Ah, I see now. It's probably the link to exclaimer.co.uk which is a
product that puts boilerplate disclaimers at the end of Exchange 200x
emails. Lawyers love those things. Idunno why it's in there.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[
Upgrade to 1.14.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Arpi
> Sent: Saturday, January 24, 2004 7:29 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] new chicnpox --lint failed
>
> Hi,
>
> After upgrading chichekpox to Version 1.11, spa
laythings\.biz
|exoticsitestevedore\.com|explodeyour\.com|expocard\.rd10\.net)\b/i
describe BigEvilList_72 Generated BigEvilList_72
score BigEvilList_723.0
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Paul Barbeau
> Sent: F
I'll never complain about my old PII-400 taking 8.5 seconds to process a
message through spamd again.
-tom
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Thomas Kinghorn
Sent: Friday, January 23, 2004 4:32 AM
To: Spamassassin-Talk (E-mail)
Su
How is this determined? When a particular individual
send email to me, it picks up the following points for 'pretending to be
outlook' - however the user does use outlook so i am wondering what it is
that makes this a false positive.
3.5 - Forged mail pretending to be from MS
Outlook
0.6
How is this determined? When a particular individual
send email to me, it picks up the following points for 'pretending to be
outlook' - however the user does use outlook so i am wondering what it is
that makes this a false positive.
3.5 - Forged mail pretending to be from MS
Outlook
0.
ia, mexico, nigeria, russia, singapore, taiwan, thailand and
turkey.
-tom
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eric
Sent: Friday, January 09, 2004 9:27 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] Country codes
What are you doing for country co
You forgot the part about the free Blaupunkt car stereos and Sony WEGA
televisions.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of [EMAIL PROTECTED]
> Sent: Wednesday, January 07, 2004 9:05 AM
> To: [EMAIL PROTECTED]
Pyzor and BigEvil nailed both of them. The second one hit a whole ton of
RBLs also.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Geoff Soper
> Sent: Wednesday, January 07, 2004 4:18 PM
> To: Chris Santerre
> Cc: [EMAIL PROTECTED]
> Subject: *
Interesting to me mostly because spamc/spamd by default won't even look
at a 1.2mb email. I'm interested in how/where that happened.
-tom
> -Original Message-
>
> After we upgraded to SA 2.61 as was suggested by this list we
> had a mail-machine crash aga
Start spamd with -D debug options and then tail -f /var/log/maillog
|grep -i bigevil
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of SAtalk Mail User
> Sent: Monday, January 05, 2004 11:04 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] BigEvil.c
of the tests come out that way, counter to what we
would think at first glance.
>
> Secondly, I am recently getting a lot of Spam that uses
> constructs of the following form:
>
> Banned CD Gov
That'll be nailed by Jennifer's Most Excellent Rules.
Popcorn/Backhair/Wee
Before you play with the settings, consider updating to the current
version of SpamAssassin. You're probably using 2.44; the current
version is 2.61. At this point, that much spam getting through would be
expected behavior.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
er style and I'm wondering if it's not an
> issue with upgrade vs clean install.
>
Mine was also an upgrade from Exchange 5.5. Well, it was done as a
swing server upgrade - I introduced the 2000 box into the 5.5 site,
moved all the mailboxes & public folders to t
> -Original Message-
> From: Tony Hoyle [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 18, 2003 8:41 AM
> To: Tom Meunier; AltGrendel; SA-Talk
> Subject: RE: [SAtalk] importing spam from exchange users for sa-learn?
> >
> Interesting... what did you set o
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of AltGrendel
> Sent: Thursday, December 18, 2003 7:54 AM
> To: SA-Talk
> Subject: RE: [SAtalk] importing spam from exchange users for sa-learn?
>
> Wasn't there a big issue with public folders stripp
http://www.wot.no-ip.com/cgi-bin/detoken.pl
Most of the gibberish I see is encoded tracking information. I plugged
in my domain name to the little script thingy, saved the .cf file, and
it catches 'em like crazy.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
>
What would differentiate the proposed public corpus from the public
corpus at http://www.spamassassin.org/publiccorpus/?
