RE: Low detection rate

2005-04-25 Thread Bret Miller
> To up hit rate I'd recommend adding the SARE random ruleset, and the > tripwire ruleset. Incidentally, you'll find custom rulesets defined here: http://wiki.apache.org/spamassassin/CustomRulesets Some of our ruleset writers should edit this page so it's more current Bret

error: Insecure dependency in eval while running setuid

2005-04-25 Thread jdow
I get the above error in the mail logs when scanning some emails. This is 3.02 with Theo's spamd patch installed. {^_^}

Re: Low detection rate

2005-04-25 Thread Matt Kettler
Carnegie, Martin wrote: > Hi All, > > We have been using SA for the past year and a half with detection > rates around 95% or better (based on client feedback). Over the past > couple days (since Thursday April 21st) we have been getting lots of > spam making it through with detection rates at

Outlook 2003 and Spamassassin

2005-04-25 Thread Patrice Gagnon
  Hi all, Since I have installed Spamassassin on my windows 2000 with Exchange 2003, when I enble Spamassassin all mails are fitered. But when an e-mail is sent with Outlook or outlook Express, the e-mail is filtered and the content is blank with an winmail.dat file joinned to the mail. ca

Re: Low detection rate

2005-04-25 Thread DNI Support Department
Greetings Martin: Use surbl. Thank you. At 04:18 PM 4/25/2005, you wrote: Hi All,   We have been using SA for the past year and a half with detection rates around 95% or better (based on client feedback).  Over the past couple days (since Thursday April 21st) we have been getting lots of spam ma

Low detection rate

2005-04-25 Thread Carnegie, Martin
Title: Message Hi All,   We have been using SA for the past year and a half with detection rates around 95% or better (based on client feedback).  Over the past couple days (since Thursday April 21st) we have been getting lots of spam making it through with detection rates at about 50%. Has

RE: Headers with extra whitespace missing filters in Exchange/Outlook ?

2005-04-25 Thread Bret Miller
> We're running SpamAssassin 2.63 with amavisd-new-20030616-p5 > and postfix as > a frontend to our Exchange server (yes, it all needs to be > updated, but > still working damn well). SA/amavisd-new tags all mail with > scores (dropping > stuff with scores over 20), and it's up to Exchange rules to

Re: SA Filename question

2005-04-25 Thread Matt Kettler
Kevin Roberts wrote: > Hello all, > > I have installed the latest spamassassin 3.02. I was wondering if > there is any way for it to change the actual filename that it stores > the original email message in so that I can easily sort through the > files flagged as spam and ham? SpamAssassin doesn

SA Filename question

2005-04-25 Thread Kevin Roberts
Hello all, I have installed the latest spamassassin 3.02. I was wondering if there is any way for it to change the actual filename that it stores the original email message in so that I can easily sort through the files flagged as spam and ham? Currently it uses the 20052501A105521.txt and on,

[OT] Funny watch spam

2005-04-25 Thread Robert Brooks
> Subject: rawlex repliccas esp. for you ashtray are they being rude about me, or just suggesting where I should but the repliccas ;-) on a more serious not we need something like (?:o|aw) in the rolex rules. -- Robert Brooks, Network Manager, Cable & Wireless UK <[EMAIL PROTEC

[OT] Humor..er...ninja violence?

2005-04-25 Thread Chris Santerre
Evening news arrow flew into the dojo last night. Brought this link: http://www.ninjai.com/ (Little Ninja) NOT WORK SAFE! Extreme animated violence, language, birds, and what appears to be God with a katana :D (No nudity.) 12 chapters. Takes about 1.5 hours to view whole story so far. Kicks in a

Re: sa-learn - bayes training...

2005-04-25 Thread Jean Caron
I just had a chance to (finally) get back to this issue. I tried your suggestion, changed the mode to 0777 and re-started spamd. Apparently nothing changed. I did however realize that bayes tests are listed in my log file, even though they are not in the header of the msgs. So, I have bayes

OT : Funny 419er today

2005-04-25 Thread C-Store Christoph Peter
... how did she know I like that kind of talk ? Yes, punish me. I was a bad boy for not taking instructions from you all the time 8-) C-Store Hard- und Software GmbH Christoph Peter Düstere Straße 20 37073 Göttingen http://www.c-store.de [EMAIL PROTECTED] - Original Message - From: <[EMA

Re: Rule of thumb for max children?

