All -
I am trying to build packages using the spamassassin.spec file included
with the SA .bz2 file. I get the error at the bottom of this message
though, and I am not sure how to fix it.
I *think* I need to modify the line that looks like:
CFLAGS="$RPM_OPT_FLAGS"; export CFLAGS
But I am not
On Mon, Oct 11, 2004 at 04:02:04PM -0700, Loren Wilton wrote:
> > that's sufficient... It would be *REALLY* nice if sa-learn accepted
> > the username as an argument, but for now, this will do
>
> It appears that spamd will soon allow a username parameter.
> I'd suggest a Bugzilla NFS to add
> that's sufficient... It would be *REALLY* nice if sa-learn accepted
> the username as an argument, but for now, this will do
It appears that spamd will soon allow a username parameter.
I'd suggest a Bugzilla NFS to add the same parameter to sa-learn.
Might get both at once.
Loren
> So the initial rule will concentrate on the syntax format instead of just
> checking for the existence of the header:
>
> X-message-flag: Authentic Sender, Hash: TrVfLjGp
This one appears to me to be bogus as well, it comes from the same guy:
> X-message-flag: Encrypted 128 bit message, authe
BTW, all of these *claim* to be from
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
However, they also happen to all be from a particular spammer in Brasil, and
most of them also claim to have been scanned by SA 2.60 and got a score
of -5.1. So I don't know that I necessarily believe the X-
Gerry Doris wrote:
> I managed to destroy my bayes database...don't ask.
>
> Since I only run a home system and don't receive a heavy flow of spam I
> really like to skip the wait for bayes to get up to speed. Is it
> recommended to use the public corpus on the SA website or is it too old
> for p
>
> Has anyone seen these headers? Perhaps AOL?
>
\\It\wilton\train\TestSpam(6797):X-message-flag: Authentic Sender, Hash:
RdDyHlGm
\\It\wilton\train\TestSpam(11091):X-message-flag: Authentic Sender, Hash:
VuIkTsDi
\\It\wilton\train\TestSpam(18445):X-message-flag: Encrypted 128 bit message,
authe
I managed to destroy my bayes database...don't ask.
Since I only run a home system and don't receive a heavy flow of spam I
really like to skip the wait for bayes to get up to speed. Is it
recommended to use the public corpus on the SA website or is it too old
for proper training? Is there a bet
> My users use OE or Netscape mail client to check their mails. Can I ask
> I am scared that if they *forward* their mails to that account bayes
Forwarding from OE will screw the mail over badly, you DO NOT want to do
that. Probably the same from NS or most any other mail client, for that
matter
On Mon, 2004-10-11 at 18:07 -0400, Theo Van Dinter wrote:
> On Mon, Oct 11, 2004 at 05:01:44PM -0500, J Thomas Hancock wrote:
> > What is the easiest/best way to accomplish this? Would I need to add a
> > record to each username in the userpref tables something like
> > required_hits_to_delete? O
> Is there an easy way to downgrade spamassassin?
Make a backup copy of the Bayes database files before the upgrade. The
database will upgrade to 3.0, but it is then NOT backward compatable. So
save the old version to reload, or you will have to start from scratch.
Wouldn't hurt to save your lo
On Mon, Oct 11, 2004 at 05:01:44PM -0500, J Thomas Hancock wrote:
> What is the easiest/best way to accomplish this? Would I need to add a
> record to each username in the userpref tables something like
> required_hits_to_delete? Once defined I could then do something like:
There is no way to d
I am currently using a postfix/spamassassin mail
gateway. I have spamassassin getting individual required_hits from a
MySQL data base. I would like to be able to add to the header
X-Spam-Deleteable YES of the socre is above 15 other wise add X-Spam-Deleteable
NO. The score is 10 or highe
On Mon, 11 Oct 2004 09:38:32 -0400, Jason Frisvold <[EMAIL PROTECTED]> wrote:
> But therein lies the problem... I don't have a local.cf file for each
> user because the users are virtual. I was hoping to avoid using
> local.cf files because I'm using SQL to allow shared use of the bayes
> and spa
My apologies to any twelve-year-olds on this list who have managed to
absorb more than the most fundamental principles of politeness.
snowjack wrote:
How completely rude. What are you, twelve years old?
jdow wrote:
It seems anabolic steroids are flat out missed by antidrug.cf. Of course,
I observ
How completely rude. What are you, twelve years old?
jdow wrote:
It seems anabolic steroids are flat out missed by antidrug.cf. Of course,
I observe the idiot Apache spam trap on the spamassassin list does catch
the message sample when I attach it. Somebody needs to apply a clue bat
to the Apache m
It was sent directly to me. My email address shows up on the whois for
about 10,000 domains as the tech contact - they probably swiped my address
from there.
