Re: Bayes DB does not grow anymore

2005-03-13 Thread GRP Productions
That is the output of --dump magic? I haven't ever seen it formatted that nicely. I assume you skipped the first line, but there's also missing the expire atime delta. So, where do you got this from? Not directly from sa-learn --dump magic I'd say. You are running SA thru some interface? You shoul

Re: Bayes DB does not grow anymore

2005-03-13 Thread Kai Schaetzl
GRP Productions wrote on Sun, 13 Mar 2005 22:54:22 +0200: > Perhaps I have not been clear enough. It's not only that the files' size is > constant. I am pasting the output of dump magic, That is the output of --dump magic? I haven't ever seen it formatted that nicely. I assume you skipped the f

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread jdow
From: "List Mail User" <[EMAIL PROTECTED]> > > ...The person with two clocks is never really sure of > > the current time. > > OT, but... above - *not* a good quote, but it sounds nice) > To be `sure' of the time, you need at least three clocks (look at the > documentation for ntp/n

Re: Tests results are different?

2005-03-13 Thread jdow
From: "David Suen" <[EMAIL PROTECTED]> > Hi all, I installed spam assassin (3.0.2) in my linux box and looks like > does not work (probably due to my configuration). I tried RTFM but still > cannot make it work. > > Situation: > I use spamassassin with simscan + qmail. My problem is when I use th

Re: Bayes DB does not grow anymore

2005-03-13 Thread GRP Productions
This doesn't prove anything. sa-learn --dump magic shows you what's inside. Also, Bayes is not a checksum system like Razor, that's its strength. If you learn something to it that means that it extracts tokens (short pieces) from the message and adjusts its internal probability for them being ham

[RD] evilnumbers update & changes

2005-03-13 Thread Matt Yackley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I've released a new version of evilnumbers and there are several changes in the new version. Ruleset name change: In order to get this old setup in line with current SARE standards the name of the ruleset has changed from evilnumbers.cf to

Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
It would probably help if I explained that I brought up two different but related ides in quick succession: 1. Asking for URI domains of messages sent through zombies, open relays, open proxies, etc. detected by XBL that mentioned SURBL URIs. 2. Asking for URI domains of messages sent through z

Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 8:07:47 AM, List User wrote: > I think it would be useful, *but* Spamhaus is very good at adding > IPs of sites that exploit the XBL - So you would see a significant overlap. > [...] And, SURBLs are RHS lists, so you will catch IP jumping that > the SBL often mis

Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread List Mail User
... On Sun, 13 Mar 2005 05:29:04 -0800, Jeff Chan wrote: >On Sunday, March 13, 2005, 5:12:30 AM, Jeff Chan wrote: >> On Friday, March 11, 2005, 11:27:52 PM, Jeff Chan wrote: >>> Does anyone have or know about a list of spam-advertised URIs >>> where the spam they appeared in was sent through open r

Re: [SURBL-Discuss] Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 7:31:01 AM, Raymond Dijkxhoorn wrote: >> I'm not asking for trap data. I'm asking to look for XBL hits, >> then take the URIs from messages that hit XBL. In other words >> I want to get the sites that are being advertised through >> exploited hosts. >> >> Nothing to do

Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 5:36:55 AM, Raymond Dijkxhoorn wrote: > Hi! >>> Perhaps some kind person could write a reporting function in >>> SpamAssassin for this? >> Hmm, perhaps if we could extract *all* URI domains from messages >> sent through XBLed senders then prioritize those say by frequen

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread List Mail User
> ...The person with two clocks is never really sure of > the current time. OT, but... above - *not* a good quote, but it sounds nice) To be `sure' of the time, you need at least three clocks (look at the documentation for ntp/ntpd). > > ... ... Paul Shupak

Re: [SURBL-Discuss] List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Kai Schaetzl
Jeff Chan wrote on Sun, 13 Mar 2005 05:12:30 -0800: > One fairly easy for anyone running a large SpamAssassin > installation to help us get this data would be to simply grep > for "XBL" and "SURBL" rules hitting the same message and report > out the URI domains from those messages. > I have a

Tests results are different?

2005-03-13 Thread David Suen
Hi all, I installed spam assassin (3.0.2) in my linux box and looks like does not work (probably due to my configuration). I tried RTFM but still cannot make it work. Situation: I use spamassassin with simscan + qmail. My problem is when I use the spamassassin (not spamc) + sample-spam.txt it give

Re: What's wrong with my test?

2005-03-13 Thread Kai Schaetzl
wrote on Sun, 13 Mar 2005 01:57:18 -0300: > So, I redirect those messages to me and I received them as no spam again! > As I just wrote to "GRP Productions": Bayes doesn't work this way. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: Bayes DB does not grow anymore

2005-03-13 Thread Kai Schaetzl
GRP Productions wrote on Sun, 13 Mar 2005 11:21:12 +0200: > for some days now my bayesian DB does not seem to grow. Its size remains > stable. It is read with no problems by SA 3.0.2, but nothing new is written. > I send an email to me, it is classified as BAYES_50. I sa-learn it as spam, > sen

Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 5:12:30 AM, Jeff Chan wrote: > On Friday, March 11, 2005, 11:27:52 PM, Jeff Chan wrote: >> Does anyone have or know about a list of spam-advertised URIs >> where the spam they appeared in was sent through open relays, >> zombies, open proxies, etc. In other words does an

Re: [SURBL-Discuss] List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Friday, March 11, 2005, 11:27:52 PM, Jeff Chan wrote: > Does anyone have or know about a list of spam-advertised URIs > where the spam they appeared in was sent through open relays, > zombies, open proxies, etc. In other words does anyone know > of a list of spamvertised web sites or their doma

