Re: [SAtalk] What is legal format for whitelist_from

2002-05-29 Thread dman
On Tue, May 28, 2002 at 10:52:08PM -0700, Harry Putnam wrote: | [Cross post alert... This should have been posted on `talk' | I had my wires crossed for a few posts which will no be posted to | `talk'] [only replying on -talk] | Come within a hairs breadth of giving full details of what will w

Re: [SAtalk] Is this normal?

2002-05-29 Thread dman
On Tue, May 28, 2002 at 08:20:09PM -0700, Harry Putnam wrote: | In my tests, I've thrown 80-90 pieces of mail at spam assassin running | in the stock .procmailrc recipe with an added debug -D: | I see the cpu usage do a slow climb to around 50% (on an amd 400mhz) | Most of the time is spent in

Re: [SAtalk] about how scoring works

2002-05-29 Thread Simon Lyall
On Tue, 28 May 2002, Harry Putnam wrote: > Running some of my spam thru and makine some adjustments, like > lowering the required score to 2 (default 5). I was really suprised > to see this message get 1.9 score and only on tests=SUBJ_ALL_CAPS. > With all the repeates of FREE in all caps in subje

Re: [SAtalk] A pointer for nailing Korean based spam

2002-05-29 Thread Matt Sergeant
Daniel Quinlan wrote: > Matt Sergeant <[EMAIL PROTECTED]> writes: > > >>If Craig would work on the email parser I posted to the dev list instead >>of MIME-tools, it decodes all character sets (even embedded ones in >>headers) to UTF-8, making detecting alternate character set stuff >>infinite

Re: [SAtalk] charsets question

2002-05-29 Thread Matt Sergeant
dman wrote: > On Tue, May 28, 2002 at 09:53:14AM +0100, Matt Sergeant wrote: > | dman wrote: > | >What is the charset GB2312? Is it a windows thing? Trying to > display > | >this spam message just gives me an odd sequence of high-order latin1 > | >chars. > | > | It's an encoding for Chinese cha

Re: [SAtalk] Options to automate updating rulebase?

2002-05-29 Thread Matt Sergeant
Jim Howard wrote: > All: > > Please forgive me and point me there if this has been addressed already... > > I'm using SA 2.11, and would love to update the rulebase on a regular > basis, but I don't want to reinstall and config SA again and again. > > Wouldn't it be possible to run an automated

Re: Removing rules with negative score? (Was: Re: [SAtalk] WEB_BUGS tests a negative?)

2002-05-29 Thread Lars Hansson
On Wednesday 29 May 2002 09:25, Duncan Findlay wrote: > Ususally, I would imagine, you know the gender of your correspondant. Not necessarily. With names like June, Chicken and Flower (I kid you not, they're all male) gender is not always obvious ;) -- Lars Hansson __

Re: [SAtalk] SQL Options

2002-05-29 Thread Nathan Neulinger
Yep. Set the userid to "GLOBAL" in the db table. Works great for me. Only thing I'm loading from files is the db config info. -- Nathan On Tue, 2002-05-28 at 23:26, Andrew Stephen wrote: > Hi > > Is it possible to local system wide whitelist and blacklist enteries from an > SQL database rathe

[SAtalk] scoring individual words

2002-05-29 Thread Tony L. Svanstrom
Just a thought... wouldn't it be a good idea to have a "dictionary" with common words in spam; each word could have a low score, but it'd add up pretty quickly whenever you get a 3 page pornmail... /Tony -- # Per scientiam ad libertatem! // Through knowledge towards freedom! # # Genom

Re: [SAtalk] scoring individual words

2002-05-29 Thread Matt Sergeant
Tony L. Svanstrom wrote: > Just a thought... wouldn't it be a good idea to have a "dictionary" with > common words in spam; each word could have a low score, but it'd add up pretty > quickly whenever you get a 3 page pornmail... That's how the spam phrases stuff is supposed to work. Matt. __

[SAtalk] New user question regarding razor.

2002-05-29 Thread Jon Paterson
Title: New user question regarding razor. Hi, I have got 2.20 working, and have installed razor-client, and the sdk to get the perl modules, all OK. When running the spamd in debug, I can see the it finds razor, and reads the nearest razor server. Although spamd is catching stuff, I have

Re: [SAtalk] New user question regarding razor.

