Re: [SAtalk] Why is auto-learn set to no?

2003-09-23 Thread Patrick Morris
Robert Nicholson wrote: > RE: > > X-Spam-Status: > Yes, hits=10.7 required=0.6 tests=DATE_IN_PAST_03_06, > DATE_SPAMWARE_Y2K,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,HTML_60_70, > HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_GREEN,HTML_FONTCOLOR_RED, > HTML_MESSAGE,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_

Re: [SAtalk] Spamd domain sockets implementation

2003-09-23 Thread Jim
On Mon, Sep 22, 2003 at 11:45:35PM -0500, Mike Loiterman wrote: > How do I implement this? spamd --socketpath=/path/to/socket/file spamc -U /path/to/socket/file --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thi

Re: [SAtalk] Monitoring which Rules are being used...

2003-09-23 Thread Ryan Moore
As far as I know, Amavisd-new doesn't support the inclusion of individual test's scores. I wish it did, since I use it (amavisd-new) as well, but it works *very* well otherwise. However the syslog file (for the mail facility) will have all the tests that every email amavisd see's, so you could

Re: [SAtalk] SpamAssassin 2.60 released!!

2003-09-23 Thread Chris Paul
My mistake I think. I diff'd the amavisd chroot ruleset (/var/amavisd/usr/share/spamassassin) from the authoritative /usr/local/share/spamassasin and saw they were different. I solved this by refreshing the ruleset in the amavisd chroot from the set in /usr/local/share/spamaassassin. I was at fir

Re: [SAtalk] Spamd domain sockets implementation

2003-09-23 Thread Bob Apthorpe
Hi, On Mon, 22 Sep 2003 23:45:35 -0500 "Mike Loiterman" <[EMAIL PROTECTED]> wrote: > Just reading the release notes for 2.60 and noticed this: > > - spamd now supports UNIX-domain sockets for low-overhead scanning, > thanks > to Steve Friedl for this. This is strongly recommended if you'r

[SAtalk] Problem with razor2 check: No such file or directory Insecure dependency

2003-09-23 Thread Wolfgang . Fuertbauer
Hello all, what's going wrong please? spamd[11860]: razor2 check skipped: No such file or directory Insecure dependency in open whi le running with -T switch at /usr/lib/perl5/site_perl/5.8.0/i586-linux-thread-multi/Razor2/Client/Config.pm line 414, line 1. saxophon:/tmp/razor-agents-2.36 #

Re: [SAtalk] SpamAssassin 2.60 release

2003-09-23 Thread Daniel Quinlan
Michael Bell <[EMAIL PROTECTED]> writes: > Is there any difference in code between the final and the RC6 release? Yes. bug 2489: check_num_received checks one less than it should bug 2491: 1) the learn_to_journal option was only good for autolearning and using sa-learn, but "spa

Re: [SAtalk] SpamAssassin 2.60 released!!

2003-09-23 Thread landy
when will it be in cpan --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.ne

Re: [SAtalk] SpamAssassin filters seem too weak out of the box...

2003-09-23 Thread Daniel Quinlan
"Mike Klein" <[EMAIL PROTECTED]> writes: > In response to my complaint of weak rules out of box: > > I have rtfm (INSTALL, USAGE, website). It states (step #7 in INSTALL file): > [...] Just use the GTUBE string for testing that SpamAssassin can correctly mark a message as spam. The GTUBE string

Re[4]: [SAtalk] SpamAssassin filters seem too weak out of the box...

2003-09-23 Thread Abigail Marshall
Hello Mike,. MK> For myself...I will make it so a single line of "PEN?S MK> ENLARGEMENT" is enough to trigger as spam. The value of SA is that it can be customized for individual user needs, and that it is easy to change scoring, as well as to write your own rules. I also have some words and phr

Re: [SAtalk] Logfile of spamrecognized mails

2003-09-23 Thread Jens Strohschnitter
>> From: Jens Strohschnitter [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, September 10, 2003 7:01 AM >> To: SpamAssassin >> Subject: [SAtalk] Logfile of Spam-detected mails >> >> >> Hi there, >> >> is it possible to write a logfile that only contains >> entries that showes spam-detected mails l

[SAtalk] Bayes after upgrade from 2.5x to 2.60

2003-09-23 Thread Darren Coleman
Hi, I've just upgraded my version of SpamAssassin (2.54) to the latest version 2.60. Having feintly recalled some discussion on the list or elsewhere about having to rebuild the Bayes database after this upgrade I decided to make a backup of my existing Bayes files. Upon restarting SpamAssassi

[SAtalk] HTML code skipped?

2003-09-23 Thread Frank DeChellis DSL
Hello everybody, Once again I have an email that scores 17.8 points when weighingthe email using spamassassin -tD but when it's actually delivered is scores 3.8 points. Coincidentally the 14 point difference are my rules and the text inquestion is inside html code. So my questions are : 1. How

[SAtalk] Are Bayes scores correct?

