Re: [SAtalk] FW: [expert] Spamassassin + CommuniGate Pro config

2003-01-13 Thread Tom
go in more than one place zip them in the file structure in > the place were they should go. > Hi Brian, The communigatefaq site has three how-to's that may be helpful. http://www.communigatefaq.com/cgatefaq/ Tom --- This SF.NET e

RE: [SAtalk] thank you guys

2004-01-23 Thread Tom Meunier
I'll never complain about my old PII-400 taking 8.5 seconds to process a message through spamd again. -tom -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Kinghorn Sent: Friday, January 23, 2004 4:32 AM To: Spamassassin-Talk (E-mail) Su

RE: [SAtalk] BigEvil PF

2004-01-26 Thread Tom Meunier
laythings\.biz |exoticsitestevedore\.com|explodeyour\.com|expocard\.rd10\.net)\b/i describe BigEvilList_72 Generated BigEvilList_72 score BigEvilList_723.0 -tom > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Paul Barbeau > Sent: F

RE: [SAtalk] new chicnpox --lint failed

2004-01-26 Thread Tom Meunier
Upgrade to 1.14. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Arpi > Sent: Saturday, January 24, 2004 7:29 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] new chicnpox --lint failed > > Hi, > > After upgrading chichekpox to Version 1.11, spa

RE: [SAtalk] BigEvil PF

2004-01-29 Thread Tom Meunier
Ah, I see now. It's probably the link to exclaimer.co.uk which is a product that puts boilerplate disclaimers at the end of Exchange 200x emails. Lawyers love those things. Idunno why it's in there. -tom > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[

Re: [SAtalk] I never expected this!

2002-01-20 Thread Tom Lipkis
ed_hits 100 If I were an irate user who didn't want some damned spam filter scanning my mail, I might not be satisfied with that. (The X-Spam-Status: will still be there with the score.) If max_size was made settable in user_prefs (or SQL), users who don't

[SAtalk] false positives on conference announcements

2002-01-21 Thread Tom Lipkis
Conference announcements often contain the phrase "the following format" when requesting submissions, which matches the THE_FOLLOWING_FORM rule, which has a quite high score. Adding \W to the end of the pattern prevents this, and seems safe in gen

RE: [SAtalk] false positives on conference announcements

2002-01-22 Thread Tom Lipkis
s > > this, and seems safe in general. > > \b would be better there. Oops. You're right. Tom ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] bug in spamd defunct process reaper

2002-01-23 Thread Tom Lipkis
Looks like the waitpid() loop got put in the wrong place in spamd in the 2.0 release. It needs to be the last statement in the for, but it ended up as the last statement in the spawned sub, so runs in the wrong process. Tom *** spamd/spamd.raw.origFri Jan 18 20:30:51 2002 --- spamd

[SAtalk] addr to send false positives to?

2002-01-23 Thread Tom Lipkis
riate corpus. One of the problems with Razor is that non-spam accidentally gets added to the database. Tom ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] Non-essential feature request: spamd reload rules on SIGHUP

2002-02-16 Thread Tom Lipkis
to accept connections but defer processing them until it's done (else the listen() backlog might fill and new connections be refused). Tom ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamass

Re: [SAtalk] Non-essential feature request: spamd reload rules on SIGHUP

2002-02-18 Thread Tom Lipkis
port; Change the spamc config to point to that new > port. Kill the old spamd. Start a new spamd on the normal port; Change > spamc to point to the normal port. Kill the alternate-port spamd. Cute. It's not that critical, but if it were I might find the time to write the SIGHUP handle

[SAtalk] VERY_SUSP_RECIPS missing some, matching some wrongly.

2002-02-20 Thread Tom Lipkis
s it was matching lists that had no real similarities in the usernames. Tom ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Re: [SAtalk] false positives from VERY_SUSP_RECIPS

2002-02-20 Thread Tom Lipkis
?:\b\1[^@,]*\2.{0,30}?){9,}/is header VERY_SUSP_CC_RECIPS Cc =~ /\b([a-z][a-z])[^@,]{0,20}(@[-a-z0-9_\.]{0,30}).{0,30}?(?:\b\1[^@,]*\2.{0,30}?){9,}/is Tom ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] new, larger, GA scores

2002-02-27 Thread Tom Lipkis
I haven't installed 2.1, but I agree that the new scores are worrisome. With large scores like this (positive or negative), very small perturbations in input can cause wildly different results, which seems undesirable. I'd like to hear Justin's take on this, if he's not

