On 15 Jan 2004, Rocky Olsen wrote:
> I too would greatly appreciate any information - as we have 9 boxes
> doing Spam scanning. Anyone tried this?
>
>
> On Thu, 2004-01-15 at 13:31, Mike Jackson wrote:
> > If you have multiple SA filtering boxes, is it safe to NFS-mount a partition
> > with a syst
On Wed, 14 Jan 2004, Jonathan Nichols wrote:
> Did the CAN-SPAM act really take away a citizen's right to sue spammers?
> I'd like to write to this marketing company and have them provide me
> with absolute proof that I signed up for *anything* at all. (they won't
> be able to) I think the whole "
On Fri, 16 Jan 2004, Ross Vandegrift wrote:
> On Thu, Jan 15, 2004 at 02:20:16AM -0600, David B Funk wrote:
> > If you SMTP reject the spam, it never hits your queue, so no problem
> > with the garbage piling up and no bombarding poor innocent 'joe-job'
> > victims.
> --On Friday, January 16, 2004 12:13:21 -0600 Carl Chipman
> <[EMAIL PROTECTED]> wrote:
>
> > For the new people on the list, I was wondering what the following
> > acronyms mean:
> >
> > LART
> Luser Attitiude Readjustment Tool
> Reporting the offending user to <[EMAIL PROTECTED]>
> > UBE/UCE
> U
On Tue, 20 Jan 2004, Terry Shows wrote:
> Maybe it is good for -16, but in every case I looked at that passed thought
> with habeas set, none of them set the violator, and every single one was
> flagrantly spam.
[snip..]
>
> The way it is now, it is just another header that can be added by a spamm
On Tue, 20 Jan 2004, Sean McCrohan wrote:
[snip..]
> The problem is that the moderation request the list sends to me gets
> wrapped in MIME, and SA (as currently installed) doesn't do a very good
> job of analyzing it, in part because there's a set of instructions stuck
> on the front that are the
On Tue, 20 Jan 2004, Charles Gregory wrote:
> Right now, there would be no statistics, because the text obfu has just
> started. But as a side note, we don't have the disk space to run Bayes for
> all our users though I'm getting awfully tempted to talk the boss into
> an extra disk or two. So
On Wed, 21 Jan 2004, Justin Mason wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>
> Will McCutcheon writes:
> >I am running SpamAssassin 2.61 with Sendmail 8.12.8 using Procmail 3.22.
[snip..]
> >A's IP as being in an RBL of dynamic IP's, despite my setting in
> >/etc/mail/spamassassi
On Thu, 22 Jan 2004, Peter McGarvey wrote:
> Greetings all,
>
> I have a mailserver which handles all my incomming and outgoing mail.
>
> Outgoing mail (stuff I send) is passed to the server via ASMTP.
> Incomming mail (stuff sent to me) comes in via SMTP. There is
> absolutely no way my server w
On Fri, 23 Jan 2004, Thomas Kinghorn wrote:
> Below are the headers & I have attached the mail.
>
> These are getting worse.
>
> To top it off, SA learned it as HAM.
>
> If anyone knows of any rules that could work on these mails, It would be
> greatly appreciated.
>
> Thanks All.
> Regards
> Tom
On Wed, 21 Jan 2004 [EMAIL PROTECTED] wrote:
> I want to be able to take an email message that may contain MIME and HTML
> and to strip it down to basically nothing but text. (I know that
> SpamAssassin already does this in large part so that it can analyze the
> message properly.) So I'm not actu
> |-Original Message-
> |From: Evan Platt [mailto:[EMAIL PROTECTED]
> |Sent: Wednesday, January 21, 2004 15:03
> |To: SpamAssassin
> |Subject: Re: [SAtalk] How to stop this kind of stuff?
Real easy, this is a predictable spamhaus, "Empire Towers"
Go check the records on this outfit at http
On Fri, 23 Jan 2004, Smart,Dan wrote:
> Humm
>
> This command works every time from command line, but not passed as a param
> from SA_RESTART.