2003-09-23 Thread Federico Giannici
I'm using SA 2.60 RC6. I have noticed that Bayesian scores are not monotonically increasing. For example, score for BAYES_90 is LESS then the score for BAYES_70 (when network is used)! Is this correct? Is there some reason behind it? Thanks. -- ___

Re: [SAtalk] Problem with razor2 check: No such file or directory Insecure dependency

2003-09-23 Thread Daniel Quinlan
[EMAIL PROTECTED] writes: > what's going wrong please? > > spamd[11860]: razor2 check skipped: No such file or directory Insecure > dependency in open whi > le running with -T switch at > /usr/lib/perl5/site_perl/5.8.0/i586-linux-thread-multi/Razor2/Client/Config.pm > line 414, > line 1. My b

Re: [SAtalk] SpamAssassin 2.60 released!!

2003-09-23 Thread landy
back in bus. when 2.6 my perl instalation had broken so i had to reinstall perl --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk

[SAtalk] sa-learn

2003-09-23 Thread landy
i have 18 email in this folder why would i get these results? [EMAIL PROTECTED]:~> sa-learn --spam --dir evolution/local/Inbox/subfolders/spam/ Learned from 2 message(s) (6 message(s) examined). --- This sf.net email is sponsored by:ThinkGeek

[SAtalk] local.cf not being read..... Please help

2003-09-23 Thread CHRISTOP TATRO
Using redhat 9.0 amavisd-new-20030616 Postfix version 1.1.12 spamassassin 2.55 I am having a strang problem with what appears to be that my locall.cf file is not being read. When i set a user to recive all incoming mail with the all_spam_to setting and restart amavisd the user will recive all spa

RE: [SAtalk] required_hits 10 email scores a 7 and is blocked

2003-09-23 Thread Tom Meunier
SpamAssassin doesn't block mail. All it does is mark it up for content. That mail seems to have been marked up for spam content correctly. Therefore, your problem is not with SpamAssassin but rather with the product that you've configured to quarantine mail. > -Original Message- > From:

[SAtalk] required_hits 10 email scores a 7 and is blocked

2003-09-23 Thread CHRISTOP TATRO
I have required_hits set to 10 in my /etc/mail/spamassassin/local.cf and the message is only scoring a 7 and is still being blocked and sent to my spam-quarantine mailbox. What is up with that? This is a copy of the email sent to my $spam_admin = '[EMAIL PROTECTED]' Unsolicited bulk email fro

RE: [SAtalk] Spam not

2003-09-23 Thread Martin, Jeffrey
Even if it were whitelisted, there should still be the SA header tags indicating scores, etc. It doesn't *look* like it could be over the max message size. I've seen this myself quite a few times, where a message gets to a user without being processed by SA, although it does pass through the SA sys

Re: [SAtalk] required_hits 10 email scores a 7 and is blocked

2003-09-23 Thread Robert Nicholson
What was always_add_report set to? I noticed in 2.55 even if the report was included in HAM the wording still suggested the message was spam. What was X-Spam-Status set to for this message that you claim was interpreted as spam? On Tuesday, September 23, 2003, at 06:58 PM, CHRISTOP TATRO wrot

[SAtalk] Catching stripped viruses

2003-09-23 Thread Philip Mak
I broke down and installed ClamAV, after being deluged by hundreds of Microsoft virus e-mails per day that SpamAssassin didn't catch. It works great, catching all those viruses and keeping them out of my inbox. (I'm not particularly worried about viruses themselves since I read my e-mail using mutt

[SAtalk] 2.60 upgrade: razor2 check skipped

2003-09-23 Thread Ben Goodwin
I've searched and found similar issues but nothing that helps me out. I'm getting this since upgrading from 2.55 to 2.60: Sep 23 07:06:20 rs spamd[1936]: razor2 check skipped: Bad file descriptor Insecure dependency in connect while running with -T switch at /usr/lib/perl5/5.6.1/i386-linux/IO/Soc

[SAtalk] Cannot Change scores in SA Proxy -- HELP

2003-09-23 Thread Jay R. Yablon
Whenever I try to change the scores in the rules of configuration file, with, e.g., score DIET 7.0 score WEALTH 8.0etc., SAProxy stops checking for that rule, i.e., it has the effect of setting it to zero.Using SAProxy v 1.2.1I am a newbie.  I know SA is now up to v. 2.6.  What is the differ

[SAtalk] required_hits < or =?

