Re: [SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Brian Godette
Maybe they'll start writting in Middle English to target that untapped market of english lit majors/grads. On Friday 30 January 2004 08:55 am, Matt Kettler wrote: > Today I got an interesting form of obfuscation, apparently to avoid > antidrug.cf. > > I'm not sure wether to bother with adding rul

[SAtalk] Help needed with url rule

2004-01-15 Thread Brian Ipsen
thing).(com|net|org|info)?rid=[0-9]{1,5} ??? Regards /Brian --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in An

Re: [SAtalk] Spamwriter

2004-01-15 Thread Brian May
Greg, please don't think that you know everything... SBC DSL FAQ states: Question: Can I run dedicated servers with DSL Internet access service? Answer: Answer last updated: 05-02-02 Yes, as long as you have a static IP address. The best part of DSL Internet access service is that the larg

Re: [SAtalk] Spamwriter

2004-01-15 Thread Brian Godette
Yes but if you start comparing prices between companies that offer basic no-frills consumer DSL as well as "business class" DSL where the only difference is no blocked ports and maybe a handfull of IP's, you'll notice Speakeasy's Residential no-frills consumer DSL with dynamic IP starts at abou

[SAtalk] HEh...

2004-01-14 Thread Brian May
Thought this was a little humorous... Habeas is Misusing their own mark? - Content preview: Thank you for your email to Habeas! This message has been automatically generated in response to your email regarding "Habeas Misuse", a summary of which appears below. There is no

Re: [SAtalk] New HTML spam body obfuscation.

2004-01-13 Thread Brian Godette
On Tuesday 13 January 2004 03:23 pm, Rose, Bobby wrote: > Why even allow javascript embedded emails? > One could say the same about HTML emails. Think about the target MUA of spam; Outlook Express. This type of spam would only work on O/OE or any MUA that used a JS capable HTML renderer to displ

[SAtalk] New HTML spam body obfuscation.

2004-01-13 Thread Brian Godette
This is a new one to me, seems the spammers are starting to learn javascript now. I suppose a rule for detecting document.write() usage could be used as a spam-sign. --- spam body --- registry = new Array(182, 179,76,60,26,233,201,167,222,59,117, 232,106,241,81,111,6,134,45,149,103, 231,156,105

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Brian May
. but will in the future) It is not in the spammers financial future to use the habeas mark.. Brian - Original Message - From: "Gerry Doris" <[EMAIL PROTECTED]> To: "Morris Jones" <[EMAIL PROTECTED]> Cc: "Spamassassin talk list" <[EMAIL

Re: [SAtalk] Low score for so many hits?

2004-01-13 Thread Brian May
Not the Habeas topic... it all the rave now... all the kids are talking about it.. :) But yes, sometimes the little topics squeek by... but not the major ones... Brian - Original Message - From: "Carl Chipman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sen

[SAtalk] filter suggestions

2004-01-12 Thread Brian McGroarty
What's the proper way to suggest a new filter to the SA developers? I'm getting a TON of mail with a bunch of random uncommon-but-real words to thwart Bayesian filtering, combined with a single picture link. Spamassassin is giving these only about one point apiece. The picture link never seems to

Re: [SAtalk] Low score for so many hits?

2004-01-12 Thread Brian May
Because that would destroy the Habeas idea.. all I did was nuke the URL in the message.. pharmwhavetersomthing.biz and I have caught every single one of them. Disabling the Habeas is not the correct thing to do.. but you can do whatever you want.. Brian - Original Message - From

Re: [SAtalk] Your threshold score

2004-01-12 Thread Brian May
any thing above 4.1 is spam 4.1 to 5 goes to one folder to check for FN 5+ to 12 goes to another folder for checking 12+ to 25 goes to yet another folder... 25+ gets auto reported to razor and like... after all spam that scored under 25 get s a manual inspection then fed to razor and bayes.. all

Re: [SAtalk] habeus

2004-01-12 Thread Brian May
Here is the partial Auto Reply from Habeas.. where they tell you that they most likely will not reply back to you, but will go after the abuser.. Thank you for your report of spam containing the Habeas headers. [snip] With respect to spam containing our headers: Please know that at Habeas we take

[SAtalk] Spam links with remove ID ?

