Re: ENC: Take that!

I know that I had already replied, but the in using u2club.com for the contact email, the spammer has made a serious error. That account is a reseller of outblaze and likely the account will not last more that a day or two (one more domain made ineffective). Outblaze has the best policy o

Re: [Fwd: Re: SquirrelSAP 1.0.3 for Squirrel Mail is Ready!]

p dont think wrote: Ron, You are sending from a non-deliverable address. I assumed since your message went to me offlist that you wanted to move this thread off the list, however, my mail just gets returned (see attached bounce). -Paul This project was originally one that had existed on the

Re: ENC: Take that!

On Tue, 8 Mar 2005, Daniel A. de Araujo wrote: > We are receiving a lot of kind of messages like that. Any ideas to block > this ? href resolves to ip in china -> block -Dan

Re: ENC: Take that!

This same spammer has been at it for many months. What this shows is that among registrars, Joker take wdprs complaints seriously - most do not. He has been using the set of name servers: ns1.mikahak-munged.com ns1.fujins-munged.com ns1.miftrue-munged.com and

[Fwd: Re: SquirrelSAP 1.0.3 for Squirrel Mail is Ready!]

Ron, You are sending from a non-deliverable address. I assumed since your message went to me offlist that you wanted to move this thread off the list, however, my mail just gets returned (see attached bounce). -Paul Original Message Subject: Re: SquirrelSAP 1.0.3 for Squirr

Re: a problem with linux 2.6.11 and sa

On Tue, 8 Mar 2005 12:19:53 -0500, George Georgalis <[EMAIL PROTECTED]> wrote: > On Tue, Mar 08, 2005 at 11:58:14AM -0500, George Georgalis wrote: > >On Tue, Mar 08, 2005 at 01:37:03PM +, Nix wrote: > >>On Thu, 3 Mar 2005, George Georgalis uttered the following: > >>> I recall a problem a while

Re: Possible per-user "levels of grey" whitelist

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Effectively, there's already a way to do that... use Bayes to learn those mails as ham! It works very effectively for that purpose. - --j. Linda W writes: > One type of mail that I am constantly getting incorrectly classified > as SPAM is when I

Re: sa-learn just won't learn!

Excellent point, Matt! I have tried a modification based on your suggestion: [EMAIL PROTECTED] Junk]# su -c "sa-learn --forget" pwaldo < ./7128. Learned from 1 message(s) (1 message(s) examined). [EMAIL PROTECTED] Junk]# su -c "sa-learn --spam" pwaldo < ./7128. Learned from 1 message(s) (1 messag

None of the Stock rules hitting

I've been seeing a lot of stock-spams slipping through lately and none of them seem to hit any of the standard stock rule sets. These guys are often not even tripping bayes rules, and come in under the radar even though I run surbl and razor rules at elevated scores. The body clearly mentions

Re: SquirrelSAP 1.0.3 for Squirrel Mail is Ready!

SquirrelMail, for those that don't know, is an alternative web interface capable of accessing most of the most popular mail servers. I've just completed a major rewrite of the SourceForge project for the Spamassassin PHP-SA_MySQL plugin which I now maintain. This plugin allows your clients whi

Possible per-user "levels of grey" whitelist

One type of mail that I am constantly getting incorrectly classified as SPAM is when I do business or ask for a password from a site. I wonder if SA's accuracy re: false positives might be improved if I could have it process my "Sent" folder to look for people I've sent email to recently. Ideally,

Re: SA log to syslog on cygwin?

Martin, > seen similar issues with MailScanner on cygwin and the syslog code. > From memory the furthest that got was to rewrite the loggin stuff so it > goes to a file rather than letting syslog handling it - ie syslog > doesn't work very well on cygwin. > > I'd either run SA native on perl &

Re: Attention list admin: Re: mail.dailyhills.com

Sorry for the follow-up reply, but upon inspection of my list archive, it appears the offending subscriber is: <[EMAIL PROTECTED]> At 12:31 PM 3/8/2005, Matt Kettler wrote: Will someone track down who this is and boot them off the list? This system has been sending messages like this back to the

Attention list admin: Re: mail.dailyhills.com

Will someone track down who this is and boot them off the list? This system has been sending messages like this back to the list for quite some time and has sent 12 messages like this to the list since 1/19/2005. The offending posts also use From: the original message sender, and use the origin

Re: ENC: Take that!