> "postfix stop ; sleep 15 ; /etc/init.d/spamassassin restart ; postfix start"
>
> It runs the postfix stop and then quits. Any idea why? I can creat
On Mon, 26 Jan 2004, Paul Diaguila wrote:
> No Bayes db yet, but I would think the one rule would score it a 5
>
> Paul
>
> Covington, Chris wrote:
>
> >Your Bayes must be hosed if what you think is spam gets BAYES_00.
> >
> >Chris
[snip..]
> >Greetings
> >
> >Using SA Ver. 2.63 with Mimedefan
On Wed, 21 Jan 2004, Matt Kettler wrote:
> At 10:41 PM 1/20/04 -0600, C. Bensend wrote:
> >Is the problem that I'm _forwarding_ the tagged emails from one host
> >to the other? I don't have the capability to bounce, I can only forward.
>
> A forwarded message is a brand new message. That bran
On Tue, 9 Sep 2003, Sam Kalet wrote:
> I have a site where there are two external MXs and I have the same sitewide
> whitelist on each MX. The whitelist is defined in a separate config file
> (named local_whitelist.cf). I keep the authoritative copy of this file on an
> internal system. After m
On Tue, 9 Sep 2003, Matt Tencati wrote:
> Hi,
>
> We are using SpamAssassin in a site-wide configuration and I've been investigating
> the
> concept of spamtraps. Basically those old email addresses that collect nothing but
> spam.
> I'm curious if most people setup a mailbox to handle this or
On Wed, 10 Sep 2003, Jim wrote:
> On Tue, Sep 09, 2003 at 12:18:10AM -0400, Debbie D wrote:
> > 3 times today I noticed the server running very high loads of 4-6 and as
> > high as 10, normally I run 1% or lower usually closer to .3-.6%. Three days
> > in a row I have gotten over load notices.. To
On Wed, 10 Sep 2003, Alastair Battrick wrote:
> I'm having a problem installing SA 2.55
>
> The server is running Redhat 7.2 (I think) has 256Mb RAM and plenty of spare
> disk space.
>
> When I go to cpan, I can get and make Mail::SpamAssassin no problems, but
> when I 'make test' I get this:
[sn
On Thu, 11 Sep 2003, Abigail Marshall wrote:
>
> CW> Ok, I re-learned most of it :/
> CW> Does anyone have an idea why it can happen that
> CW> this database loses its content?
>
> I don't know but I have the same problem. It seems to
> happen when my bayes_toks file reaches about 5k.
>
> I run a
On Fri, 12 Sep 2003, AWShirley wrote:
> I'm trying to install DB_File from CPAN so I can use Bayes, but the install fails.
> I get these error messages:
>
> version.c:30:16: db.h: No such file or directory
> make: *** [version.o] Error 1
> /usr/bin/make -- NOT OK
> Running make test
> Can't
On Tue, 16 Sep 2003, Gary Carr wrote:
> SA is flagging 100% of the incoming email with the RCVD_IN_ORBS score. Even
> mail from our internal network. None of the ip addresses are listed in
>
> X-Spam-Status: No, hits=0.5 required=3.0
> tests=RCVD_IN_ORBS
> version=2.55
>
> Has the orbs.dorkslaye
On Wed, 17 Sep 2003, Kristoffersen wrote:
> Hi,
>
> Though I don't use spamassassin (yet), I've encountered some problems with
> others who use it.
>
> Mails that I send from my two domains: kristoffersen.us and
> kristoffersen.no are automatically marked as spam by spamassassin. After
> investiga
On Wed, 17 Sep 2003, Chris Santerre wrote:
> Check out the header from a spam we just got. Kind of funny in a sad way:
>
> ([EMAIL PROTECTED] is all I changed.)
