On Thu, Oct 24, 2002 at 12:44:49AM -0600, Bob Proulx wrote:
> > Won't a caching DNS like djbdns on the box help, with that large
> > number of users?
>
> Don't all nameservers cache? I know that BIND caches lookups. (Only
> responding so that people won't think that only djbdns caches. Both
>
I noticed a dramatic increase in spam that was not being identified
properly by spam assassin on my setup in the last 24 hours. It appears
that for some unknown reason spamassassin is not doing the rbl checks
now. I see no spam that has rbl tags and my nameserver is not caching the
rbl listings as
Would the delivery time of day be a useful value for nudging the score for
spam. Is there an easy way to test this in the GA?
---
This sf.net email is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(S
>
> Bryant, Eric D. said the following on 19/10/02 21:01:
>
> > 4. How well does it perform at large sites? (We process around
> > 5-700,000 emails a day)
>
> We do about 10 million a day, but then we have over 400 mail servers.
> SpamAssassin can seriously overload a box, so be very careful.
> I don't know how they manage it but MS seems determined to do the
> strangest things. A customer using MS Outlook 2002 sends himself a
> message with no subject and only the words "Hi there" and it manages a
> score of 5.084:
As someone mentioned already, Outlook 2002 doesn't force you to send
> Yeah, that's my personal mail. That's what happens when your a
> consultant for
> 13 years, run two fairly popular web sites and refuse to disable circa '92
> email addresses because, you never know, someone you have lost
> track of might
> have a gig for you. You see why SA was so appealing to
Hello,
Does spamassassin protect against hoaxes?
I have some pretty gullable users who NEED to be protected against these as
they are more than willing to belive anything, and act on it aswell
(removing certain files etc)
regards, Tony
---
On Wednesday 23 October 2002 11:56 pm, Tony Johansson wrote:
> Hello,
>
> Does spamassassin protect against hoaxes?
It has some rules to detect Nigerian type scams, though it's been less
effective at that recently since they've been mutating. Virus hoaxes
about deleting certain files, it doesn'
On Thu, 2002-10-24 at 14:44, Bob Proulx wrote:
> Don't all nameservers cache? I know that BIND caches lookups. (Only
> responding so that people won't think that only djbdns caches. Both
> nameservers do.)
No, not all nameservers do. It depends on the role of the server, ie
caching or content.
Today I got a false positive for a mail generated by the
postfix-log-analyzer "pflogsumm", because of the following hits:
SPAM: Start SpamAssassin results --
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise
If you want to delete them (NOT recommended!):
:0
* ^x-spam-status: yes
/dev/null
If you want to delete only messages scoring over 20:
:0
* ^x-spam-status: yes, hits=[2-9][0-9]
/dev/null
You *really* shouldn't be deleting messages, _especially_ since you just set
it up. You could potentially
Add a recipe that sends those messages to /dev/null.
On Wed, 23 Oct 2002, Gustave Eiffel wrote:
>
> I want to run smapassassin site-wide using spamc. All works fine and is marking
> messages with [SPAM]
>
> How can I delete these messages instead of still delivering them?
>
> Thanks
>
> Mark
Mike Van Pelt said:
> FedEx package tracing got tagged until we whitelisted FedEx.
Any chance you could forward a few of these to me? It'd be good to see if
we could come up with some kind of meta-rule exclusion for this, as
package tracking is a big deal.
Just obfuscate any ID strings to "zzz
I have a probloem with SA 2.43. I'm adding in checks to local.cf to pick
up the spammers at Daily Promotions, but although SA works fine in test
mode picking up the match AND the score, when it's called from
amavisd-new 20020630, then SA picks up the match OK, but NOT the
score... (And so amavi
Is it possible to use the auto whitelisting from a program (Such as
amavisd-new 20020630) that doesn't call spamassassin from the command
line? The only docs I can really find on auto whitelisting say to use
it, call spamassassin with the -a option... Yet nothing for when called
directly using
Ok, this seems like a simple question but the docs don't clarify this.
Can you do this:
spamassassin --add-addr-to-whitelist="*@lists.sourceforge.net"
to whitelist any address from lists.sourceforge.net?
