Joe Flowers wrote:
Very preliminary results are no less than AWESOME.
So... how are you implementing the "drifting" spam threshold?
- Joe
smime.p7s
Description: S/MIME Cryptographic Signature
At 03:39 PM 2/18/2005, Eric A. Hall wrote:
Is the LDAP stuff in SA usable for global tests, or is it per-user only,
or is there less of a difference than I am imagining here?
The LDAP stuff is to replace user_prefs, not the global test list.
Since you need to get as far as parsing the site config b
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- -1.44 to -0.5? That's very low! you must be using a lot of Bayes...
- --j.
Joe Flowers writes:
> Very preliminary results are no less than AWESOME. I'm seeing and people
> are reporting much higher rates of Spam being caught with no *reports*
On 2/18/2005 3:39 PM, Eric A. Hall wrote:
> Basically... I've already got postfix calling LDAP for a variety of
> filters (see http://www.ehsco.com/reading/20040916ncf1b.gif), and I'd like
> to extend those LDAP entries for global spamassassin tests (I don't do any
> per-user tests at the global
Very preliminary results are no less than AWESOME. I'm seeing and people
are reporting much higher rates of Spam being caught with no *reports*
of an increase in false-positives. We'll see if that continues; the
proofs in the pudding. No sign of the dividing line drifting into a wall
yet. It se
On Fri, Feb 18, 2005 at 10:01:56PM +0100, Violaine Grimly wrote:
> I googled a bit, but did not find any comparison
> between SA and MIMESweeper. Do any of you have any
> experience (good or bad) with MIMESweeper, can it
> really compare to SA ?
I've never heard of it, but another person here at w
Hello,
One of our customers is (at last !) thinking about
using some anti-spam tool. He got a presentation of
MIMESweeper from some marketroid, which did a very
convincing "trust me if it's expensive it's because
it's good" job :-)
I googled a bit, but did not find any comparison
between SA and M
Am Donnerstag, 17. Februar 2005 09:47 schrieb Hans-Georg Gloeckler:
> I use spamassassin version 2.64, SuSE 8.2 and qmail.
>
> I get the following problem:
> Argument_"\010862517M->U^TB"_isn't_numeric_in_numeric_gt_(>)_a
> t_/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm_line_1260.
On 2/18/2005 3:05 PM, Matt Kettler wrote:
> spampd implements calls directly to the SA perl API via
> Mail::SpamAssassin. By using the API, the tool becomes responsible for
> directly setting up some of the user configuration. In particular, the
> caller of the perl API specifies where to ge
Am Freitag, 18. Februar 2005 19:01 schrieb John Fleming:
> On Friday 18 February 2005 12:53 pm, Tracey Gates wrote:
> > I downloaded the .cf files from the rulesemporium.com site but I don't
> > know what to do with them. Do I just place them in the same folder as
> > my local.cf and SpamAssassin
David A. Roth wrote:
On Feb 18, 2005, at 2:38 PM, Kevin Peuhkurinen wrote:
David A. Roth wrote:
I know this might seem like an odd request for those of you with
tons of disk space available so please be kind. I'm running
SpamAssassin version 3.0.2. For server space reasons (I'm a user on
this sy
On Feb 18, 2005, at 2:38 PM, Kevin Peuhkurinen wrote:
David A. Roth wrote:
I know this might seem like an odd request for those of you with tons
of disk space available so please be kind. I'm running SpamAssassin
version 3.0.2. For server space reasons (I'm a user on this system
not root), I nee
At 02:49 PM 2/18/2005, Eric A. Hall wrote:
> You need it added to your third-party script, as, based on your
> description, it's invoking the SA perl API's directly.
http://www.worlddesign.com/index.cfm/rd/mta/spampd.htm is what I'm
currently using. It doesn't provide any additional parameters over
On 2/18/2005 2:54 PM, Michael Parker wrote:
> So, you missed the ldap/README file?
http://spamassassin.apache.org/full/3.0.x/dist/doc/ doesn't have it and
http://spamassassin.apache.org/doc.html has zero references to ldap. So
yeah I missed it.
--
Eric A. Hall
On Fri, Feb 18, 2005 at 02:51:42PM -0500, Eric A. Hall wrote:
>
> On 2/18/2005 2:41 PM, Michael Parker wrote:
> > FYI, confusing subject lines and content don't help get your questions
> > answered. Are you talking about LDAP or SQL?