2004-01-11 Thread Brian Ipsen
ck is working, but I assume adding RBL check for e.g. china.blackholes.us would be the thing to do - but I assume this checks all IP adresses the mail has passed through - and not just the originating one ? Anyone ? /Brian --- This SF.net e

RE: [SAtalk] RCVD_IN_DYNABLOCK,RCVD_IN_SORBS in 2.61 when sending myself a test message?

2004-01-06 Thread Brian Sneddon
> -Original Message- > From: Dallas L. Engelken [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 06, 2004 9:59 AM > To: Brian Sneddon; [EMAIL PROTECTED] > Subject: RE: [SAtalk] RCVD_IN_DYNABLOCK,RCVD_IN_SORBS in 2.61 > when sending myself a test message? > >

RE: [SAtalk] Perl error?

2004-01-06 Thread Brian Sneddon
extent of my perl debugging ability. > > Thanks ahead. > > And I hope this is not on the first page of the docs. Nope... Even worse than that... It's in the FAQ. :) http://wiki.spamassassin.org/w/RazorInsecureDependency See if that helps. Brian > > -- > Michael H. Coll

RE: [SAtalk] RCVD_IN_DYNABLOCK,RCVD_IN_SORBS in 2.61 when sending myself a test message?

2004-01-06 Thread Brian Sneddon
unning SpamAssassin is using a private or global IP address. SpamAssassin performs intelligent checks of the headers and when properly configured will not result in the false-positive originally mentioned. Brian --- This SF.net email is spo

RE: [SAtalk] RCVD_IN_DYNABLOCK,RCVD_IN_SORBS in 2.61 when sending myself a test message?

2004-01-06 Thread Brian Sneddon
helpful in troubleshooting your problem. Thanks. Brian > -Original Message- > From: Mitch (WebCob) [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 06, 2004 3:10 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] RCVD_IN_DYNABLOCK,RCVD_IN_SORBS in 2.61 > when sending myself a te

RE: [SAtalk] SA - flag some, delete some

2004-01-02 Thread Brian Sneddon
Check the documentation on spamass-milter, specifically the -r parameter which lets you reject mail that scores at or above a specific threshold.   Brian From: Jim Viton [mailto:[EMAIL PROTECTED] Sent: Friday, January 02, 2004 12:14 PMTo: [EMAIL PROTECTED]Subject: [SAtalk] SA - flag

RE: [SAtalk] Rule to block Paris Hilton spam

2003-12-31 Thread Brian Sneddon
Wont that \n at the end of the regex match virtually ALL mail? Brian -Original Message- From: Jennifer Wheeler [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 31, 2003 12:06 PM To: 'Chris Santerre'; [EMAIL PROTECTED] Subject: RE: [SAtalk] Rule to block Paris Hilton sp

[SAtalk] Postfix and Spamassasin

2003-12-30 Thread Atkins, Brian
nf that it refers to and I am not at liberty to open a hole in our firewall to talk to razor... Any other related documentation out there or hint/tips/suggestions? Brian --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert i

RE: [SAtalk] Sendmail line

2003-12-27 Thread Brian Sneddon
spamass.sock is a UNIX socket and will be created automatically when you start the milter. Brian -Original Message- From: Robt. Miller [mailto:[EMAIL PROTECTED] Sent: Saturday, December 27, 2003 2:17 PM To: [EMAIL PROTECTED] Subject: [SAtalk] Sendmail line I installed Spamassassin

RE: [SAtalk] spamd dying without complaint

2003-12-24 Thread Brian Sneddon
Try starting spamd with the -D option which will generate debug information. That should help you find where it's crashing. Brian -Original Message- From: Sean Kirkpatrick [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 24, 2003 1:30 PM To: [EMAIL PROTECTED] Subject: [SAtalk]

RE: [SAtalk] no content in the subject

2003-12-23 Thread Brian Sneddon
Have you tried: header BLANK_SUBJECT Subject =~ /^$/ That should do it. Brian -Original Message- From: George [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 23, 2003 4:14 PM To: [EMAIL PROTECTED] Subject: [SAtalk] no content in the subject Hello list! Can someone show

