[SAtalk] a new plan for SA: DNSBL and DNS scanning of embedded URL hostnames

atever air supply Alan Ralsky thinks he currently has: Web *AND* DNS-hosting in China, and criminal spamvertizing my means of breaking and entering through 100,000's of open proxies. Take a very deep breath before going under, Alan, I say. Thanks, bye,Kai -- "Just say No"

[SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

till there and uses the same syntax as before. So, what's the problem here? (I can repro this on all systems with 2.63.) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http

Re: [SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

. It's in the official documentation up at www.spamassassin.org and I remember that it's been there for long. I've also used it for a long time, I mean *before* 2.60. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactiv

Re: [SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

.spamassassin.org/doc/Mail_SpamAssassin_Conf.html as a reference. > Try adding -a to the command line. > Hm, I made a spamassassin -D -a --lint. There's no difference with the output, how do I tell that it uses AWL? There surely is a current AWL db, does this indicate, it's in use? K

Re: [SAtalk] CBL?

e spamtrap account over it. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- The SF.Net email is sponsored by EclipseCon 2

Re: [SAtalk] filter catching excel files

end against it. Same here. The inflexibility of filters that use rules like "block every mention of the word FOO" is one of the reasons I use SA instead -- it's not that silly. --Kai MacTane -

Re: [SAtalk] this one slipped through and really ticked me off . . .

s , or You 'll be spammed again and again! LOL! ©Copyright clearvisionsclub.com 2003 Like I'd copy this text for my own use? --Kai MacTane -- "When nothing's s

Re: [SAtalk] Moved into the ex-ip of a spammer

e taken to private email. (Not going after you personally, Mr. Mize. Yours was just the most recent message to arrive, and formed an easy point of entry for my comment.) Please, everyone, take this thread elsewhere? --K

Re: [SAtalk] Trying to create rule . . .

you're using spamd, do you know if it's been reloaded since you wrote your rule? --Kai MacTane -- "Hey, sister Moonshine, hold me 'til the break of dawn, Hold

Re: [SAdev] Re: [SAtalk] [RD] new rules for listwashing tokens, ROT-13 etc.

save their own CPU power? After all, generating a ROT13 or ROT5 version of each email address in a million-message spam run has got to be less intensive than generating an MD5, Blowfish, or other hash. --Kai MacTane -

Re: [SAtalk] Trying to create rule . . .

At 8/18/03 01:28 PM , Matt Kettler wrote: At 12:08 PM 8/18/2003 -0700, Kai MacTane wrote: In other places, such as in Ms. Zanre's rule, it means "beginning of line or string", just as $ means "end of line or string". True, his rule should work, provided that the GOREA

Re: [SAtalk] catching the Banned CD spam!

t;banned -books" in about three minutes. Admittedly, I changed the sentence structure in most cases to get the C-word right after "banned", but none of these are that unusual. Tacking on that "d" is a good way to avoid false positives.

Re: [SAtalk] Individual user SA processing w/ Qmail?

#x27;ve been planning to try to package it for open-source distribution, but haven't gotten around to it yet.) --Kai MacTane -- "You wear guilt/Like shackles on your f

Re: [SAtalk] Maildir, procmail, and SA

those directories, but if the directories themselves don't exist, then the tools should generally exit with an error message. --Kai MacTane -- "I looked Death in the face las

Re: [SAtalk] Configure to delete messages

hink that "only porn sites get blocked by porn filters". --Kai MacTane -- "I looked Death in the face last night,/I saw him in a mirror, And he simply smiled,/He told me not to worry: He told me just to take my

Re: [SAtalk] catching the Banned CD spam!

. And personally, I'd just do: body RULE_NAME /banned ?c/i Although some people have already posted much better regexes for matching various ways to obfuscate "banned CD". In all truth, I'd go with one of those, instead.

[SAtalk] Text in Subject: Triggering BODY Rule?

