how to I fix it?
Chris
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
h. Guess I've got a
lot to learn.
Thanks for any advice.
Chris
--
Regards
Chris
A 100% Microsoft free computer
Registered Linux User 283774 http://counter.li.org
8:34pm up 21 days, 6:13, 8 users, load average: 0.47, 0.36, 0.43
---
..
ONCE im done will all that I will let that run a while and make sure all
that works then move on to spamass milter..
(in case I have trouble with the milter I still have the spamc setup and
running)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
Chris
ssage-
From: Craig R Hughes [mailto:[EMAIL PROTECTED]]
Sent: Saturday, May 11, 2002 12:13 PM
To: Chris
Cc: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Newbie - spamc d spamass milter questions
Chris wrote:
C> there must be a way to place spamc in the /etc/procmailrc account for
C> system wide
so
far!), logging, what are "evil rules" and general management. I'm finding a
lot by simply reading this list, but I wonder if I'm simply looking in the
wrong places?
Any help or thoughts are appreciated.
Chris
---
This SF.ne
H "dropping" their boxed sets is really,
really
> > overblown. They will continue to make updates available, and they will
> > release new distributions. You just won't be buying them in stores.
> >
> > William L. Polhemus, Jr. P.E.
> > Polhemus Engineer
nk this thing about RH "dropping" their boxed sets is really,
> >>> really
> >>> overblown. They will continue to make updates available, and they will
> >>> release new distributions. You just won't be buying them in stores.
> >>>
So if I decided to bail on CPAN and stick with RPM's. Does anyone have any
instructions to:
a) deinstall the CPAN modules currently loaded
b) create/install the RPM modules needed for SA, sendmail and procmail?
Chris
---
This SF.net ema
> rpmbuild -ta Mail-Spamassassin-2.60.tar.gz
Thanks for that tip. Running it produced:
perl-Mail-SpamAssassin-2.60-1.i386.rpm
spamassassin-tools-2.60-1.i386.rpm
spamassassin-2.60-1.i386.rpm
What does perl-Mai do? I assume all three need to be installed?
--
use_pyzor ( 0 | 1 ) (default:
1)
Whether to use Pyzor, if it is available.
Could anyone let me know which it is, and perhaps
the web page should be updated with this info?
Chris
bout the first line and
suspect it's an error. I tried to sa-learn --rebuild but that didn't seem to do
any good either.
Suggestions?
I know there was a thread about this earlier this
week, but I went and deleted the messages (DOH!).. Is there an archive
somewhere?
Chris
nyone clarify what the above line is
doing with regard to spamc or spamd and also help me change the configuration to
use spamd by default?
Chris
> Looks like you really need to go back and actually read the docs, and
> readme file etc, and come back and have another go. spamassassin is
> spamassassin. spamc is spamc.
That's actually part of the problem. I've had a hard time finding anything I
can read except the readme's and the perldoc.
Dan,
> Client/server is a concept it sounds like Chris (apologies if I
> attribute part of the above to the wrong person) may not have run into.
Thanks for the compliment that I'm too young to have known about
client/server, but unfortunately I'm old enough to have been in the i
s, but my install and all dependancies weren't complete.
I only found this out by guessing at the -D option for spamassissin --lint.
Would be nice to see this documented on the product home page. ;-)
Thought I'd share the good news in case anyone else was also in a
ocumentation link) I
now don't see that verbal redirector. Either I was seeing things or it
changed.. either way, now I see the docs which have been hugely helpful.
Thanks,
Chris
---
This SF.net email sponsored by: Enterprise Linux Foru
I had trouble with sa-learn too and it was permission problems in the end.
Make sure you are running the command as the person you want to check rather
than root. Also, use the debug flag (-D) and then you'll get a lot more
info.
- Original Message -
From: "Joseph P. Wetstein" <[EMAIL P
are to the user in question and are writable to that
user.
d) as Brian said, it won't relearn messages you've learnt already.
