[SAtalk] spamd dies without trace

2003-06-14 Thread Roger C Haslock
Hi I'm running SA v 2.50 on RH 8. Yesterday, my filter suddenly reported failure to connect to spamd. I looked, and spamd had vanished. I restarted it, and things continued. This happened a couple of months ago, and I could find no trace of why it had happened. This time, I have an extract from t

Re[2]: [SAtalk] Removing headers etc.. to feed Bayes correctly

2003-06-14 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Tom, Friday, June 13, 2003, 9:38:10 AM, you wrote: TM> I'm kind of confused here. The way I see it (which could very well TM> be a misunderstanding, mind you) is that the reason it autolearns TM> spam over 15 points by default is to make darne

Re: [SAtalk] Bayesian filter auto-learn

2003-06-14 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Steven, Friday, June 13, 2003, 7:40:15 AM, you wrote: SM> If I turn on the Bayesian filter and set it to auto learn will this SM> cause problems like false negatives/positives? Basically I would like SM> it to start learning while I collect a c

Re[2]: [SAtalk] Removing headers etc.. to feed Bayes correctly

2003-06-14 Thread Robert Menschel
Hello Tony, Friday, June 13, 2003, 4:45:41 PM, you wrote: TE> To get a reasonable base, it's been my understanding that you teach TE> Bayes what is spam and what isn't. ... Agreed. TE> You don't start contradicting what you've taught it by teaching it TE> low scoring spam until after you've rea

Re: [SAtalk] What needs to be SA-Learned?

2003-06-14 Thread Hannu Liljemark
On Fri, Jun 06, 2003 at 05:43:00PM +0300, Michael Weber wrote: > Do I need only ham that was marked as spam and spam that > was not marked? Not only those, but I guess they are important (both when other tests add to the scoring and bayes could help lower the score, and when bayes-based testing m

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

2003-06-14 Thread Tony Earnshaw
Justin Mason wrote: You'll confuse the whole Bayes database if you do anything different. Why in goodness name put a minimum score of 5 in the first place, if you're going to contradict yourself? Actually, Tom's dead right. If it's spam, feed it to the bayes learner as spam; if it's ham, do t

Re: [SAtalk] a few suggestions

2003-06-14 Thread Tony Earnshaw
Dan Baker wrote: Simon Byrnand wrote: Well, if you think other tests are not being run on base-64 encoded messages, then you may have found a bug, because all the normal tests, including bayes are supposed to run on the decoded text. (AFAIK) People who (normally) are so dense that they refuse to

Re: [SAtalk] whitelist file?

2003-06-14 Thread Tony Earnshaw
Thomas Cameron wrote: In as much as any .cf file in that directory will be read in whenever whatever it is (spamd, amavisd-new etc) starts up. Given read rights, etc. Where is that documented? I am having a hard time finding things like that... I think it's what's known as a "badly kept secre

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

2003-06-14 Thread Tony Earnshaw
Robert Menschel wrote: TE> To get a reasonable base, it's been my understanding that you teach TE> Bayes what is spam and what isn't. ... Agreed. TE> You don't start contradicting what you've taught it by teaching it TE> low scoring spam until after you've reached your minimum bias of 200. How is

[SAtalk] Whitelist using LDAP server

2003-06-14 Thread Colin Dean
Hi, Using SpamAssassin, I want to whitelist every email address in the LDAP directory address book our mail clients (Mozilla and Netscape) use, without having a separate "whitelist_from" hard-wired into the SpamAssassin config file. So I've hacked some changes to SpamAssassin 2.55 so it can query

Re: [SAtalk] a few suggestions

2003-06-14 Thread Dan Baker
Tony Earnshaw wrote: > one thing I noticed is that for messages that are enc-64 , it seems > that other tests are NOT run on the decoded message. I'd suggest > decodeding and then running all the regular tests OR if there is no > plain or html message and its only enc-64, chances are 99% that

Re: [SAtalk] Removing headers etc.. to feed Bayes correctly

2003-06-14 Thread Kai Schaetzl
Tony Earnshaw wrote on Sat, 14 Jun 2003 10:35:50 +0200: > That's exactly what I was saying (perhaps I'd misunderstood Tom.) I was > trying to say that teaching it spam under the level that one has defined > as being spam - even if it is spam - amounts to defeating one's own > purpose. > No, th

[SAtalk] WebUserPrefs 0.4 available

2003-06-14 Thread patrick
WebUserPrefs 0.4 is now available for downlod from http://webuserprefs.pipegrep.net It now supports MySQL-based preferences, as well as some other enhancements. WebUserPrefs is a web-based interface for SpamAssassin user preferences. Patrick ---

Re: [SAtalk] a few suggestions

2003-06-14 Thread Tony Earnshaw
Dan Baker wrote: I downloaded the "latest" from SAproxy the header that comes thru says: X-Spam-Checker-Version: SpamAssassin 2.52-cvs (1.174.2.7-2003-03-20-exp) "SpamAssassin 2.52-cvs". Here I'm absolutely stymied. There was never a 2.52-cvs in my tree. And "2003-03-20" doesn't look like "th

