RE: How to rewrite spamc in Perl

John Rudd wrote: > As long as people are thinking about new implementations of > spamc/spamd, I'd like to make a couple suggestions: > > 1) make room for passing a reference to a message instead of the message > itself, to reduce network latency when it is not necessary (for > example, if the spam

Re: How to rewrite spamc in Perl

Michael Parker wrote: > > On Wed, Oct 06, 2004 at 02:11:19PM -0700, [EMAIL PROTECTED] wrote: > > > > Is there any documentation for the spamd client interface? > > MIMEDefang can talk to clamd.sock directly, using the commands in man > > clamd, rather than spawning `clamdscan` processes. I checke

Re: dnsbl lookups slow due to "sleep 1" in code, plus patch

Jan-Pieter, Can you open a bug against 3.0.0 on bugzilla.spamassassin.org and attach the patches (use the "Create a new attachment" link after the bug has been opened)? My main concern is the increase in CPU time required (since multiple spamd processes will be running), especially on boxes that

Re: Odd syslog errors.

> Ernie Dunbar wrote: Oct 5 13:26:39 pop spamd[19660]: Cannot open bayes databases /home/spamc/.spamassassin/bayes_* R/O: tie failed: Permission denied Oct >>> >>>The typical cause of this is that the file ownership changed on the >>>bayes files when you converted them to 3.0. At lea

Level _STARS(*)_

I read everything I could find... still doesn't work. I don't get it. I want to enable the header Level _STARS(*)_. The content of my "bare bone" /etc/mail/spamassassin/local.cf is below; rewrite_header Subject *SPAM* report_safe 1 lock_method flock add_header all Level _STARS(*)_ Ev

Re: How to rewrite spamc in Perl

On Wed, Oct 06, 2004 at 02:11:19PM -0700, [EMAIL PROTECTED] wrote: > > Is there any documentation for the spamd client interface? > MIMEDefang can talk to clamd.sock directly, using the commands in man > clamd, rather than spawning `clamdscan` processes. I checked man > spamd and man spamc but co

Re: How to rewrite spamc in Perl

Docs for the spamd protocol are in the source tree. Mail-SpamAssassin-3.0.0/spamd/PROTOCOL On Wednesday 06 October 2004 03:11 pm, [EMAIL PROTECTED] wrote: > I'm interested in restructuring my MIMEDefang/SpamAssassin setup. > Currently each MIMEDefang slave carries around its own SpamAssassin obje

Re: Odd syslog errors.

Ernie Dunbar wrote: Oct 5 13:26:39 pop spamd[19660]: Cannot open bayes databases /home/spamc/.spamassassin/bayes_* R/O: tie failed: Permission denied Oct The typical cause of this is that the file ownership changed on the bayes files when you converted them to 3.0. At least this was the problem I

How to rewrite spamc in Perl

I'm interested in restructuring my MIMEDefang/SpamAssassin setup. Currently each MIMEDefang slave carries around its own SpamAssassin object. I want to use spamd instead. I could use `spamc ...` inside mimedefang-filter but that could be unnecessarily expensive in process startup costs etc. Is

Re: Odd syslog errors.

> On Wed, 6 Oct 2004, Ernie Dunbar wrote: > >> Every hour or so, it spews forth a dozen or so messages like this: >> >> Oct 5 13:26:25 pop spamd[267]: server hit by SIGCHLD >> Oct 5 13:26:25 pop spamd[267]: handled cleanup of child pid 9980 >> Oct 5 13:26:25 pop spamd[267]: server successfully s

dnsbl lookups slow due to "sleep 1" in code, plus patch

While trying to track down why spamassassin (2.64) suspiciously often took around 1.0x seconds to run, I came across this code snippet: (Mail/SpamAssassin/Dns.pm, line 311): sleep 1; This same code is still present in version 3.0 (at line 319). The code is executed while collecting the DNSBL

Re: [OT] Uptime was [scan times up!]

And I hope you're taking that opportunity to update IOS on it as well. On Tuesday 05 October 2004 05:58 pm, Nate Schindler wrote: > A sad day is coming on Thursday, I have to re-boot a router at one of our > remote locations to install a new card. > I always loved showing this to people who insis

RE: SPF Records

On Wed, 6 Oct 2004 14:00:19 -0400, Dave Duffner - NWCWEB.com wrote > Last we heard from this (or another, poss. MailScanner) List > was that SPF's are now a dead issue. Some locations are using it > and trying to keep it alive, but even MicroWreck backed off their > stance in supporting it.

