Re: [SAtalk] reverse scoring question

2003-12-07 Thread Pedro Sam
On December 02, 2003 06:49 pm, Gary Smith wrote: > nor the general readme. ÂI have installed SA on a server for a NPO that > generates a very large amount of email traffic. ÂIt has done a good job of > filtering a lot of the spam for us thus far. > The big problem is this NPO sends emails back and

Re: [SAtalk] bayes permission errors

2003-12-07 Thread David B Funk
On Sat, 6 Dec 2003, Lukreme wrote: > spamd[33762]: Cannot open bayes databases > /home/user/.spamassassin/bayes_* R/O: tie failed: Permission denied > spamd[33762]: processing message > <[EMAIL PROTECTED]> for kremels:5003. > spamd[33762]: clean message (0.8/5.0) for user:5003 in 0.2 seconds, > 55

Re: [SAtalk] bigevil.cf + rsync? - Windows version - sort of

2003-12-07 Thread Barry Porter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/12/2003 02:01, Gary Smith wrote: > There are some freeware dll's that you can use to do the FTP/wget so you don't have to do the shell. I don't see where you restart/reload the service??? I have done a google for both recode and wget as dll's

Re: [SAtalk] bigevil.cf + rsync? - Windows version - sort of

2003-12-07 Thread Chris Thielen
Barry Porter said: > I have done a google for both recode and wget as dll's but have come up > with nothing other than a virus warning about wget.dll being used in an > irc flood virus. Barry, http://www.gnu.org/software/wget/wget.html should link you to ftp://sunsite.dk/projects/wget/windows/ whe

Re: [SAtalk] bigevil.cf + rsync? - Windows version - sort of

2003-12-07 Thread Chris Thielen
Chris Thielen said: > Barry, > http://www.gnu.org/software/wget/wget.html > should link you to > ftp://sunsite.dk/projects/wget/windows/ > where you can snag win32 binaries for wget Just ignore me... I shouldn't have jumped in and posted without reading the whole thread. Sorry! -- Chris Thielen

Re: [SAtalk] Delete mail with a score above n

2003-12-07 Thread Bob Apthorpe
On Thu, 04 Dec 2003 10:59:13 -0800 Mike D <[EMAIL PROTECTED]> wrote: > Does anyone know how to config spamassassin to delete messages with a score > above a certain threshold? This question gets asked every 3-5 days and really ought to be in the FAQ. Answers generally focus on: a) procmail b)

RE: [SAtalk] bigevil.cf + rsync?

2003-12-07 Thread Peter Kiem
Hi, > Peter, if your still listening what character set are you running? Sorry, been away for the weekend. I was using my SquirrelMail at the time for posting so not sure. It should have just been plain text! -- Regards, +-+-+ | Pete

[SAtalk] Why didnt't he obfuscation rules hit on this message?

2003-12-07 Thread Rubin Bennett
Return-Path: <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> From: "Timprice" <[EMAIL PROTECTED]> Date: Sat, 06 Dec 2003 21:50:06 -0100 To: [EMAIL PROTECTED] Subject: [EMAIL PROTECTED] --> 78% D.1.SC0.UNT!! xvjtk crbqap MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/ht

RE: [SAtalk] SA, Razor and unkempt perl

2003-12-07 Thread Erick Calder
Mark, sounds like you need Razor2::Client::Agent installed.  you can either install it as a perl module via the CPAN module or if you prefer to keep things in RPM format you can use the cpan2rpm tool to make the module before installing.   -Original Message-From: [EMAIL PROTECTED] [

[SAtalk] report_safe ?

2003-12-07 Thread Erick Calder
I've recently upgraded to Shriek which comes with 2.44. my user_prefs used to include a line like: report_safe 0 but now I get an error like this: > Dec 3 23:40:45 beowulf spamd[13358]: debug: Failed to parse line in > SpamAssassin configuration, skipping: report_safe 0 in the current

RE: [SAtalk] spamds that don't finish

2003-12-07 Thread Erick Calder
Cheryl, I'm having the same problem (see posting "spamd piling up - just killing me") on a Shriek (RH9) box running 2.44. 2.44 is the latest available from RH but it's been suggested to me that I should upgrade to 2.60 (unfortunately I can't do that at present since Theo Van Dinter's site is not m

[SAtalk] Bayes scoring

2003-12-07 Thread Michael Satterwhite
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm looking at the standard scoring of the BAYES rules and I see 50_scores.cf:score BAYES_80 0 0 5.300 2.862 50_scores.cf:score BAYES_90 0 0 4.027 3.002 50_scores.cf:score BAYES_99 0 0 5.200 3.008 if I'm reading this correctly more points are given f

Re: [SAtalk] report_safe ?

2003-12-07 Thread Theo Van Dinter
On Sun, Dec 07, 2003 at 12:24:16PM -0800, Erick Calder wrote: > I've recently upgraded to Shriek which comes with 2.44. my user_prefs used > to include a line like: > report_safe 0 > in the current docs I find neither any mention of this setting nor an > alternative... wtf? report_safe was

Re: [SAtalk] Bayes scoring

2003-12-07 Thread Theo Van Dinter
On Sun, Dec 07, 2003 at 02:46:39PM -0600, Michael Satterwhite wrote: > Can some of you experts explain this one to me? http://spamassassin.taint.org/faq/index.cgi?req=show&file=faq01.005.htp -- Randomly Generated Tagline: "The highest patriotism is not a blind acceptance of official policy, but

RE: [SAtalk] report_safe ?