Re: [SAtalk] Whitelist using LDAP server

2003-06-14 Thread Tony Earnshaw
Colin Dean wrote: Using SpamAssassin, I want to whitelist every email address in the LDAP directory address book our mail clients (Mozilla and Netscape) use, without having a separate "whitelist_from" hard-wired into the SpamAssassin config file. So I've hacked some changes to SpamAssassin 2.55 so

Re: [SAtalk] a few suggestions

2003-06-14 Thread Dan Baker
Tony Earnshaw wrote: Dan Baker wrote: I downloaded the "latest" from SAproxy the header that comes thru says: X-Spam-Checker-Version: SpamAssassin 2.52-cvs (1.174.2.7-2003-03-20-exp) "SpamAssassin 2.52-cvs". Here I'm absolutely stymied. There was never a 2.52-cvs in my tree. And "2003-03-20

[SAtalk] Auto-learn vs sa-learn?

2003-06-14 Thread Jim Ford
Hi, If auto-learn is on (default setting), is there any point in putting correctly identified spam and ham through sa-learn? Is the only use for sa-learn to teach SA when spam or ham is incorrectly identified? Regards: Jim Ford -- Spam poison - don't use! ---> [EMAIL PROTECTED] <--- -

[SAtalk] Why keep caughtspam?

2003-06-14 Thread Jim Ford
Hi, I've got procmail putting spam identified by SA into a caughtspam mailbox. Apart from checking it to see if ham has slipped into it, or mabye to notify Razor of spam that hasn't been tagged as Razor'ed, is there any reason why I should keep it for long? Regards: Jim Ford -- Spam poison - do

RE: [SAtalk] Why keep caughtspam?

2003-06-14 Thread Shayne Lebrun
The trick we use here for users who don't want their spam is to pipe it, via a maildrop script, into the Trash folder of their account on our IMAP server. Benefits: 1: They can check it via web mail, or via their client if they're IMAP4 users. 2: It gets autodeleted from the Trash folder after a w

Re: [SAtalk] whitelist file?

2003-06-14 Thread Jim Ford
On Sat, Jun 14, 2003 at 10:07:55AM +0200, Tony Earnshaw wrote: > I think it's what's known as a "badly kept secret." Unless you count the > many and frequent postings on this list, pointing it out. Should be in a > FAQ somewhere (and is, perhaps :), it isn't in 'man spamd', 'man > Mail::SpamAss

Re: [SAtalk] Why keep caughtspam?

2003-06-14 Thread Yorkshire Dave
On Sat, 2003-06-14 at 16:05, Jim Ford wrote: > Hi, > > I've got procmail putting spam identified by SA into a caughtspam mailbox. > Apart from checking it to see if ham has slipped into it, or mabye to notify > Razor of spam that hasn't been tagged as Razor'ed, is there any reason > why I should k

Re: [SAtalk] spamassassin......

2003-06-14 Thread Jim Ford
On Fri, Jun 13, 2003 at 10:44:54PM -0400, Matt Kettler wrote: > This gets discussed at least once every 3 months, usually whenever a spam > message gets posted and someone starts screaming "close the list" despite > it being the only spam posted in the past 2-4 weeks. I like to see the occasion

RE: [SAtalk] Auto-learn vs sa-learn?

2003-06-14 Thread Mathew Hendry
Jim Ford wrote: > If auto-learn is on (default setting), is there any point in putting > correctly identified spam and ham through sa-learn? Is the only use > for sa-learn to teach SA when spam or ham is incorrectly identified? No, auto-learn learns only from mails with particularly high or low s

Re: [SAtalk] Whitelist using LDAP server

2003-06-14 Thread Colin Dean
Tony Earnshaw wrote: I suppose it might be of interest to others if you told the list what users your ldap director[y|ies] contain(s). As well as your policy. Like I don't want mail from my local users (100% Openldap 2.1.19 based) scanned, so both with my Postfix 2.0.x and SA-Exim 4.20/3.0 MTAs

Re: [SAtalk] Why keep caughtspam?

2003-06-14 Thread Jim Ford
On Sat, Jun 14, 2003 at 04:47:21PM +0100, Yorkshire Dave wrote: > Don't just throw it away, dump it in news.admin.net-abuse.sightings, It > might be useful to someone. Thanks - looks like a good idea. I use slrn as a newsreader - offhand, any idea how I could dump a whole mailbox into news.admin.

Re: [SAtalk] Auto-learn vs sa-learn?