Re: SPF Records

On Oct 6, 2004, at 4:03 PM, Wess Bechard wrote: Is there an SA rule to decrease valid SPF mail server's scores yet? I think it does something like -0.001 points. and that's about all it should ever do. check the archives for massive discussion both here and in the SPF lists, I'm sure. SPF is n

Re: Odd syslog errors.

On Wed, 6 Oct 2004, Ernie Dunbar wrote: > Every hour or so, it spews forth a dozen or so messages like this: > > Oct 5 13:26:25 pop spamd[267]: server hit by SIGCHLD > Oct 5 13:26:25 pop spamd[267]: handled cleanup of child pid 9980 > Oct 5 13:26:25 pop spamd[267]: server successfully spawned

Odd syslog errors.

I'm running spamassassin 3.0.0 on FreeBSD 4.9-STABLE with the spamd daemon accepting connections locally from qmail-scanner for all incoming mail. Our server does some 80K messages per day. Spamd runs like this: /usr/local/bin/spamd -A 127.0.0.1 -L -x -u spamc -d -m 10 Every hour or so, it spews

Re: SPF Records

Is there an SA rule to decrease valid SPF mail server's scores yet? On Wed, 2004-10-06 at 15:59, Oscar Retana wrote: The actual number is about: 140.000 domains This only includes those manually registered at: http://spftools.infinitepenguins.net/register.php Check also: http://spf.pobox.co

Re: SPF Records

The actual number is about: 140.000 domains This only includes those manually registered at: http://spftools.infinitepenguins.net/register.php Check also: http://spf.pobox.com/ More important than the current percentaje of domains publishing SPF records is the fact that most important domains arou

Re: more spam since upgrade

On Oct 6, 2004, at 6:56 AM, Darren Coleman wrote: - Are you using any additional rulesets from www.rulesemporium.com ? If not why not? :) with so many to choose from, how do you decide which ones to use? there needs to be some sort of user ranking and/or stats on these to help make an informed

Re: SPF Records

On 2004-10-06, at 19.48, Stuart Gall wrote: I read that 21,000 domains now use an SPF record, so we should be checking for it right? The numbers are far greater than that. You can check the statistics of domains that use SPF and that have manually registered that they do here:

Re: Can anyone explain these e-mails (and how to stop them)?

In case you're curious: It's a solicitation for a conference on the 18th in Moscow to talk about how not to make mistakes on taxes if you pay someone's salary or wages. It costs only 3900 roubles (~$133.50US)! Or if you can't cover that, for 2600 roubles (~$89US), you can get a recording of the

RE: Config Help

At 02:33 PM 10/6/2004, Joey wrote: So we should only have settings like required_score in local.cf specific to what we want, and change the 10_misc.cf for the report part in /usr/share/spamassassin/ Does that sound right? No.. you should leave 10_misc.cf in /usr/share/spamassassin and leave it ALO

RE: Spellcheck plugin?

> > > I'm wondering, would it be useful to have a plugin that penalizes > > messages with many spelling mistakes? This might help against all > > those creative ways of spelling out what the spammer wants to sell. > > I don't know that anyone has worked on specifically what you > are thinking

RE: more spam since upgrade

I haven't seen that with the upgrade, did the required_hits get raised by any chance with a new config? Also this is off your topic but helpful are you using Mail::SpamAssassin::Plugin::URIDNSBL This has worked very well for us. http://www.surbl.org/ Joey -Original Message- From: Z

Re: Config Help

On Wed, Oct 06, 2004 at 02:33:12PM -0400, Joey wrote: > So we should only have settings like required_score in local.cf specific to > what we want, and change the 10_misc.cf for the report part in > /usr/share/spamassassin/ > Does that sound right? No. Don't touch anything in /usr/share/spamassas

RE: Config Help

OK that helps we had it that way before (bad). However at the top of the 10_misc.cf it says: # SpamAssassin basic config file # # Please don't modify this file as your changes will be overwritten with # the next update. Use /etc/mail/spamassassin/local.cf instead. # See 'perldoc Mail::SpamAssassin

_SCORE( )_ with multiple spaces and IMAP

I've found that the Dovecot IMAP server (also apparently UW-IMAP) "canonicalizes" subject lines in message lists by reducing all runs of white space to a single space. This kills the utility of white space padding in the _SCORE( )_ header rewriting macro in preserving columns for numerical sort

