Re: Image Composition Analysis

At 05:27 PM 11/30/2004, Smart,Dan wrote: Messagelabs made a big deal of their option of using First 4 Internet's Image Composition Analysis tool to detect pornographic images. Is anyone in the open source world working on something similar. Not that I'm aware of. Nor am I particularly impressed

RE: Image Composition Analysis

The ones that get through have bayes poison at the bottom. It did hit a couple of the SARE rules that look for bayes poison, but didn't score enough to kill it. Very well crafted. <> > -Original Message- > From: Evan Platt [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 30

RE: Lycos "Make Love Not Spam" screensaver

Fighting spam with a virus like attack...let's think about this one...not only will your ISP end up shutting down your connection for a violation of their TOS, you could possibly face court charges. Makes complete sense to me. -Noel -Original Message- From: Kenneth Porter [mailto:[EMAIL

Re: Image Composition Analysis

Smart,Dan said: > Messagelabs made a big deal of their option of using First 4 Internet's > Image Composition Analysis tool to detect pornographic images. Is anyone > in > the open source world working on something similar. > > Catching image only E-mail with pornographic images is really difficul

Image Composition Analysis

Messagelabs made a big deal of their option of using First 4 Internet's Image Composition Analysis tool to detect pornographic images.  Is anyone in the open source world working on something similar.   Catching image only E-mail with pornographic images is really difficult.  My users are of

OT: Lycos "Make Love Not Spam" screensaver

A screensaver that DDoS's spammer websites:

Re: simulating a live setup / testing spamd

> Ok, you have SpamAssassin installed and you have spamd running. Where do > you call spamc? I am not using spamc directly. How is that done? Actually, my system does not have a man page on this program. Anyway, I am using a Sendmail milter called smtp-vilter and I guess that it internally c

Re: Brightmail (really, SA performance statistics)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler wrote: | At 03:39 PM 11/30/2004, Bob Amen wrote: | |> Thank you for that very well written and helpful explanation! Now, |> do you have a script that computes the test values from a SA log file |> that you'd care to share? | | | You can

Re: Brightmail (really, SA performance statistics)

At 03:39 PM 11/30/2004, Bob Amen wrote: Thank you for that very well written and helpful explanation! Now, do you have a script that computes the test values from a SA log file that you'd care to share? You can't measure any of those performance metrics from logfiles alone.. there's no way t

Re: Brightmail (really, SA performance statistics)

Bob Amen wrote: Robert LeBlanc wrote: The closest thing to a "standard" way of measuring a spam filter's effectiveness is the scientific model that medical researchers use for diagnostic tests. Even so, there are five separate tests, not just one: Thank you for that very well written and helpf

Re: SA 3.0 lint error

At 03:33 PM 11/30/2004, Kurt Buff wrote: Ran spamassassin --lint as root, and got the following error: 'Argument "" isn't numeric in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 578.' Where might I start in trying to correct this? bayes_use_hapaxes

Re: Brightmail (really, SA performance statistics)

Robert LeBlanc wrote: The closest thing to a "standard" way of measuring a spam filter's effectiveness is the scientific model that medical researchers use for diagnostic tests. Even so, there are five separate tests, not just one: Thank you for that very well written and helpful explanation! N

SA 3.0 lint error

All, This is a relatively fresh install, new as of last week, not an upgrade of an old system. Ran spamassassin --lint as root, and got the following error: 'Argument "" isn't numeric in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 578.' Where mi

Re: OT - How often to reboot?

On Tue, 30 Nov 2004 01:53:20 -0800, jdow wrote > From: "Rob" <[EMAIL PROTECTED]> > > > My power supply died on Sunday morning, and as much as I wanted it not > > too, the machine powered off. Doesn't meet any of your above > > requirements but I'll let it pass this once. Clearly you need to star

Re: reply from sorbs

On Sun, 28 Nov 2004 20:35:31 -0800, Bob Amen wrote > And you said "an aggressive greet delay." I tried > that and found too many false positives with legitimate mail servers > that are poorly configured. The only recourse for those false > positives is another means of communication (eg. telepho

Re: 25 AWL AWL: From: address is in the auto white-list?

I have some AWL's listed in my local.cf. You do? That's not likely true.. In my local.cf I have the line"whitelist_from [EMAIL PROTECTED]" Does this not keep all messages coming from our domain clear from being marked as spam?

