Re: [SAtalk] FP for FAKE_HELO_YAHOO ?

2004-01-31 Thread Pedro Sam
On January 30, 2004 14:06, Justin Mason wrote: > Normally there's a "delivery *from* yahoo" step, which works fine, but > that doesn't seem to be the case here. are you POPping it directly from > Yahoo!? I see... I use YahooPops to "download" mail from yahoo via the http protocol. (instead of th

[SAtalk] FP for FAKE_HELO_YAHOO ?

2004-01-30 Thread Pedro Sam
ia HTTP; Fri, 30 Jan 2004 07:37:10 PST Date: Fri, 30 Jan 2004 07:37:10 -0800 (PST) From: Paulo Sam <[EMAIL PROTECTED]> Subject: Re: Andrew is setting up a phone interview for you. To: Pedro Sam <[EMAIL PROTECTED]> In-Reply-To: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-

Re: [SAtalk] Rules to flag these stupid virus warnings?

2004-01-27 Thread Pedro Sam
On Tuesday 27 January 2004 17:09, Mike Batchelor wrote: > I am about ready to just open the message body with MIMEDefang and whack > anything that mentions "InterScan" with extreme prejudice (like, forward it > to InterScan's Postmaster, until they forcibly distribute a patch to all > their custome

Re: [SAtalk] bayes learning and sa-talk list

2004-01-26 Thread Pedro Sam
On January 26, 2004 11:03 am, PieterB wrote: > Is there some way to prevent spamassassin from using SA-talk messages > for Bayes auto_learning. My bayes filter seems to be less effective > since a lot of spamphrases/tokens are discussed on this list. > > I did a "sa-learn --mbox --forget Mail/spama

Re: [SAtalk] [OT] - The current state spam.

2004-01-20 Thread Pedro Sam
I take an opposite view point. ISP's should disable a user's account, if that account is found to be launching any malicious attacks, regardless of whether that account was intentionally malicious or was simply hacked. It's time people own up to the responsibility of a presence on the internet.

[SAtalk] bayes should ignore habeas headers?

2004-01-20 Thread Pedro Sam
Hi all, I know everyone is sick of hearing about complaints about the habeas fiasco. (I know I am) But ... a recent habeas spam landed as FN with a score of 4.8. what's interesting is that it only scored a BAYES_50. That's because the habeas headers had been learnt as primarily ham so far.

Re: [SAtalk] Dump bayes db please explain the columns

2004-01-19 Thread Pedro Sam
On January 19, 2004 04:25 am, Mrvka Andreas wrote: > hi, > > i've made a dump of my bayes db but i don't > know exactly the columns. > > please explain them. I ran into the same problem, and was unable to find any documentation ... but here is my guess of what the columns mean: sa-learn --dump d

Re: [SAtalk] New circulation of emails

2004-01-17 Thread Pedro Sam
On January 17, 2004 07:03 am, Chris Connell wrote: > Hi Everyone, > > I read in a recent IT magazine about a new circulation of spam which > contain a bunch of meaningless sentances (but with legitimate words) in the > body of the mail (actually they are placed at the end) These spams are > obvioul

Re: [SAtalk] Is this thing trying to assassinate my CPU?

2004-01-17 Thread Pedro Sam
On January 17, 2004 02:13 pm, Philip Mak wrote: > PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND > 616 pmak 15 0 719M 247M 928 R 3.3 24.6 7:42 spamassassin > > Any idea why SpamAssassin is using such a huge amount of memory? I'm > running version 2.60 and th

Re: [SAtalk] Spam Collecting

2004-01-17 Thread Pedro Sam
On January 16, 2004 12:55 pm, Rich Puhek wrote: > I use a slightly different approach. > > I filter my emails into 4 different IMAP folders: slightly-spammy, > somewhat-spammy, pretty-spammy, and very spammy. The filtering is based > on increasing number of SA hits (actually the X-Spam-Level: heade

Re: [SAtalk] [OT and long] Port Blocking (was: Spamwriter).