RE: more spam since upgrade

With SA-2.63 I guest that 95% or even more spam was found not approx. 70-80% and now very trival spams come through for example (I replaced 'V' and 'P' with 'X') Xiagra and Xenis. Zsolt > -Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004

RE: SPF Records

Dave Duffner - NWCWEB.com said: > > Last we heard from this (or another, poss. MailScanner) List > was that SPF's are now a dead issue. Some locations are using it > and trying to keep it alive, but even MicroWreck backed off their > stance in supporting it. Quite mistaken, the attempt by

Re: SPF Records

On Wed, Oct 06, 2004 at 02:00:19PM -0400, Dave Duffner - NWCWEB.com wrote: > Last we heard from this (or another, poss. MailScanner) List > was that SPF's are now a dead issue. Some locations are using it > and trying to keep it alive, but even MicroWreck backed off their > stance in suppor

RE: SPF Records

> -Original Message- > From: Stuart Gall [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004 1:49 PM > To: users@spamassassin.apache.org > Subject: SPF Records > > Hello, > Does SA 3.0.0 check for the presence of the SPF record in the DNS of > the originating domain ? > > I re

Re: Config Help

SA runs rules files in order by name. I don't konw if this is per-directory or across all rules directories; I suspect the later. Just stick your modified rule into local.cf rather than copying the whole file. This will hopefully override everything you want overridden. Loren

Re: SPF Records

On Wed, Oct 06, 2004 at 08:48:48PM +0300, Stuart Gall wrote: > Does SA 3.0.0 check for the presence of the SPF record in the DNS of > the originating domain ? If you have Net::DNS installed and the plugin loaded (it is by default). -- Randomly Generated Tagline: "A: You mean it's not due on Fri

Re: SPF Records

On Wed, 6 Oct 2004, Stuart Gall wrote: Hello, Does SA 3.0.0 check for the presence of the SPF record in the DNS of the originating domain ? I read that 21,000 domains now use an SPF record, so we should be checking for it right? Out of how many domains total? The numbers impressive. The percen

Re: Config Help

Ah. Thanks Theo, I learn something new every day. Loren

SPF Records

Hello, Does SA 3.0.0 check for the presence of the SPF record in the DNS of the originating domain ? I read that 21,000 domains now use an SPF record, so we should be checking for it right? Stuart Gall Klien bottle for rent Enquire within. -

RE: Config Help

At 01:28 PM 10/6/2004, Joey wrote: I looked for all copies of the config file: /root/.cpan/build/Mail-SpamAssassin-3.0.0/t/log/test_rules_copy/10_misc.cf /root/.cpan/build/Mail-SpamAssassin-3.0.0/rules/10_misc.cf /etc/mail/spamassassin/10_misc.cf /usr/share/spamassassin/10_misc.cf And the only one

RE: Config Help

-Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 1:23 PM To: Joey; users@spamassassin.apache.org Subject: Re: Config Help At 12:52 PM 10/6/2004, Joey wrote: >In upgrading to 3.0 from 2.x there seems to be some confusion with the >local.cf

Re: Config Help

At 12:52 PM 10/6/2004, Joey wrote: In upgrading to 3.0 from 2.x there seems to be some confusion with the local.cf and 10_misc.cf file. I should be using the one located in /etc/mail/spamassassin/ correct? Yes, you should be using local.cf. Don't edit *anything* in /usr/share. Have you run spamassa

Re: Can anyone explain these e-mails (and how to stop them)?

Well, its Russian, talking about something that happened or will happen on the 18th of October 2004. Looks kinda like a business mail, it has an address and a phone number. You could either block the character set, use ok_languages, or, with several of these, start looking for phrases to block on

Re: Config Help

On Wed, Oct 06, 2004 at 10:08:23AM -0700, Loren Wilton wrote: > > body MY_SCAM_RULE_1 /free money|chep stuff/i > > Almost but not quite. YOu need aprends around the group. And to be > efficient you need a specific sequence at the start: "(?:", not just "(". > body MY_SCAM_RULE_1 /(?:free money|c

RE: Can anyone explain these e-mails (and how to stop them)?