>
> I'm talking about LDAP but it uses the SQL interfaces (fro
On 2/18/2005 2:41 PM, Michael Parker wrote:
> FYI, confusing subject lines and content don't help get your questions
> answered. Are you talking about LDAP or SQL?
I'm talking about LDAP but it uses the SQL interfaces (from what I gather)
and the only real docs are for SQL so that's what I have
On 2/18/2005 2:33 PM, Matt Kettler wrote:
> At 02:21 PM 2/18/2005, Eric A. Hall wrote:
>
>>That's not mutually exclusive, and is actually somewhat inclusive. I mean,
>>if people are using the spamassassin script on a low-volume basis, then
>>there's a low volume of SQL/LDAP lookups, so the compla
Hi:
See how strange it is. I have two servers, both of them runinng Linux
Fedora Core-2 with Spam Assassin. The configuration files .cf are the
same for both.
When I send an email to one address in the same server where my mailbox
is, it is being discarded as Spam. When I send to one address in
On Fri, Feb 18, 2005 at 01:47:26PM -0600, Tracey Gates wrote:
> I followed the steps below that are posted on the website
> http://spamassassin.apache.org/full/3.0.x/dist/UPGRADE but I get an
> error when I run the sa-learn --sync after copying the bayes files over
> from my version 2.63 to 3.0.2.
I followed the steps below that are posted on the website
http://spamassassin.apache.org/full/3.0.x/dist/UPGRADE but I get an
error when I run the sa-learn --sync after copying the bayes files over
from my version 2.63 to 3.0.2. The files I copied are the bayes_toks
and bayes_seen files.
Error Me
FYI, confusing subject lines and content don't help get your questions
answered. Are you talking about LDAP or SQL? In this case maybe there
isn't much of a distinction, but when I filter by subject only, the
chances are lower that I'm gonna read an email about LDAP, but pretty
high I'll read one
David A. Roth wrote:
I know this might seem like an odd request for those of you with tons
of disk space available so please be kind. I'm running SpamAssassin
version 3.0.2. For server space reasons (I'm a user on this system not
root), I need to relocate auto-whitelist, bayes_journal, bayes_see
From: "Eric A. Hall" <[EMAIL PROTECTED]>
>
> On 2/18/2005 2:17 PM, Matt Kettler wrote:
> > At 02:03 PM 2/18/2005, Eric A. Hall wrote:
> >
> >>http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README
> >>(which has a bad MIME-type definition, btw [text/english is not real])
> >>says that
"David A. Roth" wrote:
> I know this might seem like an odd request for those of you with tons
> of disk space available so please be kind. I'm running SpamAssassin
> version 3.0.2. For server space reasons (I'm a user on this system
> not root), I need to relocate auto-whitelist, bayes_journal,
>
At 02:21 PM 2/18/2005, Eric A. Hall wrote:
That's not mutually exclusive, and is actually somewhat inclusive. I mean,
if people are using the spamassassin script on a low-volume basis, then
there's a low volume of SQL/LDAP lookups, so the complaint is nulled.
True, but it's also intended for users
On 2/18/2005 2:17 PM, Matt Kettler wrote:
> At 02:03 PM 2/18/2005, Eric A. Hall wrote:
>
>>http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README
>>(which has a bad MIME-type definition, btw [text/english is not real])
>>says that SQL lookups are only used with spamd, and so presuma
At 02:03 PM 2/18/2005, Eric A. Hall wrote:
http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README
(which has a bad MIME-type definition, btw [text/english is not real])
says that SQL lookups are only used with spamd, and so presumably they are
not used with spamassassin itself. Furthe
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Well, let us put the *other* side of the story ;)
See http://wiki.apache.org/spamassassin/WhyUseRules .
- --j.
Gray, Richard writes:
> Hi Ronan,
>
> I myself have been looking at this for the company I work for, and may
> be able to provide some i
http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README
(which has a bad MIME-type definition, btw [text/english is not real])
says that SQL lookups are only used with spamd, and so presumably they are
not used with spamassassin itself. Further poking seems to prove this
assumption co
>I downloaded the .cf files from the rulesemporium.com site but I don't
>know what to do with them. Do I just place them in the same folder as
>my local.cf and SpamAssassin will automatically use them or do
>I need to
>place something in a configuration file to make SpamAssassin use them?