>
> Received: from dazzlingstuarts.net ([218.5.5.35])
> by moglobal.com (8.12.5/8.12.5) with SMTP id h8HK6Sin019272
> for <[E
On Thu, 18 Sep 2003, Jeff Funk wrote:
> The header below is from an e-mail that seems to get through sa repeatedly on our
> Communigate server. There's no evidence that it's being scanned by sa at all. Is
> there something I'm missing here
>
> Microsoft Mail Internet Headers Version 2.0
>
On Fri, 19 Sep 2003, Michael W. Cocke wrote:
> here's part of my local.cf file -
>
> rawtext MSCUST6a /latest version of security update/i
> describe MSCUST6a another MS worm
> score MSCUST6a 5
>
> full MSCUST6 /latest version of security update/i
> describe MSCUST6 msjunk
> score MSCUST6 5
>
> an
On Fri, 19 Sep 2003, Chris Barnes wrote:
> piece of /etc/mail/spamassassin/local.cf:
> # Local Mods
> bayes_ignore_header X-PerlMx-Spam # make Bayes do it on its own
> header LOCAL_PERLMX_TAG_100 /X-PerlMX=~ /\b Probability=100\%/
> score LOCAL_PERLMX_TAG_100 5
> header LOCAL_PERLMX
On Wed, 24 Sep 2003, Daniel Bird wrote:
> A P2P DNSBL? interesting. I've also thought about this a little since
[snip..]
> DNSBL could learn from that seed other DNSBLS, and replicate the data,
> and then (maybe?) do the RBL lookups locally.
>
> Obviously, the file (zone) transfers involved would
On Wed, 24 Sep 2003, Abigail Marshall wrote:
> Here's the issue:
>
> System: Running SA 2.54, FreeBSD Unix, Berkeley DB 1.85
> (Hash, version 2):
[snip..]
> -Abigail
Abigail,
Where the heck did you manage to find V1.85 of the Berkeley DB kit?
It's ancient and buggy ( I was using it a decade ago w
On Tue, 30 Sep 2003, Mike Carlson wrote:
> I am trying to figure out a way to do something similar.
>
> I have it setup to use 5.5 as the minimum score. If it scores between 5.5
> and 10 it goes to the recipient as flagged spam, if it is between 10 and 15
> it would get flagged and forwarded to an
On Wed, 1 Oct 2003, Volker Kuhlmann wrote:
> > debug: bayes: DB_File module not installed, cannot use Bayes
>
> Sorry, a case of user-stupidity. Not being root I had to install in
> ~/lib/ and add a path to @INC in sa-learn, but got the path wrong.
>
> I still say it's a bug in sa-learn to not qui
On Tue, 30 Sep 2003, Steven Manross wrote:
> Would anyone find it beneficial to have this added to SpamAssassin, or
> is it just me? :)
>
> $status->check_internal_first($mail);
>
> Where check would be performed with "local_only" tests first... and
> then if it is tagged using locals only, you
On Tue, 30 Sep 2003, Patrick Morris wrote:
Check out MIMEDefang, amavisd, spamass-milter, or one of the other
packages that can tie SpamAssassin to Sendmail.
Vivek Kumar wrote:
>Hi there,
>
>I am using sendmail and wat ot install spamassassin. The way sendmail is
>configured is all the incoming m
On Wed, 1 Oct 2003, Bill wrote:
>
> > How do I set up Sendmail to reject email with a high score or
> > forward email to a local mailbox if it is within a certain
> > range of score?
>
> The way I would do it is with a procmail recipe. Configure spamassassin to
> use the stars header system and th
On Wed, 1 Oct 2003, Mike Carlson wrote:
> How do I set up Sendmail to reject email with a high score or forward email
> to a local mailbox if it is within a certain range of score?
>
> I am a sendmail n00b, and so far my google searches haven't gotten me too
> far.
OK, you need 3 pieces:
'spamd
On Wed, 1 Oct 2003, Pat Masterson wrote:
> Dave - what is the purpse of having required_hits at 6 and reject at 18?
> what do you do with the mail that rates more than 6? -pat
Because of the possibility of False-Positives, I don't want to risk
rejecting stuff that users might want. (faculty get r
On Wed, 1 Oct 2003, Thorsten Franzke wrote:
> Hi,
>
> I am having the problem that certain messages from my message board get
> bounced at gmx.de (large German freemailer) which is using spamassassin for
> header filtering.
