Re: Bayes DB does not grow anymore

2005-03-14 Thread GRP Productions
I have been trying to get something from CVS for several days now, no luck. Send me your email in private ([EMAIL PROTECTED]) to send it to you. Bayes needs constant training, but this doesn't mean it needs any manual training. Once it's up and running and "well-greased" it should take care of its

Re: bayesian tokens in text format?

2005-03-14 Thread Michael Parker
On Mon, Mar 14, 2005 at 10:23:37PM +, Paul Reilly wrote: > > > Of course, I have to ask, how do you find the data "quite useful?" I > > It's useful to see what words/tokens are getting high scores. > The bayes database on one of my machines seems to be not > as accurate as the others, and re

Re: bayesian tokens in text format?

2005-03-14 Thread Paul Reilly
> Of course, I have to ask, how do you find the data "quite useful?" I It's useful to see what words/tokens are getting high scores. The bayes database on one of my machines seems to be not as accurate as the others, and results in msgs through that machine are getting a negative bayes scoring.

Re: Bayes not Available

2005-03-14 Thread Andy Jezierski
Norman Zhang <[EMAIL PROTECTED]> wrote on 03/14/2005 03:29:25 PM: > debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200 You need to teach Bayes at least 200 spam and 200 non-spam messages before it will do anything for you. Andy

RE: save debug output and errors

2005-03-14 Thread Ben Wylie
-Original Message- From: Ben Wylie [mailto:[EMAIL PROTECTED] Sent: 14 March 2005 13:28 To: users@spamassassin.apache.org Subject: RE: save debug output and errors > > Having managed to capture the errors which pop up when my mailserver runs > the spamassassin batch script, it is coming up

Re: Bayes not Available

2005-03-14 Thread Norman Zhang
[EMAIL PROTECTED] wrote: Should be /var/lib/amavis/var/.spamassassin/bayes surely (the final "/bayes" is not a path but rather a filename prefix) I have changed bayes_path /var/lib/amavis/var/.spamassassin/bayes but I still see the "Not avilable for scanning". Am I missing something? Regards, Norma

RE: Bayes not Available

2005-03-14 Thread Matthew.van.Eerde
Norman Zhang wrote: > Hi, > > When I run amavisd debug-sa, I see the following. Is my SA bayes > misconfigured? May I ask for a few pointers? > bayes_path /var/lib/amavis/var/.spamassassin Should be /var/lib/amavis/var/.spamassassin/bayes surely (the final "/bayes" is not a path but rather a fil

Bayes not Available

2005-03-14 Thread Norman Zhang
Hi, When I run amavisd debug-sa, I see the following. Is my SA bayes misconfigured? May I ask for a few pointers? Regards, Norman Zhang debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200 required_hits 5 rewrite_header Subject [SPAM] report_safe 0 skip_rbl_checks 0 bayes_pa

RE: 2 pops

2005-03-14 Thread Matt Kettler
At 02:53 PM 3/14/2005, S M.C Butler wrote: >1) what does this have to do with the thread "Re: Bayes DB does not grow >anymore"? > oops I replied to that mail to get the mailing list address and forgot to delete the inline text, sorry about that. Even if you did remove the inline text, it's still go

Re: Multiple local configurations

2005-03-14 Thread Matt Kettler
At 02:50 PM 3/14/2005, Russell P. Sutherland wrote: Is it possible to use the spamc/spamd pair by invoking spamc with a per instance refernence to a list of customized local.cf files? No, local.cf level files are parsed only at the start of spamd. By the time spamc is called, it's too late. I wo

RE: 2 pops

2005-03-14 Thread S M.C Butler
> >1) what does this have to do with the thread "Re: Bayes DB does not grow >anymore"? > oops I replied to that mail to get the mailing list address and forgot to delete the inline text, sorry about that. >2) man fetchmail thx, I'll check it out.