RE: [SAtalk] Porn mail deleting for school

2002-04-17 Thread Tom Marazita
electronic communications are considered property of UC, privacy has a very high priority. To wit: http://www.ucop.edu/ucophome/policies/ec/html/ It's probably wise to check with each of our institutions on privacy matters beforehand. A lawsuit is a bad thing! Tom ========

Re: [SAtalk] Rules analysis

2002-05-01 Thread Tom Eastep
ou could say from just this analysis is that rules that were > never hit could possibly be deleted. > I wondered why I hadn't seen Dan's post so I looked in my SPAM folder and there it was. SA gave it 23.6 Hits :-) -Tom -- Tom Eastep\ Shor

[SAtalk] MIME boundary recognition, and body vs. full

2002-05-21 Thread Tom Pfeifer
sassin no longer tests full tests against decoded text; >use rawbody for that. using: X-Spam-Checker-Version: SpamAssassin 2.20 (devel $Id: SpamAssassin.pm,v 1.77 200 2/04/06 19:28:30 hughescr Exp $) -- Viele Grüße Tom ___ Don&#x

RE: [SAtalk] exchange and IMAP Public Folder messages

2003-08-14 Thread Tom Meunier
?? :-) > I don't know how you're doing this, but my Ham and Spam public folders work exactly as specified. Are you certain your users aren't forwarding them there, but rather dragging & dropping from Outlook? Are your users connecting to the server via

RE: [SAtalk] Custom Rules - spamd

2003-08-26 Thread Tom Meunier
Chris, A google of [reg2rule] and [reg2rule.pl] brings up nada. Throw me a bone? fwiw, I blacklist 'em when they come in, and my average spam score is up in the 40s. -tom > -Original Message- > From: Chris Santerre [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 26

RE: [SAtalk] Sobig virus blocking

2003-08-26 Thread Tom Meunier
http://www.exit0.us/index.php/VirusBounceRules -Original Message- From: Steve Combs [mailto:[EMAIL PROTECTED] Sent: Monday, August 25, 2003 11:07 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [SAtalk] Sobig virus blocking Can someone help me write a rule to block the sobgi viru

[SAtalk] Pyzor misconfig?

2003-08-27 Thread Tom Meunier
I must be doing something stupid, or have something misconfigured. My server times out on Pyzor tests about 90% of the time, and on DCC tests about 5-10% of the time. I've set the timeouts to 10 seconds. My average message analysis time due to these tests taking so long is 13-15 seconds. It was

RE: [SAtalk] Scores for OSIRU Tests

2003-08-27 Thread Tom Meunier
Keep in mind when you modify 20_head_tests.cf it'll be overwritten with each subsequent upgrade of SpamAssassin. Your local.cf won't. > -Original Message- > From: Larry Gilson [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 27, 2003 2:06 PM > To: '[EMAIL PROTECTED]'; [EMAIL PROTECTE

RE: [SAtalk] Spamassassin and Razor

2003-08-28 Thread Tom Meunier
http://www.spamassassin.org/tests.html It adds points to the total score, as in any other SA test. See the RAZOR2_CHECK and RAZOR2_CF_RANGE rules. > -Original Message- > From: Mike Burkhouse [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 9:24 AM > To: [EMAIL PROTECTED] > Su

RE: [SAtalk] Spamassassin and Mail Relay

2003-08-28 Thread Tom Meunier
-spam.html http://www.geocities.com/scottlhenderson/spamfilter.html http://www.advosys.ca/papers/printable/postfix-filtering.html -tom > -Original Message- > From: John B. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 11:23 AM > To: [EMAIL PROTECTED] > Subject: [SAtal

RE: [SAtalk] Spamassassin and Mail Relay

2003-08-28 Thread Tom Meunier
Oh yeah: If I were running Imail (I don't, but I play a person who does on TV) I'd at least give a cursory glance to IMGATE. http://imgate.meiway.com/ > -Original Message- > From: John B. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 11:23 AM > To: [EMAIL PROTECTED] > Sub

RE: [SAtalk] Changing Bayes scoring

2003-08-29 Thread Tom Meunier
Somebody already answered the syntax for modifying your scores in your local.cf, so... The auto-learn "bayes evaluator" doesn't take the Bayes scores into account when deciding whether to learn as spam or ham. So you could have autolearn threshold set to 10, have your Bayes tests at 20 points,

