Re: [SAtalk] question about USER_IN_BLACKLIST

2004-01-13 Thread Matt Kettler
At 02:08 PM 1/13/2004, Ricardo Kleemann wrote: Can someone help me understand why it's being blacklisted? The sender email address is [EMAIL PROTECTED] Did you look at ALL the sender-related headers? blacklist_from doesn't just look at "From:" it also looks at "Return-Path" "Reply-To" and others.

Re: [SAtalk] Question re RBL and Rules

2004-01-12 Thread Matt Kettler
At 02:11 PM 1/12/2004, Ed Greenberg wrote: I found in the rules that spamassassin ships a rule for checking against bl.spamcop.net. In the score file, it gives this a zero weight, encouraging you to give it some score if you donate. Since I am a spamcop customer and feel justified in using them,

Re: [SAtalk] Question re RBL and Rules

2004-01-12 Thread Adam D. Lopresto
That's all you need to do. SpamAssassin doesn't actually run any tests that have a score of 0, so the test was all set up and ready to be run, but disabled (by the zero score). Changing that is all you need to do to enable it. On Mon, 12 Jan 2004, Ed Greenberg wrote: > I found in the rules that

Re: [SAtalk] Question about spam box

2004-01-05 Thread Evan Platt
--On Monday, January 05, 2004 10:00 PM +0100 [EMAIL PROTECTED] wrote: > > I would like to ask a question about spam assassin. I have enabled spam > assassin on my mail box, and i have also enabled the spam box (by the > way, i use Horde mail system). However, i can't view the spam box in my > mai

Re: [SAtalk] Question re: Rule

2003-12-24 Thread Michael Satterwhite
On Wednesday 24 December 2003 09:27, Mike Kuentz (2) wrote: > Hope that helps, > Mike Thanks very much. I'm learning and really appreciate everyone's help ---Michael Merry Christmas! --- This SF.net email is sponsored by: IBM Linux Tutorials

Re: [SAtalk] Question re: Rule

2003-12-24 Thread Matt Kettler
At 09:49 AM 12/24/2003, Michael Satterwhite wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've started to see some spam with subjects like the following: Satterwh, =?ISO-8859-1?B?bG93ZXN0IHByaWNlIGluc3VyYW5jZSB5ZXQu?= This is an obvious attempt to hide the subject so that it won't

RE: [SAtalk] Question re: Rule

2003-12-24 Thread Mike Kuentz (2)
#This grabs the un-decoded subject, your # rule was looking at the decoded subject. # You probably don't want to change this and make it scorable # since a ton of legit mail uses this charset header __MK_CHARSET_01 Subject:raw =~ /ISO\-8859/i describe __MK_CHARSET_01 Uses a ISO-8859 #What the s

Re: [SAtalk] Question for developpers: Who maintain now php-sa-mysql!

2003-12-20 Thread Kevin A. McGrail
Justin England wrote the original PHP-SA. In short, after working on some patches and fixing some things ages ago, Justin wasn't interested in continuing the work. I forked the code and added my initials. I would suggest if you want to create another fork that you consider my vanilla code. There

RE: [SAtalk] Question on SUBJ_HAS_UNIQ_ID-test

2003-12-12 Thread Mike Kuentz (2)
from looking at the eval test that runs for that rule, it checks against an English dictionary. Maybe you should disable the test score SUBJ_HAS_UNIQ_ID 0 Mike > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Mika A > Sent: Friday, December 1

Re: [SAtalk] Question (proposal?) about SA dev and its rules update.

2003-12-02 Thread Marcio Merlone
On Tue, 02 Dec 2003 11:22:46 -0500 Matt Kettler <[EMAIL PROTECTED]> wrote: > At 09:06 AM 12/2/03 -0200, Marcio Merlone wrote: > >But, as an end-user (I sys-admin some thousands of mail accounts), I > >think that the rules could be forked from SA, so community could > >treat SA as a spam-scanning e

Re: [SAtalk] Question (proposal?) about SA dev and its rules update.

2003-12-02 Thread Matt Kettler
At 09:06 AM 12/2/03 -0200, Marcio Merlone wrote: But, as an end-user (I sys-admin some thousands of mail accounts), I think that the rules could be forked from SA, so community could treat SA as a spam-scanning engine and the rules would be the spam database, like an anti-virus package. This would

RE: [SAtalk] Question (proposal?) about SA dev and its rules upda te.

2003-12-02 Thread Chris Santerre
A one stop rule place is in the works. Mine is only version .0001 alpha :) Link in sig. Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wo

Re: [SAtalk] Question about user prefs.

