On Tue, 2 Dec 2003, Robert Menschel wrote:
> headerRM_hx_from exists:From
> describe RM_hx_from From header found
> score RM_hx_from 0.001
> meta RM_hn_from !RM_hx_from
> describe RM_hn_from From header not found
> score RM_hn_from 1.00
>
> The first rule tests for the exi
> I've seen other people say this. My question is "why NOT
> send the listserv traffic through sa-learn as well?". After
> all, it is legit email you get, right?
I would NOT recommend feeding SAtalk automatically through sa-learn,
because people frequently include portions of spam in discussio
On Tue, 2 Dec 2003 21:34:19 -0600
"Yackley, Matt" <[EMAIL PROTECTED]> wrote:
> Damn are we back in the good old BBS days? :)
>
> I received this one today and damn near fell of my chair laughing.
>
> SA 2.55 only scored it at 2.36 points.
Are there any known rules to catch ascii-art? L
On Tue, 2 Dec 2003, Chris Santerre wrote:
> BIG HUGE NEWS
>
> A major breakthrough has taken place
>
> ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178 rules!!!
> Ramdon/tracking hosts tags removed!
>
> They only increase spamd memory by 1 meg!!! 1 meg!
>
> You read corre
On Tue, 2 Dec 2003 15:56:15 -0500
Chris Santerre <[EMAIL PROTECTED]> wrote:
(...)
> ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178 rules!!!
> Ramdon/tracking hosts tags removed!
(...)
Real big work! Grats!
But, for the sake of archiveness, and for one less dumb in the world,
why
On Wed, 3 Dec 2003 09:18:10 -0200, Marcio Merlone <[EMAIL PROTECTED]> writes:
> On Tue, 2 Dec 2003 21:34:19 -0600
> "Yackley, Matt" <[EMAIL PROTECTED]> wrote:
>
> > Damn are we back in the good old BBS days? :)
> >
> > I received this one today and damn near fell of my chair laughing.
> >
>
On Friday 28 November 2003 20:08, Erwan Le Moing wrote:
> my question is :
> if someone send an spam mail to [EMAIL PROTECTED], spamassassin will learn
> to consider spam to non-spam .
Set up a local dns server and use {spam,[EMAIL PROTECTED] or something like
that. Or use @127.0.0.1.
Of course t
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, December 02, 2003 10:07 PM
> To: Chris Santerre
> Subject: Re: [SAtalk] BIG HUGE EVIL RULE NEWS
>
>
>
> I've been using your popcorn, weeds and nov2rules.cf rules for about a
> month now, and
What version of Bigevil do you have? 1.51 has fixed 2 typos in 141 and 153.
I had
'.com||somedome'
empty pipes. site updated within minutes. You got version 1.5 I expect :)
--Chris
> -Original Message-
> From: Larry Rosenman [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, December 02, 2003 5:
Fixed, thanks. Version 1.52 posted. Once these small mistakes of mine are
removed, there will be NO FP's!! Doing this on such a grand scale the first
time was BRUTAL. Updates will be easier to manage.
That domain got there from an SA post. SA list was CC'd instead of To:'d. So
It got filtered :/
Thanks for all your hard work Chris!! Between your rules and Jennifer's I
have reduced the number of spams that come through today from nearly 85% of
incoming mails, to less than 1%..
Could not have done it without your hard work and help.. and that from the
rest of the list!
Happy Holidays!!
Ahhh, which one to put on site? :) Is the UNSET feature in ALL versions of
SA?
> -Original Message-
> From: David B Funk [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 5:14 AM
> To: Robert Menschel
> Cc: [EMAIL PROTECTED]; Chris Santerre
> Subject: Re: [SAtalk] Problem with
--On Wednesday, December 03, 2003 09:31:24 -0500 Chris Santerre
<[EMAIL PROTECTED]> wrote:
What version of Bigevil do you have? 1.51 has fixed 2 typos in 141 and
153. I had
'.com||somedome'
empty pipes. site updated within minutes. You got version 1.5 I expect :)
Yep. updated to 1.52.
Thanks!
Thanks for the modifications. Updated to 1.52.