Try those things.. but above all, remember the -D option is your friend!
Chris
---
This SF.net email is spo
cy tried to install perl 5.8 (I am running 5.6). I interrupted
that (no traces of perl 5.8 on my machine).
Any Ideas?
Thanks a lot
Chris
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Po
don't need a MTA.
=0=0=0=0=0=0=0=0=0=0=0=0=0=0=0=0=0=0
Chris Fortune
Fortune's Web Computer Services
Nelson, BC, Canada
V1L 2W3
ph#: 250 505-5012
email: [EMAIL PROTECTED]
website: http://cfortune.kics.bc.ca/
=0=0=0=0=0=0=0=0=0=0=
Hello,
Im getting the following error message when running spamd,
--
(chris)(ralph|.spamassassin)$ Failed to run header SpamAssassin tests, skipping
some: syntax error at (eval 15) line 59, near ") ~"
syntax error at (eval 1
e other message from a different source
that did this as well.
Thanks
Chris
[EMAIL PROTECTED]
---
[This E-mail scanned for viruses by Declude Virus]
---
This sf.net email is sponsored by: Influence the future
of Java(TM) technology. Join the Java
ly got a rule to nail that sucker and now I'm not
getting any :(
--Chris (Where is my spam?) Santerre
> -Original Message-
> From: Ralf Guenthner [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 7:22 AM
> To: Sönke Ruempler
> Cc: [EMAIL PROTECTED]
> S
ayes a corpus of Ham.
Getting them to do that is somewhat more problematic...
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED]Yahoo IM: chrisnbarnes
Comp
that
address is in replies to people that contacted me first. I do not send
out email to more than 1 person at a time using that address (for any
reason).
Ergo - .biz addresses are no more defacto spam than a .com address.
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Sorry it took so long, I was waiting to hear back from Fred. He is trapped
in the North :)
Veriosn 1.14 has been posted to web with Bart Schaefer's changes! Nice work
Bart!
http://www.merchantsoverseas.com/wwwroot/gorilla/99_FVGT_Tripwire.cf
Chris Santerre
System Admin and SA Custom
Not that I don't like this discussion, but this really is getting way off
topic for Spamassassin.
Can it be taken offlist now?
--Chris
> -Original Message-
> From: Brian May [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 12:30 PM
> To: Greg Cirino - Ci
This thread is useless without pics!
Oh wait, sorry.
This post is useless without the spam! :)
Try the new version of Tripwire (1.14) posted today. It's been beechwood
aged for twice the flavor!
--Chris
> -Original Message-
> From: Steve Thomas [mailto:[EMAIL PROTEC
Fred thawd out. Added the PGP stuff that was requested. Update posted to my
site. Link in sig.
Who says opensource doesn't respond quickly?
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the
$/
What do you think?
And I've looked at the numbers. The spam traffic is still increasing since
the begining of the year, but my MTA level denials have also increased. The
guys at the DNSRBLs are really doing a bang up job. So the amount of spams
that gets caught for me to play with have gone
that you don't fully understand to under .50 (Well
except for Bigevil!)
So the answer to your questions is.soon. We are woking on cleaning up
what we have now.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
ic ends up being a spam tag. :)
--Chris
> -Original Message-
> From: Steve Thomas [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 4:30 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] most rules hit (so far)
>
>
>
> You asked for it!
>
> http
! lol.
--Chris
> -Original Message-
> From: Daniel Kleinsinger [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 10:10 PM
> To: Chris Santerre
> Subject: BigEvil FP
>
>
> BigEvilList_37 hits on biz.yahoo.com which gave me an FP on an email
> from t
nly have 64 megs! SA
is taking only 20 megs with all those rules loaded.
Take each one out seperetly and see if they each run.
I'll try to check in tomorrow.
--Chris (Under 35 degrees, New Englanders just call it cold!)