2004-01-17 Thread Pedro Sam
On January 16, 2004 03:56 pm, Charles Gregory wrote: > On Fri, 16 Jan 2004, Pedro Sam wrote: > > Here's another analogy, I leave my legally owned and licensed firearm > > in plain view in the fore mentioned car. Robbers then proceed to > > steal my big ass gun and rob

Re: [WL] Re: [SAtalk] [OT and long] Port Blocking (was: Spamwriter).

2004-01-16 Thread Pedro Sam
On January 15, 2004 01:15 pm, Charles Gregory wrote: > And if someone STEALS your car, the person who stole it is responsible, > even if you are unaware of the theft. With insurane being compulsory, in > some places the laws have been changed so that the owner's insurance > covers all damages regar

Re: [SAtalk] Bayes Learning

2004-01-14 Thread Pedro Sam
On January 14, 2004 12:07 pm, Paul Barbeau wrote: > Has anyone create a button (or some other way) that i can install on a > client outlook that will submit the email to the my bayes learning account? > The current process to "resend the message" is above most of my users and > button would be much

Re: [SAtalk] difference between spamassassin and spamc when scoring

2004-01-13 Thread Pedro Sam
On January 13, 2004 03:27 am, Teun Vink wrote: > On Mon, 2004-01-12 at 17:12, Konstantin Kletschke wrote: > > Hi there! > > > > I have a difficult Problem since I donÄt know where the difference > > comes from: > > > > [EMAIL PROTECTED]:~$ spamc -c < spam4 > > 4.6/6.5 > > > > [EMAIL PROTECTED]:~$ s

[SAtalk] [OT] Programmatic IMAP folder manipulation

2004-01-13 Thread Pedro Sam
Hi all, Here's the problem, I setup SA to filter likely spam into a IMAP folder/mailbox called "TENTATIVE", then every once in a while, I open that folder up and check for FP's and move the confirmed spam into a folder called "CONFIRMED". Now, I'm looking for some script/program that I can cal

Re: [SAtalk] The idea behind Habeas?

2004-01-12 Thread Pedro Sam
On January 12, 2004 02:27 pm, Kevin Old wrote: > On Mon, 2004-01-12 at 14:12, Theo Van Dinter wrote: > > On Mon, Jan 12, 2004 at 01:55:43PM -0500, Kevin Old wrote: > > > I have had a lot of the Habeas messages also and have reported them, > > > but am extremely confused at the actual point of Habea

Re: [SAtalk] The idea behind Habeas?

2004-01-12 Thread Pedro Sam
On January 12, 2004 01:55 pm, Kevin Old wrote: > Hello everyone, > > I have had a lot of the Habeas messages also and have reported them, but > am extremely confused at the actual point of Habeas? > > If I understand correctly a Habeas "Certified" message has the 9 or 10 > "Habeas" header lines in

Re: [SAtalk] Questions about Bayes training

2004-01-09 Thread Pedro Sam
On January 09, 2004 10:49 pm, Robert Menschel wrote: > Hello Pedro, > > Friday, January 9, 2004, 11:58:55 AM, you wrote: > >> Probably some stupid questions, but I'm having trouble finding > >> documentation to explain proper Bayes Feeding Techniques: > >> > >> Do I have to keep feeding Bayes ham a

Re: [SAtalk] Pyzor reporting

2004-01-09 Thread Pedro Sam
On January 09, 2004 04:50 pm, Alan Munday wrote: > Is anyone finding pyzor reporting a bit hit and miss? > > Reporting using: > > $ formail -s spamassassin -r < /var/spool/mail/spamtrap > > Gave a pyzor error for each of the messages: > > Pyzor -> report failed: Exited with non-zero exit code 1 > >

Re: [SAtalk] Questions about Bayes training

2004-01-09 Thread Pedro Sam
On January 09, 2004 01:48 pm, JR wrote: > At 10:37 PM (-0800) 1/8/2004 (Thursday), Robert Menschel wrote: > >Running these against my corpus, I find > >WORDWORD -- 4212s/14h of 87289 corpus (70035s/17254h) > >WORDWORD2 -- 4205s/12h of 87289 corpus (70035s/17254h) > > Probably some stupid questions

Re: [SAtalk] This Passed!