Multiple local configurations

2005-03-14 Thread Russell P. Sutherland
Is it possible to use the spamc/spamd pair by invoking spamc with a per instance refernence to a list of customized local.cf files? I would like to have different rules on a per destination domain basis. Is this possible? -- Quist ConsultingEmail: [EMAIL PROTECTED] 219 Donlea Dri

Re: 2 pops

2005-03-14 Thread Matt Kettler
At 02:20 PM 3/14/2005, S M.C Butler wrote: Hi, I would like to have my mail forwarded to my ISP's account and then popped to my server where I can run spam assassin and finally popped a second time to my PC. How do I get this 2-level pop mechanism going? How can I pop from my ISP account to my serv

2 pops

2005-03-14 Thread S M.C Butler
Hi, I would like to have my mail forwarded to my ISP's account and then popped to my server where I can run spam assassin and finally popped a second time to my PC. How do I get this 2-level pop mechanism going? How can I pop from my ISP account to my server in a way that will allow me to do a sec

Re: Windows with ESA - statistics?

2005-03-14 Thread Tim P
Ok so how would I use this with all of my .out files. When I run it by itself it prints Date Status Score but nothing else even when in the folder with all of the .out files. When I attempt to give it a file to parse "reportparse.pl *.out) it gives me the below errors C:\ESA>reportparse.pl Date

Re: plugins and parrallelization

2005-03-14 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric A. Hall writes: > On 3/14/2005 12:32 PM, Daryl C. W. O'Shea wrote: > > > There's no need to do your lookups more than once. Save the results the > > first time you do the lookups/processing. > > > > See the SPF.pm plugin for a good example. >

Re: bayesian tokens in text format?

2005-03-14 Thread Matt Kettler
At 01:11 PM 3/14/2005, Michael Parker wrote: In general, no it's not possible to dump the bayesian tokens in a readable (well they are readable, it's just hard to read them :)) format, unless you do a little work yourself. It is possible to dump them by making use the the given plugin hooks that a

Re: Razor Files Missing

2005-03-14 Thread Norman Zhang
Matt Florido wrote: Here's a good article for ports needed by Razor/Pyzor/DCC. http://wiki.apache.org/spamassassin/NetTestFirewallIssues Thanks for the URL. I'm not too faimiliar with IPTables. I just allow outgoing UPD/6277 for DCC and outgoing TCP/2703 for Razor. I don't have any DCC server set

Re: plugins and parrallelization

2005-03-14 Thread Eric A. Hall
On 3/14/2005 12:32 PM, Daryl C. W. O'Shea wrote: > There's no need to do your lookups more than once. Save the results the > first time you do the lookups/processing. > > See the SPF.pm plugin for a good example. Oh right, it's persistent. Duh. Thanks -- Eric A. Hall

Re: bayesian tokens in text format?

2005-03-14 Thread Michael Parker
On Mon, Mar 14, 2005 at 04:46:06PM +, Paul Reilly wrote: > > Is it possible to dump the bayesian tokens in > human readable format still? It was quite useful > but since 3.0.x they seen to be base64 encoded or > some other way encoded. I couldn't see any sa-learn > option, or any FAQ entry abo

Re: Feeding Bayes aswell

2005-03-14 Thread Kelson
Matt Kettler wrote: You can't train SA on most messages from Eudora's .mbx files. Speaking as a user of eudora, eudora completely destroys many important parts of a message when it stores it in the mbox, and it cannot be reconstructed. And this was the main reason that after using Eudora for 8 ye

Re: plugins and parrallelization

2005-03-14 Thread Daryl C. W. O'Shea
Eric A. Hall wrote: It seems that the plugin architecture only allows a single pass/fail result, so if you want to have multiple tests with different shades of results, you have to call the plugin multiple times. Is that right? Over the weekend I banged together a preliminary ldapBlacklist.pm plugi

plugins and parrallelization

2005-03-14 Thread Eric A. Hall
It seems that the plugin architecture only allows a single pass/fail result, so if you want to have multiple tests with different shades of results, you have to call the plugin multiple times. Is that right? Over the weekend I banged together a preliminary ldapBlacklist.pm plugin which lets the m

Re: feeding bayes

2005-03-14 Thread ChupaCabra
Thanks. Glad I havn't started feeding it yet. So what I need to do is look at the attachments and then save then to a file then train on that. correct? That makes sense. Maybe that is why my old SA instance got kinda weird in the end. Thanks Matt Kettler wrote: Well, first, if you aren't stripp

Re: Feeding Bayes aswell

2005-03-14 Thread Matt Kettler
At 11:52 AM 3/14/2005, Andreas Rust wrote: we are mostly using Eudora (Windows version) and it's saving "Junk" emails (as junked by Eudora itself) into an .mbx file. You can't train SA on most messages from Eudora's .mbx files. Speaking as a user of eudora, eudora completely destroys many impor

Re: [RD] evilnumbers update & changes

2005-03-14 Thread Martin Hepworth
Chris updated the rules_du_jour, removed the new defs from myrdj and things work now. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Chris Thielen wrote: Hi Martin, Martin Hepworth wrote: Matt myrdj not downloading the files as it can't get the file s

Re: bayesian tokens in text format?