Looks like cyrillic (Russian alphabet) - you might look at the settings in local.cf for languages and locales. They are ok_languages and ok_locales Here's the info for SA 3.0 http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Conf.html#language_options Steve -Original Me

Re: Config Help

> Problem 2: > > Rules for checking multiple items on one line. > > I am creating my rule like below with a pipe separating each word, or group > of words to match, is this the correct way? > > body MY_SCAM_RULE_1 /free money|chep stuff/i Almost but not quite. YOu need aprends around the group.

Re: more spam since upgrade

> spamassassin --lint passes without any messages. Is that OK or not? That is good. Sounds like you have a clean set of config files. If the problem at this point is things leaking through (but you ARE seeing scores, so you know things are basically working) than I would get some SARE rules, plu

Re: Can anyone explain these e-mails (and how to stop them)?

Uggg.. that didn't come through right.. let me try this again.. they look like this: ÐÐÑÐÐÐÑÐÑÑ ÐÐÐÑÑ ÐÐÐÑÑÑ ÐÑÐ ÐÑÐÐÑÐÐ, ÐÐÐÑÑÐÐ ÑÐÐÑÐÑÑÑÑ ÐÐÑÑÐÐÑÐÐÑÑÑ. ÐÐÐ ÐÐ ÑÐÐÐÑÑÐÑÑ ÐÑ Ð ÐÐÑÐÑÐ Ð ÐÑÐÐÐÑÐ ÐÐÑÐÐÐÑÐÐÐ ÐÐÐÑÑ Ð ÐÐÑÐÐÐÑÐÑÑ ÐÐÑ, Ñ ÐÐ ÐÐÐÑÐÑÐÐÐ ÐÐÐÑÑ ÑÑÑ ÐÑÑÐÐÐÑÐÑÑ

Can anyone explain these e-mails (and how to stop them)?

We've been getting some of these e-mails (see attached) and I'm wondering how to stop them. They are totally not in english so I'm struggeling... --- Begin Message --- Title: ÐÐÑÐÐÐÑÐ Ð ÐÐÑÐÐÐÑÐÑÐ ÐÐ     Matthew Kiessling Chilitech Internet Solutions 570-323-21

RE: reporting to spamcop

IIRC, the parameters in the Net::SMTP module you've shown are connecting to the server $exchange on port 587 (message submission). The delay is set there too - the value of 10. I seem to recall that's in seconds. To reach $exchange, you'll need access outbound on port 587. Someone else will hav

Re: more spam since upgrade [Scanned]

> I would like to add more rules, but not sure what to add that isn't already > being handled by SA? The www.rulesemporium.com does mention what SA has > added though is still a little vague on what all has been integrated into SA > and with the timeouts not really wanting to place more on SA unti

Config Help

Problem 1: In upgrading to 3.0 from 2.x there seems to be some confusion with the local.cf and 10_misc.cf file. I should be using the one located in /etc/mail/spamassassin/ correct? What happens is I get 2 sets of spam report in each email. the 1st one saying: Spam detection software, running

Re: [Fwd: Better check your sig now you are a spammer :-)]

> > * 4.0 CIALIS2 BODY: Contains the word "cialis". > > > So where did this rule come from ? My guess woudl be someone's local.cf. It looks like a rather poorly written rule. Loren

Re: Spellcheck plugin?

> I'm wondering, would it be useful to have a plugin that penalizes messages > with many spelling mistakes? This might help against all those creative > ways of spelling out what the spammer wants to sell. I don't know that anyone has worked on specifically what you are thinking of, which is an in

Re: Better check your sig now you are a spammer :-)]

> Nigel M kindly sent me this. we will have to think of new job titles > unless SA can detect the difference between specialist and cialis. Ooops > now nobody will see this email. I assume that is someone's local rule? A couple of \b's on the ends of the word would be a good addition. Lo

Re: filterring special chars

Block? No. Detect? Yes. SA doesn't block, that is up to something else based on the score from SA. If you have obfuscated drug names and the like there are a lot of rules around to handle that. Matt's antidrug.cf is a really good place to start. SARE has a bunch of rules for obfuscated this-n

Re: Rule for words with multiple punctuation characters?