2003-09-23 Thread Robert Nicholson
Forgive me but do the # of hits actually have to be more than required_hits? I was under the impression that if I set required_hits to 6 then whenever hits was greater than or equal to required_hits then that mail would be considered spam. From: "Mei Kwan NG" <[EMAIL PROTECTED]> Date: Tue Sep

[SAtalk] reporting tools

2003-09-23 Thread Jon Fraley
I was wondering if there are any reporting tools out there for generating reports for spamassassin. I am using Spamassassin 2.55 with sendmail and spamass-milter. -- Jon Fraley Unix Systems Administrator Glen Raven, Inc (336) 586-1148 --- Th

RE: [SAtalk] 2.60 upgrade: razor2 check skipped

2003-09-23 Thread Darren Coleman
This was answered earlier on today by Daniel Quinlan. The long and short of it is, RTFM. :) (Read the README file, in particular the reference to Razor2.patch) Daz > -Original Message- > From: Ben Goodwin [mailto:[EMAIL PROTECTED] > Sent: 23 September 2003 13:16 > To: [EMAIL PROTECTED

[SAtalk] 2.55 and FAILURE NOTICE's

2003-09-23 Thread Robert Nicholson
Hi, have any improvements been made to sort out spammers who are forging failure notices? From: Mail Delivery Subsystem <[EMAIL PROTECTED]> Date: Mon Sep 22, 2003 3:05:39 PM Asia/Bangkok To: <[EMAIL PROTECTED]> Subject: Returned mail: User unknown Return-Path: <> Delivered-To: [EMAIL PROTECTED]

[SAtalk] Header/body tests docs

2003-09-23 Thread Samuli Kärkkäinen
The manual (http://au2.spamassassin.org/doc/Mail_SpamAssassin_Conf.html) doesn't make it clear if user defined tests "header", "rawbody" etc. match one line at a time or the entire message at once. Experimentation reveals it's done one line at a time. The manual would do well to tell this. I would

RE: [SAtalk] Re: Spamassassin and qmail?

2003-09-23 Thread Daniel
> There are 4 great open source MTAs out there : Postfix, Exim, sendmail and > qmail. > > 3 support spam and AV scanning with no patching. > > Save yourself the pain. What about not messing with qmail-queue or qmail-scanner at all. Just use a .qmail file in the user's dir. $ cat .qmail | /usr

RE: [SAtalk] Newbie: Adding Rules To SpamAssassin

2003-09-23 Thread John Parken
Robert: Thanks for the help. > Something like > > body RM_b_V-drug/V[Ii1\|[EMAIL PROTECTED]/i > but for the subject, right? Yes, this is along the lines of what I wanted since, at least my version of SA, has only a rudimentary test in the body, which does not of ourse address the Subject li

[SAtalk] autolearn=ham

2003-09-23 Thread Landy
i notied autolearn=ham does that mean if a spam passes as ham it will learn it has ham, how can i disable this autolearn feature and what does it really mean, i did not find anything in the doc --- This sf.net email is sponsored by:ThinkGee

[SAtalk] What gets auto learnt?

2003-09-23 Thread Robert Nicholson
So, just exactly where is the documentation that defines the criteria for what gets auto learnt? --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Sp

[SAtalk] spamassassin v 2.53 + amavisd-new

2003-09-23 Thread Mrvka Andreas
hi! i am new to this list so i hope my question is not too simple for you. i use SuSE OpenExchange 4 with amavisd-new + spamassassin 2.53. configured in /etc/amavisd.conf log_level = 5 (debug) that i get lots of text in /var/log/mail. OK. in the log it says: Sep 23 14:55:09 mail amavis[8823]: (0

RE: [SAtalk] Better logging?

2003-09-23 Thread Markus Gaugusch
On Sep 22, landy <[EMAIL PROTECTED]> wrote: > On Mon, 2003-09-22 at 07:56, Markus Gaugusch wrote: > > On Sep 22, Tom Meunier <[EMAIL PROTECTED]> wrote: > > > > > Spamstats does that. > > Thanks! That's EXACTLY what I wanted :) > > for this to work do you need spamd? > > i use procmail/postfix > an

Re: [SAtalk] All these Microsoft patch spams

2003-09-23 Thread Russ
I use both ClamAV and f-prot on our corporate servers. Both are free and both trap this virus. I frontend SA with MailScanner as it has a lot of functionality (calls virus scanners, blocks on file extension type, etc.) and it works great. It calls SA via it's API so you get all the advantages of

[SAtalk] user_prefs or SQL prefs under Win32 SpamAssassin?