Corre
I know this might seem like an odd request for those of you with tons
of disk space available so please be kind. I'm running SpamAssassin
version 3.0.2. For server space reasons (I'm a user on this system not
root), I need to relocate auto-whitelist, bayes_journal, bayes_seen and
bayes_toks whi
Hi folks,
I am running clamav/amavisd-new/spamassassin, spamassassin is called from
amavis. my amavis is runned as user clamav. I did not explicitly set
"bayes_auto_learn","bayes_path".. in /etc/mail/spamassassin/local.cf, but
under ~clamav, I can see bayes database file, I run sa-learn --dump mag
On Friday 18 February 2005 12:53 pm, Tracey Gates wrote:
> I downloaded the .cf files from the rulesemporium.com site but I don't
> know what to do with them. Do I just place them in the same folder as
> my local.cf and SpamAssassin will automatically use them or do I need to
> place something in
> -Original Message-
> From: Tracey Gates [mailto:[EMAIL PROTECTED]
> Sent: Friday, February 18, 2005 11:41 AM
> To: 'Joe Polk'; users@spamassassin.apache.org
> Subject: RE: where is database updated by sa-learn
>
>
> I don't have a bayes directory but I have the following files
> in th
I downloaded the .cf files from the rulesemporium.com site but I don't
know what to do with them. Do I just place them in the same folder as
my local.cf and SpamAssassin will automatically use them or do I need to
place something in a configuration file to make SpamAssassin use them?
Tracey Ga
I don't have a bayes directory but I have the following files in the
.spamassassin directory for the user that I have been sa-learning.
bayes_toks
bayes_seen
bayes_journal
I don't intend to use user prefs. Can I copy these files in the
spamassassin directory on my new server and it be compatible
At 06:33 AM 2/18/2005, Chris Withers wrote:
> At 05:27 AM 2/17/2005, Chris Withers wrote:
>
>> I now only have TRIPWIRE ANTIDRUG EVILNUMBERS in my_rules_du_jour.
>> Are these still worth having? They don't seem to have been updated in
ages...
> Antidrug is likely to not be updated, I'm lacking tim
> Actually, these files are essentially ANDed together. It doesn't just
> stop once it has read your /etc/resolv.conf, it keeps going and adds
in
> servers from the other two files. The relevant code is here:
>
http://search.cpan.org/src/CREIN/Net-DNS-0.48/lib/Net/DNS/Resolver/UNIX.
pm
Also you
>
>And as I said, the equivalent change log for this last update to the
>header* files would have been close to 100 lines long. Is that what
>you would like to see?
Also note that SARE ninjas have to walk a fine line of giving out 'JUST'
enough info on rule changes. Its a price we have to pay for
>-Original Message-
>From: Jeff Chan [mailto:[EMAIL PROTECTED]
>Sent: Friday, February 18, 2005 12:30 AM
>To: SpamAssassin Users
>Subject: Re: Less spam blocked with 3.02 - AWL-related?
>
>
>On Thursday, February 17, 2005, 6:45:58 AM, Juergen Georgi wrote:
>> Score set 3 - the fourth scor
At 12:15 PM 2/17/2005, you wrote:
whitelist_from_rcvd [EMAIL PROTECTED] apache.org
I have these headers to work with:
Erm.. is that it? Where are the Received: headers??
You can't match a whitelist_from_rcvd rule without a Received: header...
>-Original Message-
>From: Alan Premselaar [mailto:[EMAIL PROTECTED]
>Sent: Friday, February 18, 2005 3:13 AM
>To: Jim Maul
>Cc: Chris Santerre; users@spamassassin.apache.org
>Subject: Re: Bayes for VoIP anyone?
>
>
>Jim Maul wrote:
>> Chris Santerre wrote:
>>
Autodialing for commer
Austin Weidner wrote:
Hopefully someone else can learn from this because the docs are a little
deceiving, as you said it says in the docs that the order is checked like:
/etc/resolv.conf
$HOME/.resolv.conf
./.resolv.conf
However it was checking like this:
$HOME/.resolv.conf
/etc/resolv.conf
I've su
>
>I have received the following request:
>
>"We request to be on your whitelist. We are double opt-in only.
