up to you.
I dump spam into our user's Junk-Mail folder, which is then scanned once a
week to update bayes and deleted.
--
Jon
Andrew Cranson said:
> Would it be possible for an additional mysql preferance for a threshold to
> be added to an upcoming spamassassin release for mail d
Yea same here. Emails have been dead since around the 23rd or so. I got
your email through the list though, so maybe it's working now.
--
Jon
Tim B said:
> did I get booted off the list, no list traffic or is sourceforge down?
> I haven't gotten anything rea
Yea same here. Emails have been dead since around the 23rd or so. I got
your email through the list though, so maybe it's working now.
--
Jon
Tim B said:
> did I get booted off the list, no list traffic or is sourceforge down?
> I haven't gotten anything rea
e
> screen only see "spam".
>
Jennifer's POPCORN and BLACKHAIR rule sets will catch these.
http://www.emtinc.net/spamhammers.htm
- Jon
--
[EMAIL PROTECTED]
Administrator, tgpsolutions
http://www.tgpsolutions.com
signature.asc
Description: This is a digitally signed message part
So your setup, the way you've
described it, should be working just fine. To be sure, run spamassassin
-D --lint and the output should tell you exactly what's going on.
- Jon
--
[EMAIL PROTECTED]
Administrator, tgpsolutions
http://www.tgpsolutions.com
signature.asc
Description: This is a digitally signed message part
accurate rules for. See "9.
The email will have the following characteristics:"
http://www.sarc.com/avcenter/venc/data/[EMAIL PROTECTED]
- Jon
--
[EMAIL PROTECTED]
Administrator, tgpsolutions
http://www.tgpsolutions.com
signature.asc
Description: This is a digitally signed message part
s a few
headers to the message. The message's original subject and body are
preserved, so even if I were to scan at queue-time, the users who don't
want filtering would never know it's there.
- Jon
--
[EMAIL PROTECTED]
Administrator, tgpsolutions
http://www.tgpsolutions.com
signature.asc
Description: This is a digitally signed message part
bulk folder, but it does happen, at least on my account.
--
Jon
Michael H. Collins said:
> Sorta off topic, mebby, but:
>
> As good as SA is working here I have users that are constantly reminding
> me that they get "absolutely no spam" on their yahoo, hotmail etc.
>
pretty much an "out of the box" fresh install. Is there any other thing in
spamc to enable debugging? the Debug option on the daemon side really doesnt help.
- - - Jon Myers
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lis
since the system sends back an
error, the sender knows that something is going on..
- - - Jon Myers
The Circuit's Edge
___
Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recogn
missing something here...?
At the moment, we're actually using qmail-scanner, which we have setup to
scan the messages with two virus scanners, and run it through spamassassin.
At 10:23 AM 5/6/2002 +0800, you wrote:
>Jon Myers wrote:
>> This may be a big task, but has anyone
right direction for this, and maybe supply me with an example of a razor.conf (and where is should live?)
Sorry if these seem like daft questions, but we all need to start somewhere!
Kind regards,
Jon Paterson
boxes?)
Regards,
Jon
-Original Message-
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]]
Sent: 29 May 2002 16:20
To: Jon Paterson
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] New user question regarding razor.
On Wed, May 29, 2002 at 04:05:27PM +0100, Jon Paterson wrote:
> Although
k out the code...
Jon
-Original Message-
From: Vivek Khera [mailto:[EMAIL PROTECTED]]
Sent: 29 May 2002 16:53
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] New user question regarding razor.
>>>>> "JP" == Jon Paterson <[EMAIL PROTECTED]> writes:
JP> I (per
at SA must
be run on the email server.
--
Jon Fraley
Unix Systems Administrator
Glen Raven, Inc
(336) 586-1148
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are availabl
auxw ) as
/usr/local/bin/per―/usr/local/bin/spamassassin start.
Is there supposed to be another instance running or better still where do I start
looking for clues.
Thanks
Jon L. Miller, MCNE, CNS
Director/Sr Systems Consultant
MMT Networks Pty Ltd
http://www.mmtnetworks.com.au
"I don'
cannot create tmp lockfile
/root/.spamassassin/bayes.lock.jfraleyx.glenraven.com.12514 for
/root/.spamassassin/bayes.lock: Permission denied
I have run spamd as root and as another user and still get the same
results. Is there a fix for this?
Thanks,
--
Jon Fraley
Unix Systems Administrator
ke one big playground." - Theo
You have to edit the /var/qmail/bin/qmail-scanner.pl file and add it in
there. It says: "my $spamc_subject='';". In between the single quotes in
that line add something like ***SPAM*** or whatever you want.
