Re: [SAtalk] Outlook users reporting spam

2002-10-19 Thread Skip Montanaro
mbayes training and classifier code. FYI. -- Skip Montanaro - [EMAIL PROTECTED] http://www.mojam.com/ http://www.musi-cal.com/ --- This sf.net email is sponsored by: Access Your PC Securely with GoToMyPC. Try Free Now https://www.got

Re: [SAtalk] Outlook users reporting spam

2002-10-11 Thread Skip Montanaro
o/spambayes -- Skip Montanaro - [EMAIL PROTECTED] http://www.mojam.com/ http://www.musi-cal.com/ --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamas

[SAtalk] Why do the X-Spam-Status header and the summary disagree?

2002-10-11 Thread Skip Montanaro
manatee.mojam.com, not montanaro.dyndns.org), but I thought I'd check with the pros as well. Thx, -- Skip Montanaro - [EMAIL PROTECTED] http://www.mojam.com/ http://www.musi-cal.com/ --- Begin Message --- SPAM: Start SpamAssassin results -- SPAM: This ma

[SAtalk] S/O ratio?

2002-09-17 Thread Skip Montanaro
I've seen several recent references in SA-talk to "S/O" and "S/O Ratio". I don't find it mentioned in the 2.30 sources I have laying about and googling for it didn't turn up any obvious winners either. All I can think of is "Spam to Ollie ratio".

Re: [SAtalk] Sending SPAM To Oblivion

2002-07-23 Thread Skip Montanaro
M=spam :0fw | spamassassin -P :0 * ^X-Spam-Status: Yes $SPAM I still find a false positive every few days, and the cost of quickly scanning the headers in my spam mailbox is low. -- Skip Montanaro [EMAIL PROTECTED] consulting: http://manatee.mojam.com/~skip/resum

[SAtalk] How to disable debug stuff w/ CPAN install?

2002-07-22 Thread Skip Montanaro
(and will) modify my macros to redirect stderr to /dev/null. Still, how do I disable the debug print stuff when installing from CPAN? Thx, -- Skip Montanaro [EMAIL PROTECTED] consulting: http://manatee.mojam.com/~skip/resume.html --- This sf.net

[SAtalk] score for frequently abused domains?

2002-07-08 Thread Skip Montanaro
manatee.mojam.com Subject: Tá no ar... Date: Wed, 19 Jun 2002 20:57:26 -0300 Do people have local rules to deal with this sort of stuff? -- Skip Montanaro [EMAIL PROTECTED] consulting: http://manatee.mojam.com/~skip/resume.html --- This s

Re: [SAtalk] Release 2.30 (Viking dentist @ l'orange) announcement

2002-06-15 Thread Skip Montanaro
line 59. I installed from the tarball rather than wait for CPAN, which probably would have identified the dependency. What package do I need to install to resolve this problem? Thx, -- Skip Montanaro [EMAIL PROTECTED] consulting: http://manatee.mojam.com/~skip

Re: [SAtalk] Obfuscation escalation

2002-06-15 Thread Skip Montanaro
g.charCodeAt or String.fromCharCode seems like a surefire sign of obfuscation. I'd suggest a rule something like: rawbody OBFUSCATING_JAVASCRIPT /charCodeAt|fromCharCode/ describe OBFUSCATING_JAVASCRIPT JavaScript which tries to hide the message -- Skip Mont

Re: [SAtalk] Replying to list???

2002-06-13 Thread Skip Montanaro
Jim> How come this list does not have the reply to: set to the Jim> spamassassin list? Jim> Is it just me? Probably not. Search google for "reply-to considered harmful". -- Skip Montanaro [EMAIL PROTECTED] consulting: http://manatee.mojam.co

Re: [SAtalk] newbie: scoring FSCK

2002-06-03 Thread Skip Montanaro
as in: He's jest a feckin' idjit. Ought to get by any cussword traps but still be understandable... -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) Boycott Netflix - they spam - http://www.musi-cal.com/~skip/netflix.html _

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-06-01 Thread Skip Montanaro
ero they obviously aren't contributing anything and should probably be removed, but if the GA winds up scoring them in an ascending fashion (even if SIX_MATCH only gets a small positive score), you've probably identified another useful spammish indicator. -- Skip Montanaro ([EMAIL PROTECTED

Re: [SAtalk] Why aren't ALL scores genetically evolved?

