RE: [SAtalk] Delete vs tagging spam

2004-01-15 Thread Kang , Joseph S.
> -Original Message- > From: Steve Thomas [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 15, 2004 4:14 PM > To: Andrew Cranson > Cc: Cal Evans; [EMAIL PROTECTED] > Subject: Re: [SAtalk] Delete vs tagging spam > > > Here's the thing, though. SA is a *filter*. The MTA (or > procmail,

RE: [SAtalk] 7245 Habeas and counting

2004-01-20 Thread Kang , Joseph S.
> -Original Message- > From: Paul Barbeau [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 20, 2004 5:48 AM > To: [EMAIL PROTECTED] > Subject: RE: [SAtalk] 7245 Habeas and counting > > > I as well have gotten alot and want to set it to 0 and exlude > it from bayes. So just to confirm

RE: [SAtalk] Turning off Habeas?

2004-01-20 Thread Kang , Joseph S.
> Don't do that! You'll miss out on the HABEAS_VIOLATOR rule. > Set it to -0.001 if you want, but don't kill it off. > HABEAS_VIOLATOR is good for > +16. > > A lot of people on this list need to calm down and stop over-reacting. The HABEAS_VIOLATOR test is nice for those sites that also have

RE: [SAtalk] Turning off Habeas?

2004-01-20 Thread Kang , Joseph S.
> It has been almost 24 hours since I received the last spam > with Habeas > headers. Possibly my ISP has added a filter to block the > pharmacourt.biz > spam before I see it ... Has anybody else noticed that their spam has > stopped in the past day? I thought I had noticed the same but wasn

RE: [SAtalk] whitelist problems

2004-01-29 Thread Kang , Joseph S.
> I have messages I am desperatly trying to whitelist from SA. > I am using SpamAssassin on a Solaris 8 server using sendmail > 8.12.10 and MIMEDefang. > > I have tried various lines in > /etc/mail/spamassassin/sa-mimedefang.cf to no avail: > >whitelist_from [EMAIL PROTECTED] >whitelis

RE: [SAtalk] bayes

2003-12-01 Thread Kang , Joseph S.
> -Original Message- > From: Dan [mailto:[EMAIL PROTECTED] > Sent: Monday, December 01, 2003 14:22 > To: [EMAIL PROTECTED]; Matt Kettler > Subject: Re: [SAtalk] bayes > > > I took a peek, and I guess my question is this.. How do I > train on what > is spam, if the spam has already be

[SAtalk] Question about non-operative sa-stats.pl

2003-12-04 Thread Kang , Joseph S.
All: I think I saw an e-mail recently about the same problem I'm seeing with the sa-stats.pl script. The script runs just fine, but all stats returned from looking at /var/log/maillog are 0s. Any ideas on what I might be doing wrong? Essentially, I'm just calling sa-stats.pl as root from the co

RE: [SAtalk] SpamAssassin 2.61 released!

2003-12-09 Thread Kang , Joseph S.
> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Tuesday, December 09, 2003 10:18 AM > To: Charles Gregory > Cc: Justin Mason; [EMAIL PROTECTED] > Subject: Re: [SAtalk] SpamAssassin 2.61 released! > > > On Tue, Dec 09, 2003 at 11:12:46AM -0500, Charles Grego

[SAtalk] Mysterious SA tags in SPAM message?

2003-12-12 Thread Kang , Joseph S.
All: I just saw the strangest thing in my Yahoo! Mail bulk e-mail folder. It was the usual collection of pornographic spams. But, there was one message that really caught my eye. The subject line was: *SPAM* The Beautiful Art of Female [snip]. xdvldmgzyohhmcn.

RE: [SAtalk] Mysterious SA tags in SPAM message?

2003-12-12 Thread Kang , Joseph S.
Oops. I sent my reply directly to Matt instead of the list... -Joe > -Original Message- > From: Kang , Joseph S. > Sent: Friday, December 12, 2003 10:17 AM > To: 'Matt Kettler' > Subject: RE: [SAtalk] Mysterious SA tags in SPAM message? > > > &

RE: [SAtalk] SpamAssassin and SendMail

2003-12-17 Thread Kang , Joseph S.
> Sendmail is and MTA not a MDA. As far as I know, the MDA has > to call spamassassin (or spamd). This is where I may be > wrong, or maybe this is just the case with sendmail? For clarification to the uninitiated: MTA = Mail Transport Agent. Software used to TRANSFER e-mail messages between ma

