fwd: [SAtalk] CBL?

2004-01-31 Thread Dan Wilder
- Forwarded message from Dan Wilder <[EMAIL PROTECTED]> - > Return-Path: <[EMAIL PROTECTED]> > X-Original-To: [EMAIL PROTECTED] > Received: from sc8-sf-list2.sourceforge.net (lists.sourceforge.net [66.35.250.206]) > by mail.ssc.com (Postfix) with ESMTP id C8E9A12E

Re: [SAtalk] CBL?

2004-01-30 Thread Dan Wilder
On Thu, Jan 29, 2004 at 11:31:42PM +0100, Kai Schaetzl wrote: > Dan Wilder wrote on Mon, 26 Jan 2004 14:49:36 -0800: > > > This is a highly automated RBL based on some big spamtraps, > > > > I'm finding spamtrap RBLs quite problematic because they list the wrong &

[SAtalk] good tests 0 unjustly

2004-01-28 Thread Dan Jacobson
D> That's the way the scores were optimized. There's no real reason other D> than they were determined to be optimal at 0. D> Duncan Findlay Restoring them for non-bayes me!: awk '$4=="0"&&!/BAYES/{print $1,$2,$3}' \ /usr/share/spamassassin/50_scores.cf >> $HOME/.spamassassin/user_prefs [I'm no

Re: [SAtalk] Help: 2.63 will not compile

2004-01-28 Thread Dan Wilder
hanged to one or more spaces. You might try unpacking again. -- Dan Wilder <[EMAIL PROTECTED]> --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclips

[SAtalk] CBL?

2004-01-28 Thread Dan Wilder
ostly on mail that's also in at least one of SpamCop, DNSBL, SORBS, or Dynablock. It hasn't fired for me so far on anything that came in otherwise below my second sorting threshold of 13, but for those above that, it's maybe one more nail in the c

[SAtalk] SPAMD stops tagging spam?

2004-01-28 Thread Dan O'Brien
Environment is Fedora Core 1 (fully up-to-date w/ patches); SendMail 8.12.10-1.1.1 (Fedora Core RPM); SpamAssassin 2.63; spamass-milter 0.2.0+cvs. This server acts as a filtering relay in front of a Lotus Domino mail server. There are no user preferences. Yesterday, at approximately 5:20pm, m

RE: [SAtalk] stats

2004-01-27 Thread Smart,Dan
I would suggest you use SpamStats from http://www.gryzor.com/tools/ I ran both, and SpamStats reported more of both Spam and Ham. I suspect sa-stats is missing some records. <> | -Original Message- | From: AltGrendel [mailto:[EMAIL PROTECTED] | Sent: Friday, January 23, 2004 11:43

RE: [SAtalk] W32.Novarg.A@mm virus

2004-01-27 Thread Smart,Dan
We are using the script by Nikos Kantarakias called "yet another virus recipe" for Procmail. See http://agriroot.aua.gr/~nikant/nkvir/ Nikos added Novarg this morning. <> | -Original Message- | From: Jon [mailto:[EMAIL PROTECTED] | Sent: Tuesday, January 27, 2004 5:08 AM | To: Ric

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-27 Thread Smart,Dan
iday, January 23, 2004 12:44 PM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | Dan, | | On Fri, 2004-01-23 at 09:04, Smart,Dan wrote: | | > This command works every time from command line, but not | passed as a | > param from SA_RESTART. | > "

[SAtalk] SPAMD stops tagging spam?

2004-01-26 Thread Dan O'Brien
ill be appreciated. Dan O'B /* Sending this a 2nd time... originally sent @ 10:37am EST on Sat 01/15/04 */ Environment is Fedora Core 1 (fully up-to-date w/ patches); SendMail 8.12.10-1.1.1 (Fedora Core RPM); SpamAssassin 2.63; spamass-milter 0.2.0+cvs. This server acts as a filter

[SAtalk] SPAMD stops tagging spam?

