Re: [SAtalk] slooooow rules

2002-02-22 Thread Nigel Metheringham
On Thu, 2002-02-21 at 20:53, Craig Hughes wrote: > On Thu, 2002-02-21 at 10:22, Arpi wrote: [Original regexp] > > > FOR_INSTANT_ACCESS: > > > /(?:CLICK HERE|).{0,20}\s+INSTANT\s+ACCESS.{0,20}\s+(?:|CLICK HERE)/i > I think > body FOR_INSTANT_ACCESS /INSTANT ACCESS/i > is fine by itself. I

Re: [SAtalk] slooooow rules

2002-02-22 Thread Matt Sergeant
On 21 Feb 2002, Craig Hughes wrote: > > could someone please explain what does [^<] matches ? > > afaik ^ means beginning-of-line but it's strange in [] character array. > > so, what does ^ mean there? begin-of-line or '^' character? > > i think it's beg-of-line, as PCRE couldn't optimize this re

[SAtalk] Suggested rule: link to page called "optout"

2002-02-22 Thread Michael Moncur
I've seen a couple of unsubscribe URLs to things like "optout.php" lately and noticed there's not a rule for them. How about this? rawbody OPTOUT_PAGE /https?:\/\/[^\/]+\/optout/ describe OPTOUT_PAGE URL of page called "optout" (There is an A_HREF_TO_OPT_OUT rule, but th

[SAtalk] white list

2002-02-22 Thread Landy Roman
whitelist in order to use the whitelist from .spamassassin/user_pref must one remove the "#" from the whitelist line? ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] blacklist

2002-02-22 Thread Landy Roman
i added to user_pref blacklist_from someone@foo. looking at the headers it identified him as blacklist but still was not tag as spam with a score of -90 does the blacklist automaticly puts him as spam? ___ Spamassassin-talk mailing list [EMAIL PROTECT

[SAtalk] Non-english spam

2002-02-22 Thread Woodworth, Eric
Anybody have any rules to stop Portuguese spam?:) Seems somebody in my company gets pounded with Brazilian spam. I could probably fashion something myself, but if somebody has something premade that'd be great. Anybody else have a problem with non-english spam? Thanks in advance for any he

[SAtalk] Suggested new rules and changes

2002-02-22 Thread Michael Moncur
A few suggested new rules based on my review of some recent MLM spams: body MAKING_MONEY /making money/i describe MAKING_MONEY Discusses making money There is a MONEY_MAKING rule already, but not "making money". They could be combined, but based on recent discussions I wo

Re: [SAtalk] Suggested new rules and changes

2002-02-22 Thread Landy Roman
:-) > > body MAKING_MONEY /making money/i > describe MAKING_MONEY Discusses making money > i can tell you read the LM magazine ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/s

RE: [SAtalk] Suggested new rules and changes

2002-02-22 Thread Michael Moncur
> i can tell you read the LM magazine What's that? I don't get it. -- michael moncur mgm at starlingtech.com http://www.starlingtech.com/ "I believe in getting into hot water; it keeps you clean." -- G. K. Chesterton ___ Spamassas

Re: [SAtalk] testing spam

2002-02-22 Thread Greg Ward
On 21 February 2002, Craig Hughes said: > More importantly though, you can't create rules in userprefs; you can > only modify descriptions and scores, do whitelisting, and a few other > thing. Are you *sure* that's true? I thought it was, but I went ahead and tried adding a rule to my ~/.spamass

Re: [SAtalk] Another newbie

2002-02-22 Thread Greg Ward
On 22 February 2002, Brian Prescott-Decie said: > 1. Has anybody else had this experience? If not, would anybody be > interested in my writing a mini-HOWTO for this situation or is it too > unusual to be worth considering? I tried installing SA as an ordinary user on one system where I do have

Re: [SAtalk] testing spam

2002-02-22 Thread Craig R Hughes
Were you using spamassassin or spamc/spamd greg? I believe spamassassin allows you to have user rules, spamd does not. At least, that's what the docs say in perldoc Mail::SpamAssassin::Conf -- I agree that changing it from what's documented to having a allow_user_rules local-conf parameter wo

Re: [SAtalk] Score levels

2002-02-22 Thread Matt Sergeant
On Fri, 22 Feb 2002, CertaintyTech - Ed Henderson wrote: > I am wanting to define SA scores based on filter sensitivity terms like > High, Medium, and Low where High would be the most agressive blocking of > Spam to Low which is the most lenient. This would be easier for my > customers to unders