0.1 body FOOBAR_CAPS /\b(FOOBAR|WOMBAT)\b/ describe FOOBAR_CAPS Includes Mr. Foobar Wombat's real name in CAPS. score FOOBAR_CAPS 0.1 Now, when I send an email with "FOOBAR" or "WOMBAT" in the Subject: line, I get back the following: To: [EMAIL PROTECTED] From: Ka

Re: [SAtalk] using spamassasin with qmail

essage up if you're interested. --Kai MacTane -- "Playing dead and sweet submission, Cracks the whip deadpan on cue." --Siouxsie and the

Re: [SAtalk] Configure to delete messages

score they like as their auto-deletion threshold. --Kai MacTane -- "Friends of science and sensuality, They seek the silence

Re: [SAtalk] LOL (fwd)

e" lines as you see fit. Note that I haven't tested the regex on RULE_3 yet; I think it's correct, but test it before deploying it. --Kai MacTane -- "And wh

Re: [SAtalk] [RD] regex clarification

t you probably would NOT want to use: /(\w)\1+/ , because then any double-letter will be caught by this regex. --Kai MacTane -- "I looked Death in the face last night,/I saw him

Re: [SAtalk] spamd -d from the command line or the spamassassin script?

roblem both from the command line and during standard bootup sequence. --Kai MacTane -- "I looked Death in the face last night,/I saw him in a mirror, And

RE: [SAtalk] spamd -d from the command line or the spamassassin script?

ally, when I let spamd run as many of itself as it likes, then when a spammer tries to mail many of my users all at once, the multiple spamds spike my CPU load enough that *nothing* gets done. --K

[SAtalk] Dealing With Huge Mail Floods/High CPU Loads (was Re: kernelpanics and the .spamassassin/bayes_ stuff)

r second. I realize your problem is already in the past, but in case you (or anyone else on this list) ever runs into the same problem again, I wanted to advise on this method of dealing with it.

Re: [SAtalk] Filter creation ?

uot;cunt", found in the name of the town of Scunthorpe in England. If AOL's filters had been using /\bcunt\b/ instead of just /cunt/, users from Scunthorpe wouldn't have been annoyed, and the rest of the world wou

Re: [SAtalk] Custom Rules - spamd

, like most other Unix daemons, and it will re-read its configuration files (including filtering rules). But 2.55 and before simply crash when HUPped; the only way to get them to re-read the rules is by killing and restarting them. --Kai MacTane

Re: [SAtalk] OT - Postfix, prohibit addition of Message-Id

r (though I'll admit RFC2821 specifies MAY). If it's the former situation, then you're quite right that Message-ID: should not be added after the initial SMTP injection point. (However, I don't know how to configure Postfix. Sorry.)

Re: [SAtalk] user_prefs question

by whitelist_to). --Kai MacTane -- "When nothing's sacred any more, When the demon's knocking on your door, You're still staring down at the floor."

[SAtalk] [RD] Scanning Attachment Types

s just not include the Content-Disposition information? I've also tried replacing [^\"] with just plain [^"] and with [^\.] instead; this changes nothing. --Kai MacTane

[SAtalk] Text in Subject: Triggering BODY Rule?

quot; or "WOMBAT" in the Subject: line, I get back the following: To: [EMAIL PROTECTED] From: Kai MacTane <[EMAIL PROTECTED]> Subject: Mail for Mr. WOMBAT Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Spam-Status: No, hits

RE: [SAtalk] Not sure how...

imple eval for it. Oh, crud. Okay, I guess this answers my recent RD question, too. Thanks, I was wondering if I was going nuts. --Kai MacTane -- "Don't you know this flesh y

Re: [SAtalk] filter identifying vaild word as masked

ion typo for "suit". Or by "Siuth" (typo for "South"), since there's no \b anchor on the tail end. This rule seems ready for some very interesting FPs. (But then again, you've alrea

RE: [SAtalk] FW: Best Child Pornography Site

o devise rules to stop it. Even just a couple dozen of them. It also occurs to me that, if it's difficult to find such a corpus, then there really isn't that much of a problem. Building up a set of rules just to stop one smear attempt seems li

Re: [SAtalk] Text in Subject: Triggering BODY Rule?

coded from Quoted-Printable or Base-64-encoded format if necessary. All HTML tags and line breaks will be removed before matching. This doesn't suggest to me that the Subject: is included. Perhaps the doco could be updated to reflect this?