RE: [SAtalk] Changing Bayes scoring

2003-08-29 Thread Tom Meunier
ES_99 I don't need to sa-learn it. -tom > -Original Message- > From: Jon Gabrielson [mailto:[EMAIL PROTECTED] > Sent: Friday, August 29, 2003 1:03 PM > To: Tom Meunier; [EMAIL PROTECTED]; > [EMAIL PROTECTED] > Subject: Re: [SAtalk] Changing Bayes scoring > >

RE: [SAtalk] Bayes and whitelisting

2003-09-02 Thread Tom Meunier
grabs them in some really (to a human eye) bizarre contexts. Also, out of curiosity: do you find that the spamassassin-talk emails with attached spams score high enough to meet your auto-learn threshold? -tom > -Original Message- > From: Carlo Wood [mailto:[EMAIL PROTECTED] > Sen

RE: [SAtalk] bayes feedback

2003-09-02 Thread Tom Meunier
Because without a few hundred messages, it would be completely and utterly useless? It would be like meeting an airline pilot who was 5'7" tall and had a scar on his left cheek and wore his hat backwards. Bayes would think that scars on left cheeks were as reliable an indicator of airline-pilo

RE: [SAtalk] bayes feedback

2003-09-02 Thread Tom Meunier
y darned quickly. Managed to get through with only 2 FPs in the first couple of days, and by then it had trained itself up to several thousand hams/spams. -tom --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thin

RE: [SAtalk] Bayes filter and autolearning

2003-09-03 Thread Tom Meunier
ts=-1.3 This means that the only spams you'll auto-learn as spam are ones that are NOT within 4 points of your "spam level" setting. So in your case, you simply cannot learn spams <9 and you simply cannot learn hams >1. No matter what you set your auto_learn_thresholds t

RE: [SAtalk] Bayes filter and autolearning

2003-09-03 Thread Tom Meunier
Hi Dave, hope I can help here beyond parroting what I've read & played with... > > On this one, it's because autolearn learns the message pre-Bayes > > test. Without your Bayes_90, that message scored under 1.9 points, > > and so it was autolearned. The other reason that applies here is > > expl

RE: [SAtalk] why so low

2003-09-04 Thread Tom Meunier
http://useast.spamassassin.org/tests.html You've got negative scores all over that thing. Add them up. > -Original Message- > From: landy [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 04, 2003 5:31 AM > To: SA > Cc: [EMAIL PROTECTED] > Subject: [SAtalk] why so low > > i have

RE: [SAtalk] Change RBL lookup

2003-09-04 Thread Tom Meunier
There are already tests for SpamCop and NJABL: RCVD_IN_BL_SPAMCOP_NET RCVD_IN_NJABL X_NJABL_OPEN_PROXY X_NJABL_DIALUP You can see what blacklists are tested by default, and their assigned scores, at http://www.spamassassin.org/tests.html For examples of rules for alternative blacklists, see

RE: [SAtalk] osirusoft still working?

2003-09-05 Thread Tom Meunier
1. It *is* the case indeed. Look at your email. Since Osirusoft has blacklisted the entire internet, every one would have that test flagged, wouldn't it? Yes. It doesn't, does it? No. Setting it to 0 disables the test. 2. Even if it *did* run the test, if a test were to score zero points,

RE: [SAtalk] sa-learn says it learnt from 134 messages butcheck_bayes__db only reports 19 as nspam?

2003-09-05 Thread Tom Meunier
Feed it 1400 more? -tom > -Original Message- > From: Peter Kiem [mailto:[EMAIL PROTECTED] > > Yes I don't expect it to activate in SA until then but how can you get > it to over 200 when I feed it 134 emails but the db says it

RE: [SAtalk] Performance optimization for bigger setups

2003-09-05 Thread Tom Meunier
lter as a memory filesystem ("tmpfs" in Linux and Solaris). These filesystems are thousands of times faster than physical disk and are ideal for short-lived temp files. -tom --- This sf.net email is sponsored by:ThinkGeek Welcome to

RE: [SAtalk] Not sure if my Bayesian filter is adding to the score ...

