Re: How got arcor.de into blocklist?

2005-01-03 Thread Jeff Chan
On Monday, January 3, 2005, 9:25:20 AM, Gary Funck wrote: >> From: Thomas Arend >> Sent: Monday, January 03, 2005 7:55 AM >> >> I have received a FalsePositive because arcor.de got into trhe blocklists. >> >> Has someone informations why arcor.de got into the blocklist? >> > You probably need to

Re: How got arcor.de into blocklist?

2005-01-03 Thread Jeff Chan
On Monday, January 3, 2005, 7:55:11 AM, Thomas Arend wrote: > I have received a FalsePositive because arcor.de got into trhe blocklists. > Has someone informations why arcor.de got into the blocklist? > Here is the report: > Content analysis details: (5.5 points, 5.0 required) > pts rule na

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Louis LeBlanc
On 01/03/05 03:16 PM, Kelson sat at the `puter and typed: > Keith Whyte wrote: > > i send viruses to /dev/null but i bounce spam, partly in the vain hope > > that some spammers might actually back off after multiple failures, and > > mainly in case of false positives, so that the sender knows the

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Kelson
Keith Whyte wrote: i send viruses to /dev/null but i bounce spam, partly in the vain hope that some spammers might actually back off after multiple failures, and mainly in case of false positives, so that the sender knows the message wasn't delivered. > > you have total control via configuration

RE: Any way to block really bad SPAMs?

2005-01-03 Thread David B Funk
On Mon, 3 Jan 2005, Gustafson, Tim wrote: > David, > > I found that option and tried it, but here's what I get now when I run > spamass-milter: > > Jan 3 22:16:09 maze spamass-milter[56478]: Could not extract score from > J_CHICKENPOX_41,SARE_URI_PILLS autolearn=no version=2.64> > > Any ideas?

RE: Any way to block really bad SPAMs?

2005-01-03 Thread Gustafson, Tim
David, I found that option and tried it, but here's what I get now when I run spamass-milter: Jan 3 22:16:09 maze spamass-milter[56478]: Could not extract score from Any ideas? Tim Gustafson MEI Technology Consulting, Inc [EMAIL PROTECTED] (516) 379-0001 Office (516) 480-1870 Mobile/Emergenci

RE: Any way to block really bad SPAMs?

2005-01-03 Thread David B Funk
On Mon, 3 Jan 2005, Gustafson, Tim wrote: > Thanks for all the help everyone. I guess the real question for me is > "how do I make spamass-milter block e-mails of a certain score", because > that's how I integrate SpamAssassin into Sendmail. > > Thanks again! > > Tim Gustafson Add the "-r 15" fl

RE: Any way to block really bad SPAMs?

2005-01-03 Thread snowjack
On Mon, 3 Jan 2005 16:45:41 -0500, "Gustafson, Tim" <[EMAIL PROTECTED]> said: > Thanks for all the help everyone. I guess the real question for me is > "how do I make spamass-milter block e-mails of a certain score", because > that's how I integrate SpamAssassin into Sendmail. I don't use spamas

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Andy Jezierski
Steven Stern <[EMAIL PROTECTED]> wrote on 01/03/2005 03:50:22 PM: > On Mon, 3 Jan 2005 16:45:41 -0500, "Gustafson, Tim" <[EMAIL PROTECTED]> wrote: > > >Thanks for all the help everyone.  I guess the real question for me is > >"how do I make spamass-milter block e-mails of a certain score", becau

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Steven Stern
On Mon, 03 Jan 2005 13:47:44 -0800, [EMAIL PROTECTED] wrote: >By the way, we reject messages that score above 10 with a 550. We found >that almost 95% of spam scores over 10, and almost zero ham scores above >five. Messages scoring between 5 and 10 are accepted, tagged, and >relayed to their reci

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Keith Whyte
Gustafson, Tim wrote: Hello I know that it's generally frowned upon to actually "block" SPAMs (as opposed to marking them as SPAM and letting the user decide) but my company has some instances where we get things that are blatantly, absolutely, unequivocally SPAM (think scores in excess of 100 poin