2003-12-07 Thread Erick Calder
ah!! now I get it. I _was_ running 2.60 before "upgrading" to Shriek, which actually downgraded my SA installation to 2.44 - grr. may I suggest you add a note at http://spamassassin.kluge.net/RPMS/ that the single .src there will produce the 3 binaries (for morons like me to whom such things are

RE: [SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Erick Calder
ok. I'm now running 2.60 but with same results. curiously, as with Cheryl's problem, I mostly seem to have one user with the problem... and from what I can tell there is nothing remarkable about that user's account... any help would be most appreciated. -Original Message- From: [EMAIL P

[SAtalk] Re: One persistent spammer defeating SA.

2003-12-07 Thread Bryan Hoover
Robert Nicholson wrote: > > I've got a mailbox full of messages that got past SA > > They are all from the same spammer. What sort of stuff is in the messages? And if it's a bulk send -- that is, a real spammer, as opposed to someone targeting only you (which would be, most likely, for the most

[SAtalk] Bayes and qmailscanner

2003-12-07 Thread Jennifer Fountain
I am having a bit of a time trying to get bayes working with qmail/qmailscanner. My server is acting like a relay server for my domain and does not have mailboxes. Does anyone have any information that they can share with point me in the right direction?

[SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Malte S. Stretz
On Sunday 07 December 2003 22:56 CET Erick Calder wrote: > ok. I'm now running 2.60 but with same results. curiously, as with > Cheryl's problem, I mostly seem to have one user with the problem... and > from what I can tell there is nothing remarkable about that user's > account... Are those pro

RE: [SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Erick Calder
> Are those processes really zombies or does the user probably > just receive loads of mail? they're not really zombies since they're eating up all available cpu. and the user doesn't get that much mail but when he does the processes run forever. > Have you tried limiting the number of children v

[SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Charles Gregory
On Sunday 07 December 2003 22:56 CET Erick Calder wrote: > ok. I'm now running 2.60 but with same results. curiously, as with > Cheryl's problem, I mostly seem to have one user with the problem... and > from what I can tell there is nothing remarkable about that user's > account... My favorite g

Re: [SAtalk] amavisd-new & spamassassin = no headers. Ugh!

2003-12-07 Thread Bill Randle
On Sat, 2003-12-06 at 20:10, [EMAIL PROTECTED] wrote: > Greetings all! > > Detailed thread is here: > http://forums.gentoo.org/viewtopic.php?t=93771&start=0&sid=5b9753497d3d65e947679654382eea37 > > Basically, I have installed amavisd-new and SpamAssassin 2.60 on a box > that serves as a gateway

RE: [SAtalk] Adding another RBL

2003-12-07 Thread Richard Bewley
Hmm, it looks as though this would be the problem: debug: is Net::DNS::Resolver available? no debug: is DNS available? 0 Now, the next question, how do I go about installing Net::DNS, do I have to use CPAN? Thanks, Richard -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTEC

RE: [SAtalk] Adding another RBL

2003-12-07 Thread Erick Calder
if you're running RH you can use the RPM. see http://perl.arix.com/cpan2rpm/#prebuilt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Richard Bewley Sent: Sunday, December 07, 2003 5:50 PM To: 'David B Funk' Cc: 'Matt Kettler'; [EMAIL PROTECTED]; 'El Mariposa

[SAtalk] Spam that got through question

2003-12-07 Thread Scott Harris
Title: Spam that got through question The spam attached has the following random words at the bottom: automata childhood reflectance trevelyan tile captious hollingsworth cornstarch chinaman chicanery Is this to try to poison bayes or to just try and fool things to get it through or some

Re: [SAtalk] Mailer daemon mail in whitelist

2003-12-07 Thread Matt Kettler
At 11:07 AM 12/6/03 -0800, mairhtin wrote: Great to hear! Is xanadu.evi-inc.com *YOUR* dns machine? my machine is named mail.techsolutionsgroupllc.com, so I suppose that the correspondant line would be : whitelist_from_rcvd [EMAIL PROTECTED] mail.techsolutionsgroupllc.com since mail.techsolutio

RE: [SAtalk] Adding another RBL

2003-12-07 Thread Matt Kettler
At 08:49 PM 12/7/03 -0500, Richard Bewley wrote: mm, it looks as though this would be the problem: debug: is Net::DNS::Resolver available? no debug: is DNS available? 0 Now, the next question, how do I go about installing Net::DNS, do I have to use CPAN? you can do it via tarball, and most distros

Re: [SAtalk] Spam that got through question

2003-12-07 Thread Matt Kettler
At 07:15 PM 12/7/03 -0800, Scott Harris wrote: The spam attached has the following random words at the bottom: automata childhood reflectance trevelyan tile captious hollingsworth cornstarch chinaman chicanery Is this to try to poison bayes or to just try and fool things to get it through or so

Re: [SAtalk] Bayes scoring

2003-12-07 Thread Matt Kettler
At 02:46 PM 12/7/03 -0600, Michael Satterwhite wrote: 50_scores.cf:score BAYES_80 0 0 5.300 2.862 50_scores.cf:score BAYES_90 0 0 4.027 3.002 50_scores.cf:score BAYES_99 0 0 5.200 3.008 if I'm reading this correctly more points are given for classifying a message as 80% probable than for 90% probab