[SAtalk] Blacklist bounce problem

2003-12-18 Thread Brian Horncastle
x27;m then getting bounces of the bounces. My question is... Is it possible to discard such emails instead of bouncing? If so, how would one go about this? Any online tutorials or a push in the right direction would be appreciated. Than

RE: [SAtalk] SpamAssassin and SendMail

2003-12-17 Thread Brian Sneddon
idy up the installation instructions I wrote and make them available. Brian -Original Message- From: Kang , Joseph S. [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 17, 2003 10:27 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] SpamAssassin and SendMail > Sendmail is and MTA not a M

RE: [SAtalk] SpamAssassin with Sendmail and spamass-milter (probl em finally solved)

2003-12-13 Thread Brian Sneddon
dding the required macro to the Sendmail config, or modifying the SpamAssassin code to accept (but not store) whitespace before the newline character. Brian -Original Message- From: Brian Sneddon [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 4:42 PM To: [EMAIL PROTECTED] Subject: [SAtal

[SAtalk] SpamAssassin with Sendmail and spamass-milter

2003-12-12 Thread Brian Sneddon
ssed manually yet does not work when the email is passed through the milter (and the pseudo Received: header added) I still suspect the problem may be with parsing spamass-milter's psuedo header, but I've been unable to determine for sure after looking at SpamAssassin's h

RE: [SAtalk] Batching files with spamc

2003-12-11 Thread Brian Sneddon
The default is for spamd to spawn multiple processes. The -m flag is used to limit the max number of processes that will be spawned. Brian -Original Message- From: Pedro Sam [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2003 1:29 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk

RE: [SAtalk] Being BigEvil inspired...

2003-12-05 Thread Brian Ipsen
_HTML_NO_CHARSET,MIME_HTML_ONLY,MY_OBFUJ,MY_OBFUT,MY_OBFUX, MY_OBFUZ autolearn=no version=2.60 So it should be 2.60 ... Regards, /Brian --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen yo

[SAtalk] Being BigEvil inspired...

2003-12-05 Thread Brian Ipsen
rated SpamLinks_1 score SpamLinks_1 3.0 But incoming messages encoded in Base64 containg links with the above domains are not recognized ?? Why ?? Regards, /Brian --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in

[SAtalk] Way to disable auto-learn for messages with specific subject lines?

2003-11-25 Thread Brian Knittel
sassin, but I'd like to keep things as they are, if possible. Thanks, Brian Knittel =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- _| _| _| Brian Knittel _| _| _| Quarterbyte Systems, Inc. _| _| _| Tel: 1-510-559-7930 _| _| _| Fax: 1-510-525-6889 _| _| _| Email: [EMAIL PROTECTED] _| _| _| h

Re: [SAtalk] Bayes & speed.

2003-11-20 Thread Brian Godette
On Thursday 20 November 2003 03:02 pm, Mike Kuentz (2) wrote: > I can find it. I'm talking about going from 10 seconds to process a > message without bayes and is now up to a minute to do it with Bayes in. Could you give some specs on cpu speed, amount of memory, drives (ide/scsi/ rpm), maximum n

Re: [SAtalk] Proposal for a delete option to spamc

2003-11-18 Thread Brian Godette
This functionality already exists in several milters that call or integrate SA directly, namely MIMEDefang, the various Amavis based milters, IVS Milter, and MailScanner. However if such were to be built into spamc it would have to much more flexable than simple yes/no deletion (what about those

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Brian Godette
On Monday 17 November 2003 01:29 pm, Bart Schaefer wrote: > On Mon, 17 Nov 2003, Brian Godette wrote: > > On Monday 17 November 2003 11:22 am, Bart Schaefer wrote: > > > :0 c : $HOME/.sa$LOCKEXT > > > > > > * ^X-Spam-Checker-Version:.*-$SAVERSION > &

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Brian Godette
On Monday 17 November 2003 11:22 am, Bart Schaefer wrote: > My solution is this little bit of procmail: > :0 c : $HOME/.sa$LOCKEXT > > * ^X-Spam-Checker-Version:.*-$SAVERSION > * ^X-Spam-Status: Yes.*autolearn=ham > > | sa-learn --forget > > Replace $SAVERSION with whatever appears in your version_

Re: [SAtalk] autolearn ham ?!