Regards,
Marc
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Larry
Rosenman
Sent: Wednesday, December 03, 2003 7:08 AM
To: Chris Santerre; 'Marc Steuer'; 'Spamassassin-Talk (E-mail)'
Subject: RE: [SAtalk]
At 11:07 AM 11/19/2003 -0500, you wrote:
I guess I missed something. When did SAproxy stop having a free edition?
Does the demo expire after 15 days? I'm bummed there is no longer a free
version for home users if this is so :(
I also just noticed that the free version of SAproxy seems to have
di
>
> (...)
> > ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into
> 178 rules!!!
> > Ramdon/tracking hosts tags removed!
> (...)
>
> Real big work! Grats!
>
> But, for the sake of archiveness, and for one less dumb in the world,
> why you use rawbody on those rules instead of uri?
>
>
Chris Santerre said:
> That domain got there from an SA post. SA list was CC'd instead of To:'d.
> So
> It got filtered :/
Chris,
Instead of checking To or CC, you might want to look for headers the list
software adds:
http://www.mail-archive.com/[EMAIL PROTECTED]/msg25589.html
--
Chris Thielen
Hi all,
I'd like to install SA 2.60 from source on a RH 9 box and get the following
error when doing a make:
(perl Makefile.PL successfully done)
make
cd spamd; ./configure --prefix="/usr" --sysconfdir="/etc"
--datadir="/usr/share/spamassassin" --enable-ssl="no"
checking for gcc... gcc
checkin
On Wed, 3 Dec 2003, [ISO-8859-1] Jürgen R. Plasser wrote:
> I'd like to install SA 2.60 from source on a RH 9 box
I used the binary rpms and as long as I uninstalled the old spamassassin
manually, the new multiple rpms went in fine.
- Charles
---
On Wed, Dec 03, 2003 at 04:59:10PM +0100, J?rgen R. Plasser wrote:
> Hi all,
>
> I'd like to install SA 2.60 from source on a RH 9 box and get the following
> error when doing a make:
>
> (perl Makefile.PL successfully done)
>
> make
> cd spamd; ./configure --prefix="/usr" --sysconfdir="/etc"
I have posted a copy of the free version of SAproxy version 1.2.1
(2003-07-21) to the following location for download:
http://www.dougledbetter.org/downloads/SAproxyInstaller.exe
Enjoy,
-dougl
Doug Ledbetter -- Hagen Software, Inc.
2003-12-02 kl. 21.56 skrev Chris Santerre:
BIG HUGE NEWS
A major breakthrough has taken place
ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178 rules!!!
Ramdon/tracking hosts tags removed!
They only increase spamd memory by 1 meg!!! 1 meg!
You read correctly! Every evil
Hi Charles,
--On 03.12.2003 11:07 -0500 Charles Gregory wrote:
On Wed, 3 Dec 2003, [ISO-8859-1] Jürgen R. Plasser wrote:
I'd like to install SA 2.60 from source on a RH 9 box
I used the binary rpms and as long as I uninstalled the old spamassassin
manually, the new multiple rpms went in fine.
Hi Dan,
--On 03.12.2003 08:07 -0800 Dan Wilder wrote:
I'd hazard a guess there's something missing in your install
of RH's program development stuff.
What does 'config.log' say? The additional details should be
near the end.
I had the same thought and installed some developer stuff but it seems
Hello,
Sorry is this has been asked but I haven't seen it in the FAQ nor the general readme.
I have installed SA on a server for a NPO that generates a very large amount of email
traffic. It has done a good job of filtering a lot of the spam for us thus far.
The big problem is this NPO send
On 2003/12/03 09:31:24 -0500, Chris Santerre wrote:
> What version of Bigevil do you have? 1.51 has fixed 2 typos in 141 and 153.
> I had
> '.com||somedome'
>
> empty pipes. site updated within minutes. You got version 1.5 I expect :)
>
The first few lines of:
http://www.merchantsoverseas.com/
On Wed, Dec 03, 2003 at 05:21:19PM +0100, J?rgen R. Plasser wrote:
> Hi Dan,
>
> --On 03.12.2003 08:07 -0800 Dan Wilder wrote:
>
> >I'd hazard a guess there's something missing in your install
> >of RH's program development stuff.
