[SAtalk] hi sa-talk, my name is ben, and I get spam

;ll follow this up with some threads about new rules so the discussion is easier to follow. -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] new rules: suggestions for the new spamassassin user

common, and does not often appear in # unsolicited mail. body MY_NAME /benedict/i describe MY_NAME Contains Benedict (bjj) score MY_NAME -2 # Again, my real name on the To line, very rare in spam header TO_MY_NAME To =~ /Ben Jackson/ describe TO_MY_NAME To knows my full name (bjj) score TO_MY_NAME

[SAtalk] new rules: general spam rules

UX_PRESS_RELEASE 1 # I bet there are more redirectors in .to, but I haven't found them all # Similar to the free webhosting rule above. rawbody BITE_ME_TONGA /http:\/\/(?:come|go|explode)\.to\//i describe BITE_ME_TONGA Bite me, Kingdom of Tonga score BITE_ME_TONGA 1.5 body NIGERIA /\bNigerian

[SAtalk] modified rules

I almost forgot. I've had to tweak a few existing rules. # Slightly less picky than the stock rule body DEAR_SOMEBODY /^Dear / # Needed more space between the call/dial and the number, and added fax body CALL_FREE /(?:call|dial|fax).{1,40}8(?:00|88|77|66|55|44|33|

[SAtalk] modified rules

Arrgh, I failed to hit send on this last night. I've had to modify a few of the stock rules. Here they are: # Less restrictive body DEAR_SOMEBODY /^Dear / # add fax, allow more space before the phone number body CALL_FREE /(?:call|dial|fax).{1,40}8(?:00|88|77|66|

Re: [SAtalk] new rules: general spam rules

e mail as spam, and 2) if, as you say, it matches mostly non-spam for you, it's not a bad test to let the GA assign a value to. -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Re: [SAtalk] Re: [Exim] Spamassassin config for running from exim

o my Junk folder, hence the else clause: :0fw | spamassassin -P -F 0 :0 * ^X-Spam-Status: Yes | /usr/local/bin/maildir $MAILDIR/.Junk # else filter the spamassassin info back out :0 E f w | spamassassin -d -- Ben Jackson <[EMAIL PROT

Re: [SAtalk] Stupid Outlook (procmail) tricks revisited

e maildir program explicitly, like: :0 * ^X-Spam-Flag: | maildir $MAILDIR/.spam procmail's maildir-like delivery is Not Quite Right. maildir is part of the safecat package. (note I use .spam because that's what courier expects, I'm not sure about direct-maildir-access programs)

RE: [SAtalk] Stripping SpamAssassin Information

strip the junk back out for non-spam. I also use all the tersest reporting options. When I'm working on new rules I use a mutt macro which pipes the messages through "spamassassin -t" to see how it's being scored. Since I want to see the changes as I edit the scores and

Re: [SAtalk] SA false positive

it too literally for our needs. The intelligibility of the results is poor, which makes it hard to determine if they are right or wrong. -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ ___ Spamassassin-talk mailing list [EMAIL PROT

[SAtalk] way to override system-wide whitelist?

o-inc.com which spams me regularly. I don't count them as "opt in" or "requires subscription" when all that means is that someone ELSE can type my email address into a form and I start getting junkmail. Mypoints seems to have given up after I bounced all their mail for a

Re: [SAtalk] How many emails/second does you server handle

er second thoughput using spamd. Sounds like spamd/spamc is a little faster, but less still less configurable... -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ ___ Have big pipes? SourceForge.net is looking for downloa

Re: [SAtalk] Lots of stuff gets tagged as positive, regardless of score!

re it exits nonzero for negative scores too. Different problem, though. -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ ___ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the r

Re: [SAtalk] Lots of stuff gets tagged as positive, regardless of score!

On Sun, May 19, 2002 at 11:12:18AM -0700, Craig R Hughes wrote: > Ben Jackson wrote: > BJ> There is a bug with -e (or whatever the 'exit code' flag is) where it > BJ> exits nonzero for negative scores too. Different problem, though. > > It's doing what now?

[SAtalk] URI rule with = doesn't work?

/^https?\:\/\/\S+\?id=/is Since this is a fine perl pattern (which works with perl -e) I'm assuming there's something wrong with the buffer I'm comparing to. I can match the '2011602' fine, so it's not truncated. What's going

Re: [SAtalk] URI rule with = doesn't work?

?idchr(hex(20))11602 It must be the one in `get_decoded_stripped_body_text_array' since it's the only one I see missing the `e' flag to make the sub work. However, the message is not quoted printable (I was testing on your reply, which has the same problem and no mime at all). -

Re: [SAtalk] Seeking a cure for thrashing

to force them to serialize: :0fw:$PMDIR/spamassassin.lock | spamassassin -P -F 0 I use it as a filter, hence the f flag, but you can use a lockfile with a delivery rule as well. If you have multiple points where you can run spamassassin from your procmailrc, just use the same lockfile on each.

Re: [SAtalk] Interview with "Spam King" Scelson

*know* you're on my list. Or my friend Michael's list, or my friend Bob's list... -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ --- This sf.net email is sponsored

Re: [SAtalk] Really bad false positive

. This is clearly a legitimite mail. The caps thing might be a character class problem. When I first installed it, SA didn't claim to require perl 5.6+, but it used regexps that did, like /[:lower:]/. Those are legitimate in perl 5.0, too, but they mean something quite different. -- Ben

Re: [SAtalk] False positive

installed SA by looking through my "receipts" folder (Amazon, Buy.Com, eBay, etc) and my (genuine) mailing list acknowledgements for elements unique to me. -- Ben Jackson <[EMAIL PROTECTED]> http://www.ben.com/ --- This sf.n