-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello John,
Saturday, November 22, 2003, 7:56:07 PM, you wrote:
RM>> 1) The Swen virus is not spam. It should be caught by anti-virus
RM>> software, not by anti-spam software.
JO> It's email that I don't want. It has a predictable From: and/or
JO>
Hi,
On Sat, 22 Nov 2003 19:56:07 -0800 John Oliver <[EMAIL PROTECTED]> wrote:
> On Sat, Nov 22, 2003 at 06:24:38PM -0800, Robert Menschel wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA1
> >
> > Hello John,
> >
> > Saturday, November 22, 2003, 4:24:01 PM, you wrote:
> >
> > JO> I s
Taking a break from reading Orwell's 1984...
Also be aware that SA uses 1 of 4 different score sets depending on
which of auto_learn, and network checks are on. From some documentation
somewhere:
#If four valid scores are listed, then the score that is used depends on
how
#SpamAssassin is being
Hello,
I've just installed spamassassin 2.60 onto my local Pc in order to test
it out prior to upgrading some older systems. However, I am seeing
messages being 'marked' as spam, but the subject line is not changing.
Example:
==
Date: Fri, 2
Thanks to everyone who replied to this thread. I have since added the
example from procmailrc.example, but I am still getting these messages.
I have gotten two today.
From Fri Nov 21 14:21:46 2003
X-UIDL: %[E!!nj'!!h1:"!cdc"!
From Fri Nov 21 15:14:53 2003
X-UIDL: @Q'!!fZ3!!-8T"!DGb!!
If this i
Through the news.spamassassin.org site I found what looks
like a good way for Outlook users to get spam (and ham) into the Bayes sa-learn.
Dan Kohn suggestions is at ─ http://www.dankohn.com/archives/000323.html.
After special handling for mail previously processed by SA
that is now be
I wrote some small scripts to take an mbox file (like you would find in
/var/spool/mail), split the messages apart, and send them to sa-learn. sa-learn
does not split messages apart itself (at least in version 2.60).
Check it out at http://www.lost-habit.com/learnscripts.html . Nice if you have a
Does someone want to respond to this guy and point out the obvious?
http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?
Having only recently installed SA I'd like to ask about the various rules
files that abound.
Is there a listing of the common rules and their target?
Are they all just a matter of dropping the .ch into the SA configuration
directory, or is it best to edit before deploying?
Are there any recomme
Recently I got sick of seeing the queue on my SpamAssassin gateway full of
double bounces that will never be delivered, but still have to hang around for
four days before they timeout. I found the DoubleBounceAddress setting in
sendmail, and was about to send the messages to the bit bucket, when i
Thus spake Dan Kohn ([EMAIL PROTECTED]) [20/11/03 14:35]:
> Here is a spam that should convince people to turn on Bayes. This
> Nigerian spam was almost certainly continually resent against
> SpamAssassin 2.60. Each time, the words were altered slightly until
> none of the rules fired. However,
I've got a user on my system whose spam doesn't seem to be marked
correctly. It comes in marked as [SPAM] in the subject, but the
X-Spam-Status header seems to be incorrect. (SA works properly for
all other users on my system, so i'm not sure what the problem is)
Example below: the X-Spam-Status
On November 23, 2003 04:46 am, Daniel Sterling wrote:
> I wrote some small scripts to take an mbox file (like you would find in
> /var/spool/mail), split the messages apart, and send them to sa-learn.
> sa-learn
does not split messages apart itself (at least in version 2.60).
sa-learn --mbox ?
-
At Fri Nov 21 02:09:31 2003, Stephen Lau wrote:
>
> I've got a user on my system whose spam doesn't seem to be marked
> correctly. It comes in marked as [SPAM] in the subject, but the
> X-Spam-Status header seems to be incorrect. (SA works properly for
> all other users on my system, so i'm not
Yeah, I hear ya. Don't blame him but hoping someone will pick it up and run
with it.
Gary
> How about *YOU* do it for a fee and make it a small business? =P Don't
> have the time? Oh...neither does he.
>
>
> *Sigh*
>
> To the *.easynet.nl DNSBL maintainer (even though you may not read thi
Hello SA users,
I have SA installed and working fine with mysql database. According to
sa docs, must exist a PHP Interface called "php-sa-mysql-n.n" which can
be downloaded from http://spamassassin.org/devel/...