2004-01-09 Thread Pedro Sam
On January 08, 2004 10:24 pm, Raquel Rice wrote: > I love SpamAssassin! The amount of SPAM getting past it is almost > negligible. So what happened here? This bit of SPAM passed right > on through. I ran it through my SA setup with the following result. The network checks seem to made the dif

Re: [SAtalk] False positives

2003-12-28 Thread Pedro Sam
1. Chill ... 2. Your mail was flagged primarily because of it's HTML nature... There are many online resources and guidelines that can help you write newsletters. Google for them. 3. Your complains are ill-directed, becuase SA is not responsible for your receivers CHOOSING to filter out y

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

2003-12-17 Thread Pedro Sam
On December 17, 2003 11:34 am, Theo Van Dinter wrote: > On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > > Why did I suspect that 3 did not work? because I found many tokens in > > the bayes database that could only had come from SA markup. Tokesn like > > "

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

2003-12-17 Thread Pedro Sam
On December 17, 2003 11:20 am, stan wrote: > On Wed, Dec 17, 2003 at 11:00:04AM -0500, Pedro Sam wrote: > > On December 17, 2003 10:16 am, stan wrote: > > > NTW, I've got a macro that runs sa-lar, and another that runs > > > spamassian -r. If I run the 2nd on

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

2003-12-17 Thread Pedro Sam
On December 17, 2003 10:16 am, stan wrote: > NTW, I've got a macro that runs sa-lar, and another that runs spamassian > -r. If I run the 2nd one first, I get a message about 0 messages learned > from, if I run the first one. Whereas, If I reverse the order, I get 1 > message learned. So it looks to

Re: [SAtalk] Can I feeda whole mailbox to spamassain -r?

2003-12-17 Thread Pedro Sam
On December 17, 2003 08:40 am, stan wrote: > I'm just gettign spamassain twaeked up, and it's working great. Almost no > spam is making it into my default mailbox. Most is winding up in the > almost_certianly_spam, and probably_spam mailboxes. > > Now, wanting to be a godd net citizen, I've been ru

Re: [SAtalk] sa-learn and bayes

2003-12-11 Thread Pedro Sam
On December 11, 2003 06:00 pm, Dan Tappin wrote: > After setting-up spamassassin, RTFM and monitoring the list I am still very > confused about the correct way to set-up and run spamassassin with bays > (sa-learn). > > The basics: > > I am running Post.Office as a MTA on OS X client 10.2.8. Post.O

Re: [SAtalk] Batching files with spamc

2003-12-11 Thread Pedro Sam
On December 10, 2003 12:35 pm, Dimitar Haralanov wrote: > Hi, I was trying to find any information on batching messages with > spamc and could not find anything so I am asking the list: > Is it possible to batch multiple files with spamc? In other words > instead of redirecting messages

Re: [SAtalk] Bayes Corpus Project

2003-12-11 Thread Pedro Sam
On December 11, 2003 09:10 am, Adam Denenberg wrote: > SA List, > > I am writing for feedback about a new project i would like to start > and would love feedback/help from the excellent community that has been > built here on the SA lists. > > What i want to start is a Bayes Corpus Project. I w

Re: [SAtalk] META: Does spamassassin-talk have a working mail archive?

2003-12-10 Thread Pedro Sam
On December 11, 2003 01:09 am, Bob Apthorpe wrote: > After spending tireless minutes directing people to the SA-Talk > archives[1], I can't seem to get at them. Does > http://sourceforge.net/mailarchive/forum.php?forum=spamassassin-talk > work, and if not, is there a better place to peruse the arch

Re: [SAtalk] Number of Ham and Spam in Bayesian DB

2003-12-08 Thread Pedro Sam
On December 08, 2003 05:40 pm, Matt Barton wrote: > Hello > > It appears that I can easily see the number of Spam in our Bayes database > by issuing -D and --rebuild to sa-learn. It shows up like this. > > debug: bayes: Not available for scanning, only 603 spam(s) in Bayes DB < > 1000 > How d

Re: [SAtalk] Re: Delete mail with a score above n

2003-12-08 Thread Pedro Sam
On December 08, 2003 02:02 pm, Chris Barnes wrote: > Mike D <[EMAIL PROTECTED]> wrote: > > > Does anyone know how to config spamassassin to delete messages with a > > score above a certain threshold? > > > Surely the answer is to post the same question 3 times. And posting in html is just adding

Re: [SAtalk] Re: New spammer trick (HTML tables)?