> -Original Message-
> From: Scott Harris [mailto:[EM
cause
the only place that has a clue how to work on my car is 40+ miles away!
So for those people I was to meet, I'm sorry I missed you! Looks like its
webcast for me again. Next year I won't drive my preeeciiooouusss. :(
I'm now getting hot choco intravenously.
Chris (So sad
UBE/UCE policy, or I
will put them back in.
--Chris (cold, so very cold) Santerre
> -Original Message-
> From: JRiley [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 16, 2004 10:16 AM
> To: Overdijk, Harrie; 'Chris Santerre'
> Cc: 'Spamassassin-Ta
This is some pretty good info. Can you trow something up on either wiki
about exim users/lots of rules/long headers/and default buffer size? I'm
sure others might start having this problem.
good find!
--Chris
> -Original Message-
> From: Zarjazz [mailto:[EMAIL PROTECTED]
>
"Rules De Jour": An automated way to keep up with the latest rulesets.
http://www.exit0.us/index.php/RulesDeJour
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
http://www.sandgnat.com/cmos/
-
amp; __VDRUG3 && __VDRUG4)
describe MRWIGGLY Mr. Wiggly enhance drug spam.
score MRWIGGLY 1.0
rawbody __VDRUG1B /^$/
rawbody __VDRUG2B /^pic is loading/
rawbody __VDRUG3B /\/(?:[a-zA-Z]|\d)\.gif\" border\=0\>\<\/a\>$/
rawbody __VDRUG4B />0pt out<\/a>$/
meta MRWI
spams and any methods in spamassassin to stop them ?
Regards
Chris
Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005
how to convert all my bash-isms to POSIX, by all
means share the knowledge :).
Thanks.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
http://www.sandgnat.com/cmos/
---
The SF.Net email is sponsored by Ecl
oned a few times of
course. :)
There is some other small things I still want to digest and talk to the rule
writers about. Talk about becoming less reactive got me thinking on some
stuff. I urge anyone with the time to view the webcasts. I understood a HELL
of a lot more then last year ;)
Hopefuly I&
to find them
by now, you must be under a rock (Or a Colts Fan!) ;) Go Pats!
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, but the
_rb_HTML_HAS_AHREF && __FVGT_rb_HTML_HAS_IMG &&
> __FVGT_rb_A_THEN_IMG)
> describe FVGT_m_IMAGE_ONLY_SPAM Short HTML message with IMG
> and A HREF
> score FVGT_m_IMAGE_ONLY_SPAM 3.5
>
>
> The size of 80,375 might need to be tweaked but this rule
> does
1 ] ; then
/etc/init.d/spamassassin restart 2>/dev/null 1>/dev/null
echo "Restarted SpamAssassin"
fi
--
Chris Petersen
Programmer / Web Designer
Silicon M
ore rules_du_jour was invoked). I also changed the
default behavior when running interactively to output the debug
information.
I put the new version (1.04) up at:
http://sandgnat.com/cmos/rules_du_jour
If this doesn't address somebody's issue or suggestion, yell again
sting,
having to complete work for my real job, and maybe some time with the family
;)
I'll take a look at all of these. I prefer to have an example of each spam
that I'm adding to the list. This way if someone asks, I can show them :)
--Chris
> -Original Message-
> From: Da
_UnsubscribePHPtext uri to unsubscribe link
> score RM_uwd_UnsubscribePHP3.000 # 236s/0h of 92209
> corpus (74874s/17335h) 01/17/04
>
These last four rules are SURPRISING! I would never have guessed those
results! Looks good!
--Chris
-
I was hoping more people would be running this by now. What is the average
scan time per msg when using this? Any timeouts? I know this was being
worked on for 2.70, but heck you got it here as a patch already!
--Chris (Really needs to upgrade but still proving a point.)
> -Origi
an go ahead and grab the 90_FVGT.cf rules.