2003-11-18 Thread Terry Milnes
Paul Hirschorn wrote: I have been working on a variety of scenarios of how to handle per user spam prefs on a mail gateway machine. Through trial and error found a couple of interesting things. In order to user prefs to be read from SQL I need to invoke the -u "username" flag in spamc. I have my

Re: [SAtalk] Question on blacklists

2003-11-05 Thread Fred
http://www.exit0.us/index.php/CustomRBLs This page explains how to add your own RTBLs. Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ Nigel Featherston wrote: > Hello, > > I would like to know if SpamAssassin uses the following blacklists: > > rhsbl.ahbl.org

RE: [SAtalk] Question Re: SpamAssassin Port on FreeBSD 4.9

2003-10-29 Thread Dan Kohn
spamassassin -D is your friend. Use it to show whether your SQL access is working or not. Once it is, spamd will probably work, or you can try spamd -D, and run spamc from a different window. - dan -- Dan Kohn -Original Messag

Re: [SAtalk] question about the number of tokens analyzed in Bayes

2003-10-10 Thread Justin Mason
=?iso-8859-1?Q?Jean-S=E9bastien_Guay-Leroux?= writes: > What is the reason for Bayes in spamassassin to use the 150 most significant > tokens in a email if Paul Graham mentions that you only should use the > fifteen most significant ? It got better results in empirical testing. Check back throug

RE: [SAtalk] Question about my setup: Feedback please

2003-10-10 Thread Chris Santerre
I have the same setup, only with sendmail. The best way to do this is using procmail, which you already use! :) Basically when you get a high scoring spam, you not only forward it to the internal spam account, but a local spam account as well. This is what I do. You can do the same for low scoring

RE: [SAtalk] Question about whitelist NOT AWL

2003-10-09 Thread Colin A. Bartlett
You can put the configuration commands for white/blacklists directly in your local.cf file or into any other .cf file you place in the /etc/mail/spamassassin directory. There is also a usr/share/spamassassin directory that contains .cf files that you can modify but bear in mind that these files wil

RE: [SAtalk] Question about whitelist NOT AWL

2003-10-09 Thread Stephen Bradley
but now it seems to be working okay. thanks to everyone steve -Original Message- From: Colin A. Bartlett [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2003 5:52 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Question about whitelist NOT AWL Maybe you can give us more info about

Re: [SAtalk] Question about whitelist NOT AWL

2003-10-09 Thread Kai Schaetzl
Stephen Bradley wrote on Wed, 8 Oct 2003 17:45:42 -0400: > BUT, if I put my black/white list entries in that file or any other file in > the SA directories > it will not work. None of the entries are read. > You *did* restart spamd, did you? Kai -- Kai Schätzl, Berlin, Germany Get your web

RE: [SAtalk] Question about whitelist NOT AWL

2003-10-09 Thread Colin A. Bartlett
m: Kai Schaetzl [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 5:32 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Question about whitelist NOT AWL Stephen Bradley wrote on Wed, 8 Oct 2003 16:06:14 -0400: > I use spamd/spamc and I know it reads the /etc/mail/spamassassin/local.cf >

RE: [SAtalk] Question about whitelist NOT AWL

2003-10-08 Thread Stephen Bradley
2003 5:32 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Question about whitelist NOT AWL Stephen Bradley wrote on Wed, 8 Oct 2003 16:06:14 -0400: > I use spamd/spamc and I know it reads the /etc/mail/spamassassin/local.cf > Just put all stuff in that directory! sa/spamd reads all files

Re: [SAtalk] Question about whitelist NOT AWL

2003-10-08 Thread Kai Schaetzl
Stephen Bradley wrote on Wed, 8 Oct 2003 16:06:14 -0400: > I use spamd/spamc and I know it reads the /etc/mail/spamassassin/local.cf > Just put all stuff in that directory! sa/spamd reads all files in there. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: htt

RE: [SAtalk] Question about whitelist NOT AWL

2003-10-08 Thread Colin A. Bartlett
You can put the configuration commands for white/blacklists directly in your local.cf file or into any other .cf file you place in the /etc/mail/spamassassin directory. There is also a usr/share/spamassassin directory that contains .cf files that you can modify but bear in mind that these files wil

Re: [SAtalk] Question about whitelist NOT AWL

2003-10-08 Thread Hannu Liljemark
On Wed, Oct 08, 2003 at 04:06:14PM -0400, Stephen Bradley wrote: > I cannot figure out where to put my hard coded white/black > lists now. > > I use spamd/spamc and I know it reads the > /etc/mail/spamassassin/local.cf file because I can change > the score and it shows up after a restart. > > SA

