Todd Seeleman wrote:
I'm running spamd/spamc v 2.55 on a Compaq DS20 running Tru64 UNIX v
5.1b. It processes ~ 5,500 pieces of email per day. Every week or so the
system slows to a point where I must reboot. I believe I've eliminated all
causes other than the spamd process. I've throttled i
I
recommend you follow one of these guides, they both use
SpamAssassin
CREATING A SPAMFILTER RELAY SERVER
http://www.geocities.com/scottlhenderson/spamfilter.html
Fairly-Secure
Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and
DCC
http://www.flakshack.com/a
ECTED] On
> Behalf Of Dan Kennedy
> Sent: Wednesday, January 21, 2004 10:03 AM
> To: Dustin O Williams; [EMAIL PROTECTED]
> Subject: RE: [SAtalk] Spam Assassin as a Filter then Forward
> Mail to MS Exchange
>
> Try MailScanner. That's what we use. It works well for jus
Try MailScanner. That's what we use. It works well for just relaying
mail onto an exchange server.
Spamassassin ties into it, and it's pretty easy to configure.
http://www.sng.ecs.soton.ac.uk/mailscanner/
-Original Message-
From: Dustin O Williams [mailto:[EMAIL PROTECTED]
Sent: Wednesd
http://postfix.cnc.bc.ca/twiki/bin/view/Main/SpamAssassinTaggingOnly is what
I use with Postfix to do pretty much the same thing. Very simple and it
works.
regards,
Paul
--
Paul Hutchings
Network Administrator, MIRA Ltd.
Tel: 44 (0)24 7635 5378, Fax: 44 (0)24 7635 8378
mailto:[EMAIL PROTECTED]
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tuesday 20 January 2004 05:06, Marc Morgan wrote:
> Hi There,
>
> I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail
is
> installed and has been patch with QMAILQUEUE. I installed the latest
version,
> but had errors wh
On Tue, 20 Jan 2004 15:28:00 +0200 Marc Morgan <[EMAIL PROTECTED]> wrote:
> Hi There,
>
> I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail
> is installed and has been patch with QMAILQUEUE. I installed the latest
> version, but had errors when starting spamd or spamas
At Wed Jan 14 14:13:27 2004, Sally Denhart wrote:
[Apologies to the list if this has been anwswered already -- I've
checked in the archives and can't see a reply to this. I'm a couple
of days behind with my mail.]
> I just installed Spam Assassin 2.61 on my Solaris 7 box. It
> interfaces with
At Wed Jan 14 17:54:19 2004, Todd Seeleman wrote:
>
> Greetings,
>
> I'm running spamd/spamc v 2.55 on a Compaq DS20 running Tru64 UNIX v
> 5.1b. It processes ~ 5,500 pieces of email per day. Every week or so the
> system slows to a point where I must reboot. I believe I've eliminated all
On January 16, 2004 12:55 pm, Rich Puhek wrote:
> I use a slightly different approach.
>
> I filter my emails into 4 different IMAP folders: slightly-spammy,
> somewhat-spammy, pretty-spammy, and very spammy. The filtering is based
> on increasing number of SA hits (actually the X-Spam-Level: heade
Gary Funck wrote:
It is a pain, esp. on a big mailbox, and you need large sample, of say,
2000/so each of ham and spam to train the Bayes engine.
What I did is fired up 'mutt', and used its 'tag' capabilities to
tag the spam that I wanted to extract and deposit into my spam sample. It is
impor
> From: cube
> Sent: Friday, January 16, 2004 8:52 AM
>
> Does anyone have a good way of collecting ham for the bayesian
> filters. I
> can collect spam quite easily, but mixed in with my ham is all
> kinds of spam.
> (There is a buttload of spam with less hits than 1.)
>
> I read everywhere t
At 11:14 AM 1/15/04 +0100, Gunther Heintzen wrote:
X-Spam-Status: No, hits=2.6 required=3.9 tests=FORGED_HOTMAIL_RCVD2,
HTML_MESSAGE autolearn=ham version=2.61
It should be autolearn=no because hits=2.6 ist beetween 0.1 and 12.0
Autolearning is not based on the normal message score, it's based o
On Thu, Jan 15, 2004 at 11:25:37AM +, Technical Services wrote:
> Can I run sa-learn on a maildir? and if so how?
