On Mon, 13 Dec 2004, Nate Carlson wrote:
hmm, thought someone already answered. Yep, it's a limitation that's been
in SpamAssassin for a long time -- currently (in 3.0.x) you can call
Mail::SpamAssassin::copy_config() to copy a "clean" configuration object,
The earlier reply didn't go to that e
My current spam problem consists almost entirely of spam advertising
watches and various pain relief products. I have a reasonable variety of
rulesets installed including the following (it's not definitive as I don't
have access to the server right now):
SARE General Subject
SARE HEADER
SARE html0
Hi Johan,
Johan Barelds wrote:
>
> Op maandag 13 december 2004 21:08, schreef Sam Nilsson:
>
>>SpamAssassin version 3 is amazing when combined with network tests.
>>
>>These are my top tests. This shows percentage of spam that each test
>>correctly marked as such:
>>
>>98.21 % 275 : BAYES_99
>>96
On Mon, 13 Dec 2004, Justin Mason wrote:
hmm, thought someone already answered. Yep, it's a limitation that's
been in SpamAssassin for a long time -- currently (in 3.0.x) you can
call Mail::SpamAssassin::copy_config() to copy a "clean" configuration
object, before reading user preferences, then
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Nate Carlson writes:
> On Wed, 8 Dec 2004, Nate Carlson wrote:
> > I've been doing some hacks to Mimedefang to allow per-user configuration
> > to be read from LDAP (using the SA ldap stuff), and have it working,
> > except for the fact that prefere
"Rich" <[EMAIL PROTECTED]> wrote on
12/13/2004 03:17:38 PM:
[snip]
> I wanted the term included rather than a score so I can setup a filter
in
> the mail client to dump those messages that are above a ceretain score,
> say 20, into the "dead-certain spam" bucket while those
below 20 but about
>
On Mon, 13 Dec 2004 15:19:04 -0600, Kristopher Austin
<[EMAIL PROTECTED]> wrote:
> In all versions of outlook that I can remember using all you have to do
> is drag-and-drop the message from outlook into a new message. This
> creates an exact copy including headers as an attachment.
Obviously one
In all versions of outlook that I can remember using all you have to do
is drag-and-drop the message from outlook into a new message. This
creates an exact copy including headers as an attachment.
Kris
-Original Message-
From: Rob MacGregor [mailto:[EMAIL PROTECTED]
Sent: Monday, Decemb
> "Rich" <[EMAIL PROTECTED]> wrote on 12/13/2004 02:54:23 PM:
>
>> Is there a way in user_prefs to rewrite the Subject lines to add a
> suffix
>> like [really spam] if the score exceeds a particular value? The host
>> provides SA but doesn't provide procmail and so the easy way out isn't
> an
>> op
"Rich" <[EMAIL PROTECTED]> wrote on
12/13/2004 02:54:23 PM:
> Is there a way in user_prefs to rewrite the Subject lines to add a
suffix
> like [really spam] if the score exceeds a particular value? The host
> provides SA but doesn't provide procmail and so the easy way out isn't
an
> option. I ha
At 12:54 PM 12/13/2004, you wrote:
Is there a way in user_prefs to rewrite the Subject lines to add a suffix
like [really spam] if the score exceeds a particular value? The host
provides SA but doesn't provide procmail and so the easy way out isn't an
option. I had a look at the POD for Conf but di
On Wed, 8 Dec 2004, Nate Carlson wrote:
I've been doing some hacks to Mimedefang to allow per-user configuration
to be read from LDAP (using the SA ldap stuff), and have it working,
except for the fact that preferences do not get cleared between runs of
SpamAssassin. I took a look at the way Mim
Is there a way in user_prefs to rewrite the Subject lines to add a suffix
like [really spam] if the score exceeds a particular value? The host
provides SA but doesn't provide procmail and so the easy way out isn't an
option. I had a look at the POD for Conf but didn't see anything that
indicated I
On Mon, Dec 13, 2004 at 09:38:07PM +0100, Thomas Arend wrote:
> >
> > That said, a compromise was put into the code that could help you in
> > your situation. A few plugin hooks where added at various points in
> > the bayes code so you could extract the raw token values and map them
> > to their
Matt: thanks a lot for your reply.