2004-01-26 Thread Dan O'Brien
ill be appreciated. Dan O'B /* Sending this a 2nd time... originally sent @ 10:37am EST on Sat 01/15/04 */ Environment is Fedora Core 1 (fully up-to-date w/ patches); SendMail 8.12.10-1.1.1 (Fedora Core RPM); SpamAssassin 2.63; spamass-milter 0.2.0+cvs. This server acts as a filter

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-23 Thread Smart,Dan
each time putting the commands in one at a time in the restart if block, which does work, but passing it as the SA_RESTART parameter would be really nice. <> | -Original Message- | From: Chris Thielen [mailto:[EMAIL PROTECTED] | Sent: Thursday, January 22, 2004 5:18 PM | To: S

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Smart,Dan
Thanks. Will try in the AM. <> | -Original Message- | From: Chris Thielen [mailto:[EMAIL PROTECTED] | Sent: Thursday, January 22, 2004 5:18 PM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | On Thu, 2004-01-22 at 22:57, Smart,Dan wrote: |

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Smart,Dan
need to make sure postfix starts if the SA_RESTART fails. <> | -Original Message- | From: Chris Thielen [mailto:[EMAIL PROTECTED] | Sent: Thursday, January 22, 2004 4:04 AM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | On Thu, 2004-01-22 at 14:

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Smart,Dan
Chris: Great job on the scripts. I have modified the munging on Tripwire (set name to TW) and BigEvil (comment out WXYZ). How do I add these custom munges to my_rules_du_jour? tia <> | -Original Message- | From: Chris Thielen [mailto:[EMAIL PROTECTED] | Sent: Thursday, January 22,

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Dan Kennedy
Try MailScanner. That's what we use. It works well for just relaying mail onto an exchange server. Spamassassin ties into it, and it's pretty easy to configure. http://www.sng.ecs.soton.ac.uk/mailscanner/ -Original Message- From: Dustin O Williams [mailto:[EMAIL PROTECTED] Sent: Wednesd

[SAtalk] URI Rules

2004-01-20 Thread Dan Kennedy
ules won't have any wildcards, just basically a big blacklist of URLs found in SPAM. Thanks! Dan --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse act

Re: [SAtalk] HEh... (habeas is listed in spamcop)

2004-01-15 Thread Dan Wilder
> > > > and from the email headers > > > > Received: from s2.habeas.com (s2.habeas.com [64.142.16.37]) > > > > This is kinda funny... hehehe Somebody's gaming spamcop. It's pretty easy. -- Dan Wilder <[EMAIL PROTECTED]>

Re: [SAtalk] Habeas Responds to Spammer Violation of Habeas Warrant Mark

2004-01-13 Thread Dan Kohn
Most likely scenario is to follow the money trail. Thankfully, the laws to enforce copyright infringement are quite tough, and include things like injunctions and seizures. -Original Message- From: Matthew Cline [mailto:[EMAIL PROTECTED] Sent: Tue Jan 13 17:34:19 2004 To: Dan

[SAtalk] [OT] Procmail recipe to catch forged habeus mark (repost)

2004-01-13 Thread Smart,Dan
I hate how formatting gets screwed up sometimes... ##-- ## Grab a copy of Habeas SWE with Spam-Status Yes :0 c: * ^X-Spam-Status: Yes.*HABEAS_SWE ${SPOOLDIR}/habeas ##--## <> | -Original Message- | From: Smart,Dan | Sent: Tuesday, January 13, 2004 3:40 PM | To:

RE: [WL] Re: [SAtalk] OT: forged habeus mark

2004-01-13 Thread Smart,Dan
Great idea. Here's my recipe... ##- ## Grab a copy of Habeas SWE with Spam-Status Yes :0 c: * ^X-Spam-Status: Yes.*HABEAS_SWE ${SPOOLDIR}/habeas ##-- Where spooldir is where I store my spam mbox files <> | -Original Message- | From: Charles Gregory [mailto:[EMAIL PROTECTED

[SAtalk] Habeas Responds to Spammer Violation of Habeas Warrant Mark

2004-01-13 Thread Dan Kohn
[* Here's our official response. My personal comments are below. - dan *] Habeas, the leading provider of emailer reputation services, has recently come under attack from an as yet unidentified spammer. The spammer is illegally utilizing the Habeas Warrant Mark in emails which are prom

RE: [SAtalk] SA Performance .......

2004-01-13 Thread Smart,Dan
I run a P733 with 384MB RAM with Red Hat 7.3. Use Postfix/Procmail/html-trap (Hardin's Sanitizer)/SpamAssassin combination. Use DCC, DNSBLs, BigEvil/NovRules/OctRules, Jennifer's Popcorn/Backhair/Weeds/Cpox, and Bayes with SA. The box is relay only. No local mail. I also keep a copy of all head

RE: [SAtalk] SA Performance .......