Re: [SAtalk] OSIRUSOFT cause my subscription to be cancelled??

that host has your domain in its /var/qmail/control/rcpthosts and .../locals files. --Kai MacTane -- "When nothing's sacred any more, When the demon's knocking on your doo

Re: [SAtalk] FW: Best Child Pornography Site

At 8/27/03 05:57 PM , Carlo Wood wrote: On Wed, Aug 27, 2003 at 01:30:22PM -0700, Kai MacTane wrote: > I take it you want something a little better thought-out than just > > body CHILD_PORN /child pornography/i > [et cetera...] That seems like a bad idea. Well, I *did* imply, in the f

Re: [SAtalk] Wow, sourceforge.net has managed to not learn basic lessons of mail filtering...

> message containing a single regex" type spam filter approaches have a > sufficiently high false positive rate that they eat an unacceptable > level valuable messages." [...] > Content analysis details: (0.00 points, 5 required) > Kai -- Kai Schätzl, Berl

Re: [SAtalk] OSIRUSOFT

story/0,248620,20277794, 00.htm http://slashdot.org/articles/03/08/27/0214238.shtml?tid=111 --Kai MacTane -- "Soft and only you, lost and only you, Strange

Re: [SAtalk] [SA-Announce] SpamAssassin 2.60 rc3 released

Installed fine, upgraded fine from cvs of three weeks ago or so. Can't comment on effectiveness yet. One thing I note is that it again needs more RAM, it's now at almost 25 MB. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conact

Re: [SAtalk] SpamAssassin 2.60 rc3 released

rules dir here, with SpamAssassin version 2.60-rc3. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This sf.net email

[SAtalk] -d --lint scores ?

testing here and what should it score approximately, as ham or spam? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This sf

Re: [SAtalk] SpamAssassin 2.60 rc3 released

x27;s the advantage of that? Does it also provide an advantage when I don't use spamc to talk to spamd but a sendmail milter daemon? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.d

Re: [SAtalk] Min Score

I (and my users) likely to see a rise in FPs? --Kai MacTane -- "The seasons don't fear the reaper, Nor do the wind, the sun and the rain.

Re: [SAtalk] SpamAssassin 2.60 rc3 released

Malte S. Stretz wrote on Fri, 29 Aug 2003 23:42:15 +0200: > What does perl -V:prefix say? > /usr So, this is dependant on the perl PREFIX path? That explains why others get a different path although they don't use a specific PREFIX switch. Kai -- Kai Schätzl, Berlin, Germany G

Re: [SAtalk] -d --lint scores ?

process. I don't know how it looks like, so I don't know if it should score as ham or spam. But there apparently must be a message you use for that. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Cen

Re: [SAtalk] New test proposal

Carlo Wood wrote on Sat, 30 Aug 2003 13:44:07 +0200: > I think there should be a test on the latter header entry > that adds extra points. > why? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.

Re: [SAtalk] Bayes and whitelisting

Carlo Wood wrote on Mon, 1 Sep 2003 14:47:56 +0200: > whitelisted mails should not be auto learned. > That is just what Simon said and SA does. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de

Re: [SAtalk] New test proposal

ASAP, or not? So, it's not a good indicator at the moment because of quantity and it won't be one in the long run because spammers would adopt if gets used by more mTAs. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Ce

Re: [SAtalk] -d --lint scores ?

hould score more like ham or spam. Thanks! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This sf.net email is sponsor

Re: [SAtalk] Bayes and whitelisting

e would ever use it. Carlo, you can suggest adding options like "whitelist-noautolearn" and "blacklist-noautolearn" via Bugzilla. If it gets in is up to the developers. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conact

Re: [SAtalk] Spamassassin Reporting

instead of getting > an email per filtered email. IS this currently possible? > SA can't do this, but other filters which use SA for spam determination, can do this. F.i. Mailcorral (mailcorral.org) and I suppose Mailscanner can also be configured that way. Kai -- Kai Schätzl, B

Re: [SAtalk] Bayes and whitelisting

which firewall rules do you use to reject spam? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This sf.net email is spo

Re: [SAtalk] osirusoft gone mad?

ration statements to your local.cf. No, you don't: SA automatically reads all .cf files in /etc/mail/spamassassin. In alphabetical order, IIRC, which means that rules in no-osiru.cf will overwrite ones in local.cf. --