2002-05-29 Thread Theo Van Dinter
On Wed, May 29, 2002 at 04:05:27PM +0100, Jon Paterson wrote: > Although spamd is catching stuff, I have not seen any indications that > anything is actually going through razor. Is there anyway that I can > check? I have also noticed that I do not have the razor.conf file You can pipe the spam

RE: [SAtalk] New user question regarding razor.

2002-05-29 Thread Jon Paterson
Hi Theo Mmm, perhaps I am not understanding its use correctly. Basically, the server that spamd and sendmail is running is a firewall, the mail is transferred internally to a MS exchange server, and there are no mailboxes as such on the server. I (perhaps wrongly) believed that spamd would als

[SAtalk] spamass-milter - what's the point?

2002-05-29 Thread Keith Whyte
I just got spamass milter working with sendmail 8.12, good enough, interesting installing latest sendmail and everything, but i have to ask myself what's the point? I thought that the milter was going to actually tell the sendmail and thus the sender that the spam was detected and drop the SMT

[SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Rob Winters
Maybe it's because I'm filtering my SPAM for later manual "safety" screening as opposed to deleting it completely, but it seems like some of the algorithmically generated scores just pussy-foot around too much. Here's are scores for a recent slip-through, a common pyramid scheme message: X-Spa

Re: [SAtalk] spamass-milter - what's the point?

2002-05-29 Thread Michael Grau
You may want look at using SA vi Mimedefang as your milter. http://www.roaringpenguin.com/mimedefang/ Bounce, drop, discard, notify, quarantine, do what you will based on SA scores ... Keith Whyte wrote: > > I just got spamass milter working with sendmail 8.12, good enough, > interesting insta

RE: [SAtalk] New user question regarding razor.

2002-05-29 Thread Vivek Khera
> "JP" == Jon Paterson <[EMAIL PROTECTED]> writes: JP> I (perhaps wrongly) believed that spamd would also pass the mail to JP> razor as it was passed through. I if I run razor-check with the Nothing with SA (the module, not the spamassassin program) nor razor requires a home directory for t

Re: [SAtalk] Dumping email with spamass-milter

2002-05-29 Thread Daniel Rogers
On Tue, May 28, 2002 at 06:22:41PM -0700, Marc MERLIN wrote: > Does spamass-milter reject mail at SMTP time, or does it just tag it? So far as I know, it just tags it. However, if mimedefang were used instead of spamass-milter, you could reject the mail, as we do with anything that scores over 1

RE: [SAtalk] New user question regarding razor.

2002-05-29 Thread Jon Paterson
Mmm, so I should be able to do this then. Any ideas anyone on what to check? Rarzor-check obviously is working on its own, and spamd can see it too. Is there any debugging I can turn on to see if the mail is being passed to it on its way through? I don't have a clue about perl to check out t

Re: [SAtalk] spamass-milter - what's the point?

2002-05-29 Thread Theo Van Dinter
On Wed, May 29, 2002 at 04:42:28PM +0100, Keith Whyte wrote: > There's no functional difference between running milter and > running spamc from /etc/procmailrc There is actually. You process the message once at reception, not multiple times at delivery (imagine a message to a mailing list for 10

[SAtalk] Rule based on Epoch Date?

2002-05-29 Thread Kevin G. J. Freels
Greetings! Has anyone created a weight based on a message's "reported" age? We've been thinking that if a message has a header date of earlier than a month before the current date, or if it's dated as Epoch (to stuff the Spam at the top of the date-sorted Inbox), it would be nice to add a weight

Re: [SAtalk] spamass-milter - what's the point?

2002-05-29 Thread Michael Stauber
Hi Keith, > I just got spamass milter working with sendmail 8.12, good enough, > interesting installing latest sendmail and everything, but i have to ask > myself what's the point? I also did some tests with Spamassassin-Milter on Sendmail 8.12.3. I usually run spamd/spamc on SUN/Cobalt RaQs wi

Re: [SAtalk] What is legal format for whitelist_from

2002-05-29 Thread Harry Putnam
dman <[EMAIL PROTECTED]> writes: > The default config file has some examples. Also look at > /etc/spamassassin/60_whitelist.cf (you're using debian, right?). No, not Debian. In this case RedHat 7.1 About those examples in 60_whitelist.cf: There are none that show multiple entries in my copy.