HTH,
Jon
on Red Hat 9.0 with no problems. That box is running
sendmail-8.12.8-4.
Any suggestions?
--
Jon Fraley
Unix Systems Administrator
Glen Raven, Inc
(336) 586-1148
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http
This is only to scan incoming local mail. Actually the server will set
between a virus appliance and our email server.
Jon
On Thu, 2003-08-28 at 14:30, AltGrendel wrote:
> On Thu, 2003-08-28 at 13:51, Jon Fraley wrote:
> > I am trying to get Spamassassin 2.55, spamass-milter-
to set the minimum number of token hits required for bayes.
Also is there a way to manually remove a bad token?
Thanks,
Jon.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkg
The correct syntax for your local.cf file is:
scoreBAYES_99 5.0
scoreBAYES_90 4.0
etc
Cheers,
Jon.
On Friday 29 August 2003 11:42 am, [EMAIL PROTECTED] wrote:
> Greetings,
>
> I'd like to increase the score for certain bayes
> confidence levels.
I am planning on putting a Red Hat 9.0 box on our network to scan
incoming email using sendmail, spamass-milter and spamassassin2.55. It
will probably handle 3k to 5k messages daily. Does anyone have a
recommendations on hardware. I have an old Pentium 166 that I thought
about using.
--
Jon
Is there a way to change this behavior?
It seems to me that a high bayes score also shows that it is spam
and it might be possible to grab a few new tokens from the spam
which you otherwise wouldn't get.
Jon.
On Friday 29 August 2003 12:22 pm, Tom Meunier wrote:
> Somebody already answ
i'm confused by something i read in the spamd documentation:
If you plan to use Bayesian classification (the BAYES rules) with spamd,
you will need to either
1. modify /etc/mail/spamassassin/local.cf to use a shared database of
tokens, by setting the 'bayes_path' setting to a path all users ca
Francis wrote:
I'm now using the default rules and receive some spam on my PC.
I put those spam in a spam box on my PC.
How can I use this box to to work with sa_lear on my Unix Server to find new
rules?
copy the box to your unix server and run
sa-learn --mbox --spam /path/to/spam/mbox
(assuming
Weyland wrote:
Which is intresting because it spurred me to check mine.
I'm using RH8 with Sendmail, supposedly using Bayes (I've been training it for
a long time now, at least...), and didn't get *anything* when I cat and grep
for "bayes". Nothing at all.
So how *do* you know it's working?
if y
The correct way to do this is not "nslookup sitefinder.verisign.com",
but rather "nslookup www.safsdafdsfadsfsdafadsfdsaf.com" or some
other garbage address.
If you program spamassassin to do this, you can easily keep up
with any ip changes that might happen.
Jon.
On Wednesd
Nope, it returns them all on my box.
i.e. when i type "nslookup www.yahoo.com" i get about 20 ip addresses.
So presumably, looking up a garbage address should also work
even with round-robin.
Jon.
On Wednesday 17 September 2003 01:18 pm, Daniel Quinlan wrote:
> Jon Gabrielson <
The correct way to do this is not "nslookup sitefinder.verisign.com",
but rather "nslookup www.safsdafdsfadsfsdafadsfdsaf.com" or some
other garbage address.
If you program spamassassin to do this, you can easily keep up
with any ip changes that might happen.
Jon.
On We
The correct way to do this is not "nslookup sitefinder.verisign.com",
but rather "nslookup www.safsdafdsfadsfsdafadsfdsaf.com" or some
other garbage address.
If you program spamassassin to do this, you can easily keep up
with any ip changes that might happen.
Jon.
On Wednesd
name=".*.exe"|name=".*.com"
/tmp/viruses
Cheers,
Jon.
On Friday 19 September 2003 01:29 pm, Frank DeChellis wrote:
> Hi
>
> I was just fiddling around and I entered a rule to catch some of the text
> in the MS Security Alert patch but it never seems to go over
name=".*.exe"|name=".*.com"
/tmp/viruses
Cheers,
Jon.
On Friday 19 September 2003 09:54 am, Forrest Aldrich wrote:
> This new virus appears to generate many (random?) subjects, so it's getting
> difficult to narrow down.
>
> Has anyone filters for Spamas
name=".*.exe"|name=".*.com"
/tmp/viruses
Cheers,
Jon.
On Friday 19 September 2003 09:54 am, Forrest Aldrich wrote:
> This new virus appears to generate many (random?) subjects, so it's getting
> difficult to narrow down.