2004-01-13 Thread Smart,Dan
I'm waiting for Greylisting too. Vernon's DCC stuff is being debugged for Greylisting which should soon be a reliable engine for this. I use Postfix as my MTA, so I'm waiting for an integration that happens at MTA handshake. So far, I haven't seen anything. Some said that there is a Postfix upgr

Re: [SAtalk] whitelist by ip and logging issues

2004-01-13 Thread Dan B
Matt Kettler wrote: 99% of the time you're much better off implementing a whitelist in whatever layer you are using to call SA in the first place (ie: procmail them around sa instead of through it).. In my setup the SA is called from postfix (-o content_filter in master.cf). The box does not ha

Re: [SAtalk] whitelist by ip and logging issues

2004-01-13 Thread Dan B
Bob Apthorpe wrote: What about the trusted_networks parameter? From perldoc Mail::SpamAssassin::Conf: DNS blacklist checks will never query for hosts on these networks. Exactly as stated, these (dnsbl) are the only tests that are not performed for trusted networks. danb

[SAtalk] Exchange and autolearn

2004-01-13 Thread Dan
Is anyone else doing anything like this? Or maybe I am going about this the wrong way? Thanks in advance! Dan --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced br

RE: [SAtalk] detecting large collections of random words

2004-01-09 Thread Smart,Dan
---Original Message- | From: Carl Chipman [mailto:[EMAIL PROTECTED] | Sent: Friday, January 09, 2004 10:32 AM | To: Smart,Dan | Subject: RE: [SAtalk] detecting large collections of random words | | Btw, why not rename your rules CP_RANDOMWORDS_10 and _15 so | that the name is more accurate descrip

RE: [SAtalk] detecting large collections of random words

2004-01-09 Thread Smart,Dan
So I take it that the final rewrite of this rule would be: cpeterson.cf - ## I've noticed that a lot of spams recently have been following the random-words technique, ## with very little "spam" content - often just an image or some obfuscated text. Has anyone ## given any thought to

[SAtalk] checking local rbl list

2004-01-08 Thread Dan Spray
Hello, I have setup a local RBL list on the server running spamassassin. How do I go about setting spamassassin to check the local copy of this rbl? Thank in advance, Dan -- Dan Spray, Director of Internet Operations [EMAIL PROTECTED] Connecting Point Norfolk, NE < &l

Re: [SAtalk] postfix

2003-12-29 Thread Dan Wilder
ng". You _don't_ want to allow relaying based on sender domain name. It's too easy to forge "from" address. -- Dan Wilder <[EMAIL PROTECTED]> --- This SF.net email is sponsored by: IBM Linux Tutorials. Bec

Re: [SAtalk] SpamAssassin Install Help

2003-12-22 Thread Dan Abernathy
Mike, If you're installing on a Windows box (to integrate with GroupWise/Guinevere or whatever), use Perl 5.6.1 instead of 5.8. --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills.

[SAtalk] refresh just the 'latest major spam patterns' file

2003-12-19 Thread Dan Jacobson
Maybe spamassassin needs some parts that can be downloaded more often than the whole software, like Windows virus checkers' pattern files, but for the 'latest major spam patterns'. Of course this might already be what you are doing, I haven't kept track. -

RE: [SAtalk] Web based rule creation

2003-12-19 Thread Dan Didier
RIBE line, SCORE line, etc. > Basically, the stuff that makes a rule a rule and not just a > regular expression. > > If you can think of some useful behaviour I'd might be > interested in coding it. > > Check out this tool: http://sandgnat.com/cmos/cmos.jsp Dan ---

Re: [SAtalk] regex expansion tool

2003-12-17 Thread Dan Wilder
On Wed, Dec 17, 2003 at 03:39:58PM -0800, Kirk Moore wrote: > Sorry, What I am looking for is a tool to take an existing regex rule and > expand it out and show all the expresions that it looks for., man regex -- Dan Wilder <[EMAIL

RE: Permission Denied (was Re: [SAtalk] Desperate Plea - RESOLVED...almost)

2003-12-17 Thread Dan Spray
I did get this fixed. Change owner and group to the user running spamd. Works great then. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raquel Rice Sent: Wednesday, December 17, 2003 3:46 PM To: [EMAIL PROTECTED] Subject: Permission Denied (was Re

Re: [SAtalk] Problem installing Win32 version of Spam Assassin - nmakeerrors

2003-12-17 Thread Dan Abernathy
Samuel, Michael Bell (the author of the HOWTO) recommends using ActivePerl 5.6.1 as that's what he's tested with, using builds 631, 632, 633, and 635. ActiveState hsa build 635 available for download. From the HOWTO: "ActiveState now has Perl 5.8 available. SpamAssassin currently has a few issu

