or years with our installation.
You need a milter-capable sendmail installation, SpamAssassin, and
that's it.
http://savannah.nongnu.org/projects/spamass-milt/
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fi
cript/program that does something like this?
I'm thinking log parsing is the easiest way to a solution, but I wonder
if anyone has solved this problem already.
Thanks!
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires
this complicated! Just SA - no MTA details, no
MUA, just powerhouse spam-fighting book. We'd definitely buy one if you
wrote it ::-)
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.
roader sense though, shouldn't fields like To: be excluded by
default? It seems like if I receive more than 50% spam, this is a
receipe for disaster. Of course, some spam won't have a valid To:
field, but it seems like constant things like this will be very bad
arbitors.
--
Ross Vande
of us get more spam than ham - Bayes is right. Unfortuantely,
that's really, really the wrong thing to do. Is there a way to excempt
some headers from processing?
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-
nto some poor-sod-like-me's
mail server.
Incorrectly addressed error messages are way more annoying than spam.
Between forged spam addresses, forged virus addresses, forged Outlook
worm addresses, I've thought multiple times about writing a
CrapAssassin...
--
Ross Vandegrift
[EMAIL PROTECTED
ize).
It has its good and bad points, but is probably only interesting to
statisticians and developers ::-)
DISCLAIMER: I am not an SA develper and haven't read much of the code -
I'm simply translating the text above into more common language.
--
Ross Vandegrift
[EMA
74.2.17-2003-05-11-exp)
Check your SA installation - it looks like your SA can't find the rules
for 2.54. spamassassin -D will confirm or deny this.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He f
they should be removed from the ham
database.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Cannon.
He Blesses it. It is
On Tue, Jun 10, 2003 at 07:31:31PM +0200, Kai Schaetzl wrote:
> Ross Vandegrift wrote on Tue, 10 Jun 2003 10:17:02 -0400:
> > Have I missed something obvious? Anyone else seeing this?
>
> Maybe sendmail removes the extra one? I know at least one milter which
> does this.
I ju
ersion: SpamAssassin 2.55
(1.174.2.19-2003-05-19-exp)"
Have I missed something obvious? Anyone else seeing this?
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.
through. I was originally going to propose that the autolearn not
actually autolearn when nham >> nspam, but then it'd be difficult to
track changing trends in email. So I don't know what to do.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon.
h them. Also, some
weird messages about "ioctl: Inappropriate for device". If you've
upgraded your perl, I'm afraid you may need to nuke out your Bayes
database.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon
any recieves and gently push the
scores in that direction, and 2) keep up with changes in spam.
That host only pushes 10-15 kilo-emails per week, so it'll take a bit of
time to get things up to speed.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon.
tion. Do something
like this:
$ touch [EMAIL PROTECTED]
$ ls [EMAIL PROTECTED]
You'll be able to see if the address is matched by your expression.
> The doc says that it uses file-glob-style
> So, what in the world is that?
man glob(7) is a good resource.
--
Ross Vande
reasons. I'd be interested in
learning why someone would setup like that.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water
amd.
Other than that, it's running like a charm.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Cannon.
He Blesses it.
be. It also looks like what happens when you view a SA report
in a busted-ass MUA like pmail that doesn't understand lines don't
actually need CF to end...
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Wa
seem to be /var/run/spammilter/spamass.sock).
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Cannon.
He Blesses it. It is a Holy H
you don't like, give them the finger and fork it.
Free software is a wonderful thing.
Sheesh - at least give them a chance!
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.
he good news is that Jesus Christ atoned for our sins. Whosoever believes and is
baptized will be saved. Remember, there is hope and happiness to be found in the Lord.
Thank you, and God bless.
- End forwarded message -
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon.
work nicely. It's a bit... manual though. I'm kinda the one
and only mail guru here, and I'm not the person who does user account
management.
I guess it's really the only way without introducing some POP/IMAP
amalgomation of mail transfer into the mix.
--
Ross Vandegrift
[EMA
rk to do spend so much time trying to send out
bounce messages to non-existent spammer addresses.
Thanks for any tips.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a
uable
makes me take the time to whitelist them.
Oh, and another thing - don't do elaborate layout in ASCII text. Again,
the EFF/ACLU newsletters are a great example of what has credability to
me.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon.
hing like
that). Worked fine.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Cannon.
He Blesses it. It is a Holy Holy-Water Cann
to say "yes boss, sendmail's got your email nice and
safe".
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Cannon.
He Blesses it.
them when going through his spam
folder though.
Strange things happen. Be safe, not sorry - it takes me about 20
seconds a day to glance and verify my caughtspam folder only has spam.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Canno
think his naive statistical approach has merit - but it's definately not
Bayesian. I also disagree that it's better than SA's filtering - I like
not having to constantly train my filter. I like more not having to
constantly train my users ::-).
Both have their advantages and disadvant
ision
resulting from the probability calculations. AI people aparantly love
the idea - mathematical philosophers hate it because it's a subjective
measurement.
In this case it doesn't really matter since we have a rigorous
definition for the confidence (determined by th
ck on Bayes-like filtering systems. That is gonna be hard to beat
without diluting the power of recognizing mail about linuxy type stuff.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.
is.
This would allow the filter to assign a spam score, though perhaps with
a smaller confidence interval.
Of course spammer can get around this by not writing spammy emails, but
that's always been (and always will) be a sure-fire way of getting
around content-oriented filtering.
--
Ross Vandegr
rry a -50 or so! What's the line of
thinking here? I've never once recieved a signed piece of spam that was
signed. OTOH, I've recieved lots of real signed mail. Has this rule been
exploited? Maybe the idea of signing legit commercial mail wasn't so
hot.
--
Ross Vandegr
companies who want to send legit mail that looks
spammy can't just PGP/GPG sign it? This way, a user can be sure of the
source.
