

Re: [SAtalk] Fw: [Razor-users] Announce: Vipul's Razor v2

2002-06-14 Thread Matt Sergeant
This all looks really quite interesting. Though I wonder if the load of all the extra work now being down will kill them... (especially without the server being released/available). rODbegbie wrote: >> 2 Nilsimsa Signatures >> >>Nilsimsa is a _fuzzy signature_ algorithm based on statistical

Re: [SAtalk] Cyrillic encoding raises the spam level to 3.8

2002-06-14 Thread Matt Sergeant
Daniel Quinlan wrote: > Michael Moncur <[EMAIL PROTECTED]> writes: > > >>I think the problem is simple: We have a SUBJ_FULL_OF_8BITS rule for 8-bit >>subjects. People can score it however they want. The unexpected thing is >>that every 8-bit subject also matches the SUBJ_ALL_CAPS rule, which it

  1   2   3   4   >