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Adam Denenberg
> Sent: Thursday, December 11, 20
Had a conversation with a rather intelligent user of email who had an
inciteful question/remark about sorting his spam.
I thought I would pass it along here as it seemed like a potentially
good idea. Eventually this turns into a request for a code change. I
could do this, but I hate the idea
You'll want to look at http://www.exit0.us/index.php/MaskedWordList
Take a gander at the link to Chris' Mediocre ObfuScript, which is soon
(I hear) to be upgraded to Chris' Somewhat Adequate ObfuScript.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mai
ing cpu cycles and disk
space when you should've 550ed during the conversation". If their users
tolerate it, that's up to them. :|
-tom
---
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firs
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Guentert Matthias
>
> I have successfully installed spamassassin on my linux server which
> runs postfix as mta. Our Exchange 2000 server pops the emails from the
> linux server which stands in th
you have a non-*n?x enterprise mail server that you want
to check incoming mail for? Do you simply have a single mailbox that
you would like to use spamassassin on?
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Tyler Montbriand
>
> -Original Message-
> > IIRC, bl.spamcop.net isn't supposed to resolve. Try running an RBL
> > query against it instead of trying to resolve it.
> >
> >
> Surely it has to resolve to *something* - the NS records have
> gone as well.
>
> Tony
>
No, it doesn't have to. When you que
No. How would this be a bug? By definition it would have to be a
custom rule, since you've specified that it be user-specific and custom
header specific. Such a rule would work for nobody in the universe but
Wolfgang Rohdewald.
-tom
> -Original Message-
> From: [EMAI
e the results of the testing on that corpus.
I think that since you work in an environment that does not tolerate any
mention of the word "v?a?ra" you should score these rules higher in your
local.cf file. That's the beauty of being able to simply put
score ADDRESSES_ON_CD 9
VSNL is, I believe, the largest ISP in India or at least in the top 2.
I'd tread lightly on blocking them if you do business with India at all.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Chris Santerre
> Sent: T
OR2_CF_RANGE_51_100 0 1.552 0 1.101
Narrow those body rules down with ('11','50') and ('51','89') and change
the names. Add a rule for ('90','100') and add a score appropriately.
Like I said, I'm stupid, so test it first. :)
-tom
Example 1. Use spamc/spamd, it defaults to only scanning messages under
250k and you can change that limit with spamc's -s switch.
Example 2. What version of Spamassassin are you running? There's a
whole ton of tests based upon the ratio of image to t
If it's already 100% sure that it's spam, how is it helpful to train it
that it's spam? It's not like it's going to be 110% sure that it's
spam. It's already trained!
Not trying to be a wise-ass, I've just seen this question come up fairly
often,
here a way to work
around this problem i.e. to point explicitly to the newer version of
Parser.pm (in my pricate files) instead of using the installed one.
TIA,
Tom Kuppens
Research group Quantumchemistry
Department of Inorganic and Physical Chemistry WE06V
Ghent University
Krijgslaan 281 - S3,
> Hi there,
> I just installed spamassassin 2.60 and everything worked fine. However I
> to get spamassassin running I need the perl HTML parser 3.24 (or older)
> and on the machine I'm using (and I'm not root and root is not cooperating
> on installing a newer version) 3.21 is installed. Is the
No, but you can enable it if you like. Their web site tells you how.
Just save this text as /etc/mail/spamassassin/something.cf
http://www.ahbl.org/using/spamassassin.txt
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Nigel Featherston
> Sen
_BL_SPAMCOP_NET
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Matt Kettler
> Sent: Tuesday, November 04, 2003 3:19 PM
> To: Steve Heggood; [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Best Blacklists
>
>
>
-m 15 will limit it to 15 spamd instances. Give that a shot.
I'm kinda surprised by how quickly this happens, though.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Dennis Duval
> Sent: Monday, November 03, 2003 5:05 PM
> To: [EMAIL PROTECTED]
John, if you run the email through
Spamassassin -tD -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Stewart, John
> Sent: Monday, November 03, 2003 1:13 PM
> To: '[EMAIL PROTECTED]'
> Subject: [SAtalk] Problems with bayes "forgetting" in 2.60
>
>
Sweet. 27 hours for that to show up. (And looking at headers it's the
ISP anyway, heh)
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Tom Meunier
> Sent: Friday, October 24, 2003 8:47 AM
> To: [EMAIL PROTECTED]
>
Okay, this is the sixth copy of this email that I've gotten. Is it me,
is it sourceforge, or is it maybelline?