Haven't seen these myself, but if they are drug spams, make sure you have the obfu drug rules installed and maybe up the score on some of them. Should have gotten about 4 hits in that first sentence. Loren

RE: more spam since upgrade

spamassassin --lint passes without any messages. Is that OK or not? Zsolt > -Original Message- > From: Darren Coleman [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004 12:56 PM > To: Zsolt Koppany; Spamassassin > Subject: RE: more spam since upgrade > > > Is the last line m

Greylisting Considerations

I am running spamassassin (2.63 soon to be upgraded to 3.0) on a linux machine with the spamass-milter, sendmail and clamav/clamav-milter. This machine is the border gateway for all incoming email. All mail is then forwarded to a server that houses the IMAP mailboxes. I am considering implement

Re: [Fwd: Better check your sig now you are a spammer :-)]

At 09:01 AM 10/6/2004, Ron McKeating wrote: Nigel M kindly sent me this. we will have to think of new job titles unless SA can detect the difference between specialist and cialis. Ooops now nobody will see this email. SA can, does and will detect the difference. However, poorly written add-on rule

RE: [Fwd: Better check your sig now you are a spammer :-)]

Whoever configured SA for [EMAIL PROTECTED] must have either modified the points or lowered the "required" limit. I ran my_rules_du_jour this morning and the SA report in your mail, as it got to my Inbox was : X-Spam-Status: No, hits=-9.9 required=5.0 tests=BAYES_00,DRUGS_ERECTILE, USER_

RE: more spam since upgrade

We also use spamc/spamd. Zsolt > -Original Message- > From: Tan, William [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004 4:29 PM > To: Darren Coleman; Zsolt Koppany; Spamassassin > Subject: RE: more spam since upgrade > > > We have gotten better accuracy from 3.0 as well.

Re: white listing

On Wed, Oct 06, 2004 at 09:06:39AM -0400, John Stegenga wrote: > That ought to do it. > > white listing in the local cf file for the domain should work fine. Thanks for the tip. With warm regards, -Payal

RE: Is Spamassassin 3.00 SRC RPM available?

Thanks Alan! I didn't know there is a SPECS file in the archive and must have missed the mention of it on the list. Cheers, Harrie > -Original Message- > From: Alan Munday [mailto:[EMAIL PROTECTED] > Sent: woensdag 6 oktober 2004 16:13 > To: 'Overdijk, Harrie' > Subject: RE: Is Sp

RE: more spam since upgrade

We have gotten better accuracy from 3.0 as well. We use a small whitelist, stock rules, plus the conservative SARE rules (conservative meaning no supposed chance of ham), and no bigevil. My only major complaint is the memory footprint. We use spamc/spamd, and I've reduced the number of preforks

Re: Memory footprint of spamd 3.0

On Wed, Oct 06, 2004 at 10:19:17AM -0300, Luis Hernán Otegui wrote: > jumps, but with SA keeping the memory, and never releasing it. Well, there's really no way to do that at the application level -- it's up to the OS. Typically what happens is: - process wants X memory - process gets X memory a

RE: more spam since upgrade

Sorry, the attached file was empty, here it is again. Zsolt > -Original Message- > From: Darren Coleman [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004 12:56 PM > To: Zsolt Koppany; Spamassassin > Subject: RE: more spam since upgrade > > > Is the last line meant as some ki

RE: more spam since upgrade

I have attached the results of: spamassassin -D --lint Zsolt > -Original Message- > From: Darren Coleman [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004 12:56 PM > To: Zsolt Koppany; Spamassassin > Subject: RE: more spam since upgrade > > > Is the last line meant as some

Re: Is Spamassassin 3.00 SRC RPM available?

On Wed, Oct 06, 2004 at 02:28:01PM +0200, Overdijk, Harrie wrote: > Is the SRC RPM of the released SpamAssassin 3.00 available already? > I failed to find it on the SpamAssassin website, although I did find the > previous versions including release candidate and prerelease... No, I decided there w

RE: Spellcheck plugin?

>-Original Message- >From: Gaal Yahas [mailto:[EMAIL PROTECTED] >Sent: Wednesday, October 06, 2004 9:39 AM >To: Spamassassin talk list >Subject: Spellcheck plugin? > > >I'm wondering, would it be useful to have a plugin that >penalizes messages >with many spelling mistakes? This might he

Re: Spellcheck plugin?