Re: [SAtalk] Question for the FAQ

2003-09-21 Thread Ivar Magne Auestad
What I talk about is assassinating spam depending on Mail Attribute characteristics, like name. Chris Santerre wrote: You can see some of the custom virus rules at www.exit0.us I don't believe you will ever see them in releases of spamassassin. But you can always add the ones that are custom wri

RE: [SAtalk] Question for the FAQ

2003-09-20 Thread Chris Santerre
You can see some of the custom virus rules at www.exit0.us I don't believe you will ever see them in releases of spamassassin. But you can always add the ones that are custom written. It just has to do with semantics. It is called Spamassassin, and that has to be its main focus. > -Original

Re: [SAtalk] Question for the FAQ

2003-09-19 Thread Jim
On Fri, Sep 19, 2003 at 05:31:33PM -0400, Bruce Pennypacker wrote: > The problem I'm finding with the latest worm is that sometimes the MIME > attachment for the actual worm isn't included in the e-mail. I've > already set MICROSOFT_EXECUTABLE high but I'm still getting a few > e-mails an hour

Re: [SAtalk] Question for the FAQ

2003-09-19 Thread Bruce Pennypacker
Jim wrote: On Thu, Sep 18, 2003 at 11:00:40PM +0500, Ivar Magne Auestad wrote: You are writing in the FAQ that you don't focus on viruses, but I have a suggestion. It would be very easy to add attachment type as a qualifyer. Very many viruses are attached as .pif-files or double extention attac

Re: [SAtalk] Question for the FAQ

2003-09-19 Thread Jim
On Thu, Sep 18, 2003 at 11:00:40PM +0500, Ivar Magne Auestad wrote: > You are writing in the FAQ that you don't focus on viruses, but I have a > suggestion. It would be very easy to add attachment type as a qualifyer. > Very many viruses are attached as .pif-files or double extention > attachmen

RE: [SAtalk] Question for the FAQ

2003-09-19 Thread Tom Meunier
Absolutely. www.exit0.us/index.php/VirusBounceRules among other things. -tom > -Original Message- > From: Ivar Magne Auestad [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 18, 2003 1:01 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: [SAtalk] Question for the FAQ >

Re: [SAtalk] Question on installing SA and using spamd

2003-09-15 Thread Jonathan G - Mailing List
Hi Jason, comment in line, Jason Williams wrote: Good morning everyone. I wanted to ask a couple of quick questions about installing SA and running spamd. From what i've read, I have two options to install SA: use perl -MCPAN or download the source and install it. My first question is about

Re: [SAtalk] Question about how to make *ALL* mail go through SA.

2003-09-03 Thread Matt Kettler
At 12:07 PM 9/3/2003 -0400, Steven W. Orr wrote: Is there something I can do to make mail addressed to a list address go through SA? I suspect you'll need to integrate SA at the MTA layer instead of procmail to make this happen. Procmail is called as the mail is delivered to a local user, but tha

RE: [SAtalk] Question

2003-08-29 Thread John McGivern
ld be great. I looked around on the web for some info on it but I couldn't really find any. Thanks, John McGivern -Original Message- From: Rick Macdougall [mailto:[EMAIL PROTECTED] Sent: August 22, 2003 8:45 AM To: Thomas Skaret Larsen Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Que

Re: [SAtalk] question about mysql sa with qs

2003-08-28 Thread Jonas Pasche
Hi Patrick, > I cannot get spamc to pass the proper owner to spamd so it can pull out the > proper userprefs out of the mysql db. This seems to be a simple bug in the newly introduced code in qmail-scanner. Edit sub-spamassassin.pl, and change: $cmdline_recip=~/^([EMAIL PROTECTED])$/; into:

RE: [SAtalk] question/idea for whitelisted sender handling

2003-08-27 Thread Mike Kuentz (2)
I think that would be a bad idea. I jacked up the MS executable test to +110 to make sure if some one was dumb enough to send an MS executable, but was white listed, that the mail would still get tagged. Maybe as an option it would be nice for some, such as HALT_ON_WHITELISTED 1 or something s

Re: [SAtalk] Question about the GA...

2003-08-27 Thread Simon Byrnand
> > Simon Byrnand writes: >> I was just thinking about the GA process and although I havn't looked at >> it to see exactly how it works, I was wondering the following >> >> Presumably it starts with a certain scoreset, runs the spam through, >> sees >> what percentage score above 5, then runs t

Re: [SAtalk] Question about the GA...