>
> If I look into the X-headers I do find the following:
>
> X-GMX-Antisp
On Fri, 3 Oct 2003, Michael Schaap wrote:
> On 1-Oct-2003 01:11, David B Funk wrote:
>
> >Don't /dev/null the spam, reject it. Unlike the procmail/qmail/posfix-ites
> >you have the tools that enable you to "Do the right thing"(tm).
> >With SA+milter+sendmai
On Thu, 2 Oct 2003, Sean McCrohan wrote:
> Presently, because of limited system resources, I've set a very conservative
> max-scan-size for spamc - I don't want to burden the system with grinding
> through those large files. However, this generally means that large messages
> come straight through
On Tue, 7 Oct 2003, Adam Denenberg wrote:
> anybody sharing bayes over NFS, with any issues? I thought i read
> somewhere that somebody was sharing bayes over NFS with a netapp filer
> with no probs.
>
> anybody want to put in their $.02 to bayes over NFS.
>
> I am running 2.6 FYI.
Read the fo
On Tue, 7 Oct 2003, Tim B wrote:
> Problem in spamassassin 2.60 -- trusted relay
>
> There seems there might be a glitch in the detection of trusted relays
> which is causing RBL checks to be bypassed.
>
> Is there a way to bypass the autodetection of trusted relays and use
> only ones specified i
On Tue, 7 Oct 2003, O-Zone wrote:
> Hi all,
> here's my problem, AGAIN ! I've checked perms into /usr/share/spamassassin and
> are all owned by spamfilter user. This is my startup command:
>
> /usr/bin/spamd -a -C /etc/mail/spamassassin/ -d -u spamfilter -m 10
It may still be a permissions proble
On Tue, 14 Oct 2003, Louis LeBlanc wrote:
> Set up a pristine new email address, but DON'T GIVE IT OUT TO
> ANYONE.
> Everytime you get a spam with an unsubscribe link, follow it and
> unsubscribe this new pristine address. Nevermind who the message was
> sent to, I promise the unsub page won
On Tue, 14 Oct 2003, Chris Santerre wrote:
> OK, you all know I got the nasty email. You all know that my 'evilrules' has
> to do with spam hosts. The ones that host the images. Well this seems to be
> the way to attack the spammers.
>
[snip..]
> Since many spammers are resorting to image spam, I
On Tue, 21 Oct 2003, Simon Byrnand wrote:
> Since I use sendmail, which unfortunately doesn't have a proper way to
> limit local delivery concurancy, I'm now using a combination approach - I
> use -m 15, and return EX_TEMPFAIL for more than 40 simultaneous local
> delivery processes.
When sendmai
On Thu, 23 Oct 2003, Martin Schröder wrote:
> > harvest addresses off usenet. We also assume that they clean their list
> > when address appears to be bad. Has anybody tested this? As an
>
> If only...
>
> I get spam at addresses generated from Message-IDs. :-(
That kinda make sense, a Message-ID
On Fri, 24 Oct 2003, Bob Apthorpe wrote:
> Any system that relies on Captcha (find the hidden word in the image) or
> similar systems ties mail too closely to the web, causing trouble for
> people on text-only systems (e.g. the blind.) And if the C/R system is
>
Just to show how crazy it's gettin
On Thu, 23 Oct 2003, Mark Merchant wrote:
> not sure if this is a spamassassin or milter issue, but here goes.
>
> i've been running spammassassin 2.54 & spamass-milter for 6 months or
> so. yesterday i decided to upgrade to 2.6 ( via cpan ).
>
> now, the spamass-milter daemon seems to stop runnin
On Wed, 2 Jul 2003 [EMAIL PROTECTED] wrote:
> How does SA (spamd) querry the RBL's?
> Is looks like it uses the local systems resolve settings.
> The other RBL's work, but MAPS checkes the connecting IP.
> It also looks like i checks xx.in-addr.arpa and not
> rbl-plus.mail-abuse.org.
