RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-28 Thread Chris Thielen
Dan, On Fri, 2004-01-23 at 09:04, Smart,Dan wrote: > This command works every time from command line, but not passed as a param > from SA_RESTART. > "postfix stop ; sleep 15 ; /etc/init.d/spamassassin restart ; postfix start" > > It runs the postfix stop and then quits. Any idea why? I can cre

Re: [SAtalk] Rules to flag these stupid virus warnings?

2004-01-27 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Batchelor writes: >I am about ready to just open the message body with MIMEDefang and whack >anything that mentions "InterScan" with extreme prejudice (like, forward it >to InterScan's Postmaster, until they forcibly distribute a patch to all

Re: [SAtalk] Rules to flag these stupid virus warnings?

2004-01-27 Thread Pedro Sam
On Tuesday 27 January 2004 17:09, Mike Batchelor wrote: > I am about ready to just open the message body with MIMEDefang and whack > anything that mentions "InterScan" with extreme prejudice (like, forward it > to InterScan's Postmaster, until they forcibly distribute a patch to all > their custome

[SAtalk] Rules to flag these stupid virus warnings?

2004-01-27 Thread Mike Batchelor
I am about ready to just open the message body with MIMEDefang and whack anything that mentions "InterScan" with extreme prejudice (like, forward it to InterScan's Postmaster, until they forcibly distribute a patch to all their customers that disables this stupid, stupid mis-feature). But befor

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-27 Thread Smart,Dan
iday, January 23, 2004 12:44 PM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | Dan, | | On Fri, 2004-01-23 at 09:04, Smart,Dan wrote: | | > This command works every time from command line, but not | passed as a | > param from SA_RESTART. | > "

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-27 Thread David B Funk
On Fri, 23 Jan 2004, Smart,Dan wrote: > Humm > > This command works every time from command line, but not passed as a param > from SA_RESTART. > "postfix stop ; sleep 15 ; /etc/init.d/spamassassin restart ; postfix start" > > It runs the postfix stop and then quits. Any idea why? I can creat

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-23 Thread Smart,Dan
mart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | On Thu, 2004-01-22 at 22:57, Smart,Dan wrote: | > That works great! Thanks. | > | > I added the following command for SA_RESTART | "/usr/sbin/postfix stop | > && sleep 15 && /etc/in

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Erik Slooff
ice. > Cheers, > > Phil > > - > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] >> Behalf Of Chr

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Smart,Dan
Thanks. Will try in the AM. <> | -Original Message- | From: Chris Thielen [mailto:[EMAIL PROTECTED] | Sent: Thursday, January 22, 2004 5:18 PM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | On Thu, 2004-01-22 at 22:57, Smart,Dan wrote: |

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Chris Thielen
On Thu, 2004-01-22 at 22:57, Smart,Dan wrote: > That works great! Thanks. > > I added the following command for SA_RESTART "/usr/sbin/postfix stop && > sleep 15 && /etc/init.d/spamassassin restart && /usr/sbin/postfix start" > but it doesn't seem to work, even though it works for command line.

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Smart,Dan
need to make sure postfix starts if the SA_RESTART fails. <> | -Original Message- | From: Chris Thielen [mailto:[EMAIL PROTECTED] | Sent: Thursday, January 22, 2004 4:04 AM | To: Smart,Dan; [EMAIL PROTECTED] | Subject: RE: [SAtalk] Rules Du Jour v 1.07b | | On Thu, 2004-01-22 at 14:

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Chris Thielen
On Thu, 2004-01-22 at 14:49, Smart,Dan wrote: > Chris: > Great job on the scripts. I have modified the munging on Tripwire (set name > to TW) and BigEvil (comment out WXYZ). How do I add these custom munges to > my_rules_du_jour? Dan, I'm going to suggest that you ignore the warning in my_rules

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Smart,Dan
ary 22, 2004 1:36 AM | To: [EMAIL PROTECTED] | Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] | Subject: [SAtalk] Rules Du Jour v 1.07b | | Here is a consolidated reply to a bunch of Rules Du Jour messages: | btw, version 1.07b is released. | | | > From: | > Erik Slooff | > &l