RE: [SAtalk] Desperate Plea - RESOLVED...almost

2003-12-17 Thread Dan Spray
hy waste resources. Thanks again to everyone who helped. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Spray Sent: Tuesday, December 16, 2003 5:20 PM To: Spamassassin-Talk-Admin Subject: [SAtalk] Desperate Plea Okay, after 2 days of trying to f

RE: [SAtalk] Pyzor

2003-12-17 Thread Smart,Dan
Alan: Do you find any value running Pyzor? I gave up on it long ago, as it never seemed to hit on any quantity of Spam. BTW: I normally test things by doing a spamassassin -D --lint <> | -Original Message- | From: Alan Munday [mailto:[EMAIL PROTECTED] | Sent: Tuesday, December 16,

Re: [SAtalk] autoreply to spam.

2003-12-17 Thread Dan Wilder
On Wed, Dec 17, 2003 at 08:08:44AM -0500, AltGrendel wrote: > On Tue, 2003-12-16 at 20:45, Dan Wilder wrote: > > > > > The reasons I would never in a million years set up such an > > autoresponder are: > > > > * It only increases the burden on the Internet a

Re: [SAtalk] Desperate Plea

2003-12-16 Thread Dan Spray
ng to get lock on /var/spool/filter/.spamassassin/auto-whitelist with 4 retries Thank you to all who sent replied, please let me know what else you may need from me and I will be glad to make it available. Dan -- Original Message ------ From: "Dan Spr

Re: [SAtalk] autoreply to spam.

2003-12-16 Thread Dan Wilder
him or his software to my personal straight-to-/dev/null list. -- ----- Dan Wilder <[EMAIL PROTECTED]> Technical Manager SSC, Inc. P.O. Box 55549 Phone: 206-782-8808 Seattle, WA

[SAtalk] Desperate Plea

2003-12-16 Thread Dan Spray
RH7.3. Any help that someone could give would be great. Thanks in advance, Dan -- Dan Spray, Director of Internet Operations [EMAIL PROTECTED] Connecting Point Norfolk, NE < <http://www.conpoint.com/> http://www.conpoint.com/> Voice - 402.371.4530 x208 Fax - 402.37

[SAtalk] Here's how I got dccifd to run. Suggest add to INSTALL

2003-12-16 Thread Smart,Dan
I suggest that instructions to get dccifd running should be included in INSTALL... Compile the dcc as directed in INSTALL doc. Get dccproc running first as described in INSTALL doc. To use dccifd in Spamassassin fix the dcc_conf and add path settings. In /var/dcc/dcc_conf: DCCM_ENABLE=off DCCM_L

[SAtalk] Checks very slow

2003-12-16 Thread Dan Spray
filtering. I am not sure what is taking so long. I tried starting spamd with the -L command and it didn't seem to make a difference. I shut off bayes and rbl checking as well. I following the instructions on: http://advosys.ca/papers/postfix-filtering.html Any help here would be great.

[SAtalk] sa-learn not "learning?"

2003-12-15 Thread dan
achine who also uses spamassassin, piped the same message mbox file to sa-learn there, it said learned from 3 messages (3 messages scanned). Why won't my spamassassin learn? --- Dan --- This SF.net email is sponsored by: IBM Linux Tutorials.

[SAtalk] Setting up SpamAssassin with Postfix on RedHat

2003-12-15 Thread Dan Spray
Hello, I am going to try setting up SpamAssassin with RedHat 7.3 and Postfix. I was wandering if anyone has any good how-to's or personal notes on doing this that would be great. I want to use the MySQL function as well. Any help would be great. Thanks in advance, Dan -- Dan

[SAtalk] sa-learn and bayes

2003-12-12 Thread Dan Tappin
in folder. When I run sa-learn (as root) my bayes files are created in /var/root/.spamassassin/ but as user root? I am very confused and I know I am not doing this correctly. Could someone please point me in the right direction on this? Th

RE: [SAtalk] Rule Help...

2003-12-12 Thread Dan Tappin
Hi Matt, I created in a custom .cf file in /etc/mail/spamassassin Dan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Matt > Kettler > Sent: Friday, December 12, 2003 1:05 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subje

[SAtalk] Rule Help...