2002-05-30 Thread Skip Montanaro
SM> Aside from longer execution time, what's the downside of disabling SM> network checks in the mass-check script? Craig> Well, speed, clogging your pipe, speed, flooding the servers, Craig> speed, and last but not least, speed. Doing 400,000 RBL lookups Craig> (to each RBL

Re: [SAtalk] removing duplicates using formail -D?

2002-05-28 Thread Skip Montanaro
x27;s interested in it (I'm sure the many Perl mongers among you probably already have something), let me know. I'd be happy to shoot you a copy. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required

[SAtalk] removing duplicates using formail -D?

2002-05-28 Thread Skip Montanaro
box. Obviously, I've misunderstood something about formail -D and procmail. Any clues appreciated. Thx, -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs

Re: [SAtalk] Why aren't ALL scores genetically evolved?

2002-05-28 Thread Skip Montanaro
sabling network checks in the mass-check script? (As for the auto-whitelist comment - spamd with the -a flag still isn't working for me, so that's not really an option. I've been away from mail for a few days though, so I still have a little sa-talk mail to dig through. Perhaps th

Re: [SAtalk] catching Nigerian scam?

2002-05-27 Thread Skip Montanaro
Charlie> There was some discussion about making a 419-specific version Charlie> of the phrases test. After posting my previous message I almost immediately received three 419 variants. I then spent a little time looking at them and some websites devoted to them and came up with a couple

Re: [SAtalk] Suggested change to TONER_CARTRIDGE

2002-05-23 Thread Skip Montanaro
Bart> body TONER /(?:toner|ink|fax|copier)\scartridge/i May I suggest one slight change to that re? /(?:toner|ink(?:jet)?|fax|copier)\scartridge/i -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required&qu

[SAtalk] catching Nigerian scam?

2002-05-23 Thread Skip Montanaro
phrases are common enough to provide reliable triggers, but I would think they all have enough in common to fall into an appropriately set SA trap. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs

Re: [SAtalk] Can SA legitimately insert a Received: header?

2002-05-23 Thread Skip Montanaro
dd a header yourself? Something like: Theo> :0fw Theo> | spamc | formail -fa "X-SA-Scanned-On: `/usr/bin/hostname`" Thanks for the tip. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Writ

Re: [SAtalk] Re: Sieve and SpamAssassin

2002-05-23 Thread Skip Montanaro
n far too late in the process Daniel> if either Cyrus or Sieve are involved... What are Cyrus and Sieve? They seem a bit too generic to feed to a search engine with much success. Thx, -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communication

[SAtalk] Can SA legitimately insert a Received: header?

2002-05-23 Thread Skip Montanaro
$SPAM If I have a problem I sometimes can't easily tell where SA ran. It would be nice if when run as a filter, SA added a Received: header to the message. It is, after all, a sort of MTA. Is this possible? -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant W

Re: [SAtalk] RULES File For rpm version

2002-05-21 Thread Skip Montanaro
pm -ql rpmname or rpm -qlp rpmfile -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs ___ Don't miss the 2002 Sprint PCS Appli

Re: [SAtalk] whitelist

2002-05-21 Thread Skip Montanaro
To: indicates it's for me score REALLY_ME -5.0 -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs ___ Don't miss the 2002 Sprin

Re: [SAtalk] Razor

2002-05-20 Thread Skip Montanaro
say something like "listed in Razor" as one of the hits. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs ___ Don't miss the

[SAtalk] A possible new rule...