2003-09-09 Thread Tom Meunier
You are correct. It needs 68 more spams. > -Original Message- > From: James Herschel [mailto:[EMAIL PROTECTED] > Sent: Tuesday, September 09, 2003 9:58 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Not sure if my Bayesian filter is adding to > the score > ... > > [snip] > Sep 9 10:

RE: [SAtalk] Not sure if my Bayesian filter is adding to the score ...

2003-09-09 Thread Tom Meunier
if you run spamassassin -D --lint it will show you a dbug line: debug: bayes corpus size: nspam = [number], nham = [number] > -Original Message- > From: James Herschel [mailto:[EMAIL PROTECTED] > Plus I'd just like to know how much further I > have to go before the Bayes kicks in

RE: [SAtalk] Not sure if my Bayesian filter is adding to the score ...

2003-09-09 Thread Tom Meunier
Yes, you're not running spamd as root, but you ran spamassassin -D --lint as root. Note the different paths to the bayes databases in your output. > -Original Message- > From: James Herschel [mailto:[EMAIL PROTECTED] > Sent: Tuesday, September 09, 2003 3:07 PM > To: To

RE: [SAtalk] SA only ran 1 test??

2003-09-10 Thread Tom Meunier
C, if the headers themselves don't break any rules. -tom > -Original Message- > From: jpf [mailto:[EMAIL PROTECTED] > Sent: Tuesday, September 09, 2003 11:51 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] SA only ran 1 test?? > > I rec'd the following mai

RE: [SAtalk] No BAYES_* ?

2003-09-10 Thread Tom Meunier
not resemble words. Also note that this email has very unusual spacing between words, and does funny things with the placement of punctuation. It probably confused Bayes. You'll want to learn it. For some reason I didn't see the spam header report on this email, so this is all

[SAtalk] Rules for hoaxes

2003-09-10 Thread Tom Meunier
I'm mulling over whether to make some SA rules for some of the more common urban legends and virus hoaxes. Has anyone played with this, that is willing to share experiences? -tom --- This sf.net email is sponsored by:ThinkGeek Welco

RE: [SAtalk] The Verisign folly

2003-09-16 Thread Tom Meunier
"Date: Sat, 25 Jan 2003 10:19:37 +1100" -tom > -Original Message- > http://www.iab.org/Documents/icann-vgrs-response.html --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://

RE: [SAtalk] The Verisign folly

2003-09-16 Thread Tom Meunier
I think the linked IAB missive is related to this: http://www.merit.edu/mail.archives/nanog/2003-01/msg00023.html WTF is Verisign doing anyway? Deciding the Internet is their own private toy? And everyone in the world is using it at their (verisign's) whim? -tom > -Original

RE: [SAtalk] Recognising dynamic rr.com IPs

2003-09-17 Thread Tom Meunier
http://blackholes.us/ > -Original Message- > From: Peter Kiem [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 17, 2003 7:41 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Recognising dynamic rr.com IPs > > I'm getting sick of all the spam that comes from rr.com and > have been b

RE: [SAtalk] help with master.cf and filter

2003-09-17 Thread Tom Organ
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Alan > Fullmer > Sent: Wednesday, 17 September 2003 12:31 PM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] help with master.cf and filter > > > alright, one more question is there any way i can remove t

RE: [SAtalk] disable rbls, but keep pyzor, dcc, razor

2003-09-18 Thread Tom Meunier
skip_rbl_checks 1 #even though they're default if installed anyway... use_razor2 1 use_pyzor 1 use_dcc 1 You've disabled the Osirusoft tests, I hope. Those hit everything on the Internet. -tom > -Original Message- > From: Covington, Chris [mailto:[EMAIL PROTECTED]

RE: [SAtalk] Scan Message Max Size

2003-09-18 Thread Tom Meunier
Define "safe" - I stick with the default of 250kb and have never had an issue with it. I can't see receiving a spam anywhere near that size, that wouldn't also trigger an attachment blocking rule on my gateway MTA. -tom > -Original Message- > From: Jeff Fun

RE: [SAtalk] Question for the FAQ

2003-09-19 Thread Tom Meunier
Absolutely. www.exit0.us/index.php/VirusBounceRules among other things. -tom > -Original Message- > From: Ivar Magne Auestad [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 18, 2003 1:01 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: [SAtalk] Qu

RE: [SAtalk] Scan Message Max Size

2003-09-19 Thread Tom Meunier
> That'd be like that New Shimmer! It's a virus AND a banned executable attachment! I have tools designed to deal with both of those, and SpamAssassin isn't one of them. -tom --- This sf.net email is sponsored by:ThinkGeek