Re: [SAtalk] Rule based on Epoch Date?

2002-05-29 Thread Matt Sergeant
Kevin G. J. Freels wrote: > Greetings! > > Has anyone created a weight based on a message's "reported" age? > > We've been thinking that if a message has a header date of > earlier than a month before the current date, or if it's dated as > Epoch (to stuff the Spam at the top of the date-sorted

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Vivek Khera
> "RW" == Rob Winters <[EMAIL PROTECTED]> writes: RW> RAZOR_CHECK version=2.20 = 3.0 (a manual score, soon to be 5.0) Before you give razor the ability to block your mail all by itself, consider the false positives from mailing lists. Apparently there are some fools out there that are inten

[SAtalk] ScanMail Message: To Sender, virus found and action taken.

2002-05-29 Thread System Attendant
ScanMail for Microsoft Exchange has blocked a file attachment(s). Place = [EMAIL PROTECTED] Sender = Spamassassin-talk Subject = Spice girls' vocal concert Delivery Time = May 29, 2002 (Wednesday) 12:41:15 Action on file attachment(s): Message from recipient's administrator: 05/29/2002 Opportun

Re: [SAtalk] Rule based on Epoch Date?

2002-05-29 Thread Tony L. Svanstrom
On Wed, 29 May 2002 the voices made Kevin G. J. Freels write: > We've been thinking that if a message has a header date of earlier than a > month before the current date, or if it's dated as Epoch (to stuff the Spam > at the top of the date-sorted Inbox), it would be nice to add a weight to > mar

Re: [SAtalk] Is this normal?

2002-05-29 Thread Harry Putnam
dman <[EMAIL PROTECTED]> writes: > It is normal for the way you're running SA. The way you're using it > (by running 'spamassassin'), for each message : > o start a perl process (not cheap) > o compile lots and lots of regexes (takes lots and lots of CPU) > o do the regex mat

Re: [SAtalk] Rule based on Epoch Date?

2002-05-29 Thread Kevin G. J. Freels
Matt> Yep, it's either in CVS or being discussed very recently Matt> on the -dev list, and likely to go into CVS. Tony> I think it was on this list that was discussed within the Tony> last 1-2 weeks; check the archive. D'OH Yep, there they were. I guess I should search my own archived

[SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Security
Hi, I'm very interested in running SpamAssassin site-wide on a few of my machines. Currently I'm Running Postfix for an MTA. Can anyone point me to some good documentation on setting up SpamAssassin With Postfix? I've done some searches but can't seem to find any decent documentation. If anyo

Re: [SAtalk] What is legal format for whitelist_from

2002-05-29 Thread dman
On Wed, May 29, 2002 at 09:25:34AM -0700, Harry Putnam wrote: | dman <[EMAIL PROTECTED]> writes: | | > The default config file has some examples. Also look at | > /etc/spamassassin/60_whitelist.cf (you're using debian, right?). | | No, not Debian. In this case RedHat 7.1 Well, ok, as long as

Re: [SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Vivek Khera
> "s" == security <[EMAIL PROTECTED]> writes: s> I'm very interested in running SpamAssassin site-wide on a few of my s> machines. Currently I'm s> Running Postfix for an MTA. Can anyone point me to some good s> documentation on setting up SpamAssassin s> With Postfix? I've done some searc

Re: [SAtalk] Is this normal?

2002-05-29 Thread dman
On Wed, May 29, 2002 at 09:53:41AM -0700, Harry Putnam wrote: | dman <[EMAIL PROTECTED]> writes: [performance of SA] ... | > If you use the spamc/spamd combo instead, ... | > The resources needed for this setup is much lower than for running | > 'spamassassin' directly. ... | If you mean the entr

Re: [SAtalk] A pointer for nailing Korean based spam

2002-05-29 Thread dman
On Wed, May 29, 2002 at 10:47:50AM +0100, Matt Sergeant wrote: | What headers might you want to not decode? The Subject: header so that weird charsets can be matched. Maybe others too (for similar reasons). It may also be helpful to not decode some headers if there is some deformation of them