2002-05-19 Thread Skip Montanaro
t;dollars" after Perhaps this would be worth adding to the ruleset. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs ___ Hundreds of n

Re: [SAtalk] spamc/spamd not working with -a ...

2002-05-19 Thread Skip Montanaro
elist.db -rw-r--r--1 skip root 20 May 19 23:03 auto-whitelist.lock -rw-rw-r--1 skip skip 973 May 16 17:57 user_prefs My umask is 002. Root's is 022. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written an

[SAtalk] Manipulate SA settings remotely?

2002-05-16 Thread Skip Montanaro
I have a question for those of you who administer machines that run SA. If your users don't have login accounts (e.g., /bin/false as a shell), how do they fiddle their user_prefs? Or don't they? Thx, -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excell

[SAtalk] spamc/spamd not working with -a ...

2002-05-16 Thread Skip Montanaro
r (about six seconds to display), but did mark the message as spam. Upgrading to 2.20 didn't help with the -a problem, so for now I'm running spamd with the "-d -c -L" set of flags. Thx, -- Skip Montanaro ([EMAIL PROTECTED] - http://www

Re: [SAtalk] What's wrong with this rule?

2002-05-16 Thread Skip Montanaro
;spamd" users cannot use them in their "user_prefs" files, for security and efficiency reasons. I'll have to put it in /etc/mail/spamassassin instead. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills requir

Re: [SAtalk] What's wrong with this rule?

2002-05-16 Thread Skip Montanaro
ject:". Nope, that's not it... :-( I had already tried "subject" and "Subject". Should have mentioned it in my post. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.job

[SAtalk] What's wrong with this rule?

2002-05-16 Thread Skip Montanaro
Thx, -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills required" - seen on chi.jobs ___ Have big pipes? SourceForge.net is looking for download mirrors. We supply the ha

Re: [SAtalk] Report entire mbox file?

2002-05-16 Thread Skip Montanaro
ormail -s spamassassin -r < mbox This tells formail to split the mailbox into individual messages and pipe each one to "spamassassin -r". -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communi

Re: [SAtalk] botched MIME tests?

2002-05-15 Thread Skip Montanaro
". I run a website with lots of AOL visitors. They send me lots of legitimate mail, none of which has a real name. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communications Skills require

Re: [SAtalk] Can I train the GA?

2002-05-15 Thread Skip Montanaro
enetic algorithm" might be misused. Seems like this is something that should be mentioned in the man pages, as it's a significant differentiator between SA and many other spam filters. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/) "Excellant Written and Communicat

[SAtalk] Can I train the GA?

2002-05-15 Thread Skip Montanaro
All this talk about a genetic algorithm makes me wonder, is it trainable in the usual sense or is that not possible? I don't see "genetic" mentioned in either the SA manpages or the code, which leads me to suspect the term is being misused. -- Skip Montanaro ([EMAIL PR

RE: [SAtalk] Weird false negative...

2002-05-15 Thread Skip Montanaro
g about some bozo who bought a CD with a million email addresses for $49 and then forged the From: field to appear like it was coming from ebay.com. Remove that assumption and I think you remove just about all justification for having that file. -- Skip Montanaro ([EMAIL PROTECTED] - http://www.

Re: [SAtalk] 2nd of 2 problems... using spamc vs. spamassassin direct...

2002-05-15 Thread Skip Montanaro
>> The process just doesn't run (no scoring, etc.) Theo> Are you running spamd? What do the logs say? What logs? I had the same problem and just switched back to running spamassassin directly. ___ Have big pipes? SourceForg

[SAtalk] Weird false negative...

2002-05-14 Thread Skip Montanaro
coded it and saw it was HTML from a web site promotion/marketing company. A casual scan of the text suggested to me that had SA looked, it would have significantly raised the score ("We Create Massive Traffic For Your Web Site", etc). Seems like a "single point of failure", i