At 11:48 AM 3/8/2005, Daniel A. de Araujo wrote:   People :   We are receiving a lot of kind of messages like that. Any ideas to block this ? SURBL did a great job on it here. You hit the AB, JP, OB, WS and SC URIBL lists with that message. It also hit razor.

Re: a problem with linux 2.6.11 and sa

On Tue, Mar 08, 2005 at 11:58:14AM -0500, George Georgalis wrote: >On Tue, Mar 08, 2005 at 01:37:03PM +, Nix wrote: >>On Thu, 3 Mar 2005, George Georgalis uttered the following: >>> I recall a problem a while back with a pipe from >>> /proc/kmsg that was sent by root to a program with a >>> use

Re: [SPAM-TAG] ENC: Take that!

On Tuesday, March 8, 2005, 8:48:37 AM, Daniel Araujo wrote: > People : > We are receiving a lot of kind of messages like that. Any ideas to block > this ? > Thanks, > Daniel. Well among other things, the domain of the URI in the spam is listed on 5 SURBLs: > Content analysis details: (14.1 p

Re: a problem with linux 2.6.11 and sa

On Tue, Mar 08, 2005 at 01:37:03PM +, Nix wrote: >On Thu, 3 Mar 2005, George Georgalis uttered the following: >> I recall a problem a while back with a pipe from >> /proc/kmsg that was sent by root to a program with a >> user uid. The fix was to run the logging program as >> root. Has that prot

Re: SA 3.01 eventually stops noticing DNSBLs

Jay Levitt wrote: I discovered Net::DNS::Resolver::errorstring, and put some more logging into SA, and the problem is really simple: my caching-only nameserver times out when looking up NS records for a site that's not in the cache. Not entirely surprising, with a 3-second timeout in SA. And

ENC: Take that!

  People :   We are receiving a lot of kind of messages like that. Any ideas to block this ?    Thanks, Daniel.    -De: Bolting B. Genuinely [mailto:[EMAIL PROTECTED]Enviada em: terça-feira, 8 de março de 2005 13:19Para: BayardAssunto: Take that! Hello Bis nacha Listen to what

Re: Postrgres problems??

Hello! Yes, I use 1.40. I really don't know if I can use 1.32, because DBD was installed via port dependency. I will try to downgrade port and install 1.32 if this will not break anything. Vivek Khera wrote: On Mar 8, 2005, at 1:38 AM, Boris Kovalenko wrote: ERROR: column "newest_token_age" is

Re: Interesting new spam!

On Tuesday, March 8, 2005, 6:38:43 AM, Chris Santerre wrote: >>(copy/paste url in your browser) > How silly are spammers? Like we are not going to tag off of this phrase now? > Lazy bastards didn't even take the time to obfuscate it! :) > --Chris Hmm, maybe a "paste this in{to} your browser"

RE: Need Help if anyone had time for another dumb network admin

I was not specifically listed as an addressee, so I can't help you. Otherwise I open myself up to 'criminal offense'.  Perhaps if you remove this language from your post, you might get more replies? :-)   --Chris  This e-mail and the information that it contains may be privileged and/

Re: Postrgres problems??

On Mar 8, 2005, at 1:38 AM, Boris Kovalenko wrote: ERROR: column "newest_token_age" is integer, but expression type: character varying COMMAND: UPDATE bayes_vars SET newest_token_age = $1 WHERE id = $2 AND newest_token_age < $3 Which DBD::Pg are you using? I hear there ar

RE: Interesting new spam!

>(copy/paste url in your browser) How silly are spammers? Like we are not going to tag off of this phrase now? Lazy bastards didn't even take the time to obfuscate it! :) --Chris

Re: switch dcc / razor off?

/etc/mail/spamassassin/local.cf use_dcc 0 use_razor2 0 perldoc Mail::SpamAssassin:Conf On Tue, 08 Mar 2005 12:24:57 +, R McGlue <[EMAIL PROTECTED]> wrote: > is there a way to temporarily switch off either razor or dcc? > Im running spamd on a sunblade 100 dual 800Mhz cpu with razor > SURBL(l

Re: a problem with linux 2.6.11 and sa

On Thu, 3 Mar 2005, George Georgalis uttered the following: > I recall a problem a while back with a pipe from > /proc/kmsg that was sent by root to a program with a > user uid. The fix was to run the logging program as > root. Has that protected pipe method been extended > since 2.6.8.1? The enti

Re: Interesting new spam!