[SAtalk] handing SA to cyrus

2002-05-29 Thread Paul Bauer
I am currently trying to hand mail from postfix->procmail->SA->cyrus. For the most part I have the first steps working fine. Once the mail is tagged as spam though I cannot seem to get the mail delivered. If someone has this implimented and could give me apointer I would greatly appreciate

Re: [SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Harry Putnam
"Security" <[EMAIL PROTECTED]> writes: > Hi, > > I'm very interested in running SpamAssassin site-wide on a few of my > machines. Currently I'm > Running Postfix for an MTA. Can anyone point me to some good > documentation on setting up SpamAssassin > With Postfix? I've done some searches but c

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Kingsley G. Morse Jr.
On Wed:11:43, Rob Winters wrote: [...] > SA does not give any credit to the cumulative effect [...] It seems to me that properly weighted scores would avoid this problem. I'd like to think that a good optimization algorithm, such as a genetic algorithm, could do the job. Thanks, Kingsley __

Re: [SAtalk] Is this normal?

2002-05-29 Thread Harry Putnam
dman <[EMAIL PROTECTED]> writes: > That's the "real" time. IOW how long you sat there waching the screen > before you saw a response from the program. > > Notice that the CPU time used by the system while in "userland" > differs by 14.66 seconds (a factor of 123) and the CPU time used in > "syst

Re: [SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Paul Bauer
once procmail is installed you only really need to uncomment one of the following lines in main.cf: $ grep procmail main.cf #mailbox_command = /usr/local/bin/procmail #mailbox_command = /some/where/procmail -a "$EXTENSION" Paul On Wed, May 29, 2002 at 10:50:23AM -0700, Harry Putnam wrote: >

Re: [SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Mark Martinec
> I'm very interested in running SpamAssassin site-wide on a few of my > machines. Currently I'm Running Postfix for an MTA. Can anyone point me > to some good documentation on setting up SpamAssassin With Postfix? Try: http://www.ijs.si/software/amavisd/ and in particular: http://www.ijs.si/

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Tony L. Svanstrom
On Wed, 29 May 2002 the voices made Kingsley G. Morse Jr. write: > On Wed:11:43, Rob Winters wrote: > [...] > > SA does not give any credit to the cumulative effect > [...] > > It seems to me that properly weighted scores would > avoid this problem. I'd like to think that a good > optimization al

Re: [SAtalk] handing SA to cyrus

2002-05-29 Thread dman
On Wed, May 29, 2002 at 10:34:50AM -0700, Paul Bauer wrote: | I am currently trying to hand mail from | postfix->procmail->SA->cyrus. A better diagram would be : postfix->procmail ->cyrus. |^ || v| SA | For the most part I have the first steps worki

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread dman
On Wed, May 29, 2002 at 08:45:41PM +0200, Tony L. Svanstrom wrote: | On Wed, 29 May 2002 the voices made Kingsley G. Morse Jr. write: | > On Wed:11:43, Rob Winters wrote: | > [...] | > > SA does not give any credit to the cumulative effect | > [...] | > | > It seems to me that properly weighted sc

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Brian May
Thats why in spam assassin you can set the scores yourself... fit them for your needs.. Brian - Original Message - From: "Rob Winters" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 29, 2002 8:43 AM Subject: [SAtalk] large numbers of tiny scores = SPAM! Maybe it's bec

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Kingsley G. Morse Jr.
Good point. Combinations of some rules may be more indicative of spam than others. It would be great if the GA could infer the boolean logic, as well as the scores. Thanks, Kingsley On Wed:20:45, Tony L. Svanstrom wrote: > On Wed, 29 May 2002 the voices made Kingsley G. Morse Jr. write: > > >

Re: [SAtalk] SpamAssassin + Postfix

2002-05-29 Thread Vivek Khera
> "MM" == Mark Martinec <[EMAIL PROTECTED]> writes: MM> you can run amavisd-new without virus checking, just with MM> SpamAssassin. Should be quite fast and easy to set up if you need MM> site-wide central setup. Next version will make it easier to set MM> it up with null virus checker, and

[SAtalk] SpamAssassin - some general info

2002-05-29 Thread Hugo
I couldn't find some decent documentation regarding the topology,hence some questions: - Should I install SpamAssassin on the same machine I run sendmail or it can be installed on the separate machine - Is it integrated with sendmail? - What is the best topology? _