OT: "Spyware Assassin" suspended

2005-03-13 Thread Jeff Chan
http://news.yahoo.com/news?tmpl=story&ncid=738&e=1&u=/nm/20050311/tc_nm/tech_spyware_dc FTC Says Anti-Spyware Vendor Shut Down Fri Mar 11, 4:31 PM ET [...] The makers of Spyware Assassin tried to scare consumers into buying software through pop-up ads and e-mail that warned their computers h

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread Jens Ahlin
> Jens Ahlin wrote: >> When trying to build rpm using rpmbuild -tb >> Mail-SpamAssassin-3.0.2.tar.gz >> fails with >> error: Failed build dependencies: >> perl(Digest::SHA1) is needed by spamassassin-3.0.2-1 >> perl(HTML::Parser) is needed by spamassassin-3.0.2-1 >> >> After install

Bayes DB does not grow anymore

2005-03-13 Thread GRP Productions
Hello, for some days now my bayesian DB does not seem to grow. Its size remains stable. It is read with no problems by SA 3.0.2, but nothing new is written. I send an email to me, it is classified as BAYES_50. I sa-learn it as spam, send it again, and it is still BAYES_50 (I expected to see it as

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread Matthias Keller
Bob Proulx wrote: Jens Ahlin wrote: When trying to build rpm using rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz fails with error: Failed build dependencies: perl(Digest::SHA1) is needed by spamassassin-3.0.2-1 perl(HTML::Parser) is needed by spamassassin-3.0.2-1 After installing the

Re: rule for mail not to me

2005-03-13 Thread Vicki Brown
At 20:15 -0800 03/06/2005, Vicki Brown wrote: >I can create a user rule for mail not addressed (To or Cc) to me > > header CF_NOT_FOR_METoCc !~ /[EMAIL PROTECTED]/ > score CF_NOT_FOR_ME 4.0 > describe CF_NOT_FOR_ME Neither To nor Cc me > >However, the still-not-a

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread Bob Proulx
Jens Ahlin wrote: > When trying to build rpm using rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz > fails with > error: Failed build dependencies: > perl(Digest::SHA1) is needed by spamassassin-3.0.2-1 > perl(HTML::Parser) is needed by spamassassin-3.0.2-1 > > After installing these m

Re: What's wrong with my test?

2005-03-13 Thread shirlei
Citando Matt Kettler <[EMAIL PROTECTED]>: > At 11:57 PM 3/12/2005, you wrote: > >So, I redirect those messages to me and I received them as no spam again! > > Define exactly what you mean by "redirect those messages". What specific > actions did you do? I used redirect tool from webmail (hord

Re: DCC in Spamassassin

2005-03-13 Thread Bill Randle
On Sat, 2005-03-12 at 19:07 -0800, Norman Zhang wrote: > > I also uncommented the DCCIFD_ARGS line. > > # used to start dccifd > # a common value is > # DCCIFD_ARGS="-SHELO -Smail_host -SSender -SList-ID" > DCCIFD_ARGS= > > My DCCIFD_ARGS is empty. Should I add the options that is shown above

What's wrong with my test?

2005-03-13 Thread shirlei
Hi everyone! Probably I'm doing a stupid question... but, anyway, here it go: I saved in a folder some messages that I received classified as no spam. So, i run these command: sa-learn --spam So I take the following : Learned from 2 message(s) (3 message(s) examined). So, I redirect those messa

RE: DCC in Spamassassin

2005-03-13 Thread Greg Allen
My dcc on RedHat 8.0 is located in /var/dcc directory You should see DCCIFD there as well. I had to change a line in the /var/dcc/dcc_conf to DCCIFD_ENABLE=ON Also, make sure you install the latest DCC with DCCIFD from the Rayolite website (if you do not have it). Put the path to DCC in your

Re: DCC in Spamassassin

2005-03-13 Thread Matt Kettler
At 10:07 PM 3/12/2005, Norman Zhang wrote: Someone pointed out to me I should look for rcdcc, but I only have # slocate cdcc /usr/bin/cdcc I'm not too familiar with the scripts that come with DCC for this.. I just wrote my own init script to start dccifd. Should I use this instead? BTW do I need

Re: Header Tagging with # instead of *

2005-03-13 Thread John Andersen
On Saturday 12 March 2005 02:47 pm, jdow wrote: > The canonical way to do it is something like: > > rewrite_header Subject *SPAM* _SCORE(00)_ ** > > That gives headers that look like: > Subject: *SPAM* 027.3 ** spoo is best for slow sex The OP was interested in header tagging,

Re: SA addr tests need to be updated

2005-03-13 Thread List Mail User
>... >Date: Sat, 12 Mar 2005 18:46:52 -0500 >From: "Eric A. Hall" <[EMAIL PROTECTED]> >User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) >X-Accept-Language: en-us, en >MIME-Version: 1.0 >To: users@spamassassin.apache.org >Subject: Re: SA addr tests need to be updated >References: <[EMAIL PROTE

Re: DCC in Spamassassin

2005-03-13 Thread Norman Zhang
I also uncommented the DCCIFD_ARGS line. # used to start dccifd # a common value is # DCCIFD_ARGS="-SHELO -Smail_host -SSender -SList-ID" DCCIFD_ARGS= My DCCIFD_ARGS is empty. Should I add the options that is shown above? Was there a dccd file created in /etc/init.d as part of the installation