On Monday 13 December 2004 22:28, you wrote:
> Start off by making sure the system can do DNS lookups at all..
>
> $ host www.spamassassin.org
> www.spamassassin.org has address 209.237.227.195
DNS lookup surely works (tested again for any case -- fine).
> I
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Am Montag, 13. Dezember 2004 16:04 schrieb Michael Parker:
> On Sun, Dec 12, 2004 at 11:21:19PM -0800, Gary W. Smith wrote:
[..]
> As of 3.0 the bayes tokens are stored as a part of an SHA1 hash on the
> original token string. So, there is no way to e
Am Montag, 13. Dezember 2004 17:13 schrieb shane mullins:
> Thanks Ronan,
>
> When I run Spamassasin -D --lint, I get the following:
>
> debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB <
> 200
>
> If I could get my >200 spam/ham's in there, then I could start using
> Bayes
At 02:27 PM 12/13/2004, Yassen Damyanov wrote:
The RBL checks do NOT work:
debug: RBL: success for 0 of 22 queries
debug: RBL: timeout for sblxbl after 15 seconds
debug: RBL: timeout for njabl-notfirsthop,njabl after 15 seconds
debug: RBL: timeout for sblxbl-notfirsthop,sblxbl after 15 seconds
debu
Hi Sam!
I read you story and just wondered a few things:
1. How do you get this statistical info?
2. Don't you have problems with dcc?
I do get the following message all the time:
--
dccproc[3421]: missing message body; fatal error
--
I don't believe dcc is really working for me.
Btw i use the fo
>-Original Message-
>From: Joe Zitnik [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 13, 2004 1:32 PM
>To: users@spamassassin.apache.org
>Subject: Custom Rules
>
>
>Is it me, or have the updates to the SARE "custom rules" and "other
>rules" pages seem to be a lot less frequent than the
>-Original Message-
>From: Duncan Hill [mailto:[EMAIL PROTECTED]
>Sent: Monday, December 13, 2004 12:11 PM
>To: users@spamassassin.apache.org
>Subject: Re: Test and Keep spam
>
>
>On Monday 13 December 2004 16:58, Kenneth Porter might have typed:
>> --On Monday, December 13, 2004 5:08 AM
--On Monday, December 13, 2004 5:10 PM + Duncan Hill
<[EMAIL PROTECTED]> wrote:
Enable URIBLs and you should probably start catching it.
URIBL's were enabled. I checked my SA folder and found one on the 7th, so
I'm wondering if something broke in looking them up. That was the day I
rebooted
Rob Blomquist wrote:
When 3.0.0 came out, Mandrake did not support it yet, and I missed the SURBL
discussion. I checked out the website, but I am still clueless about it.
Could you point me to something that will clue me in?
And similarly about network tests. I assume that you mean comparing mes
It runs as root and has all the permissions.
I have installed several SuSE9.2 mailservers now and in every mail log i see
these error messages.
I just don't understand that there isn't a patch or workaround to solve this.
I can't believe that i am the only SuSE9.2 professional mailserver user.
An
Hi all,
spamassassin v. 2.64 used via amavisd-new (postfix MTA),
Gentoo Linux box.
The RBL checks do NOT work:
debug: RBL: success for 0 of 22 queries
debug: RBL: timeout for sblxbl after 15 seconds
debug: RBL: timeout for njabl-notfirsthop,njabl after 15 seconds
debug: RBL: timeout for sblxbl-n
I'm running Mailscanner with Spamassassin and I was wondering if anyone
else has used any different products than spamassassin, commercial or
opesource and if so how did spamassassin compare to them.
Thanks
Is it me, or have the updates to the SARE "custom rules" and "other
rules" pages seem to be a lot less frequent than they used to be? Does
anyone know why?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Dec 10, 2004, at 2:39 PM, Andy Norris wrote:
Sorry to bother again, but I feel we must be getting closer...
This in the logs (/var/log/maillog) now...(!)