2003-11-17 Thread Brian Godette
On Monday 17 November 2003 08:16 am, Michael V. Sokolov wrote: > I've noticed message with such headers: > > X-Spam-Flag: YES > X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on > antispam X-Spam-Level: ** > X-Spam-Status: Yes, hits=6.0 required=5.0 tests=BAYES_99 autolearn=ha

[SAtalk] Changed spammer technique ?

2003-11-09 Thread Brian Ipsen
a more intelligent way to specify, that mails from the outside couldn't be sent into my system, claiming to be from my own domain)?? Regards /Brian --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsth

[SAtalk] Patterns and load, progress???

2003-11-05 Thread Brian Kerhin
s LOW and image content is there.   Can this be built into spamassassin or something else?  How are you all dealing with this?   Thanks, Brian

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Brian Sneddon
Examining the code of spamass-milter it does appear that each header ends with \r\n as it should. From what I can see in Received.pm though the regexs aren't anchored to the end of line nor do they specify a specific end of line format. Brian -Original Message- From: [EMAIL PROT

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Brian Sneddon
7.0 trusted? No While running spamd with debugging enabled does not show the header as being parsed and therefore I don't believe it checks the IP against Dynablock. As for why it's not parsing properly I'm not sure. I've tried both the new and old versions of spamass

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Brian Sneddon
output when the email was processed by spamd with debugging turned on. -Original Message- From: Brian Sneddon [mailto:[EMAIL PROTECTED] Sent: Monday, November 03, 2003 11:36 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] RCVD_IN_DYNABLOCK FP? I'm running SpamAssassin 2.60 on a p

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Brian Sneddon
The only trusted network should be that of mail-gateway.metrologic.com which is my MTA. Katie.darklegacies.com is a host on a dynamic IP which is not a trusted host. Therefore I would expect mail submitted to my MTA from katie.darklegacies.com to match DYNABLOCK, yet it does not. Brian

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Brian Sneddon
ies.com (8.12.9/8.12.9/Submit) with ESMTP id hA3GIPq0087830 for <[EMAIL PROTECTED]>; Mon, 3 Nov 2003 11:18:25 -0500 (EST) (envelope-from [EMAIL PROTECTED]) Date: Mon, 3 Nov 2003 11:18:25 -0500 (EST) From: Brian <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: testing Me

[SAtalk] Installation probs - make test fails...

2003-11-02 Thread Brian Ipsen
y hints on what could be the problem ?? Regards, Brian --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help Y

[SAtalk] Installation probs - make test fails...

2003-10-30 Thread Brian Ipsen
y hints on what could be the problem ?? Regards, Brian --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help Y

RE: [SAtalk] 0 messages

2003-10-27 Thread Brian Sneddon
Hi, Mark. These aren't messages that you've already fed to the Bayesian classifier, are they? Once it learns a message feeding it through again wont cause it to learn it again. Brian -Original Message- From: Mark Beckwith [mailto:[EMAIL PROTECTED] Sent: Monday, October 27,

[SAtalk] SpamAssassin thinks there's insufficient ham

2003-10-27 Thread Brian Sneddon
mAssassin 2.60 on RedHat 9.0. perl-DB_FILE is installed. Any thoughts? Brian --- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and hel

[SAtalk] Use of unitialized value in Bayes.pm

2003-10-23 Thread Brian Kraemer
ined in some instances. What is the proper thing to do when $1 is undefined? Return out of the subroutine? -Brian --- This SF.net email is sponsored by OSDN developer relations Here's your chance to show off your extensive product knowledge We

RE: [SAtalk] strange behavior of Bayesian analyzer in SA 2.6

2003-10-18 Thread Brian Sneddon
For the record I also began noticing many more 100% Bayesian matches after upgrading from 2.55 to 2.6. So far it hasn't resulted in any false positives that I'm aware of, but it has left me feeling slightly uneasy. Brian -Original Message- From: Ben Wing [mailto:[EMAIL PROTEC