>
>We operate using several different upstream providers, and the
>complete list of our ip address blocks can be found at
>"
>
>Apparently they provide mailing-list services and our spamf
It really depends. If you've not given it a path, then it will be in a
subdirectory under each user, usually if you're been sa-learning as root then
look under root's .spamassassin directory for a bayes directory. If you don't
intend to use user prefs (letting users have their own bayes db's) then
Title: Message
I have a server that
I have been running SpamAssassin's sa-learn on for a long time. I
just built another server and would like to copy the information for the
production server over to the new server so I don't have to have the new server
re-learn the spam.
I have SA 2.63
I find that the following additional rulesets helps SA squash 99.7% of our
spam; including mortgage. This is with SA 3.0x
70_sare_random.cf
bogus-virus-warnings.cf
weeds.cf
chickenpox.cf
stocks.cf
biz.cf
evilnumbers.cf
mangled.cf
tripwire.cf
All of these are avaiable at rulesemporium.
- Origi
I find that the following additional rulesets helps SA squash 99.7% of our
spam; including mortgage. This is with SA 3.0x
70_sare_random.cf
bogus-virus-warnings.cf
weeds.cf
chickenpox.cf
stocks.cf
biz.cf
evilnumbers.cf
mangled.cf
tripwire.cf
All of these are avaiable at rulesemporium.
- Origi
Am Freitag, 18. Februar 2005 10:11 schrieb Gray, Richard:
> Does anyone have a good ruleset for catching all this fake watch spam?
My rules can be found here:
http://www.rulesemporium.com/forums/showthread.php?s=&postid=329#post329
There is also a mass check with a former version.
Thomas
>
> I
Matt Kettler wrote:
At 05:27 AM 2/17/2005, Chris Withers wrote:
I now only have TRIPWIRE ANTIDRUG EVILNUMBERS in my_rules_du_jour.
Are these still worth having? They don't seem to have been updated in
ages...
Antidrug is likely to not be updated, I'm lacking time to work on it.
It's also now a par
Hello Thomas,
Am Donnerstag, 17. Februar 2005 19:17 schrieb Thomas Bolioli:
> Interesting but what happens in the case where someone, like me, is
> getting 250+ spam a day and only about ten or so legitimate emails? This
> is not counting this account that my mailing lists go to which I have
> far
Hi Ronan,
I myself have been looking at this for the company I work for, and may
be able to provide some insight.
DSPAM is an entirely statistical filter, so is similar in behaviour to
the BAYES part of SA. It implements a number of more sophisticated
algorithms and strategies for recognising s
Gray, Richard wrote:
Does anyone have a good ruleset for catching all this fake watch spam?
http://www.violetdreams.com/sa/rolex.cf
I'm seeing more of it in our systems here, and don't want to duplicate
effort if one of you fine people has already got one written.
someone needs to get these adopte
I am aware that this is a SA list.. and my posting my generate some
flames...
but can anyone perhaps highlight some of the main plus points of SA over
.eg. Dspam??
One of my objectives here in work is to (even though we are enjoying the
best anti spam experience in recent history since i upgrad
Chris
might not have met any tokens in the email it knows about. Or you
haven't pre-fed it with 200 spam and 200 ham to kick start it.
try running "spammassasin -D --lint" and see if it mentions opening and
using the bayes DB
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +
Richard
they tend to get caught by our general rules from the SARE
ninja's/URI-RBL etc.
what version of SA and what extra rules are you running??
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Gray, Richard wrote:
Does anyone have a good ruleset for catchin
I have received the following request:
"We request to be on your whitelist. We are double opt-in only.
We operate using several different upstream providers, and the
complete list of our ip address blocks can be found at
"
Apparently they provide mailing-list services and our spamfilter has
re
Does
anyone have a good ruleset for catching all this fake watch spam?
I'm
seeing more of it in our systems here, and don't want to duplicate effort if one
of you fine people has already got one written.
TIA
Richard
---
This email from
Jim Maul wrote:
Chris Santerre wrote:
Autodialing for commercial solicitation to a residence without prior
consent by a for-profit group that you're not already doing business
with is automatically subject to a $500 minimum damage per-call.
I don't know of many residences with VoIP ;)
Also: LOL
Richard Ozer wrote:
I can't wait to tell my customers that they need to get SpitAssassin.