> >
> >What does 'config.log' say? The additional details should
latest is 1.52. Fixed 2 typos and 3 domains. An SF
project..Hm... :)
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 11:32 AM
> To: Chris Santerre
> Cc: 'Spamassassin-Talk (E-mail)'
> Subject: Re: [SAtalk] BIG HUGE E
[EMAIL PROTECTED] said:
> On 2003/12/03 09:31:24 -0500, Chris Santerre wrote:
>
>> What version of Bigevil do you have? 1.51 has fixed 2 typos in 141
>> and 153.
>> I had
>> '.com||somedome'
>>
>> empty pipes. site updated within minutes. You got version 1.5 I
>> expect :)
>>
>
> The first few lin
At 11:29 AM 12/3/2003, Gary Smith wrote:
The question:
What I was wondering if I can create a new rule that filteres on a
specific piece of text (like the normal rules) but apply a negative score
value.
Yes, that's easy to do.
Here's a howto guide:
http://mywebpages.comcast.net/mkettler/sa/SA-r
>
> The question:
> What I was wondering if I can create a new rule that filteres
> on a specific piece of text (like the normal rules) but apply
> a negative score value. This would allow the NPO to tell the
> sender to put a key into the email to allow it to pass through.
>
> What's the
Thanks for the quick response guys... 14 minutes... Your betting Dell for their
award winning response :)
This will surely help.
Gary Smith
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 8:44 AM
To: Gary Smith; [EMAIL PROTE
how agressive are these rules? I am hearing great things about them but
dont want to produce FP's on my production system.
Any feedback?
thanks
adam
On Wed, 2003-12-03 at 11:42, Chris Santerre wrote:
> latest is 1.52. Fixed 2 typos and 3 domains. An SF
> project..Hm... :)
>
> > ---
Hello,
I
would like to block spammer that sends me emails with mail from [EMAIL PROTECTED]
Which
X is a random words and numbers.
My
problem is the dot in the mail from.
Can
some one help me to configure a rule for that ?
I
try this one:
header
LOCAL_SAPM_FROM_WALLA
I'm setting up per user bayesian databases but as i've mentioned in
other posts, many of the people using the system recieve low volumes of
spam... 4-10 a day maybe. Accordingly it would take them 1-2 months for
the database to kick in.
Does anybody have a bayesian database that is fairly gener
I recently trained SA-Learn and its working very well. The question I
have is can I feed the 5 or 6 spams I get a day into SA-Learn without
have to give it 1000+ ham\spam? I see in the documentation a reference
to do something like this with the no-rebuild option but Im still a bit
confused.
If s
At 09:10 AM 12/3/2003, you wrote:
I'm setting up per user bayesian databases but as i've mentioned in
other posts, many of the people using the system recieve low volumes of
spam... 4-10 a day maybe. Accordingly it would take them 1-2 months for
the database to kick in.
Does anybody have a bayesian
How can I tell that SA is actually using these rules (located in
/etc/mail/spamassassin/bigevil.cf) ?
---
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape OSDN's sites and tell us what you think. Take this
five minute su
Hi,
I am working on our newsletter and I have been testing it against
spamassassin to make sure I am not doing anything too stupid. I am
being tripped up by MIME_MISSING_BOUNDARY. A modified version of the
message is below-- can anyone easily tell what I am doing wrong with the
mime boundary
Watch for hits? It shouldn't take long, those rules hit about 1 in 5 for
me.
-Original Message-
From: Vee Persaud [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 10:48 AM
To: Spamassassin-Talk (E-mail)
Subject: RE: [SAtalk] BIG HUGE EVIL RULE NEWS
How can I tell that S
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wednesday 03 December 2003 09:10 am, Arlo Gilbert wrote:
> I'm setting up per user bayesian databases but as i've mentioned in
> other posts, many of the people using the system recieve low volumes of
> spam... 4-10 a day maybe. Accordingly it would
Idan Lerer said:
> I would like to block spammer that sends me emails with mail from
> [EMAIL PROTECTED]
> header LOCAL_SAPM_FROM_WALLA ALL =~ /\abcd.\w{0,[EMAIL PROTECTED]/i
Idan,
quote the dot "\.":
header LOCAL_SAPM_FROM_WALLA ALL =~ /abcd\.\w{0,[EMAIL PROTECTED]/i
--
Chris Thielen
Easi
On Wed, Dec 03, 2003 at 11:48:03AM -0500, Vee Persaud wrote:
>
> How can I tell that SA is actually using these rules (located in
> /etc/mail/spamassassin/bigevil.cf) ?