RE: [SAtalk] Re: RCVD_IN_DYNABLOCK

2003-10-17 Thread Brian Sneddon
Out of curiosity, what method do you use to feed your email into SpamAssassin? Do you use a milter with Sendmail, procmail, et al.? Brian -Original Message- From: Daniel M. Drucker [mailto:[EMAIL PROTECTED] Sent: Thursday, October 16, 2003 3:11 PM To: [EMAIL PROTECTED] Subject: [SAtalk

RE: [SAtalk] RCVD_IN_DYNABLOCK

2003-10-16 Thread Brian Sneddon
ISP's mail server, though I too am seeing a problem with some emails matching the DYNABLOCK rule despite being sent through their ISP's mail server. I had to go ahead and rescore the rule down to .1 because it was causing too much trouble (but I do want to see when it matches for diagnost

Re: [SAtalk] Failed to parse line in SpamAssassin configuration

2003-10-16 Thread Brian Morrison
Mail::SpamAssassin::Conf some of the configuration options have changed, I had to change report_header myself -- Brian Morrison bdm at fenrir dot org dot uk --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net

[SAtalk] Re: SpamAssassin Site-Wide "off by default" in USAGE document

2003-10-15 Thread Brian Nath
tered except for users A and B...a way of rolling it as suggested in the usage document. <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > That would depend on where you put the call to spamassassin. and how you > integrate SA into your mail system. > > Brian Nath

Re: [SAtalk] Spamassassin updates

2003-10-15 Thread Brian Morrison
ools.rpm perl-Mail-SpamAssassin.rpm, then all dependencies are settled in one go. -- Brian Morrison bdm at fenrir dot org dot uk --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See t

[SAtalk] SpamAssassin Site-Wide "off by default" in USAGE document

2003-10-14 Thread Brian Nath
xactly is the best way to turn it "off by default" and then allow filtering on just [EMAIL PROTECTED]?   -Brian  

Re: [SAtalk] [RD] Evil rules HUGE update!

2003-10-10 Thread Brian Morrison
replaced when the real released package is installed. -- Brian Morrison bdm at fenrir dot org dot uk pgp0.pgp Description: PGP signature

Re: [SAtalk] RE: blacklist_to

2003-10-10 Thread Brian Morrison
e ignorance. It's in the tarball... -- Brian Morrison bdm at fenrir dot org dot uk pgp0.pgp Description: PGP signature

Re: [SAtalk] Spamd problems with big loads

2003-10-08 Thread Brian Morrison
On Wed, 8 Oct 2003 13:45:54 -0500 (CDT) in [EMAIL PROTECTED] "Robert A. Hayden" <[EMAIL PROTECTED]> wrote: > A few things I can recommend that speed things up: > > 1) Turn off RBL lookups How much additional spam did you want to have to look at? -- Brian Morrison

[SAtalk] resending mail wiht different clients.

2003-10-06 Thread Brian Dial
this cause sa-learn, and razor reporting to behave differently? Thanks Brian --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk

Re: [SAtalk] fold_headers broken in 2.60

2003-09-29 Thread Brian Morrison
der is changed to : . End result, blank mail, because the MIME boundaries in the body don't match the boundary definition in the header any more. Not sure who to report this bug to within whoever is now responsible for InterMail. -- Brian Morrison bdm at fenrir dot org dot uk pgp0.pgp Description: PGP signature

Re: [SAtalk] razor

2003-09-23 Thread Brian Morrison
On Tue, 23 Sep 2003 17:38:48 +0100 in [EMAIL PROTECTED] "Brian Morrison" <[EMAIL PROTECTED]> wrote: > Will try again with the latest Razor patch in the 2.60 release version > of SA. Razor now patched correctly with contents of 2.60 Razor2.patch file, SA now returning Razo