>
> "dig @eur
On Wed, 2 Jul 2003, Jim Ford wrote:
> On Wed, Jul 02, 2003 at 10:31:30PM +0200, Kai Schaetzl wrote:
>
> > no "extra". There is no difference in text/plain or HTML text advertising, so
> > why should one try to to match in mixed text and markup? I think this has also
> > been discussed here some we
On Sat, 5 Jul 2003, Jack Gostl wrote:
>
> > > Over the past several weeks, I've noticed an increasing amount of
> > > spam that is getting through SpamAssassin with scores in the 4.0-4.9
> > > range. This makes me wonder if perhaps some spammers have started to
> > > taylor their spams as follows:
On Tue, 8 Jul 2003, SpamAssassin wrote:
> Any ideas on how to get SpamAssassin to query one of the
> osirusoft mirrors? (Osirusoft has been experiencing
> DOS/DDOS on and off for a few weeks, but some of the other
> (not *.osirusoft.com) authoritive DNS seem to be working fine.)
>
> The SA con
On Thu, 10 Jul 2003, Chris Santerre wrote:
>
>
> I had a rule note on this from before. Haven't got to it yet. Basicaly
> because of the FP rate. I'm going to write a few quick rules that look for
> letterzeroletter and letter1letter. You can see why the FP rate would be
> high. But I would score
On Fri, 11 Jul 2003, Chris Santerre wrote:
>
> Usually write it like, /(f|ph)ot0|(f|ph)0to/i
>
Minor perl technicality, use the 'non rembering' version of the
grouping operator, (?: ... ). As you probably aren't going to
interpolate the match in a backreference, don't waste the CPU and
memory to '
On 11 Jul 2003, Yorkshire Dave wrote:
> On Fri, 2003-07-11 at 01:27, Simon Byrnand wrote:
> > At 21:19 10/07/03 -0300, Raul Dias wrote:
> > >Em Qui, 2003-07-10 às 20:03, Simon Byrnand escreveu:
> > >
> > > > >sendmail.cf
[snip..]
> > > > >HX-Envelope-From: $g
> > > > >HX-Envelope-To: $u
> > > > >
On Thu, 10 Jul 2003, Dan O'Brien wrote:
> Yorkshire Dave <[EMAIL PROTECTED]>wrote:
> > sendmail.cf
> >
> > #
> > # Format of headers #
> > #
> >
> > blah
> > blah
> >
> > HX-Envelope-From: $g
> > HX-Envelope-To: $u
>
> Most Excellent!!! Works li
On Tue, 15 Jul 2003, Simon Byrnand wrote:
> >I had several spams not too long ago in which all of them used the same
> >Message-ID. SA refused to learn from any of them except the first one.
> >What can be done to combat that? Of course, duplicate Message-ID's are
> >a violation of RFC's, but sp
On Mon, 14 Jul 2003, Luiz Lima wrote:
> How can I tell if bayes is actually working on my setup? I have a
> amavisd-new + sa setup and, although my bayes database gets updated and is
> checked when I run SA on it own, I'm yet to see any bayes rules being
> applied to e-mails I personally get (and
On Tue, 15 Jul 2003, Luiz Lima wrote:
> That should be enough to get me going, right? So, let me get back the my
> original question:
>
> How can I tell if bayes is actually working on my setup? I have a
> amavisd-new + sa setup and, although my bayes database gets updated and is
> checked when I
On Wed, 16 Jul 2003, Yackley, Matt wrote:
> Adam,
>
> Try something like this in SA's local.cf
>
> razor_config /var/amavis/.razor/razor-agent.conf
>
> >
> > -Original Message-
> > From: Adam Denenberg [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, July 16, 2003 9:19 AM
> > To: Spamassassi
It seems like upgrading from 2.53 to 2.60-cvs has thrown
off my Bayes scoring. Now most messages (even blatant 'ham')
get a bayes rating of 90% or higher.
I've rebuilt it with a "sa-learn --rebuild"
I'm using "DB_File -- 1.77" for the database, so it shouldn't
be the problem.
I have a reasonable
After installing 2.60-cvs I've noticed a number of FPs resulting
from SA misinterpreting dial-up RBL data.
In particular, it does not seem to recognise the source IP address
as the originator of the message and so considers all the dial-up RBL
scores that it hits as a spam indication.
For example
On Thu, 17 Jul 2003, Kristian Koehntopp wrote:
>
> Is there a mailing list that deals with SMTP policy issues, or are there
> other ressources in that direction (documents, FAQs and the like?). What do
> you recommend.