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Rose, Bobby
Phil Sent: Thursday, January 22, 2004 5:03 AM To: 'Chris Thielen'; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [SAtalk] Rules Du Jour v 1.07b Some mistake here: CF_URLS[4]="http://www.emtinc.net/includes/weeds.cf";;

RE: [SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Randal, Phil
NGE_SCRIPTS[5]="nothing for this ruleset."; Shouldn't it be CF_FILES[5]="weeds_2.cf] in the second case? Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] >

[SAtalk] Rules Du Jour v 1.07b

2004-01-22 Thread Chris Thielen
Here is a consolidated reply to a bunch of Rules Du Jour messages: btw, version 1.07b is released. > From: > Erik Slooff > <[EMAIL PROTECTED]> > To: > [EMAIL PROTECTED] >Subject: > [SAtalk] > RulesDuJour; > minor change > Date: > Wed, 21 Jan 2004 > 19:2

RE: [SAtalk] Rules Score

2004-01-13 Thread Mike Carlson
Yes I did mean spamd.   Thanks, --Mike   From: Matt KettlerSent: Tue 1/13/2004 7:39 AMTo: Mike Carlson; [EMAIL PROTECTED]Subject: Re: [SAtalk] Rules Score At 07:19 AM 1/13/04 -0600, Mike Carlson wrote: >Do you have restart spamassassin if you change a score on a rule? I assume you m

Re: [SAtalk] Rules Score

2004-01-13 Thread Matt Kettler
At 07:19 AM 1/13/04 -0600, Mike Carlson wrote: Do you have restart spamassassin if you change a score on a rule? I assume you mean spamd, not spamassassin, as spamassassin isn't a resident thing that can be restarted. If you change local.cf, you must restart spamd to get it to read it. However u

[SAtalk] Rules Score

2004-01-13 Thread Mike Carlson
Do you have restart spamassassin if you change a score on a rule?   --Mike

Re: [SAtalk] Rules for word-jumble spam

2004-01-12 Thread Rich Wales
Earlier, I wrote: > > I came up with a set of rules which appear to catch the > > new strain of spam with a meaningless jumble of words in > > the body, while hopefully not catching any legitimate mail. Rubin Bennett replied: > I believe that the Backhair Ruleset will catch these

Re: [SAtalk] Rules for word-jumble spam

2004-01-12 Thread Brent J. Nordquist
On Sat, 10 Jan 2004, Rich Wales <[EMAIL PROTECTED]> wrote: > I came up with a set of rules which appear to catch the new strain > of spam with a meaningless jumble of words in the body, [...] > header__MPOP_SUBJ1Subject =~ /Re: [A-Z]+, \S+ \S+ \S+/ You may want to compare/contrast the

Re: [SAtalk] Rules for word-jumble spam

2004-01-11 Thread Keith C. Ivey
Robert Menschel <[EMAIL PROTECTED]> wrote: > I don't find any indication anywhere on the Web that mPOP is > used for anything but spam. If anyone can provide evidence that > it can be used for ham on a valid webmail site, I'll lower the > score. There are a few seemingly genuine messages here: h

Re: [SAtalk] Rules for word-jumble spam

2004-01-11 Thread Robert Menschel
Hello Rich, Saturday, January 10, 2004, 10:27:47 PM, you wrote: RW> I came up with a set of rules which appear to catch the new strain RW> of spam with a meaningless jumble of words in the body, while hope- RW> fully not catching any legitimate mail. See below; comments welcome, RW> and (natural

Re: [SAtalk] Rules for word-jumble spam

2004-01-11 Thread Rubin Bennett
I believe that the Backhair Ruleset will catch these as well; no sense in duplicating work taht soneone else has already done! http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm Rubin On Sun, 2004-01-11 at 01:27, Rich Wales wrote: > I came up with a set of rules which appear to catch t

[SAtalk] Rules for word-jumble spam

2004-01-10 Thread Rich Wales
I came up with a set of rules which appear to catch the new strain of spam with a meaningless jumble of words in the body, while hope- fully not catching any legitimate mail. See below; comments welcome, and (naturally) everyone is free to use these rules if you want to. Regarding my body rule (_

Re: [SAtalk] rules matching against entire body

2004-01-07 Thread Kurtis D. Rader
On Sun, 2004-01-04 01:03:07, Jan-Pieter Cornet wrote: > Much to my surprise, I found out that the current (2.60) SpamAssassin > code doesn't allow matches against the entire body or against the entire > rawbody (unless you make it an eval test). The regex matching is done on > a line-by-line basis.