At 03:39 PM 10/6/2004 +0200, Gaal Yahas wrote: I'm wondering, would it be useful to have a plugin that penalizes messages with many spelling mistakes? No, it's been suggested before, and tested.. the FP rate was rather high. Bear in mind all the "legitimate" email from AOL users that can barely s

Re: more spam since upgrade [Scanned]

On 10/6/04 5:56 AM, "Darren Coleman" wrote: > I'm sorry to say but you must have some sort of configuration issue with > your install, and I'd suggest to RTFM. I upgraded from 2.64 to 3.00 and > have recently less untagged spam (as expected) as a result. > > - Are you using any additional rulese

RE: locating/translating geography of IP addresses

If you are looking for a tool. Try VisualRoute from VisualWare. http://www.visualware.com If you arte running on Windows. Many People use NeoTrace which can be found at any number of free download sites. NeoTrace Pro will cost you $30.00 Gtrace is available if you are running Linux, FreeBSD or S

Re: UPDATE: more spam since upgrade:

At 07:19 AM 10/6/2004 +0200, Thomas Kinghorn wrote: HI List Just to add the results after uploading the spam to the server again. $spamassassin -t -D < US\ Students\ email\ list.msg So why then did the original receive only 3.1? Look at the list of rules matched.. the number of rules hit in the or

Re: filterring special chars

At 02:37 PM 10/6/2004 +0200, Bert Verslegers (Mobile) wrote: Hello, Is there a way to block special chars like: An 'A' with a tile '~' above it? Just looking for a special character is likely to false positive on every binary attachment. However, if you have specific words, you can use the charac

RE: [Fwd: Better check your sig now you are a spammer :-)]

On Wed, 2004-10-06 at 14:12, [EMAIL PROTECTED] wrote: > X-Spam-Status: Yes, hits=4.0 required=4.0 tests=CIALIS2 autolearn=no > version=2.64 > X-Spam-Report: > * 4.0 CIALIS2 BODY: Contains the word "cialis". > > > This is not a SA problem, this is a "User Problem". > > Whoever crea

Spellcheck plugin?

I'm wondering, would it be useful to have a plugin that penalizes messages with many spelling mistakes? This might help against all those creative ways of spelling out what the spammer wants to sell. To have any hope of working for people who expect mail in more than one language, a language recog

Re: Memory footprint of spamd 3.0

On Wed, Oct 06, 2004 at 10:19:17AM -0300, Luis Hernán Otegui wrote: > In my specific case, the ponit isn't only woth the big memory usage > jumps, but with SA keeping the memory, and never releasing it. Highwater marks, common in most perl applicatios, don't concern me as much as these HUGE jumps

Re: Memory footprint of spamd 3.0

On Tue, 5 Oct 2004 12:25:45 -0500, Michael Parker <[EMAIL PROTECTED]> wrote: > On Tue, Oct 05, 2004 at 10:22:42AM -0700, Morris Jones wrote: > > > > I watched a spamd child grow to 250MB yesterday on a single message. I > > have a suspicion that the memory usage growth is happening on a whitelist

RE: [Fwd: Better check your sig now you are a spammer :-)]

X-Spam-Status: Yes, hits=4.0 required=4.0 tests=CIALIS2 autolearn=no version=2.64 X-Spam-Report: * 4.0 CIALIS2 BODY: Contains the word "cialis". This is not a SA problem, this is a "User Problem". Whoever creates a word-matching rule that, alone, gives the required number of

Re: SA 3.0 is eating up all my memory!!!

In my setup this is not an option, because I run SA as a milter, via spamass-milter. If every process has to die after the scan, it cannot pass the results of the scan to Sendmail (at least, this is what happened after I tried this option, so I kept on receiving messages like this: Oct 4 09:27:55

RE: white listing

That ought to do it. white listing in the local cf file for the domain should work fine. John -Original Message- From: Payal Rathod [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 06, 2004 8:29 AM To: users@spamassassin.apache.org Subject: white listing Hi, We have co-hosted a doma

[Fwd: Better check your sig now you are a spammer :-)]

Nigel M kindly sent me this. we will have to think of new job titles unless SA can detect the difference between specialist and cialis. Ooops now nobody will see this email. Ron -- Ron McKeating Senior IT Services Specialist Internet Services and Software Solutions Loughborough University 01509 2

filterring special chars

Hello, Is there a way to block special chars like: An 'A' with a tile '~' above it? With kind regards

white listing

Hi, We have co-hosted a domain on my friend's server (qmail). Now, the ISP provides SA 2.61 with each users having their own pref file managed through a GUI. But some of my client's mails were being marked as SPAM. So, I requested the admin to whitelist that client's domain. He said he will put t

Is Spamassassin 3.00 SRC RPM available?

