I run a small ISP and have installed SpamAssassin to stop spam. It catches a
lot of spam. It's especially good at filtering out the worst, most offensive
mail, but a good deal of spam still gets through the filter, even after a
user's bayes db gets big enough to start adding the bayes tests.
At 05:54 PM 11/15/2004, [EMAIL PROTECTED] wrote:
We are running SA 3.01 and the latest MailScanner. Besides the delivered
SA rule sets, we have the following:
It's most likely due to bayes expiry.
Requoting a past post of mine on the subject:
--
[resending]
Hi,
It's been awhile since i've participated on the list. I've just
attempted to scour the entire net trying to find some information on
this, but I Haven't found anything.
I've just installed SpamAssassin 3.01 in conjunction with MIMEDefang
2.48 on a redhat enterprise server 3.0 mach
Hello,
I recently installed version 3.0.1 - here are my particulars:
qmail-scanner 1.24
FreeBSD 5.3-RELEASE i386
spamd invoked with: -H -c -d -m 3 -r
My question is this: why do the child perl processes as displayed by
"ps ux" continually increase their memory usage?
I am using the default rule
Title: spamassassin time outs
We are running SA 3.01 and the latest MailScanner. Besides the delivered SA rule sets, we have the following:
r--r--r-- 1 31854 May 31 19:24 70_sare_adult.cf
-r--r--r-- 1 3927 Apr 24 2004 70_sare_bayes_poison_nxm.cf
-r--r--r-- 1 211390 Oct 3
Hold on there.
SQL does NOT return stuff in "no particular order". SQL returns stuff in the
order you request it be returned.
If you don't bother to request an order, then I guess your statement stands,
but the DBA needs a spanking for crafting a query that doesn't specify any
necessary parameter
Good afternoon,
For those interested, I've uploaded to the Wiki, and attached for your
convenience, a plugin to detect when an email was sent to a secondary or
lower preference MX server when a higher preference MX server was likely
to have been available (the message was passed to the higher pr
>>
>> > You could zero out the rules u don't wish to use, so they wont trigger
>> > further false positives, in your .spamassassin/user_prefs file assuming you
>> > have one in your home directory.
>>
>> This were perfect if it were not unsafe.
>> Doesn't ~/.spamassassin/user_prefs require allow_
At 04:52 PM 11/15/2004, Paul Crittenden wrote:
I'm running SpamAssassin 3.0.1 on a Compaq Alpha running Tru64-Unix,
sendmail 8.12.10. I have been running SA for about 6 - 8 months on a few
test accounts with great success. I tried to set it up so it would filter
all of my system email for about
Johan Barelds wrote:
> I *know* that dcc isn't broken.
> It only doesn't work when called from SA.
> In my case it isn't occasional:
> --
> Nov 15 16:39:49 beast dccproc[1791]: missing message body; fatal error
> --
> I happens not-stop.
> It looks to me that SA doesn't send the message body to dcc
I'm running SpamAssassin 3.0.1 on a Compaq Alpha running Tru64-Unix,
sendmail 8.12.10. I have been running SA for about 6 - 8 months on a few
test accounts with great success. I tried to set it up so it would filter
all of my system email for about 2500 accounts. When I set it up email in
the q
On Nov 15 at 14:27, Dan Barker spoke:
> Don't remember if you need to do this by user or not. But, if you put the
> zeros in local.cf, it will do the same thing, but for everybody.
local.cf is probably not located in ~/.spamassassin, is it?
But I was told SA is running on a separate box anyway.
Don't remember if you need to do this by user or not. But, if you put the
zeros in local.cf, it will do the same thing, but for everybody.
Dan
-Original Message-
From: Hanspeter Roth [mailto:[EMAIL PROTECTED]
Sent: Monday, November 15, 2004 2:23 PM
To: users@spamassassin.apache.org
Subjec
On Nov 15 at 16:57, Martin spoke:
> You could zero out the rules u don't wish to use, so they wont trigger
> further false positives, in your .spamassassin/user_prefs file assuming you
> have one in your home directory.
This were perfect if it were not unsafe.
Doesn't ~/.spamassassin/user_prefs
Excellent, thanks everyone. The :raw did the trick. I'm upgrading to
3.0, too.
-Dave
Op maandag 15 november 2004 16:07, schreef D.J. Fan:
> I get "missing message body; fatal error" on occasion. It is
> my guess this means there is no text in the body of the message.
> I don't think it means DCC is broken.
I *know* that dcc isn't broken.
It only doesn't work when called from SA.
I
|-Original Message-
|From: Hanspeter Roth [mailto:[EMAIL PROTECTED]
|Sent: 15 November 2004 16:13
|To: users@spamassassin.apache.org
|Subject: Re: Score 9.9 by configuration?
|
| On Nov 15 at 08:38, Matt Kettler spoke:
|
|> If you took away the 15 FVGT_TRIPWIRE_* hits the score of
|the m
Hi,
Does anybody know if SA can be trained to recognise and deal with mail as spam
based on the characterset it's using?
ie. lately I've been getting a lot of chinese (big5) that is spam.
I've added checks myself but I'd like to know if SA is capable of this or not.
--
On Nov 15 at 08:38, Matt Kettler spoke:
> If you took away the 15 FVGT_TRIPWIRE_* hits the score of the message would
> have gone down by about 10.5 points.
I'm trying to advise the admin. But I don't know his plans...