[SAtalk] rules matching against entire body

2004-01-03 Thread Jan-Pieter Cornet
Much to my surprise, I found out that the current (2.60) SpamAssassin code doesn't allow matches against the entire body or against the entire rawbody (unless you make it an eval test). The regex matching is done on a line-by-line basis. Are there any plans to support regex matches against the ent

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-02 Thread Arlo Gilbert
I'm getting a common response here which is to lean towards bayes rather than score manipulation. However, bayes takes so long to build up. Especially if grandma only gets 2 or 3 spams a day. Given that SA refuses to use bayesian filtering til after it has collected 200 spam samples, in my exam

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-02 Thread Frank Pineau
On Mon, 2003-12-01 at 17:38, Arlo Gilbert wrote: > Is there a faster way to get SA working? Because 90 days is a long time > to ask somebody to wait. You could train it with a publicly-available corpus of spam, but that sort of defeats the purpose of the bayesian filter. It's highly personaliz

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-01 Thread Casper Gasper
My grandmother. She recieves only emails from family. So for example if the standard spamassassin ruleset were implemented and somebody sent her UBE about free porn but the message did not score enough points to be "flagged", then the email would get through. This is spamassassin doing it's job

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-01 Thread Tim B
<--- snip > My Question/Concerns Does anybody have any ideas about how this would affect the bayesian learning system? If i suddenly changed my mind about liking porn one day and decided to block all porn, would I need to clear out my bayesian learning database so that it would begin t

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-01 Thread Casper Gasper
My grandmother. She recieves only emails from family. So for example if the standard spamassassin ruleset were implemented and somebody sent her UBE about free porn but the message did not score enough points to be "flagged", then the email would get through. This is spamassassin doing it's job

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-01 Thread Matt Kettler
At 02:41 PM 12/1/2003, Arlo Gilbert wrote: The same goes for me for mortgages.. i dont have one and dont need one. so anything about mortgages, home financing etc is definitely spam for me. Ahh, but do you want to automatically declare any email which mentions such things to be spam? Do you have

Re: [SAtalk] Rules Modification /Content Filtering Results

2003-12-01 Thread Mike Jackson
> I'm working on integrating spamassassin into our own spam filtering > mechanism. Currently, with a score of 5 or greater we modify the > subject line to indicate the spammishness of the message... with a > score of 10 or greater we delete the email automatically and do not > deliver it to the use

[SAtalk] Rules Modification /Content Filtering Results

2003-12-01 Thread Arlo Gilbert
Hi Everybody, This is a long post but i would REALLY appreciate your input, criticism, flaming, and what not. I'm working on integrating spamassassin into our own spam filtering mechanism. Currently, with a score of 5 or greater we modify the subject line to indicate the spammishness of the me

RE: [SAtalk] Rules, rules and more rules

2003-11-24 Thread Alan Munday
TABLE and me doing a some reading of the manual (that nearly always helps). regards Alan -Original Message- From: jennifer [mailto:[EMAIL PROTECTED] Sent: 23 November 2003 23:47 To: 'Alan Munday'; [EMAIL PROTECTED] Subject: RE: [SAtalk] Rules, rules and more rules Hi Alan

RE: [SAtalk] Rules, rules and more rules

2003-11-23 Thread Alan Munday
TABLE and me doing a some reading of the manual (that nearly always helps). regards Alan -Original Message- From: jennifer [mailto:[EMAIL PROTECTED] Sent: 23 November 2003 23:47 To: 'Alan Munday'; [EMAIL PROTECTED] Subject: RE: [SAtalk] Rules, rules and more rules Hi Alan

RE: [SAtalk] Rules, rules and more rules

2003-11-23 Thread jennifer
Hi Alan > -Original Message- > From: [EMAIL PROTECTED] [mailto:spamassassin- > [EMAIL PROTECTED] On Behalf Of Alan Munday > Sent: Sunday, November 23, 2003 6:03 PM > To: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Rules, rules and more rules > > Thanks to all who re