(Yeah, I know it's sourceforge, but I wanted to kvetch)
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf O
Even on good mail? Or only on Spam? Because when I see spam, I'm 99%
sure it's spam, and a well-trained Bayes engine would be 99% sure also.
If it's on good mail that you're seeing 99%, every time, then your
database is screwed up and you should start over.
> -Original Message-
> From:
Sorry, I should've left a note. I had brought it to the printers to get
a banner made, and thought I'd take it out for a nice ice cream sundae
too. It's back now, though.
I put it at http://www.spamassassin.org/tests.html
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL
holds are, and I'm
too lazy to go look. :)
header ZZZ_SPAMMER_COM ALL =~ /spammername\.com/i
describe ZZZ_SPAMMER_COM Score spammername.com ridiculously high.
score ZZZ_SPAMMER_COM 98.6
-tom
---
This SF.net email sponsored by: Enterpr
That's right. It seems weird, doesn't it? But basically, that setting
tells SA that the filenames are /usr/local/share/bayes_*
To achieve what you think it should be, you'd want to do bayes_path
/usr/local/share/bayes/bayes - funny as that sounds.
> -Original Message-
> From: [EMAIL P
Train Bayes with sa-learn --ham using a sizable representative sample of the shipping
company's "known good" email.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Håkon Nilsen (Exinet AS)
> Sent: Friday, October 17, 2003 6:21 AM
> To: [EMAIL P
> -Original Message-
>
> I'm Linux SysAdmin at the company I work for, I always
> install everything from source.
> A colleague, a Windows SysAdmin, installs everything on his
> Linux boxes from RPMs.
>
> What does that tell you? :)
>
Tells me we need a larger sample size. I'm a Wind
phy with forged headers, likely to honor their promise to
unsubscribe your users?
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Leon Oosterwijk
> Sent: Tuesday, October 14, 2003 8:28 AM
> To: [EMAIL PROTECTED]
> Sub
-H should list a directory other than the default home directory of the
user that's calling spamc. Else, don't use it at all.
-m5 should be -m 5 I believe.
Other than that, Idunno. Feel free to ignore me.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
Well, it depends. If you run sa-learn and you're concerned that it's
not running, use the --showdots switch and it'll give you a progress
indicator. Just go ahead and sa-learn --ham a couple hundred hams real
quick, it'll start up from there. No further config necessary.
-
YPE_ONLY,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,NORMAL_HTTP_TO_IP,
RCVD_IN_SBL,RCVD_IN_SORBS,T_AM_SPAMMY_SENDER,USER_IN_BLACKLIST,W_ROT13_B
_R
-tom
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 O
statistics output with evilrules.cf, as
I simply "blacklist_from *foo.tld" offending domains to my blacklist.cf
file.
-tom
> -Original Message-
> From: Robert Leonard III [mailto:[EMAIL PROTECTED]
> Sent: Saturday, October 11, 2003 10:09 PM
> To: [EMAIL PROTECTED]
&g
and that actually cut
my spam traffic by over 50% by itself, but again this stuff never gets
learned in Bayes.
Has anyone else juggled these questions?
-tom
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts ov
27;re seeing logged on as root is not
accurate for troubleshooting purposes.
-tom
> -Original Message-
> From: Robert Leonard III [mailto:[EMAIL PROTECTED]
> Sent: Saturday, October 11, 2003 10:13 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Bayes not working.. On System
How do you call SpamAssassin? Please be specific with your answer. :)
If you use spamc/spamd it defaults to only scanning up to 250kb,
configurable with the -s switch. No config file necessary, you set it
as a switch on the line that you call spamc with.
http://www.spamassassin.org/doc/spamc.ht
rough this list I found a reference to a test named
HTTP_ENTITIES_HOST
Yet, I don't see this in the current list of tests on the website. Has it been done
away with? If it has, why?
