after upgrade

2004-10-09 Thread Marcos Saint'Anna
Hello guys, I'm with a serious problem here, and I need some help, plz! After the upgrade from version 2.64 to version 3.0.0, SA stopped to work as before... the most of SPAM going to my server isn't marked as SPAM... So I noticed that almost all headers had a "USER_IN_WHITELIST" in it. ---

Re: A simple way to...

2004-10-09 Thread Bill Landry
- Original Message - From: "Ryan Thompson" <[EMAIL PROTECTED]> > Robin Lynn Frank wrote to users@spamassassin.apache.org: > > > We use SA 3.0.0 with MySQL so we can extract certain AWL data and use > > it at the MTA level. However, since SA doesn't have an auto-blacklist > > feature, > >

Re: SA 3.0 - USER_IN_BLACKLIST false positive?

2004-10-09 Thread Theo Van Dinter
On Sat, Oct 09, 2004 at 11:24:19PM +0100, Mike Zanker wrote: > >There are no default blacklist entries in SpamAssassin. > Exactly, so where did it come from? Got me, you have to go hunting around and find out. I have no way to tell you what's on your box, but I can tell you the entries aren't fro

Re: SA 3.0 - USER_IN_BLACKLIST false positive?

2004-10-09 Thread Mike Zanker
On 09 October 2004 16:19 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: Well, yes you do. ;) I do what? There are no default blacklist entries in SpamAssassin. Exactly, so where did it come from? Mike.

Re: A simple way to...

2004-10-09 Thread Ryan Thompson
Robin Lynn Frank wrote to users@spamassassin.apache.org: We use SA 3.0.0 with MySQL so we can extract certain AWL data and use it at the MTA level. However, since SA doesn't have an auto-blacklist feature, Hi Robin, Actually, "AutoWhiteList" (AWL) is a bit of a misnomer. AWL maintains average mess

Re: Can anyone explain these e-mails (and how to stop them)?

2004-10-09 Thread Chris
> -Original Message- > From: Matt [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 06, 2004 12:04 PM > To: users@spamassassin.apache.org > Subject: Re: Can anyone explain these e-mails (and how to stop them)? > > > Uggg.. that didn't come through right.. let me try this again.. they lo

Re: SA 3.0 - USER_IN_BLACKLIST false positive?

2004-10-09 Thread Theo Van Dinter
On Sat, Oct 09, 2004 at 09:09:12PM +0100, Mike Zanker wrote: > scored over 100 because of USER_IN_BLACKLIST. Now, I don't have any > blacklists defined anywhere > So, this seems to be a false positive. Anyone else seen it happening? Well, yes you do. ;) There are no default blacklist entries in

SA 3.0 - USER_IN_BLACKLIST false positive?

2004-10-09 Thread Mike Zanker
Today I received a virus (Gibe-F) from an unknown e-mail address - it scored over 100 because of USER_IN_BLACKLIST. Now, I don't have any blacklists defined anywhere - in fact, SA is run only by MailScanner as user mail. So, this seems to be a false positive. Anyone else seen it happening? Than

Re: Bayes - Oracle

2004-10-09 Thread Michael Parker
On Sat, Oct 09, 2004 at 06:56:03PM +0200, Marco Supino wrote: > Hi, > > I am tring to make the AWL and Bayes work with SQL , on a Oracle 8.1.7 > database, AWL works fine, but i have some problems with the bayes > interface, make test gives out this errors : > > t/bayessql..ok 16

Per user blacklist

2004-10-09 Thread Jay Hall
I have setup SpamAssassin 2.64, and qmail-scanner 1.23 on FreeBSD with perl-5.8.4 and have been using them separately with great success. However, I have decided to use qmail-scanners ability to run SpamAssassin as the mail is processed. And, I have this working to a point (i.e. the mail is fl

Bayes - Oracle

2004-10-09 Thread Marco Supino
Hi, I am tring to make the AWL and Bayes work with SQL , on a Oracle 8.1.7 database, AWL works fine, but i have some problems with the bayes interface, make test gives out this errors : t/bayessql..ok 16/44# Failed test 17 in t/bayessql.t at line 133 t/bayessql..

A simple way to...

2004-10-09 Thread Robin Lynn Frank
We use SA 3.0.0 with MySQL so we can extract certain AWL data and use it at the MTA level. However, since SA doesn't have an auto-blacklist feature, I'd like to find a relatively simple way to extract IP addresses from emails that contain spam. If it is of any importance, we invoke SA via amavisd

Re: Spam trap account?

