[SAtalk] Increase in low scoring spam?

2002-12-21 Thread Rossz Vamos-Wentworth
I seem to be receiving a lot more low scoring spam in the last few days. I set my spam threshold at 7 and the auto-delete at 15. In the last few days, I've received a bunch of spam scoring just below 7. Anyone else seeing this? I'll probably lower my threshold to 6 because of this. Rossz

[SAtalk] sa and exim problems

2002-12-17 Thread Rossz Vamos-Wentworth
I majorly screwed up with my exim configuration and somehow got it into a repeating loop. As such, I've pretty much lost all email for today. That means any suggestions regarding exim and sa that were recently posted were unseen. damn. Thank goodness this is a private mail server so I don't

[SAtalk] Switching to exim

2002-12-16 Thread Rossz Vamos-Wentworth
I'm in the process of dropping sendmail+procmail and switching to exim 4. Since I am brand new at exim, I'm kind of flogging around blindly. Googling on "exim spamassasin" found me the proper router and transport config settings (I've pasted them below), what's left is the redirecting of high

Re: [SAtalk] useful blackholes

2002-10-02 Thread Rossz Vamos-Wentworth
> I use TMDA and simply add to its blacklist_wildcards list > entries like *@=.kn (bye-bye North Korea) I currently limit its use > in this way >to rogue states. Doesn't that method filter after receipt? Also, doesn't it let through forged headers? As I previously stated, I prefer to blo

Re: [SAtalk] useful blackholes

2002-10-02 Thread Rossz Vamos-Wentworth
> Useful resource? From the rhetoric on that site, I wouldn't use any > of the site's data without checking each entry first. I've been > looking at a number of RBL sites recently and have reluctantly come to > the conclusion that objectivity is not high on their list of things to > do. They gi

[SAtalk] useful blackholes

2002-10-02 Thread Rossz Vamos-Wentworth
I've always considered filtering spam as the last resort. I prefer blocking at the mta if at all possible. Here's a useful resource: http://www.blackholes.us/ Rossz --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.

Re: [SAtalk] audio/x-wav rule suggestion

2002-07-24 Thread Rossz Vamos-Wentworth
> I use f-prot, which has a linux version free for individual use and > can be updated via a cron job. I have mimedefang call it and > SpamAssassin. There are other, similar solutions. And now I don't have > to worry about tweaking my procmail filters or SpamAssassin rules to > catch every nuance

RE: [SAtalk] nuking high scores

2002-07-18 Thread Rossz Vamos-Wentworth
> That's why I don't delete any emails marked as spam; too many false > positives. I route all marked spam to a special mailbox, and clear it > periodically. This way, you never lose an email. Like I said, I'm only deleting extremely high scores at this time, 20 or more hits. Actually, they're

RE: [SAtalk] nuking high scores

2002-07-18 Thread Rossz Vamos-Wentworth
> Rossz Vamos-Wentworth said: > >> * ^X-Spam-Level: \*\*\*\*\*\*\* > > > > I noticed you escaped the *, but Russ did not in his example. Is > > the escape necessary? > > > > BTW, it's that easy? Dang. > > Isn't "^X-Spam-Status:

[SAtalk] somethings not right

2002-07-18 Thread Rossz Vamos-Wentworth
I added the lines to procmailrc to nuke high scoring spam, and broke things. Here's what my mail log shows Jul 18 15:47:19 vife sendmail[15402]: g6IMlJe15402: from=smadmin, size=3092, class=-60, nrcpts=0, msgid=<[EMAIL PROTECTED]>, relay=smadmin@localhost Jul 18 15:47:19 vife sendmail[15396]

RE: [SAtalk] nuking high scores

2002-07-18 Thread Rossz Vamos-Wentworth
> * ^X-Spam-Level: \*\*\*\*\*\*\* I noticed you escaped the *, but Russ did not in his example. Is the escape necessary? BTW, it's that easy? Dang. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.

[SAtalk] nuking high scores

2002-07-18 Thread Rossz Vamos-Wentworth
I'm still in the learning process for both SA and procmail, so pardon my ignorance. I want my server to nuke spams with exceptionally high scores, e.g. >20 (I may adjust this down). My short term tests have indicate (at least for my personal mail), that items either have a very low score (5-

Re: [SAtalk] Setting up on SuSE

2002-07-14 Thread Rossz Vamos-Wentworth
> The "typical" installation of spamassassin uses no daemons at all and > needs no start up script in /etc/init.d. If you have installed > spamassassin then put the following in your ~/.procmailrc file and as > mail is delivered it will be processed through spamassassin to be > tagged either yes

[SAtalk] Setting up on SuSE

2002-07-14 Thread Rossz Vamos-Wentworth
Can someone send me a start/stop script for placement in /etc/init.d that works with SuSE 7.3? Since I am unfamiliar with SpamAssassin, I would prefer not writing this myself and potentially screwing up my mail system. Any assistance would be appreciated. Rossz -