Re: [SAtalk] Is to identify yourself by return email necessary in the future?

2002-11-22 Thread Claudio Clemens
Hi, I need to learn, that for SAhelp I need to change the To:, Grrr. - Forwarded message from Claudio Clemens <[EMAIL PROTECTED]> - On Thu, Nov 21, 2002 at 11:33:03PM -0700, Michael Moncur wrote: > > This is possible, but many (okay, I) consider it arrogant, obnoxious > > and just general

Re: [SAtalk] Distribute the load

2002-11-22 Thread Justin Mason
SpamTalk said: > If the load is that large it would probably justify a hardware or dedicated > software load-balancing solution. Doesn't Red hat appears to have an > "active" load balancing solution: > http://www.redhat.com/docs/manuals/advserver/RHLAS-2.1-Manual/install-guide/ > s1-lvs-schedulin

Re: [SAtalk] Is to identify yourself by return email necessary in the future?

2002-11-22 Thread Tom Allison
Tony Hoyle wrote: -Original Message- From: Ronald Wiplinger [mailto:[EMAIL PROTECTED]] Sent: 21 November 2002 13:50 To: [EMAIL PROTECTED] Subject: [SAtalk] Is to identify yourself by return email necessary in the future? I just come accross the article at http://slate.msn.com/?id=2074042

Re: [SAtalk] An interesting way to get around filters

2002-11-22 Thread Tom Allison
Bob Amen wrote: Some mail clients (the version of Mozilla I'm running, among them) don't allow one to filter on a user defined header. Only the standard ones are in the pull down list. WHAT version? Mine works great! version 1.0. You have to create a custom header first. -- shale

Re: [SAtalk] Is to identify yourself by return email necessary inthe future?

2002-11-22 Thread Tom Allison
Michael Moncur wrote: I wouldn't object to using a TMDA-like system on suspected spam (say, anything scoring 5 to 10). The trouble with that is that SpamAssassin works so well, I've only had about 5 false positives in the last two months, and all of them were automated emails that wouldn't have

Re: [SAtalk] Get rid of some headers?

2002-11-22 Thread Tom Allison
Mike Leone wrote: Steve Thomas ([EMAIL PROTECTED]) had this to say on 11/20/02 at 13:18: | X-Spam-Status is ok with Yes, hits required but how do i get rid | of the tests= part? procmail/formail, or hack the SA code. | I do not want the report at all in the message body how do u get | rid of

Re: [SAtalk] SQL and SA.

2002-11-22 Thread Dark Alchemist
I was able to finally get this to work and thats a major victory over here. Now, I was also able to get the web interface to work but it never updates the sql db and its missing /users/spamfilter/index.php. The documentation on this interface is next to nil so I would love to know what you did to

[SAtalk] Re: Slashdot Article

2002-11-22 Thread Diffenderfer, Randy
> "SpamArchive.org has just been launched. SpamArchive.org is a > community resource that provides a database of known spam to be > used for testing, developing, and benchmarking anti-spam tools. > The goal of this project is to provide a large repository of spam > that can be used by researc

Re: [SAtalk] Re: Slashdot Article

2002-11-22 Thread Tom Allison
Diffenderfer, Randy wrote: "SpamArchive.org has just been launched. SpamArchive.org is a community resource that provides a database of known spam to be used for testing, developing, and benchmarking anti-spam tools. The goal of this project is to provide a large repository of spam that can b

Re: [SAtalk] Bayesian attack

2002-11-22 Thread Justin Mason
Matt Kettler said: > I expected the HTML parser might deal with the comment block attack. Will > it also deal with the "white-on-white text" variant? (you didn't include > both scenarios from my original email, so I'm adding the other back in below) don't think it does now, from what I recall

[SAtalk] SQL and SA.

2002-11-22 Thread Kobe Lenjou
I got it working, and it's fairly easy, just make all the forms in the phpsa.php file point to itself. It will miraculously start to work. The references to the other files are simply wrong (or outdated) whatever. I'm by the way working on that file to make it a bit more useful. Like - As a

RE: [SAtalk] Distribute the load

2002-11-22 Thread SpamTalk
>write SpamAssassin in such a way that these existing tools do the job Hardware solution would be transparent, mo special accommodation. I would think that a cluster would integrate similarly seamlessly, cant say from experience, just from what I have read. You just have to make your choice. The so

RE: [SAtalk] Is to identify yourself by return email necessary in the future?