--Chris
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Sent: Monday, January 19, 2004 11:22 AM
> To: [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: RE: [SAtalk] UPDATES Tripwire 1.16 and B
review by IT for FPs.
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
vagabond
Sent: Tuesday, January 13, 2004 5:07 PM
To: 'Dan'; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Exchange and autolearn
I do something like this - SA/spamass-mil
Huh? That was posted 2 days ago! And I had tested it longer then that! IF
there was an error, I would have heard about it within an hour of posting.
What kind of errors in the log? ANyone else having a problem
--Chris
> -Original Message-
> From: Carl Chipman [mailto:[EMAIL PRO
e him at the keyboard now, with a cig hanging from
his mouth and a bottle of JD in one hand! OH man.I need to photoshop a
pic like that!
Thanks for the laugh! I needed it today as well! Sprinkler pipe in building
froze and burst over the weekend. 1 CPU gone. *whew*
--Chris (Pats by 10 point
> -Original Message-
> From: SpamTalk [mailto:[EMAIL PROTECTED]
> Sent: Monday, January 19, 2004 3:32 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] BigEvil Archive
>
>
> > -Original Message-
> > From: Chris Santerre [mailto:[EMAIL PROTECT
Bah! What was that quote? Something about real men put there files on the
internet and letting the world be their backup? Theo has it. :)
--Chris (OH I hate EDI! Standard my #$^!)
> -Original Message-
> From: Gary Smith [mailto:[EMAIL PROTECTED]
> Sent: Monday, January 19, 200
> Lets not forget parentheses. Here is how I would have it look.
> [\s(\(|\-|\)\.]+
> Well I hope it is correct.
[\s\(\)\-\.]+
--
Chris Petersen
Programmer / Web Designer
Silicon Mechanics: http://www.siliconmechanics.com/
Blade Servers: http://www.siliconmechanics.com/c
ching as much as possible, and go with
[\s\(\)\-\.]+ (heck, I would probably go as far as just doing \W+ or \W*
to catch any characters the spammers might try to throw in).
--
Chris Petersen
Programmer / Web Designer
Silicon Mechanics: http://www.siliconmechanics.com/
Blade Servers: http://www.
ce, so I
> thought I'd pass the idea on :)
Might be neat, but I think this sort of thing is best left to scripts
specifically for each operating system. For instance, both razor and
pyzor are kept up to date via apt-get on my Debian system.
--
Chris Thielen
Easily generate SpamAssassi
FVGT - Contains a URL in the
> BZ, TC, US or
> WS top-level domain
>
Yup, this is correct. We are going thru all the rules in the SARE and will
prbly rescore them all based on RM's formula. This one seems a tad high :) I
would lower that to around .45-.65 for my taste.
HTH
--Chris
3 Fax -- 4156341323
Domain servers in listed order:
NS0O01.GOODWEBRX.COM
NS0O01.MYEFUTURE.NET
Chris Santerre
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integrati
Just posted 2.60L.
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, bu
> describe SUBJECT_VICODIN Mentions vicodin
> > score SUBJECT_VICODIN 4.0
> > (I took this example from Chris' site
> http://sandgnat.com/cmos/cmos.jsp
> > )
David,
Are you aware that the rule you have asked about does not detect
obfuscation? The rules at the cmos.jsp
http://sandgnat.com/cmos/rules_du_jour
I save
WY to many emails :)
--Chris
-Original Message-From: JRiley
[mailto:[EMAIL PROTECTED]Sent: Tuesday, January 20, 2004 1:52
PMTo: [EMAIL PROTECTED]Subject:
[SAtalk] Automated ruleset download
Just curious, if there is
s up spamvertised urls in certain blackholes
(those CHINA* scores are indeed very high; I've been meaning to lower
them, but I'm not very motivated since I haven't personally seen any
false positives yet)
The LOCAL_OBFU are generated from http://sandgnat.com/cmos/
HTH
--
Chris Thi
n.com/[EMAIL PROTECTED]@.ee8c9cf
Might have better luck finding experienced people there.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.com/cmos/
---
The SF
Just posted 2.06M wich contains 1 single additional entry for:
oem-expert.biz
Why just for one domain? Because they are doing a dictionary attack on a
fellow list member resulting in a DOS.