Yes you can.
for i in Maildir/cur; do sa-learn --spam $i; done
>
> Best regards,
> Owen Franssen
> Technical Services Manager
> WASP (a division of Insight Web Marketing Ltd.)
>
At 11:56 AM 1/13/2004, Kevin Roberts wrote:
Is there a way for sa 2.55 to add a spam tag to the actual filename that is
saved in the \etc\mail s/d? I am hoping that the answer is yes. I want to
be able to easily sort the messages that sa thinks is spam and ham so when I
go and check the messages,
[EMAIL PROTECTED] wrote:
>
> I've been developing a spam / ham corpus from those things
> which my config of SA doesn't catch. Problem is I get these
> in Outlook, and now I want to Bayes them. How do you guys get
> your spam corpus set up? Do you just not use Outlook? Is
> there a way to get t
At 02:35 PM 12/19/2003, R. Alan McFarland wrote:
I would like to simply tune my ScoringThreshold and DeleteTheshold, but I
first need to get a sense of the numbers. For me getting each number
requires about seven clicks and some visual scanning which is too time
consuming to be useful. Is there
--On Friday, December 19, 2003 11:35 AM -0800 "R. Alan McFarland"
<[EMAIL PROTECTED]> wrote:
>
> I would like to simply tune my ScoringThreshold and DeleteTheshold, but I
> first need to get a sense of the numbers. For me getting each number
> requires about seven clicks and some visual scanning
*snip*
> From: [EMAIL PROTECTED]
> Sent: Thursday, June 12, 2003 12:34 p.m.
> To: Robert J. Aitken
> Cc: Justin Champion
> Subject: Re: More complaints from false headings
>
> We send out 10 million plus emails a day and you on average send me 2
> complaints or less in a day. Today 3 complaints. I
At 07:15 PM 12/7/03 -0800, Scott Harris wrote:
The spam attached has the following random words at the bottom:
automata childhood reflectance trevelyan tile captious hollingsworth
cornstarch chinaman chicanery
Is this to try to poison bayes or to just try and fool things to get it
through or so
I'd like a copy of the 'tweaked' version :)
> -Original Message-
> From: mikea [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 04, 2003 12:17 PM
> To: Spamassassin List
> Subject: Re: [SAtalk] Spam Statistics
>
>
> On Thu, Dec 04, 200
On Thu, Dec 04, 2003 at 08:09:31AM -0800, Gary Funck wrote:
>
> > From: [EMAIL PROTECTED]
> >
> > Assuming my minor tweaks to the original script I saw posted here are
> > correct, here are my latest spam stats.. *sheesh*
> >
> > Mail Statistics;
> > Mails spam
On Thu, Dec 04, 2003 at 09:10:01AM -0500, Rubin Bennett wrote:
> WEhat are you all seeing for spam vs. ham stats out there? I just ran
> my list statistics script and here's what I'm experiencing (much WORSE
> than the current "accepted" statistics of about 50/50):
>
> Stats since the 1st of the
At 07:25 AM 12/4/2003, Clive Dove wrote:
No big deal at the moment as it is only one message, but what happens when
other spammers discover that this is a way to distribute their junk?
It's been a problem for a LONG time and is nothing new at all..
This very issue forced sa-talk to become list tha
CTED] <[EMAIL PROTECTED]>
ceforge.net cc:
Su
Assuming my minor tweaks to the original script I saw posted here are
correct, here are my latest spam stats.. *sheesh*
Mail Statistics;
Mails spamassassin rejected scanner total mails
Total says 'spam'by rulesetsays virusunde
> -Original Message-
> From: [EMAIL PROTECTED]
> Sent: Thursday, December 04, 2003 7:45 AM
> To: Rubin Bennett
>
>
> Assuming my minor tweaks to the original script I saw posted here are
> correct, here are my latest spam stats.. *sheesh*
>
> Mail Statistics;
>
PROTECTED]
Sent: Thursday, December 04, 2003 2:41 PM
To: Fritz Mesedilla; Spamassassin-Talk
Subject: Re: [SAtalk] spam report in headers
To my knowledge amavisd-new is limited to using those headers, it
ignores the verbose ones added by SpamAssassin.