2003-12-12 Thread Dan Tappin
rfull PayPal Virus scorePAYPAL_VIRUS_001 100 I know I need a virus scanner on my mail server, which I am working on, but I need a quick fix for the time being. Pretty simple hich score an message with "YOUR PAYPAL.COM ACCOUNT EXPIRES" in the subject. I am not worried about false

RE: [SAtalk] Mass-check corpus cleanup using included scripts. Ho w??

2003-12-12 Thread Smart,Dan
Thanks for the insight. When I run mass-check-results-to-mbox I get: --- # sort -rn +1 ham.log | head -20 | ./mass-check-results-to-mbox open /usr/local/src/confham.1173754 failed: at ./mass-check-results-to-mbox line 125, <> line 1. X-Mass-Check-Warning: open /usr/local/

RE: [SAtalk] Re: SA Long Process Times / Memory Utilization (Possible Bug?)

2003-12-12 Thread Dan Tappin
gt; (Possible Bug?) > > > On Thu, 11 Dec 2003 15:42:55 -0700, Dan Tappin > <[EMAIL PROTECTED]> posted to spamassassin-talk: > > My hunch, which could be totally wrong, is that when parsing these > > messages the multiple headers in the Outlook attached messages is >

[SAtalk] Mass-check corpus cleanup using included scripts. How??

2003-12-12 Thread Smart,Dan
I'm trying to do the mass-check corpus cleanup using the method in CORPUS_SUBMIT file. My hard-sorted spams and hams are stored in MBOXs. I'm assuming that the scripts: mass-check-results-to-mbox, mboxget, and extract-message-from-mbox are used to help in this process to check and purge improperl

[SAtalk] SA Long Process Times / Memory Utilization (Possible Bug?)

2003-12-11 Thread Dan Tappin
nch, which could be totally wrong, is that when parsing these messages the multiple headers in the Outlook attached messages is causing the problem. Dan --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or ju

RE: [SAtalk] Running mass-check with local rules

2003-12-11 Thread Smart,Dan
Original Message- | From: Matt Kettler [mailto:[EMAIL PROTECTED] | Sent: Thursday, December 11, 2003 10:38 AM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: Re: [SAtalk] Running mass-check with local rules | | At 10:57 AM 12/11/2003, Smart,Dan wrote: | >How do you get mass-check to use your local &

[SAtalk] Running mass-check with local rules

2003-12-11 Thread Smart,Dan
How do you get mass-check to use your local "custom" rules in local.cf and other .cf files? TIA <> --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Lin

[SAtalk] Re: Bug#223399: spamassassin: not_ok_languages, no way to split Chinese

2003-12-10 Thread Dan Jacobson
>> And what if it doesn't match any of our ok_languages? then it will >> fail, against our wishes. Can you guarantee that you know all the >> possibilities? D> I still don't understand. You don't speak 1000 languages. Most speak 3 D> or 4 at most They can add these to ok_languanges. OK, you

RE: [SAtalk] Using dccifd instead of dccproc

2003-12-10 Thread Smart,Dan
e good to go. | | Oh, and appears to run faster in our environment than | dccproc, since it does not need to be instantiated for each | message scanned. | | Bill | - Original Message - | From: "Smart,Dan" <[EMAIL PROTECTED]> | To: <[EMAIL PROTECTED]> | Sent: Wedne

[SAtalk] Using dccifd instead of dccproc

2003-12-10 Thread Smart,Dan
The DCC documentation says that the dccifd interface is much more efficient than dccproc. I see from doing a spamassassin -D that it looks for it. Is there any install procedure for dccifd, and should this be the generally recommended interface for dcc? Why or why not? TIA <> --

[SAtalk] Re: Bug#223399: spamassassin: not_ok_languages, no way to split Chinese

2003-12-09 Thread Dan Jacobson
D> I'm confused. There is no need for not_ok_languages, as you can simply D> list all languages but the one you want in ok_languages. Furthermore, D> few people wish to receive mail in every language. Just like white list / black list, you have both because it would be a pain to try to keep track

RE: [SAtalk] bigevil.cf + rsync?

2003-12-05 Thread Smart,Dan
How would you run a spamassassin --lint to check if the file is ok before sending the mail and restarting? Ideas? <> | -Original Message- | From: Smart,Dan | Sent: Friday, December 05, 2003 3:21 PM | To: [EMAIL PROTECTED] | Subject: RE: [SAtalk] bigevil.cf + rsync? | | Than

RE: [SAtalk] bigevil.cf + rsync?

