Re: [SAtalk] SpamAssassin 2.62 is released!

2004-01-19 Thread Steven W. Orr
Any idea when we'll get RPMs available for the new release? -- Time flies like the wind. Fruit flies like a banana. Stranger things have .0. happened but none stranger than this. Does your driver's license say Organ ..0 Donor?Black holes are where God divided by zero. Listen to me! We are all- 0

[SAtalk] How to balance spamd max children?

2003-11-04 Thread Steven W. Orr
My ISP went down, so when it came back up aqnd my secondary mx record kicked it all back to me I got a lot of messages from sendmail saying Nov 4 06:58:26 saturn spamd[952]: hit max-children limit (5): waiting for some to exit I bumped it up to 10 (my server can well handle it) but can someon

Re: [SAtalk] Autodeleting spam based on score without deleting all spam

2003-09-20 Thread Steven W. Orr
On Saturday, Sep 20th 2003 at 18:31 -0700, quoth Mike Shkolnik: =>Any tips on how to auto-delete spam based on score without deleting all =>spam? => =>Criteria: =>Mark anything scoring 5 or above as Spam. (already doing that) =>Delete anything scoring 15 or above FROM THE SERVER. (how?) =>Spam sco

Re: [SAtalk] New virus posing as Microsoft

2003-09-20 Thread Steven W. Orr
On Saturday, Sep 20th 2003 at 15:12 -, quoth Jim: =>On Sat, Sep 20, 2003 at 10:05:42AM -0500, Jack L. Stone wrote: =>> At the risk of being snapped at, I use apamass-milter to block at a certain =>> spam threshhold. So, doesn't it get that score weight from SA.??? I'm =>> blocking a huge a

Re: [SAtalk] New virus posing as Microsoft

2003-09-20 Thread Steven W. Orr
On Saturday, Sep 20th 2003 at 03:47 -, quoth Jim: =>On Fri, Sep 19, 2003 at 10:56:19PM -0400, Steven W. Orr wrote: =>> No. I'm running sendmail with spamass-milter. I don not want to do it in =>> procmail or postfix. I want to do it in SA. => =>Then you either don&#

Re: [SAtalk] New virus posing as Microsoft

2003-09-19 Thread Steven W. Orr
On Friday, Sep 19th 2003 at 10:54 -0400, quoth Forrest Aldrich: =>This new virus appears to generate many (random?) subjects, so it's getting =>difficult to narrow down. => =>Has anyone filters for Spamassassin that will correctly identify this =>virus? I'd like to score this one high so they a

Re: [SAtalk] New virus posing as Microsoft

2003-09-19 Thread Steven W. Orr
On Saturday, Sep 20th 2003 at 04:44 +0200, quoth Jim Knuth: =>Hallo Steven W. Orr, => =>> But I don't want to block with a procmail rule. I want to block it with an =>> SA rule. In fact, I don't even use procmail. I use spamass-milter. I want =>> all my spa

Re: [SAtalk] New virus posing as Microsoft

2003-09-19 Thread Steven W. Orr
On Friday, Sep 19th 2003 at 16:09 -0500, quoth Jon Gabrielson: =>Just block => =>name="*.scr" and name="*.exe" => =>you should probably be blocking these anyways. => =>Anyone who needs to send an exe can easily just zip it. => =>Here is my procmail rule: => =>:0B =>* Content-Type: application|Cont

Re: [SAtalk] no spam today uses SA?

2003-09-15 Thread Steven W. Orr
On Monday, Sep 15th 2003 at 12:22 -0700, quoth Andreas Stollar: =>So what is the problem? They packaged it up with some Windows tools and =>made it into a 'SpamAssassin for Dummies' product. I am sure no one on =>*this* list needs that, but for those that do, there is an option. Free =>version

Solved: [SAtalk] Error from dcc-1.2.6

2003-09-13 Thread Steven W. Orr
On Saturday, Sep 13th 2003 at 22:39 -0400, quoth Steven W. Orr: =>I upgraded and now I have the following error message on every mail =>message: => =>dccproc[11141]: no valid DCC server hostnames => =>I did delete the old /var/dcc/map and copied in the new map.txt and then =