2003-12-08 Thread Pedro Sam
On December 08, 2003 09:55 am, Scott A Crosby wrote: > On 08 Dec 2003 11:00:22 +0200, [EMAIL PROTECTED] writes: > > > > On 06 Dec 2003 17:21:54 -0600, Scott A Crosby <[EMAIL PROTECTED]> > > posted to spamassassin-talk: > > > > > It would be good to have a rule to match the general pattern. It's >

Re: [SAtalk] reverse scoring question

2003-12-07 Thread Pedro Sam
On December 02, 2003 06:49 pm, Gary Smith wrote: > nor the general readme. ÂI have installed SA on a server for a NPO that > generates a very large amount of email traffic. ÂIt has done a good job of > filtering a lot of the spam for us thus far. > The big problem is this NPO sends emails back and

Re: [SAtalk] SA-Learn

2003-12-03 Thread Pedro Sam
On December 03, 2003 12:07 pm, Tobin wrote: > I recently trained SA-Learn and its working very well. The question I > have is can I feed the 5 or 6 spams I get a day into SA-Learn without > have to give it 1000+ ham\spam? I see in the documentation a reference > to do something like this with the n

Re: [SAtalk] spamassassin -r failed to remove SA markup

2003-12-01 Thread Pedro Sam
On December 01, 2003 01:06 am, Aaron Young wrote: > On Mon, 1 Dec 2003, Pedro Sam wrote: > > > > My messages are in mbox format, so I report/learn spam by: > > > > "formail -s spamassassin -r < SPAM_MBOX" > > > > But when I dump the contents o

Re: [SAtalk] spamassassin -r failed to remove SA markup

2003-11-30 Thread Pedro Sam
On December 01, 2003 12:08 am, Aaron Young wrote: > On Sat, 29 Nov 2003, Pedro Sam wrote: > > > > Can anyone else confirm that "spamassassin -r" fails to remove SA markup > > when it invokes bayes learning? > > > How are you passing the message to s

Re: [SAtalk] Bayes trashed

2003-11-30 Thread Pedro Sam
On November 30, 2003 07:55 am, Jack Gostl wrote: > Well... it happened again. My Bayes files are trashed. No explanation. All > values in "sa-learn --dump magic" come back zero. No messages of interest > in the debug output of either the --dump or the --rebuild. At least none > that I can tell. Lo

Re: [SAtalk] Cache poisoning on relays.osirusoft.com??

2003-11-29 Thread Pedro Sam
On November 29, 2003 11:11 am, Mark wrote: I've read that Osirusoft is not longer operational: http://slashdot.org/articles/03/08/27/0214238.shtml?tid=111&tid=126 -- Unnamed Law: If it happens, it must be possible. --- This SF.net em

[SAtalk] spamassassin -r failed to remove SA markup

2003-11-29 Thread Pedro Sam
Hi all, Can anyone else confirm that "spamassassin -r" fails to remove SA markup when it invokes bayes learning? Thanks, Pedro -- Penguin Trivia #46: Animals who are not penguins can only wish they were. -- Chicago Reader 10/15/82 -

Re: [SAtalk] A faster and more scalable matching engine.

2003-11-26 Thread Pedro Sam
On November 26, 2003 12:58 pm, Kris Deugau wrote: > Which is next to useless for even 30-40 rules.  You would have to have > n![1] states for n rules- there is NO way to determine which individual > rules will trigger in advance. Yeah, I wondered about that... I was just proposing how one may be

Re: [SAtalk] A faster and more scalable matching engine.

2003-11-25 Thread Pedro Sam
On November 25, 2003 10:31 pm, Alexander Litvinov wrote: > Heh, it seems it would be nice to make SA scan messages fatser. If I > undersand your idea correctly, you want not to run regexp one by one, but > write the state machine for all regepes and walk on this states by the > mail, but... I und

Re: [SAtalk] Re: What level to delete at?