2005-03-14 Thread Matt Kettler
At 11:46 AM 3/14/2005, Paul Reilly wrote: Is it possible to dump the bayesian tokens in human readable format still? No. In sa 3.0+ they are base-64 encodings of the SHA1 hash of the token. The hash is for all practical purposes not reversible. This is done in part for privacy.. examining the tex

Feeding Bayes aswell

2005-03-14 Thread Andreas Rust
Hello, we are mostly using Eudora (Windows version) and it's saving "Junk" emails (as junked by Eudora itself) into an .mbx file. Eventhough the .mbx file looks like an ok-formatted mbox file, it carries: From [EMAIL PROTECTED] Tue Jan 18 15:28:02 2005 Infront of the normal headers. Such as: From

Re: feeding bayes

2005-03-14 Thread Matt Kettler
At 11:22 AM 3/14/2005, ChupaCabra wrote: I just noticed that some of my users are attaching multiple spams in one email to my "spam" user for training. Aside from having to have 200 spam/ham mails and the possibiliy of the messages being too large, would this have an effect on training? Well, f

bayesian tokens in text format?

2005-03-14 Thread Paul Reilly
Is it possible to dump the bayesian tokens in human readable format still? It was quite useful but since 3.0.x they seen to be base64 encoded or some other way encoded. I couldn't see any sa-learn option, or any FAQ entry about it. Thanks Paul

Re: [RD] evilnumbers update & changes

2005-03-14 Thread Chris Thielen
Hi Martin, Martin Hepworth wrote: Matt myrdj not downloading the files as it can't get the file sizes for some reason... Can you give me the error messages? I just downloaded the new evilnumbers using RDJ 1.19 (which I just uploaded) and it went off without a hitch. I use curl (not wget), by

Re: [RD] evilnumbers update & changes

2005-03-14 Thread Chris Thielen
Matt Yackley wrote: Hi all, I've released a new version of evilnumbers and there are several changes in the new version. RulesDuJour: A new version of RDJ will be released soon to handle these changes, but here is a manual fix. I've updated RDJ with the new names for evilnumbers. There are n

feeding bayes

2005-03-14 Thread ChupaCabra
I just noticed that some of my users are attaching multiple spams in one email to my "spam" user for training. Aside from having to have 200 spam/ham mails and the possibiliy of the messages being too large, would this have an effect on training? Thanks. -- Michael H. Collins Admiral, Penguin

Re: MRTG SPAM SYSLOG ?

2005-03-14 Thread Matias Lopez Bergero
[EMAIL PROTECTED] wrote: Am 14.03.2005 um 07:54 Uhr haben Sie geschrieben: hi all is anyone using a tool that can parse "/var/log/messages" to find identified SPAM and is able to then build MTRG graphs ? I use Mailgraph http://people.ee.ethz.ch/~dws/software/mailgraph/ I use Mailgraph to. Works ve

Re: [SURBL-Discuss] Fw: TKO Notice: Urgent Fraud Investigation

2005-03-14 Thread Jeff Chan
On Thursday, February 17, 2005, 4:46:28 PM, Jeff Chan wrote: > IMO The correct answer is for eBay not to have an open redirector > or for them to protect it better, for example as Matthew suggests. > We could ask them follow the lead of other redirection sites and > use SURBLs to check the URIs:

Re: Bayes DB does not grow anymore

2005-03-14 Thread Kai Schaetzl
GRP Productions wrote on Mon, 14 Mar 2005 03:41:40 +0200: > Indeed, this is the CVS version :-) I have been trying to get something from CVS for several days now, no luck. > This is perhaps because I have been using only 'mistake-based' training (ie > training only when false classificaiton ha

Message Processing Platform (MPP) Free Edition launched

2005-03-14 Thread Rob Kudyba
Message Partners has launched a free edition of our Message Processing Platform (MPP) for those who want to use SpamAssassin and ClamAV with Sendmail, QMail, Postfix, CGPro or SurgeMail email servers. MPP Free Edition includes our comprehensive Webmin module, most of the features of MPP-LE and

Re: MRTG SPAM SYSLOG ?