2004-10-09 Thread Matt Kettler
At 10:26 PM 10/8/2004 -0700, Jerry wrote: I am using the command: spamassassin --add-to-blacklist (message filename) For it to scan the filename and add the senders email address to the black list. That's largely worthless.. It's not entirely worthless, but it's really only useful if the spammer i

Re: Spam trap account?

2004-10-09 Thread Kai Schaetzl
Evan Platt wrote on Sat, 09 Oct 2004 06:56:32 -0700: > I'm curious if others are doing this? In all honestly, I don't think you'll > see spam from the same "person" twice. > I absolutely agree. "blacklisting" doesn't do much good. The only blacklisting which makes sense in general is at the MTA

Re: Still "fishy" problems with bayes expiry in SA 3.0

2004-10-09 Thread Kai Schaetzl
Justin Mason wrote on Fri, 08 Oct 2004 09:39:15 -0700: > So you wind up with a very big, but unexpirable, db? yes. I can expire it with the trick mentioned, but then it blows most of the db. And the next expire fails again until I play other tricks or wait long enough. F.i. I can dump the stuff

Re: Spam trap account?

2004-10-09 Thread Evan Platt
--On Friday, October 08, 2004 10:26 PM -0700 Jerry <[EMAIL PROTECTED]> wrote: Hi, I am using SA 3.00. I want to setup a mailbox with an odd name and post this to certain guest books etc on the web so it can be added to a mailing list. This email account will only be used to trap spam messages, an

Re: Non-Engish date-header from SA causes probs with email-clients

2004-10-09 Thread Loren Wilton
> The differences in the mail-headers are tiny: > Englisch: > Date: Thu, 7 Oct 2004 08:48:21 +0200 > German: > Date: Do, 07 Okt 2004 10:19:30 I wonder if part of the problem might be the missing timezone info on the end of the German timestamp. Loren

Spam trap account?

2004-10-09 Thread Jerry
Hi,I am using SA 3.00.  I want to setup a mailbox with an odd name and post this to certain guest books etc on the web so it can be added to a mailing list.  This email account will only be used to trap spam messages, and won't be used for valid emails.I am running Win32 with VOPMail.  I have

Re: statistics help needed

2004-10-09 Thread Joe Emenaker
Justin Mason wrote: S1 S2 S3 S4 S5 H1 H2 H3 H4 H5 RULE1: x x x x RULE2: x x x x RULE3: x x x RULE4: x (S1-S5 = 5 spam mails; H1-H5

Re: New blacklist with URI

2004-10-09 Thread Jeff Chan
On Friday, October 8, 2004, 8:01:44 AM, Matt Kettler wrote: > At 08:43 AM 10/8/2004, Matt wrote: >>I have a question on the new(ish) scanning that spamassassin does on >>URI's.It seems to be working very well for us here, but I have a >>question.. >>WIll it catch: >> >>http://www.blah.com/?jj38

Re: 3.0.0 w/ mysql

2004-10-09 Thread Michael Parker
On Fri, Oct 08, 2004 at 09:23:34PM -0600, [EMAIL PROTECTED] wrote: > I took out the custom query, it's still choosing user 'nobody' when I > send an email to my address. > > logmsg: connection from localhost.localdomain [127.0.0.1] at port 46482 > debug: Conf::SQL: executing SQL: select preference

Re: 3.0.0 w/ mysql

2004-10-09 Thread lists
I took out the custom query, it's still choosing user 'nobody' when I send an email to my address. logmsg: connection from localhost.localdomain [127.0.0.1] at port 46482 debug: Conf::SQL: executing SQL: select preference, value from userpref where u sername = 'nobody' or username = '@GLOBAL' ord

Re: 3.0.0 w/ mysql

2004-10-09 Thread Michael Parker
On Fri, Oct 08, 2004 at 08:51:46PM -0600, [EMAIL PROTECTED] wrote: > I'm having problems getting sa 3.0 to get user pref's from the mysql > database. I'm using Exim 4.43 with the latest exiscan patch compiled > into it fyi. I've entered @GLOBAL and my email address into the > database, @GLOBAL is

3.0.0 w/ mysql

2004-10-09 Thread lists
I'm having problems getting sa 3.0 to get user pref's from the mysql database. I'm using Exim 4.43 with the latest exiscan patch compiled into it fyi. I've entered @GLOBAL and my email address into the database, @GLOBAL is set to 5.2 required_hits and my email address et to 5.4. I can't seem to