>
> Has anyone filters for Spamas
I was wondering if there are any reporting tools out there for
generating reports for spamassassin. I am using Spamassassin 2.55 with
sendmail and spamass-milter.
--
Jon Fraley
Unix Systems Administrator
Glen Raven, Inc
(336) 586-1148
that is actual ham, because sa-learn knows what
to do with it. But, when a message was not flagged as spam, but is spam
and a user forwards it to an account to for sa-learn to learn from, does
sa-learn think that the user that forwarded the message is a spammer?
How does this work?
--
Jon
amassassin/bayes_toks
It should be looking in /home/stopspam/.spamassassin. Can anyone tell
me how to rectify this?
--
Jon Fraley
Unix Systems Administrator
Glen Raven, Inc
(336) 586-1148
---
This sf.net email is sponsored by:ThinkGeek
Welcome to g
have required_hits 6. This seems to be the perfect level except for
the aol accounts which seem to score in the 6 to 7 range on all
messages. What is the best way to handle these? -- whitelist, change
the score in local.cf?
Thanks,
Jon
---
This SF.net
On Mon, 2003-10-13 at 09:58, Keith C. Ivey wrote:
> Jon Fraley <[EMAIL PROTECTED]> wrote:
>
> > It seems that we do business with alot of people with aol.com
> > email addresses. Practically all of these are getting flagged
> > as SPAM with:
> >
> > 4
not get any decent reporting about what is going
on.
Thanks,
Jon
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services
On Mon, 2003-10-13 at 21:14, Matt Kettler wrote:
> At 05:00 PM 10/13/03 -0400, Jon Fraley wrote:
> >I currently have RBL checks turned off on our SA 2.6. We do our RBL
> >checks at the firewall. Can SA do the RBL checks from within our
> >network behind a virus appliance,
I am running SA 2.60. I had skip_rbl_checks set to 1 and now changed it
to 0. I have started spamd with -D to get debugging, but do not see any
thing about checking rbl's. Is there away to debug the rbl checks? Is
there something I should look at?
Thanks,
the report if it is spam? Or does Mailscanner do
this? I can not find exactly how it works. Mailscanner's documentation
on their web site is sparse.
Jon
---
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Eve
x27;d as a big ISP, but had no rDNS
2.4 FAKE_HELO_AOL Host HELO did not match rDNS: aol.com
What could be wrong?
Thanks,
Jon
---
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux D
I am using vmailmgr and I want to be able to mark spam for all users
under vmailmgr, could I just put a procmail receipe in the
/home/dom/domain/users directory or is this impossible.
--
Jon Reynolds <[EMAIL PROTECTED]>
---
This SF.net
Is there a way to tell spamassassin to send to [EMAIL PROTECTED] instead
of [EMAIL PROTECTED]
Thank you,
--
Jon Reynolds <[EMAIL PROTECTED]>
---
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to mak
Did I not give enough information for this? Is there anything else I can
add that would help to fix this? Anything else that is needed please let
me know. I really need to get this working.
Thanks for any help,
Jon
On Thu, 2003-05-29 at 19:10, [EMAIL PROTECTED] wrote:
> On Thu, 2003-05-29 at
Did I not give enough information for this? Is there anything else I can
add that would help to fix this? Anything else that is needed please let
me know. I really need to get this working.
Thanks for any help,
Jon
On Thu, 2003-05-29 at 19:10, [EMAIL PROTECTED] wrote:
> On Thu, 2003-05-29 at
On Fri, 2003-05-30 at 06:02, Mark Pearce wrote:
> Hi
>
> >
> > > Did I not give enough information for this? Is there anything else I
> > > can add that would help to fix this? Anything else that is needed
> > > please let me know. I really need to get this working.
>
> I had the same problem.
On Sat, 2003-05-31 at 10:01, Kirk Moore wrote:
> I just upgraded to 2.55 and now the *SPAM* is not longer showing
> on the subject line. I see a small note, and somewhat have searched
> through 4000+ messages.
>
> Here's the idiot question. did I miss something... I moved from 2.50
>
been enjoying spam for the past week
and lovin every piece of it. :)
Thanks!!
--
Jon Reynolds <[EMAIL PROTECTED]>
---
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-1
Is there a way to add more checks on messages or does SA-2.55 come with
all of them bundled.
--
Jon Reynolds <[EMAIL PROTECTED]>
---
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.