Hi, Is the SRC RPM of the released SpamAssassin 3.00 available already? I failed to find it on the SpamAssassin website, although I did find the previous versions including release candidate and prerelease... B.t.w. running Linux RH 7.3 Cheers, Harrie Harrie Overdijk, ECN, Postbox 1, 175

Rule for words with multiple punctuation characters?

I've been getting a fair bit of spam with multiple punctuation characters within a single word, getting through SA 2.64 (with most of the SARE rulesets) with relatively low scores. No FNs so far thanks to other rules, particularly the antidrug set, but some have been very close to the limit and I'v

RE: more spam since upgrade

Is the last line meant as some kind of threat? :) I'm sorry to say but you must have some sort of configuration issue with your install, and I'd suggest to RTFM. I upgraded from 2.64 to 3.00 and have recently less untagged spam (as expected) as a result. - Are you using any additional rulesets f

RE: more spam since upgrade

Hi, since I upgraded to 3.0.0 from 2.63 I get also much more spam and most of them absolutely trivial for example Xiagra (I replaced 'V' with 'X'), Xenis (I replaced 'P' with 'X') are not found either in Subject or in Body. I will go back to 2.63 unless somebody can help me to fix the problem. Z

Re: spamc sanity check failures on Suse 9.1

Michael W Cocke wrote: [snip] you well enough. Off the top, you need to apply your updates - your kernel is the original that shipped with 9.1. The sanity check message is interesting... how much ram and available disk space have you? It would seem the message stream is being chopped somehow mid

Re: sa 3.0.0 - same performance after training

I use hand sorted mailboxes: "spam": 1150 e-mails "ham": 662 e-mails "mixed" is the one that I run spamassassin on and has 1812 e-mails (basicly ham and spam combined). I do my first run of SA, check how much mail from "mixed" it sorted into spam.mbox and ham.mbox (sorted by SA, unlike ham and sp

Re: Memory footprint of spamd 3.0

From: "Loren Wilton" <[EMAIL PROTECTED]> Sent: Tuesday, October 05, 2004 7:42 AM Any chance in going back to something that actually worked? I tried running a 2.64 version of spamd, but got a mountain of bayes-related errors. There is an option to only run a single child, which is claimed to be e

reporting to spamcop

hello, i have just upgraded to spamassassin-3.0.0 and run it on a linux platform. i have the following problem when reporting spam using "spamassassin -D -r", towards the end of the output there is a delay (a few seconds) the i get: debug: Razor2 is not available SpamCop -> report to vmx2.spamco

UPDATE: more spam since upgrade:

HI List Just to add the results after uploading the spam to the server again. $spamassassin -t -D < US\ Students\ email\ list.msg 0 Start SpamAssassin results -- This mail is probably spam. The original message has been altered so you can recognise or bl

more spam since upgrade

Hi List. I have recently upgraded toExim-4.42, Spamassassin 3.0 & sa-exim-4.1 The amount of spam slipping through since then has increased dramatically. The scores seem a bit on the low side since upgrading. Below is the message ID and I have attached the mail from which it originates. Any ide

Re: locating/translating geography of IP addresses

On Tuesday 05 October 2004 05:08 am, Diffenderfer, Randy wrote: > Folks, > > Just recently I recall someone mentioning some code or a tool to relate IP > addresses to originating geography. I haven't located the reference by > searching the archives. > > So, can someone recall the reference or poi

Re: spamc sanity check failures on Suse 9.1

On Tue, 05 Oct 2004 19:26:54 +0100, you wrote: >John Beranek wrote: > >> >> I've not got a spamassassin RPM installed at. I just installed > ^all > >Note to self: Proofread a sentence after rewording it. :) > >John. I'm a past master at the obscure t

Re: Memory footprint of spamd 3.0

On Tue, Oct 05, 2004 at 05:30:32PM -0700, Loren Wilton wrote: > It seems a solution here might be to have a spamd child that notices it > needs to to maintenance should either pass that off to another child created > specifically for that purpose, or else die after performing the maintenance Yeah,

Re: Memory footprint of spamd 3.0

> I watched a spamd child grow to 250MB yesterday on a single message. I > have a suspicion that the memory usage growth is happening on a whitelist > or bayes database maintenance event of some sort. It seems a solution here might be to have a spamd child that notices it needs to to maintenance