[SAtalk] Re: Question for the FAQ

2003-09-19 Thread Tom Diehl
rk. I seeing this also. A message I saw on another list earlier today stated that there seemed to be a bug in the virus that sometimes allowed it to send its message without the exe. as a result the virus scanners were missing it. HTH, -- ..Tom Registered Linux User #14522h

RE: [SAtalk] Spam and bounces

2003-09-19 Thread Tom Meunier
SpamAssassin doesn't bounce mail, period. If you want it to bounce mail, please do so. If you don't, don't. Further documentation in your MTA's man pages. -tom > -Original Message- > From: Regis Wilson [mailto:[EMAIL PROTECTED] > Sent: Thursday, Se

[SAtalk] SQL user prefs

2003-09-19 Thread Tom Predmore
no avail as well. Update and perl modules. Checked all permissions. Any help would be greatly appreciated! -- Regards, Tom --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf

RE: [SAtalk] Bayes questions

2003-09-21 Thread Tom Meunier
n to, "Well, that isn't really optimal, so don't overdo it." Keep in mind that a "large corpus" is optimal, but the necessary corpus to get Bayes working is 200 hams & 200 spams. -tom > -Original Message- > From: Ed Greenberg [mailto:[EMAIL PROTECT

RE: [SAtalk] Really really simple spams - not enough to accumulate 4 points

2003-09-21 Thread Tom Meunier
Bayes, RBL checks, Razor, DCC, Pyzor. -tom > -Original Message- > From: Ed Greenberg [mailto:[EMAIL PROTECTED] > Sent: Sunday, September 21, 2003 8:58 AM > To: spamassassin talk > Subject: [SAtalk] Really really simple spams - not enough to > accumulate 4 points >

RE: [SAtalk] Autodeleting spam based on score without deleting all spam

2003-09-21 Thread Tom Meunier
Why, Google of course! http://savannah.nongnu.org/projects/spamass-milt/ Yes, it works with qmail. -tom > -Original Message- > From: Tomáš Macek [mailto:[EMAIL PROTECTED] > Sent: Sunday, September 21, 2003 8:40 AM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Autodele

RE: [SAtalk] Autodeleting spam based on score without deleting all spam

2003-09-21 Thread Tom Meunier
Oh pooh. Ignore me. Of course Patrick is right; it doesn't support qmail. > -Original Message- > From: Tom Meunier > Sent: Sunday, September 21, 2003 9:51 AM > To: 'Tomáš Macek'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] Autodeleting spam based on scor

RE: [SAtalk] Better logging?

2003-09-22 Thread Tom Meunier
Spamstats does that. http://www.gryzor.com/tools/ > -Original Message- > From: Markus Gaugusch [mailto:[EMAIL PROTECTED] > Sent: Monday, September 22, 2003 5:31 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Better logging? > > Hi, > I'm using spamassassin on our relay server (with pos

RE: [SAtalk] SpamAssassin filters seem too weak out of the box...

2003-09-22 Thread Tom Meunier
It's not abysmal. You just don't understand it. Most people get in excess of 99% of spam with SpamAssassin. Isn't it great to know that SpamAssassin is so well geared against false positives that you're TRYING to send a spammy email and can't do it? http://www.spamassassin.org/tests.html Break

RE: [SAtalk] SpamAssassin filters seem too weak out of the box...

2003-09-22 Thread Tom Meunier
en the one-in-500 that gets through. Honest, Mike. Try it. It may seem counterintuitive, but it really does work. It's actually quite difficult to hand-construct a spam. That is expected behavior. Good luck, -tom --- This sf.net emai

RE: [SAtalk] Philosophical SA questions

2003-09-22 Thread Tom Meunier
ical question #6: Why autolearn only on the > certainly spam? Most of them already score high on Bayes, > why not train on the borderlines where bayes could push it > over the edge? I get a lot of 3.9s and 4.2s with no (or > little) affecting score from bayes. To guard against mistakes

RE: [SAtalk] required_hits 10 email scores a 7 and is blocked

2003-09-23 Thread Tom Meunier
SpamAssassin doesn't block mail. All it does is mark it up for content. That mail seems to have been marked up for spam content correctly. Therefore, your problem is not with SpamAssassin but rather with the product that you've configured to quarantine mail. > -Original Message- > From:

RE: [SAtalk] problems with 2.60

2003-09-23 Thread Tom Meunier
Go check your filesystem rights on those file & directories. That's happened to me before, and I was waiting for it to happen this time too, and mysteriously, it didn't. My gateway boxen must be contagious. :) -tom > -Original Message- > From: Steve Heggood [mai

RE: [SAtalk] Better logging?