Thanks,
Josh Trutwin
http://trutwins.homeip.net
-
Josh Trutwin said:
> Ok, this seems like a simple question but the docs don't clarify this.
>
> Can you do this:
>
> spamassassin --add-addr-to-whitelist="*@lists.sourceforge.net"
>
> to whitelist any address from lists.sourceforge.net?
nope. add-addr-to-whitelist operates on the auto-whiteli
Bryant, Eric D. said the following on 19/10/02 21:01:
4. How well does it perform at large sites? (We process around
5-700,000 emails a day)
We do about 10 million a day, but then we have over 400 mail servers.
SpamAssassin can seriously overload a box, so be very careful.
5. What MTA do y
Matthew Cline wrote:
> http://www.msnbc.com/news/824336.asp?0si=
>
> An excerpt:
>
>
>>This swindle is commonly known as "419 fraud," after the section of
>>the Nigerian penal code covering cons. According to the anti-spam
>>software vendor Brightmail, 419 come-ons are the Web's second-most
>>
Matthew Cline wrote:
> Not in my inbox. And 1% of
> recipients reply? How sad. Yet another blow to my faith in
> humanity...
Have you tried replying to them? It's *fun*! Try asking them complex
questions, and watch them answer in incredibly tortured English which must
take them hours to write
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
After rebooting (~100 new messages) using my box is no fun at all due to
a lot of spamassassin processes running. Except for using spamd what can I
do against this? I'm running SA on Debian woody with exim as MTA and
fetchmail. Running the MTA nice
I am new to SA. I am using, site wide, SA 2.43.
I want to preserve, from update to update, a few additions we have made
to the whitelist.
I think I need to create a directory "/etc/mail/spamassassin" and create
a .cf file with my additions in it.
What I am unclear on is what the name of this
On Thu, 24 Oct 2002, Matthew Cline wrote:
> On Wednesday 23 October 2002 11:56 pm, Tony Johansson wrote:
> > Hello,
> >
> > Does spamassassin protect against hoaxes?
>
> It has some rules to detect Nigerian type scams, though it's been less
> effective at that recently since they've been mutatin
(cc'ed to ILUG)
[EMAIL PROTECTED] said:
> On RedHat 8.0, perl 5.8, SA 2.43 I get this error message often in my logs:
>
> Oct 24 13:37:09 blacktip spamd[24511]: Malformed UTF-8 character (unexpected
> continuation byte 0xa0, with no preceding start byte) in transliteration (tr/
> //)
> at /usr/
Eric Mings said:
> The strange thing is that it _was_ working fine until the last day or so.
> I just restarted my mailserver and my dns server and now everything is
> working again- spamassassin is doing rbl lookups. It seems very odd to
> me. I cannot see what could have caused it to stop and n
I'm building a SA box for a smallish ISP (2500 mailboxes) what kind of
machine should I be looking at? I'll be storing user prefs in
PostgreSQL, and tagging only on this box, once the message is tagged
it'll be passed on to a final destination for sorting and delivery.
I'm thinking something
>who don't have 24/7 connectivity
That is an implementation issue which could be resolved by checking other
timestamps in the header.
Possibly the origination local TOD might be more valuable or combined with
the "always on" delivery TOD provide more definitive indication.
It is delicate enough t
On RedHat 8.0, perl 5.8, SA 2.43 I get this error message often in my logs:
Oct 24 13:37:09 blacktip spamd[24511]: Malformed UTF-8 character (unexpected
continuation byte 0xa0, with no preceding start byte) in transliteration (tr///)
at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/EvalTests.pm
On Thu, 24 Oct 2002 [EMAIL PROTECTED] wrote:
> Hello all,
>
> My goal today is to get this filtering working on my 4 mail servers.
> Just a summary of my situation. I dont know if anyone is using this is a heavy
> production environment ( I assume so ) but I am running 4 Quad Xeon servers (1
> G
At Thu Oct 24 19:44:37 2002, SpamTalk wrote:
>
> Would the delivery time of day be a useful value for nudging the score for
> spam. Is there an easy way to test this in the GA?