Then, there could be a SA hack to whitelist certain GPG/PGP keys, and
blacklist others.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has
ust guessing: a signature not included when forwarding.
>
> Was there an HTML attachment that got stripped out somewhere along
> the way?
Nope - I just looked at the email as recieved, in my boss's MUA.
There's only what I sent to the list.
I may have to consider going to 2.
e on November 3rd and
should be made as soon as possible to avoid any further problems with the
trustee
- End forwarded message -
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.
On Wed, Nov 06, 2002 at 10:47:59PM -0500, Ben Rosengart wrote:
> Hello spam assassins,
> Panix is about to deploy spamassassin on a fairly wide scale.
[snip]
Why not just whitelist *@panix.com? That should handle exactly what you
want.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a
And not by a small margain - those tests seem to mostly
net at least 4 points. Are they really worth it?
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Ca
ipt that generates a
custom ~/.procmailrc for a user. When a user runs the script it writes
out a .procmailrc that pipes mail through spamd and filters the results.
Watch it so you don't tread on clued users' procmailing. Maybe include
a warning if the user's .procmailrc alr
difference in
filtering effectiveness.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon. It is a Water Cannon.
He fires Holy-Water from it.It is a Holy-Water Cannon.
He Blesses it. It is a Holy Holy-Water
most always
attachments. Even from AOLer friends and Outlook users.
There are a few legitimate uses - Dr. Dobbs Math Power newsletter, for
example, uses inline images to simulate TeX in html. But for the most
part, non-spam images don't seem to be sent as singleton inline images.
--
Ross V
gt; my sendmail.cf ?
>
> Is there more I need to do?
Depends on how you want it to work.
You should probably start by filtering one account's mail with a
.procmail file. After you're comfortable with how the filterting works,
and decide you want to filter everything, google for sp
much as possible.
At this point the only thing it handles is actual delivery to PMAIL
boxes.
You probably want a Un*x box running some real MTA to filter and then
route email to the Novell server.
--
Ross Vandegrift
[EMAIL PROTECTED]
A Pope has a Water Cannon.
to edit the AWL? It would be useful to easily
nuke an entry...
Ross Vandegrift
[EMAIL PROTECTED]
---
This sf.net email is sponsored by: Jabber - The world's fastest growing
real-time communications platform! Don't just IM. Buil
tter.
The Amphenol Connector newsletter was one that I used to get that always
ended up in the spam folder.
Just to be a curious PITA... where do you go if the GA finds that SCE
and UCE are essentially similar? We'll end up with a very neutered set
of rules.
e corpus for the GA? Maybe seeding the corpus with a bigger set
of these type of mails will have some interesting/useful results.
Ross Vandegrift
[EMAIL PROTECTED]
---
This sf.net email is sponsored by:ThinkGeek
Welcome
primary
MX machine, where it will be routed to actual mailboxes.
Then, of couse, put SpamAssassin on that primary MX box ::-)
Of course, the tradeoff is that mail won't be delivered if the primay
mailhost goes down.
Ross Vandegrift
[EMAIL PROTECTED]
-
irewall on the
> mail / SA gateway. I know I need to worry about the DCC / razor protocols.
As long as you configure it correctly, you won't even notice the
difference. If you don't block DNS, DCC, and razor, you could put 1000
firewall fules on a 486 and not see the difference.
Ross
me weird
character substitutions when saving as HTML.
Ross Vandegrift
[EMAIL PROTECTED]
---
This sf.net email is sponsored by:ThinkGeek
Oh, it's good to be a geek.
http://thinkgeek.com/sf
___
Sp
just looks ugly otherwise.
Check to see if your sendmail.cf has a short (less that 990) "L=" line
included. This instructs sendmail to wrap lines at a different length
than implied by SMTP (which says lines are shorter than 990 chars).
Ross Vandegrift
[EMAIL PROTECTED]
-
nging. Search the list for
details. It should have been integrated in more recent versions, but
I'm not 100% sure.
Ross Vandegrift
[EMAIL PROTECTED]
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek
re for the purpose of
sending anonymous email. Thank god for SA, I suppose.
Ross Vandegrift
[EMAIL PROTECTED]
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
The included false positive came in to a co-worker's mailbox today:
I don't see how the Subject contains anything remotely like a unique
ID code. Is this right?
Ross Vandegrift
[EMAIL PROTECTED]
Received: from SpoolDir by HAL (Mercury 1.48); 4 Jun 02 13:51:51 -0500
Return-pat
overflow the process table eventually. I've been unable
to figure out what makes them multiply like this. Is this
spamass-milter flakiness that we've been incorrectly attributing to
spamc?
Thanks for any insight.
Ross Vandegrift
[EMAIL PROTECTED]
___
> > max size for spamc/spamd). I ended up solving it by adding
> > a read() loop to spamc to flush the read buffer so that the
> > milter would be ready for the response. It's probably not
> > the best solution, but I'll attach the patch anyway.
>
> Are there any particular problems with this a
ponse. It's probably
> not the best solution, but I'll attach the patch anyway.
Have you had better luck with this patch applied? If so, kludge or not,
I'll certainly apply it.
Ross Vandegrift
[EMAIL PROTECTED]
___
Have
ss (spamass-milter and spamc) that never return. I'm
considering figuring out why this seems so broken, if I can verify it's
not just my setup.
Ross Vandegrift
[EMAIL PROTECTED]
___
Have big pipes? SourceForge.net is looking
Hey everyone,
I'm kinda interested in looking at what's stored in our AWL. Is
there an easy way to dump it out as something useful?
Ross Vandegrift
[EMAIL PROTECTED]
___
Have big pipes? SourceForge.net is l
57 matches
Mail list logo