2003-08-27 Thread Justin Mason
Simon Byrnand writes: > I was just thinking about the GA process and although I havn't looked at > it to see exactly how it works, I was wondering the following > > Presumably it starts with a certain scoreset, runs the spam through, sees > what percentage score above 5, then runs the ham thr

Re: [SAtalk] Question

2003-08-22 Thread Rick Macdougall
Hi, Thomas Skaret Larsen wrote: anyone know how to enable spamassassin PER domain. in an easy way. and how can i use spamassassin without using qmail-scanner and not need to recompile my qmail install with the qmailqueue patch., Add the followng to the .qmail-default file if you are using vpopm

Re: [SAtalk] Question regarding eval() rules and HTML spam

2003-08-14 Thread Justin Mason
Carl R. Friend writes: >For what it's worth, I'm stuck at 2.43 because the newer versions > are too resource-intensive for my rather modest iron. There's the problem right there. Those spams are caught with 2.5x and better with 2.60. :( Why not try out 2.55 *with bayes disabled* -- that sho

Re: [SAtalk] Question

2003-08-14 Thread Matt Kettler
At 08:04 PM 8/14/2003 +0200, Hub Dohnmen wrote: I am running RedHat 7.2 with Spamassassin installed thru RPMs. I have also integrated the exiscan-patch into Exim. Can I change the path of the user_prefs files in a cfg-file? The default of the file is the home-drectory of the user. I want to use t

Re: [SAtalk] Question regarding bayes scores

2003-08-04 Thread Justin Mason
Carey Jung writes: > Could somebody explain to me why the BAYES_80 score for local-with-bayes > (5th column, 5.300) is higher than the BAYES_90 and BAYES_99 scores? This > seems counter-intuitive. This should be a FAQ, if it isn't already. Basically, the GA looks at the overall success rate --

RE: [SAtalk] Question about what users get their mail processed through SA

2003-08-01 Thread Gilson, Larry
> -Original Message- > From: Matt Kettler > At 05:37 PM 8/1/03 -0400, Steven W. Orr wrote: > >But there is no specific user associated with a mailing list. > > > >1. Is this why mail is not going through SA if it's bound for a > > list? > >2. Is there a way to make all mail go through

RE: [SAtalk] Question about what users get their mail processed through SA

2003-08-01 Thread Larry Gilson
> -Original Message- > From: Matt Kettler > At 05:37 PM 8/1/03 -0400, Steven W. Orr wrote: > >But there is no specific user associated with a mailing list. > > > >1. Is this why mail is not going through SA if it's bound for a > > list? > >2. Is there a way to make all mail go through SA

RE: [SAtalk] Question about what users get their mail processed through SA

2003-08-01 Thread Larry Gilson
Take a look at this link from a previous post: http://www.stearns.org/doc/spamassassin-setup.current.html --Larry --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are ava

Re: [SAtalk] Question about what users get their mail processed through SA

2003-08-01 Thread Matt Kettler
At 05:37 PM 8/1/03 -0400, Steven W. Orr wrote: But there is no specific user associated with a mailing list. 1. Is this why mail is not going through SA if it's bound for a list? 2. Is there a way to make all mail go through SA? Procmail is an MDA, thus, it only gets involved if a message is handl

Re: [SAtalk] Question about using sa-learn

2003-08-01 Thread Daniel Carrera
I don't know if that's the case, but if you "--forget" the spam mailbox first it should be okay. On Fri, Aug 01, 2003 at 11:58:42AM -0400, Michael W. Cocke wrote: > The docs seem to say if a message is learned as ham, and then > re-learned as spam, the 'ham' learning is undone. Am I understandin

Re: [SAtalk] Question about filtering

2003-07-29 Thread Thomas Cameron
Procmail will do it, but you can also use spamass-milter (if you use Sendmail) to bounce spam to a catchall address. -- Thomas Cameron, RHCE, CNE, MCSE, MCT Cameron Technical Services, Inc. http://www.camerontech.com (512) 454-3200 --- This SF

Re: [SAtalk] Question about using SA with DCC

2003-07-21 Thread Tony Earnshaw
Simon Byrnand wrote: Unlike Razor2, which Spamassassin picks up by itself, you seem to need to specify a few things in your /etc/mail/spamassassin/local.cf. At the minimum you need to tell it the path to the dccproc executable, thus: dcc_path /usr/local/bin/dccproc FWIW, 2.60 picks it up autom

Re: [SAtalk] Question about using SA with DCC

2003-07-20 Thread Simon Byrnand
At 22:35 20/07/03 -0400, Steven W. Orr wrote: I currently have razor installed for use by SA. I'd like to also add DCC. Do I have to do anything once I install DCC to make SA know that it's there? Do I just reinstall SA or is there more? Or do I even have to do that? Unlike Razor2, which Spamassas