It would be a poor move for those of us who don't have 24/7
connectivity for their mailservers. My mail is delivered by
"Mike Loiterman" <[EMAIL PROTECTED]> writes:
> I understand now. Well, is there anyway to fix it so that the graph is
> actually useful when you reach those kind of numbers? Mine works great and
> is very useful, but I probably have a 1/100 of the volume you do. BTW, is
> that your personal mai
No need to actually run the GA.. a simple mass-check would be enough to see
if the S/O was reasonable. If you have a corpus (ie: a pile of spam and
nonspam in unix mbox format) check the masses directory of the SA tarball.
I suspect against my corpus it will be horrid since some of the mailing
Couldn't find MailScanner (4.0) in any search engines.
Could you please post an URL?
- Original Message -
From: "spamassasin" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 24, 2002 9:16 AM
Subject: [SAtalk] mailscanner
> MailScanner (4.0) works with Spamassassin (2
"Mike Loiterman" <[EMAIL PROTECTED]> writes:
> How are people generating statistics with Spamassassin?
I use a couple things. I use basically the same Gnuplot setup as some
other people (more or less, the gnuplot part is basically the same,
the extraction method is a bit different). I also use th
Is it possible your DNS server was wedged somehow?
If you get it to happen again, try the debug run of SA and see what you get.
At 01:45 PM 10/24/2002 -0400, Eric Mings wrote:
The strange thing is that it _was_ working fine until the last day or so.
I just restarted my mailserver and my dns ser
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I understand now. Well, is there anyway to fix it so that the graph
is actually useful when you reach those kind of numbers? Mine works
great and is very useful, but I probably have a 1/100 of the volume
you do. BTW, is that your personal mail ser
Hello all,
My goal today is to get this filtering working on my 4 mail servers.
Just a summary of my situation. I dont know if anyone is using this is a heavy
production environment ( I assume so ) but I am running 4 Quad Xeon servers (1
Gig RAM) and Spamassassin (spamd) and routing mail that has
Ok, there's not a lot of detail about your problem, but here's some general
things I'd suggest.
First, make sure you have Net::DNS installed and your DNS lookup works.
Run from the command line:
spamassassin -tD
Look at the output to see if it even thinks it is trying or if it thinks
DNS is u
MailScanner (4.0) works with Spamassassin (2.43) ? Anyone using mailscanner?
---
This sf.net email is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(SM) (JCP(SM)) program now.
http://ad.doublecl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 24 Oct 2002 [EMAIL PROTECTED] wrote:
> >> i am running SA on slackware with procmail/sendmail and its also
> behaving the same way. it eats a lot of CPU whenever the mail servers
> gets loads of messages at a time. and the load for each process
On Thu, Oct 24, 2002 at 10:09:37AM +0200, Thomas -Balu- Walter wrote:
> Today I got a false positive for a mail generated by the
> postfix-log-analyzer "pflogsumm", because of the following hits:
>
> SPAM: Start SpamAssassin results --
> SPAM: This mail is
This is a MailScanner issue it happens when MailScanner times out
SpamAssassin and kills it.
Unfortunately by default Mailscanner gives SA 30 seconds to run, and
SpamAssassin gives a 30 second timeout to DNS blacklist lookups. Hence,
anytime a DNSBL becomes unavailable, by default SA will get ki
Ok, /usr/share/spamassassin/ files are NOT intended for you to edit. They
will be obliterated when spamassassin is upgraded. And yes, you will
eventualy want to upgrade. If for no reason other than the fact that the
patterns present in spam change over time, and eventually old versions of
SA b
"Mike Loiterman" <[EMAIL PROTECTED]> writes:
> Whew...I hope all that makes sense.
Me too, since I'm the original author. ;-)
If people are interested in what that graph looks like after running for six
months and filtering well over 30K spams you can check:
wellner.org/email-scores.png
rw2
After rebooting (~100 new messages) using my box is no fun at all due to
a lot of spamassassin processes running. Except for using spamd what can I
do against this? I'm running SA on Debian woody with exim as MTA and fetchmail.