Re: [SAtalk] Rules, rules and more rules

2003-11-23 Thread Robert Menschel
Hello Alan, Friday, November 21, 2003, 3:12:25 AM, you wrote: AM> Having only recently installed SA I'd like to ask about the various AM> rules files that abound. AM> Is there a listing of the common rules and their target? See http://www.exit0.us and subsequent links. Bob Menschel --

RE: [SAtalk] Rules, rules and more rules

2003-11-23 Thread Alan Munday
Thanks to all who responded to me with hints and suggestions. I had seen all the web sites mentioned but had not completely understood how they all fitted together. Maybe a topic for the FAQ? I've tried adding a fair number of rules and, noting comments made, had the notion of asking if it would

[SAtalk] Rules, rules and more rules

2003-11-23 Thread Alan Munday
Having only recently installed SA I'd like to ask about the various rules files that abound. Is there a listing of the common rules and their target? Are they all just a matter of dropping the .ch into the SA configuration directory, or is it best to edit before deploying? Are there any recomme

Re: [SAtalk] Rules, rules and more rules

2003-11-21 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello spamassassin, Friday, November 21, 2003, 7:13:33 AM, you wrote: s> Having only recently installed SA I'd like to ask about the various s> rules files that abound. s> Is there a listing of the common rules and their target? In addition to Chr

RE: [SAtalk] Rules, rules and more rules

2003-11-21 Thread Alan Munday
Bret Thanks for your response. I've dropped those recommended onto my system. I'll see how they go. regards Alan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bret Miller Sent: 21 November 2003 20:54 To: [EMAIL PROTECTED] Subject: RE: [SAt

RE: [SAtalk] Rules, rules and more rules

2003-11-21 Thread Bret Miller
> Having only recently installed SA I'd like to ask about the > various rules files that abound. > > Is there a listing of the common rules and their target? Well, Chris Santerre has a site that groups some of the common rules together. It's under development and you'll find it at: http://www.me

[SAtalk] Rules, rules and more rules

2003-11-21 Thread spamassassin
Having only recently installed SA I'd like to ask about the various rules files that abound. Is there a listing of the common rules and their target? Are they all just a matter of dropping the .ch into the SA configuration directory, or is it best to edit before deploying? Are there any recommen

[SAtalk] Rules for hoaxes

2003-09-10 Thread Tom Meunier
I'm mulling over whether to make some SA rules for some of the more common urban legends and virus hoaxes. Has anyone played with this, that is willing to share experiences? -tom --- This sf.net email is sponsored by:ThinkGeek Welcome to gee

RE: [SAtalk] Rules

2003-08-22 Thread AltGrendel
On Tue, 2003-08-19 at 09:19, Chris Santerre wrote: > > -Original Message- > > From: Alan Fullmer [mailto:[EMAIL PROTECTED] > > Sent: Monday, August 18, 2003 10:46 PM > > To: [EMAIL PROTECTED] > > Cc: [EMAIL PROTECTED] > > Subject: [SAtalk] Rules > &g

RE: [SAtalk] Rules

2003-08-19 Thread Chris Santerre
> -Original Message- > From: Alan Fullmer [mailto:[EMAIL PROTECTED] > Sent: Monday, August 18, 2003 10:46 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: [SAtalk] Rules > > > Is there a good website / url someone could post that > describes

Re: [SAtalk] Rules

2003-08-18 Thread Matt Kettler
At 08:45 PM 8/18/03 -0600, Alan Fullmer wrote: Is there a good website / url someone could post that describes how to write rules for spam assassin? I wrote a fairly comprehensive guide here: http://mywebpages.comcast.net/mkettler/sa/SA-rules-howto.txt -

[SAtalk] Rules

2003-08-18 Thread Alan Fullmer
Is there a good website / url someone could post that describes how to write rules for spam assassin? --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Do

[SAtalk] Rules guide updated, new text and ToC added.