Dec 10 13:44:40 tireswing spamc[22597]: connect() to spamd at
127.0.0.1 failed, retrying (1/3):
On Mon, 13 Dec 2004 11:53:11 -0500, Kris Deugau <[EMAIL PROTECTED]> wrote:
> OE does one thing that Outlook, for whatever stupid reason, does not do.
>
> It allows you to forward a message as an attachment - ie, the ENTIRE
> RFC822 email message received via POP3 will be wrapped in a MIME part
> w
On Mon, Dec 13, 2004 at 09:09:24AM -0800, Jeff Ramsey wrote:
> On Mon, 2004-12-13 at 09:23, Michael Parker wrote:
> > No, Bayes and AWL are unrelated. If you truely do not want to use
> > AWL, then you can just turn it off. perldoc Mail::SpamAssassin::Conf
> > to find out how to do that.
> >
> >
I noticed an increase in uncaught spam this morning. A quick look
revealed that they were all coming through the same gateway (I have
two) and that if I try to do a sa-learn --sync I get this:
>sa-learn --config-file=/usr/local/etc/mimedefang/sa-mimedefang.cf --sync
>bayes: bayes db version 0 is n
On Mon, 2004-12-13 at 05:59, Jon Kvebaek wrote:
> Hi,
> we have a setup where all spam marked by SA gets dumped in a single spam
> folder that gets archived at regular intervals in case something
> valuable should end up in it.
>
> However, one of our users wish to receive the flagged spam. How sh
On Mon, 2004-12-13 at 09:23, Michael Parker wrote:
> No, Bayes and AWL are unrelated. If you truely do not want to use
> AWL, then you can just turn it off. perldoc Mail::SpamAssassin::Conf
> to find out how to do that.
>
> Michael
I'd actually like to use AWL, however I am getting some spam th
On Mon, Dec 13, 2004 at 08:54:28AM -0800, Jeff Ramsey wrote:
>
> I have only been running SA 3X for a fw short weeks, I'll just use the
> clear flag. Will this also clear the auto whitelist entries as well? How
> can I be sure that nobody gets auto whitelisted again? Auto whitelist is
> not someth
On Sun, 2004-12-12 at 16:49, Michael Parker wrote:
> Using autolearn doesn't necessarily auto whitelist messages or from
> addresses. It only causes the message to be learned as ham or spam.
> Over time a from addresses average score might be affected by this.
>
> That said, if you still have the
On Monday 13 December 2004 16:58, Kenneth Porter might have typed:
> --On Monday, December 13, 2004 5:08 AM -0800 Loren Wilton
>
> <[EMAIL PROTECTED]> wrote:
> > Flurry of which? No attachment, at least here.
>
> Sorry, I see so many of these (5 a day or more) that I assume everyone's
> been flood
Ron McKeating wrote:
> I am intrigued by the rule
>
>* 3.4 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
>
> What does this mean?
After a bit of checking, you've likely got a custom score setting for
that rule that's very out of line with the default scores.
On the 2.64 install I'
On Mon, 13 Dec 2004 11:37:39 -0500 (EST), Dan Mahoney, System Admin
<[EMAIL PROTECTED]> wrote:
> On Mon, 13 Dec 2004, Martin Hepworth wrote:
>
> My mistake, I had thought these rules were on by default.
>
> http://wiki.apache.org/spamassassin/SURBL?action=highlight&value=surbl
> didn't have much
That makes complete sense. I can't say that I will be able to
successfully write a plug-in as time is the permitting factor. Storing
the keys would also be useful for us, but I will sacrifice reporting for
performance right now.
Management (i.e. myself) will just have to wait...
Gary
> functio
--On Monday, December 13, 2004 5:08 AM -0800 Loren Wilton
<[EMAIL PROTECTED]> wrote:
Flurry of which? No attachment, at least here.
Sorry, I see so many of these (5 a day or more) that I assume everyone's
been flooded by them.
Example attached.--- Begin Message ---
jdow wrote:
> Copy it to a folder is probably the best shot if he does not directly
> export the files as MBOX files. Outlook mangles headers a little, I
> understand. But it's far easier to deal with than OutlookExpress.