Try UseNet News groups:
DNS issues:
comp.protocols.tcp-ip.domains
On Thu, 17 Jul 2003, Tony Earnshaw wrote:
> David B Funk wrote:
>
> > For example, in the attached message the source was an AOL
> > dialup "AC826956.ipt.aol.com [172.130.105.86]" which hit
> > 6 RBLs ;() (with 'dnsbl.njabl.org' being added TWICE
On Thu, 17 Jul 2003, Aldo Mari wrote:
> Thanks...but I have understood the theory ..but how I can create a DNSBL ..please
> give me some link or idea to howto and how I could permit to spamassassin to connect
> to my own DNSBL..
> thanks
> - Original Message -
> From: Ernest W. Lesse
On Wed, 23 Jul 2003, Joe Julian wrote:
> I have a list of specific trusted addresses in my whitelist, but it
> still won't autolearn from them. Why not? Their scores are quite
> negative, way below -2, but it still won't autolearn from them. It looks
> like it's ignoring the whitelist when checkin
On Thu, 24 Jul 2003, Matt Kettler wrote:
> At 03:07 PM 7/24/2003 -0700, Abigail Marshall wrote:
> >I have one that I've been using for some time that activates
> >if the body contains a LINK to a .BIZ domain:
[snip..]
> I'd also suggest using \S* instead of .* after all, leading a regex off
> with
On Sat, 26 Jul 2003, ian douglas wrote:
> > First, run spamassassin -tD > output. Is bayes even enabled? are there enough tokens?
>
> debug: Score set 0 chosen.
> debug: running in taint mode? no
> debug: using "/usr/share/spamassassin" for default rules dir
> debug: using "/etc/mail/spamassassin
On Wed, 30 Jul 2003, Ian Douglas wrote:
> > Also Spammassassin -d --lint is only going to say something if you get a
> > syntax wrong. So your doing a great job if you don't get anything. That is
> > what you want.
>
> But I purposely set one of my rules to "awbody" instead of "rawbody" and --lint
On Sun, 2 Nov 2003, Ron Johnson wrote:
> Hi,
>
> SA 2.60
> Postfix 2.0.16
[snip..]
> So, I added whitelist entries to /etc/spamassassin/local.cf for all
> the machines in my home lan, and restarted spamassassin.
> def_whitelist_from_rcvd [EMAIL PROTECTED]haggis
> def_whitelist_from_rc
On Mon, 3 Nov 2003, Robert Kropiewnicki wrote:
> Hello all,
>
> Other than injecting something into the headers to make it look like the MUA
> was Mozilla, what else might trip this rule? We've had more than a few
> occasions where we've crossed a threshold because of this rule. Hitting a
> 2.7
On Tue, 4 Nov 2003, Steven W. Orr wrote:
> My ISP went down, so when it came back up aqnd my secondary mx record
> kicked it all back to me I got a lot of messages from sendmail saying
>
> Nov 4 06:58:26 saturn spamd[952]: hit max-children limit (5): waiting for
> some to exit
>
> I bumped it up
On Tue, 4 Nov 2003, Charles Gregory wrote:
> On Tue, 4 Nov 2003, Colin A. Bartlett wrote:
> > I have a rule challenge for you all.
> > How can we write a rule to catch messages like the one attached?
>
> body LOC_BRMASK
> /( ?|.){1,5}( ?|.){1,5}( ?|.){1,5}/i
> describe LOC_BRMASK Masking BR
On Fri, 7 Nov 2003, Chr. von Stuckrad wrote:
>
> Hi
[snip..]
> The mail also contained a broken variant of the wrong/forgotten
> Parameter of their Spam-Mailer: ' $RANDOM IZE '
>
> So:
>
> body RANDOM_IZE / \$RANDOM IZE /
> score RANDOM_IZE2
> describe RANDOM_IZE contains brok
On Thu, 6 Nov 2003, Peter Buonora wrote:
> Ok, I am running on Solaris 8, latest version of Spamassassin, perl 5.8.