Feed your MTA a mail designed to match one or more of the rules, and
look for the match in your logs.
They score a 3.0 because there should be NO FPs other them my own mistakes.
Which can be edited out in seconds. They match specific spamhosts only.
There is no regex formula other then the spamhost name. Those who know me,
know I don't like high scoring rules. But these are dead on, unless I goof
u
On Dec 3, 2003, at 11:18 AM, Ernest W. Lessenger wrote:
Are all of your users in the same company/organization? If so, you
could use the same database for all of them for a while, and then
split it out once it kicks in. It's still a better idea to train
individually, but your users (may) have mo
Go to hotmail or whatever, send yourself an email with an Evil domain in it:
kievonline.org
check when it comes in. :)
--Chris
> -Original Message-
> From: Vee Persaud [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 11:48 AM
> To: Spamassassin-Talk (E-mail)
> Subject: RE
They're all scored at 3.0 -- so a lot depends on where you've set your
spam level. The "original" had a few typoes that have since been
corrected. Before the "big evil" was released, I was using a portion of
the original "evil rules" to filter mail for around 3000 customers. Now
I'm using th
Hi,
I'm having an odd problem with SpamAssassin 2.60, Qmail-Scanner 1.20 and
"net"qmail 1.04 compiled from source (RedHat 9).
I have ran spamd in debug mode and looked at the spamd script to verify
my config files are located here:
/usr/share/spamassassin
/etc/mail/spamassassin
/home/spamd/.sp
On December 03, 2003 12:07 pm, Tobin wrote:
> I recently trained SA-Learn and its working very well. The question I
> have is can I feed the 5 or 6 spams I get a day into SA-Learn without
> have to give it 1000+ ham\spam? I see in the documentation a reference
> to do something like this with the n
HI there
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Chris Thielen
> Sent: Wednesday, December 03, 2003 12:26 PM
> To: Spamassassin-Talk
> Cc: Idan Lerer
> Subject: Re: [SAtalk] Spammer with dot in the mail from header
>
> Idan Ler
> You could always lower the score. Only 178 to change :)
> (Hey that is nothing compared to how many times I had to hit ' | ,
DELETE,
> END ' because I was in a hurry to get done!)
Hi Chris,
You should grab multiedit. Rockage. You can do your edits with little
macros.
Jennifer
>
> --Chris Sa
Rich Puhek <[EMAIL PROTECTED]> wrote:
> Now to see if the payment terms mean that I can write off purchases
> of Wild tickets :-)
I'm planning on visiting my brother, who has 2 season tickets to the
Dallas Stars...
Where did I put that that Madano jersey?
--
+ + + + + + + + + + + + + + + + +
I've got a domain listed in Bigevil that could be legit. I need a hatcheck
on this one. It is not that obvious. Can someone give me info on:
as1.emv2.com
or the emv2.com domain in general? (not WHOIS, I can do that!)
*sigh* 1.54 is up. This domain IS still listed in it.
Chris Santerre
Syste
> -Original Message-
> From: Chris Barnes [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 12:53 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Re: BIG HUGE EVIL RULE NEWS
>
>
> Rich Puhek <[EMAIL PROTECTED]> wrote:
> > Now to see if the payment terms mean that I can w
At 12:40 PM 12/3/2003, Martin, Jeremy wrote:
I'm having an odd problem with SpamAssassin 2.60, Qmail-Scanner 1.20 and
"net"qmail 1.04 compiled from source (RedHat 9).
qmail-scanner does not use spamd/spamc's modification of subject lines, it
does the subject taggigng itself.
Please read the qmail
Chris Santerre wrote:
I've got a domain listed in Bigevil that could be legit. I need a hatcheck
on this one. It is not that obvious. Can someone give me info on:
as1.emv2.com
or the emv2.com domain in general? (not WHOIS, I can do that!)