[SAtalk] RC3 problem with some tests and scores

n't contain any Content-Type header! However, it's possible that the milter added one and then handed it over with the header included to spamd. I've got to investigate this further. So, this may not be the fault of SA. But what about the other two? Shall I submit any of this to Bugzi

Re: [SAtalk] RC3 problem with some tests and scores

in the AWL. I think this should be changed to show a failure. The only way seems to grep the auto-whitelist file and wait for a "Binary file ... matches" result. I think it would be a good idea to add a --confirm-addr-in-whitelist to SA. Kai -- Kai Schätzl, Berlin, Germany

Re: [SAtalk] Rule for no reverse DNS

gers. You can set it up to just add 1.5, or 0.5, or 0.1, points to the message's score. (Indeed, adding just 0.1 or 0.01 would be a great way to test the rule for a little while, and get some sense of how much trouble it might cause if the score were increased.)

Re: [SAtalk] Has anyone written rules for Sobig:F

Steven W. Orr wrote on Fri, 12 Sep 2003 09:11:10 -0400 (EDT): > that I can just add? > Lots at www.exit0.us ! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.w

Re: [SAtalk] Rule for no reverse DNS

Michael W. Cocke wrote on Fri, 12 Sep 2003 12:52:09 -0400: > they won't > accept messages from my domain because I use dyndns and not a static > IP. > No problem, use the smarthost given by your provider. That's what it's for. Kai -- Kai Schätzl, Berlin, German

Re: [SAtalk] Has anyone written rules for Sobig:F

P ports 2280, 2282 or 2285. > Anyone can give hints for such software? (No, not DNS-RBL.) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http

Re: [SAtalk] Has anyone written rules for Sobig:F

Bob Apthorpe wrote on Sun, 14 Sep 2003 12:09:47 -0500: > http://www.corpit.ru/mjt/proxycheck.html > Thanks! I found the second tool after reading one of the Sobig analyses up to the end. I'll try them out both. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Intern

Re: [SAtalk] Not recognizing /etc/mail/spamassassin/local.cf?

it off the head, check the spamd documentation for it. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This sf.ne

Re: [SAtalk] The Verisign folly

around for sendmail, so that it knows that any domain pointing to 64.94.110.11 isn't valid? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --

Re: [SAtalk] Rule for no reverse DNS

needs to hear from me > It's not only AOL, many ISPs block mail from dynamic IP ranges for good reasons. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie

Re: [SAtalk] Rule for no reverse DNS

TP server you can use for sending out your mail. That is called a "smarthost". You just configure your mailserver to forward all mail to this smarthost. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.d

Re: [SAtalk] how do I ask the list a question about

[EMAIL PROTECTED] wrote on Thu, 18 Sep 2003 04:32:28 -0600: > How are you doing this black listed regular expression thing to block > any and all ocurrances of the V word? > This is done by Sourceforge, not by the list. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive

Re: [SAtalk] Maintaining a list of IP numbers

virus or a spammer the sender address is regularly changing. The IP no. in the last Received line won't change if it is coming from the same sender. I'd be interested in such a program as well. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://w

Re: [SAtalk] Maintaining a list of IP numbers

der scale. One would want to use such a program in the longer run and block future viruses and spam spreaders as well. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org ---

Re: [SAtalk] SA Gone Wild???

everal domains / addresses white listed in my local.cf file > and even these are getting tagged as spam. Here is the output of a message > filtered at the server as spam but yet the spamc report is contradictory: > > --- > > [freya:~] tappind% spamc -R < spam.txt > -1.0/5.

Re: [SAtalk] Maintaining a list of IP numbers

rver, and first Received line have always > been consistent. > Yeah, you are right, many of the envelope sender addresses fit to the relay it uses. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http

Re: [SAtalk] Philosophical SA questions

guration option. --Kai MacTane -- "There is no faith in which to hide; even truth is filled with lies. Doubting angels fall to walk among the living. I'm in this mood because of scorn, I'm in a mood for total war. T

Re: [SAtalk] passing user: in qmail scripts

ip it out of the message somehow? How about the top Delivered-To: header? Will that work? --Kai MacTane -- "I hear the roar of a big machine, Two worlds and in between; Hot