Regarding spuries-munged.com: Notice that the DNS servers have invalid physical and email addresses listed for xzdns-munged.biz (listed at rfci on Feb. 18 - the physical address would be valid for China, but is not for Vietnam; Not noted in the listing). Paul Shupak [EMAIL

switch dcc / razor off?

is there a way to temporarily switch off either razor or dcc? Im running spamd on a sunblade 100 dual 800Mhz cpu with razor SURBL(local dns) and dcc network tests but am still getting timeouts on the mail relays becuase of (i think) the network tests lagging a bit causing timeouts. Im workin

Re: SA log to syslog on cygwin?

Mark seen similar issues with MailScanner on cygwin and the syslog code. From memory the furthest that got was to rewrite the loggin stuff so it goes to a file rather than letting syslog handling it - ie syslog doesn't work very well on cygwin. I'd either run SA native on perl & windows or fire

Re: how to configure spamassassin

have you started by reading the documenation? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 usha chowdary wrote: hi how to configure spamassassin my setup is postfix with courier-imap and ldap.can u pls help me Thank u ushasri ***

Interesting new spam!

Friend of mine got this mail through last night. Its quite interesting I thought, and maybe represents a new strategy from the spammers that is worth considering? R -Original Message- From: Curtis Daly [mailto:[EMAIL PROTECTED] ] Sent: 07 March 2005 17:18 To:

how to configure spamassassin

hi how to configure spamassassin my setup is postfix with courier-imap and ldap.can u pls help me Thank u ushasri

Re: [SURBL-Discuss] Nice article on SURBL and note about weekends .....

On Monday, March 7, 2005, 12:38:19 PM, Chris Santerre wrote: > Wow this is even a better article! > > Perhaps we should get in touch with the people of Pivotal Veracity?? Check > out this paragraph: > "

Is auto-learning working?

Hi, I'm new to spamassassin. I installed it on a Solaris 9 system, and it works fine. But there is a thing I don't understand, I configured the auto-learning, but when I run spamd it doesn't create the bayes_* files. If I run sa-learn, then the files are created. How can I know if auto-learning

Re: Need Help if anyone had time for another dumb network admin

On Monday, March 7, 2005, 5:34:36 PM, Xander Toushek wrote: > I'm a bit confiused on how to setup spamassasin and how it works. I have > it installed as a part of Redhat fedora FC3, I am running sendmail 8.13 > , SPamAassasin 3.01, and Procmail . I can see in the headers that SA is > scanning all i

Re: Postrgres problems??

On Tue, Mar 08, 2005 at 11:38:00AM +0500, Boris Kovalenko wrote: > I use SpamAssassin 3.0.2 with FreeBSD 5.3-STABLE and PostgreSQL 8.0. I > found in my PostgreSQL's log many messages like: > > So, I think something is wrong with prepared PostgreSQL statements. May be > they should be rewri

Re: Re[4]: learn_with_whitelist?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Menschel writes: > Hello Justin, > > Monday, March 7, 2005, 11:34:00 AM, you wrote: > > JM> Yes, it'd sound great! That and whitelist_from_spf entries > JM> (arriving shortly) ;) > > Definitely to be part of this offering! Look forward to

Postrgres problems??

Hello! I use SpamAssassin 3.0.2 with FreeBSD 5.3-STABLE and PostgreSQL 8.0. I found in my PostgreSQL's log many messages like: ERROR: column "newest_token_age" is integer, but expression type: character varying COMMAND: UPDATE bayes_vars SET newest_token_age = $1 WHERE id

Re: sa-learn for per-user sql bayes

> > I'm looking for how to tell sa-learn to learn against a per-user Bayes > > database (in MySQL) instead of learning sitewide. > > > As in manually training the database? > > sa-learn -u username Can anyone tell me how to verify that a message was learnt correctly for the right user? Runni

SquirrelSAP 1.0.3 for Squirrel Mail is Ready!