Re: [SAtalk] question about returning mail

2003-07-12 Thread Tony Earnshaw
dawnshade wrote: routers: # Spam Assassin spamcheck_router: no_verify driver = accept condition = "${if and { {!def:h_X-Spam-Flag:} {!eq {$received_protocol}{spam-scanned}}} {1}{0}}" transport = spamcheck [...] In this case: [EMAIL PROTECTED] - not real address. How i can tell to Spamassa

RE: [SAtalk] question about returning mail

2003-07-11 Thread Luzynski, Steve
> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, July 11, 2003 11:44 AM > To: dawnshade; [EMAIL PROTECTED] > Subject: Re: [SAtalk] question about returning mail > > At 04:44 PM 7/11/2003 +0400, dawnshade wrote: > >In this ca

Re: [SAtalk] question about returning mail

2003-07-11 Thread Matt Kettler
At 04:44 PM 7/11/2003 +0400, dawnshade wrote: In this case: [EMAIL PROTECTED] - not real address. How i can tell to Spamassassin don't doing this It's not spamassassin that's doing it, spamassassin itself can't even try to do this. Exim however can do things like this, and it's Exim that needs

Re: [SAtalk] question: how to match '@' in body test

2003-06-27 Thread Matt Kettler
At 03:42 PM 6/27/2003 -0700, Marvin Raab wrote: I'm running SA 2.51 on Linux 7.3 with perl 5.6.1 I tried body [EMAIL PROTECTED] /[EMAIL PROTECTED]/ describe [EMAIL PROTECTED] searches for above phrase in body score [EMAIL PROTECTED] 15.0 The test is never executed. Also fails to execute: /[EMA

Re: [SAtalk] question about sa-learn and message/rfc822 attached mail

2003-06-26 Thread Gary Schrock
At 03:35 PM 6/25/2003, you wrote: On Wed, Jun 25, 2003 at 03:06:24PM -0400, Gary Schrock wrote: > What I thought happens is that sa-learn can recognize an email message that > contains a message/rfc822 attached message, and learn from that attached > message, hence the reason you should forward a

Re: [SAtalk] question about sa-learn and message/rfc822 attached mail

2003-06-25 Thread Kai Schaetzl
Gary Schrock wrote on Wed, 25 Jun 2003 15:06:24 -0400: > Do I need to be doing something before the message gets piped to > sa-learn to pull the attachment out so it's seperate? > Yes, sa-learn needs the message in the attachment, not the whole thing. That's why it is in the attachment, so you

Re: [SAtalk] question about sa-learn and message/rfc822 attached mail

2003-06-25 Thread Theo Van Dinter
On Wed, Jun 25, 2003 at 03:06:24PM -0400, Gary Schrock wrote: > What I thought happens is that sa-learn can recognize an email message that > contains a message/rfc822 attached message, and learn from that attached > message, hence the reason you should forward a spam message to it using > that

Re: [SAtalk] question: HTML_WEB_BUGS

2003-06-20 Thread Jonathan Vanasco
oh.. so its still in there, but as a modified, improved, form -- not completely taken out. thats what i thought was posted. On Friday, June 20, 2003, at 03:11 PM, Daniel Quinlan wrote: Jonathan Vanasco <[EMAIL PROTECTED]> writes: Any reason for this, or are we to use custom rules for that? It

Re: [SAtalk] question: HTML_WEB_BUGS

2003-06-20 Thread Daniel Quinlan
Jonathan Vanasco <[EMAIL PROTECTED]> writes: > Any reason for this, or are we to use custom rules for that? It was changed because the old test needed improvement, not on a whim. Old HTML_WEB_BUGS rule wasn't a very good discriminator between HTML spam and HTML ham. In other words, it had about

Re: [SAtalk] question: HTML_WEB_BUGS

2003-06-20 Thread Jonathan Vanasco
Any reason for this, or are we to use custom rules for that? On Thursday, June 19, 2003, at 10:45 PM, Daniel Quinlan wrote: Jonathan Vanasco <[EMAIL PROTECTED]> writes: body Image tag with an ID code to identify you HTML_WEB_BUGS0.542 0.100 0.100 0.100 does that trap http://b

Re: [SAtalk] question: HTML_WEB_BUGS

2003-06-19 Thread Daniel Quinlan
Jonathan Vanasco <[EMAIL PROTECTED]> writes: > body Image tag with an ID code to identify you > HTML_WEB_BUGS0.542 0.100 0.100 0.100 > > does that trap > http://blank.gif?id=123123";> > Yes, it did, but it won't in 2.60. -- Daniel Quinlan anti-

Re: [SAtalk] Question on XSPAM report in header.