RO
That just makes me think of 'Alumn' (referenced from the old Bugs Bunny
/ Daffy Duck cartoons)
alan
> Do you have any of the other files:
>
> >> /etc/resolv.conf
> >> $HOME/.resolv.conf
> >> ./.resolv.conf
>
> where . and $HOME are for the user SA runs as.
>
> Jeff C.
Jeff,
Thanks for the reply... I am happy to say: PROBLEM SOLVED! I was so happy to
see this:
debug: RBL: succe
On Thursday, February 17, 2005, 8:56:40 PM, Austin Weidner wrote:
>> According to the docs:
>>
>> On UNIX systems the defaults are read from the following files, in the
>> order indicated:
>>
>> /etc/resolv.conf
>> $HOME/.resolv.conf
>> ./.resolv.conf
>>
>> What OS is this server
On Thursday, February 17, 2005, 6:45:58 AM, Juergen Georgi wrote:
> Score set 3 - the fourth score - applies when Bayes is enabled and
> network tests are enabled.
> In addition, non-zero score set 3 values in 3.0.2 are much lower
> than those in 2.64, e.g.
> 2.64: score SORTED_RECIPS 4.299 4.30
> According to the docs:
>
> On UNIX systems the defaults are read from the following files, in the
> order indicated:
>
> /etc/resolv.conf
> $HOME/.resolv.conf
> ./.resolv.conf
>
> What OS is this server running?
>
> Try running this:
>
> perl -MNet::DNS -e '$r=Net::DNS::Resolv
On Thu, Feb 17, 2005 at 07:57:54PM -0800, Robert Menschel wrote:
>Hello George,
>
>Thursday, February 17, 2005, 7:43:27 PM, you wrote:
>
>GG> I count approximately 35 active cf files in rulesemporium. Of course the
>GG> changes aren't evenly distributed, but that's an average of 3 changes
>GG> per
Hello George,
Thursday, February 17, 2005, 7:43:27 PM, you wrote:
GG> Hi Bob,
>>And as I said, the equivalent change log for this last update to the
>>header* files would have been close to 100 lines long. Is that what
>>you would like to see?
GG> I count approximately 35 active cf files in rul
Didn't realize this was a on list with my private reply
On Thu, Feb 17, 2005 at 04:51:08PM -0600, Chris Thielen wrote:
>George,
>
>>Maybe the way RDJ does the roll back needs be addressed? I know version
>>2 is nearing release, and this wouldn't be difficult to add: It could
>>check the cf fi
Hi Bob,
On Thu, Feb 17, 2005 at 06:11:49PM -0800, Robert Menschel wrote:
>Hello George,
>
>Thursday, February 17, 2005, 8:16:21 AM, you wrote:
>
>>>Fair enough. In this most recent publication of updates to the
>>>70_sare_header*.cf family, 40 rules were added, and 50 rules were
>>>moved from one
Robert Menschel wrote:
Hello Matt,
Thursday, February 17, 2005, 6:30:10 AM, you wrote:
[...]
Why do you receive these advertising emails? What defines a trusted
site?
As an example, I subscribe my domains through GoDaddy.com. Once in a
while, I receive notices such as a domain is going to expire.
On Thu, Feb 17, 2005 at 08:52:11PM -0600, Lightology Postmaster wrote:
> in local.cf I have "use_bayes 1" and "bayes_auto_learn 1" but in the
> processed email header I don't see sa running the bayes filters. what can be
> wrong?
Run with -D, see what it says. My guess is that you haven't learn
in local.cf I have "use_bayes 1" and
"bayes_auto_learn 1" but in the processed email header I don't see sa
running the bayes filters. what can be wrong?
Chris V.
Hello Matt,
Thursday, February 17, 2005, 6:30:10 AM, you wrote:
MF> I do have a question with regards to training. Once in a while, I
MF> receive advertisement e-mails from trusted sites. What is the
MF> best practice to handle these messages? Is it more prudent to
MF> sa-learn --spam them, or
Hello George,
Thursday, February 17, 2005, 8:16:21 AM, you wrote:
>>Fair enough. In this most recent publication of updates to the
>>70_sare_header*.cf family, 40 rules were added, and 50 rules were
>>moved from one file to another, including 8 or 9 that were moved from
>>various files to the ar
73 matches
Mail list logo
