Re: [SAtalk] How to whitelist these lists so that Bayes doesn't get confused?

2003-08-09 Thread Theo Van Dinter
On Tue, Aug 05, 2003 at 10:18:06AM -0400, Tim wrote: > whitelist_to [EMAIL PROTECTED] > > This works for me to whitelist anything from sourceforge.net, where I am > on several lists. whitelist is useless wrt bayes, fyi. the only way to have bayes not autolearn as usual is to not put the mail th

[SAtalk] newbie question

2003-08-09 Thread william f guyton jr
Is their a configuration that allows SA to use unique local.cf for each domain passing thru a SA gateway? --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now.

[SAtalk] Spamd related error

2003-08-09 Thread Swapana Ghosh
Hi I have installed the spamassassin 2.41 in my local server. My intention is to upgrade it to 2.55. So after installing the spamassassin then i am running the procmailrc [which i kept under /etc directory ] , i have started *spamd* , the Option at spamd startup script i kept as follows: OP

[SAtalk] Rules guide updated, new text and ToC added.

2003-08-09 Thread Matt Kettler
I think this is going to be the final version for a while. Sorry I put off this last edit, but real life got busy for a while. In any event, the guide now covers meta, uri, and rawbody rules, and has a table of contents. These are really things I wanted to add a long time ago, and I feel they m

RE: Re[2]: [SAtalk] [RD] Rule Philosophy

2003-08-09 Thread Yorkshire Dave
On Wed, 2003-08-06 at 15:14, Chris Santerre wrote: > *big snip to save bandwidth* :-) > > Wow this is a great discussion! Lots of stuff to cover. I guess the whole > local rule submission thing first. It is WAY too big for one person. I like > the idea of 1 person in charge of one type of rule. Li

Re: [SAtalk] Newbie

2003-08-09 Thread Russ
I'd recommend baby steps.  Get linux installed and SA working as you want it.  Then do iptables...there's a zillion places to learn it and many example scripts too.  Then tackle content filtering.  Along with squid you'll need something that does the actual filtering (DansGuardian - licensed,

RE: [SAtalk] FBI fraud reporting site

2003-08-09 Thread Kenneth Porter
--On Friday, August 08, 2003 5:09 PM -0400 Chris Santerre <[EMAIL PROTECTED]> wrote: > This is interesting. It is fraud, not spam. Insofar as frauds are unwanted email, I'd classify them as a subcategory of spam. Hence my post. --- This SF.Net

[SAtalk] [OT] SAPROXY+Consumer reports

2003-08-09 Thread Chris Santerre
I had a dentist appointment today and was reading the mags while waiting. Comsumer reports did a special on SPAM. They listed the best anti-spam software. SAPROXY ranked..wait for it...number one!! How cool is that? Keep up the good work people! There only con for it was that is was upda

Re: [SAtalk] New dns tests to indicate spam?

2003-08-09 Thread Chad Leigh -- Shire.Net LLC
On Tuesday, August 5, 2003, at 01:24 PM, William Stearns wrote: Good day, all, Chris and I - both enthusiatic spamassassin users! - had been talking about some dns characteristics that might be worth considering in future spamassassin versions. 1) If the domain has been recently registered, say

RE: [SAtalk] Re: Creating rule for time accepted

2003-08-09 Thread Chris Santerre
> -Original Message- > From: Ernest W. Lessenger [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 05, 2003 3:36 AM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Re: Creating rule for time accepted > > > At 12:40 AM 8/5/2003 -0500, you wrote: > > my $timeString = sprintf("%02d%02d

RE: [SAtalk] Bayes Spam Filtering

2003-08-09 Thread Giles Coochey
Dave, In my system local.cf file I have: bayes_file_mode 0770 Bayes_path /etc/mail/spamassassin/bayes I have no local users, the server is simply a smart host for all inbound/outbound email, spamd runs as user nobody. You can get more information about these options here: http://www.spamassassi

Re: [SAtalk] Re: Newbie - Why no score for equal From: and To: address?

2003-08-09 Thread Matt Kettler
At 11:14 AM 8/8/2003 -0500, Chris Barnes wrote: Imho, this gets a low score because it is not uncommon for people to use it for non-spam distributions. For example, my wife sends a "family update" to around 20 or so people in her addressbook. Actually in 2.55 there's only one FROM_AND_TO_SAME and

Re: [SAtalk] RD Message body/subject filter help

2003-08-09 Thread Fred I-IS.COM
Title: RE: [SAtalk] RD Message body/subject filter help I did a quick check and came up with this list which does not appear to be in any English words I can find.   cx fv,fz gv,gx jb,jc,jf,jg,jq,jw,jx,jz kq,kx,kz pq,pz qa,qf,qh,qj,qk,qm,qn,qs,qv,qx,qy,qz sx tq vj,vk,vq,vx wq,wv xj,xk,xz yy zf,