On Tue, 2003-06-03 at 11:10, Matt Kettler wrote:
> At 08:22 PM 6/2/2003 -0800, Jon Reynolds wrote:
> >Is there a way to add more checks on messages or does SA-2.55 come with
> >all of them bundled.
>
> All of the standard rules are bundled in whatever the current release
any advice.
--
Jon Miller <[EMAIL PROTECTED]>
MMT Networks Pty Ltd
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win a
.8.0/i386-linux-thread-multi/HTML/Parser.pm
/root/.cpan/build/HTML-Parser-3.26/blib/lib/HTML/Parser.pm
Am I to assume that I need perl 5.8.0?
Any leads would be greatly appreciated.
Thanks
Jon L. Miller, MCNE, CNS
Director/Sr Systems Consultant
MMT Networks Pty Ltd
http://www.mmtnetworks.com.au
Looks like someone on the list has been infected with the sobig virus.
I just received an e-mail from this address on list
[EMAIL PROTECTED] It has an attachment
your_details.zip
--
Jon Miller <[EMAIL PROTECTED]>
MMT Networks P
I'm using SA with Anomy Sanitizer and Postfix. I sent the test which
showed up in my maillog as being sent, yet I chave not seen the
message. Does anyone using this combination of products have it
working?
Thanks
--
Jon Miller <[EMAIL PROTECTED]>
MMT Netwo
age did not contain plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--
Jon Miller &
." -
> presumeably that would push the offensive stuff outside the
> viewable area of most email programs.
>
> -Abigail
--
Jon Miller <[EMAIL PROTECTED]>
MMT Networks Pty Ltd
---
This SF.Net emai
from e-mails. If so is there a way to
instruct SA not to touch the formatting in the e-mail if it's not spam.
Thanks
Jon L. Miller, MCNE, CNS
Director/Sr Systems Consultant
MMT Networks Pty Ltd
http://www.mmtnetworks.com.au
"I don't know the key to success, but the key to failur
for for body tests.
Does anyone have any suggestions?
--
Jon Fraley
Unix Systems Administrator
Glen Raven, Inc
(336) 586-1148
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and
flagging more spam than false positives.
Jon.
---
This sf.net email is sponsored by:
Access Your PC Securely with GoToMyPC. Try Free Now
https://www.gotomypc.com/s/OSND/DD
___
Spamassassin-talk mailing list
Does spamassassin give higher scores to items
in the razor database with a higher confidence
level? If not, is this something that is even possible?
Jon.
---
This sf.net email is sponsored by: To learn the basics of securing
your web site
received. I also realize that
there needs to be some checks to make sure that
the return address is valid and not just a fake spammer
address.
Has anyone tried something like this?,
Jon.
---
This sf.net email is sponsored by:ThinkGeek
I have been getting a huge amount of false negatives
since i upgraded spamassassin. Attached is
one of the more obvious false negatives. Any suggestions
about why this message got through spamassassin?
It is loaded with tons of pornographic keywords, etc...
Thanks,
Jon.
--- Begin Message
happening?
I can send the entire message on request.
Thanks,
Jon.
---
This sf.net email is sponsored by: See the NEW Palm
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm00
imagine it ever being a valid reply address.
opt-out maybe, but not opt-in
False negative is attached,
Jon Gabrielson
>From [EMAIL PROTECTED] Fri Nov 8 18:15:20 2002
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from mtsbp519.opmnet.net (mtsbp519.op
Attached are 2 more false negatives.
Jon.
p.s. is there a better place to report these?
>From [EMAIL PROTECTED] Mon Nov 11 22:20:37 2002
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from zhuhai.mbfax.com (unknown [218.13.250.81])
by www.directfr
-spam/dcc/
Thanks,
Jon.
On Tuesday 12 November 2002 12:04, Paul Fries wrote:
> Hmm. Those were both identified as spam by my scanner. However
> falseng2.txt was caught only because of DCC and Razor.
>
> Here is the score details:
>
> Falsneg1.txt :
>
> X-Spam-Flag: YES
>
As far as I can tell, nonlocal tests only raise
the score, never lower it. If this is the case, it
might be nice to be able to skip nonlocal tests
if the score is already above the threshold.
Jon.
---
This sf.net email is sponsored by:
To
last night
spamc worked fine.
Thanks,
Jon.
---
This sf.net email is sponsored by: To learn the basics of securing
your web site with SSL, click here to get a FREE TRIAL of a Thawte
Server Certificate: http://www.gothawte.com/rd524.html
Procmail gives the following error message
when spamassassin is run. What is this error,
and how do I fix it? /tmp is already writable
by all, so it shouldn't be having trouble writing
to that location.