Re: [SAtalk] razor

2003-09-23 Thread Brian Morrison
On Tue, 23 Sep 2003 09:30:39 +0100, Brian Morrison wrote: >On Tue, 23 Sep 2003 07:55:37 +0200 in >[EMAIL PROTECTED] Antoine Jacoutot ><[EMAIL PROTECTED]> wrote: > >> OK, here is my complete log; it does show lines about razor, but >> there's nothing in my razor

Re: [SAtalk] Cannot Change scores in SA Proxy -- HELP

2003-09-23 Thread Brian Morrison
y does not yet have 2.60 SA code in it AFAIAA. -- Brian Morrison [EMAIL PROTECTED] do you know how far this has gone? just how damaged have I become? 'Even Deeper' by

Re: [SAtalk] razor

2003-09-23 Thread Brian Morrison
/razor-agent.log was last written to on September 12th. This was the date I installed SA 2.60-rc4, so something has stopped calling razor AFAICS. Is this the Perl taint code effect? -- Brian Morrison bdm at fenrir dot org dot uk pgp0.pgp Description: PGP signature

Re: [SAtalk] SA and tagging/removing

2003-09-17 Thread Brian Morrison
ain, so false positives can and do occur. If you delete the mail then, no possibility to recover it again. -- Brian Morrison [EMAIL PROTECTED] do you know how far this has gone? just how damaged have I bec

Re: [SAtalk] [SAdev] SpamAssassin 2.60 rc5 released

2003-09-16 Thread Brian Morrison
spec file, updated the rpms, identifies as 2.60-rc4 AFAICS. Slip up,or maybe I'm still running rc4 and the rpm -U failed? -- Brian Morrison bdm at fenrir dot org dot uk pgp0.pgp Description: PGP signature

Re: [SAtalk] user_prefs file creation error

2003-09-16 Thread Brian Morrison
also tried to create the file first but still got same > error. Are you using spamd with the -x argument? If so that might prevent the creation of user prefs. I get the same error here when running sa-learn but it does not stop SA working for me. spamc is called by exim running as user 'mail'

[SAtalk] Request: dealing with messages where a duplicate Message-ID is already learnt as spam

2003-09-14 Thread Brian Morrison
or sa-learn --spam. If the Message-ID is already learnt as spam I'd like to be able to modify the filter to bin the spam and then I need not review these messages. -- Brian Morrison bdm at fenrir dot org dot uk .mimetmp Description: PGP signature pgp0.pgp Description: PGP signature

Re: [SAtalk] System goes down

2003-09-02 Thread Brian Godette
Your system is being killed by Linux's OOM killer. The OOM killer in 2.4 series doesn't appear to be all that bright and I have had it kill init in the past which results in what you describe (pings but services down). You basically have two options, either add more memory or limit the number of

[SAtalk] Qmail-scanner + SpamAssassin / domain-specific filters/databases

2003-08-27 Thread Brian Ipsen
esian database - and maybe own customized filters. The problem is, that the domain is not hosted locally on the box running SA and QS - but are relayed to the respective right mail-servers (the box with SA and QS acts only as a anti-virus and spam-identification box). Anyone

Re: [SAtalk] Re: [Exim] listed at relays.osirusoft.com (fwd)

2003-08-27 Thread Brian May
Yea.. I guess if I didn't get email for an hour I would wonder whats up.. but you gotta wonder about the people who start to wonder after a few days... heh.. On Tue, 2003-08-26 at 20:34, Simon Byrnand wrote: > > By all means do it! :) ... but it won't help that there are still > > servers > > t

Re: [SAtalk] Re: [Exim] listed at relays.osirusoft.com (fwd)

2003-08-27 Thread Brian May
By all means do it! :) ... but it won't help that there are still servers that use the rbl directly from sendmail or postfix and the like.. :( - Original Message - From: "Justin Mason" <[EMAIL PROTECTED]> To: "Larry Rosenman" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECT

[SAtalk] FTC blocks spam sent to the reporting spam address...

2003-08-26 Thread Brian May
I though this was freaking funny... I've been reporting spam to the UCE address for over 6 months, then today I get this (over 200 of them) <[EMAIL PROTECTED]>: host arcticfox.ftc.gov[164.62.7.14] said: 550 5.7.1 <[EMAIL PROTECTED]>... Rejected:< mydlsIP> listed at dialups.relays.osirusof

[SAtalk] Filter creation ?