2003-06-19 Thread Kai Schaetzl
Theo Van Dinter wrote on Thu, 19 Jun 2003 13:22:58 -0400: > I don't think we sort either, so the report order should be the order > of the test listing which should be the order in which the hits were made. > No, test order really is alphabetical, at least here. Kai -- Kai Schätzl, Berlin, G

Re: [SAtalk] Question on usage before MTA...

2003-06-19 Thread TeamHost Limited
Hello Matt, haven't used SA yet - so I didn't know there is more than one "database". Bye, Alexander > At 09:36 PM 6/19/2003 +0200, TeamHost Limited wrote: >>getting closer on this one ;-) >> >> > What database? the bayes database? Why bother? >>In order to have one one database which needs wor

Re: [SAtalk] Question on usage before MTA...

2003-06-19 Thread Matt Kettler
At 09:36 PM 6/19/2003 +0200, TeamHost Limited wrote: getting closer on this one ;-) > What database? the bayes database? Why bother? In order to have one one database which needs work on but several servers / ISPs to use it. Why should there be xxx databases to work on?? I think it is easier to ha

Re: [SAtalk] Question on usage before MTA...

2003-06-19 Thread TeamHost Limited
Hi Matt, getting closer on this one ;-) > What database? the bayes database? Why bother? In order to have one one database which needs work on but several servers / ISPs to use it. Why should there be xxx databases to work on?? I think it is easier to have one and share it. (Not only with word f

Re: [SAtalk] question about filtering w/ multiple domains

2003-06-19 Thread Lord Raiden
Sorry, ignore that last one. Replied to the wrong thread. --- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commis

Re: [SAtalk] question about filtering w/ multiple domains

2003-06-19 Thread Lord Raiden
> > I have this in there already but it is still not filtering. Any > > ideas on what I might have missed?? > > > > Turn on logging in the .procmailrc file and see what it says? It's > probably a typo in your receipe. > > Gerry > Ok, forgive me for being dumb, but how do I turn on loggin

Re: [SAtalk] Question on usage before MTA...

2003-06-19 Thread Matt Kettler
At 08:51 PM 6/19/2003 +0200, TeamHost Limited wrote: Hi Matt, thanks for the information. Is it possible to have mailservers share SA database? What database? the bayes database? Why bother? Is it possible with SA to - set an address to send all possible spam to? No, SA never sees the delivery e

Re: [SAtalk] Question on usage before MTA...

2003-06-19 Thread TeamHost Limited
Hi Matt, thanks for the information. Is it possible to have mailservers share SA database? We would like to do a spam-list for several of our partner ISPs - will be approx 3 datacenters involved at the first step - including all mailservers there! Is there any possibility to use SA like that??

Re: [SAtalk] Question on XSPAM report in header.

2003-06-19 Thread Theo Van Dinter
On Thu, Jun 19, 2003 at 01:43:15PM -0400, Chris Santerre wrote: > bunch of rawbody rules. Does SA go thru my local.cf and run all the header > rules first, or just top down? If top down, is there an order that would > give better performance? SA goes through rule types seperately. in no specific

RE: [SAtalk] Question on XSPAM report in header.

2003-06-19 Thread Chris Santerre
> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 19, 2003 1:23 PM > To: Chris Santerre > Cc: Spamassassin-Talk (E-mail) > Subject: Re: [SAtalk] Question on XSPAM report in header. > > > On Thu, Jun 19, 2003

Re: [SAtalk] Question on usage before MTA...

2003-06-19 Thread Matt Kettler
At 12:55 PM 6/19/2003 +0200, TeamHost Limited wrote: Hello list. Is it possible to use spamassassin before it reaches the server?? We would like to implement it on a firewall system which is set in front of our servers. Would this be possible? Has anyone done that yet? What is needed? No, this is

Re: [SAtalk] Question on XSPAM report in header.

2003-06-19 Thread Theo Van Dinter
On Thu, Jun 19, 2003 at 01:04:17PM -0400, Chris Santerre wrote: > When the test are shown in the header, they are in alphabetical order. But > the Report doesn't seem to be in any order that I can figure out. How does > SA decide which rule description order listed in the report ? I don't think we

Re: [SAtalk] Question about sa-learn

2003-06-10 Thread Jim Ford
On Mon, Jun 09, 2003 at 06:09:53PM -0500, Michael Satterwhite wrote: > Close. With spamd running as root, I'm running as michael. If I run sa-learn > running as michael, does that work, It works for me! Regards: Jim Ford --- This SF.net emai

Re: [SAtalk] Question about sa-learn

2003-06-10 Thread Kai Schaetzl
Michael Satterwhite wrote on Mon, 9 Jun 2003 18:09:53 -0500: > Close. With spamd running as root, I'm running as michael. If I run sa-learn > running as michael, does that work, or do I have to go to root mode? > I have to admit that I always run it as root, but this shouldn't be necessary. I t