Re: [SAtalk] help on makeing my email scanning gatew ay work

2003-08-09 Thread Hannu Liljemark
On Mon, Aug 04, 2003 at 10:04:00PM +0300, brian wrote: > I am trying to setup a mail sever to use spamassasin > form spam scanning and it works just fine. but only > for locally delivered emails and ones originating from > the server. my current setup is this > > sendmail 8.11.6 > procmail as the

RE: [SAtalk] FBI fraud reporting site

2003-08-09 Thread David Cary
Dear Chris Santerre, From: Chris Santerre Subject: RE: [SAtalk] FBI fraud reporting site Date: Fri, 8 Aug 2003 17:09:23 -0400 ... > From: Kenneth Porter ... > > > ... There is a fine line between a spam, a scam, and a fraud. What i

RE: [SAtalk] sa-learn running as cron job

2003-08-09 Thread Gareth
> > I want to set-up a cron job to process these daily using sa-learn. > > > > 'sa-learn --spam --mbox spam -D' produces the following error :-( > > my first suggestion is to use full paths to your mailboxes. > I've just tried /usr/bin/sa-learn --spam --mbox /var/spool/mail/spam ...and it w

Re: [SAtalk] mass-checks: next round starting now

2003-08-09 Thread Justin Mason
Beirne Konarski writes: > When running the mass-check I got the errors listed below. Should I make sure > I get a clean run before submitting the results? > > Beirne > > razor2 check skipped: No route to host IO::Socket::INET: connect: No route to > host ...propagated at > /home/beirne/

RE: [SAtalk] general question

2003-08-09 Thread Giles Coochey
1. Messages marked as SPAM will have the following header (or similar): X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) That should identify the version for you. Note only messages that score will have this header. 2. By default spamassassin makes no changes to the subject

RE: Re[4]: [SAtalk] SA tweaking (was: some spam subject header)

2003-08-09 Thread Chris Santerre
> -Original Message- > From: Robert Menschel [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 07, 2003 11:12 PM > To: Chris Santerre > Cc: [EMAIL PROTECTED] > Subject: Re[4]: [SAtalk] SA tweaking (was: some spam subject header) > > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 >

RE: [SAtalk] Suddenly, spamd runs me out of memory (physical and swap)

2003-08-09 Thread Gary Funck
> -Original Message- > From: Mike Burger > Sent: Thursday, August 07, 2003 2:47 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Suddenly, spamd runs me out of memory (physical and > swap) > > > I've been running spamd/spamc from the SA 2.54 set quite happily > for quite > some time. > > To

Re: [SAtalk] Bayes probs

2003-08-09 Thread Matt Kettler
At 11:20 PM 8/9/03 -0400, Justin F. Knotzke wrote: I am having some issues with getting bayes to work using spamc/spamd. I'll admit I don't know the answer to your question, but you left out some important details: 1) what version of SA do you have? 2) have you upgraded between versions? if

Re: [SAtalk] [RD] Help: String of consonants

2003-08-09 Thread Kai MacTane
At 8/9/03 04:46 PM , Robert Menschel wrote: Proposed rule: body RM_bl_ConsWord8 /\b[bcdfghjklmnpqrstvwxz]{8}\b/ describe RM_bl_ConsWord8 Body contains "word" of 8 consec consonants score RM_bl_ConsWord8 0.01 Problem: SA appears to be matching this rule against emails where I think it s

Re: [SAtalk] [RD] AOL 7 but not from AOL.

2003-08-09 Thread Martin Radford
At Wed Aug 6 17:07:54 2003, Chris Santerre wrote: > > Is this ever possible to be legit? See the received domain of zzn.com and > the user agent at the bottom of AOL 7. Seems to me this is a sure fire spam > tag. > > Message-ID: <[EMAIL PROTECTED]> > ... > User-Agent: AOL 7.0 for Windows US sub

[SAtalk] Message body/subject filter help

2003-08-09 Thread Greg Leaf
I am trying to find a way to identify and tag email that includes obscure items at the end of the subject line or at the bottom of the email. An example is the subject line "marksmen Do you remember me ? cgq bssjoo d". Is there a way to identify this using SA? -

RE: [SAtalk] Updated list of spam

2003-08-09 Thread Frank DeChellis
so other than your local.cf file, we just wait for the spamassassin updates. Ok. Thanks Frank > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Theo > Van Dinter > Sent: Wednesday, August 06, 2003 10:45 AM > To: Frank DeChellis > Cc: [EMAIL PROTECTED] >

[RD] RE: *****SPAM***** [SAtalk] G-a-p-p-y text

2003-08-09 Thread Chris Santerre
> -Original Message- > From: C. Regis Wilson [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 31, 2003 4:37 PM > To: [EMAIL PROTECTED] > Subject: *SPAM* [SAtalk] G-a-p-p-y text > > > I have been writing these rules to combine various version of > words into one > rule. For exa