Re: simulating a live setup / testing spamd

At 02:36 PM 11/30/2004, Peter Matulis wrote: Hi, I am currently on dial-up but I have spamassassin installed and spamd is running. I would like to test my setup in the most realistic way possible given my situation. I have tried forwarding spam I get on my regular windows machine to my lan mail

Re: Missed spam

On Friday 26 November 2004 10:28 am, Jerry Bell wrote: > This spam went through with a score of 0. I'm using 3.01 with most of the > sare rulesets. Any ideas on how to catch these? > Just as a me too. I've been battling these for the last month or so with SA 3.0.1 with varied results. I run wit

Re: 25 AWL AWL: From: address is in the auto white-list?

At 12:42 PM 11/30/2004, Jerry wrote: I have some AWL's listed in my local.cf. You do? That's not likely true.. AWL has nothing to do with "whitelist_from" statements and the like. You can't create AWL entries in your local.cf. the AWL is the AUTOMATIC whitelist. It's just that.. automatic. You do

Re: Sensible way to use SpamCop reporting?

On Tue, Nov 30, 2004 at 09:33:33AM -0700, Carlos Perez wrote: > Feature request to SA developers: turn off default SC reporting in the next > release. No need to consume bandwidth as the generic reporting address is > not used. The developers will likely not see things like this. Please open ti

Re: ok_locales and ok_language purpose

At 02:12 PM 11/30/2004, Johnson, Robert F wrote: What is the purpose of the ok_languages and ok_locales configurations? I read the POD doc but I am still a bit confused. For example, if Japanese was included in either ok_locales or ok_languages, does that mean that they would be evaluated for spam

simulating a live setup / testing spamd

Hi, I am currently on dial-up but I have spamassassin installed and spamd is running. I would like to test my setup in the most realistic way possible given my situation. I have tried forwarding spam I get on my regular windows machine to my lan mailserver (the one on which spamd is running) b

ok_locales and ok_language purpose

What is the purpose of the ok_languages and ok_locales configurations? I read the POD doc but I am still a bit confused. For example, if Japanese was included in either ok_locales or ok_languages, does that mean that they would be evaluated for spam or ignored? Is it possible to use either of t

25 AWL AWL: From: address is in the auto white-list?

I have some AWL's listed in my local.cf. However they are getting a postative score of 25 points and being marked as spam. Shouldn't it be scoring the message with a negative score so it doesn't get marked as spam?

Re: Brightmail

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gray, Richard wrote: | Can anyone shed any light on how Brightmail achieves the rather | impressive statistics it is quoting, or do you think it is just smoke | and mirrors? The first thing to note about performance statistics with regard to a spam filt

RE: Brightmail

Oddly enough, we went up head-to-head with our SpamAssassin solution against Brightmail three times in a row and won the customer every time. This is running 2.64. We have a single 8-way 3500, but we'll probably be upgrading that soon. David. - On Tue, 30 Nov 2004, Damian Mendoza wrote: We

RE: Brightmail

We sell BrightMail to customers that want a "Commercial" antispam solution and have deep pockets to pay a yearly subscription. We build SA based solutions (http://www.spamgate.us) for customers that want a "low-cost" antispam solution.       Regards,   Damian From: Gray, Richard [mailto:[E

Re: Brightmail

Richard, my day job is tech support for Sun mail systems. I support the integration with both SpamAssassin and Brightmail. Both do a very good job. Brightmail is commercial software, and is sold with a contract that automatically updates it, often. Many customers are more comfortable with thi

Re: Brightmail

At 11:58 AM 11/30/2004, Gray, Richard wrote: Brightmail seems to be getting a lot of good press on the SPAM front. So I'm wondering, why do people running large mail systems choose SA over corporate offerings. Is it cost? Is it configurability, or performance? Can anyone shed any light on how Bri

Re: New Hardware

>Subject: RE: New Hardware >Date: Tue, 30 Nov 2004 07:42:02 -0800 >From: "Gary W. Smith" <[EMAIL PROTECTED]> >To: Ronan <[EMAIL PROTECTED]>, spam > >We use 4 single processor machines 2.8ghz P4 HT and we are doing >150k per day now without breaking a sweat. We also have two >additional backend se

Re: Sensible way to use SpamCop reporting?

I apologize for jumping into the thread late. I posted to the SpamCop forum concerning how to report spams using the latest SA 3.0 release. http://forum.spamcop.net/forums/index.php?showtopic=3129 To summarize: - generic SC reporting address in SA goes to bit bucket (might as well turn off repo

Brightmail

Brightmail seems to be getting a lot of good press on the SPAM front.   So I'm wondering, why do people running large mail systems choose SA over corporate offerings. Is it cost? Is it configurability, or performance?   Can anyone shed any light on how Brightmail achieves the rather impre

wich is the best milter interface for spamassassin?

