RE: [SAtalk] RFC822ness of a message

2004-01-22 Thread Steven Manross
teven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 6:35 PM To: Rick Macdougall Cc: Steven Manross; [EMAIL PROTECTED] Subject: Re: [SAtalk] RFC822ness of a message -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Macdougall w

RE: [SAtalk] trouble sending mail to this list

2004-01-22 Thread Steven Manross
A message I sent yesterday around noon took 5.5 hours to show up. Just guessing it got deferred for whatever reason. Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Kettler Sent: Thursday, January 22, 2004 9:40 AM To: Spyros Tsiolis Cc: Spama

[SAtalk] RFC822ness of a message

2004-01-21 Thread Steven Manross
I use a tool called "Outlook Redemption" (http://www.dimastr.com/Redemption ) to: -save an Outlook message as an RFC822 file -then run that file through SA, -then reimport that message file back to Outlook (my mailbox only). I am having issues where SA reports incorrect RFCness in the export

RE: [SAtalk] Re: Exchange and autolearn

2004-01-14 Thread Steven Manross
Apparently the "fix" is to use the 2000 box at the outside MTA that forwards to 5.5.. The munging doesn't seem to happen that way. Bad fix, but it is reported to work.. :) Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kang , Joseph S. Sent: We

RE: [SAtalk] OT: My REALY REALY Crazy idea!! ahahahahahah

2004-01-09 Thread Steven Manross
It's gotta be controlled via an RF sensor so all the Gorillas in a particular radius start going nuts and everyone can blame the one in the epicenter! Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Timothy Donahue Sent: Friday, January 09, 2004 3:

RE: [SAtalk] Weird Word patch

2003-12-08 Thread Steven Manross
And forgive me for beating this to a pulp, but... The original double foreach loop looks to have split for each $line on all the ' ' (spaces) to create a word list, not a line list. Which should catch the number of that words that meet this obfu rule not lines. Lastly, given that you say eval c

RE: [SAtalk] Weird Word patch

2003-12-08 Thread Steven Manross
I may be mistaken, but that would be any WORD that had: Any number of letters followed by punctuation followed by any number of more letters. Not very familiar with eval or it's return, but the regex looks right. I.E. counting number of occurrances of things like this... This,that th*at th&at

[SAtalk] rewritten SA message breaks html chars in outlook?

2003-11-07 Thread Steven Manross
In looking at the rewritten messages that SA produces, it looks like a "=\r" is getting inserted at various points in the message and seems to break the displaying of various characters in an HTML mail destined for my Exchange Server and Outlook XP. Namely, an "=" seems to get inserted in the plac

RE: [SAtalk] Can you customize the body of a spam message

2003-11-04 Thread Steven Manross
An Outlook rule can look at the headers and "do whatever" when it finds "X-Spam-Status: YES" Very easily. But, then I don't pretend to know what management finds easy to do.. :) Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Hirschor

RE: [SAtalk] Rule for reverse lookup similarities

2003-10-31 Thread Steven Manross
For all interested.. I'm *NOT* looking to give this type of rule 5 points. I want to give it something like .3 - .6 (but will play with it), as noted by many, this isn't an indication of spam, but an indicator of a possible spam-source. I believe that people who don't own their own IP ranges, ca

[SAtalk] Rule for reverse lookup similarities

2003-10-30 Thread Steven Manross
I'm seeing a few/lot of spam that has a reverse lookup name that is like the originating IP. i.e. If it were 192.168.52.45 that was the originating IP, the reverse lookup might be 192-168-52-45-clients.domain.com Is there a way to tag this? Steven -

RE: [SAtalk] 2.60 lock errors

2003-10-07 Thread Steven Manross
Does a .lock file exist in your $ENV{%HOME%}/.spamassassin dir? Delete it. It's probably left over from a connection that was killed before SA could delete the LOCK file. I had this happen when I was running multiple instances and killed one of the instances. I'd check it while no one is access

RE: [SAtalk] spam status no

2003-10-06 Thread Steven Manross
The 4 stars should give you a clue And then consider rounding (apparently from somewhere around 4.95 - 4.99).. :( Or at least that's what someone else told another someone else a few days ago. :) Steven -Original Message- From: Landy [mailto:[EMAIL PROTECTED] Sent: Monday, Octobe

RE: [SAtalk] sa-learn

2003-10-06 Thread Steven Manross
Retry the sa-learn with a -D at the end. It'll probably tell you that you don't have DB_File installed. (That was my problem this weekend ... :( ) Steven -Original Message- From: David M. Carney [mailto:[EMAIL PROTECTED] Sent: Sunday, October 05, 2003 4:47 AM To: [EMAIL PROTECTE

RE: [SAtalk] Microsoft Outlook and saving spams for learning..

2003-10-01 Thread Steven Manross
It's not stripped... It's a binary file.. Outlook needs to read it (or at least the outlook object model -- which is available to win32-perl through Win32::OLE and the MAPI.Session object). Steven -Original Message- From: Richard Bates [mailto:[EMAIL PROTECTED] Sent: Wednesday, Octobe

RE: [SAtalk] Microsoft Outlook and saving spams for learning..

2003-10-01 Thread Steven Manross
Most likely not, from what I've seen (though, I am SA newbie). You probably want to look into the outlook object model.. (mail me offline if you need some pointers) But the short answer is that you want to $string = $message->Fields()->Item(0x7D001E).$message->{Text}; open(FILE,">thismessageas

[SAtalk] Default behavior of check

2003-09-30 Thread Steven Manross
Would anyone find it beneficial to have this added to SpamAssassin, or is it just me? :) $status->check_internal_first($mail); Where check would be performed with "local_only" tests first... and then if it is tagged using locals only, you don't bother with RBL and/or external tests, because it'

RE: [SAtalk] Re: Automating usage of sa-learn

2003-09-30 Thread Steven Manross
As for strict Outlook 2000 (I can't guarantee as I have no O2K setups anywhere right now), but I think you are just looking at an "Attachment->Add" (though I've never attached a message object, just files -- but it's the same principle), and then rewriting the $message->{Text} and $message->Item(0

RE: [SAtalk] Memory utilization buildup

2003-09-29 Thread Steven Manross
Much thanks. Steven -Original Message- From: Klaus Mueller [mailto:[EMAIL PROTECTED] Sent: Monday, September 29, 2003 1:01 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Memory utilization buildup There was already a bug database entry (#2476). It's fixed with 2.60 by removing timelog.

[SAtalk] Memory utilization buildup

2003-09-29 Thread Steven Manross
I'm parsing through a bunch of mail in a spam mail archive folder that I am using to test SA on. Here's the code, which is basically ripped out of the "bat" file with minor tweaks and subroutined. sub is_message_spam { my $message_text = $_[0]; my %opt = ( 'create-prefs' => 1); my @array =

[SAtalk] Newbie Post - Exchange 200x inquiry

2003-09-25 Thread Steven Manross
Does anyone have experience in a Microsoft Exchange Environment? SpamAssassin is doing what I expect it to, but :) (there's always a but)... I was particularly looking at the possibility of joining SpamAssassin with an "onArrival" Event Sink on the SMTP Interface for the Exchange server (k