Re: [SAtalk] Another newbie

2002-02-22 Thread Bart Schaefer
On Fri, 22 Feb 2002, Greg Ward wrote: > As for the *.doc.bat thing, SA is not a virus catcher, it's a spam > detector. It can be manipulated into catching a few viruses, but the > overall feeling on this list is that SA should do one thing and do it > well. The Sanitizer is a perl tool invokabl

Re: [SAtalk] testing spam

2002-02-22 Thread Greg Ward
On 22 February 2002, Craig R Hughes said: > Were you using spamassassin or spamc/spamd greg? I believe > spamassassin allows you to have user rules, spamd does not. I was using spamassassin; you are correct, user-defined rules are obeyed by spamassassin but not spamc/spamd. I just filed bug #49

Re: [SAtalk] blacklist

2002-02-22 Thread Bart Schaefer
On Fri, 22 Feb 2002, Landy Roman wrote: > i added to user_pref blacklist_from someone@foo. > > looking at the headers it identified him as blacklist but still was not > tag as spam with a score of -90 Run the message through "spamassassin -R" to take him off the automatic whitelist? _

Re: [SAtalk] testing spam

2002-02-22 Thread Landy Roman
is [...] needed > $ cat .spamassassin/user_prefs > [...] > header FROM_MAILER_DAEMON From =~ /mailer-daemon|mail delivery > subsystem/i describe FROM_MAILER_DAEMON Probable bounce message > (from a mail system) score FROM_MAILER_DAEMON -2.5 > > ...and, to my pleasant surpris

RE: [SAtalk] Score levels

2002-02-22 Thread Mark Roedel
> -Original Message- > From: CertaintyTech - Ed Henderson > [mailto:[EMAIL PROTECTED]] > Sent: Friday, February 22, 2002 10:05 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Score levels > > > I am wanting to define SA scores based on filter sensitivity > terms like High, Medium, and

Re: [SAtalk] blacklist

2002-02-22 Thread Landy Roman
> > looking at the headers it identified him as blacklist but still was > > not tag as spam with a score of -90 > > Run the message through "spamassassin -R" to take him off the automatic > whitelist? > how did he get on that list? how do i run the message? ___

Re: [SAtalk] Suggested new rules and changes

2002-02-22 Thread Landy Roman
they had a sample rule defined as you defined that one :-) On Fri, 22 Feb 2002 07:54:36 -0700 "Michael Moncur" <[EMAIL PROTECTED]> wrote: > > i can tell you read the LM magazine > > What's that? I don't get it. > > -- > michael moncur mgm at starlingtech.com http://www.starlingtech.com/ >

Re: [SAtalk] Score levels

2002-02-22 Thread Craig Hughes
I'm not sure I've ever seen a non-spam message with a score higher than 10. There are a few 10's in the nonspam corpus, but no 11s or higher. C On Fri, 2002-02-22 at 08:05, CertaintyTech - Ed Henderson wrote: > I am wanting to define SA scores based on filter sensitivity terms like > High, Medi

RE: [SAtalk] Score levels

2002-02-22 Thread Craig Hughes
Nice feature! I'll add this to SA itself. C On Fri, 2002-02-22 at 10:06, Mark Roedel wrote: > > -Original Message- > > From: CertaintyTech - Ed Henderson > > [mailto:[EMAIL PROTECTED]] > > Sent: Friday, February 22, 2002 10:05 AM > > To: [EMAIL PROTECTED] > > Subject: [SAtalk] Score l

[SAtalk] Reporting

2002-02-22 Thread Joel Epstein
Are there any reporting features built into or supplied with SA? While I have no issue writing them myself, I was just curious. I noticed in the list today someone had listed statistics for all mail processed broken into hit ranges. Any existing capabilities for this? Thanks -- =

Re: [SAtalk] blacklist

2002-02-22 Thread Bart Schaefer
On Fri, 22 Feb 2002, Landy Roman wrote: > > > looking at the headers it identified him as blacklist but still was > > > not tag as spam with a score of -90 > > > > Run the message through "spamassassin -R" to take him off the automatic > > whitelist? > > how did he get on that list? It's an au

Re: [SAtalk] Suggested new rules and changes

2002-02-22 Thread dman
On Fri, Feb 22, 2002 at 07:25:03AM -0700, Michael Moncur wrote: | A few suggested new rules based on my review of some recent MLM spams: | | body MAKING_MONEY /making money/i | describe MAKING_MONEY Discusses making money This sort of rule would be great for a geek's mail

[SAtalk] Rejecting Spam at Sendmail

2002-02-22 Thread Mike Grau
Hello I am thinking about using Sendmail/Spamass-Milter/SpamAssassin to reject mail at the Sendmail level based on the Subject (SPAM) or the X-Spam-Flag rather accepting all the junk that SA flags as SPAM. However I do not want to return to the spammers all the information given in th