Hi,
http://www.openrbl.org and pop in the domain. Th
On Wed, 3 Dec 2003, Jennifer Wheeler wrote:
> > Idan Lerer said:
> > > I would like to block spammer that sends me emails with mail from
> > > [EMAIL PROTECTED]
> >
> > > header LOCAL_SAPM_FROM_WALLA ALL =~ /\abcd.\w{0,[EMAIL PROTECTED]/i
> >
> > Idan,
> >
> > quote the dot "\.":
> > heade
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Chris Santerre
> Sent: Wednesday, December 03, 2003 1:08 PM
> To: Spamassassin-Talk (E-mail)
> Subject: [SAtalk] Bigevil domain hat-check help
>
> I've got a domain listed in Bigevil tha
Not to start a text editor war, but it can be done in Textpad with a
regex search and replace. Hit F8, check the Regular Expression textbox
-> Find: \t3.0$ -> Replace with: \t1.0 (or whatever you want the score
to be).
Mike
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EM
[EMAIL PROTECTED] wrote:
> Hi,
>
> I'm having an odd problem with SpamAssassin 2.60, Qmail-Scanner 1.20
> and "net"qmail 1.04 compiled from source (RedHat 9).
>
> I have ran spamd in debug mode and looked at the spamd script to
> verify my config files are located here:
>
> /usr/share/spamassass
[EMAIL PROTECTED] wrote:
>> -Original Message-
>> From: Chris Barnes [mailto:[EMAIL PROTECTED]
>> Sent: Wednesday, December 03, 2003 12:53 PM
>> To: [EMAIL PROTECTED]
>> Subject: [SAtalk] Re: BIG HUGE EVIL RULE NEWS
>>
>>
>> Rich Puhek <[EMAIL PROTECTED]> wrote:
>>> Now to see if the
Hi all,
I get the following errors from spamd (tons of them in my logfiles) and I
have no idea how to fix this. Ditching my bayes_* files isn't a good option
as it takes several hours to regenerate them (I have a spam corpus of about
2 which I collected over a period of 7 months...). Sa-learn
Thanks, Chris, for the update! One problem, though:
I see c1tracking.com is still on the list. As I mentioned before, this
shows up frequently in YahooGroups-hosted mailing lists, in some of the
text ads they attach to the message. In fact, I *only* see this one in ham.
Giving 30-50% of Yaho
hi i am trying to setup a rule so that we wont get mail to our local
alias from an outside address, this is what i wrote but it doesnt seem
to work as i thought it would, can u give any advice
header BLOCKTTOFFICEOUT To = [EMAIL PROTECTED]
header BLOCKTTOFFICEOUT From != [EMAIL P
Doesn't anyone use VI anymore?!! :-)
Sorry, couldn't resist adding to the war.
:%s/old stuff/new stuff/g
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike
Kuentz (2)
Sent: Wednesday, December 03, 2003 10:46 AM
To: Spamassassin-Talk (E-mail)
Subje
Is the normal location for the local.cf in the etc\mail\spamassassin\
folder? How can I verify that SA is reading this file? (I am using
spamc) I am having problems with settings seemingly not being used.
This is on a windows 2k box. In installed it according to www.exit0.com
instructions for insta
And just like that, we are at ver1.56 :) All fixed.
You had told me this in the past, and it was fixed in evilrules. The problem
is that when I made Bigevil, I used the list files used to create the old
evilrules. Not the old evilrules themselves. So this was still in the list.
Thanks for the fin
> -Original Message-
> From: Rick Macdougall [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 03, 2003 1:24 PM
> To: Spamassassin-Talk (E-mail)
> Subject: Re: [SAtalk] Bigevil domain hat-check help
>
>
>
>
> Chris Santerre wrote:
>
> > I've got a domain listed in Bigevil that co
I received an email on one of my systems that is not running SA and I decided to
forward it to my SA system to see if it would get rejected. The subject was "Have
amazing s\ex up to 20 times per day lugpsxw". They use the "/" in the body also
to avoid spam detection. It got a score of 3.3
They do look like they are in a lot of spam. The reason I asked is it gets a
FP from Tomshardware.com newsletter.
SO I pose the question to the list:
Highly probable spam host domain, that generates an FP on a popular
newsletter. Leave in the bigevil or remove?
I'm leaning towards removal.
--C
Jennifer Wheeler said:
>
>> You could always lower the score. Only 178 to change :)
>> (Hey that is nothing compared to how many times I had to hit ' | ,
> DELETE,
>> END ' because I was in a hurry to get done!)