2003-09-23 Thread Tom Meunier
I think the main thrust of his answer was that Google Is Your Friend. http://www.gryzor.com/tools/ -tom > -Original Message- > From: Jim Knuth [mailto:[EMAIL PROTECTED] > > First hit after googling for spamstats and perl: > > http://freshmeat.net/projects/spams

RE: [SAtalk] SA WISH LIST Country Identification 2 Digit Codes

2003-09-29 Thread Tom Meunier
You could probably make some of that happen yourself by implementing some of the blacklists at http://www.blackholes.us See http://www.blackholes.us/docs/usage.html#spamassassin for usage info. -tom -Original Message- From: Andrew Thomas [mailto:[EMAIL PROTECTED] Sent: Friday, September

RE: [SAtalk] Bayes question: Can I change the number of messages required before bayes kicks in?

2003-09-29 Thread Tom Meunier
Why not just go get 80 spams from the public corpus? It'll be not optimal, but it'll be better than forcing it with 120. http://spamassassin.org/publiccorpus/ > -Original Message- > From: Bill [mailto:[EMAIL PROTECTED] > Sent: Friday, September 26, 2003 10:45 AM > To: [EMAIL PROTECTED]

RE: [SAtalk] Auto-whitelist (AWL) enable/disable?

2003-09-29 Thread Tom Meunier
ed a few months ago, and no definitive answer was given. -tom > -Original Message- > From: Doug Ledbetter [mailto:[EMAIL PROTECTED] > Sent: Friday, September 26, 2003 2:12 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Auto-whitelist (AWL) enable/disable? > > > H

[SAtalk] Change the program SA forwards to

2003-09-29 Thread Tom Predmore
ne. Anyhow, I do not want to break the POP before SMTP and the SA SQL user prefs since qmail-scanner passes the user info to SA. All I want next is SA to pass it to Vexira and Vexira will call qmail's sendmail for delivery. Any Ideas Greatly ap

[SAtalk] Change the program SA forwards to

2003-09-29 Thread Tom Predmore
it's working fine. Anyhow, I do not want to break the POP before SMTP and the SA SQL user prefs since qmail-scanner passes the user info to SA. All I want next is SA to pass it to Vexira and Vexira will call qmail's sendmail for delivery.   Any Ideas Greatly appreciated! -Tom

Re: [SAtalk] Restart Spamd

2003-09-30 Thread Tom Gwilt
On Tue, 30 Sep 2003, Scott Rothgaber wrote: > Mike Carlson wrote: > > > What is the best way to kill spamassassin and restart it again after making > > a change to the local.cf file? > > `/usr/local/etc/rc.d/spamd.sh restart' on FreeBSD. > > IIRC, this just kills and restarts the daemon. I seem

RE: [SAtalk] Re: Automating usage of sa-learn

2003-09-30 Thread Tom Meunier
; option on a customers box today, without avail. It almost > drove me crazy... Tools > Options > Email Options > When Forwarding > Attach Original Message. or from the message editing interface itself: Insert > Item and browse through your

RE: [SAtalk] Bayes (again)

2003-10-01 Thread Tom Meunier
1. It's okay to train with the spam with Spamassassin markup. sa-learn ignores the markup. 2. It's not okay to train with "this month's sent-mail" - you need to be training it with mail that reflects the type of mail you GET, not send. The headers are as c

[SAtalk] Bayes poison

2003-10-02 Thread Tom Meunier
What to do with a spam that includes this garbage at the bottom, in a hidden font? Bayes freaked, I'm kinda glad it didn't auto-learn it. I'd rather have the false negative than that. (Only snipped the Bayes poison from the mail, I think maybe Mozilla TBird put all the = i

RE: [SAtalk] Highest Score

2003-10-03 Thread Tom Meunier
Look, there's a poll for this at http://news.spamassassin.org/modules.php?op=modload&name=NS-Polls&file=index Is it inappropriate to suggest that we see who's got the biggest thingy over there? -tom --- This sf.net

RE: [SAtalk] Re: Pyzor in 2.60?