2003-11-25 Thread Pedro Sam
On November 25, 2003 03:35 am, Scott A Crosby wrote: [snip] > If its a webmail application, perhaps you should offer an option with > a very low threshold (I go as low as 2), but sort all of the > 'quarantined' emails by SA score, showing lowest first. When you run > low on space, you don't delete

Re: [SAtalk] bayes over NFS locking

2003-11-24 Thread Pedro Sam
On November 24, 2003 02:31 pm, Adam Denenberg wrote: > Hey, > > How are people handling the locking issues with Bayes over NFS on a > high traffic mail server? Currently i have "bayes_learn_to_journal 1 > " turned on, but an sa-learn --rebuild seems to be taking quite some > time (i have about a

Re: [SAtalk] sa-learn scripts for mbox files

2003-11-23 Thread Pedro Sam
On November 23, 2003 04:46 am, Daniel Sterling wrote: > I wrote some small scripts to take an mbox file (like you would find in > /var/spool/mail), split the messages apart, and send them to sa-learn. > sa-learn does not split messages apart itself (at least in version 2.60). sa-learn --mbox ? -

Re: [SAtalk] Bayes & speed.

2003-11-21 Thread Pedro Sam
It may have something to do with the database you are using... make sure you are using berkeley db . See README files for details... On November 20, 2003 05:02 pm, Mike Kuentz (2) wrote: > I use Bayes in a site-wide config. (2.60 w/ postfix 2.0.16) It has been > running slower and slower with t

[SAtalk] BAYES score in subject

2003-11-16 Thread Pedro Sam
Hi all, Does anyone know how to put the BAYES score on the subject line? Right now I have the following in my user_prefs file. rewrite_subject 1 subject_tag [SA _HITS_ BAYES _BAYES_] Thanks, Pedro -- "To vacillate or not to vacillate, that is the question ... or is it?" ---

[SAtalk] does "spamassassin -r" REALLY strip SA headers?

2003-11-13 Thread Pedro Sam
Hi all, I use the following command periodically to report and learn spam: formail -s spamassassin -r < ~/mail/junk/confirmed but when I do: sa-learn --dump data | sort -n I find suspicious entries like these: 1.000323 0 1068746359 HX-Spam-Pyzor:Reported 1.000323

Re: [SAtalk] OT: Administrivia: List mom, please disable the bouncing thewizard.net subscriber.

2003-11-12 Thread Pedro Sam
I had SA learn it as spam, and it never bothered me again :) Perhaps this is not the proper way of using SA, but it works. Pedro On November 12, 2003 01:44 pm, Bob Apthorpe wrote: > Hi, > > Can one of the mailing list Powers That Be disable whichever subscriber is > routing mail to thewizard.n

[SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Pedro Sam
by services04.student.cs.uwaterloo.ca (8.11.7/8.11.7) with ESMTP id hA3750g14712 for <[EMAIL PROTECTED]>; Mon, 3 Nov 2003 02:05:00 -0500 (EST) From: Pedro Sam <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: qwer Date: Mon, 3 Nov 2003 02:04:54 -0500 User-Agent: K

Re: [SAtalk] "rewrite_subject" doesn't work?

2003-10-31 Thread Pedro Sam
I use spamd/spamc with the following in my user_prefs file: rewrite_subject 1 subject_tag [SA _HITS_] and the subject is retagged to something like "[SA 12.35] This is spam" Pedro PS: have you tried "lint"ing your configuration, and restarted spamd? On October 30, 2003 11:56 pm, [EMAIL PROTECT

Re: [SAtalk] Auto-Learn

2003-10-28 Thread Pedro Sam
On October 28, 2003 09:50 pm, Bill Polhemus wrote: > However, is there not some way to adjust the thresholds at which Auto-Learn > works? I haven't seen a single Spam yet that was "autolearned," even if it > has an SA score of 15 or more. This may be what you are looking for (from "man Mail::SpamA

Re: [SAtalk] sa-learn not working right

2003-10-22 Thread Pedro Sam
On October 22, 2003 10:35 am, Anne Ramey wrote: > when I sa-learn on a folder of spam it takes almost no time and says > "learned 1" no matter how many where in the file but when I do an > sa-learn of ham, it works fine. Ideas? If the folder is of mbox format, you may want to specify the "--mbox"