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Steven Stern
On Mon, 3 Jan 2005 16:45:41 -0500, "Gustafson, Tim" <[EMAIL PROTECTED]> wrote: >Thanks for all the help everyone. I guess the real question for me is >"how do I make spamass-milter block e-mails of a certain score", because >that's how I integrate SpamAssassin into Sendmail. > >Thanks again! > T

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Michele Neylon::Blacknight Solutions
Gustafson, Tim wrote: Hello I know that it's generally frowned upon to actually "block" SPAMs (as opposed to marking them as SPAM and letting the user decide) but my company has some instances where we get things that are blatantly, absolutely, unequivocally SPAM (think scores in excess of 100 poin

Re: Any way to block really bad SPAMs?

2005-01-03 Thread snowjack
On Mon, 03 Jan 2005 13:09:02 -0800, [EMAIL PROTECTED] said: > On Mon, 3 Jan 2005 15:49:33 -0500, "Gustafson, Tim" <[EMAIL PROTECTED]> > said: > > Hello > > > > I know that it's generally frowned upon to actually "block" SPAMs (as > > opposed to marking them as SPAM and letting the user decide) bu

RE: Any way to block really bad SPAMs?

2005-01-03 Thread Gustafson, Tim
Thanks for all the help everyone. I guess the real question for me is "how do I make spamass-milter block e-mails of a certain score", because that's how I integrate SpamAssassin into Sendmail. Thanks again! Tim Gustafson MEI Technology Consulting, Inc [EMAIL PROTECTED] (516) 379-0001 Office (51

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Steven Stern
On Mon, 03 Jan 2005 12:53:21 -0800, Evan Platt <[EMAIL PROTECTED]> wrote: >At 12:49 PM 1/3/2005, you wrote: >>I know that it's generally frowned upon to actually "block" SPAMs (as >>opposed to marking them as SPAM and letting the user decide) but my >>company has some instances where we get things

Re: Any way to block really bad SPAMs?

2005-01-03 Thread snowjack
On Mon, 3 Jan 2005 15:49:33 -0500, "Gustafson, Tim" <[EMAIL PROTECTED]> said: > Hello > > I know that it's generally frowned upon to actually "block" SPAMs (as > opposed to marking them as SPAM and letting the user decide) but my > company has some instances where we get things that are blatantly,

Re: Any way to block really bad SPAMs?

2005-01-03 Thread Evan Platt
At 12:49 PM 1/3/2005, you wrote: I know that it's generally frowned upon to actually "block" SPAMs (as opposed to marking them as SPAM and letting the user decide) but my company has some instances where we get things that are blatantly, absolutely, unequivocally SPAM (think scores in excess of 100

RE: RulesDuJour problem - help please

2005-01-03 Thread Dimitri Yioulos
-Original Message- From: Chris Thielen [mailto:[EMAIL PROTECTED] Sent: Monday, January 03, 2005 11:44 AM To: Dimitri Yioulos Cc: users@spamassassin.apache.org Subject: Re: RulesDuJour problem - help please Hi Dimitri, Dimitri Yioulos wrote: > Happy New Year to all. > > I've searched the

Any way to block really bad SPAMs?

2005-01-03 Thread Gustafson, Tim
Hello I know that it's generally frowned upon to actually "block" SPAMs (as opposed to marking them as SPAM and letting the user decide) but my company has some instances where we get things that are blatantly, absolutely, unequivocally SPAM (think scores in excess of 100 points without BAYES or a

Re: Are spammers finally feeling some pain?

2005-01-03 Thread Eric W. Bates
I agree with Louis. I graph various numbers from our postfix with mailgrapher and I would say that the amount of mail we block has been pretty consistent for the last 6 months at about 250 msg/min. Louis LeBlanc wrote: On 01/03/05 11:06 AM, [EMAIL PROTECTED] sat at the `puter and typed: Over th

Re: Are spammers finally feeling some pain?