2002-11-22 Thread Michael Moncur
> And what about "password" Subjects? spamfilter has such a feature. If > the user is wanting to send you something (and you have realy no idea > who he is), he may find your address in the web, and the following > comment: If you are sending your first e-mail to me, please write the > following "p

Re: [SAtalk] Re: Slashdot Article

2002-11-22 Thread Justin Mason
Diffenderfer, Randy said: > Consider this -- if this were a front for a bunch on enterprising spammers, > it might be a wonderful source of __valid__ addresses of all the poor folks > who send in their spam! > > It could happen... :-) It could, but not in this case -- it seems to be IronPort, wh

RE: [SAtalk] Is to identify yourself by return email necessary in the future?

2002-11-22 Thread Michael Moncur
> But can you afford to drop all spam? > The ideal to reach is to /dev/null spam, not just copy it for > sorting through later on... I already effectively 'drop' everything with a score over 20, which accounts for 90% of my spam, over 100 messages a day. In practice, those messages go to a folde

[SAtalk] OT?: al Qaeda spammers

2002-11-22 Thread Steve Thomas
This came in on the NANOG mailing list yesterday. Interesting, although I think it's a bit conspiracy-theory-ish. Scroll to "Final food for thought". -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Barry Shein Sent: Thursday, November 21, 2002 11:38 AM To

[SAtalk] RESEND: Auto-Warranty spam only a 2.9 (and a few questions)??

2002-11-22 Thread Evan Platt
(I'm resending this without the full 'spam' attached - I have a feeling it tripped everyones SA filters, and I didn't recieve the message myself.. ;) I'm extremely surprised but a 'Extend your auto warranty SPAM only scored a 2.9. Two questions: How do I report false negatives using a Windoz box

Re: [SAtalk] Re: Slashdot Article

2002-11-22 Thread Matt Sergeant
Justin Mason said the following on 22/11/02 15:59: Diffenderfer, Randy said: Consider this -- if this were a front for a bunch on enterprising spammers, it might be a wonderful source of __valid__ addresses of all the poor folks who send in their spam! It could happen... :-) It could, but not

[SAtalk] spamd only works in dubug mode

2002-11-22 Thread John McCauley
I installed SA (v 2.43, Linux, i386) but spamc is not playing nice with spamd. I can redirect a message to spamassassin and get a successful parse (with all the usual SA diagnostics inserted. [root@gromit bin]# spamassassin < /tmp/outfile Number of lines: 9 Relative Line Numbers (in percent): 12.

Re: [SAtalk] Re: Slashdot Article

2002-11-22 Thread Tony L. Svanstrom
On Fri, 22 Nov 2002 the voices made Justin Mason write: > Still, it'd be nice to know *what* they plan to do with it, how they plan > to make it available to other antispam filter devvers without giving it > all away to spammers, and if they have any plans for QAing the submitted > spam -- it's ve

[SAtalk] SPAM_PHRASE_00_01

2002-11-22 Thread Jon Gabrielson
I have two questions: 1) How can you see what words are generating the spam phrase hits and how can you disable individual words? 2) shouldn't the below numbers be in order? ie. why does 00_01 score higher that 01_02 and why is 55_XX the second lowest? 50_scores.cf:score SPAM_P

[SAtalk] maildrop file with spam assassin

2002-11-22 Thread Dev
The mailfilter below is setup for a catch all and if .JunkMail dir exists it puts the spam there if it doesn't it goes to the users inbox. qmail+vpopmail+sqwebmail+qmailadmin+maildrop+spamassassin.. Now the question if username has the catch all account. but if we send an email to an account t

[SAtalk] False Negative Corpus

2002-11-22 Thread Mathew Binkley
Hi everyone. I've been putting Spamassassin 2.31-16 through it's paces using the never-ending source of spam that is Hotmail. I have been using Gotmail to fetch my email and pipe it through SA. I have been using the RedHat 8.0 defaults (spamassassin score > 5 = spam). In four weeks I have re

RE: [SAtalk] RE: how to whitelist a mail server by name or IPaddress?