Keith
> Keith, that looks like a valid list if IDs from a more or less targeted
> legitimate mailing list for building contractors and pe
Keith, that looks like a valid list if IDs from a more or less targeted
legitimate mailing list for building contractors and people who use their
services. How did this come to your attention? Did a user of your ISP
decide that complaining about it being spam was a good way to get off
the list when
It seems anabolic steroids are flat out missed by antidrug.cf. Of course,
I observe the idiot Apache spam trap on the spamassassin list does catch
the message sample when I attach it. Somebody needs to apply a clue bat
to the Apache mail manager to get "it" to have this and the dev lists
bypass his
Keith Hackworth wrote:
I just got a gold-mine for surbl canidates "wanna-bes" in a single spam
message. There's WAY too many domains listed below to add to SURBL
through the web pages. Is there a "bulk add" option to add to the
ws.surbl.org database? I need to add these 59 domains to the SURBL l
Hello all,
I have just started doing some procmail charset rule testing, and
noticed that there are no such spamassassin rules.
Here is an example of my current procmail_illegal_charsets.rc test
rules:
:0 c
* ^Subject.*\?UTF-8\?
zzfilterS_utf-8
:0 c
* ^Subject.*\?koi8-r\?
zzfilterS_koi8-r
:0 c
- Original Message -
From: "Mike Brodbelt" <[EMAIL PROTECTED]>
> Bill Landry wrote:
> > - Original Message -
> > From: "Mike Brodbelt" <[EMAIL PROTECTED]>
>
> >
> > Did you happen to check the INSTALL document that comes with the
> > distribution?:
> >
> > - Net::DNS(fr
Bill Landry wrote:
> - Original Message -
> From: "Mike Brodbelt" <[EMAIL PROTECTED]>
>
> Did you happen to check the INSTALL document that comes with the
> distribution?:
>
> - Net::DNS(from CPAN)
Aha. Whoever put together the package on backports.org omitted that file
from
- Original Message -
From: "Mike Brodbelt" <[EMAIL PROTECTED]>
> Theo Van Dinter wrote:
> > On Mon, Oct 11, 2004 at 05:08:01PM +0100, Mike Brodbelt wrote:
> >
> >>network tests. It would be nice if it logged a message to this effect
> >>via syslog at startup - would certainly have saved m
On 11.10.2004 at 11:45 Keith Hackworth wrote:
>Is bondedsender turned on in SA 3.0.0? Is it turned on, and if so, what's
>the score for it?
>
>Thanks in advanced,
>Keith
-4.3 RCVD_IN_BSP_TRUSTEDRBL: Sender is in Bonded Sender Program (trusted
relay)
[IronPort Bonded S
On Fri, 8 Oct 2004, Michael Parker wrote:
On Tue, Oct 05, 2004 at 12:25:45PM -0500, Michael Parker wrote:
On Tue, Oct 05, 2004 at 10:22:42AM -0700, Morris Jones wrote:
I watched a spamd child grow to 250MB yesterday on a single message. I
have a suspicion that the memory usage growth is happening
On Thu, 7 Oct 2004, Jon Trulson wrote:
On Thu, 7 Oct 2004, Michael Parker wrote:
On Thu, Oct 07, 2004 at 10:53:30AM -0600, Jon Trulson wrote:
FWIW, in our case a child would go to 320MB and just stay there
until the child was terminated (even after finishing a message). We do
use AWL and bayes
On Monday 11 October 2004 12:43 pm, Justin Mason wrote:
> Jeremy Rumpf writes:
> > I've seen a few messages recently that contained the header
> >
> > X-message-flag: Authentic Sender, Hash: PoHgCaAr
> >
> > My questions are, are they trying to simulate something like hash cash?
> > Does anyone kno
Theo Van Dinter wrote:
> On Mon, Oct 11, 2004 at 05:08:01PM +0100, Mike Brodbelt wrote:
>
>>network tests. It would be nice if it logged a message to this effect
>>via syslog at startup - would certainly have saved me a few hours of
>
>
> We can't log a message everytime people don't read the do
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jeremy Rumpf writes:
> I've seen a few messages recently that contained the header
>
> X-message-flag: Authentic Sender, Hash: PoHgCaAr
>
> My questions are, are they trying to simulate something like hash cash? Does
> anyone know of a MUA that ins
SA 2.63 on OpenBSD 3.5, invoked via amavisd-new.