Jon.
sh: /tmp/sa.5036.BhnbyN: Permission denied
sh: /tmp/sa.5036.BhnbyN: Permission d
Here is a false negative i received today.
I already reported it to razor.
Is this the best place to report it for spamassassin?
Jon.
--- Begin Message ---
Dear Sirs/Madam
We found your company on www.directfreight.com's website and believe that
our Hong Kong Fax Line service will assist
I have two questions:
1) How can you see what words are generating the spam phrase
hits and how can you disable individual words?
2) shouldn't the below numbers be in order?
ie. why does 00_01 score higher that 01_02 and
why is 55_XX the second lowest?
50_scores.cf:score SPAM_P
the filter, and also lamely try to
unsubscribe from the lists.
The url is at:
http://www.directfreight.com/howtobouncespamwithprocmail.txt
if anyone is interested.
Jon.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven
On Sunday 24 November 2002 18:32, Dark Alchemist wrote:
> Jon Gabrielson wrote:
> > It seems to be a common question to ask how to
> > /dev/null high scoring spam. This should probably
> > be in the FAQs (as well as a few safer methods).
> > Anyways, i thought t
your help, btw.
Not a problem, you might direct any more questions about the script
directly to me instead of to the listserve.
Jon.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
in your razor config,
and then just give RAZOR_CHECK a high score like 25.
But again, 3 is not a high number and you WILL lose mail
if you /dev/null razor > 3
Jon.
On Monday 25 November 2002 08:13,
[EMAIL PROTECTED] wrote:
> Message: 1
> Date: Sun, 24 Nov 2002 15:00:11 -0600
> From:
I've heard this more than once, but the alternative to automatically
bouncing mail is to change your email address every couple
months which in effect starts automatically bouncing the mail
anyways. I really don't see the difference.
Jon.
> Date: Mon, 25 Nov 2002 02:19:40 +0100
&
w positive points for something that
was supposably already scanned be very effective? Or is this
too easy to spoof?
Jon.
---
This SF.net email is sponsored by: Get the new Palm Tungsten T
handheld. Power & Color in a compa
y local.cf
Thanks,
Jon.
---
This SF.net email is sponsored by: Microsoft Visual Studio.NET
comprehensive development tool, built to increase your
productivity. Try a free online hosted session at:
http://ads.sourceforge.net/cgi-bin/redirect.pl?
s based on those IP blacklists would at least be a start.
Jon.
On Tuesday 03 December 2002 17:23, Rich Duzenbury wrote:
> Seems like you could set up your own DNSBL using (perhaps) djbdns. I
> _think_ you can configure SA to check any dnsbl you like. I'm out on a
> limb here, tho
and email
addresses, you effectively limit them to saying stuff like 'you can find us
by searching on google'. Of course to be effective it needs to pool from
a large number of users and have trust ratings associated with each user
similiar to the way razor does.
Jon.
-
ncing SPAM with a bypass passcode
(which is what I currently do on scores > 9). Does
anyone else have a good suggestion for this type of
problem where a user is using a crap isp and you
can't whitelist them beforehand(because you don't
know who they are).
Thanks,
Jon.
--- B
This is exactly what I have been looking for. Does
anyone know of any other MTAs that support these
types of features? If not, I will probably be switching
to exim. (i'm currently running postfix, but the SPAM
features listed below would be worth the pain of
switching)
Thanks,
Jon.
okay.
*** Error code 11
make: Fatal error: Command failed for target `test_dynamic'
You have mail in /var/mail//join
[join@ernie Mail-SpamAssassin-2.43]$
The platform is Sun Ultra 1, Solaris 8.
Regards
Jon Ingason
Equant Sweden AB
Solna strandväg 80
Phone: +46-8-5191 3316
Fax:
Hi spamassassin mailing list.
I'm trying to avoid this email getting tagged as spam.
at first i just tried to edit the user_prefs file, but after that didnt
work i read
http://useast.spamassassin.org/doc/Mail_SpamAssassin_Conf.html
whitelist_from [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECT
Sorry for the trouble, but i managed to find the error :)
JonB
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help
which is a bit more
justified than for a single user except where the satisfaction of blocking spam
outweighs the amount of time doing it ...
It's the age old closed vs open source arguement - just type "rant" or "holy war" into
Google filtered according to taste for a
ment System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourcefor
ng list
> | [EMAIL PROTECTED]
> | https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
>
>
> ---
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configur
91 matches
Mail list logo