> Find the duplicates and remove them. My guess is the server has both
>
At 09:19 AM 11/15/2004, Dave Sill wrote:
From: =?utf-8?q?Hubert Lfa?= <[EMAIL PROTECTED]>
To: =?utf-8?q?Eustace Oiw?= <[EMAIL PROTECTED]>
Subject: =?utf-8?q?Economize 65 % or mo?=
=?utf-8?q?re on our prescript?=
=?utf-8?q?ions?=
I tried adding rules (SA 2.63) to match "utf-8" in these fields, but
On Mon, Nov 15, 2004 at 09:19:08AM -0500, Dave Sill wrote:
> rules. There's no "rawheader" tag, and "full" seems to only include
> the body.
Actually, there is a raw header specification:
header RULE Subject:raw =~ /.../
and yes, "full" will only do the body since it's short for "full body". ;)
>-Original Message-
>From: Dave Sill [mailto:[EMAIL PROTECTED]
>Sent: Monday, November 15, 2004 9:19 AM
>To: users@spamassassin.apache.org
>Subject: Spam with ``=?utf-8?q?'' in From/To/Subject
>
>
>I'm getting lots of messages with UTF-8 encoding specified in the
>header, e.g.:
>
>From: =
Vickie:
I've had the same problem. It has to do with procmail and the -t 60.
The spamc -t 60 doesn't actually kill the spamd process, it simply cuts the
connection between spamc and spamd.
The normal action of procmail and spamc is to deliver if there is a spamc
error.
This has to be turned off b
I noticed that DCC and Pyzor are broken if beeing called from SA.
(Nov 14 17:00:07 beast dccproc[4795]: missing message body; fatal error)
I get "missing message body; fatal error" on occasion. It is
my guess this means there is no text in the body of the message.
I don't think it means DCC is brok
"Spammers don't go to Cybercafés to send spam."
Oh yes they do !
We see lots of phishing and 419 / lottery scams coming from Cybercafes.
The average spammer likes to work from home, the average scammer likes the
anonymity of Cybercafes.
Cigan - you have a very difficult problem. If you scan con
Hello Hanspeter,
Monday, November 15, 2004, 3:55:01 AM, you wrote:
HR> On Nov 14 at 21:28, Matt Kettler spoke:
>> Defintiely custom.
>>
>> FVGT_TRIPWIRE_* are add-on rules, and are not a part of the standard SA set.
>> TW_* are also add-on rules. In fact, I suspect they are a duplicate of the
I'm getting lots of messages with UTF-8 encoding specified in the
header, e.g.:
From: =?utf-8?q?Hubert Lfa?= <[EMAIL PROTECTED]>
To: =?utf-8?q?Eustace Oiw?= <[EMAIL PROTECTED]>
Subject: =?utf-8?q?Economize 65 % or mo?=
=?utf-8?q?re on our prescript?=
=?utf-8?q?ions?=
I tried adding rules (SA 2.
At 09:51 AM 11/13/2004 -0800, Vicki Brown wrote:
2004-11-13 17:32:05 [54661] i: error: Insecure dependency in eval while
running
setuid at
/usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm
line 1669, line 37._ No such file or directory, continuing
I have upgraded to SA 3.0.1
At 12:55 PM 11/15/2004 +0100, you wrote:
Ok, thanks for explaining.
If add-ons are added should the `required' level be increased in
order to prevent to much false positives?
Really it depends on what the FP ratio of the added rules are like. Usualy
not, or only very slightly, as most add-ons are
Hi all!
I'm just upgrading to 3.0.1, and I think I'd like to use a PostgreSQL
database for my Bayes DB. I'm setting it up with a user, and they say
it is a Good Idea to give this user the privileges it needs, no more,
no less. I couldn't find this documented anywhere (is it?), so I looked
thro
On Nov 14 at 21:28, Matt Kettler spoke:
> Defintiely custom.
>
> FVGT_TRIPWIRE_* are add-on rules, and are not a part of the standard SA set.
> TW_* are also add-on rules. In fact, I suspect they are a duplicate of the
> same ruleset, but with different names.
> LOCAL_OBFU generic is a local c
> On Fri, 12 Nov 2004, Larry stipulated:
> > You could comment out the "spamcop_to_address" in your configuration
> > file. Then SA will report to the "generic" spamcop address. Your
> > reports won't be given as much weight (whatever that means) but you
> > won't get the confirmation emails eith
hi list, me again..
still doing my first installation of sa.
i just want to ask why is it that there is no modification being made
in a captured spam email?
In amavisd.conf
$spam_quarantined_to recieves the spam email
$spam_admin also recieved notifications
but there's no SPAM in the su
Defintiely custom.
FVGT_TRIPWIRE_* are add-on rules, and are not a part of the standard SA set.
TW_* are also add-on rules. In fact, I suspect they are a duplicate of the
same ruleset, but with different names.
LOCAL_OBFU generic is a local customization. And a heavy hitter at 1.8 points.
SARE_HEA
At 05:06 PM 11/14/2004 +0100, Johan Barelds wrote:
At this moment i use the SuSE 9.2 distro.
I noticed that DCC and Pyzor are broken if beeing called from SA.
(Nov 14 17:00:07 beast dccproc[4795]: missing message body; fatal error)
I also read the docu from SA3.01 and found this:
--
There is an iss
There is always a way; however, do you have the resources to program such an
effort? You might be able to modify an Open Source Proxy Server, but even
then it will be a effort. You are still missing the major point here.
Spammers don't go to Cybercafés to send spam. Why should they go to a
cy
Whats the issue here? Adding the scores comes to 10.2, but i haven't
looked at the score set to determine what the exact precision was on
each of those decimals.
This is the score chart:
0.1
1.8
0.1
0.1
0.1
0.1
0.1
0.1
0.1
0.1
0.1
0.1
-2.6
-0.6
0.7
0.7
0.7
0.7
0.7
0.7
0.7
0.7
0.7
0.7
0.7
0.7
0.7
37 matches
Mail list logo