Hello, I'm running SA with sendmail using milter-spamc to connect them. It's working ok, but I would like to know about your experiences using SA and milter, and which one you think is the best to use. I have not seeing many people trough the list using milter-spamc, and I like to hear of some o

Re: New Hardware

Per Jessen wrote: > Depending on your setup, you can probably do without heartbeat. Why not just > have simple 50/50 load-sharing? We have a 64-node SA cluster working like > this - only individual servers such as the master node run in an HA setup. Forgot to say - these are all dual-processor

Re: New Hardware

Ronan wrote: > Which one will be better suited to SA? I know SA is more cpu/ram than > disk IO so im leaning more toward the AMD approach. The reason there are > 2 machines of each is because im gonna implement fail over using > heartbeat. Depending on your setup, you can probably do without hea

RE: New Hardware

We use 4 single processor machines 2.8ghz P4 HT and we are doing 150k per day now without breaking a sweat. We also have two additional backend servers for running spamd. Total 6. I know you said two but if you need to loose just one then your load might be affected. We can bring down half of t

Re: New Hardware

Ronan wrote: > What Im currently looking at is either 2 Sun v150s or 2 > dual-opterons probably with a gig each, and the standard 80+gigs. > Which one will be better suited to SA? I know SA is more cpu/ram > than disk IO so im leaning more toward the AMD approach. I would recommend going with Linu

Re: New Hardware

You might also look at Solaris X86. I've just brought up such a box, and am impressed with the performance relative to Linux on the same box. jay Jeff Chan wrote: On Tuesday, November 30, 2004, 4:28:35 AM, Ronan Ronan wrote: Hey list, I am in the quite sureal situation of being given

Re: New Hardware

Jeff Chan wrote: On Tuesday, November 30, 2004, 4:28:35 AM, Ronan Ronan wrote: Hey list, I am in the quite sureal situation of being given a blank cheque by my boss to buy 2 new servers for SA. They were so impressed with the upgrade to v3 + SURIBLS et al that when i said that our current

RE: user_prefs: "required_hits" is working but "rewrite_subject" isn't ?

Perhaps the developers should add a check in the lint process that would spit out a informative warning to people when the run SA 3.0 with deprecated or no longer supported options. -- Benjamin Story, CCNA CCDA Client Server Technical Analyst Dot Foods, Inc www.dotfoods.com (217)773-4411 -O

Re: New Hardware

Ronan I'd go for dual opteron V20z if you want to stick with sun kit. Will outperform the Sparc based stuff. no need to heart-beat, just have the two machines on same MX value and DNS will load balance for you. Would be interesting to see how Solaris 10 compares with Linux in this environment -

RE: sa-learn ham

Gray, Sorry for the delay in response. I just wanted to let you know that your script worked PERFECTLY and I now have a sensible "newest atime", which allowed me to expire my database properly. Thanks a million! Tim Gustafson MEI Technology Consulting, Inc [EMAIL PROTECTED] (516) 379-0001 Offic

Re: New Hardware

On Tuesday, November 30, 2004, 4:28:35 AM, Ronan Ronan wrote: > Hey list, > I am in the quite sureal situation of being given a blank cheque by > my > boss to buy 2 new servers for SA. They were so impressed with the > upgrade to v3 + SURIBLS et al that when i said that our current setup

New Hardware

Hey list, I am in the quite sureal situation of being given a blank cheque by my boss to buy 2 new servers for SA. They were so impressed with the upgrade to v3 + SURIBLS et al that when i said that our current setup was hitting load max they found some cash for me... :D We are in a university

Feature Request: Bayes as a more general detector

We consider the Bayes system as a detector of SPAM, which 'technically' it isn't. What it reports is how close a given message is to one of two sets, given that it has been previously shown examples of each of the two sets.   Because this is the case, I'm thinking it should be possible to us

Re: OT - How often to reboot?

My power supply died on Sunday morning, and as much as I wanted it not too, the machine powered off. Doesn't meet any of your above requirements but I'll let it pass this once. Rob This bloody uptime thread cursed me. My mail server was up for almost 200 days, when at 6:50pm on Sunday (Fry's

Re: OT - How often to reboot?

From: "Rob" <[EMAIL PROTECTED]> > On Mon, Nov 29, 2004 at 10:44:45AM -0500, Michael Barnes wrote: > > I reboot computers after doing a kernel or fundamental OS upgrade that > > requires a reboot (rare), after a severe weather emergency (a hurricane, > > very rare), and when the power goes out long

Re: OT - How often to reboot?

On Mon, Nov 29, 2004 at 10:44:45AM -0500, Michael Barnes wrote: > I reboot computers after doing a kernel or fundamental OS upgrade that > requires a reboot (rare), after a severe weather emergency (a hurricane, > very rare), and when the power goes out longer than my UPS has battery > power (occas