Running the MTA nicely (and therefore all of its childs including proc
Gustave Eiffel wrote:
Hello all,
I am using spamc for all users through /etc/procmailrc on 4 servers and
spamassassin works great. The problem is that it loads up the CPU to 4.0 and
often 10.0 or above. How can I reduce this? Eliminate razor check is one I
have seen on some other posts. What
I've been seeing a lot of messages slip into our system which have no SA
score assigned.
X-MailScanner-SpamCheck: not spam, SpamAssassin ()
Can someone shed light on how these are getting through? Enclosed is a
sample header.
I'd also be curious if others have seen this problem.
(I did try looki
On Thu, Oct 24, 2002 at 12:23:28PM -0700, Chris Fortune wrote:
> Couldn't find MailScanner (4.0) in any search engines.
> Could you please post an URL?
>
Get a new search-engine ! It's available at :
http:// www.mailscanner.info
regards,
SL/
---
Stephane Lentz / Alcanet International - Internet
Justin Mason wrote:
I'm pretty sure it's a bug in redhat's version of perl. Haven't had
time (or access to rh8) to look into it though.
Not sure why you think that; it looks like the Unicode handling is
correctly flagging some duff encoding, which may perhaps be new
behaviour but not, as su
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yes, I should have mentioned that I am not the author. I was going
to put that in the message, but figured it wasn't necessary. My
sincere apologies to the original author of those scripts.
Mike Loiterman
[EMAIL PROTECTED]
PGP Key 0xD1B9D18E
---
/etc/mail/spamassassin/local.cf is the generally recommended filename
At 08:38 AM 10/24/2002 -0500, John Lederer wrote:
I am new to SA. I am using, site wide, SA 2.43.
I want to preserve, from update to update, a few additions we have made to
the whitelist.
I think I need to create a director
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Very cool spam stat scripts.
I'm trying to think of an automated way of having each user's stats
mailed to them every night. Any ideas?
Mike Loiterman
[EMAIL PROTECTED]
PGP Key 0xD1B9D18E
-BEGIN PGP SIGNATURE-
Version: PGP 7.0.4
Commen
Hello Everyone! I wanted to know what the default settings where for
spamassassin when it marks a message as SPAM. Is the message supposed to get
forwarded to the intended recipient or just deleted. We have had SA up and
running about 2 days and all that happens to our spam mail is that the spam
>What I am unclear on is what the name of this .cf file should >be "60_whitelist.cf"?
>"65_whitelist.cf"? "mypermanentwhitelist.cf"?
>I also do not understand whether sa adds the names in my
>/etc/mail/spamassassin/ cf file to those >in /usr/share/spamasassin/ or susbtitutes
>them.
i use onl
On Thu, Oct 24, 2002 at 09:12:52PM +0100, Justin Mason wrote:
>
> (cc'ed to ILUG)
>
> [EMAIL PROTECTED] said:
>
> > On RedHat 8.0, perl 5.8, SA 2.43 I get this error message often in my logs:
> >
> > Oct 24 13:37:09 blacktip spamd[24511]: Malformed UTF-8 character (unexpected
> > continuation b
Would it be worthwhile to write a rule to catch messages that contain mail
with the common "go to this server to be removed" domains like these?
businessinfo-center.com
technostor.com
81832.com
autoemailremoval.com
removeyou.com
worldremove.com
removeregister.com
listwasher.org
theremovelist.org
v
I am a little confused as to what am I doing wrong. When I use '| spamc' or '| spamassassin' in my ~/.procmailrc file, none of the spams get tagged and they all land up in my inbox. When I use '| spamassassin -P', spams get tagged correctly and they show up in my 'spam' folder as directed.
Can
I have this in my local.cf
I am still getting huge CPU spiked from spamd
I am trying to disable external lookups that may be taking CPU
This does not seem to have much effect.
I also have a dedicated and very fast DNS server for these 4 mail servers
What can I add to this local.cf file?