[SAtalk] RE: Postfix + SpamAssassin site-wide

2002-05-29 Thread Dan . Smart
>From: "Security" <[EMAIL PROTECTED]> > I'm very interested in running SpamAssassin site-wide on a few of my >machines. Currently I'm >Running Postfix for an MTA. Can anyone point me to some good >documentation on setting up SpamAssassin >With Postfix? I've done some searches but can't seem to fi

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Rob Winters
At 03:23 PM 5/29/2002, Brian May wrote: >Thats why in spam assassin you can set the scores yourself... fit them for >your needs.. Well, adjusting the scores won't necessarily make the tool better. I'm sure that the computationally-derived scores are excellent. In fact, I submit that you've pro

Re: [SAtalk] botched MIME tests?

2002-05-29 Thread Craig R Hughes
Nigel Metheringham wrote: NM> Melissa (if I had 1% of the money saved by some ISPs by that filter NM> during the Melissa and its successors storms I would be writing this NM> from my state-of-the-art wireless networked laptop whilst sipping a cold NM> drink on a carribean beach :-) ). I'll be th

Re: [SAtalk] SpamAssassin - some general info

2002-05-29 Thread dman
On Wed, May 29, 2002 at 03:43:34PM -0400, Hugo wrote: | I couldn't find some decent documentation regarding the topology,hence some | questions: | - Should I install SpamAssassin on the same machine I run sendmail or it | can be installed on the separate machine How heavy is your load and how po

RE: [SAtalk] RE: Postfix + SpamAssassin site-wide

2002-05-29 Thread Greg Blakely
>From: "Security" <[EMAIL PROTECTED]> > I'm very interested in running SpamAssassin site-wide on a few of my >machines. Currently I'm Running Postfix for an MTA. Can anyone point me >to some good documentation on setting up SpamAssassin >With Postfix? I've done some searches but can't seem to

[SAtalk] blacklist available a completely separate module?

2002-05-29 Thread Kevin Layer
I have a spam filter of my own, and I'd like to add blacklist capabilities to it. Rather than reinvent the wheel, is the blacklist module usable separately? I looked at the FAQ and browsed the docs, but didn't see an answer to the question. _

RE: [SAtalk] RE: Postfix + SpamAssassin site-wide

2002-05-29 Thread Max Paperno
At 5/29/2002 04:36 PM -0500, Greg Blakely wrote: >I have this setup working using spamproxyd, or filterproxy as the author >of that perl script called it (in the version I have). If you're going to use spamproxyd then IMHO you're better off using the script I announced earlier this week. It's

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Nathan Neulinger
Wouldn't it be possible to add this as just another test in the GA? A rule that looks at all the previous rules that matches. Just make sure the GA doesn't do anything with it until the other rules are calculated. Some percentage of the score could be the multiplication factor that is used. On

Re: [SAtalk] blacklist available a completely separate module?

2002-05-29 Thread Daniel Quinlan
Kevin Layer <[EMAIL PROTECTED]> writes: > I have a spam filter of my own, and I'd like to add blacklist > capabilities to it. Rather than reinvent the wheel, is the blacklist > module usable separately? I looked at the FAQ and browsed the docs, > but didn't see an answer to the question. Not r

Re: [SAtalk] URI rule with = doesn't work?

2002-05-29 Thread Craig R Hughes
Ben, works fine for me, manually re-typing the URL into a fake email, etc. Could you maybe forward the original message as a message/rfc822 attachment? Maybe there's some invisible control characters in there or something... C Ben Jackson wrote: BJ> I want to match the `?id=' in: BJ> BJ> ht

[SAtalk] Re: SpamAssassin + Postfix

2002-05-29 Thread Daniel Pittman
On Wed, 29 May 2002, [EMAIL PROTECTED] wrote: > Hi, > > I'm very interested in running SpamAssassin site-wide on a few of my > machines. Currently I'm Running Postfix for an MTA. Can anyone point > me to some good documentation on setting up SpamAssassin With > Postfix? I've done some sea

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread rODbegbie
Rob Winters wrote: > How about a "bonus" for cumulative effect? Why not do a second-level > analysis after scoring; something like: > > 3 positive score matches - add 1.0 > 4 positive score matches - add 2.0 > 5 positive score matches - add 4.0 > 6 positive score matches - add 8.0 This reminds me

Re: [SAtalk] URI rule with = doesn't work?