2003-08-25 Thread Brian Ipsen
k out this Limited Time Offer: http://pharma-wholesale.24hhosting.com/ [Mail Body Quote off] I assume you need to check for the V-word ;-) - assuming, that the spammers might put a space, a star or a '-' between the letters... What would such a rule look like

[SAtalk] using SSL with -R/usr/local/lib

2003-08-24 Thread Brian C Hill
Where is the best place to configure this? Brian --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at

[SAtalk] Statistics ?

2003-08-24 Thread Brian Ipsen
? Regards, /Brian --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http

[SAtalk] Spam filters compared

2003-08-24 Thread Brian Read
Seen this? http://freshmeat.net/articles/view/964/ SA comes out pretty well, although it was run without the bayes db. Cheers Brian -- Brian J Read www.abandonmicrosoft.co.uk www.theonlineorganiser.com www.thepersonalknowledgebase.com Moderator for Mitel SMEserver Contributions and Howtos

[SAtalk] spam assassin helps make spam

2003-08-23 Thread Brian Scott
from someone who has received heaps of these emails in recent times. Brian Scott BTW it is impossible for the messages to be generated through any agents installed on my systems. The technical details are complex but no, I do not have a virus on my Macintosh. --

Re: [SAdev] Re: [SAtalk] [RD] new rules for listwashing tokens, ROT-13 etc.

2003-08-18 Thread Brian White
e? What I can see happening, though, is spammers start using a "salt" so that the entire string is effectively random. Brian ( [EMAIL PROTECTED] )

[SAtalk] spamd memory usage ?

2003-08-15 Thread Brian Ipsen
I've raised it to 60 MB now... But do I risk getting more "out of memory" errors with this setting ?? Regards, /Brian --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Por

[SAtalk] bayes files ?

2003-08-14 Thread Brian Ipsen
spamd/.spamassassin/ ?? I'm using SpamAssassin v2.55 Regards, /Brian --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win

[SAtalk] help on makeing my email scanning gateway work

2003-08-04 Thread brian
which is why im writing this)   Any help would be appreciated. I think that since its using this sendmail file to relay that its not getting to procmail to be piped to spamassassin. but how can i fix that?   Brian

Re: [SAtalk] [OT] Interesting results from emporium :)

2003-07-30 Thread Brian Godette
You know that's implying that spammers as "bright" as the average script-kiddie? Isn't that being a bit generous? /tongue in cheek On Tuesday 29 July 2003 03:36 pm, Justin Mason wrote: > yes -- now and again. > > They're not really from Korea and China -- those are open proxies > or rooted machi

Re: [SAtalk] IMAP: Mark as read?

2003-06-30 Thread Brian Klug
hat worked terrific. Thank you! For anyone else interested, heres my .procmailrc line: :0: * ^X-Spam-Status: Yes | formail -I "Status: R" | dmail +Spam Cheers, Brian -- Brian Klug [EMAIL PROTECTED] TYX.NET Webhostin

[SAtalk] IMAP: Mark as read?

2003-06-30 Thread Brian Klug
Hi- I have SA working really well with procmail & IMAP (delivery via dmail). There is only one more thing I would like to do: When spam is moved to the spam folder, I want it automatically marked as read. Is this possible? How? Brian -- Brian Klug [EMAIL PROTECTED] TYX.NET Webhosting $

Re: [SAtalk] Pronouncability of Sender Address

2003-06-25 Thread Brian Godette
From: "Fox Flanders" <[EMAIL PROTECTED]> On Wednesday 25 June 2003 08:30 am, Fox Flanders wrote: > We need a prounouncability test of the sender addresses. If it has a bunch > of ixf38jk3 crud in it, it is more likely to be spam. > The irony is astounding. --

Re: [SAtalk] Everyone running PYZOR read

2003-06-18 Thread Brian Read
http://pyzor.sourceforge.net Thanks for this. When is "pyzor discover" normally run? Cheers Brian Brian J Read www.abandonmicrosoft.co.uk www.theonlineorganiser.com www.thepersonalknowledgebase.com Moderator for Mitel SMEserver Contributions and Howtos: www.contribs.org

[SAtalk] FW: [SPAM] Dept of Homeland Security - New Speaker Added - Cyber - 5June - Arl Va.

