RE: [SAtalk] Export spam from Outlook in order to run sa-learn

2004-01-21 Thread Bret Miller
Title: Message I use an IMAP account. Move the message to an IMAP folder, then you have access to the source of the real message.   Alternatively, I have used a product called "SpamSource" in the past that will copy the source of the message to the clipboard. Then you can paste it into notepad a

[SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Bret Miller
Has anyone successfully made SA on Windows with Perl 5.8.2? I finally gave up on it and went back to Perl 5.6.1. Any suggestions? Bret --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Int

RE: [SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-21 Thread Bret Miller
> I downloaded the .srpm and built it. It just uses make. > (all of this under cygwin). > > If this isn;t your environment, I'm not sure how I can help > further. I did want you to know that it is working under > Perl 5.8.0 though. OK... I'm running it under ActivePerl 5.6.1 natively in Windows

RE: [SAtalk] Making SA on Windows with Perl 5.8.2

2004-01-22 Thread Bret Miller
> While I haven't done what you are looking for, I'd be > most interested in any info you get off-list. I am getting > ready to embark on this same process for a customer and would > love to have the dirty insight before I begin. OK... While you might stumble across this on Bugzilla if you

RE: [SAtalk] Activeperl taxing the cpu

2004-01-22 Thread Bret Miller
> I have sa 2.55 running fine with activeperl on a 3.06 ghz > 512megs ram system. My only issue is that occasionally the > multiple perl sessions will bring the processor to a crawl > which is in turn causing problems for other programs running > on the server. > > Is there a way of getting better

RE: [SAtalk] Help! (Dumb noob questions about upgrading and other stuff)

2004-01-26 Thread Bret Miller
> But now I'm faced with the daunting task of upgrading (via > CPAN on RH 7.2, > and I don't know squat about CPAN) from 2.55. Upgrading is a good thing. However, since I know pretty well nothing about Linux and precious little about CPAN, I'll leave this part for someone else... > Beyond that "m

RE: [SAtalk] bigevil; chicknpox; weeds...

2004-01-26 Thread Bret Miller
> What is your opinion to that cf's? > Does it make sence to take them all, or maybe only parts of > them? Is it a good solution to install them whithout realy > knowing how the rules are build? Only for private or also > good at company? It's always good to start slow in my opinion. We have backh

RE: [SAtalk] Lint error with chickenpox v 1.11

2004-01-27 Thread Bret Miller
> Hi Jennifer, > > When running lint on the latest chickenpox (1.11) I get this error: Current version is 1.14 accord to the file I just downloaded. > Any clues? Make sure that how you download the file doesn't cause line breaks. Bret ---

RE: [SAtalk] Help! (Dumb noob questions about upgrading and other stuff)

2004-01-28 Thread Bret Miller
> >Yes, SA logs by default. > > Where might it be logging to? I can't find anything in > /var/log/ and it's > not putting anything in to my CommuniGate logfile. I just > see CGPSA being > called, and then the message being re-inserted into the queue > after it's > been scanned. > If it's logging

RE: [SAtalk] Does 2.63 put lines into msg body?

2004-01-29 Thread Bret Miller
> Just wanted to find out if verson 2.63 inserts lines into > message body of messages it sees as spam. Currently using > 2.60 which does do that. > > Or maybe its configurable and I can set it so it doesn't do > that. Confining insertion to headers only? It shouldn't be modifying the body of a m

[SAtalk] 2.6 is AWESOME! Thanks

2003-09-26 Thread Bret Miller
Took the plunge and upgraded from 2.54 to 2.6 yesterday. 1 mailing-list false positive over night. But 2.6 is catching a lot more spam than 2.54 here. Awesome! Thanks! Bret --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven

RE: [SAtalk] Can't Get Bayes Working in 2.60

2003-09-29 Thread Bret Miller
> I have stock spamassassin 2.6 RPM running on redhat 9 with > DB_File RPM > installed as well. I dont think bayes is working however > because I get this > error when running dump: > > >>sa-learn --dump > Use of uninitialized value in numeric lt (<) at > /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAss

[SAtalk] RE: Upgraded to 2.60 now all mail scores 0

2003-09-29 Thread Bret Miller
> After upgrading today, all mail is showing 0 hits. If I run > the same mail using spamassassin -D http://thinkgeek.com/sf ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] RE: Memory utilization buildup