Ryan Moore
--
Perigee.net Corporation
704-
ubject: Re: [SAtalk] spam report in headers
To my knowledge amavisd-new is limited to using those headers, it
ignores the verbose ones added by SpamAssassin.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Fritz Mesedilla wrote:
> How does
To my knowledge amavisd-new is limited to using those headers, it
ignores the verbose ones added by SpamAssassin.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Fritz Mesedilla wrote:
How does spamassassin include the spam report in the head
dilla; Spamassassin Mailing List (E-mail)
Subject: Re: [SAtalk] spam report in headers
At 12:51 PM 12/4/03 +0800, Fritz Mesedilla wrote:
>How does spamassassin include the spam report in the headers?
>I only get these headers:
You can reconfigure the headers added by SA.. see the "add_header&quo
: [SAtalk] spam report in headers
At 12:51 PM 12/4/03 +0800, Fritz Mesedilla wrote:
>How does spamassassin include the spam report in the headers?
>I only get these headers:
You can reconfigure the headers added by SA.. see the "add_header" config
option and the "TAGS" secti
At 12:51 PM 12/4/03 +0800, Fritz Mesedilla wrote:
How does spamassassin include the spam report in the headers?
I only get these headers:
You can reconfigure the headers added by SA.. see the "add_header" config
option and the "TAGS" section for a list of different items you can insert.
http://a
> -Original Message-
> From: Brook Humphrey [mailto:[EMAIL PROTECTED]
> Sent: Saturday, November 22, 2003 10:28 PM
> To: ML-spamassassin-talk
> Subject: Re: [SAtalk] Spam filtering for an ISP
>
>
> On Saturday 22 November 2003 02:52 pm, William Stearns wrote:
On Saturday 22 November 2003 02:52 pm, William Stearns wrote:
> > SpamAssassin 2.55
>
> It's _well_ worth upgrading to 2.60.
Just curious what is so much better about 2.6. If it is just the filters used
I already run a bunch of custom ones that fit my needs really well with 2.55.
I get a
Good evening, Rubin,
On Sat, 22 Nov 2003, Rubin Bennett wrote:
> I want to set up a central email address for my users to forward spam to
> ([EMAIL PROTECTED] for example). I would like to have that address be fed to
> a script that runs sa-learn on the message, but not as root: I want
> sa-lea
At 11/19/03 03:47 PM , Regis Wilson wrote:
Just thought I'd share. I don't have access to the rbls so I did a grep on
two day's worth of spam IPs (received: line from mailserver). I have this:
no. spamnetwork
472366.0.0.0
And then I broke it down smaller:
587 66.2
At 07:03 PM 11/18/03 -0500, erin o'brien wrote:
I am not a programmer, so I could not think of any "rule" to catch this
one. I only hope that someone here can. I have gotten quite a few of these
(at least two per day), and it's always from my forged email address from
someone named wilfred or ar
Robert wrote:
|Hello Kurt,
Howdy.
|Monday, November 17, 2003, 11:03:24 AM, you wrote:
|
|KB> I've just put up 2.60 on FreeBSD, and consider myself a bit of a
|KB> newb, but I've been reading the man page for spamassassin,
|and found
|KB> a section on spamtrapping. We've got 40 or so addresses o
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Kurt,
Monday, November 17, 2003, 11:03:24 AM, you wrote:
KB> I've just put up 2.60 on FreeBSD, and consider myself a bit of a
KB> newb, but I've been reading the man page for spamassassin, and found
KB> a section on spamtrapping. We've got 40 o
On Mon, 2003-11-17 at 03:03, Thomas Kinghorn wrote:
> Hi List.
>
> Does anyone know of any good spam stats software / scripts available.
>
> I tried spamstats but could not get it to work properly.
>
>
...
A brute force approach, effective if you don't have much volume. One of
these days I'll
On Sat, 15 Nov 2003, Rick [Kitty5] wrote:
> Is it possible to put the spam score in the subject?