2003-06-02 Thread Brian Ipsen
RUSOFT_COM,RCVD_IN_UNCONFIRMED_DSBL,REMOVE_SUBJ,   X_NJABL_DIALUP version=2.55X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) Regards,   /Brian     -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of David DicksonSen

RE: [SAtalk] (no subject)

2003-05-31 Thread Brian K. West
Ok you need to contact your ISP you twit! They are the ones that use spamassassin to filter your email... So contact them bkw -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keoki Kalune Sent: Friday, May 30, 2003 11:00 AM To: [EMAIL PROTECTED] Subject: [

[SAtalk] OCR Software.

2003-05-30 Thread Brian Godette
http://www.claraocr.org/ http://freshmeat.net/ --- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 ___ Spamassassin-tal

RE: [SAtalk] Multiple postings!

2003-05-29 Thread Brian K. West
I had this happen once.. it was spamd messin up. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evan Platt Sent: Wednesday, May 28, 2003 1:09 PM To: Jim Ford; [EMAIL PROTECTED] Subject: Re: [SAtalk] Multiple postings! At 09:43 AM 05/28/2003, you wrote: >

Re: [SAtalk] Base64 Encoded not scanned

2003-02-10 Thread Brian May
I have an older 2.50-CVS build that works pretty well... Looks like its a 01/12/03 version... if you (Dan Kubilos or anyone) is interested.. Brian - Original Message - From: "Tony Earnshaw" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, February 10, 20

Re: [SAtalk] Re: [SAdev] NOTICE: mass-check for 2.50 issue

2003-01-14 Thread Brian May
Why not just make it an option for the mass-check app? - Original Message - From: "Daniel Quinlan" <[EMAIL PROTECTED]> To: "Justin Mason" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, January 14, 2003 1:03 PM Subject: [SAtalk] Re: [SAdev] NOTICE: mass-che

[SAtalk] FW: [expert] Spamassassin + CommuniGate Pro config

2003-01-12 Thread Brian York
    -Original Message- From: Brian York [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 3:12 PM To: '[EMAIL PROTECTED]'; 'RedHat Psyce list ([EMAIL PROTECTED])' Subject: [expert] Spamassassin + CommuniGate Pro config   If anyone is usi

Re: [SAtalk] Deersoft acquisition (thumbs down)

2003-01-07 Thread Brian May
One could argue that the whole point of open source it to use the community to build and test your app.. then sell the product. Deersoft did it.. Cloudmark did it... the only difference, Deersoft sold the company. I understand that the developers need to eat and what not... but I feel like I was

Re: [SAtalk] Return Spam to Sender

2003-01-06 Thread Brian May
Let me be on of many to say, that it's a bad idea. Most spam addresses are fake, and at best, you send it to an email address that is valid, but didn't send the spam. And you create more useless net traffic. It's best to report it to Razor, SpamCop and the like.. or use the trusty Del key... -

[SAtalk] How's 2.50 shaping up?

2003-01-01 Thread Brian Kendig
release-quality? |\/| Brian Kendig Set your priorities right. \ /\ / ..__.brian at enchanter net No one ever said on his \/ \__\ _/ http://www.enchanter.net/ death bed, "Gee, if I'd \__ __ \_ Be insatiably curious.

[SAtalk] Re: [Razor-users] Spam pimping Cloudmark...

2002-12-31 Thread Brian May
Well.. since the list was spam free... I'd call it spam.. - Original Message - From: "Mike Burger" <[EMAIL PROTECTED]> To: "Brian May" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, December 31, 2002

[SAtalk] Re: [Razor-users] Spam pimping Cloudmark...

2002-12-31 Thread Brian May
as an enter.net address, but I've never seen one.. ) Someone is in defense mode.. - Original Message - From: "Jordan Ritter" <[EMAIL PROTECTED]> To: "Brian May" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, De

  1   2   >