2003-08-09 Thread Matt Kettler
I think this is going to be the final version for a while. Sorry I put off this last edit, but real life got busy for a while. In any event, the guide now covers meta, uri, and rawbody rules, and has a table of contents. These are really things I wanted to add a long time ago, and I feel they m

Re: [SAtalk] rules needed: iraq "most wanted" playing cards

2003-07-25 Thread Robert Menschel
Hello jvanasco, Friday, July 25, 2003, 7:49:18 AM, you wrote: jmc> I've been getting dozens of these, and they've got pretty clever jmc> senders who don't seem to be doing things that other rules or bayes jmc> catch. jmc> anyone have some good custom rules they use? No custom rules for it here.

RE: [RD] RE: [SAtalk] rules needed: iraq "most wanted" playing ca rds

2003-07-25 Thread Chris Santerre
n, is relished by the wisest men." - Willy Wonka > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: Friday, July 25, 2003 2:19 PM > To: Chris Santerre > Cc: [EMAIL PROTECTED] > Subject: Re: [RD] RE: [SAtalk] rules needed: iraq &q

Re: [RD] RE: [SAtalk] rules needed: iraq "most wanted" playing ca rds

2003-07-25 Thread jvanasco
est men." - Willy Wonka -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, July 25, 2003 12:40 PM To: Chris Santerre Cc: [EMAIL PROTECTED] Subject: Re: [RD] RE: [SAtalk] rules needed: iraq "most wanted" playing cards if it were only so easy.. i thi

RE: [RD] RE: [SAtalk] rules needed: iraq "most wanted" playing cards

2003-07-25 Thread Chris Santerre
ustom Rules Emporium Keeper > > http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm > > "A little nonsense now and then, is relished by the wisest men." - > > Willy > > Wonka > > > >> -Original Message- > >> From: [EMAIL

Re: [RD] RE: [SAtalk] rules needed: iraq "most wanted" playing cards

2003-07-25 Thread jvanasco
and then, is relished by the wisest men." - Willy Wonka -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, July 25, 2003 10:49 AM To: [EMAIL PROTECTED] Subject: [SAtalk] rules needed: iraq "most wanted" playing cards I've been gettin

[RD] RE: [SAtalk] rules needed: iraq "most wanted" playing cards

2003-07-25 Thread Chris Santerre
/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wonka > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: Friday, July 25, 2003 10:49 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] rules needed

[SAtalk] rules needed: iraq "most wanted" playing cards

2003-07-25 Thread jvanasco
I've been getting dozens of these, and they've got pretty clever senders who don't seem to be doing things that other rules or bayes catch. anyone have some good custom rules they use? does 2.6 already have rules for this (or planned inclusion) ? -

Re: [SAtalk] rules not working

2003-06-22 Thread Tony Earnshaw
Test, James wrote: Using spamassassin 2.54 + red hat 8.0 + exim 4.20. I have made some custom rules, and sometimes incoming mail seems to totally bypass my custom rules. I had a piece of spam come in that did not seem to be analyzed by my local.cf file. I can then take that same mail and forwar

[SAtalk] rules not working

2003-06-22 Thread Test, James
Using spamassassin 2.54 + red hat 8.0 + exim 4.20. I have made some custom rules, and sometimes incoming mail seems to totally bypass my custom rules. I had a piece of spam come in that did not seem to be analyzed by my local.cf file. I can then take that same mail and forward it to go throug

Re: [SAtalk] Rules to check out

2003-06-07 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Jerry, Friday, June 6, 2003, 6:59:39 PM, you wrote: JB> I've come up with lots of custom rules as of late, ... Please give me JB> comments as to whether you find them to be accurate/useful. Running them against my personal corpus of 3k spam an

[SAtalk] Rules to check out

2003-06-06 Thread Jerry Bell
I've come up with lots of custom rules as of late, and I'd like to see if they should be merged into spamassassin ruleset. Below are some of the more effective ones I've found. Please give me comments as to whether you find them to be accurate/useful. Thanks, Jerry http://www.syslog.org heade

Re: [SAtalk] Rules How-to or Tutorial?

2003-01-23 Thread Theo Van Dinter
On Thu, Jan 23, 2003 at 09:56:14AM -0500, Debbie D wrote: > header FROM_ARMY From =~ /army.mil/i > describe FROM_ARMY From ARMY Ok. > which did not wuite do the trick as there are a bunch of sub-domains that > the mail could be FROM.. so I changed it to: doesn't matter, the above m

[SAtalk] Rules How-to or Tutorial?