I checked out this URL, and not found what i'm looking for. Asking
google about i
At Fri Nov 21 23:34:35 2003, Jeremy Dold wrote:
>
> Does someone want to respond to this guy and point out the obvious?
> http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc
It's a bit embarrassing for the journalist that he was happy to
contact technical support for at least one of t
On Fri, 21 Nov 2003, Jeremy Dold wrote:
> Does someone want to respond to this guy and point out the obvious?
> http://www.infoworld.com/article/03/11/14/45FEspam_1.html?s=tc
I haven't been able to properly ascertain the author's various
connections to commercial ventures, but in this inst
I gave this guy a piece of my mind! The guy wasn't smart enough to update
his SA install, he used 2.44 because it came with the RH9 disks he had. No
wonder he had a hard time finding support, that software is outdated!
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com
At Sun Nov 23 06:30:46 2003, Robert Menschel wrote:
>
> >> Do you have Bayes turned on? Bayes is a life saver here.
>
> JO> I have no idea. How would I know?
>
> 1) Check the headers of emails processed by SA. If they include an
> autolearn=(no, or ham, or spam), then I believe Bayes is turned
And now for the real world.
I was asked a year ago to come up with a solution for spam filtering, in
a multiple domain, multiple user environment ( > 4,400 users). After
extensive research I recommended SA. I installed SA on my system and
ran it for about a month, it was an older version
On Mon, Nov 17, 2003 at 09:01:24PM -0500, Larry Gilson wrote:
> I am running Postfix with SA, Procmail, and Webmin on Red Hat 8.0. I want
> to move away from RH and am soliciting opinions. I figure that for me, I
> have 3 viable choices: FreeBSD, Debian, and Slackware. I want a free OS so
> I do
From spamassassin man page:
-a, --auto-whitelist, --whitelist
Use auto-whitelists. Auto-whitelists track the long-term average score
for each sender and then shift the score of new messages toward that
long-term average. This can increase or decrease the score for
messages, depending on the l
Skylar Thompson wrote:
On Mon, Nov 17, 2003 at 09:01:24PM -0500, Larry Gilson wrote:
I am running Postfix with SA, Procmail, and Webmin on Red Hat 8.0. I want
to move away from RH and am soliciting opinions. I figure that for me, I
have 3 viable choices: FreeBSD, Debian, and Slackware. I want
--On Sunday, November 23, 2003 8:35 AM -0500 Fred <[EMAIL PROTECTED]> wrote:
I gave this guy a piece of my mind!
Care to cc a copy to the SA list? Hopefully you don't mean that you were
antagonistic. Too many open source advocates sound like the crazy aunt in
the attic, which alienates the corpo
> And now for the real world.
>
> only 50 or less users:
>
> Brightmail$ 2,998 for 2 years
> FrontBridge $ 2,700 for 2 years
> Postini $ 2,700 for 2 years
> ProofPoint$ 2,000 for 2 years
> SpamAssassin $ 3,100 for 2 years
>
That assumes that the small co
Just had a mail in which had different *'s and score. I was expecting these
to be the same as I egrep the file and count the stars in post
processing.
X-Spam-Level:
X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_20,HTML_30_40,
HTML_MESSAGE,HTML_RELAYING_FRAME,MICROSOFT_EX
On Fri, 21 Nov 2003 21:41:23 -0800 John Oliver <[EMAIL PROTECTED]>
wrote:
>
> Here are the dnsbls I use, the order I use them in, and the number of
> matches in the current maillog:
>
> [EMAIL PROTECTED] joliver]$ ./spam.sh
> cbl.abuseat.org
>4342
> dynablock.easynet.nl
>1938
> sbl.spamha
zones:
rbldnsd: ip4set:dynablock.my-domain.info: 20031123 174253: \
e32/24/16/8=372826/241350/1001/0
rbldnsd: generic:zoneheader.dynablock.my-domain.info: 20031123 183814: e=3
rbldnsd: version 0.96 (29 May 2003) started (listening on [127.0.0.1]:53)
Yet, I cannot get any query to resolve on
Hmmm... only a guess. The 'stars' account for the 4 in 4.something and
the hits round up.