SquirrelMail, for those that don't know, is an alternative web interface capable of accessing most of the most popular mail servers. I've just completed a major rewrite of the SourceForge project for the Spamassassin PHP-SA_MySQL plugin which I now maintain. This plugin allows your clients whil

Re: sa-learn for per-user sql bayes

> > I'm looking for how to tell sa-learn to learn against a per-user Bayes > > database (in MySQL) instead of learning sitewide. > > > As in manually training the database? > > sa-learn -u username I don't know... as long as this will do the same thing spamd does with the username to work agai

Re: sa-learn for per-user sql bayes

email builder wrote: Hi, I'm looking for how to tell sa-learn to learn against a per-user Bayes database (in MySQL) instead of learning sitewide. I swear I saw this was going to be in 3.0.2; some kind of change to sa-learn... but a couple hours searching around didn't turn up anything helpful.

sa-learn for per-user sql bayes

Hi, I'm looking for how to tell sa-learn to learn against a per-user Bayes database (in MySQL) instead of learning sitewide. I swear I saw this was going to be in 3.0.2; some kind of change to sa-learn... but a couple hours searching around didn't turn up anything helpful. If I missed someth

Re: How to tell what message a spamd child is running on.

On Mon, Mar 07, 2005 at 09:25:48PM -0500, Dan Mahoney, System Admin wrote: > what message a child is chewing on. No clear indication of where such a > message would be stored, or some way to just send a spamd child a sigusr2 > and have it return the message unprocessed. Sure there is. Just kil

Re: How to tell what message a spamd child is running on.

Would it be sufficient to simply not process large messages for that user? The distro procmailrc.example file shows how set a limit on message size processed in your .procmailrc: :0fw: * < 256000 | spamassassin sets a limit of 256K, or you could pick a much smaller number. -- Alayne McGregor a

Even worse...

I've had a spamd child I keep killing, and now ps shows this... prime# ps aux|grep sen nofauxxx 93636 47.4 0.2 3340 2888 ?? R 9:27PM 0:06.46 sendmail: accepting connections (perl) ...the hell? -Dan Mahoney -- "What's with the server farm down in the basement?" -Spider, Three Skulls Co

How to tell what message a spamd child is running on.

Okay, I've got a user who has a message that loves to eat 90 percent of the cpu. Don't tell me it's bayes or something, I just cleared their .spamassassin directory. It's a big ugly message, and probably a bug, but I can't report it because there's STILL NO OBVIOUS AND EASY WAY to tell what m

Re: Bayes and msg-ids

Hello Paul, Monday, March 7, 2005, 3:39:23 AM, you wrote: PB> Could anyone shed some light for me on how and when (and especially why) PB> Bayes often generates its own Message-Ids when learning, instead of PB> using the one provided in the message? I have a lot of Message-Ids that PB> are '@sa-g

Re[4]: learn_with_whitelist?

Hello Justin, Monday, March 7, 2005, 11:34:00 AM, you wrote: JM> Yes, it'd sound great! That and whitelist_from_spf entries JM> (arriving shortly) ;) Definitely to be part of this offering! Look forward to it! JM> However we'd want to ensure we can get it into the main distro, JM> btw, and I

Re[2]: learn_with_whitelist?

Hello Jeff, Monday, March 7, 2005, 3:17:49 AM, you wrote: JC> On Sunday, March 6, 2005, 7:04:19 PM, Robert Menschel wrote: >> I've been using William Stearns' compiled blacklist available at >> http://www.stearns.org/sa-blacklist/sa-blacklist.current.cf and have >> contributed to it from time to

Need Help if anyone had time for another dumb network admin

I’m a bit confiused on how to setup spamassasin and how it works. I have it installed as a part of Redhat fedora FC3, I am running sendmail 8.13 , SPamAassasin 3.01, and Procmail . I can see in the headers that SA is scanning all incoming email, but when it detects spam I can see that sendm

RE: More problems was Re: DB_FILE error causes serious deep recursion/system overloading problem

The old one was only 12k, I did not use it much and it was disabled before the upgrade to latest SA. I have never cared much for the concept of AW. This latest version of SA turns AW on by default however. I think when SA turned it on, it started failing because it was created with a very old db_f

SA log to syslog on cygwin?

I'm running SA 3.0.2 on Cygwin with SA running as spamd, using this command line:- perl -T -w -S "spamd." -D --syslog-socket=stderr This works fine (scans emails and correctly marks as ham/spam) but produces this logging-related message:- trying to connect to syslog/stderr...