2003-09-23 Thread Todd Routhier - Lightwave Tech.
I read the howto on setting up Spam Assassin on Win32.   I have Spam Assassin up and running as well as integrated into my mail server under Windows. It works great!   I am searching for a way to set preferences on a user by user basis under Windows. Could not find anything anywhere on

[SAtalk] WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Garret Brady
I'm using spamassassin 2.55 direct from procmail on a PII450 running .rh8.0. I notice that mails with dos executables get through, even though I've the line score MICROSOFT_EXECUTABLE 5.0 in my ~/.spamassassin/user_prefs file. Other rules in the file work fine. Any ideas? Garret. -- Garret D

[SAtalk] required_hits 10 email scores a 7 and is blocked

2003-09-23 Thread k0rnshell
i have required_hits set to 10 in my /etc/mail/spamassassin/local.cf and the message is only scoring a 7 and is still being blocked and sent to my spam quarantine. What is up with that? Unsolicited bulk email from: [EMAIL PROTECTED] Subject: Fw: test According to the 'Received:' trace, th

Re: [SAtalk] WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Bart Schaefer
On Tue, 23 Sep 2003, Malte S. Stretz wrote: > But it seems like some of those .EXEs have different "magic" bytes. This > works for me: > /^TV[qp]QAA[MI]EAA[A8]A/ > > You can change this in EvalTests.pm, line 2413. For a lot of people it'd probably be easier to edit local.cf to insert: ra

Re: [SAtalk] Are Bayes scores correct?

2003-09-23 Thread Bob Apthorpe
On Tue, 23 Sep 2003 11:41:46 +0200 Federico Giannici <[EMAIL PROTECTED]> wrote: > I'm using SA 2.60 RC6. > I have noticed that Bayesian scores are not monotonically increasing. > For example, score for BAYES_90 is LESS then the score for BAYES_70 > (when network is used)! > > Is this correct? Ye

[SAtalk] Re: WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Malte S. Stretz
On Tuesday 23 September 2003 13:21 CET Garret Brady wrote: > I'm using spamassassin 2.55 direct from procmail on a PII450 > running .rh8.0. I notice that mails with dos executables > get through, even though I've the line > > score MICROSOFT_EXECUTABLE 5.0 > > in my ~/.spamassassin/user_prefs file

Re: [SAtalk] Newbie: Adding Rules To SpamAssassin

2003-09-23 Thread Landy
well for me the rule of MICROSOFT_EXECUTABLE 5 was working fine in 2.55 now in 2.60 it does not work and the email gets tag with 2.5 when my settings in user_prefs says it should be over 5 it appears 2.6 is ignoring my .spamassassin/user_prefs On Mon, Sep 22, 2003 at 03:48:55PM -0400, Joh

Re: [SAtalk] What gets auto learnt?

2003-09-23 Thread Matt Kettler
At 08:29 PM 9/23/03 +0700, Robert Nicholson wrote: So, just exactly where is the documentation that defines the criteria for what gets auto learnt? In short, the email is autolearned based on computing it's score as if bayes were disabled, and then comparing that score to a threshold you set. Th

Re: [SAtalk] WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Bart Schaefer
On Tue, 23 Sep 2003, Landy wrote: > ihave same problem and it was fine in 2.55 > > problem began with 2.6 I think that's just coincidence. The tests are exactly the same in both. --- This sf.net email is sponsored by:ThinkGeek Welcome to ge

Re: [SAtalk] WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Landy
On Tue, Sep 23, 2003 at 12:21:40PM +0100, Garret Brady wrote: > I'm using spamassassin 2.55 direct from procmail on a PII450 > running .rh8.0. I notice that mails with dos executables > get through, even though I've the line > > score MICROSOFT_EXECUTABLE 5.0 ihave same problem and it was fine in

Re: [SAtalk] Better logging?

2003-09-23 Thread Jim Knuth
Hallo Markus Gaugusch, am Dienstag, 23. September 2003, 09:00:19, schriebst Du: > You need to pass the logfile name of your mail-daemon, e.g. > ./spamstats0.4b5.pl /var/log/mail > I use spamd, and it works. > Markus you have an link for this script? Thank you. -- Viele Grüße, Best regards, Ji

Re: [SAtalk] spamassassin v 2.53 + amavisd-new

2003-09-23 Thread Vivek Khera
> "MA" == Mrvka Andreas <[EMAIL PROTECTED]> writes: MA> so i see that spamassassin is working, BUT where do i configure MA> spamassassin? MA> (company-wide) You can do it in the site-wide spam assassin local.cf file, or since amavisd runs as a particular user, do it in that user's personal co

[SAtalk] sa-learn --dump

2003-09-23 Thread Daniel Bird
Dear all, When running sa-learn --dump from SA2.60 (on RedHat9) I get the following output: Use of uninitialized value in numeric lt (<) at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm line 1281. 0.000 0 0 0 non-token data: bayes db version 0.000

[SAtalk] Yet another virus defense rule (vbl.messagelabs.com)

2003-09-23 Thread Bob Apthorpe
Hi, I'm currently testing the following: # Add checks of MessageLabs Virus Blacklist header RCVD_IN_VBL eval:check_rbl('vbl', 'vbl.messagelabs.com.') describe RCVD_IN_VBLVBL: sender is listed in VBL - see http://vbl.messagelabs.com tflags RCVD_IN_VBL net sco

Re: [SAtalk] Header/body tests docs

2003-09-23 Thread Fred
I think this would be fullTEST_NAME/regex/ Samuli Kärkkäinen wrote: > The manual > (http://au2.spamassassin.org/doc/Mail_SpamAssassin_Conf.html) doesn't > make it clear if user defined tests "header", "rawbody" etc. match > one line at a time or the entire message at once. Experimentat

Re: [SAtalk] user_prefs or SQL prefs under Win32 SpamAssassin?