>
> Hi Chris,
> You should grab multiedit. Rockage. You can do your edits with littl
Scott Harris said:
> Doesn't anyone use VI anymore?!! :-)
> Sorry, couldn't resist adding to the war.
>
> :%s/old stuff/new stuff/g
Or even better:
:g/^score/s/3.0/1.0/
---
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape
alert_OA0_1070477447_INI-MAIL_1#Map.pif.txt
Description: MIDI audio
I sent
this to the wrong email account...
-Original Message-From: Matt Van Gordon
Sent: Wednesday, December 03, 2003 11:28 AMTo:
[EMAIL PROTECTED] Sourceforge. Net (E-mail)Subject:
312.649.0007
McAfee GroupShield for Microsoft
Exchange **
*
I am trying to test out these new rules, but so far all of my tests have
not showing them as being active.
$ ls /etc/mail/spamassassin
bigevil.cf local.cf
And I restarted spamd... What else do I have to do to make them work?
Thanks for the help.
--
:wq!
Matthew Daubenspeck
http://www.odd
--On Wednesday, December 03, 2003 2:24 PM -0500 Vee Persaud
<[EMAIL PROTECTED]> wrote:
> I received an email on one of my systems that is not running SA and I
> decided to forward it to my SA system to see if it would get rejected.
> The subject was "Have amazing s\ex up to 20 times per day lu
Vee Persaud said:
> I received an email on one of my systems that is not running SA and I
> decided to forward it to my SA system to see if it would get rejected.
> The subject was "Have amazing s\ex up to 20 times per day lugpsxw".
> They use the "/" in the body also to avoid spam detection.
On Wed, 2003-12-03 at 14:25, Chris Thielen wrote:
> Did somebody mention editor wars? C'mon let's hear from you Emacs people ;)
emacs rocks
alt-% for search/replace or
ctrl-alt-% for regex search/replace
--
Adam Lanier
Bernard L. Madoff Investment Securities LLC
212.230.2491
signature.asc
Desc
[EMAIL PROTECTED] wrote:
> I received an email on one of my systems that is not running SA and I
> decided to forward it to my SA system to see if it would get
> rejected. The subject was "Have amazing s\ex up to 20 times per day
> lugpsxw". They use the "/" in the body also to avoid spam detect
Just a minor correction,
try this:
header__BLOCKTOFFICEOUTTo =~ /[EMAIL PROTECTED]/i
header__BLOCKFOFFICEOUTFrom =~ /[EMAIL PROTECTED]/i
metaBLOCK_MY_OFFICE(__BLOCKTOFFICEOUT && !__BLOCKFOFFICEOUT)
describeBLOCK_MY_OFFICENo E-mail to alias from outside
scoreBLO
Chris Santerre said:
> They do look like they are in a lot of spam. The reason I asked is it gets
> a
> FP from Tomshardware.com newsletter.
>
> SO I pose the question to the list:
>
> Highly probable spam host domain, that generates an FP on a popular
> newsletter. Leave in the bigevil or remove?
--On Wednesday, December 03, 2003 14:31:27 -0500 Matthew Daubenspeck
<[EMAIL PROTECTED]> wrote:
I am trying to test out these new rules, but so far all of my tests have
not showing them as being active.
$ ls /etc/mail/spamassassin
bigevil.cf local.cf
And I restarted spamd... What else do I hav
Matthew Daubenspeck said:
> I am trying to test out these new rules, but so far all of my tests have
> not showing them as being active.
>
> $ ls /etc/mail/spamassassin
> bigevil.cf local.cf
>
> And I restarted spamd... What else do I have to do to make them work?
Matthew,
I'd make sure your conf
Hello,
In cygwin I see the default rule location as:
/etc/mail/spamassassin/
Try running:
spamassassin -D --lint
and it'll tell you where it's looking to find your rules.
The subject re-write issue has been discussed a lot but I don't know
anything about it. What is the contents of your local.cf
Reported on the Spam-L anti-spam list..
Someone asking if this is a legit bounce or something else.
Look familiar?
- Forwarded message from [EMAIL PROTECTED] -
Return-path: <>
Received: from mx10.comingsoon.namescout.com ([199.85.4.241])
by s-rogue.tsc.com (iPlanet Messaging Server 5.
A little more help, if I may...
OK, I now understand the memory issue is when doing a --rebuild on a huge
database, memory needs to be available for load the token database. Right?!