Is there a way to get a list of all the senders in the AWL and their
current averages? I believe my AWL has given favor to several spam
senders (too many to list) and I'd like to clean them out.
-Jordan
I've seen a few messages recently that contained the header
X-message-flag: Authentic Sender, Hash: PoHgCaAr
My questions are, are they trying to simulate something like hash cash? Does
anyone know of a MUA that inserts/utilizes this header?
I would like to insert a local rule to score on this
I just got a gold-mine for surbl canidates "wanna-bes" in a single spam
message. There's WAY too many domains listed below to add to SURBL
through the web pages. Is there a "bulk add" option to add to the
ws.surbl.org database? I need to add these 59 domains to the SURBL list:
acudor.com
ahrexp
On Mon, Oct 11, 2004 at 05:08:01PM +0100, Mike Brodbelt wrote:
> network tests. It would be nice if it logged a message to this effect
> via syslog at startup - would certainly have saved me a few hours of
We can't log a message everytime people don't read the documentation. ;)
--
Randomly Gener
Candee Vaglica wrote:
> Make sure Net::DNS is installed and available
>
Thanks for the suggestion. Sod's law being what it is, I found the
problem shortly after sending the original message. I'll post the
details here in case anyone has the same issue...
I used the SA 3 bacport from http://www.b
On Mon, Oct 11, 2004 at 05:20:21PM +0200, Martin Schröder wrote:
> Oct 11 17:10:07 hostname spamd[16864]: Bayes journal: gibberish entry found:
> hdu4+AdBAHUFuOwHQQBQV+h8bQAAaOAHQQBX6HFtAACDxBCF23QuahnoozQAAFmFwHQiagTopzQA
>
> Is this anything to worry about?
I'd find out why you have random (w
> -Original Message-
> From: Keith Hackworth [mailto:[EMAIL PROTECTED]
> Subject: bondedsender.com
>
>
> Is bondedsender turned on in SA 3.0.0? Is it turned on, and
> if so, what's
> the score for it?
>
> Thanks in advanced,
> Keith
>
>
I don't know if its turned on by default since
Is bondedsender turned on in SA 3.0.0? Is it turned on, and if so, what's
the score for it?
Thanks in advanced,
Keith
At last I have filled out the Sourceforge page for SAQuarantine.
http://sourceforge.net/projects/saq
SAQuarantine is a plugin for Postfix that picks potential Spam emails out of
the mailstream and puts them in a Quarantine.
Instead of being delivered straight to user´s inboxes, potential Spam
Make sure Net::DNS is installed and available
-Original Message-
From: Mike Brodbelt [mailto:[EMAIL PROTECTED]
Sent: Monday, October 11, 2004 5:17 AM
To: users@spamassassin.apache.org
Subject: Network tests not working after upgrade to SA 3
Hi,
I've been happily running SpamAssassin on
This just appeared in the SA-logs:
--
Oct 11 17:10:06 hostname spamd[16864]: info: setuid to user succeeded
Oct 11 17:10:06 hostname spamd[16864]: processing message <[EMAIL PROTECTED]>
for user:531.
Oct 11 17:10:07 hostname spamd[16864]: Bayes journal: gibberish entry found:
Oct 11
"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote on 10/11/2004 08:22:04 AM:
> Thanks to all who helped get my logging going!
>
> Here is what actually logs in the maillog:
> Oct 11 09:18:13 mail spamd[22851]: info: setuid to myuser succeeded
> Oct 11 09:18:13 mail spamd[22851]: processing message
Strange question, but are your drives mirrored? There's an easy way to
downgrade software if you have mirrored drives ;+).
Keith
> Is there an easy way to downgrade spamassassin?
> we currently run 2.6 on our mailhubs and i want to upgrade to 3.0.
> mailhubs are solaris 8 sparc sunblade 100s. (
"jdow" <[EMAIL PROTECTED]> wrote on 10/10/2004 10:04:45 PM:
> Someone used my address with the name Daniel Hofer. So about 10% of the
> spam I get is instantly filterable with that name and variants.
>
> Well, a new variant of 419 has hit my mailbox. Someone named Allan Hofer
> died in Nigeria
> On Mon, Oct 11, 2004 at 03:40:24PM +0200, Philipp Snizek wrote:
> > Also, I'm getting this into /var/log/maillog, when starting
> > spamassassin:
> > Argument "4.O" isn't numeric in addition (+) at
> > /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 238.
> >
> > What's wrong here?
On Mon, Oct 11, 2004 at 03:40:24PM +0200, Philipp Snizek wrote:
> Also, I'm getting this into /var/log/maillog, when starting
> spamassassin:
> Argument "4.O" isn't numeric in addition (+) at
> /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 238.