2003-09-23 Thread Fred
You'll need to do this in your SMTP server (if possible). If it allows, you would need to modify how your SMTP server calls SA, for each user you would specify the path to their user prefs file.   -p prefs, --prefspath=file, --prefs-file=file    Set user preferences file   You would al

Re: [SAtalk] Re: WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Landy
On Tue, Sep 23, 2003 at 03:42:56PM +0200, Malte S. Stretz wrote: > On Tuesday 23 September 2003 13:21 CET Garret Brady wrote: > > I'm using spamassassin 2.55 direct from procmail on a PII450 > > running .rh8.0. I notice that mails with dos executables > > get through, even though I've the line > >

Re: [SAtalk] sa-learn --dump

2003-09-23 Thread Theo Van Dinter
On Tue, Sep 23, 2003 at 03:54:51PM +0100, Daniel Bird wrote: > Also, as you can see above, It's showing no tokens learned even though I > have run "sa-learn --import" from my previous install of SA2.55 ( I > guess this may be in error because of the error message above ?) > > Any guidance would

Re: [SAtalk] What gets auto learnt?

2003-09-23 Thread Jim Knuth
Hallo Matt Kettler, am Dienstag, 23. September 2003, 16:38:51, schriebst Du: > At 08:29 PM 9/23/03 +0700, Robert Nicholson wrote: >>So, just exactly where is the documentation that defines the criteria for >>what gets auto learnt? > bayes_auto_learn_threshold_nonspam n.nn (default: 0.1) > Th

Re: [SAtalk] Cannot Change scores in SA Proxy -- HELP

2003-09-23 Thread Brian Morrison
On Tue, 23 Sep 2003 08:47:15 -0400, Jay R. Yablon wrote: >I am a newbie. I know SA is now up to v. 2.6. What is the difference between SA and >SAProxy? SAProxy uses SA as its basis. AFAICR, SAProxy 1.2.0 contains the equivalent of SA 2.55, so I expect 1.2.1 is a slight bug fix. SAProxy does n

[SAtalk] problems with 2.60

2003-09-23 Thread Steve Heggood
Just Upgraded to 2.6 I using spamd/spamc and have these 3 errors in my log: (I edited out my site info) cannot write to /var/spamassassin/bayes_journal, Bayes db update ignored debug: open of AWL file failed: lock: 24174 cannot create tmp lockfile /root/.spamassassin/auto-whitelist.lock.[MY

[SAtalk] Re: WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Malte S. Stretz
On Tuesday 23 September 2003 16:44 CET Landy wrote: > On Tue, Sep 23, 2003 at 03:42:56PM +0200, Malte S. Stretz wrote: > > Jepp, the rule is slightly broken, especially for those "use this patch > > now" worms. It currently uses this RegExp: > > /^TVqQAAME/ > > But it seems like some of t

RE: [SAtalk] problems with 2.60

2003-09-23 Thread Tom Meunier
Go check your filesystem rights on those file & directories. That's happened to me before, and I was waiting for it to happen this time too, and mysteriously, it didn't. My gateway boxen must be contagious. :) -tom > -Original Message- > From: Steve Heggood [mailto:[EMAIL PROTECTED] >

Re: [SAtalk] Logfile of spamrecognized mails

2003-09-23 Thread Jens Strohschnitter
Hi, thats all I need, but how is it possible that the SPAM-Mails will not be quarantined. Only it should be written a logentry and the mail should be delivered to the recipient, marked as spam (*SPAM*). is this possible, too ? Thanxx for your reply > > > Yes. In your exim config, mak

[SAtalk] 2.60, Razor and SQL Prefs

2003-09-23 Thread Ben Story
Hi all,   My current setup is that all of my company's mail goes through a smtp gateway with SA 2.60, Exim 4.20, Razor 2.36 and Perl 5.8.  Since upgrading to SA 2.60 I have gotten the following error in my logs:   spamd[32311]: razor2 check skipped: Illegal seek Insecure dependency in conne

RE: Re[2]: [SAtalk] Newbie: Adding Rules To SpamAssassin

2003-09-23 Thread John Parken
> Head for http://www.exit0.us and > http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm -- you'll > find plenty of rules there that will give you a good start at building > your own rule base, including my own V-drug body test which can be easily > converted into a subject header test