[SAtalk] Error from dcc-1.2.6

2003-09-13 Thread Steven W. Orr
I upgraded and now I have the following error message on every mail message: dccproc[11141]: no valid DCC server hostnames I did delete the old /var/dcc/map and copied in the new map.txt and then ran cdcc 'new map'. What else am I suppoed to do? TIA -- -Time flies like the wind. Fruit flies

[SAtalk] Has anyone written rules for Sobig:F

2003-09-13 Thread Steven W. Orr
that I can just add? TIA -- -Time flies like the wind. Fruit flies like a banana. Stranger things have - -happened but none stranger than this. Does your driver's license say Organ -Donor?Black holes are where God divided by zero. Listen to me! We are all- -individuals! What if this weren't a hy

Re: [SAtalk] Has anyone written rules for Sobig:F

2003-09-12 Thread Steven W. Orr
On Friday, Sep 12th 2003 at 15:49 -0500, quoth Larry Rosenman: =>--On Friday, September 12, 2003 09:11:10 -0400 "Steven W. Orr" =><[EMAIL PROTECTED]> wrote: => =>> that I can just add? =>> =>> TIA => =>add a virus scanner. => =>LER Ok. Let

[SAtalk] Has anyone written rules for Sobig:F

2003-09-12 Thread Steven W. Orr
that I can just add? TIA -- -Time flies like the wind. Fruit flies like a banana. Stranger things have - -happened but none stranger than this. Does your driver's license say Organ -Donor?Black holes are where God divided by zero. Listen to me! We are all- -individuals! What if this weren't a hy

Re: [SAtalk] I want SA to handle mailinglists. Need some creativity here.

2003-09-07 Thread Steven W. Orr
On Sunday, Sep 7th 2003 at 10:02 -0700, quoth Bart Schaefer: =>On Sun, 7 Sep 2003, Steven W. Orr wrote: => =>> If someone sends *me* a copy of Sobig:F I catch it as spam just fine. =>> But if it's sent to listaddr, then it comes in with no processing from =>> SA. Wh

Re: [SAtalk] I want SA to handle mailinglists. Need some creativity here.

2003-09-07 Thread Steven W. Orr
On Sunday, Sep 7th 2003 at 12:39 +0200, quoth Carlo Wood: =>On Sat, Sep 06, 2003 at 11:54:22PM -0500, Bill Polhemus wrote: =>> What's the problem with just putting =>> =>> *: =>> =>> In your ALIASES file? => =>That would catch all mail with an unknown To: field, =>not with unsubscribed 'From:'

[SAtalk] I want SA to handle mailinglists. Need some creativity here.

2003-09-06 Thread Steven W. Orr
I'm running 2.55 SA with spamass-milter. I have lots of spam that's targeted to mailinglist addresses. The people on those lists never see it because the list prevents nonsubscribers from posting. But the mail does get accepted by sendmail before the list manager (in this case Majordomo2) bounc

[SAtalk] Just cvt'd to spamass-milter.

2003-09-05 Thread Steven W. Orr
It seems to be working fine but I have a couple of questions: 1. Every message seems to have this generated in my syslog: Sep 5 13:09:31 saturn spamd[21068]: Still running as root: user not specified with -u, not found, or set to root. Fall back to nobody. Sep 5 13:09:31 saturn spamd[21068]:

[SAtalk] Question about how to make *ALL* mail go through SA.

2003-09-03 Thread Steven W. Orr
I have a majordomo2 manager running. Spam comes in and goes to me and it goes through procmail and spamassassin. All is good in the world. The problem is that mail comes in bound for a list address and then it doesn't go through SA. I'm hooked up via /etc/procmailrc: DROPPRIVS=yes :0fw * < 256

[SAtalk] Question about what users get their mail processed through SA

2003-08-01 Thread Steven W. Orr
I just noticed that while all *my* mail is getting processed via SA, I believe that mail being sent to mailinglists on my machine are not. My /etc/procmailrc says: DROPPRIVS=yes :0fw * < 256000 | spamc But there is no specific user associated with a mailing list. 1. Is this why mail is

Re: [SAtalk] Performance with large whitelists ?