Re: [SAtalk] Question about sa-learn

2003-06-09 Thread Michael Satterwhite
On Monday 09 June 2003 07:31, Kai Schaetzl wrote: > Not sure, since you don't explain the problem you have. Your sitewide bayes > db needs to be 666, so that all users can write to it, otherwise > auto-learning would fail f.i. Is that what you wanted to know? If *you* > want to train it you can ju

Re: [SAtalk] Question about sa-learn

2003-06-09 Thread Jonathan Vanasco
i've got a similar thing running SA-exim i only run sitewide - i'm not offering individual users their own prefs (we're a small company) so, spamd is running with /etc/spamassassin/local.cf as the local configuration file in there, i have these lines for bayes: ## ## Bayes ## # Enable the Bay

Re: [SAtalk] Question about BAYES tests

2003-06-09 Thread Chris Barnes
Simon Byrnand <[EMAIL PROTECTED]> wrote: >> Sadly, like most companies (not just ISP's) - their response was "if >> you pay for a higher level of service, you can turn off SA". > > And if that is the attitude of your ISP (putting SA on sitewide and > wanting you to pay extra for the privelledge of

Re: [SAtalk] Question about sa-learn

2003-06-09 Thread Kai Schaetzl
Michael Satterwhite wrote on Mon, 9 Jun 2003 05:44:16 -0500: > I'm running spamd in root mode. I'd like to start using the Bayesian filter, > but I'm not sure how to train Spamassassin when spamd is running root. I'm > sure I'm missing something very obvious. Can you offer any help? > Not sure,

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Chris, Friday, June 6, 2003, 10:03:20 AM, you wrote: CB> The isp I use for my private email address has recently started using CB> SA. It seems to work 'ok', but it seems to still generate: CB> * far too many false negatives CB> * occation

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Simon Byrnand
> Kai Schaetzl <[EMAIL PROTECTED]> wrote: >> Chris Barnes wrote on Fri, 6 Jun 2003 12:03:20 -0500: >> >>> I am more concerned about the false positives. Looking at the >>> headers of those messages that are legit, it seems that the biggest >>> score comes from the BAYES test. >>> >>> Is there a pl

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Chris Barnes
Kai Schaetzl <[EMAIL PROTECTED]> wrote: > As far as I understand this is not how the Bayes engine works. It just > matches token by token, gets the chance for spam and finally counts > them all together. Yeah, I know. It was mentioned in an article I read about using Bayes for spam detection (as

RE: [SAtalk] Question about BAYES tests

2003-06-06 Thread Tom Meunier
tell my users, "so, uninstall that foofoo junk." -tom -Original Message- From: Chris Barnes [mailto:[EMAIL PROTECTED] Sent: Friday, June 06, 2003 1:50 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Question about BAYES tests Incredimail also puts a "click here" (i

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Chris Barnes
Kai Schaetzl <[EMAIL PROTECTED]> wrote: > Chris Barnes wrote on Fri, 6 Jun 2003 12:03:20 -0500: > >> I am more concerned about the false positives. Looking at the >> headers of those messages that are legit, it seems that the biggest >> score comes from the BAYES test. >> >> Is there a place that

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Kai Schaetzl
Chris Barnes wrote on Fri, 6 Jun 2003 12:03:20 -0500: > I am more concerned about the false positives. Looking at the headers > of those messages that are legit, it seems that the biggest score comes > from the BAYES test. > > Is there a place that talks about how that score is derived? I'm not

Re: [SAtalk] Question about BAYES tests

2003-06-06 Thread Matt Kettler
At 12:03 PM 6/6/2003 -0500, Chris Barnes wrote: I am more concerned about the false positives. Looking at the headers of those messages that are legit, it seems that the biggest score comes from the BAYES test. Is there a place that talks about how that score is derived? Bayes is a learning system

Re: [SAtalk] question about mailscanner spamcheck rules

2003-04-03 Thread Aaron Sherman
On Thu, 2003-04-03 at 08:21, Madacs Panni wrote: > Hi Spamassassin Users! > > We use Mailscanner(v4.13) with Spamassassin(v2.44) for a few weeks. > I haven't read all of messages on the list, sorry if these questions > were answered earlier. > > 1. > A simple question first. :) > What does SPAM

RE: [SAtalk] Question: Bandwidth usage by spamd

2003-03-17 Thread Andrew
On Mon, 2003-03-17 at 11:05, Chris Santerre wrote: > I would only use RBLs for personal stuff. Not to protect a business. (That's > an opinion.) > I agree. When I tested a gateway with SA at where I work, the Huge Sticking Point was actually the RBL filtering, not the FPs. We had a major custome