2003-12-05 Thread Smart,Dan
Thanks for the script Gary/Peter. I've cleaned things up and here is what I put together: #!/bin/sh ## This file updates the big evil policy file for spam assassin DATE=`date +"%Y%m%d-%H%M"` [ -f /tmp/bigevil.cf ] && rm -f /tmp/bigevil.cf wget -N http://www.merchantsoverseas.com/wwwroot/gorilla

RE: [SAtalk] Changing user spamd runs as

2003-12-05 Thread Dan Tappin
available for scanning, only 0 spam(s) in Bayes DB < 200 It seems very inconsistant where SA is looking for the database. The use_bayes = 1 option # 2 shows 26 ham(s) in Bayes which seems about right given the amount of e-mail I have fed sa-learn. I am guessing this has something to do with

RE: [SAtalk] SA-Talk poisoning Bayes

2003-12-05 Thread Smart,Dan
}" :0 ci | /usr/bin/sa-learn --forget } <> | -Original Message----- | From: Smart,Dan | Sent: Friday, December 05, 2003 12:46 PM | To: [EMAIL PROTECTED] | Subject: RE: [SAtalk] SA-Talk poisoning Bayes | | Since this is not a delivering recipe (not to a file or pip

RE: [SAtalk] SA-Talk poisoning Bayes

2003-12-05 Thread Smart,Dan
ering in the procmail log LOG="${NL}Forgetting Bayes Poison${NL}" :0 ci | /usr/bin/sa-learn --forget } <> | -----Original Message- | From: Smart,Dan | Sent: Friday, December 05, 2003 8:47 AM | To: [EMAIL PROTECTED] | Subject: RE: [SAtalk] SA-Talk poisoning B

[SAtalk] Tune a bit harder

2003-12-05 Thread Dan
) However. I am seeing allot of the spam that is getting through coming from dsl people. What is the best way to block this? Any ideas? Any other products I should put on? razor? Thanks! Dan --- This SF.net email is sponsored by: IBM Linux Tutorials

RE: [SAtalk] SA-Talk poisoning Bayes

2003-12-05 Thread Smart,Dan
This evaluates to an Or statement :0 Ec | /usr/bin/sa-learn --forget --- Not sure if I need to clone, <> | -Original Message- | From: Matt Kettler [mailto:[EMAIL PROTECTED] | Sent: Thursday, December 04, 2003 10:22 AM | To: Smart,Dan; [EMAIL PROTECTED] | Sub

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
m not running SA as this user (I am running it as the mta user that my mail server uses). Dan > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > David B Funk > Sent: Thursday, December 04, 2003 2:59 PM > To: Pete Henshall > Cc: [E

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
> -Original Message- > From: Pete Henshall [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 04, 2003 1:53 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] spamds that don't finish > > > Hi dan, list, > > > I think

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
> whitelist_from [EMAIL PROTECTED] > and about 50 more like this. > > > a bit of a mish mash of stuff since 2.4 i guess but all works if I set bayes > 0 :\ > > Dan, maybe it is looking in that dir cause the mta user has a home dir set > to /Users/admin/ - my syste

RE: [SAtalk] spamds that don't finish

2003-12-04 Thread Dan Tappin
Initialising learner debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200 debug: bayes: 12764 untie-ing debug: bayes: 12764 untie-ing db_toks Now I do not understand why SA is looking in /Users/admin for the user state directory? Can I tell SA to not use the user state d

[SAtalk] SA-Talk poisoning Bayes

2003-12-04 Thread Smart,Dan
In reading the sa-learn man file, it says running discussions of spam through sa-learn is bad. Does SA take this into account already, or should I create a procmail rule to bypass SA for messages from SATalk and (possibly) Postfix-List ? <>

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-04 Thread Smart,Dan
Not to get nitpicky, but could you add a one line comment of what was patched in the release, and retain old ones for history? I just downloaded 1.57a and it would be helpful to know what was fixed. Nothing detailed...like: ... Example # Dec 4, 03 9:35 AM EST ## 1.57a - Typo fixed in BigE

RE: [SAtalk] Bayes Expiry limits and Journal size

2003-12-03 Thread Smart,Dan
So if I set the Journal to a really big number, like 10MB, then the once-per-day opportunistic sync rule should kick in and sync once per day. So a sync takes as much or more memory than an expiration run? <> | -Original Message- | From: Theo Van Dinter [mailto:[EMAIL PROTECTED] | Sent