[SAtalk] Outlook rules produce FPs

tPart_000_0249_01C3883A.66759B10 Content-Type: application/pdf; name="x.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="x.pdf" PDF --=_NextPart_000_0249_01C3883A.66759B10-- --BodyEnd Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Int

Re: [SAtalk] Outlook rules produce FPs

;t get a response for. If you do that then each time MC crashes you will just get more spam but no mail will get refused. This is a good indicator to know when it crashed :-) Anyway, after applying this debug code it shouldn't crash at all anymore. Kai -- Kai Schätzl, Berlin, Germany Ge

RE: [SAtalk] Highest Score

65.489 using SA 2.50 and default scores. tests=AS_SEEN_ON, BANG_EXERCISE, BANG_GUARANTEE, BANG_OPRAH, BAYES_99, BIZ_TLD, CLICK_BELOW_CAPS, DATE_IN_PAST_06_12, DATE_SPAMWARE_Y2K, DCC_CHECK, DNS_FROM_RFCI_DSN, FORGED_IMS_HTML, FORGED_IMS_TAGS, FORGED_MUA_IMS, FORGED_RCVD_NET_HELO, GUARANTEE, HAIR_LO

[SAtalk] Bayes problems and expiring

s with timeouts occurring, and it might have to do with too large a database. Any other explanations are also welcome! Regards, Kai --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven

Re: [SAtalk] sa-learn with saProxy sequence

Learning from 1000 messages takes a while. Perhaps you didn't wait long enough? Try running sa-learn --spam -D --file /tmp/spam.mbx so you see what is happening. *Then* you know if it really hangs.. - Original Message - From: "Robert Wornan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED

[SAtalk] spamd grabbing LOOOOOOTs of memory

ny Perl modules which would need an upgrade? (although everything seems to be running just fine except for this) What can be done about this? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http

Re: [SAtalk] spamd grabbing LOOOOOOTs of memory

Bill Polhemus wrote on Mon, 6 Oct 2003 11:41:53 -0500: > What's the problem? > You didn't mean that serious, did you? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & htt

Re: [SAtalk] spamd grabbing LOOOOOOTs of memory

fr en pt ok_locales en check_mx_attempts 2 dns_available yes use_bayes 1 bayes_path /home/spamd/bayes/bayes bayes_file_mode 0666 auto_whitelist_path/home/spamd/awl/auto-whitelist auto_whitelist_file_mode 0666 Kai -- Kai Schätzl, Berlin, Germany Get your web at

RE: [SAtalk] 2.60 lock errors

Enabling the Bayes journal should help ("bayes_learn_to_journal 1"), as that allows concurrent processes to open the bayes database in read-only mode most of time, with only an occasional journal syncing needing a full write lock on the database. -- [EMAIL PROTECTED] GSM +358-40-767 8282

RE: [SAtalk] Bayes problems and expiring

then able to share the database better. -- [EMAIL PROTECTED] GSM +358-40-767 8282 Oy Arrak Software Ab http://www.arrak.fi > -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 07, 2003 7:39 PM > To: Kai Risku > Cc: [

Re: [SAtalk] Question about whitelist NOT AWL

Stephen Bradley wrote on Wed, 8 Oct 2003 16:06:14 -0400: > I use spamd/spamc and I know it reads the /etc/mail/spamassassin/local.cf > Just put all stuff in that directory! sa/spamd reads all files in there. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Se

Re: [SAtalk] spamd grabbing LOOOOOOTs of memory

that gets called on a > per-message basis. > I definitely agree :-) That's why I asked here, I didn't really see a good path of narrowing it down quickly. Thanks for your suggestions! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive In

Re: [SAtalk] Question about whitelist NOT AWL

Stephen Bradley wrote on Wed, 8 Oct 2003 17:45:42 -0400: > BUT, if I put my black/white list entries in that file or any other file in > the SA directories > it will not work. None of the entries are read. > You *did* restart spamd, did you? Kai -- Kai Schätzl, Berlin, Germany

Re: [SAtalk] [SAtalk]Out of Memory: Killed process 10665 (spamd)

Jan Erik Skogsholm wrote on Thu, 09 Oct 2003 11:04:55 +0200: > Oct 8 16:31:17 nospam kernel: Out of Memory: Killed process 10665 (spamd). > Don't know if there is a connection, but look at the thread Subject: [SAtalk] spamd grabbing LOOTs of memory Kai -- Kai Schätzl, Berl

Re: [SAtalk] help - freezing!

wrote on Thu, 9 Oct 2003 15:36:34 +0200 (CEST): > so ppl, if sy meet this problem and solved it, please reply > No, I haven't, but it really doesn't look like a spamd problem. spamd is only one of several victims of this. Kai -- Kai Schätzl, Berlin, Germany Get your

Re: [SAtalk] Is there a way to reject a message before it arrives?