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Alan Munday
> Sent: Sunday, November 23, 2003 4:58 PM
> To: [EMAIL PROTECTED]
> Subjec
Hi All,
Outlook 2003 comes up with FORGED_MUA_OUTLOOK. obviously i can change the
score in this to not score this any more. I don't know how to fix rules as
i'm not a regex guru. anyone know how to fix this? or even how that one
works?
hehe. some would say all outlook should be classed as s
The score rounds up. If you pass the -e option spamassassin will exit
with a non-zero exit code if it spam, but not with a hit count.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Alan Munday
> Sent: Sunday, November 23, 2003 4:58 PM
> To: [EM
At Sun Nov 23 21:57:43 2003, Alan Munday wrote:
>
>
> Just had a mail in which had different *'s and score. I was expecting these
> to be the same as I egrep the file and count the stars in post
> processing.
>
>
> X-Spam-Level:
> X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_2
At 21:57 23/11/2003 +, Alan Munday wrote:
Just had a mail in which had different *'s and score. I was expecting these
to be the same as I egrep the file and count the stars in post
processing.
X-Spam-Level:
X-Spam-Status: No, hits=5.0 required=5.0 tests=BAYES_20,HTML_30_40,
HT
Just an FYI, when I roll out SA to a client, I include $500/year charge
for software upgrades, this way they always stay current. It is easier
to get that $$ up front than down the road. Software upgrades are done
in the comfort of my house, using SSH and webmin, usually taking only a
couple hour
Thanks...
Didn't think to look at the FAQs (Which I normally do).
Shows you what happens when you act on impulse.
Alan
-Original Message-
From: Martin Radford [mailto:[EMAIL PROTECTED]
Sent: 23 November 2003 22:34
To: Alan Munday
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] Score
At
Thanks to all who responded to me with hints and suggestions.
I had seen all the web sites mentioned but had not completely understood how
they all fitted together. Maybe a topic for the FAQ?
I've tried adding a fair number of rules and, noting comments made, had the
notion of asking if it would
Thanks Simon
I am using stars as I used the Advosys how-to as my starting point. I've
started playing with the scripts and wondered if SA left any variables set
e.g. hit value, that I could use rather than re-reading the file as I
thought this would be much quicker. I count the actual values as I
Hello Adam,
Thursday, November 20, 2003, 2:13:24 PM, you wrote:
ADL> Recently I got sick of seeing the queue on my SpamAssassin gateway full of
ADL> double bounces that will never be delivered, ...
Would http://www.exit0.us/index.php/VirusBounceRules help?
Bob Menschel
-
Hello Alan,
Friday, November 21, 2003, 3:12:25 AM, you wrote:
AM> Having only recently installed SA I'd like to ask about the various
AM> rules files that abound.
AM> Is there a listing of the common rules and their target?
See http://www.exit0.us and subsequent links.
Bob Menschel
--
Hello Alan,
Sunday, November 23, 2003, 1:57:43 PM, you wrote:
AM> Just had a mail in which had different *'s and score. ...
AM> X-Spam-Level:
AM> X-Spam-Status: No, hits=5.0 required=5.0 tests=...
AM> Is there a simple explanation for this?
Very simple -- hits is rounded to one decimal pl
Hi,
I believe this is an FAQ. But, basically, it rounds that number to one
decimal place. So, if your score was really 4.978, it would list 4 stars,
be below the 5.0 threshold, but round to 5.0 on the "hits" indicator.
Hope that helps,
Richard
-Original Message-
From: [EMAIL PROTECTED]
Hello Logan,
Sunday, November 23, 2003, 2:51:18 PM, you wrote:
LH> The point of using the old version of SpamAssassin was to show how
LH> much the technology has changed in the last few years. That was
LH> stated in my original article but edited out of the final version. (I
LH> love copy editors
Hi Alan
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Alan Munday
> Sent: Sunday, November 23, 2003 6:03 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] Rules, rules and more rules
>
> Thanks to all who responded to me with hints
At 23:01 23/11/2003 +, Alan Munday wrote:
Thanks Simon
I am using stars as I used the Advosys how-to as my starting point. I've
started playing with the scripts and wondered if SA left any variables set
e.g. hit value, that I could use rather than re-reading the file as I
thought this would be
Jennifer
Thanks for the response.
A good point with respect to the on/off nature of some of the rule sets.
More info for the FAQ?
I had been directed at your site and have installed those rules recommended
by Bob Menschel.
I wish to say a thank you to all the sa rules contributors for your
con
I have a SA 2.60 new install. Net::DNS is working fine.
skip_rbl_checks 0
Debug shows "debug: RBL: success for 0 of 18 queries", all of them
timing out, even with a large timeout values.