Yes. A quick read of the FM ((friendly|fine) manual) shows:
subject_tag STRING ...(default: *SPAM*)
Text added to the "Subject:" line of mails that are
Hi Dan,
> Hey guys!
>
> Does anyone know if spam can be forwarded onto another mailbox? Right now
> I have being trapped in /var/virusmails.
>
with this procmail recipes ham mails are put in the user's "normal" mailbox,
spam mails are put into a user specific spambox. LOGNAME is the name of the
I use Postfix and amavisd-new, many options including send spam to
mailbox.
Zlatko.
-Original Message-
From: Dan [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 13, 2003 8:34 AM
To: SATalk list
Hey guys!
Does anyone know if spam can be forwarded onto another mailbox? Right
now I h
> Now you've got me interested. how did you get those stats?
I can't take credit for it.
I turned on logging in SpamAssassin and MailScanner, and Mike Andrews on the
list here submitted a script a few weeks ago that I tweaked a tiny bit
although his worked fine on its own. My maillogs rotate on
Now you've got me interested. how did you get those stats?
-Original Message-
From: ian douglas [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 13, 2003 8:34 AM
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Spam forward
> err, i'm not sure how you setup your spamassas
At 04:34 PM 11/12/2003, Dan wrote:
Does anyone know if spam can be forwarded onto another mailbox? Right now I
have being trapped in /var/virusmails.
That totally depends on what tool you're using to call SA.
SA itself can't even trap them in /var/virusmails, much less forward messages.
It's the
> err, i'm not sure how you setup your spamassasin but i have
> mailscanner going well cos it supports a virus scanner as well.
I second that opinion. MailScanner/ClamAV/SA 2.60, and working great on a
small-volume server:
Spam/Mail Statistics;
Total spamassassin rejected scanne
err, i'm not sure how you setup your spamassasin but i have mailscanner
going well cos it supports a virus scanner as well.
in my mailscanner.conf file i have the option of:
#
# What to do with spam
#
#
# This is a list of actions to take when a message is spam.
# It can b
Dan Sent: Wednesday, November 12, 2003 4:34 PM
> Does anyone know if spam can be forwarded onto another mailbox?
I too am interested in this. I could never get my corpus exported from
outlook so I would like to copy spammy messages to another mailbox. Or even
to a folder within my mailbox. That w
At 04:14 PM 11/10/2003, you wrote:
What's the lowest spam threshold value you are managing to get away with
(without false positives) ?
There's always FP's at pretty much any threshold that's no absurdly high
(ie, 1.0).
However, I have yet to notice any significant amount of FP's at 5.0..
Oc
On 10/07/03 11:25 AM, SpamTalk sat at the `puter and typed:
>
>
> -Original Message-
> From: Fred I-IS.COM [mailto:[EMAIL PROTECTED]
>
> >What we need is a Distributed fake replier
>
> Actually you just need to have the program spoof the origination
> address and craft the IP packets/t
-Original Message-
From: Fred I-IS.COM [mailto:[EMAIL PROTECTED]
>What we need is a Distributed fake replier
Actually you just need to have the program spoof the origination address and
craft the IP packets/timing so that it does not need the response that do
not show up. But again, we
I used to do this until my provider explained to me that it was not
approaite for me to attack the spammers even if they started it. I created
a program to automate filling in their forms, submitting random names, fake
details etc, but I'm sure the spammers could easily filter my submissions
based
"The Screwfly Solution"
A really good short story by SF writer Raccoona Sheldon/James Tiptree Jr./
(the late) Alice B. Sheldon as well.
Bet you didn't think anyone else would notice.
William L. Polhemus, Jr. P.E.
Polhemus Engineering Company
Katy, Texas USA
-Original Message-
From: [EMA
thanks all for the reply. iguess i learned something today
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL PRO
On 2003-10-06 15:15:42 -0400, Landy wrote:
> this email has a no but it scored 5.0 which is the default
> any idea why the status is no?
RTFA
4.97 is reported as 5.0, but lower than 5.0
Best regards
Martin
--
Martin Schröder, [EMAIL PROTECTED]
ArtCom GmbH, Lise-Meitner-S
At 03:15 PM 10/6/2003, Landy wrote:
pam-Level:
X-Spam-Status: No, hits=5.0 required=5.0 tests=NIGERIAN_BODY1,NIGERIAN_BODY2,
NIGERIAN_BODY3,RCVD_IN_BL_SPAMCOP_NET autolearn=no version=2.60
this email has a no but it scored 5.0 which is the default
any idea why the status is no?