2003-07-31 Thread Steven W. Orr
On Thursday, Jul 31st 2003 at 14:24 +0100, quoth Nick Leverton: =>I'v been reading with interest the recent thread on regular expression =>performance. Has anyone ever done any performance figures on, for =>instance, large whitelists though ? A client of ours wants to whitelist =>all their re

Re: [SAtalk] How to remove an rbl from SA?

2003-07-28 Thread Steven W. Orr
On Monday, Jul 28th 2003 at 10:07 -0400, quoth Matt Kettler: =>At 12:04 AM 7/28/2003 -0400, Steven W. Orr wrote: =>>This is an rbl that IMNSHO should *not* be used by anyone unless they =>>deliberately want to block all clients of uunet. I know of which I speak. => =>as a si

[SAtalk] How to remove an rbl from SA?

2003-07-27 Thread Steven W. Orr
I seem to be getting a number of false positives because of ipwhois.rfc-ignorant.org This is an rbl that IMNSHO should *not* be used by anyone unless they deliberately want to block all clients of uunet. I know of which I speak. Can someone tell me how to shut it off? TIA -- -Time flies lik

[SAtalk] Question about using SA with DCC

2003-07-20 Thread Steven W. Orr
I currently have razor installed for use by SA. I'd like to also add DCC. Do I have to do anything once I install DCC to make SA know that it's there? Do I just reinstall SA or is there more? Or do I even have to do that? TIA -- -Time flies like the wind. Fruit flies like a banana. Stranger t

Re: [SAtalk] China

2003-07-17 Thread Steven W. Orr
On Sunday, Jul 13th 2003 at 16:52 -0400, quoth Joe Nicholson: =>I just started using spamassassin via Saproxy. It's great. Much of my spam =>comes from china (chinanet etc..) ISP's whos IP addresses resolve to .cn =>domains. Is there any way to set this as an item to be tested and marked. I =>g

Re: [SAtalk] Re: Need a procmail recipe to redirect spam.

2003-07-15 Thread Steven W. Orr
On Monday, Jul 14th 2003 at 22:12 -0500, quoth Fuzzy Fox: =>Abigail Marshall <[EMAIL PROTECTED]> wrote: =>> =>> Try putting the recipe that is in your personal .procmailrc at the end =>> of the main /etc/procmailrc - then the mail will be sent to the =>> $SUSPECT file BEFORE going to your individu

[SAtalk] Redux: Need a procmail recipe to redirect spam. :-(

2003-07-14 Thread Steven W. Orr
Donor?Black holes are where God divided by zero. Listen to me! We are all- -individuals! What if this weren't a hypothetical question? steveo at syslang.net -- Forwarded message -- Date: Sun, 13 Jul 2003 18:41:50 -0400 (EDT) From: Steven W. Orr <[EMAIL PROTECTED]> To: s

[SAtalk] Need a procmail recipe to redirect spam.

2003-07-13 Thread Steven W. Orr
I have an account on my server for myself and for my wife. There is the typical /etc/procmailrc to get us started: DROPPRIVS=yes :0fw * < 256000 | spamc I have a recipe in my personal .procmailrc that looks for X-Spam-Flag: :0: * ^X-Spam-Flag: $SUSPECT The problem is that my wif

[SAtalk] Now that I've trapped my spam, how do I report it?

2002-11-05 Thread Steven W. Orr
I've been using spamcop. They do good job, but it's tedious. I found ricochet by Vipul, but I was wondering if anyone is using something else. (I couldn't find anything.) Ricochet works, but I suspect it's not doing as good a job as spamcop. Anyone have any suggestions? TIA -- -Time flies li

Re: [SAtalk] Yahoo and hotmail are all tagged as spam.

2002-07-11 Thread Steven W. Orr
On Thu, 11 Jul 2002, Mike Burger wrote: =>You could put yahoo.com and hotmail.com into your whitelist. => =>On Thu, 11 Jul 2002, Steven W. Orr wrote: => =>> When people send me mail from these domains, they have ads added to the =>> end opf their messages, which SA pic

[SAtalk] Yahoo and hotmail are all tagged as spam.

2002-07-11 Thread Steven W. Orr
When people send me mail from these domains, they have ads added to the end opf their messages, which SA picks up as spam. Anyway to prevent this from happening? -- -Time flies like the wind. Fruit flies like a banana. Stranger things have - -happened but none stranger than this. Does your dri