Re: [SAtalk] sa-learn --dump

2003-09-23 Thread Daniel Bird
Theo Van Dinter wrote: On Tue, Sep 23, 2003 at 03:54:51PM +0100, Daniel Bird wrote: Also, as you can see above, It's showing no tokens learned even though I have run "sa-learn --import" from my previous install of SA2.55 ( I guess this may be in error because of the error messa

RE: Re[2]: [SAtalk] Newbie: Adding Rules To SpamAssassin

2003-09-23 Thread John Parken
When I run - spamassassin -d --lint on my newly created local.cf file, I get "Command not Found" as the only reply. Does that mean there is a problem or that the test proceeded to the end of the file? /s/ John --- This sf.net email is spo

[SAtalk] Can SpamAssassin do a weighted scoring count?

2003-09-23 Thread W. James Showalter, Jr.
Hello, I have checked various pods and archives as well as the distributed filters but can't determine if this is possible. I am running SpamAssassin on Unix Solaris 9. I have been using procmail and perl for years and until I installed SA I had rudimentary spam detection with procmail's weighte

[SAtalk] how do I get Spamassassin to ignore specific domains?

2003-09-23 Thread Russell Premont
Can I set Spamassassin to not scan mail from specific domains? If I can how do I set it to do so. I tried adding the domains to the whitelist in local.cf in the form of whitelist_from [EMAIL PROTECTED] [EMAIL PROTECTED] etc. This does not seem to work. I am running Spamassassin on Solaris 9 Sparc

Re: [SAtalk] Yet another virus defense rule (vbl.messagelabs.com)

2003-09-23 Thread Julian Field
Just a little word of warning From their web page: "MessageLabs does not recommend that people use this list for blocking email as it is highly likely to list ISP smarthosts due to viruses that route in that way." So don't use it as an RBL in, for example, a sendmail.cf. But I would very muc

Re: [SAtalk] razor

2003-09-23 Thread Brian Morrison
On Tue, 23 Sep 2003 07:55:37 +0200 in [EMAIL PROTECTED] Antoine Jacoutot <[EMAIL PROTECTED]> wrote: > OK, here is my complete log; it does show lines about razor, but > there's nothing in my razor logs (/root/.razor/razor-agent.log): > I've noticed that my .razor/razor-agent.log was last writt

Re: [SAtalk] razor

2003-09-23 Thread Brian Morrison
On Tue, 23 Sep 2003 09:30:39 +0100, Brian Morrison wrote: >On Tue, 23 Sep 2003 07:55:37 +0200 in >[EMAIL PROTECTED] Antoine Jacoutot ><[EMAIL PROTECTED]> wrote: > >> OK, here is my complete log; it does show lines about razor, but >> there's nothing in my razor logs (/root/.razor/razor-agent.log):

Re: [SAtalk] Catching stripped viruses

2003-09-23 Thread Chr. von Stuckrad
On Tue, Sep 23, 2003 at 07:16:47AM -0500, Philip Mak wrote: ... > Unfortunately, sometimes one of these virus e-mails passes through a > virus-stripping SMTP that removes the virused attachment, leaving the > rest of the (junk) message. These messages end up passing through the > ClamAV filter sinc

Re: [SAtalk] Spamd domain sockets implementation

2003-09-23 Thread Kenneth Porter
--On Tuesday, September 23, 2003 6:48 AM + Jim <[EMAIL PROTECTED]> wrote: > spamd --socketpath=/path/to/socket/file > > spamc -U /path/to/socket/file If this is the recommended configuration, then I would suggest that 2.61 change the spec file to make use of this in RPM-based installations.

RE: [SAtalk] All these Microsoft patch spams

2003-09-23 Thread Kenneth Porter
--On Monday, September 22, 2003 10:15 PM -0400 Larry Gilson <[EMAIL PROTECTED]> wrote: > This is interesting. In 99% of my messages, the subject is capitalized but > the From/To are not. I see the same, but my distribution ratio would be the reverse of that. Maybe we have two variants of the wor

[SAtalk] 2.6.0 on CPAN -- when will it get there?

2003-09-23 Thread Mark R. Cervarich
Hi, Just curious when 2.6.0 version will end up in CPAN. I just checked and when i did a "i /spamassassin", here's my partial results: DistributionJ/JM/JMASON/Mail-SpamAssassin-2.01.tar.gz DistributionJ/JM/JMASON/Mail-SpamAssassin-2.44.tar.gz DistributionJ/JM/JMASON/Mail-SpamAssassi

[SAtalk] 2.60 and Dynamic IP Checks

2003-09-23 Thread David L. Crow
First, thanks so much for Spamassassin. It works so well! I received an email with the following Received headers: Received: from ms-smtp-02.texas.rr.com (ms-smtp-02.texas.rr.com [24.93.36.230]) by waterloo.OrangeBlood.org (8.12.8/8.12.8) with ESMTP id h8NDa2UW031261 for <[EMAIL

Re: [SAtalk] SpamAssassin 2.60 released!!