Round n
--On Monday, October 06, 2003 11:54 AM -0700 Mike Van Pelt <[EMAIL PROTECTED]>
wrote:
> Speaking of nasty little parasites, imagine a 419 spammer.
> He gets 100,000 "bites" to his spam. Wow, he must have hit
> the jackpot! Except... no. 99,999 of them are fake,
> computer-generated "leads", whi
The 4 stars should give you a clue
And then consider rounding (apparently from somewhere around 4.95 -
4.99).. :(
Or at least that's what someone else told another someone else a few
days ago.
:)
Steven
-Original Message-
From: Landy [mailto:[EMAIL PROTECTED]
Sent: Monday, Octobe
--On Monday, October 06, 2003 3:15 PM -0400 Landy <[EMAIL PROTECTED]>
wrote:
> Spam-Level:
> X-Spam-Status: No, hits=5.0 required=5.0
> tests=NIGERIAN_BODY1,NIGERIAN_BODY2,
> NIGERIAN_BODY3,RCVD_IN_BL_SPAMCOP_NET autolearn=no version=2.60
>
>
> this email has a no but it scored 5.0 which
Look at /usr/share/doc/spamassassin-2.60/sample-spam.txt
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Eduardo Gargiulo
Sent: Thursday, October 02, 2003 4:46 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] spam test
Hi all
This is my first message to the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/10/2003 08:21 Paul Hutchings wrote:
> I played with the howto on openandhome, it seems really simple to get
> spamassassin up and running on windows, the problem seems to be finding a
> Windows MTA that can take an email, pipe it out then re-inj
: 44 (0)24 7635 5378, Fax: 44 (0)24 7635 8378
mailto:[EMAIL PROTECTED]
-Original Message-
From: Matt Andreko [mailto:[EMAIL PROTECTED]
Sent: 01 October 2003 19:51
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Spam Assassin for w32
I'd be very much for this. As much as I like unix, I
On 2003-10-01 13:26:52 -0500, Your Own ISP .com wrote:
> Since there seems to be a ton of activity on this list and near zero to do
> with SA on Windows, I have created list specific to SpamAssassin on W32
> platforms.
Good! Now please all of you who use Outlook, can't quote and send
HTML mails pl
Not trying to pick fights, this is not a flame just an IMO.
I'm not sure how I feel about Spamassassin porting to Windows. SA is a great
example of why Open Source is a superior method of programming. Porting a
free binary for Windows seems a little against the spirit of the OS
philosophy. However
I'd be very much for this. As much as I like unix, I think that there
is a need for this type of technology on the Windows platform as well.
Some companies don't use linux because they're not used to it. However
they still want anti-spam, and like the spamassassin name, since they
have read abo
> -Original Message-
> From: Frank Pineau [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 01, 2003 2:57 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Spam Assassin for w32
>
>
> On Wed, 2003-10-01 at 13:26, Your Own ISP .com wrote:
> > Si
On Wed, 2003-10-01 at 13:26, Your Own ISP .com wrote:
> Since there seems to be a ton of activity on this list and near zero
> to do with SA on Windows, I have created list specific to SpamAssassin
> on W32 platforms.
>
>
>
> I searched for this first but did not find anything. I would love to
Hi Tony,
What I'm trying to do at the moment is look at the
headers of what gets through and taking into account
the legit mail our users expect, adjust some scores.
One good one to play with is something like "OFUSCATE"
(I don't have it in front of me), the fake HTML
comments that fool most
Hi,
[apologies for this being so far off-topic]
On Thu, 25 Sep 2003, Peter P. Benac wrote:
> And this lack of response is due to what???
Lazy, stupid, apathetic, incompetent, or ambivalent members of the law
enforcement and ISP community? Insufficient network diagnostic and
security tools, maki
Sent: Thursday, September 25, 2003 11:05 AM
To: 'SATalk list'
Subject: RE: [SAtalk] SPAM, BLOCK: Death of monkeys.com DNSbl (fwd)
And this lack of response is due to what???