2005-03-14 Thread Ed Kasky
At 10:54 PM Sunday, 3/13/2005, ip.guy wrote -=> is anyone using a tool that can parse "/var/log/messages" to find identified SPAM and is able to then build MTRG graphs ? i was using a tool that could do this a while ago but have totally forgotten the name of the project any help appreciated Hav

RE: save debug output and errors

2005-03-14 Thread Ben Wylie
> > where should I look for this to fix? > > Theo has the answer for that one - a bad meta rule somewhere. > > Given that --lint seemingly didn't catch it, and this pure perl error is > less than descriptive of the problem, once you find the rule in question, > I think it deserves a Bugzilla entry

Re: Upgrade... + other (perl?) problems

2005-03-14 Thread sa-users
I upgraded from 2.64 to 3.0.2 via CPAN with no problems. Yes, I read http://spamassassin.apache.org/full/3.0.x/dist/UPGRADE und did change my local.cf. 1) Now Mail don't get tagged as spam == /va/log/mail Mar 14 12:34:33 ns spamd[27959]: connection from localhost.localdomain [127.0.0.1] at po

Re: MRTG SPAM SYSLOG ?

2005-03-14 Thread sa-users
Am 14.03.2005 um 07:54 Uhr haben Sie geschrieben: > hi all > > is anyone using a tool that can parse "/var/log/messages" to find > identified SPAM and is able to then build MTRG graphs ? I use Mailgraph http://people.ee.ethz.ch/~dws/software/mailgraph/ it uses the RRD to store the data. Lars

Re: [RD] evilnumbers update & changes

2005-03-14 Thread Martin Hepworth
Matt myrdj not downloading the files as it can't get the file sizes for some reason... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Matt Yackley wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I've released a new version of evilnumbers and th

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-14 Thread List Mail User
... >Its part of a larger quote, to the effect that someone with one clock is >sure of the time, someone withe two clocks isn't and I forget what is >supposed to happen as you get more clocks. Maybe you get back closer to the >assurance you had with a single cheap windup clock. I originally came

Re: MRTG SPAM SYSLOG ?

2005-03-14 Thread Alan Premselaar
ip.guy wrote: hi all is anyone using a tool that can parse "/var/log/messages" to find identified SPAM and is able to then build MTRG graphs ? i was using a tool that could do this a while ago but have totally forgotten the name of the project any help appreciated I've used graphdefang in conju

Re: save debug output and errors

2005-03-14 Thread Loren Wilton
> where should I look for this to fix? Theo has the answer for that one - a bad meta rule somewhere. Given that --lint seemingly didn't catch it, and this pure perl error is less than descriptive of the problem, once you find the rule in question, I think it deserves a Bugzilla entry for failure

Re: Upgrade...

2005-03-14 Thread Loren Wilton
You've checked the obvious? There is an X-Spam-Level header, and it does have a bunch of asterisks? Loren

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-14 Thread List Mail User
>... >From: "List Mail User" <[EMAIL PROTECTED]> > >> > ...The person with two clocks is never really sure of >> > the current time. >> >> OT, but... above - *not* a good quote, but it sounds nice) >> To be `sure' of the time, you need at least three clocks (look at the >> documentat

MRTG SPAM SYSLOG ?