Is there a reason that the journal needs to be synced more than once per
day? Why is the default set to 100KB?
I
Thanks Frederic for the quick response...
When I ran what you described, it said that it was infact using the
/etc/mail/spamassassin/ path, however, it said that it did not have
enough spam entries, I am having sa-learn run again to see if it picks
up more.
Here is my local.cf file:
#This is the co
> Please send the headers from both the first and the second messages.
> Without more information all anyone can do is wildly guess.
>
BEFORE sa-learn
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 18730 invoked by uid 197); 3 Dec 2003 18:59:54 -
Received: from [EMAIL PROTECTED] by rocco b
On Wed, Dec 03, 2003 at 01:47:55PM -0600, Smart,Dan wrote:
> Is there a reason that the journal needs to be synced more than once per
> day? Why is the default set to 100KB?
The default was reasonable for most users. There's no need, really,
to sync more than once a day, but a large journal mean
At 02:24 PM 12/3/2003, Vee Persaud wrote:
It got a score of 3.3. I ran sa-learn --spam on this message and now I
get a score of 3.0 if I resend the message. I'm a bit confused. Did I
do something wrong ???
How did you "resend" the message?
If you "resend" the message, merely by making a new
Shhh1.57:)
Sorry. But there are a few things. 100% spam rate is the goal. So any chance
of FP can't happen. I removed the domain with the tomshardware fp in it.
Also Matt Yackley, (What is it with Matts straightening me out!), has shown
me an error in my ways. With such wide use of this
Hello,
From http://www.spamassassin.org/tests.html:
--
DEFAULT SCORES (local, net, with bayes, with bayes+net)
--
What do "local", "net", and "bayes" mean? I can't find that anywhere.
First: I assume that "bayes" means I have put the options "bayes_path"
and "bayes_file_mode" in m
Matt Kettler wrote:
> At 02:24 PM 12/3/2003, Vee Persaud wrote:
>> It got a score of 3.3. I ran sa-learn --spam on this message and
>> now I get a score of 3.0 if I resend the message. I'm a bit
>> confused. Did I do something wrong ???
>
> How did you "resend" the message?
>
> If you "resen
Nice list. I have two recommendations/suggestions:
1) put the full URL of the canonical source into the file itself, so
people know from where to get updates
2) put a date into the file, so people will know how "fresh" the info
is.
And add "china-inflatable.com" and "cn-inflatables.com" ;
--On Wednesday, December 03, 2003 15:29:05 -0500 Vivek Khera
<[EMAIL PROTECTED]> wrote:
Nice list. I have two recommendations/suggestions:
1) put the full URL of the canonical source into the file itself, so
people know from where to get updates
2) put a date into the file, so people will
I'm using Michael Devogelaere's qmail-sql qmail server for several
domains. Prior to implementing spamassassin, dotqmails was working fine.
Now that spamassassin is running via the qmail
/var/qmail/bin/qmail-queue shell script:
#!/bin/sh
spamc | /var/qmail/bin/qmail-queue.orig
any message th
Done and Done and Will do :)
Yes I even put the time. No need to update if you have 1.57, as these were
just info changes. I'm sure 1.58 could be lurking just around the corner.
I'm just waiting for the next "Matt" email to come in, or possibly an "RM"
email. He has been quiet.too quiet :)
On Dec 3, 2003 at 12:43, Jennifer Wheeler wrote:
>You should grab multiedit. Rockage. You can do your edits with little
>macros.
Perl! sed! Makefiles!
--
Satya. http://www.thesatya.com/>
The lab called: your brain is ready
---
This SF.net
At 03:26 PM 12/3/2003, Derek Simkowiak wrote:
DEFAULT SCORES (local, net, with bayes, with bayes+net)
What do "local", "net", and "bayes" mean? I can't find that
anywhere.
These refer to "groups" of optional tests in SpamAssassin.
"net" - Tests which must send data across a network to c
At 03:28 PM 12/3/2003, Vee Persaud wrote:
I was planning on just forwarding any suspect spam emails to an email
account on my SA server and running it through sa-learn. I guess that
this isn't the correct way to do it ???
No.. that is a *VERY* bad idea to do, because it will cause sa-learn to
l
1 - 100 of 152 matches
Mail list logo