Re: [SAtalk] Question about bayesian learning

2003-02-20 Thread John Rudd
Anyone? *taps on microphone* is this thing on? On Sunday, Feb 16, 2003, at 20:31 US/Pacific, John Rudd wrote: I have an automated spam handling set up right now which takes messages I put into a certain mbox-folder and uses them to add to my existing blacklist file (and then a cron job crea

RE: [SAtalk] Question

2003-01-12 Thread Steve Thomas
report_header use_terse_report | -Original Message- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On | Behalf Of Nick Marino | Sent: Sunday, January 12, 2003 1:27 AM | To: [EMAIL PROTECTED] | Subject: [SAtalk] Question | | | Where do you configure SA to tell it to put the spa

Re: [SAtalk] Question on 2.5 Bayesian training for newbies?

2003-01-02 Thread Simon Lyall
On Thu, 2 Jan 2003, Frank Pineau wrote: > Since my users all POP their mail (and therefore don't have access to the > server SA is on), I'd be happier with a way for them to train SA > themselves by, say, forwarding spam (and/or) non-spam to a special > "training" email account that will then train

Re: [SAtalk] Question on 2.5 Bayesian training for newbies?

2003-01-02 Thread Scot Wilcoxon
Theo Van Dinter wrote: Well, we're off discussing this issue at the moment. We're going back and forth between giving out a working, but generic (ie: not terrific) set of data which you can use to create a database, and enabling autotraining (so that your incoming messages will train the system

Re: [SAtalk] Question on 2.5 Bayesian training for newbies?

2003-01-02 Thread Frank Pineau
Since my users all POP their mail (and therefore don't have access to the server SA is on), I'd be happier with a way for them to train SA themselves by, say, forwarding spam (and/or) non-spam to a special "training" email account that will then train the filter without the admin's help. Anyone do

Re: [SAtalk] Question on 2.5 Bayesian training for newbies?

2003-01-02 Thread Theo Van Dinter
On Thu, Jan 02, 2003 at 10:58:53AM -0500, Chris Santerre wrote: > When SA 2.50 goes live, will there be a way to get a pretrained generic > version or corpus to train with? I haven't gone live with my SA yet, still > trying different things in the little spare time I have, and I don't have a > corp

Re: [SAtalk] question regarding spamc/spamd performance for large email services, and the spamc/spamd "protocol"

2002-12-13 Thread Kelsey Cummings
On Fri, Dec 13, 2002 at 11:08:07AM +0100, Ralf Hildebrandt wrote: > * Albert Croft <[EMAIL PROTECTED]>: > > > Question 1: > >What has the performance of spamassassin (particularly the > > spamc/spamd combination) been like for mailservers handling > > medium-to-large quantities of in-bound m

Re: [SAtalk] question regarding spamc/spamd performance for large

2002-12-13 Thread Justin Mason
> I think the time taken to scan a message vastly outweighs the time > taken to open up a new connection. fwiw, the 3-message TCP connection overhead is not a big deal on a LAN. Reusing a connection a la HTTP keepalive is important over the net or a WAN, but for spamd it's overkill. --j. --

Re: [SAtalk] question regarding spamc/spamd performance for largeemail services, and the spamc/spamd "protocol"

2002-12-13 Thread Matt Sergeant
Albert Croft said the following on 13/12/02 09:26: Two questions, which I hope someone may be able to point me in the direction of resources for. Question 1: What has the performance of spamassassin (particularly the spamc/spamd combination) been like for mailservers handling medium-to-lar

Re: [SAtalk] question regarding spamc/spamd performance for large email services, and the spamc/spamd "protocol"

2002-12-13 Thread Ralf Hildebrandt
* Albert Croft <[EMAIL PROTECTED]>: > Question 1: >What has the performance of spamassassin (particularly the > spamc/spamd combination) been like for mailservers handling > medium-to-large quantities of in-bound mail (i.e., averaging on the > order of tens of thousands or more emails per d

Re: [SAtalk] Question on the list of tests

2002-11-27 Thread Justin Mason
Matt Kettler said: > I'd advise that you not browse the descs on the website, look at the ones > that are in the .cf files themselves. > > What happens is many rules have alternate descriptions in non-english > languages. The parser that crunches through the rules to create that > webpage wind

Re: [SAtalk] Question on the list of tests

2002-11-27 Thread Matt Kettler
I'd advise that you not browse the descs on the website, look at the ones that are in the .cf files themselves. What happens is many rules have alternate descriptions in non-english languages. The parser that crunches through the rules to create that webpage winds up with different languages ba

  1   2   >