2005-03-14 Thread ip.guy
hi all is anyone using a tool that can parse "/var/log/messages" to find identified SPAM and is able to then build MTRG graphs ? i was using a tool that could do this a while ago but have totally forgotten the name of the project any help appreciated

Re: save debug output and errors

2005-03-14 Thread Theo Van Dinter
On Mon, Mar 14, 2005 at 05:03:05AM -, Ben Wylie wrote: > Scalar found where operator expected at (eval 57) line 724, near "} $self" > (Missing operator before $self?) > Failed to run meta SpamAssassin tests, skipping some: syntax error at (eval > 57) > line 724, near "} $self" > > whe

Re: Razor Files Missing

2005-03-14 Thread Bill Randle
On Sun, 2005-03-13 at 20:03 -0800, Norman Zhang wrote: > > Did you run "razor-admin -create" after installing razor? It will create > > the razor-conf and *.lst files. You will want to do this as the user > > that runs amavisd (typically, amavis or vscan). Given where amavisd is > > looking for the

RE: save debug output and errors

2005-03-14 Thread Ben Wylie
-Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED] > Sent: 14 March 2005 02:36 > To: users@spamassassin.apache.org > Subject: Re: save debug output and errors > > You probably have some broken rules or other lines in your local rules > file, or possibly elsewhere in the rul

Upgrade...

2005-03-14 Thread Doug Wolfgram
I upgraded to 3.02 and everything is working fine except for one thing... I always put spam from all users into the /var/mail directory with the following lines in procmailrc :0: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\* /var/mail/spam After reading the new doc, I also added this line to the top of pr

Re: Razor Files Missing

2005-03-14 Thread Norman Zhang
Did you run "razor-admin -create" after installing razor? It will create the razor-conf and *.lst files. You will want to do this as the user that runs amavisd (typically, amavis or vscan). Given where amavisd is looking for the razor files, I would guess you may also need to use the "-home" option

Re: Razor Files Missing

2005-03-14 Thread Bill Randle
On Sun, 2005-03-13 at 19:12 -0800, Norman Zhang wrote: > Hi, > > When I run > > # amavisd debug-sa > > I see the following errors. Do I need to crate the missing files > manually? May I ask for a few pointers? > > Regards, > Norman Zhang > > Razor-Log: No /var/lib/amavis/var/.razor/razor-age

Razor Files Missing

2005-03-14 Thread Norman Zhang
Hi, When I run # amavisd debug-sa I see the following errors. Do I need to crate the missing files manually? May I ask for a few pointers? Regards, Norman Zhang Razor-Log: No /var/lib/amavis/var/.razor/razor-agent.conf found, skipping. Razor-Log: No razor-agent.conf found, using defaults. check[9

Re: DCC in Spamassassin

2005-03-14 Thread Norman Zhang
Bill Randle wrote: I don't have rcddc either. With SpamAssassin, use dccifd as previously mentioned. Once you edited the dcc_conf file to enable DCCIFD, start it using the init program: # /etc/init.d/dccd start Thanks. dccifd did start. However, I'm seeing the following error message, dccif

Re: save debug output and errors

2005-03-14 Thread Loren Wilton
You probably have some broken rules or other lines in your local rules file, or possibly elsewhere in the rules files. To catch thos you want to run "spamassassin --lint" without the debug stuff. This will give you a managable output. Assuming you are on NT of some flavor, "spamassassin 2>&1 >o

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-14 Thread Loren Wilton
> > ...The person with two clocks is never really sure of > > the current time. > > OT, but... above - *not* a good quote, but it sounds nice) > To be `sure' of the time, you need at least three clocks (look at the > documentation for ntp/ntpd). Its part of a larger quote, to the eff

Re: Bayes DB does not grow anymore

2005-03-14 Thread GRP Productions
That's okay, the problem just is one cannot be sure how accurate it is. Knowing that you use MS would have been useful, anyway :-) (BTW: my version of Mailwatch can't show this, do you use a CVS version?) Indeed, this is the CVS version :-) See the number of tokens, we have ten times yours with le

save debug output and errors

2005-03-14 Thread Ben Wylie
Hello All, This is the first time I have used this list so if should have done it a different way, or have said something wrong, I beg your forgiveness. I have been running spamassassin for over a year now on my Windows 2003 system using perl 5.6.1. My SA version is 3.0.2. I run Spamassassin from

Re: Bayes DB does not grow anymore

2005-03-14 Thread Kai Schaetzl
GRP Productions wrote on Mon, 14 Mar 2005 00:32:42 +0200: > You are right, I am using MailWatch. I just posted this output to be easy > for one to see the actual dates without having to convert. That's okay, the problem just is one cannot be sure how accurate it is. Knowing that you use MS woul