OE does one thing that Outlook, for whatever stupid reason, does not do.
It
Dan
your Net::DNS is 0.34, you need 0.48 for the URI RBL stuff to work...
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Dan Mahoney, System Admin wrote:
On Mon, 13 Dec 2004, Martin Hepworth wrote:
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84
On Mon, 13 Dec 2004, Martin Hepworth wrote:
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84a76f0)
implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.34
debug: trying (3) sourceforge.net...
debug: looking up NS for 'sourceforge.net'
deb
Dan
make sure it's mentioned as a module in inet.pre. Also you'll need the
latest version of Net::DNS.
if you "spamassassin -D --lint" it should say whether or not it's running.
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Dan Mahoney, System Admin wrote:
On Mon, 13 Dec 2004, Martin Hepworth wrote:
My mistake, I had thought these rules were on by default.
http://wiki.apache.org/spamassassin/SURBL?action=highlight&value=surbl
didn't have much to say, and it led me to believe it was the default
(provided the necessary modules were installed).
Okay,
Dan
not sure what rules you are running but I just found a local hit on my
system that fired the following rules..
1.50 AB_URI_RBL URI's domain appears in ws database at ab.surbl.org
5.40 BAYES_99 Bayesian spam probability is 99 to 100%
1.00 DRUGS_ERECTILE Refers to an erectile drug
0.99 FROM_END
At 10:59 AM 12/13/2004, Rob MacGregor wrote:
> I'm not kidding when I say I've "-r"'d about 30 of this email.
Well, I'm seeing hits on DCC, Razor and SURBL, amongst others, as at 15:58
UTC.
Whoops, Rob's right.. I caught the razor hits, (heck, that much is even in
the OP's own message) but I miss
Thanks Ronan,
When I run Spamassasin -D --lint, I get the following:
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB <
200
If I could get my >200 spam/ham's in there, then I could start using
Bayes. SA is working great, but if I could get Bayes working, it would
be eve
At 10:46 AM 12/13/2004, Dan Mahoney, System Admin wrote:
Guys,
Recently I've gotten a bunch of emails through spamassassin with
"near-miss" scores. The subject and body on all has been virtually
identical -- the subject ends in the words "soft tabs".
I've reported every single one of these via
On Mon, 13 Dec 2004 10:46:49 -0500 (EST), Dan Mahoney, System Admin
<[EMAIL PROTECTED]> wrote:
> A sample: http://www.gushi.org/softtabs.txt
>
> I'm not kidding when I say I've "-r"'d about 30 of this email.
Well, I'm seeing hits on DCC, Razor and SURBL, amongst others, as at 15:58 UTC.
--
The sa-learn feature is great. And, I know, this has been brought up
before. But, could someone please tell me how to get the spam/ham
messages back to our spam filters? Our spam filters are smtp gateways
only. We use OpenBSD 3.5, Spamassassin 3.0.1, dcc, razor and amavisd.
Shane
Guys,
Recently I've gotten a bunch of emails through spamassassin with
"near-miss" scores. The subject and body on all has been virtually
identical -- the subject ends in the words "soft tabs".
I've reported every single one of these via spamassassin -r, and I have a
confirmed membership in al
On Sun, Dec 12, 2004 at 11:21:19PM -0800, Gary W. Smith wrote:
> We used to do some bayes analisys on the 2.6x version using some scripts that
> would pickup what keywords had what scores. But the newer 3.0x SQL version
> seens to be storing tokens in some binary or BCD format.
>
> Is there any
On Mon, 2004-12-13 at 12:56, Leonardo Helman wrote:
> Hi, how are you calling sa?
>
>
>
> Are you sure nobody is cutting your .doc because
Hi,
we have a setup where all spam marked by SA gets dumped in a single spam
folder that gets archived at regular intervals in case something
valuable should end up in it.
However, one of our users wish to receive the flagged spam. How should I
write this in the procmailrc?
It now looks like thi
Flurry of which? No attachment, at least here.