2003-06-14 Thread Jim Ford
On Sat, Jun 14, 2003 at 04:38:58PM +0100, Mathew Hendry wrote: > Jim Ford wrote: > > > If auto-learn is on (default setting), is there any point in putting > > correctly identified spam and ham through sa-learn? Is the only use > > for sa-learn to teach SA when spam or ham is incorrectly identifie

[SAtalk] A Handful of (Possibly) Stupid Questions Regarding SA's SQL Prefs

2003-06-14 Thread Benjamin A. Shelton
Hey Folks, I have a few questions regarding SpamAssassin's SQL preference support... First of all, is there any particular reason why "only local scores, whitelist_from(s), required_hits, and auto_report_threshold" are recognized options that may be stored in a database for later retrieval (altho

Re: [SAtalk] a few suggestions

2003-06-14 Thread Thomas Cameron
On Sat, 2003-06-14 at 09:18, Dan Baker wrote: > > I changed the BASE64_ENC_TEXT score to 3.9 in my rules file, and as you > can see, that was the only test that triggered. Would you mind terribly showing me how you did that? Is it in local.cf? Can you show me what you wrote in which config fi

RE: [SAtalk] a few suggestions

2003-06-14 Thread Shayne Lebrun
In local.cf: score BASE64_ENC_TEXT 3.9 If you do it to the actual rule, your changes will be lost, should you choose to upgrade. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Thomas Cameron > Sent: Saturday, June 14, 2003 4:06 PM > To: [EMAIL PRO

Re: [SAtalk] a few suggestions

2003-06-14 Thread Kai Schaetzl
Thomas Cameron wrote on 14 Jun 2003 15:06:23 -0500: > Would you mind terribly showing me how you did that? Is it in > local.cf? Can you show me what you wrote in which config file to change > the score of a stock rule? > simply put score rule_set_name 5.0 in the local.cf to change that rule

[SAtalk] SpamAssassin anonymous CVS out of date

2003-06-14 Thread Daniel Quinlan
FYI - the anonymous SpamAssassin CVS tree at sourceforge.net is almost two days hours old (versus the developer tree) due to worsening CVS problems at SourceForge. http://sourceforge.net/docman/display_doc.php?docid=2352&group_id=1#cvs We plan on migrating CVS to a better server. In addition,

Re: [SAtalk] Why keep caughtspam?

2003-06-14 Thread Daniel Quinlan
Jim Ford <[EMAIL PROTECTED]> writes: > I've got procmail putting spam identified by SA into a caughtspam > mailbox. Apart from checking it to see if ham has slipped into it, or > mabye to notify Razor of spam that hasn't been tagged as Razor'ed, is > there any reason why I should keep it for long

[SAtalk] Re: [SAdev] SpamAssassin anonymous CVS out of date

2003-06-14 Thread Daniel Quinlan
Daniel Quinlan <[EMAIL PROTECTED]> writes: > FYI - the anonymous SpamAssassin CVS tree at sourceforge.net is almost > two days hours old (versus the developer tree) due to worsening CVS > problems at SourceForge. Oops, that should have read "two days old" or "40 hours old". :-) Daniel -- Dan

Re: [SAtalk] SpamAssassin anonymous CVS out of date

2003-06-14 Thread Thomas Cameron
On Sat, 2003-06-14 at 17:34, Daniel Quinlan wrote: > > P.S. If you have any projects on SourceForge, it seems like it's time to > get the hell out of Dodge. I've seen comments like that on a couple of lists - what is going on with SourceForge? Is it a temporary problem, or are they folding? TC

RE: [SAtalk] a few suggestions

2003-06-14 Thread Thomas Cameron
Thanks for clarifying for me! TC On Sat, 2003-06-14 at 15:15, Shayne Lebrun wrote: > In local.cf: > > score BASE64_ENC_TEXT 3.9 > > > If you do it to the actual rule, your changes will be lost, should you > choose to upgrade. --- This SF.

[SAtalk] SpamAssassin score counters and possible firewall rules...

2003-06-14 Thread Forrest Aldrich
Curious if anyone has tried this. It's probably wide open to a DoS... Adding a routine to the Spam collecting process -- either through milter, SpamAssassin itself, or Mailscanner, such that a counter is maintained for each Class C address, incremented for each message that SA detects coming t

Re: [SAtalk] Whitelist using LDAP server

2003-06-14 Thread John Lederer
I am extremely interested. We use Rolodap, an LDAP contacts directory . Automatically whielisting email from anyone in tht would let us lower the threshold for spam generally. If you can post your code somewhere where I could link to it, I would make sure that Rolodap users generally knew of

[SAtalk] Re: adding a special "whitelist" via a local rule

2003-06-14 Thread Fuzzy Fox
[EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > My site has a structure where I know that all mails to/from the > Internet go via a specific set of relays, whereas all internal mails > go via a set of internal-only mail relays that are unreachable from > the Internet. I implemented something simi

[SAtalk] Pine Not Able to Read Mailboxes Correctly

2003-06-14 Thread Brad Marcoux
I've got spamassassin running (gave up on the local install and convinced my sysadmin to install globally), and it seems to be filtering really well. The only problem is that the mailboxes it's dumping mail into are unreadable by pine - specifically, the mailbox shows up as one HUGE message rather