2003-10-03 Thread Tom Meunier
I've been able to re-discover pyzor servers (and it always winds up with the same server) and get pyzor working for a couple hours before the "couldn't grok response '...TimeoutErrors'" begins again. I've disabled Pyzor and just written it off to my own ignorance. Basically once it starts not

RE: [SAtalk] spamd and -a option in 2.60?

2003-10-06 Thread Tom Meunier
It's the first option on the list if you type spamd --help > -Original Message- > From: Rob Mangiafico [mailto:[EMAIL PROTECTED] > Sent: Monday, October 06, 2003 1:10 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] spamd and -a option in 2.60? > > In the 2.60 docs, the -a "auto whitelis

RE: [SAtalk] 50% Spam Reduction Rate

2003-10-06 Thread Tom Meunier
What version of SpamAssassin? You can implement Razor, DCC, RBLs, and train your Bayes up to 200 each of spam/ham to augment the tools at SA's disposal. -tom > -Original Message- > From: David M. Carney [mailto:[EMAIL PROTECTED] > Sent: Monday, October 06, 2003 1:09 P

RE: [SAtalk] SA's recently slowed down for me!

2003-10-06 Thread Tom Meunier
You need to either upgrade to 2.60 or remove your Osirusoft and orbs tests tests as specified in the article at http://news.spamassassin.org. Those blocklists are dead and are waiting until your timeout. -tom > -Original Message- > From: Jim Ford [mailto:[EMAIL PROTECTED] > Sen

RE: [SAtalk] spamassassin -tD creates higher score than MailScanner & SpamAssassin

2003-10-06 Thread Tom Meunier
So you're saying that when you cut and paste the body of a spam into an email, removing the spammer's headers, SpamAssassin doesn't rate your headers as spammy as the spammer's headers? And you include only the spammy body, and it trips off all the spammy body checks? That's to be expected, isn't

RE: [SAtalk] 2.60 Problems

2003-10-07 Thread Tom Meunier
6 asterisks indicates it's not quite 7.0. Probably 6.9something. You could add up the scores to verify if you really like, but that's what's happening. X-Spam-Level: ** X-Spam-Status: No, hits=7.0 required=7.0 tests=BAYES_10,DATE_IN_PAST_03_06, HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_RED

RE: [SAtalk] OT: anti-spam email-only host

2003-10-07 Thread Tom Meunier
Sounds like Postini. Or Messagelabs. postini dot com or messagelabs dot com. Messagelabs is using a modified SpamAssassin, iirc. > -Original Message- > From: Jonathan Vanasco [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 07, 2003 5:23 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk

RE: [SAtalk] Why SpamAssassin STOP FILTERING SPAM !!! HELP !!!

2003-10-08 Thread Tom Meunier
nce on the already-scanned mail. Perhaps during whatever adds that funny X-UIDL header. Follow the path that the email's taking between Internet and final destination, and you'll see the place where the process breaks down. It's difficult to see because you're not

RE: [SAtalk] RBL check

2003-10-08 Thread Tom Meunier
Hi Doug, The answer to your question varies depending on what version of SpamAssassin you're using, and what RBL's you're seeing scores on. This is crucial information to answering your question. Since this is a well-documented issue with versions before 2.60, I'm going to assume that, and that y

RE: [SAtalk] Why SpamAssassin STOP FILTERING SPAM !!! HELP !!!

2003-10-08 Thread Tom Meunier
(I must be annoying SOMEBODY) Hi Oz, Which machine(s) have spamassassin? I know domini does, but does siena also have spamassassin? That would cause this behavior. -tom - headers - On Wednesday 08 October 2003 13:25, you wrote: > It's difficult to see because yo

RE: [SAtalk] Why SpamAssassin STOP FILTERING SPAM !!! HELP !!!

2003-10-08 Thread Tom Meunier
> -Original Message- > From: O-Zone [mailto:[EMAIL PROTECTED] > On Wednesday 08 October 2003 13:40, Tom Meunier wrote: > > (I must be annoying SOMEBODY) Hi Oz, Which > > machine(s) have spamassassin? I know domini does, but does > siena also > > have

Re: [SAtalk] How does a message like this get through?