Loren
I got a flurry of these this morning, and they keep coming back. Has anyone
come up with some good rules for these? Obviously both "test" and "keep" in
the subject line. What else? The overall HTML structure looks pretty
consistent, so perhaps something that matches on that pattern? I'm seeing a
I actually never knew about this until i was having a hoke around...
anyway cant get it to run..
./sa-stats.pl -l /var/log/syslog -H -T 5 -u
Error in option spec: "top|T:25"
Error in option spec: "SCALAR(0x4c9a68)"
bash-2.03$
i presume this is to do with the per user count but it even flags when i
hi list,
i hope that this is the right list for my prob. i updated spamassassin
on my debian installation to 3.x. Now i get often this:
20213 pts/0S 0:00 qmail-send
20215 pts/0S 0:00 \_ splogger qmail
20216 pts/0S 0:00 \_ qmail-lspawn |/usr/sbin/qmail-procmail
20228 p
Hi all, just had a user complaining that we filtered a mail that should
not have been blocked (we stick them in a separate folder called
Filtered_SPAM).
I am intrigued by the rule
* 3.4 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
What does this mean?
The nextpart of the email is
Title: Bayes SQL token Q?
We used to do some bayes analisys on the 2.6x version using some scripts that would pickup what keywords had what scores. But the newer 3.0x SQL version seens to be storing tokens in some binary or BCD format.
Is there any way to derive the original keys from the S
On Sunday 12 December 2004 9:10 pm, Robert Menschel wrote:
Thanks for your comments on my rulesets, it was just the guidance that I
needed. My rulesets up until your comments were based on my ideas, so that
should answer any of your questions.
> My next release of HEAD, GENL_SUBJ, and URI should
Hello Rob,
Sunday, December 12, 2004, 12:55:34 PM, you wrote:
RB> But now, I need some better rules. ...
RB> Here are the trusted rulesets I am using:
RB> SARE_OEM
RB> SARE_GENLSUBJ
RB> SARE_GENLSUBJ_ENG
RB> SARE_CODING
Get ride of SARE_CODING -- the coding_html file has been deprecated.
(If
On Sunday 12 December 2004 7:55 pm, Steve Dondley wrote:
> I'm using sa-learn for the first time. I uploaded mail from my t-bird
> mail client on my Windows machine to my Linux box in ascii mode. There
> was a little over 200 message in each of the two mailboxes I uploaded.
>
> When I ran sa-lear
Hello Steve,
Sunday, December 12, 2004, 7:59:05 AM, you wrote:
SD> When training spamassassin, is it a good idea to feed spam already
SD> marked as spam back to SpamAssassin? Will this help it or hinder it or
SD> do neither?
The simple answer: If you can manually verify and sa-learn the emails
Did you use the --mbox switch?
"Input sources are in mbox format"
At 07:55 PM Sunday, 12/12/2004, Steve Dondley wrote -=>
I'm using sa-learn for the first time. I uploaded mail from my t-bird
mail client on my Windows machine to my Linux box in ascii mode. There
was a little over 200 message in
At 10:55 PM 12/12/2004 -0500, Steve Dondley wrote:
I'm using sa-learn for the first time. I uploaded mail from my t-bird
mail client on my Windows machine to my Linux box in ascii mode. There
was a little over 200 message in each of the two mailboxes I uploaded.
When I ran sa-learn --ham and s
I'm using sa-learn for the first time. I uploaded mail from my t-bird
mail client on my Windows machine to my Linux box in ascii mode. There
was a little over 200 message in each of the two mailboxes I uploaded.
When I ran sa-learn --ham and sa-learn --spam on the boxes, I got a
report that s
On Sun, Dec 12, 2004 at 02:09:23PM -0800, Jeff Ramsey wrote:
>
> My problem is that during the auto-learn days some messages got auto
> whitelisted, and now I cannot seem to get rid of them. Is there a way
> that I can 'unlearn' these messages, or just start SA's learn process
> over?
>
Using au
On Sunday 12 December 2004 1:22 pm, Michele wrote:
> Are you using DCC and Bayes?
DCC, I don't know what that is.
Baysian filters are running and getting trained nightly on new messages by
cron.
Rob
--
Mountlake Terrace, WA
USA
70 matches
Mail list logo