2003-09-23 Thread Kenneth Porter
--On Monday, September 22, 2003 10:33 PM -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: > http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.tar.gz > http://SpamAssassin.org/released/Mail-SpamAssassin-2.60.tar.bz2 Not sure what you might do to fix this, but "rpmbuild -ta" with the bz2

[SAtalk] God, I HATE CPAN!

2003-09-23 Thread up
Trying to install SA 2.60, everyting builds and installs fine, but when I try to start spamd, in complains about bytes.pm not being installed. it is, but under the perl 5.8 libs. The reason for this is that a long time ago, I thought I'd join the CPAN bandwagon and install SA with it. To my hor

[SAtalk] logging

2003-09-23 Thread Zionsville Autosport
hello i've looked around on the docs and through the files themselves and connot find the directive that tells spamd where to log its information. it's currently logging in my /var/log/maillog file which i assume is by default. i'd like to change it to combine with my exim setup using the /var/lo

Re: [SAtalk] God, I HATE CPAN!

2003-09-23 Thread Bart Schaefer
On Tue, 23 Sep 2003 [EMAIL PROTECTED] wrote: > I thought I'd join the CPAN bandwagon and install SA with it. To my > horror, it installed perl 5.8 (I use 5.005) and all the mods. This was a bug in the CPAN modules themselves, prior to CPAN v1.63 or so (I forget exactly). Following the recommend

Re: [SAtalk] God, I HATE CPAN!

2003-09-23 Thread Theo Van Dinter
On Tue, Sep 23, 2003 at 01:36:16PM -0400, [EMAIL PROTECTED] wrote: > To make a long story short, even though 2.53 didn't mind this, none of the > later versions will start without this. Is upgrading to 5.80 a Good Idea > (TM)? I'm afraid it will break all kinds of other things that depend on > 5.

RE: [SAtalk] Better logging?

2003-09-23 Thread Erik Slooff
> > You need to pass the logfile name of your mail-daemon, e.g. > > ./spamstats0.4b5.pl /var/log/mail > > I use spamd, and it works. > > > Markus > > you have an link for this script? Thank you. > First hit after googling for spamstats and perl: http://freshmeat.net/projects/spamstats/?topic_id=

Re: [SAtalk] SpamAssassin 2.60 released!!

2003-09-23 Thread Theo Van Dinter
On Tue, Sep 23, 2003 at 10:35:27AM -0700, Kenneth Porter wrote: > Not sure what you might do to fix this, but "rpmbuild -ta" with the bz2 file > fails because the spec file is looking for the gz file. I suppose the makefile > that generates the tarballs could include one of two generated spec files

[SAtalk] newbie question

2003-09-23 Thread Scott Comboni
I have just installed v2.55. I have been getting non stop message like the one attached. I have tried to creat a rule but cannot seem to stop this from coming in. I just recently added score MICROSOFT_EXECUTABLE 10.10 to my 50_score.cf file and still no luck. Any suggestions would be great.

Re: [SAtalk] 2.6.0 on CPAN -- when will it get there?

2003-09-23 Thread Landy
> > Is downloading the tarball and installing it myself fundamentally > different than just doing the install from CPAN? > > thanks, > mark read the install file it will tell you how > --- This sf.net email is sponsored by:ThinkGeek Welcome

[SAtalk] i luv this spam

2003-09-23 Thread Landy
begin quote Spam detection software, running on the system "pepino.despiertapr.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see root for det

[SAtalk] A problem and a general question for SpamAssassin

2003-09-23 Thread Eric McDonald
Hi There: I'm having a problem with spamd creating lockfiles in the home directory of my filtering agent. I get these errors after starting spamd: Cannot open bayes databases /var/spool/filter/.spamassassin/bayes_* R/W: lock failed: File exists Cannot open bayes databases /var/spool/filter/.spam

Re: [SAtalk] God, I HATE CPAN!

2003-09-23 Thread up
FWIW, my little rant was all over nothing. I just installed 5.8 from FBSD ports and then everything worked fine, including SA. Interestingly, it looks like SA looks for 5.8 first when launching, because I kept 5.005 under /usr/bin, and put 5.8 under /usr/local/bin (I did not run the "use.perl po

Re: [SAtalk] WINDOWS_EXECUTABLE broken?