Let the larting begin!
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
Chris Santerre
pparently you only subconsciously knew what the term "magic" meant :)
>
>
> >Thanks to Ralf and Matt who both suggested this.
>
> YW.
>
I agree, "magic" is a little confusing. I suggest the devs change it to
"one_ring_to_bind_them_all". That
I'm not sure where the post is, but about 3 weeks ago I think Dallas put a
semi-end to the spell-checker debate :) He ran one and the outcome wasn't so
good.
--Chris
> -Original Message-
> From: Charles Gregory [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 20
t;
I also try the same. Some ISPs are useless to try to talk to, Above.net.
THey will end up blacklisting the complainee! (Is that a word?) :)
I'm trying to find some stats on spam origins. Particularly by ISP. I see
very little spam coming from cox.net cable modems vs. a buttload from
Comc
> http://www.eclipsecon.org/osdn
> ___
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfus
(not
data) of those 5%.
ISPs used to complain about the costs of hardware vs. traffic. I'd say this
would help them in the long run. DON't raise my broadband bill, decrease the
spam traffic on your net!
--Chris
> -Original Message-
> From: James [mailto:[EMAIL PROTECT
iff...) need Popcorn...
So if I grab Jennifer's backhair I don't need any popcorn? There must
be some hidden meaning there.
I've removed popcorn from the default list of thinggies to snag in
RulesDeJour.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated sp
udes ANTIDRUG and
EVILNUMBER configured by default. POPCORN has been removed from the
default config. Thanks to whoever added configs for ANTIDRUG and
EVILNUMBER to the wiki.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http:/
aaap :)
Just send them to me offlist. However FP reports you might want to copy
here. As I remove them from the NEXT update. But people might want to remove
them right away. They still trickle in now and then.
--Chris (bored today for some reason)
> -Original Mess
er on the net. They are busy scratching out a living.
It needs to be made safer by the people who understand it. I can only effect
my immediate family/friends. And despite my best efforts, they still get
whacked now and then.
Airbags make me safer. But there wasn't anyway in hell I was going t
egit and not a scam, then why oh why on earth would they
hire a spammer. Also the products website is no where to be found in the
email source. Only thru a redirect.
I'm thinking the product website should be larted just for hiring the
spammers!
mesg attached.
Chris Santerre
System Admi
On Wed, 2004-01-21 at 18:23, Erik Slooff wrote:
> Hi Chris,
>
> Small change for RulesDuJour: when sa is not in path lint will not succeed
> (line 313). Maybe you could add a variable that contains the path to sa in
> the settings?
>
> Erik
>
Will do. Should have it
Soon there will be one place to go ;)
> -Original Message-
> From: Frank Pineau [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 20, 2004 8:51 PM
> To: Spamassassin-Talk (E-mail)
> Subject: Re: [SAtalk] UPDATES Tripwire 1.16 and Bigevil 2.06k
>
>
>
> >http://www.merchantsoverseas.com/
settings when an updated
version of rules_du_jour is available:
http://www.exit0.us/index.php/MyRulesDuJour
- I moved the download urls: http://sandgnat.com/rdj/rules_du_jour and
http://sandgnat.com/rdj/my_rules_du_jour
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated
core up to 5.0 for that rule.
--Chris
> -Original Message-
> From: John Fleming [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 22, 2004 8:53 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] v+word problem
>
>
> BTW, I AM using BigEvil and Anti_D
On Thu, 2004-01-22 at 14:49, Smart,Dan wrote:
> Chris:
> Great job on the scripts. I have modified the munging on Tripwire (set name
> to TW) and BigEvil (comment out WXYZ). How do I add these custom munges to
> my_rules_du_jour?