RE: [SAtalk] Bayes Expiry limits and Journal size

2003-12-03 Thread Smart,Dan
? Is the goal to get the journal syncing about the same frequency as an expiry run is made? TIA <> | -Original Message- | From: Ted Cabeen [mailto:[EMAIL PROTECTED] | Sent: Friday, November 14, 2003 6:22 PM | To: [EMAIL PROTECTED] | Cc: Smart,Dan; [EMAIL PROTECTED] | Subje

Re: [SAtalk] configure: error: C preprocessor "/lib/cpp" fails sanity check

2003-12-03 Thread Dan Wilder
On Wed, Dec 03, 2003 at 05:21:19PM +0100, J?rgen R. Plasser wrote: > Hi Dan, > > --On 03.12.2003 08:07 -0800 Dan Wilder wrote: > > >I'd hazard a guess there's something missing in your install > >of RH's program development stuff. > > > >What do

Re: [SAtalk] configure: error: C preprocessor "/lib/cpp" fails sanity check

2003-12-03 Thread Dan Wilder
hing missing in your install of RH's program development stuff. What does 'config.log' say? The additional details should be near the end. -- - Dan Wilder <[EMAIL PROTECTED]> Technical Manager SSC, Inc. P.O. Box 55549 Phone: 206-782-8808 Seattle, WA 98155-0549IC

Re: [SAtalk] bayes

2003-12-01 Thread Dan
? Thanks Dan - Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> To: "Dan" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, December 01, 2003 10:55 AM Subject: Re: [SAtalk] bayes > At 01:31 PM 12/1/2003, Dan wrote: > >Does anyone k

[SAtalk] bayes

2003-12-01 Thread Dan
Does anyone know where I can find more info on bayes? I have it turned on in my local.cf. But Im sure there is more to setting it up! ha ha ha ha Thanks Dan --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net

Re: [SAtalk] Re: An Open Letter to the SA-talk forum

2003-12-01 Thread Dan Wilder
is is the course Mr. Harbaugh followed. I happen to favor the freeze-the-vendor-versions approach, simplifying it by marking Perl and _all_ modules as installed but on version hold, then using CPAN exclusively for all Perl related upg

[SAtalk] tuning time

2003-11-28 Thread Dan
guys set your hits to? Also I seem to get "some" spam through even if it has a high hit count. Any ideas on how this could happen? I have attached the header info. Thanks! Dan Received: from [18.208.230.29] by 12-212-237-30.client.attbi.com with ESMTP id 372C4ACEA57; Sat, 29 Nov 200

RE: [SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
the server is down" phone calls / comments. :^) I seem to have it resolved. I have reduced the maximum number of concurent SMTP accept processes on my mail server and now things seem to be ok. We also have seemed to have been flooded with spam and viruses today which might have agrivated

RE: [SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
hard reboot is required. This system has 700+ MB or RAM. Dan > -Original Message- > From: Robert A. Hayden [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 27, 2003 11:35 AM > To: Dan Tappin > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Run Away SA... >

[SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
?? I have run spamassassin --lint -D and also tried disabling RBL look-ups on a hunch. Do I basically need to disable config files one by one and watch for the problem to go away? Thanks, Dan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Beh

[SAtalk] Remember to score RCVD_IN_DYNABLOCK 0

2003-11-26 Thread Smart,Dan
Easynet.nl goes offline on Dec 1 Be sure to set score RCVD_IN_DYNABLOCK 0 (unless you rsync this list locally) Another DNSBL death <> --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you b

Re: [SAtalk] Re: An Open Letter to the SA-talk forum

2003-11-25 Thread Dan Wilder
to join the fray that ensued. A lesser soul would just run away and hide. -- --------- Dan Wilder <[EMAIL PROTECTED]>Technical Manager SSC, Inc. And Sometimes Staff Writer Publishers of

Re: [SAtalk] InfoWorld article hits Slashdot...

2003-11-25 Thread Dan Wilder
On Tue, Nov 25, 2003 at 04:43:35PM +0200, Zak McGregor wrote: > Hi all > > The InfoWorld article has just hit Slashdot (http://www.slashdot.org/) It took 'em long enough. -- ----- Dan Wilder <[EMAIL PROTECTED]>

[SAtalk] Spamassassin hogging 100% CPU time

2003-11-25 Thread Dan Bongert
s hanging up on a particular message--I'm not sure where to find that information. It's usually hanging on messages being delivered to me, but that may be just because I get an insane amount of email. -- Dan Bongert [EMAIL PROTECTED] SSCC Unix System Administrator

[SAtalk] sa-learn and message format?