2003-09-23 Thread Landy
> > You can change this in EvalTests.pm, line 2413. > > For a lot of people it'd probably be easier to edit local.cf to insert: > > rawbody MICROSOFT_EXECUTABLE /^TV[qp]QAA[MI]EAA[A8]A/ > for me local.cf did not work i'll try evaltests.pm -

Re: [SAtalk] razor

2003-09-23 Thread Brian Morrison
On Tue, 23 Sep 2003 17:38:48 +0100 in [EMAIL PROTECTED] "Brian Morrison" <[EMAIL PROTECTED]> wrote: > Will try again with the latest Razor patch in the 2.60 release version > of SA. Razor now patched correctly with contents of 2.60 Razor2.patch file, SA now returning Razor results again. Phew! T

[SAtalk] Re: local.cf not being read..... Please help

2003-09-23 Thread Chris Tatro
Can anyone please help me on this? "CHRISTOP TATRO" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Using > redhat 9.0 > amavisd-new-20030616 > Postfix version 1.1.12 > spamassassin 2.55 > > I am having a strang problem with what appears to be that > my locall.cf file > is not being

[SAtalk] autolearn=?

2003-09-23 Thread Chris Cook
Question... for some reason, even if I explicitly enable autolearn in the config file it always shows autolearn=no in the headers of a scanned email, is there something I'm missing? Running SpamAssassin version 2.6 on FreeBSD with sendmail and spamass-milter, I've checked to make sure the the rul

Re: [SAtalk] required_hits < or =?

2003-09-23 Thread Martin Radford
At Tue Sep 23 13:55:28 2003, Robert Nicholson wrote: > > Forgive me but do the # of hits actually have to be more than > required_hits? > > I was under the impression that if I set required_hits to 6 then > whenever hits was greater than or equal to required_hits then that mail > would be cons

[SAtalk] Spampd vs Spamd

2003-09-23 Thread Jason Williams
Hello everyone. I was curious if anyone had an experiences with Spampd? Im currently trying to decide on whether to use spampd or spamd on our mail gateway. Our gateway is running postfix, and I wanted all incoming mail received on the gateway to be sent through SpamAssassin and tagged accordin

[SAtalk] _HITS_ not giving correct score (0.0something more)

2003-09-23 Thread Stephan van Hienen
with 'subject_tag *SPAM* (_HITS_)' in local.cf i get the score in the subject now with this spam result X-Spam-Status: Yes, hits=5.8 required=5.0 tests=CLICK_BELOW,EXCUSE_10, HTML_30_40,HTML_IMAGE_ONLY_04,HTML_LINK_CLICK_HERE,HTML_MESSAGE, HTML_MIME_NO_HTML_TA

Re: [SAtalk] Better logging?

2003-09-23 Thread mikea
On Tue, Sep 23, 2003 at 09:32:15PM +0200, Jim Knuth wrote: > Hallo Erik Slooff, > > am Dienstag, 23. September 2003, 20:18:08, schriebst Du: > > >> > You need to pass the logfile name of your mail-daemon, e.g. > >> > ./spamstats0.4b5.pl /var/log/mail > >> > I use spamd, and it works. > >> > >> >

[SAtalk] Help needed with spam deluge...is internet email being totally swamped?

2003-09-23 Thread Mike Klein
Er...not quite on topic, but I need a sanity check bad...real bad. I try to keep my system clean. I run a firewall, spybot, and a good/updated virus scanner...and hey! SA on my linux server...although I don't get much if any spam on this account. My ISP account is another matter entirely. I also

Re: [SAtalk] 2.60 and Dynamic IP Checks

2003-09-23 Thread Ryan Moore
By default SA will check the 9 previous hosts listed in the RECEIVED headers. You could lower that by using "num_check_received" directive in your usr_prefs/local.cf, I currently use a setting of four. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.per

RE: [SAtalk] Better logging?

2003-09-23 Thread Tom Meunier
I think the main thrust of his answer was that Google Is Your Friend. http://www.gryzor.com/tools/ -tom > -Original Message- > From: Jim Knuth [mailto:[EMAIL PROTECTED] > > First hit after googling for spamstats and perl: > > http://freshmeat.net/projects/spamstats/?topic_id=245 > > tha

Re: [SAtalk] Better logging?

2003-09-23 Thread Jim Knuth
Hallo Erik Slooff, am Dienstag, 23. September 2003, 20:18:08, schriebst Du: >> > You need to pass the logfile name of your mail-daemon, e.g. >> > ./spamstats0.4b5.pl /var/log/mail >> > I use spamd, and it works. >> >> > Markus >> >> you have an link for this script? Thank you. >> > First hit a

Re: [SAtalk] local.cf not being read..... Please help

2003-09-23 Thread Bart Schaefer
On Tue, 23 Sep 2003, Chris Tatro wrote: > Can anyone please help me on this? I presume you've run "spamassassin -D --lint" ? --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _

  1   2   >