SA 2.55, Razor 2
--tom wentworth
--
Protect yourself f
that were set up for the site, that might be a nice rule to add to the list.
tom
--
tom satter - just plain old tom
(303) 543-7623 (home)
Matt Kettler said:
> At 12:25 PM 10/9/2003, Eric Vollmer wrote:
>
>>My question is, what is the threshold for subject/body text like
>&
> -Original Message-
> From: O-Zone [mailto:[EMAIL PROTECTED]
> On Wednesday 08 October 2003 13:40, Tom Meunier wrote:
> > (I must be annoying SOMEBODY) Hi Oz, Which
> > machine(s) have spamassassin? I know domini does, but does
> siena also
> > have
(I must be annoying SOMEBODY)
Hi Oz,
Which machine(s) have spamassassin? I know domini does, but does siena
also have spamassassin? That would cause this behavior.
-tom
- headers -
On Wednesday 08 October 2003 13:25, you wrote:
> It's difficult to see because yo
Hi Doug,
The answer to your question varies depending on what version of
SpamAssassin you're using, and what RBL's you're seeing scores on. This
is crucial information to answering your question.
Since this is a well-documented issue with versions before 2.60, I'm
going to assume that, and that y
nce on the already-scanned mail. Perhaps during whatever adds that
funny X-UIDL header. Follow the path that the email's taking between
Internet and final destination, and you'll see the place where the
process breaks down.
It's difficult to see because you're not
Sounds like Postini. Or Messagelabs. postini dot com or messagelabs
dot com.
Messagelabs is using a modified SpamAssassin, iirc.
> -Original Message-
> From: Jonathan Vanasco [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, October 07, 2003 5:23 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk
6 asterisks indicates it's not quite 7.0. Probably 6.9something. You
could add up the scores to verify if you really like, but that's what's
happening.
X-Spam-Level: **
X-Spam-Status: No, hits=7.0 required=7.0
tests=BAYES_10,DATE_IN_PAST_03_06,
HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_RED
So you're saying that when you cut and paste the body of a spam into an
email, removing the spammer's headers, SpamAssassin doesn't rate your
headers as spammy as the spammer's headers? And you include only the
spammy body, and it trips off all the spammy body checks? That's to be
expected, isn't
You need to either upgrade to 2.60 or remove your Osirusoft and orbs
tests tests as specified in the article at http://news.spamassassin.org.
Those blocklists are dead and are waiting until your timeout.
-tom
> -Original Message-
> From: Jim Ford [mailto:[EMAIL PROTECTED]
> Sen
What version of SpamAssassin? You can implement Razor, DCC, RBLs, and
train your Bayes up to 200 each of spam/ham to augment the tools at SA's
disposal.
-tom
> -Original Message-
> From: David M. Carney [mailto:[EMAIL PROTECTED]
> Sent: Monday, October 06, 2003 1:09 P
It's the first option on the list if you type spamd --help
> -Original Message-
> From: Rob Mangiafico [mailto:[EMAIL PROTECTED]
> Sent: Monday, October 06, 2003 1:10 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] spamd and -a option in 2.60?
>
> In the 2.60 docs, the -a "auto whitelis
I've been able to re-discover pyzor servers (and it always winds up with the same
server) and get pyzor working for a couple hours before the "couldn't grok response
'...TimeoutErrors'" begins again. I've disabled Pyzor and just written it off to my
own ignorance. Basically once it starts not
Look, there's a poll for this at
http://news.spamassassin.org/modules.php?op=modload&name=NS-Polls&file=index
Is it inappropriate to suggest that we see who's got the biggest thingy over there?
-tom
---
This sf.net
What to do with a spam that includes this garbage at the bottom, in a hidden font?
Bayes freaked, I'm kinda glad it didn't auto-learn it. I'd rather have the false
negative than that. (Only snipped the Bayes poison from the mail, I think maybe
Mozilla TBird put all the = i
1. It's okay to train with the spam with Spamassassin markup. sa-learn
ignores the markup.
2. It's not okay to train with "this month's sent-mail" - you need to
be training it with mail that reflects the type of mail you GET, not
send. The headers are as c
; option on a customers box today, without avail. It almost
> drove me crazy...