2002-05-29 Thread Ben Jackson
On Wed, May 29, 2002 at 04:37:12PM -0700, Craig R Hughes wrote: > Ben, works fine for me, manually re-typing the URL into a fake email, etc. > Could you maybe forward the original message as a message/rfc822 attachment? > Maybe there's some invisible control characters in there or something... Fo

Re: [SAtalk] Bad numbering in this version

2002-05-29 Thread Craig R Hughes
Q_FOR_SELLER was initially set to have a score of -4.0 -- why that score is missing from current CVS is a mystery -- SA seems instead to be using the default score of 1.0 for the message -- I'll do some tracking to figure out how/when that happened. Meanwhile, I'll add the -4.0 back in. You can

RE: [SAtalk] Bad numbering in this version

2002-05-29 Thread Craig R Hughes
Michael Moncur wrote: MM> > Many moons ago, I submitted this rule (from my local config) to MM> > counteract such problems: MM> > MM> > header Q_FOR_SELLER Subject =~ /Question for seller/ MM> > describe Q_FOR_SELLER Subject is eBay Question for seller MM> > scoreQ_FOR

[SAtalk] Suggested 60_whitelist.cf addition

2002-05-29 Thread Michael Stauber
Hi all, I just got a couple of false positives these days in mails sent from ebay.de and amazon.de So I suggest the following addition to 60_whitelist.cf: whitelist_from *@amazon.de whitelist_from *@*.amazon.de whitelist_from *@ebay.de whitelist_from *@*.ebay.de Any chance that this will

Re: [SAtalk] blacklist available a completely separate module?

2002-05-29 Thread Kevin Layer
>> Kevin Layer <[EMAIL PROTECTED]> writes: >> >> > I have a spam filter of my own, and I'd like to add blacklist >> > capabilities to it. Rather than reinvent the wheel, is the blacklist >> > module usable separately? I looked at the FAQ and browsed the docs, >> > but didn't see an answer to th

Re: [SAtalk] patch: overhauled RBL query and result gathering code

2002-05-29 Thread Craig R Hughes
Marc, looks very interesting -- I'd like to take a bit of a better look at it, and probably commit it. Could you attach the patchfile to a bugzilla report so I don't have to: 1) remember to revisit this email when I get time to actually work on this 2) go through the tedium of fixing copy/paste

Re: [SAtalk] Simson talks about Spam Assassin

2002-05-29 Thread Craig R Hughes
Matt, the history given in the article is mostly based on a email interview of me by Simson. So consequently, it reflects mostly the stuff I've been aware of since Justing included spamc/spamd in the distribution, and even more so the stuff we've been working on since Justin went off backpacking

Re: [SAtalk] Why aren't ALL scores genetically evolved?

2002-05-29 Thread Craig R Hughes
SM> Can you give a brief description of the corpus (how big (both spam and SM> non-spam), how well exercised the rules are, etc)? I would find it useful SM> to see how many times each rule is triggered. That would allow me to poke SM> around through my private "corpus" and send you examples that

Re: [SAtalk] Why aren't ALL scores genetically evolved?

2002-05-29 Thread Craig R Hughes
Tony L. Svanstrom wrote: TLS> What's needed is a distributed way of GA-scoring; so that each person can keep TLS> his e-mail private while still let his e-mail count... A 100 trusted very TLS> active users worldwide should do the trick. =) TLS> Might be hell to set up, and take a week or so to

[SAtalk] Re: DCC and razor doc (Was: Why aren't ALL scores geneticallyevolved?)

2002-05-29 Thread Craig R Hughes
SA will use razor and dcc automatically if it detects that they are installed. You don't need to edit anything (and I don't think you even need to restart spamd -- though perhaps you do). There are some config-file options for controlling both, and these are documented in the manpage for Mail::Sp

Re: [SAtalk] Rule based on Epoch Date?