Dan,
I'm going to suggest that you igno
> Brad
>
header __CS_FROM_ME From =~ /[EMAIL PROTECTED]/i
header __CS_TO_ME To =~ /[EMAIL PROTECTED]/i
meta CS_SPAM_TRICK __CS_FROM_ME && __CS_TO_ME
describe CS_SPAM_TRICK Spammer forged From + To my domain.
score CS_SPAM_TRICK 114.11 # Silly, isn't it?
Change to your own
. The only way to do this is with an EVAL function. Not a
bad idea to look at the overall length of email and see what percentage of
it is html link. SA has a rule like this, but might need some tweaking for
smaller emails?
--Chris (Already having a day from hell.) Santerre
--
ev/null" redirect. Run it interactively and see if
there's anything interesting being dumped to the console.
As for "postfix start" even if "spamassassin restart" fails, use ";"
instead of "&&".
--
Chris Thielen
Eas
il server I downloaded and my run for my home domain uses SA, I'll
> probably be more active. :)
Always good to have another helpful person around!
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.
> the archive only shows till Dec 2003. Any way to see the archives from
> January?
http://news.gmane.org/gmane.mail.spam.spamassassin.general/cutoff=40042
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
htt
Why does it take your SA 69 seconds to process an email? Our systems
take about 3 seconds, using network tests and bayes with
Postfix/amavisd-new.
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Thomas Kinghorn
Sent: Friday, January 23, 2004 5:32
I'm sure this is an FP left over from my pull from initial scripts. I don't
remember adding them by hand. They check out as legit. They will be removed
from next update. (Which was meant for last Sat. but something came up.
--Chris
> -Original Message-
> From: Paul
Your Bayes must be hosed if what you think is spam gets BAYES_00.
Chris
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul
Diaguila
Sent: Monday, January 26, 2004 10:44 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] too much spam...
Greetings
that is for
another list ;)
--Chris
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 23, 2004 11:50 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] bigevil_54 smonitor
>
>
>
>
> smonitor in bigevil_54 would
;t fun being the "helpdesk to the
community").
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED] Yahoo IM: chrisnbarnes
Computer Systems Manager
Doh!
*humble appologise*
You are correct sir! Removed in next update. Don't ask what is taking so
long for the next update. You don't want to know :)
--Chris
> -Original Message-
> From: Kelson Vibber [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 27, 2004 1
SA_RESTART"
instead of just
$SA_RESTART
This should do the trick, methinks.
(Version 1.07e is up)
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.com/cmos/
-
like so:
spamassassin -x
SA will read all the *.cf files in ~/.spamassassin/user_prefs/ just like
it does for the system-wide /etc/mail/spamassassin/.
Hope this comes in handy for those of you who use user_prefs but don't
administer the machine SA runs on.
--
Chris Thielen
Easily gen
story :-)
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
t installed
on their interactive machine, sa-learn isn't there.
My question - do we need to install SA on each Linux machine, or is
there some minor bits (the sa-learn module, DB_File, etc) we can simply
copy over?
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + +
/mail/Spam/Filtered mailbox, I would rather
a) run sa-learn on that message
b) dump that message into /dev/null.
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED] Yah
trial_tripwire.cf
input file is tripwire.cf
output file is trial_tripwire.cf (with all scores set to 0.01)
copy trial_tripwire.cf to your /etc/mail/spamassassin
Repeat for each ruleset you are trying out.
HTH.
--
Chris Thielen
Easily generate
report them to playaudiomessage.com. But by the looks from their
website, they don't want to hear from you anyway.
They stay.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the sp
It's great, I run it at the MTA level and it drops tons of junk without
any false positives to date (after about 4 months usage).
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
Wilder
Sent: Monday, January 26, 2004 5:50 PM
To: Spamass
1 - 100 of 1090 matches
Mail list logo