2005-04-25 Thread jdow
From: "Mike Grice" <[EMAIL PROTECTED]> > On Mon, 2005-04-25 at 11:58 +0100, Mike Grice wrote: > > Hi there, > > > > I'm running SA 3.0.2 via spamc/spamd on an Exim mail server, but I'm > > finding I quickly run out of memory and the machine collapses into a > > burning heap as soon as it touches s

Re: Rule of thumb for max children?

2005-04-25 Thread Mike Grice
On Mon, 2005-04-25 at 11:58 +0100, Mike Grice wrote: > Hi there, > > I'm running SA 3.0.2 via spamc/spamd on an Exim mail server, but I'm > finding I quickly run out of memory and the machine collapses into a > burning heap as soon as it touches swap. > > Is there a rule of thumb of how many SA

Rule of thumb for max children?

2005-04-25 Thread Mike Grice
Hi there, I'm running SA 3.0.2 via spamc/spamd on an Exim mail server, but I'm finding I quickly run out of memory and the machine collapses into a burning heap as soon as it touches swap. Is there a rule of thumb of how many SA daemons to prefork to the amount of RAM? The boxes currently have

Empty Zip Files

2005-04-25 Thread Ben Wylie
I quite regularly get emails getting past my spam filter which seem to contain empty zip files. I presume they were sent by viruses which failed to incude themselves in the zip files they sent out. These emails have the following code in base 64 which when opened as a zip is just empty. UEsFBg

Re: My local rules allways with score 1

2005-04-25 Thread jdow
From: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> > Fernando S. Yépez wrote: > > What happen if I can't add patch, what happend if I an end user? I need to > > wait next SA version? > > any other solution? > > > > Fernando > > If you only want to increase the score added by your rule you could use >

Re: My local rules allways with score 1

2005-04-25 Thread Daryl C. W. O'Shea
Fernando S. Yépez wrote: What happen if I can't add patch, what happend if I an end user? I need to wait next SA version? any other solution? Fernando If you only want to increase the score added by your rule you could use additional meta rules that depend on your actual rule to increase the s

Re: My local rules allways with score 1

2005-04-25 Thread =?ISO-8859-1?Q?Fernando_S=2E_Y=E9pez?=
What happen if I can't add patch, what happend if I an end user? I need to wait next SA version? any other solution? Fernando On 4/24/05, Daryl C. W. O'Shea <[EMAIL PROTECTED]> wrote: jdow wrote:> From: "Theo Van Dinter" <[EMAIL PROTECTED]>>> ...>>> OK, Theo - which of the patches is needed or ar

Re: My local rules allways with score 1

2005-04-25 Thread Theo Van Dinter
On Sun, Apr 24, 2005 at 08:29:10PM -0700, jdow wrote: > The wording implies both are needed. ("patch" and "additional patch".) > But the strike-out text suggests the first one is deprecated. The second patch is all you would need. The strike-out text indeed means the first patch was made obsolete

Re: My local rules allways with score 1

2005-04-25 Thread Daryl C. W. O'Shea
jdow wrote: From: "Theo Van Dinter" <[EMAIL PROTECTED]> ... OK, Theo - which of the patches is needed or are both needed? The wording implies both are needed. ("patch" and "additional patch".) But the strike-out text suggests the first one is deprecated. {o.o} Theo's patch is all you need.

Re: My local rules allways with score 1

2005-04-25 Thread jdow
From: "Theo Van Dinter" <[EMAIL PROTECTED]> ... OK, Theo - which of the patches is needed or are both needed? The wording implies both are needed. ("patch" and "additional patch".) But the strike-out text suggests the first one is deprecated. {o.o}

Re: My local rules allways with score 1

2005-04-25 Thread Theo Van Dinter
On Sun, Apr 24, 2005 at 06:51:45PM -0700, Loren Wilton wrote: > Should be fixed in the next version. There is talk of a possible 3.0.3 > release sometime next week, and if it happens I think this will be fixed in > that verison. If no, 3.1 shouldn't be too much longer. FYI: This issue is covered

Re: My local rules allways with score 1

2005-04-25 Thread Loren Wilton
Should be fixed in the next version. There is talk of a possible 3.0.3 release sometime next week, and if it happens I think this will be fixed in that verison. If no, 3.1 shouldn't be too much longer. Loren - Original Message - From: "jdow" <[EMAIL PROTECTED]> To: Sent: Sunda