RE: [SAtalk] SpamAssassin and SendMail

2003-12-17 Thread Kang , Joseph S.
> From: Brian Sneddon [mailto:[EMAIL PROTECTED] > > Do any good docs exist on using SpamAssassin with Sendmail as > a gateway to an Exchange server? This is how I configured > the spam filter we use here at work > (Sendmail+SpamAssassin+spamass-milter) and if there aren't > any good docs on

FW: [SAtalk] SpamAssassin and SendMail

2003-12-17 Thread Kang , Joseph S.
Man, I did it again! I meant to send this to the list and not solely to Chris... -Joe > -Original Message- > From: Kang , Joseph S. > Sent: Wednesday, December 17, 2003 10:20 AM > To: 'Chris Santerre' > Subject: RE: [SAtalk] SpamAssassin and SendMail >

RE: [SAtalk] importing spam from exchange users for sa-learn?

2003-12-18 Thread Kang , Joseph S.
> I think it's an issue of public vs private folders. I have an > IMAP script that pulls the files from an SA account just > fine. It was when I tried to use public folders that the > problem arose. > -- Interesting discussion all the way around... I have an RH 7.3+ box running sendmail, pr

RE: [SAtalk] sa-learn from Exchange 2000

2003-12-23 Thread Kang , Joseph S.
> -Original Message- > From: Timothy Donahue [mailto:[EMAIL PROTECTED] > Sent: Tuesday, December 23, 2003 12:36 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] sa-learn from Exchange 2000 > > How can I process messages from our exchange server as spam? > I have a whole bunch of messages

RE: [SAtalk] Is sa-learn supposed to take over 2 hours?

2004-01-08 Thread Kang , Joseph S.
> -Original Message- > From: Jody Cleveland [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 08, 2004 2:21 PM > To: 'David A. Carter'; '[EMAIL PROTECTED]' > Subject: RE: [SAtalk] Is sa-learn supposed to take over 2 hours? > > Ohh... So, I would want to run: > # sa-learn -p /etc/MailSca

RE: [SAtalk] Is sa-learn supposed to take over 2 hours?

2004-01-08 Thread Kang , Joseph S.
> -Original Message- > From: Jody Cleveland [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 08, 2004 2:29 PM > To: 'Kang , Joseph S.' > Subject: RE: [SAtalk] Is sa-learn supposed to take over 2 hours? > > > Cool. I tried that, and now, after sitti

RE: [SAtalk] hits over five yet not marked as spam...

2004-01-09 Thread Kang , Joseph S.
> We're being hit by MS security update emails. I know they're > not spam, > but rather more accurately described as virii or worms. > > However, I'm wondering if anyone has a good rule that will mark these? That's a good question. I got a few of those yesterday (day before?), too. I was fre

RE: [SAtalk] Re: Fresh WhoIs data (emails, phones, etc.) on sale!

2004-01-09 Thread Kang , Joseph S.
Is someone SPAMming the SA-Talk list or did this message get sent prematurely to the list?? -Joe K. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branch

RE: [SAtalk] Yahoo, etc

2004-01-09 Thread Kang , Joseph S.
> -Original Message- > From: Michael H. Collins [mailto:[EMAIL PROTECTED] > Sent: Friday, January 09, 2004 2:24 PM > To: Spamassassin-Talk (E-mail) > Subject: [SAtalk] Yahoo, etc > > > Sorta off topic, mebby, but: > > As good as SA is working here I have users that are > constantly rem

RE: [SAtalk] Low score for so many hits?

2004-01-12 Thread Kang , Joseph S.
> Any idea how a message with so many hits got such a low score? Yes, this message had a Habeas mark in the header. > > X-Spam-Level: ** > X-Spam-Checker-Version: SpamAssassin 2.61 > (1.212.2.1-2003-12-09-exp) on anubis > X-Spam-Status: No, hits=2.0 required=5.0 > tests=BAYES_99,BIZ_TLD,CLIC

RE: [SAtalk] Exchange and autolearn

2004-01-13 Thread Kang , Joseph S.
> -Original Message- > From: Dan [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 13, 2004 12:23 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Exchange and autolearn > > > Hi guys! > > I have a email gateway running spamassassin, amavisd-new and > postfix. I am blocking a good chunk

RE: [SAtalk] Re: Exchange and autolearn

2004-01-14 Thread Kang , Joseph S.
> -Original Message- > From: John Hall [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 14, 2004 6:15 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Re: Exchange and autolearn > > I found that Exchange 2000 changed the headers too much and > mime-encoded the body and so this approach