Tools > Options > Email Options > When Forwarding > Attach Original Message.
or from the message editing interface itself:
Insert > Item and browse through your
On Tue, 30 Sep 2003, Scott Rothgaber wrote:
> Mike Carlson wrote:
>
> > What is the best way to kill spamassassin and restart it again after making
> > a change to the local.cf file?
>
> `/usr/local/etc/rc.d/spamd.sh restart' on FreeBSD.
>
> IIRC, this just kills and restarts the daemon. I seem
it's working fine. Anyhow, I do not want to break the POP before
SMTP and the SA SQL user prefs since qmail-scanner passes the user info to SA. All I want next
is SA to pass it to Vexira and Vexira will call qmail's
sendmail for delivery.
Any
Ideas Greatly appreciated!
-Tom
ne. Anyhow, I do not want to break the POP before SMTP and the
SA SQL user prefs since qmail-scanner passes the user info to SA. All I
want next is SA to pass it to Vexira and Vexira will call qmail's
sendmail for delivery.
Any Ideas Greatly ap
ed a few months ago, and no definitive answer was given.
-tom
> -Original Message-
> From: Doug Ledbetter [mailto:[EMAIL PROTECTED]
> Sent: Friday, September 26, 2003 2:12 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Auto-whitelist (AWL) enable/disable?
>
>
> H
Why not just go get 80 spams from the public corpus? It'll be not optimal, but it'll
be better than forcing it with 120.
http://spamassassin.org/publiccorpus/
> -Original Message-
> From: Bill [mailto:[EMAIL PROTECTED]
> Sent: Friday, September 26, 2003 10:45 AM
> To: [EMAIL PROTECTED]
You could probably make some of that happen yourself by implementing some of the
blacklists at http://www.blackholes.us
See http://www.blackholes.us/docs/usage.html#spamassassin for usage info.
-tom
-Original Message-
From: Andrew Thomas [mailto:[EMAIL PROTECTED]
Sent: Friday, September
I think the main thrust of his answer was that Google Is Your Friend.
http://www.gryzor.com/tools/
-tom
> -Original Message-
> From: Jim Knuth [mailto:[EMAIL PROTECTED]
> > First hit after googling for spamstats and perl:
> > http://freshmeat.net/projects/spams
Go check your filesystem rights on those file & directories. That's happened to me
before, and I was waiting for it to happen this time too, and mysteriously, it didn't.
My gateway boxen must be contagious. :)
-tom
> -Original Message-
> From: Steve Heggood [mai
SpamAssassin doesn't block mail. All it does is mark it up for content.
That mail seems to have been marked up for spam content correctly.
Therefore, your problem is not with SpamAssassin but rather with the
product that you've configured to quarantine mail.
> -Original Message-
> From:
ical question #6: Why autolearn only on the
> certainly spam? Most of them already score high on Bayes,
> why not train on the borderlines where bayes could push it
> over the edge? I get a lot of 3.9s and 4.2s with no (or
> little) affecting score from bayes.
To guard against mistakes
en the
one-in-500 that gets through. Honest, Mike. Try it. It may seem counterintuitive,
but it really does work. It's actually quite difficult to hand-construct a spam.
That is expected behavior.
Good luck,
-tom
---
This sf.net emai
It's not abysmal. You just don't understand it. Most people get in
excess of 99% of spam with SpamAssassin. Isn't it great to know that
SpamAssassin is so well geared against false positives that you're
TRYING to send a spammy email and can't do it?
http://www.spamassassin.org/tests.html
Break
Spamstats does that.
http://www.gryzor.com/tools/
> -Original Message-
> From: Markus Gaugusch [mailto:[EMAIL PROTECTED]
> Sent: Monday, September 22, 2003 5:31 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Better logging?
>
> Hi,
> I'm using spamassassin on our relay server (with pos
Oh pooh. Ignore me. Of course Patrick is right; it doesn't support qmail.
> -Original Message-
> From: Tom Meunier
> Sent: Sunday, September 21, 2003 9:51 AM
> To: 'Tomáš Macek'; [EMAIL PROTECTED]
> Subject: RE: [SAtalk] Autodeleting spam based on scor
Why, Google of course!
http://savannah.nongnu.org/projects/spamass-milt/
Yes, it works with qmail.