2002-05-29 Thread Duncan Findlay
On Wed, May 29, 2002 at 10:02:48AM -0700, Kevin G. J. Freels wrote: > Any ETA on when this might be available to the general users? I believe DATE_IN_FUTURE has been around for several releases. (i.e. since 2.0) Of course, it is improved in CVS. -- Duncan Findlay __

Re: Removing rules with negative score? (Was: Re: [SAtalk] WEB_BUGS tests a negative?)

2002-05-29 Thread Duncan Findlay
On Wed, May 29, 2002 at 08:01:59PM +0800, Lars Hansson wrote: > On Wednesday 29 May 2002 09:25, Duncan Findlay wrote: > > Ususally, I would imagine, you know the gender of your correspondant. > > Not necessarily. With names like June, Chicken and Flower (I kid you not, > they're all male) gende

[SAtalk] SA Memory Usage

2002-05-29 Thread Bryan Hoover
Hi all, Sorry if this question's already been addressed and resides in the archive - I just joined the lists - but there's no search specific to this list archive - if there is, please let me know. My question: My ISP limits user process memory to 8meg/process. So SA is getting killed when the

[SAtalk] SQL and Spamc confusion

2002-05-29 Thread JD
I'm trying to set individual scores for rules via SQL and spamc, but they don't take effect. Is it possible to do this? For example: in my SQL DB I have: myusernamerequired_hits6 and that takes effect. But adding myusernameWEB_BUGS2 doesn't override the web-bugs

[SAtalk] large auto-whitelist.db problems?

2002-05-29 Thread Rob Mangiafico
Hello, With spamd running (SA 2.20), and per user auto-whitelist enabled, are there any problems or limits with the number of entries in a user's auto-whitelist.db file and its effect on server performance? As the program runs longer, some people's auto-whitelist file will contain 1000's of e

Re: [SAtalk] Why aren't ALL scores genetically evolved?

2002-05-29 Thread Kingsley G. Morse Jr.
How about sampling the network checks, so that instead of 400,000, only doing, say 500? It seems to me that sampling a few hundred network checks would arrive at a better score for them than hand coding. My two cents, Kingsley Skip Montanaro <[EMAIL PROTECTED]> wrote: On Wed:17:57, Craig R Hug

[SAtalk] A little present for the lists patience

2002-05-29 Thread Harry Putnam
Hope some of you find this script usefull. Its aim is to be fed one of the rule handles and spit out the score, definition and the rule itself by regex so several may be brought up. Its just a simple perl regex finding script that trawls thru your *.cf files for a regex and chops off the lines r

RE: [SAtalk] Re: DCC and razor doc (Was: Why aren't ALL scores geneticallyevolved?)

2002-05-29 Thread Dan Kohn
Craig, DCC isn't mentioned on . I added the following lines in my .spamassassinrc/user_prefs, but didn't see how to turn on DCC. score RCVD_IN_RBL 10 score RCVD_IN_RSS 1 score RCVD_IN_DUL 1 sco

RE: [SAtalk] Suggested 60_whitelist.cf addition

2002-05-29 Thread Dan Kohn
This can just be: whitelist_from *amazon.de whitelist_from *ebay.de However, I would suggest that these lines (and probably everything else) should be commented out by default in 60_whitelist.cf. Having them there makes it to easy for chickenboner spammers to reliably evade SpamAssassin. If

Re: [SAtalk] Re: DCC and razor doc (Was: Why aren't ALL scores geneticallyevolved?)

2002-05-29 Thread rODbegbie
Dan Kohn wrote: > Craig, DCC isn't mentioned on > . > > I added the following lines in my .spamassassinrc/user_prefs, but didn't > see how to turn on DCC. DCC support isn't in SA2.20 -- Only in CVS. Grab a nightly release if you're fee

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Michael C. Berch
On Wednesday, May 29, 2002, at 08:43 AM, Rob Winters wrote: > How about a "bonus" for cumulative effect? Why not do a second-level > analysis after scoring; something like: > > 3 positive score matches - add 1.0 > 4 positive score matches - add 2.0 > 5 positive score matches - add 4.0 > 6 positi

RE: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread Michael Moncur
> I came up with the name "Five-Card Charlie", which is a reference to the > game of Blackjack, where under some rules the player wins if he has any > hand of five cards and does not bust (exceed 21). I figured if any > message tripped 5 positive tests, the chances of it being non-spam were > ve