2002-11-22 Thread Michael Weber
I do something a little different. I have a script called whitelist that adds the domain or email to the local.cf file for me. The script is called /usr/local/sbin/whitelist. I created a soft link from there to /usr/local/sbin/blacklist so I can maintain a single file. Here's the script. If

[SAtalk] Only allow so many emails

2002-11-22 Thread Dev
Is there a way to set a limit on how many emails 1 person can send at once? For example i want to set it to 25. I want to send 50 emails I can only send 25 people emails at once. Then i would have to create another email to send another 25 I only want users to be able to send 25 emails at 1 time

Re: [SAtalk] False Negative Corpus

2002-11-22 Thread Vivek Khera
> "MB" == Mathew Binkley <[EMAIL PROTECTED]> writes: MB> Hi everyone. I've been putting Spamassassin 2.31-16 through it's paces MB> using the never-ending source of spam that is Hotmail. I have been [ ... ] MB> I hope it's of use to the SA guys. I think it is about as useful as reporting

Re: [SAtalk] RESEND: Auto-Warranty spam only a 2.9 (and a few questions)??

2002-11-22 Thread Matt Kettler
Eudora mbx files can be converted to unix mbox format for processing with spamassassin -r using eudora2unix.pl. Dump your offending email into it's own mailbox, ftp the .mbx file to a unix system, covert it, and spamassassin -r it. I don't know of any better way, and forwarding it to a "report"

Re: [SAtalk] RESEND: Auto-Warranty spam only a 2.9 (and a few questions)??

2002-11-22 Thread Matt Kettler
Whoops, forgot to include where to get eudora2unix: http://www.xs4all.nl/~maryniak/eudora2unix/ (obtained via searching freshmeat.net. I use this tool to convert my eudora mailboxes for use as a small corpus for rule development.) --- This s

Re: [SAtalk] False Negative Corpus

2002-11-22 Thread Matt Kettler
Agreed, using 2.31 isn't a particularly useful baseline. But the data may be somewhat useful. It's not hard to run a mass check against this with 2.43 and screen out the ones that are still FN. I'll try doing that when I have a chance, and try to post some statistics, and maybe make the result

Re: [SAtalk] False Negative Corpus

2002-11-22 Thread Kenneth Porter
--On Friday, November 22, 2002 4:36 PM -0500 Vivek Khera <[EMAIL PROTECTED]> wrote: > I think it is about as useful as reporting virii missed by several > months old antivirus software... SA has advanced significantly since > 2.31, and spam has evolved since then too. I ran his corpus through my

Re: [SAtalk] SQL and SA.

2002-11-22 Thread Dark Alchemist
Good I got this to work finally and the problem was username varchar(8) NOT NULL inside the file spamassassin.sql. Not many users only have 8 or less chars in their usernames so I set it to 30 and all works fine now (I think). Thanks all. --

[SAtalk] Is this a normal error?

2002-11-22 Thread Dark Alchemist
spamc[2982]: spamd responded with bad string 'Number of lines: 16' The number of lines has went to 8x before and its in my maillog. Does it with passed or spam messages. Thanks. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek

[SAtalk] Web Interface for Spamassassin

2002-11-22 Thread Joseph Hoot
I'm new to spamassassin. Is there a web interface that might be configurable per user? I'm currently running Postfix + amavisd-new + spamassassin + uvscan. I would love to be able to find a web interface so that users can customize their spam settings (changing the scoring) and be able to check

Re: [SAtalk] SPAM_PHRASE_00_01

2002-11-22 Thread Matt Kettler
At 02:00 PM 11/22/2002 -0600, Jon Gabrielson wrote: I have two questions: 1) How can you see what words are generating the spam phrase hits and how can you disable individual words? If you have a particular email you want to check you should be able to get the matches using spamassassin -tD

[SAtalk] I need help.

2002-11-22 Thread Dark Alchemist
Well, I got SA to work somewhat. It reads (or rather acts like it reads) the mysql database and this is in my maillog identified spam (12.0/5.0) for blahblah:510 in 3.2 seconds, 7277 bytes. so far so good but the preference for blahblah is to write ***SPAM*** in the header and it doesn't do that

[SAtalk] spamd -D

2002-11-22 Thread Dark Alchemist
I noticed a few people on the net and 1 in this group and now me that have to use spamd with the -D debug option on or our messages are never parsed. Is there a reason for this as it makes the maillog quite large. I tried everything I could think of over here to no avail. I tried contacting seve

[SAtalk] Bayes classification: how do I know it's working?

2002-11-22 Thread francisv
Hi, I've setup another server to try out version 2.5.0. I already trained it to identify spam but not yet non-spam messages. How do I know it's working? --- francis a. vidal [bitstop network services] | http://www.bitstop.ph streaming media + web hosting | http://www.keystone.ph