When I worked for Cisco one of Cisco's customers detected a potential hacker
to his system. That custome
--On Wednesday, September 24, 2003 11:12 PM -0700 Justin Mason
<[EMAIL PROTECTED]> wrote:
Yeah -- a GPG-signed, private NNTP network would work great. Just needs
someone to code it all up ;)
Jesting aside, you could start a new newsgroup for this purpose, with
people posting the data to the new
s.org
To have principles...
First have courage.. With principles comes integrity!!!
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of [EMAIL PROTECTED]
> Sent: Thursday, September 25, 2003 10:12
> To:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 25 September 2003 07:12 am, [EMAIL PROTECTED] wrote:
> "Peter P. Benac" <[EMAIL PROTECTED]> wrote:
> OR worse they'll attack SourceForge!!!
>
> Yes Peter, that is the strategy.
>
> Rather than having the distribution of this information be
"Peter P. Benac" <[EMAIL PROTECTED]> wrote:
OR worse they'll attack SourceForge!!!
Yes Peter, that is the strategy.
Rather than having the distribution of this information being a cottage
industry, go for the protection of our peers.
I do believe that if whoever this spam friendly DDOSer is
David B Funk writes:
>On Wed, 24 Sep 2003, Daniel Bird wrote:
>
>> A P2P DNSBL? interesting. I've also thought about this a little since
>[snip..]
>> DNSBL could learn from that seed other DNSBLS, and replicate the data,
>> and then (maybe?) do the RBL lookups locally.
>>
>> Obviously, the file (z
Hi,
On Wed, 24 Sep 2003 23:13:19 +0100 Daniel Bird <[EMAIL PROTECTED]> wrote:
> Forrest Aldrich wrote:
>
> > A new approach to DNSBL might be considered, where there is a
> > peer-to-peer sharing (authentication, scoring whatever) that mirrors
> > content -- something of that nature, whereby t
On Wed, 24 Sep 2003, Daniel Bird wrote:
> A P2P DNSBL? interesting. I've also thought about this a little since
[snip..]
> DNSBL could learn from that seed other DNSBLS, and replicate the data,
> and then (maybe?) do the RBL lookups locally.
>
> Obviously, the file (zone) transfers involved would
--On Wednesday, September 24, 2003 11:13 PM +0100 Daniel Bird
<[EMAIL PROTECTED]> wrote:
> A P2P DNSBL? interesting. I've also thought about this a little since the
> death of Monkeys but also have no idea about how this would be implimented,
> but certainly the model of something like direct conn
Forrest Aldrich wrote:
A new approach to DNSBL might be considered, where there is a
peer-to-peer sharing (authentication, scoring whatever) that mirrors
content -- something of that nature, whereby the hackers would
basically have to DDos the entire internet to prevent its use. Not
sure h
OR worse they'll attack SourceForge!!!
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of [EMAIL PROTECTED]
> Sent: Wednesday, September 24, 2003 16:04
> To: SATalk list
> Cc: SATalk list
> Subject: Re: [SAtalk] SPAM
SATalk list <[EMAIL PROTECTED]> |
|cc:
|
|Subject: Re: [SAtalk] SPA
A new approach to DNSBL might be considered, where there is a peer-to-peer
sharing (authentication, scoring whatever) that mirrors content --
something of that nature, whereby the hackers would basically have to DDos
the entire internet to prevent its use. Not sure how such a framework
could
--On Tuesday, September 23, 2003 3:07 PM -0500 Bob Apthorpe
<[EMAIL PROTECTED]> wrote:
> First Osirusoft, now monkeys.com. Which DNSBL is next? When do the
> crosshairs move to SpamAssassin?
Why are these systems not available through lots of secondaries, with a long
expire time, so a DDoS can't
You guys are forgetting that dnsbl.sorbs.net has also been taken down
after a DDoS. One too many...
Chris
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_
ugh the SA system. I haven't taken the time yet to look into it, it
seems to happen about 1/1000 of the time.