>
> What's wrong here?
Note your con
Hi
I run a Slack 10 system with kernel 2.4.22 and SpamAssassin 3.0.0.
when I run `sa-learn --dump all', I'm getting this:
Argument "4.O" isn't numeric in addition (+) at
/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 238.
Argument "4.O" isn't numeric in addition (+) at
/usr/lib/pe
On Mon, 11 Oct 2004 09:15:20 -0400 (EDT), Keith Hackworth
<[EMAIL PROTECTED]> wrote:
> I ran into the same problem. All I had to do was set the
> bayes_sql_override_username value in my local.cf and it took care of it
> for me. When I do a sa-learn [spam|ham], it loads in as the user I
> specifie
On Mon, Oct 11, 2004 at 09:16:13AM -0400, Keith Hackworth wrote:
> What OS do you run on? There are no ~ directories on my solaris
> system (I get ~: does not exist). Although, it works fine on my
> susi system.
Folks,
~user is a shell short-hand for "the home directory of 'user'", which
SA doe
Thanks to all who helped get my logging going!
Here is what actually logs in the maillog:
Oct 11 09:18:13 mail spamd[22851]: info: setuid to myuser succeeded
Oct 11 09:18:13 mail spamd[22851]: processing message
<[EMAIL PROTECTED]> for myuser:1661.
Oct 11 09:18:17 mail spamd[22851]: identified spa
What OS do you run on? There are no ~ directories on my solaris
system (I get ~: does not exist). Although, it works fine on my
susi system.
One thing to check - even though the bayes files are in the ~user home
directories, are they owned/writable by the user that runs spamd?
Keith
> Keith H
I ran into the same problem. All I had to do was set the
bayes_sql_override_username value in my local.cf and it took care of it
for me. When I do a sa-learn [spam|ham], it loads in as the user I
specified in my local.cf.
Keith
> Hi all,
>
> I'm trying to implement SQL Bayes and I need a littl
On Mon, Oct 11, 2004 at 11:35:31AM +0400, Khalid Waheed wrote:
> Is there any option to set min and max child process of spamd?
It's in the spamd man page: "-m #" sets the max # of child processes
> Is spamd-child process is multi threaded, or it handles single message
> at a time??
spamd is pr
Hi,
My users use OE or Netscape mail client to check their mails. Can I ask
the users to forward their mails to an account say "spam" to teach
SA? I am scared that if they *forward* their mails to that account bayes
might learn wrongly learn their addresses as that of spammers. Can someone
clear
Ronan wrote:
> Is there an easy way to downgrade spamassassin?
> we currently run 2.6 on our mailhubs and i want to upgrade to 3.0.
> mailhubs are solaris 8 sparc sunblade 100s. (3) We use sophie
> and the daemonised version of spamassassin with SAV.
> I want the option of downgrading back to 'work
Is there an easy way to downgrade spamassassin?
we currently run 2.6 on our mailhubs and i want to upgrade to 3.0.
mailhubs are solaris 8 sparc sunblade 100s. (3)
We use sophie and the daemonised version of spamassassin with SAV.
I want the option of downgrading back to 'working' version should
an
Hi,
I've been happily running SpamAssassin on a sitewide basis for some
time. I use a sendmail milter to call out to spamd, and simply add
headers to all mail that passes through the system, which users can then
filter on (or not) as they choose. I've recently upgraded from SA 2.63
to SA 3.0, and
Is there any option to set min and max child process of spamd?
Is spamd-child process is multi threaded, or it handles single message
at a time?? how spamd-parent process allocate
message to its child, I mean scheduling?
Kh
From: "Bob Proulx" <[EMAIL PROTECTED]>
> Robin Lynn Frank wrote:
> > "jdow" <[EMAIL PROTECTED]> wrote:
> > > I am SORELY tempted to
> > > reply something like, "Oh My God, Cousin Allan is dead? He was such a
> > > friend to me when we were little.
> >
> > Your Allen's cousin?!?! Wow, that means w
From: "Bob Proulx" <[EMAIL PROTECTED]>
> jdow wrote:
> > I am getting heartily tired of idiots who bounce emails that contain
> > or supposedly contain viruses and are assuredly Joe-jobs. I propose a
> > black list for these idiots. That MIGHT be enough to convince me that
> > black lists drawbacks
On 10/11/2004 8:31 AM +0200, Loren Wilton wrote:
Can SA be configured not to write timestamps to log output ?