2003-10-09 Thread Tom Satter
that were set up for the site, that might be a nice rule to add to the list. tom -- tom satter - just plain old tom (303) 543-7623 (home) Matt Kettler said: > At 12:25 PM 10/9/2003, Eric Vollmer wrote: > >>My question is, what is the threshold for subject/body text like >&

[SAtalk] HTML character entities

2003-10-11 Thread Tom Wentworth
rough this list I found a reference to a test named HTTP_ENTITIES_HOST Yet, I don't see this in the current list of tests on the website. Has it been done away with? If it has, why? SA 2.55, Razor 2 --tom wentworth -- Protect yourself f

RE: [SAtalk] How to ignore attachments of a certain size?

2003-10-12 Thread Tom Meunier
How do you call SpamAssassin? Please be specific with your answer. :) If you use spamc/spamd it defaults to only scanning up to 250kb, configurable with the -s switch. No config file necessary, you set it as a switch on the line that you call spamc with. http://www.spamassassin.org/doc/spamc.ht

RE: [SAtalk] Bayes not working.. On System Wide SA

2003-10-12 Thread Tom Meunier
27;re seeing logged on as root is not accurate for troubleshooting purposes. -tom > -Original Message- > From: Robert Leonard III [mailto:[EMAIL PROTECTED] > Sent: Saturday, October 11, 2003 10:13 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Bayes not working.. On System

[SAtalk] Popcorn & Weeds & Backhair

2003-10-12 Thread Tom Meunier
and that actually cut my spam traffic by over 50% by itself, but again this stuff never gets learned in Bayes. Has anyone else juggled these questions? -tom --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts ov

RE: [SAtalk] Too many rules?

2003-10-12 Thread Tom Meunier
statistics output with evilrules.cf, as I simply "blacklist_from *foo.tld" offending domains to my blacklist.cf file. -tom > -Original Message- > From: Robert Leonard III [mailto:[EMAIL PROTECTED] > Sent: Saturday, October 11, 2003 10:09 PM > To: [EMAIL PROTECTED] &g

RE: [SAtalk] SA memory utilization (Was: Evil rules HUGE update!

2003-10-12 Thread Tom Meunier
YPE_ONLY,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,NORMAL_HTTP_TO_IP, RCVD_IN_SBL,RCVD_IN_SORBS,T_AM_SPAMMY_SENDER,USER_IN_BLACKLIST,W_ROT13_B _R -tom --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 O

RE: [SAtalk] Bayes not working.. On System Wide SA

2003-10-13 Thread Tom Meunier
Well, it depends. If you run sa-learn and you're concerned that it's not running, use the --showdots switch and it'll give you a progress indicator. Just go ahead and sa-learn --ham a couple hundred hams real quick, it'll start up from there. No further config necessary. -

RE: [SAtalk] Not reading local.cf?

2003-10-13 Thread Tom Meunier
-H should list a directory other than the default home directory of the user that's calling spamc. Else, don't use it at all. -m5 should be -m 5 I believe. Other than that, Idunno. Feel free to ignore me. -tom > -Original Message- > From: [EMAIL PROTECTED]

RE: [SAtalk] Automatic Unsubscribe

2003-10-14 Thread Tom Meunier
phy with forged headers, likely to honor their promise to unsubscribe your users? -tom > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Leon Oosterwijk > Sent: Tuesday, October 14, 2003 8:28 AM > To: [EMAIL PROTECTED] > Sub

RE: [SAtalk] Spamassassin updates

2003-10-16 Thread Tom Meunier
> -Original Message- > > I'm Linux SysAdmin at the company I work for, I always > install everything from source. > A colleague, a Windows SysAdmin, installs everything on his > Linux boxes from RPMs. > > What does that tell you? :) > Tells me we need a larger sample size. I'm a Wind

RE: [SAtalk] LOTS of mail being tagged wrong

2003-10-17 Thread Tom Meunier
Train Bayes with sa-learn --ham using a sizable representative sample of the shipping company's "known good" email. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Håkon Nilsen (Exinet AS) > Sent: Friday, October 17, 2003 6:21 AM > To: [EMAIL P

RE: [SAtalk] Bayes location setting?

2003-10-17 Thread Tom Meunier
That's right. It seems weird, doesn't it? But basically, that setting tells SA that the filenames are /usr/local/share/bayes_* To achieve what you think it should be, you'd want to do bayes_path /usr/local/share/bayes/bayes - funny as that sounds. > -Original Message- > From: [EMAIL P

  1   2   3   >