-Original Message-
From: mikea [mailto:[EMAIL PROTECTED]
Sent: Monday, September 22, 2003 12:51 PM
To: [EMAIL PROTECTED]
Subject: Re: [SAtalk] Spam not
On Mon, Sep 22, 200
On Mon, Sep 22, 2003 at 12:07:06PM -0400, Alicia Forsythe wrote:
> The following spam is making it through. When I test this same mail, it
> scores over 20 points. Why is it still getting through?
>
>
> Return-path: <[EMAIL PROTECTED]>
> Received: from 209.118.212.3
> ([200.167.37.247])
SpamAssassin doesn't bounce mail, period. If you want it to bounce mail, please do
so. If you don't, don't. Further documentation in your MTA's man pages.
-tom
> -Original Message-
> From: Regis Wilson [mailto:[EMAIL PROTECTED]
> Sent: Thursday, September 18, 2003 4:56 PM
> To: [EMAIL
So what does the average person set for the threshold of largest message
scanned by SA. Right now I'm at 32768 bytes. How large is it safe to
go???
Jeffrey J Funk
Chief Technology Officer
Farin & Associates, Inc.
608.661.4240
[EMAIL PROTECTED]
---
1. Did you enable rules in user prefs in the system sa config? The
default settings don't allow rules to be defined in user prefs (See man
Perl::SpamAssassin::Conf).
2. The Bayes rules that score 0 (most of the mid-range of Bayes checks)
don't show up in the report, but that doesn't mean Bayes ch
Yeah, must be an installation problem. Without bayes I got:
MONEY_BACK (1.0 points) BODY: Money back guarantee
HTML_FONT_COLOR_UNSAFE (0.1 points) BODY: HTML font color not within
safe 6x6x6 palette
HTML_FONT_COLOR_RED (0.1 points) BODY: HTML font color is red
HTML_50_60 (0.5 poi
That seems to be it. For whatever reason, /etc/mail/spamassassin was empty.
It is corrected now & messages are receiving scores. HOORAY! :-)
On 9/7/03 8:55 PM, "Justin Mason" <[EMAIL PROTECTED]> wrote:
> I would guess that's not finding the config files -- if there's no
> rules, it'll run throug
Jason writes:
> No. I use CGPSA to get the messages to CommuniGate Pro.
>
> I think it's interesting that it "Identified non-spam (0.0/5.0) for
> in 0.0 seconds"
>
> Seems too quick. Anyway, here's the message.
I would guess that's not finding the config files -- if there's no
rules, it'll run
At 12:08 7/09/2003 -0700, Jason wrote:
This message made is past SpamAssassin without setting off ANYTHING? (Score
of 0.0.)
[snip]
Very odd. You must have something wrong with your setup there, as I see
heaps of spams identical to that one that score quite highly... (somewhere
between 10 and 20
No. I use CGPSA to get the messages to CommuniGate Pro.
I think it's interesting that it "Identified non-spam (0.0/5.0) for
in 0.0 seconds"
Seems too quick. Anyway, here's the message.
12:12:30.24 4 EXTFILTER(CGPSA) out(25): 54 FILE Queue/360223.msg\n
12:12:30.28 2 PWD-00035([127.0.0.1]) '[EMAI
> "BS" == Brian Scott <[EMAIL PROTECTED]> writes:
BS> I notice that many recent viruses are using faked return email
BS> addresses.
BS> Consequently, when one of these infected emails is detected by spam
BS> assassin, many systems appear to reply to the fake email address with
BS> an "exact"
> > Here's the graph of our spam vs non-spam. Spam levels have
> definitely
> > dropped noticeably, though not precipitously. I've not
> changed the SA
> > or mail gateway config in a couple of weeks, so I don't think it's
> > anything to do with changes I've made.
>
> I didn't include the grap
Using version 2.55 , thought it was in the headers, oops. It is in the
header of the second message since I manually inserted those headers
after editing the message and piping it through the spamassassin binary
(as opposed to resending the message through Amavisd-new using
Mail::SpamAssassin p
> -Original Message-
> From: Ryan Moore [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 25, 2003 2:51 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Spam using invalid Mime headers to bypass
> SpamAssassin?
>
>
> I got an email that made it by spamassassin with virtually no hits,
> wh
1 - 100 of 415 matches
Mail list logo