Manual lookup of IP at RBL returns whatever code it's supposed to
(like 127.0.0.2)
What else could be causing S
Man, that article is indeed rather damning - in affect, though unlikely
effect.
The article, flagrantly irresponsible, says more about the magazine, and
the author, than any commentary about the reality of SA's effectiveness
as an anti-spam tool.
The fact that older SA versions don't hold up well
hi all!
i installed qmail+vpopmail+qmailadmin+SpamAssassin, on a slackware 9.0.
it works fine, but i've got a little-big problem with SA (or vpopmail :o).
i start spamassassin, in demon mode via spamd, with
options "-a -c -v -u vpopmail" but it doesn't create dir
~/.spamassassin/user_prefs in vpop
On Sunday 23 November 2003 9:05 pm, Kenneth Porter wrote:
> --On Sunday, November 23, 2003 8:35 AM -0500 Fred <[EMAIL PROTECTED]> wrote:
> > I gave this guy a piece of my mind!
>
> Care to cc a copy to the SA list? Hopefully you don't mean that you were
> antagonistic. Too many open source advocat
Hi Everyone,
Does anybody know if there is any limit for the character length of a
rule?
(so - '/RULE/' < 254 characters)?
I'm just setting up a database to hold my rules. So I am just deciding
if I should use a Memo field or not for the rule?
Thanks.
Regards,
Andrew
--
At 06:40 AM 11/23/03 -0500, Pedro Sam wrote:
On November 23, 2003 04:46 am, Daniel Sterling wrote:
> sa-learn
does not split messages apart itself (at least in version 2.60).
sa-learn --mbox ?
I second pedro's motion.. sa-learn DOES accept mbox files and split them
appart itself, and has done so
Dear list...
(See what happens when I get a question answered? I come up with
more...)
Is there (I hope!!!) a way to tell spamd not to accept connections if
the system load is at or above a certain threshold? (i.e. if the system
load is currently 30, don't spawn anymore spamd processes)?
I hav
I've installed SpamAssassin 2.6 on a system running FreeBSD 4.7, Perl
5.6.1. SpamAssassin (or, strictly, spamc/spamd) is invoked by
qmail_scanner_1.16.
The messages processed by SpamAssassin come through with a header
that says something like:
X-Spam-Status: Yes, hits=5.5 required=5.0
My pro
On Sunday 23 November 2003 07:40 pm, Rubin Bennett wrote:
> Dear list...
>
> (See what happens when I get a question answered? I come up with
> more...)
>
> Is there (I hope!!!) a way to tell spamd not to accept connections if
> the system load is at or above a certain threshold? (i.e. if the sys
At 07:56 PM 11/22/03 -0800, John Oliver wrote:
> 1) The Swen virus is not spam. It should be caught by anti-virus
> software, not by anti-spam software.
It's email that I don't want. It has a predictable From: and/or
Subject: and so should be able to be scored very high.
Agreed that swen emails ma
At 10:52 PM 11/23/03 -0500, Angus McIntyre wrote:
Can anyone tell me what I'm overlooking? Is there some magic switch
required to get SpamAssassin to honor 'add_header' instructions?
First, run spamassassin --lint.. just as a sanity check.
Then I'd start checking very closely to be sure that the
i am use both freebsd and gentoo linux.
gentoo using ports system like freebsd.
exim+exiscan+spamassassin.
working good for me.
--
Miroslav Ris
Skylar Thompson said:
> On Mon, Nov 17, 2003 at 09:01:24PM -0500, Larry Gilson wrote:
>> I am running Postfix with SA, Procmail, and Webmin on Red Hat
I ran it and this is what I got:
spamassassin -D --lint
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: P
When I ran this... I got:
sa-learn --dump
Use of uninitialized value in numeric lt (<) at
/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm line 1281.
0.000 0 0 0 non-token data: bayes db version
0.000 0 0 0 non-token data: nsp
Hi List.
Running spamd with the -D option, i get the following line regarding bayes:
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
The bayes DB has been trained with quite a few hubdred spams, but no hams.
Would that cause the above condition?
Many thanks
Regards,
Hi List.
What would cause the following error?
Cant find any usefull info regarding this.
Just came back from sick-leave and my server has gone for a ball of
My apologies for the post.
debug: bayes: score = 1
debug: Syncing Bayes journal and expiring old tokens...
debug: lock: 26011 created
/
62 matches
Mail list logo