# This
Version 2.41 running on Win2000, worked perfectly
until I installed Net::DNS, now it hangs indefinately. Renaming Net::DNS
fixes the problem. I have a home-made RBL checker working well, using the
perl Mail::RBL module. So what's breaking? Are the RBL servers not
timing out? Is it a 3 m
*sigh*
I don't know how they manage it but MS seems determined to do the
strangest things. A customer using MS Outlook 2002 sends himself a
message with no subject and only the words "Hi there" and it manages a
score of 5.084:
FROM_AND_TO_SAME_5 1.314
HTML_70_90
Sorry, I am not sure why the body of my last post didn't show, so I am repeating this.
When I use '| spamc' or '| spamassassin' in my ~/.procmailrc file, none of the spams are being tagged by SpamAssassin and they all land up in my Inbox. However when I use '| spamassassin -P', things work g
On Thu, Oct 24, 2002 at 03:01:52PM -0500, Paul Oster wrote:
> I'm building a SA box for a smallish ISP (2500 mailboxes) what kind of
> machine should I be looking at?
Impossible to say. How much mail do your users receive?
> I'll be storing user prefs in PostgreSQL, and tagging only on this
There is a bug report and a work around (for perl) on the bugzilla site:
Bug# 1147
If you still need the fix.
Aram
On Thu, 2002-10-24 at 16:46, Hippo Man wrote:
> On Thu, Oct 24, 2002 at 09:12:52PM +0100, Justin Mason wrote:
> >
> > (cc'ed to ILUG)
> >
> > [EMAIL PROTECTED] said:
> >
> >
Isn't there a way in LookOut to turn off HTML? I have a copy of LookOut
somewhere here, and IIRC there's a way to turn off HTML and turn on plain text.
We have a number of customers where I work who have sent e-mail to our
support department, and it gets flagged as SPAM for the same reason.
Eva
Kaushik Mallick <[EMAIL PROTECTED]> [2002-10-24 16:11:33 -0600]:
> Sorry, I am not sure why the
> body of my last post didn't show, so I am repeating this.
>
It is probably because you are posting messages to a public list as
HTML. That is not appreciated my many users of the net. In fact
On Thu, 24 Oct 2002, Scott Lambert wrote:
> On Thu, Oct 24, 2002 at 03:01:52PM -0500, Paul Oster wrote:
> > I'm building a SA box for a smallish ISP (2500 mailboxes) what kind of
> > machine should I be looking at?
>
> Impossible to say. How much mail do your users receive?
If you're running s
On Thursday 24 October 2002 05:39 am, Charles Dennett wrote:
> One of the people who replies does so with his tongue firmly planted
> in his cheek.
I've seen some of them. My favorite Nigerian counter-scam is this guy
who pretends to be a anthropologist who gets involved in a Lovecraftian
type
On Thu, Oct 24, 2002 at 06:24:51PM -0400, Aram Mirzadeh wrote:
>
> There is a bug report and a work around (for perl) on the bugzilla site:
>
> Bug# 1147
>
> If you still need the fix.
>
> Aram
Thanks for this reference. It mainly talks about a RedHat workaround,
however.
The workaround tal
Hi,
I want to block all messages with VIAGRA, FREE, SEX, PORN, etc in the subject of a
message. I would set the score to a very high value.
How would I define the syntax in the local.cf file? Would the score also be in the
local.cf file?
Thanks,
Damian Mendoza
Workgroup Solutions
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 24 Oct 2002, SpamTalk wrote:
> Would the delivery time of day be a useful value for nudging the score
> for
> spam.
???
I don't think so. I write most of my personal email at nights whereas
emails sent from offices will mostly be sent during
Here's a patch to spamcheck.py that allows for multiple recipient support yet
preserves per-user pgsql preferences. It's designed to work with postfix,
but could probably be used with almost any modern MTA.
It works by checking if each user has any preferences set in the SA userpref
database.
Posté par Damian Mendoza le 25/10.
Hi,
I want to block all messages with VIAGRA, FREE, SEX, PORN, etc in the subject of a
message. I would set the score to a very high value.
How would I define the syntax in the local.cf file? Would the score also be in the
local.cf file?
>> for sitewide impl
Hello,
> SPAM: Start SpamAssassin results
> -- SPAM: This mail is probably spam. The original
> message has been altered SPAM: so you can recognise or block similar
> unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for
> more details. SPAM
73 matches
Mail list logo