>
> For some reason when using the 'spamassassin' executable, razor works.
> When I try to switch over to spamc/spamd everything works except razor.
> There isnt even anything in the
On Fri, 7 Nov 2003, Justin Mason wrote:
> BTW, SpamAssassin originally started with accumulating rules. But I took
> it out, as it meant a long hammy mail had a much higher chance of FP'ing,
> due to containing more text.
>
> I'd be worried that accumulating hits would reintroduce the same
> prob
On Fri, 7 Nov 2003, Maarten J H van den Berg wrote:
>
> I eventually found the reason for this behaviour after I noticed that root
> could start it okay, but the unpriv user spamd couldn't...:
>
> machine:~ # ls -la /usr/lib/perl5/site_perl/5.6.0/Mail/SpamAssassin
> drwx--2 root root
On Fri, 7 Nov 2003, Robert Menschel wrote:
> Or better: what if we specified in the rule a maximum score to accumulate
> to? Maybe something like:
>
> accumbody T_SAMPLE /(?:word1|word2|word3|word4|word5)/i,max=2.5
> describe T_SAMPLE Message has medical words frequently used in spam
> score
> DBF> On Fri, 7 Nov 2003, Robert Menschel wrote:
>
> >> Or better: what if we specified in the rule a maximum score to accumulate
> >> to? Maybe something like:
> >>
> >> accumbody T_SAMPLE /(?:word1|word2|word3|word4|word5)/i,max=2.5
> >> describe T_SAMPLE Message has medical words frequentl
On Mon, 10 Nov 2003, Chris Barnes wrote:
> I am in need of a rule that will tell SpamAssassin to whitelist all
> email traffic which comes from our local Listserv (tm - www.lsoft.com)
> lists.
>
> The problem is that messages from the Listserv list have the original
> author's email address in the
On Sun, 9 Nov 2003, Tristan Nixon wrote:
> Hello all,
>
> I have a question regarding the way in which SA deals
> with whitelisting & blacklisting. If I want to whitelist
> all but a few select entries from a domain, how would I do it.
> Should the following work?
>
> whitelist_from [EMAIL PROTEC
On Sat, 8 Nov 2003, Debbie D wrote:
> Thanks.. ut yes Ishold have stated that.. stop & start..
>
> [root admin]# /etc/rc.d/init.d/spamd stop
> Shutting down spamd: ok
> [root admin]# /etc/rc.d/init.d/spamd start
> Starting spamd: spamdCould not create INET socket: Address already in use
> IO::Soc
On Mon, 10 Nov 2003 [EMAIL PROTECTED] wrote:
> eManager Notification *
>
> The following mail was blocked since it contains sensitive content.
Love the stupid -PC- double-talk here. Gee, what was the content
sensitive to? (is it sensitve to light, heat, shock...)
On Sat, 8 Nov 2003, Terry Milnes wrote:
> The bayes filtering works great, but the typical user is not going to
> want to jump through what he would consider the huge obstacles to train
> a corpus. Furthermore implementing bayes on a system that incorporates
> thousands of users can be a daunting
On Tue, 11 Nov 2003, Larry Gilson wrote:
> The preferred method is any way you prefer. ;) That is really an honest
> answer. Everyone has their own preferred method and a lot of times it
> depends on your specific situation. Some people will pipe to a filter shell
> script, Procmail, maildrop,
On Wed, 12 Nov 2003, Matt Kettler wrote:
> At 01:38 PM 11/12/2003, Scott Antonivich wrote:
> >but can attachments be tagged as spam per user? If
> >so, what do I need to place in this users config file?
>
> You'd have to create a custom rule to look for mime boundaries..
>
> However, to do it per-
On Thu, 13 Nov 2003, MIKE YRABEDRA wrote:
>
>
> I have been trying to get razor to work with spamd.
>
> I know it works with ./spamassassin --lint -D
>
> It also works with CGPSA (calls SA directly).
>
> But it does not want to work with spamd?
>
> Where are some places I can look , things I can t
On Fri, 14 Nov 2003, Bob Amen wrote:
>
> We've been seeing a problem with spamd that happens at random times.