2005-01-03 Thread Sam Nilsson
Andy Jezierski wrote: Probably not. Every year around the holidays our spam hits a yearly low usually the week of Christmas, then goes right back up to the previous levels. I think some of the spammers may be taking a holiday break as well. I have to agree, but only based on my experiences this

RE: Rule based on English words

2005-01-03 Thread Chris Santerre
>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >Sent: Monday, January 03, 2005 1:18 PM >To: Murty Rompalli >Cc: users@spamassassin.apache.org >Subject: Re: Rule based on English words > > >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > > >Hi Murty -- > >It shoul

Re: Are spammers finally feeling some pain?

2005-01-03 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 01/03/2005 01:06:22 PM: > Over the past month I've seen a ~25% dropoff in the amount of spam we're > receiving on a daily basis. Anyone else seeing a significant drop in > spam recently? > -- >   >   snowjack(a)fastmail.fm > Probably not. Every year around the holid

Re: Are spammers finally feeling some pain?

2005-01-03 Thread Louis LeBlanc
On 01/03/05 11:06 AM, [EMAIL PROTECTED] sat at the `puter and typed: > Over the past month I've seen a ~25% dropoff in the amount of spam we're > receiving on a daily basis. Anyone else seeing a significant drop in > spam recently? I sincerely doubt it. I just turned on fetchmail to pull all my

Re: Rude spammer - continued

2005-01-03 Thread Loren Wilton
> Could gibberish in this area give a few "bonus" scores? Yes. And there are a number of rules and rulesets around to catch this sort of stuff. Of course, this also shows up in the HTML side of many spams, either in one point type or in HTML comments or under an image spam in white text or so

Rude spammer - continued

2005-01-03 Thread hamann . w
Hi, I just happened to look at the lines that ware non-html readers on html emails. Commercial programs usually suggest to buy a new mail reader Some spam recently was seen carrying a fairly insulting message there I believe that quite a bit of spam puts rather incomprehensible words in this sp

RE: Are spammers finally feeling some pain?

2005-01-03 Thread Chris Santerre
>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >Sent: Monday, January 03, 2005 2:06 PM >To: users@spamassassin.apache.org >Subject: Are spammers finally feeling some pain? > > >Over the past month I've seen a ~25% dropoff in the amount of >spam we're >receiving on

Are spammers finally feeling some pain?

2005-01-03 Thread snowjack
Over the past month I've seen a ~25% dropoff in the amount of spam we're receiving on a daily basis. Anyone else seeing a significant drop in spam recently? -- snowjack(a)fastmail.fm

SA 3.0.2 and low memory patch

2005-01-03 Thread Andy Jezierski
Does SA 3.0.2 contain the test patch for low memory machines?  Probably not, since nothing was mentioned in the release note.  That being the case, can the existing patch be used as is for 3.0.2 or would it have to be modified for 3.0.2? Thanks Andy

Re: Rule based on English words

2005-01-03 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Murty -- It should be easy enough to write a plugin which - - registers an eval rule function - - calls $permsgstatus->get_decoded_stripped_body_text_array() in that, to get the array of decoded lines in the message (HTML stripped, MIME decod

My custom rules: Input appreciated

2005-01-03 Thread Murty Rompalli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Here are my Custom Rules. Any input / comments appreciated. Download my rules from: http://solar.murty.net/~murty/sa/ Murty's Custom Rules for SpamAssassin These are my custom rules for SpamAssassin 1. Murty.badchars.cf (http://solar.murty.net/~mur

RE: How got arcor.de into blocklist?