-tom
> -Original Message-
> From: Tomáš Macek [mailto:[EMAIL PROTECTED]
> Sent: Sunday, September 21, 2003 8:40 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Autodele
Bayes, RBL checks, Razor, DCC, Pyzor.
-tom
> -Original Message-
> From: Ed Greenberg [mailto:[EMAIL PROTECTED]
> Sent: Sunday, September 21, 2003 8:58 AM
> To: spamassassin talk
> Subject: [SAtalk] Really really simple spams - not enough to
> accumulate 4 points
>
n to, "Well, that isn't really optimal, so don't overdo it."
Keep in mind that a "large corpus" is optimal, but the necessary corpus
to get Bayes working is 200 hams & 200 spams.
-tom
> -Original Message-
> From: Ed Greenberg [mailto:[EMAIL PROTECT
no avail as well. Update and perl modules. Checked
all permissions.
Any help would be greatly appreciated!
--
Regards,
Tom
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
SpamAssassin doesn't bounce mail, period. If you want it to bounce mail, please do
so. If you don't, don't. Further documentation in your MTA's man pages.
-tom
> -Original Message-
> From: Regis Wilson [mailto:[EMAIL PROTECTED]
> Sent: Thursday, Se
rk.
I seeing this also. A message I saw on another list earlier today stated
that there seemed to be a bug in the virus that sometimes allowed it to send
its message without the exe. as a result the virus scanners were missing it.
HTH,
--
..Tom Registered Linux User #14522h
>
That'd be like that New Shimmer! It's a virus AND a banned executable attachment! I
have tools designed to deal with both of those, and SpamAssassin isn't one of them.
-tom
---
This sf.net email is sponsored by:ThinkGeek
Absolutely.
www.exit0.us/index.php/VirusBounceRules
among other things.
-tom
> -Original Message-
> From: Ivar Magne Auestad [mailto:[EMAIL PROTECTED]
> Sent: Thursday, September 18, 2003 1:01 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: [SAtalk] Qu
Define "safe" - I stick with the default of 250kb and have never had an issue with it.
I can't see receiving a spam anywhere near that size, that wouldn't also trigger an
attachment blocking rule on my gateway MTA.
-tom
> -Original Message-
> From: Jeff Fun
skip_rbl_checks 1
#even though they're default if installed anyway...
use_razor2 1
use_pyzor 1
use_dcc 1
You've disabled the Osirusoft tests, I hope. Those hit everything on the Internet.
-tom
> -Original Message-
> From: Covington, Chris [mailto:[EMAIL PROTECTED]
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Alan
> Fullmer
> Sent: Wednesday, 17 September 2003 12:31 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] help with master.cf and filter
>
>
> alright, one more question is there any way i can remove t
http://blackholes.us/
> -Original Message-
> From: Peter Kiem [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, September 17, 2003 7:41 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Recognising dynamic rr.com IPs
>
> I'm getting sick of all the spam that comes from rr.com and
> have been b
I think the linked IAB missive is related to this:
http://www.merit.edu/mail.archives/nanog/2003-01/msg00023.html
WTF is Verisign doing anyway? Deciding the Internet is their own private toy? And
everyone in the world is using it at their (verisign's) whim?
-tom
> -Original
"Date: Sat, 25 Jan 2003 10:19:37 +1100"
-tom
> -Original Message-
> http://www.iab.org/Documents/icann-vgrs-response.html
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://
I'm mulling over whether to make some SA rules for some of the more common urban
legends and virus hoaxes. Has anyone played with this, that is willing to share
experiences?
-tom
---
This sf.net email is sponsored by:ThinkGeek
Welco
not
resemble words. Also note that this email has very unusual spacing between words, and
does funny things with the placement of punctuation. It probably confused Bayes.
You'll want to learn it.
For some reason I didn't see the spam header report on this email, so this is all
C, if the headers themselves
don't break any rules.
-tom
> -Original Message-
> From: jpf [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 09, 2003 11:51 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] SA only ran 1 test??
>
> I rec'd the following mai
1 - 100 of 243 matches
Mail list logo