Fabiano Bonin wrote on Thu, 09 Oct 2003 11:56:29 -0300: > maybe the spammers will remove our addresses > from its lists, and the traffic will decrease. > No, no, no, don't count on this, really :-) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet

Re: [SAtalk] using sa-learn...

how to classify new mail. You cannot train it with only one kind! That would be like just showing a bunch of differently coloured fruits to a child and then hold up a potato and ask if it is a fruit. Kai -- .signature: No such file or directory --

[SAtalk] Regex Detail (was RE: Popcorn, Backhair, and Weeds)

s]\w{1}<[\w\s\$&!-]{0,150}>\w{1}\W/ Having recently checked on some stuff in the O'Reilly regex book... No, ! doesn't need escaping inside a character class. But - *does* need it, unless it's the first character. So I'd say: /[>\s]\w{1}<[-\w\s\$&!]{0,15

Re: [SAtalk] [RD] quicker rules? Regex?

l, unless you actually *intend* to capture that text for some later use. Hope this helps, even if it actually means you have no use for the operator. --Kai MacTane -- "I looked Deat

Re: [SAtalk] Swap Space

ing > it unusable. > But if that problem occurs you would see the different spamd processes in top and not only one spamd entry, would you? I ask because we had the same problem happen twice, but not any concurrent spamd processes, just spamd grabbing enormous amounts (800 MB) of memory.

Re: [SAtalk] Swap Space

#x27;m still waiting for getting it reproed a third time, now for three weeks. So, it's nothing which frequently happens and I wouldn't have cared if it had happened only once. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Ce

Re: [SAtalk] [RD] Open source is Naughty!!!

scation), you can probably get away with: /pen[^ tde']s/i But it seems a little unsatisfactory, somehow. --Kai MacTane -- "I looked Death in the face last night,/I saw him in a mirror, And he simply smiled,/He told

[SAtalk] 2.70 says it fails dns test but doesn't

I get this when making test with the cvs content I just retrieved. Actually, looks to me like it did *not* fail the test? t/dns...Not found: P_1 = [127.0.0.2] # Failed test 2 in t/SATest.pm at line 388 Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive

Re: [SAtalk] Removing SpamAssassin

Tony Earnshaw wrote on 18 Feb 2003 22:36:13 +0100: > Christmas, New Year's Eve ;-) And you forgot to mention the tiger fur on the floor ... > And in > Germany. > It was made in Germany, AFAIR! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Intern

Re: [SAtalk] 2.50 on CPAN

John Rudd wrote on Thu, 20 Feb 2003 11:39:31 -0800: > Does > the fact that it's now out on CPAN indicate that it's no longer beta? > I think he wanted to say that 2.5 is kinda beta release, not that this release is a beta for upcoming 2.5. Kai -- Kai Schätzl, Berlin, G

Re: [SAtalk] Upgrading

Nicholas Chua wrote on Wed, 12 Mar 2003 02:07:40 +0800: > Mail::SpamAssassin is up to date. Which is correct. > > How can I update without installing the tarball? > There's only CVS versions you could update to, so that's the only way to do it. Kai -- Kai Schätz

Re: [SAtalk] HTML only messages

ess doesn't do this. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This SF.NET email is sponsored by: SourceForge E

Re: [SAtalk] Spam Trap

exactly that account as a spamtrap. Don't use it in your headers, of course. However, from my experience you don't get too many spam from newsgroups nowadays. The best method to get massive amounts of spam is your email address in the com/net whois ... Kai -- Kai Schätzl, Berlin, G

[SAtalk] CVS usage questions

ssword somehow, so that I could schedule the cvs retrieval? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org --- This SF.

  1   2   3   >