Not curretnly without a patch. There is a bug or enhancement request open
on this exact subject in bugzilla, and I believe it includes a
user-submitted patch to add an option. The patch
Keith Hackworth wrote:
I have the same configuration and I had the same problem with 2.64. I did
a spamassassin --lint and it showed me all sorts of problems in my
local.cf. It was so bad, it just ignored anything beyond x lines in the
file.
spamassassin --lint created a "sample" user_prefs file
Well, first off I'd send a note to Geocities letting them know they are
being used as a spam host. That may not appreciate that, and take
appropriate action.
Second I'd look to some of the SARE rules. The OEM rules *might* have added
a point or two to this spam. However, it only mentions a sing
Did this message also include the X-Spam-Status: No header from 2.60? I see
that in a lot of spams from a particular hunk of ratware.
Loren
> X-Note: http://spamcop.net/w3m?action=checkblock&ip=66.194.124.208
> Can SA be configured not to write timestamps to log output ?
Not curretnly without a patch. There is a bug or enhancement request open
on this exact subject in bugzilla, and I believe it includes a
user-submitted patch to add an option. The patch will probably change form
(if it is applied at
I'm not sure what is going on there, but it really looks like you were
running two different configurations, which would imply either different
local.cf values, or you have user rules enabled and got differerent user
rules.
Following is the rules from those two messages. Note that the indented
ru
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Scott A Crosby writes:
> On Fri, 08 Oct 2004 15:49:08 -0700, [EMAIL PROTECTED] (Justin Mason) writes:
>
> > However, that doesn't take in account the situation where multiple rules
> > are hitting mostly the same mail; for example, like this:
> >
> >
Hi List.
I have been receiving some very low scoring spam messages lately.
Any ideas on how to increase the scores a bit.
Here are the results:
@:ö0 Start SpamAssassin results --
This mail is probably spam. The original message has been altered
so you ca
Robin Lynn Frank wrote:
> "jdow" <[EMAIL PROTECTED]> wrote:
> > I am SORELY tempted to
> > reply something like, "Oh My God, Cousin Allan is dead? He was such a
> > friend to me when we were little.
>
> Your Allen's cousin?!?! Wow, that means we're related!!! ;-)
Me too! What a coincidence. I
I just received some spam for some internet gambling site. But I find
this very strange to see in the header. And of course my address is
encoded in base64 there too. The entire message was base64 encoded
html.
X-Note:
X-Note: recetasparati.com.ar (Network Version 2.0)
X-Note: How are we
jdow wrote:
> I am getting heartily tired of idiots who bounce emails that contain
> or supposedly contain viruses and are assuredly Joe-jobs. I propose a
> black list for these idiots. That MIGHT be enough to convince me that
> black lists drawbacks do not out weigh their benefits.
I have rules a
On Sun, 10 Oct 2004 20:04:45 -0700
"jdow" <[EMAIL PROTECTED]> wrote:
> I am SORELY tempted to
> reply something like, "Oh My God, Cousin Allan is dead? He was such a
> friend to me when we were little.
Your Allen's cousin?!?! Wow, that means we're related!!! ;-)
--
Robin Lynn Frank
Director of
Someone used my address with the name Daniel Hofer. So about 10% of the
spam I get is instantly filterable with that name and variants.
Well, a new variant of 419 has hit my mailbox. Someone named Allan Hofer
died in Nigeria. And he left a big estate. The "barrister" wants to take
70%, reserve 5%
From: "Kai Schaetzl" <[EMAIL PROTECTED]>
> Mike Zanker wrote on Sun, 10 Oct 2004 17:52:36 +0100:
>
> > Yes, I am using that, but I thought USER_IN_BLACKLIST related to
> > personal blacklists, not SURBL stuff.
> >
>
> It does not relate to SURBL. It relates to rules, no matter in which *.cf
> file
I am getting heartily tired of idiots who bounce emails that contain
or supposedly contain viruses and are assuredly Joe-jobs. I propose a
black list for these idiots. That MIGHT be enough to convince me that
black lists drawbacks do not out weigh their benefits.
{+_+}
On Fri, 08 Oct 2004 15:49:08 -0700, [EMAIL PROTECTED] (Justin Mason) writes:
> However, that doesn't take in account the situation where multiple rules
> are hitting mostly the same mail; for example, like this:
>
> S1 S2 S3 S4 S5 H1 H2 H3 H4 H5
> RULE1: x x x x
I don't personally use Plesk (nor have I ever heard of it :-D ), but as
for accuracy of SpamAssassin, I can attest to it. Really if you think
of the way SpamAssassin works, bayes is an intergral part of it, it
isn't a Bayes filter per se, but it is one of the techniques that
SpamAssassin uses
77 matches
Mail list logo