2003-01-23 Thread Debbie D
Is there any place I can find a tutorial on how to create rules?? I have been able to find a rule that exists and copy/paste/alter much much success but it is the "from scratch" ones I have consistant trouble with. for instance I am finding mails from the US Army being flase positive flagged, so I

RE: [SAtalk] Rules for not alphanumeric characters

2002-11-01 Thread Steve Thomas
6:12 AM | To: [EMAIL PROTECTED] | Subject: [SAtalk] Rules for not alphanumeric characters | | | Setup: RedHat 7.3 |Spamassassin 2.50 |(Running as daemon) | | In the many rules that spamassasin parses for each message, are some | of them devoted to identifying a subject line that ha

[SAtalk] Rules for not alphanumeric characters

2002-11-01 Thread Harry Putnam
Setup: RedHat 7.3 Spamassassin 2.50 (Running as daemon) In the many rules that spamassasin parses for each message, are some of them devoted to identifying a subject line that has too many non-alphanumic characters? Some kind of percentage deal... Can someone identify any such rule

[SAtalk] Rules to recognise Postfix failure notices

2002-09-13 Thread Laura Dove
Hello, SpamAssassin (version 2.41) doesn't recognise default postfix returned mail messages. The subject is: -=-=- Subject: Undelivered Mail Returned to Sender -=-=- and the body contains something like: -=-=- This is the Postfix program at host onouga.chocolat-miam.net. I'm sorry to ha

Re: [SAtalk] Rules Question

2002-07-23 Thread rODbegbie
Kevin Gagel wrote: > Based on the following header info, is my rule built correctly? > > Received: from (127.0.0.1) by MAIL3041.flowgo.com (PowerMTA(TM) > v1.5); Mon, 22 Jul 2002 17:19:56 -0700 > (envelope-from <[EMAIL PROTECTED]>) > > I want to make a rule that will tag it bassed on t

[SAtalk] Rules Question

2002-07-23 Thread Kevin Gagel
Based on the following header info, is my rule built correctly? Received: from (127.0.0.1) by MAIL3041.flowgo.com (PowerMTA(TM) v1.5); Mon, 22 Jul 2002 17:19:56 -0700 (envelope-from <[EMAIL PROTECTED]>) I want to make a rule that will tag it bassed on the flowgo.com in the recieved lin

[SAtalk] Rules in local.cf not working

2002-06-10 Thread Steven Lawson
I'm running Postfix/SpamAssassin/SpamPD on an OpenBSD system. Everything appears to be working except rules that I've added to /etc/mail/spamassassin/local.cf. I have sent myself a test spam message including one of the words from my rules then examine the header lines that spamassassin adds. No

RE: [SAtalk] RULES File For rpm version

2002-05-22 Thread Jim Hale
: Mailing List - Spam Assassin > Subject: Re: [SAtalk] RULES File For rpm version > > > /usr/share/spamassassin on my system... 10_misc.cf has the > "score" entry... > > > ___ > > Don't miss th

Re: [SAtalk] RULES File For rpm version

2002-05-21 Thread Ron Carter
> Jim> I installed the i386.rpm version of Spam Assassin and thanks to the > Jim> help from everybody, I got it up and running - question is, where's > Jim> the rules file so that I can alter the percentages and such? > > Dunno, but you can list the files in an RPM with > > rpm -ql

Re: [SAtalk] RULES File For rpm version

2002-05-21 Thread Skip Montanaro
Jim> I installed the i386.rpm version of Spam Assassin and thanks to the Jim> help from everybody, I got it up and running - question is, where's Jim> the rules file so that I can alter the percentages and such? Dunno, but you can list the files in an RPM with rpm -ql rpmname o

[SAtalk] RULES File For rpm version

2002-05-21 Thread Jim Hale
I installed the i386.rpm version of Spam Assassin and thanks to the help from everybody, I got it up and running - question is, where's the rules file so that I can alter the percentages and such? Thanks! Jim Hale --- Jim & Kathy's Website Collection http://hale.dyndns.org