2003-09-29 Thread Bret Miller
> I've somewhat tracked that every "check" results in .5 - 5MB~ > extra memory utilization. As well, I've noticed that it > seems that "timelog" is the source of the "leak"... If you > want to call it that.. I'm sure there's a good reason that > it's logging, and using that memory.. "timelog" i

RE: [SAtalk] Automating usage of sa-learn

2003-09-29 Thread Bret Miller
> Has anyone automated the saving of attachment files so that > spamassassin's sa-learn command can be run by a cron job? > (I'm thinking it might be nice to have [EMAIL PROTECTED] and > [EMAIL PROTECTED] so that users can forward their ham and > spam...and that I won't have to worry about keeping

[SAtalk] Cannot open bayes.. R/W lock failed

2003-10-01 Thread Bret Miller
SA 2.60 on Windows 2000 under CommuniGate Pro using CGPSA (which calls SA through the perl object, not using the .bat file), but is single-threaded under Windows. I regularly see the following error message in the log: Cannot open bayes databases C:\Documents and Settings\Default User.WINNT/.spama

RE: [SAtalk] What is the current preferred spam threshold?

2003-06-25 Thread Bret Miller
> > So I was curious if 5.0 was a good setting or if I should set it > > higher to like 7.0 or 5.5 or if I should just leave it as is. :) > > > > 5.0 works very well with 2.60 and also did with 2.55, just > that you had some more false negatives. Probably depends on your environment. I use 8.0 he

[SAtalk] New Obfuscation Technique?

2003-11-10 Thread Bret Miller
Saw a few of these come through last week. Guess I need a rule upgrade to catch this? --- the forwarded message follows --- --- Begin Message --- Title: The money was subsidized to nothing when I made up a stupid sentence. The Rock's biggest devotee has got to be Laura.7758Xn3565V852B1z6097jmJeec

RE: [SAtalk] New Obfuscation Technique?

2003-11-10 Thread Bret Miller
> This is the spammer trick of saying the email is from you, to > you. So it got Whitelisted. Here is _A_ solution. I believe > the newest version of SA also solves this: Actually, if you'd checked the SA headers, you'd notice that AWL didn't seem to come into play here. It just didn't hit enoug

RE: [SAtalk] New Obfuscation Technique?

2003-11-14 Thread Bret Miller
> It did however use a trick to avoid the standard > FROM_AND_TO_SAME so your > rule can help out by adding some score.. However, 104.1 is a > bit excessive, > since there's no white list to over-ride. (Bret is smart and did not > whitelist_from himself). No whitelist of myself necessary here as t

RE: [SAtalk] How do I catch obfuscated characters?

2003-11-14 Thread Bret Miller
> I'm new to the list, and I'm trying to figure out a way of detecting > words with obfuscated characters (i.e. "@pp!3", "app13" = "apple"). You could try using popcorn, weeds, and backhair rules. You can get them here: http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm Bret

RE: [SAtalk] Rules, rules and more rules

2003-11-21 Thread Bret Miller
> Having only recently installed SA I'd like to ask about the > various rules files that abound. > > Is there a listing of the common rules and their target? Well, Chris Santerre has a site that groups some of the common rules together. It's under development and you'll find it at: http://www.me

RE: [SAtalk] 'add_header' ignored? (SA 2.60 on FreeBSD 4.7)

2003-11-24 Thread Bret Miller
> The messages processed by SpamAssassin come through with a header > that says something like: > > X-Spam-Status: Yes, hits=5.5 required=5.0 > > My problem is that I'd like to change this header so that it includes > a list of the tests that matched - but nothing I change in the > configura

[SAtalk] Rule for gappy text?

2003-11-25 Thread Bret Miller
Title: Message Anyone have a good rule for catching gappy text like the following message. It seems like with all the nice rules we have to catch hidden HTML tags, that writing a simple rules to catch a bunch of underscores or dots shouldn't be so hard... but then, I still need to study regex...

RE: [SAtalk] SA on windows??

2003-11-26 Thread Bret Miller
> Hi Paul, > > On a email server? > > Thanks - Nick Tong Which server? I'm running it with CommuniGate Pro on Windows. It's awesome! Bret --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more

RE: [SAtalk] making my own Evil rule list

2003-12-10 Thread Bret Miller
> I am pulling my example off the following url. > > http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf > > I have setup the following rule in my user_prefs file. > > uri EVILLIST_2 /\b(?:dubnh\.us)\b/i > describe EVILLIST_2 Generated EvilList_2 > score EVILLIST_2 3.0 Uri is a priveleged