> Occasionally, a spamd thread will spin, clocking up CPU time and never
> finish. This causes other spamd processes to hang and eventually all
> memory and swap is used up by multip
On Fri, 14 Nov 2003, Carl R. Friend wrote:
>For the assembled group -- is it possible to do a DB lookup,
> either in an eval() or some other mechanism, in a "uri" rule?
> If we could do a DB lookup on URIs (or, more properly, the
> domain portion of URIs) I think that'd be a win (at, of course
On Thu, 13 Nov 2003 [EMAIL PROTECTED] wrote:
>
> Hi,
>
> I'm trying to optimize my MIMEDefang milter and reject the whole message even
> before it is received and scanned with SpamAssassin. My question is:
> Is there a function in Mail::Spamassassin perl module which I can use to
> determine if sp
On Thu, 13 Nov 2003, MIKE YRABEDRA wrote:
> on 11/13/03 6:07 PM, Chip Paswater at [EMAIL PROTECTED] wrote:
>
> > Have you gotten razor working by itself?
>
> Yes, it works fine. I have just never been able to use it with spamd??
OK, next test spamassassin+razor.
When logged in as your 'spamd' us
On Thu, 13 Nov 2003, MIKE YRABEDRA wrote:
>
> I have found that spamd will not use razor on my system because of
> permissions. Is it safe to run spamd as root?
Mike,
spamd will not run as root, it is a security risk.
If you start it as root and you do not tell it who you want to run as
(IE leave
On Sat, 15 Nov 2003, Matthias Fuhrmann wrote:
>
> Hello,
>
> on my system i get many idling spamd childs, which wont die by itself.
> this happens from time to time, if machines load gets higher by other
> processes. eg. mimedefang kills its idling childs after a while; is this a
> possible future
On Sat, 15 Nov 2003, Carl R. Friend wrote:
>On Sat, 15 Nov 2003, David B Funk wrote:
> >
> > I've been thinking about that exact topic. The Bayes engine
> > already parses and tokenizes hostnames from URIs (the UD: tokens).
> > If there were a hash DB made wi
On Mon, 17 Nov 2003, Eduardo Alfonso wrote:
> Hi
>
> I've been trying to configure SpamAssasin to check for the existence of the user on
> the local machine that is
> trying to send the message and I couldn't find how to do this.
>
> Is it possible ??
>
> Thanx
>
> I'm using sendmail MTA in a Re
On Mon, 17 Nov 2003, Martin McWhorter wrote:
I am having a problem with whitelist_from_rcvd not working.
I have Spamassassin running on a redhat 9 box with sendmail 8.12.8 as
our companies gateway MTA. I have MIMEdefang running as well, but with
the Spamassassin portion of the defang.conf comment
On Mon, 17 Nov 2003, Justin Mason wrote:
> BTW, given that a URI DB cannot use regular expressions, or patterns,
> would this really be useful?
>
> Basically with a DB you only gain efficiency when looking up exact
> strings. So for this to be useful against URIs, you'd have to pick out
> *just*
On Tue, 18 Nov 2003, William Stearns wrote:
> > anchoring with \b = fast
>
> OK, cool. As I'm doing full domains, I'll change:
> uri WLS_URI_1 /0-go.org/i
> to
> uri WLS_URI_1 /\b0-go.org\b/i
> in the next version.
Also escape that '.' so that it's taken as a litt
On Tue, 18 Nov 2003, Chris Santerre wrote:
> > > uri WLS_URI_1 /^http:.*\b0-go.org\b/i
>
> Regex confusion on my part! '\b' is bounding, but I thought that meant bound
> by space??? wouldn't this above regex _NOT_ hit :
>
> http://stuff.0-go.org/stuff
>
> Isn't it looking for:
> http://stuff.
On Tue, 18 Nov 2003, Charles Gregory wrote:
>
> Hello,
>
> Lately on several e-mails from the list, I've been seeing an error message
> in my Pine mail program that says:
> [Error: Formatting error: Non-hexadecimal character in QP encoding]
>
> More importantly, the message is *truncated* in the
1 - 100 of 167 matches
Mail list logo