2003-11-25 Thread Dan Tappin
. When I run sa-learn I only see the '1 message learned' output even thought I forwarded multiple messages to that mailbox. Any ideas / comments? Dan --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.ne

Re: [SAtalk] RE: Re[2]: http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc

2003-11-24 Thread Dan Wilder
//www.infoworld.com/article/03/07/18/28FEspamassassin_1.h > tml > > Another tidbit from his article: > "SpamAssassin is easy to install and customize, with a basic interface for > adding domains and e-mail addresses to blacklists and white lists". > > > On Mon, 24

Re: [SAtalk] RE: Re[2]: http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc

2003-11-24 Thread Dan Wilder
rning friendly UI and so on. But the examination of relative effectiveness was clearly biased, and it would seem only appropriate to say so in print. -- --------- Dan Wilder <[EMAIL PROTECTED]> Technical Manager SSC, Inc. P.O. Bo

[SAtalk] RBL Test Run?

2003-11-24 Thread Dan Spray
RE_Y2K,DCC_CHECK,FORG ED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,MIME_HTM L_NO_CHARSET,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,X_MSMAIL_PR IORITY_HIGH,X_PRIORITY_HIGH And I don't see anything about RBL scans. Thanks in advance, Dan -- Dan Spra

[SAtalk] header reports missing??

2003-11-21 Thread Dan Tappin
7;always_add_headers' and 'always_add_report' set to 1 and my 'spamassassin --lint -D' output looks normal with no errors. Does SA require a perl module to re-write the headers or am I missing something simple here? Thanks, Dan ---

RE: [SAtalk] Bayes Expiry limits and Journal size

2003-11-21 Thread Smart,Dan
I'm working on just that. My thought, and I must admit I don't know all the theory involved, is that the effectiveness of Bayes and the FN/FP is purely a function of how you trained it. The *ONLY* way (in my mind) to score the Bayes functions would be to train it and run the Mass-check. I'm work

RE: [SAtalk] Bayes Expiry limits and Journal size

2003-11-20 Thread Smart,Dan
0 3.0 score BAYES_98 4.0 score BAYES_99 5.4 - Comments? <> | -Original Message- | From: Ted Cabeen [mailto:[EMAIL PROTECTED] | Sent: Friday, November 14, 2003 6:22 PM | To: [EMAIL PROTECTED] | Cc: Smart,Dan; [EMAIL PROTECTED] | Subj

RE: [SAtalk] Runtime problem SA 2.60 on RH 7.3

2003-11-20 Thread Smart,Dan
If you install the textcat with user root, but run spamd as another user, make sure that everyone can read the installed libraries. I had this problem. Not sure what caused it. Some libraries had global read, some didn't. <> | -Original Message- | From: Frederick M Avolio [mailto:[

[SAtalk] SA Header Re-Write...

2003-11-20 Thread Dan Tappin
7;always_add_headers' and 'always_add_report' set to 1 and my 'spamassassin --lint -D' output looks normal with no errors. Does SA require a perl module to re-write the headers or am I missing something simple here? Thanks, Dan ---

[SAtalk] Why Bayes is so essential

2003-11-20 Thread Dan Kohn
rules, he wasn't able to avoid all spammy words that Bayes had trained on and still get across his semantic content. - dan -- Dan Kohn <mailto:[EMAIL PROTECTED]> <http://www.dankohn.com/> -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: T

RE: [SAtalk] Upgrade or Stay?

2003-11-17 Thread Dan Kohn
2.60 works great. It works much better when you use Bayes and network checks. Note that both of the latter have been significantly improved over 2.55. - dan -- Dan Kohn <mailto:[EMAIL PROTECTED]> <http://www.dankohn.com/> -Original Message- From: Jess Anderson [m

Re: [SAtalk] LIST ADMIN - SUGGESTION: pool.com

2003-11-16 Thread Dan Wilder
On Sat, Nov 15, 2003 at 12:31:42PM -0600, Jacob S. wrote: > On Sat, 15 Nov 2003 09:30:51 -0800 > Dan Wilder <[EMAIL PROTECTED]> wrote: > > anyone posts to the list> > > > Some mailing list software has the so-called VERP capability, in > > which "From

  1   2   3   4   >