Re: [SAtalk] Rules for digitally signed messages

2002-05-03 Thread Craig R Hughes
dman wrote: d> On Fri, May 03, 2002 at 11:24:43AM +0100, Darren Coleman wrote: d> | Yes, it does check for PGP signed messages, which is good. d> | d> | But digitally signed messages (like yours and mine), i.e those that d> | require the person to buy a digital id, go through a verification d> |

RE: [SAtalk] Rules for digitally signed messages

2002-05-03 Thread Craig R Hughes
gt; DC> > -Original Message- DC> > From: dman [mailto:[EMAIL PROTECTED]] DC> > Sent: 03 May 2002 01:53 DC> > To: Darren Coleman DC> > Subject: Re: [SAtalk] Rules for digitally signed messages DC> > DC> > On Fri, May 03, 2002 at 01:20:31AM +0100, Darren

Re: [SAtalk] Rules for digitally signed messages

2002-05-03 Thread dman
On Fri, May 03, 2002 at 11:24:43AM +0100, Darren Coleman wrote: | Yes, it does check for PGP signed messages, which is good. | | But digitally signed messages (like yours and mine), i.e those that | require the person to buy a digital id, go through a verification | procedure etc, are not given a

RE: [SAtalk] Rules for digitally signed messages

2002-05-03 Thread Darren Coleman
possesses a digital id and uses it when sending an email, that should surely be worth some kind of negative value even if it isn't much. Daz > -Original Message- > From: dman [mailto:[EMAIL PROTECTED]] > Sent: 03 May 2002 01:53 > To: Darren Coleman > Subject: Re: [SAtalk]

Re: [SAtalk] Rules for digitally signed messages

2002-05-02 Thread Matthew Cline
On Thursday 02 May 2002 05:20 pm, Darren Coleman wrote: > I would've presumed that SpamAssassin would give a score (presumably > negative) for MIME attachments, in particular digitally signed messages. > I can't imagine many spammers going to the trouble of digitally signing > email.. :) As has b

[SAtalk] Rules for digitally signed messages

2002-05-02 Thread Darren Coleman
I would've presumed that SpamAssassin would give a score (presumably negative) for MIME attachments, in particular digitally signed messages. I can't imagine many spammers going to the trouble of digitally signing email.. :) Daz ___ H

Re: [SAtalk] Rules analysis

2002-05-01 Thread Craig R Hughes
Bart Schaefer wrote: BS> So about all you could say from just this analysis is that rules that were BS> never hit could possibly be deleted. ...except that there is probably network-geographic disparity in spam -- some people receive different spam than others, and so just because you're not see

Re: [SAtalk] Rules analysis

2002-05-01 Thread Tom Eastep
On Wed, 1 May 2002, Bart Schaefer wrote: > On Wed, 1 May 2002, Daniel Rogers wrote: > > > I find this quite interesting, beucase it gives and example of how > > ineffective some of the rules have become. (NIGERIAN_SCAM, for example) > > There are a couple of things to note about this analysis:

Re: [SAtalk] Rules analysis

2002-05-01 Thread Bart Schaefer
On Wed, 1 May 2002, Daniel Rogers wrote: > I find this quite interesting, beucase it gives and example of how > ineffective some of the rules have become. (NIGERIAN_SCAM, for example) There are a couple of things to note about this analysis: (1) It doesn't account for duplication. If you got

[SAtalk] Rules analysis

2002-05-01 Thread Daniel Rogers
I found Bart's results interesting, so I asked him for a copy of it and ran it over my caught spam for the last 15 days. I'll include my results below. I find this quite interesting, beucase it gives and example of how ineffective some of the rules have become. (NIGERIAN_SCAM, for example) Per

[SAtalk] Rules for "Monster Crush" spam

2002-03-25 Thread Michael Moncur
I've been getting lots of spam from "Monster Crush" (which I presume is the former MonsterHut) and since they're mostly one big graphic, they don't tend to be scored as spam. Here are some rules that consistently catch all of their spam, at least at the moment: uri QVES_COM

[SAtalk] Rules for em5000.net spam

2002-03-21 Thread Michael Moncur
Here are a couple of rules I am using to catch spam from em5000.net, a so-called "legitimate" email service that nonetheless sends me nothing but spam. They've been VERY active lately - these rules would have caught literally 2/3 of my spam that SpamAssassin has missed in the last two weeks. I'm