2005-01-03 Thread Gary Funck
> From: Thomas Arend > Sent: Monday, January 03, 2005 7:55 AM > > I have received a FalsePositive because arcor.de got into trhe blocklists. > > Has someone informations why arcor.de got into the blocklist? > You probably need to go to the places where the URL's are blacklisted, and requrest that

Re: RulesDuJour problem - help please

2005-01-03 Thread Chris Thielen
Hi Dimitri, Dimitri Yioulos wrote: Happy New Year to all. I’ve searched the list archive, and found some references to my problem, but no solutions, so here goes again (sorry for the long post, but I want to provide as much info. as necessary): I recently upgraded to spamassassin 3.0.2 running o

Re: edit rules

2005-01-03 Thread Thomas Arend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Montag, 3. Januar 2005 16:47 schrieb Rodney Richison: > I'd like to make sure I've got this right. > To edit an existing rule like 20_dnsbl_tests.cf , I copy the rule to the > /etc/spamassassin directory, then edit as I please like so.. Yes. But yo

How got arcor.de into blocklist?

2005-01-03 Thread Thomas Arend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I have received a FalsePositive because arcor.de got into trhe blocklists. Has someone informations why arcor.de got into the blocklist? Thanks, Thomas Here is the report: Content analysis details: (5.5 points, 5.0 required) pts rule

RE: RulesDuJour problem - help please

2005-01-03 Thread Dimitri Yioulos
Loren, Cron is set to get the rules at 1:30 AM each day. Even those fetches fail. So, although I appreciate the tip, it's not the cause of my problem. Dimitri -Original Message- From: Loren Wilton [mailto:[EMAIL PROTECTED] Sent: Monday, January 03, 2005 10:28 AM To: Dimitri Yioulos Su

edit rules

2005-01-03 Thread Rodney Richison
I'd like to make sure I've got this right. To edit an existing rule like 20_dnsbl_tests.cf , I copy the rule to the /etc/spamassassin directory, then edit as I please like so.. header RCVD_IN_dnsbl_JAMM_com eval:check_rbl_txt('JAMM', 'dnsbl.JAMMConsulting.com.') describe RCVD_IN_dnsbl_JAMM_com R

RE: RulesDuJour problem - help please

2005-01-03 Thread Dimitri Yioulos
-Original Message- Well, umh, uh, no. local.cf lives in /etc/mail/spamassassin. Rules live in /usr/share/spamassassin/RulesDuJour/. And the Bayes part I just today tried to make work. Do I (or rather, I do) have a misconfigured system? If so, (with humble apologies for my stupidity) ho

RulesDuJour problem - help please

2005-01-03 Thread Dimitri Yioulos
Happy New Year to all.   I’ve searched the list archive, and found some references to my problem, but no solutions, so here goes again (sorry for the long post, but I want to provide as much info. as necessary):   I recently upgraded to spamassassin 3.0.2 running on CentOS 3.3.  I’m als

Re: SA and SQL

2005-01-03 Thread Michael Parker
On Mon, Jan 03, 2005 at 10:51:38PM +0900, Cor wrote: > according to the SA docs on this subject.. but text feild lenngths are > only up to 255.. althou I think that the lengths were around 60. 255 is > not even enough. Anyone seen this or know what I am talking about please > let me know. I would l

SA and SQL

2005-01-03 Thread Cor
I have a serious issue which may or may not have ever been addressed. I am using SQL support with SA and recently noticed that the whitelist and blacklist feild lengths are somewhat small. Moreover they can be written in such a way as to cause mail delivery problems to users or block out all email

RE: feed MimeDefanged mail to sa-learn?

2005-01-03 Thread Gary Funck
Attached, is a Perl script, mdf2sa.pl, which converts spam messages that have been marked up by MIMEDefang, into a form that is similar to the message format used by SA. Also attached is a simple procmail script, mdf2sa.rc, which drives the perl script, and can be invoked via formail as follows:

SpamAssassin Developer for Hire

2005-01-03 Thread Duncan Findlay
Dear SpamAssassin users, I hope you will forgive me for this mildly off-topic post. As you probably already know, I am one of the core developers of SpamAssassin, and I've been contributing actively to the project for about 3 years (although I've contributed little recently due to lack of time).