Re: [SAtalk] Installing as Non-root User

2002-02-22 Thread Erik B. Berry
Craig Hughes wrote: > Sorry about that, I used to be much better about not using // and only > /**/, precisely for cc compatibility. I'll go through and fix all the This seems fixed in the latest CVS now. There are some unrelated compilation warnings, in case they are worth fixing: cc -O sp

RE: [SAtalk] Reporting

2002-02-22 Thread Mark Roedel
> -Original Message- > From: Joel Epstein [mailto:[EMAIL PROTECTED]] > Sent: Friday, February 22, 2002 12:30 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Reporting > > > Are there any reporting features built into or supplied with > SA? While I have no issue writing them myself, I w

Re: [SAtalk] Reporting

2002-02-22 Thread Theo Van Dinter
On Fri, Feb 22, 2002 at 03:18:54PM -0600, Mark Roedel wrote: > One of these days I'll get annoyed enough with it to write something > more elegant in Perl to do the same thing in a single pass through the > logfile, but for now it gets the job done. I spent a few minutes this afternoon writing up

Re: [SAtalk] Reporting

2002-02-22 Thread Matt
Question: Does Spam Assassin report the score (in the email or maillog) even if the message is not tagged as spam? Im using MailScanner to call Spam Assassin and I only see the score if it is reported as a spam message. Theo Van Dinter said: > On Fri, Feb 22, 2002 at 03:18:54PM -0600, Mark Ro

Re: [SAtalk] Reporting

2002-02-22 Thread Theo Van Dinter
On Fri, Feb 22, 2002 at 04:52:00PM -0500, Matt wrote: > Does Spam Assassin report the score (in the email or maillog) even if the > message is not tagged as spam? It's in the message. Non-spam, such as the message I'm responding to, has a X-Spam-Status line as such: X-Spam-Status: No, hits=-2.0

Re: [SAtalk] Reporting

2002-02-22 Thread Matt
Aha. I cant get that with the spamassassin -t option. However, Im using MailScanner to call SpamAssassin. Alas, there is no way for the X-Spam-Status header to appear in the email. The only time the hits number shows up is if the "required level" is reached. So there is no way to track these

Re: [SAtalk] Reporting

2002-02-22 Thread Matt Kaminer
Aha. I cant get that with the spamassassin -t option. However, Im using MailScanner to call SpamAssassin. Alas, there is no way for the X-Spam-Status header to appear in the email. The only time the hits number shows up is if the "required level" is reached. So there is no way to track these

Re: [SAtalk] Reporting

2002-02-22 Thread Matt
Sorry for the typo... I meant to say: "I can get that with the -t option" Matt said: > Aha. > > I cant get that with the spamassassin -t option. > > However, Im using MailScanner to call SpamAssassin. Alas, there is no > way for the X-Spam-Status header to appear in the email. The only time

[SAtalk] Re: Score levels

2002-02-22 Thread Daniel Pittman
On 22 Feb 2002, Craig Hughes wrote: > Nice feature! I'll add this to SA itself. *grin* Please use something other than '*', though; it's a pain to filter in a regular expression based system. ;) Maybe one of [@#%&!] would be suitable. Daniel -- These eyes see only what they wanna se

RE: [SAtalk] Suggested new rules and changes

2002-02-22 Thread Michael Moncur
> | body MAKING_MONEY /making money/i > | describe MAKING_MONEY Discusses making money > > This sort of rule would be great for a geek's mailbox (like mine), but > not for a CEO's mailbox. I'm a geek and I don't even think it would work well for my mailbox - everyone's int

[SAtalk] American Email Brands

2002-02-22 Thread Michael Moncur
I've received about 20 spams in the last month that begin with this text: "You are receiving this email from American Email Brands." It may be early days, but it seems like a specific rule for this spam source or an addition to the ratware rule would be helpful. I've added my own custom rule, bu

[SAtalk] One big graphic?

2002-02-22 Thread Michael Moncur
I've had a few spam messages slip through SA recently because they consist of little or no text, with the entire content of the message in a graphic using an tag. I think virtually any message sent as one big graphic would be spam, but I can't think of a good way to detect it using a regular exp

[SAtalk] Re: Another Newbie

2002-02-22 Thread Brian Prescott-Decie
As it's rather long for a posting to your mailing list, I've placed a rough document stating how I installed SA at http://www.holidayfestival.com/local.config.txt - hope it helps (and I hope there's an answer to my question at the end too!!!), but above all, I hope you'll suggest improvements a