Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Bookworm
Stuart Johnston wrote: Here is a project that will export the Mozilla Bayes tokens which would at least be the first step. I'm not sure how hard it would be to then import them into SA. http://bayesjunktool.mozdev.org/ Wonderful! Thank you very much. I'll see about exporting my Mozilla baye

Re: My first rule

2005-05-02 Thread Matt Kettler
[EMAIL PROTECTED] wrote: >Joe Kletch wrote: > > >>So excited--I created my first rule. >> >> > >Congratulations! > > > >>It ran through lint with no >>errors and seems to be achieving the requested outcome: move messages >>from this sender to the recipients Spam folder, but do not reject (

Re: My first rule

2005-05-02 Thread Joe Kletch
On May 2, 2005, at 4:39 PM, <[EMAIL PROTECTED]> wrote: Joe Kletch wrote: So excited--I created my first rule. Congratulations! It ran through lint with no errors and seems to be achieving the requested outcome: move messages from this sender to the recipients Spam folder, but do not reject (I have

RE: My first rule

2005-05-02 Thread Matthew.van.Eerde
Joe Kletch wrote: > So excited--I created my first rule. Congratulations! > It ran through lint with no > errors and seems to be achieving the requested outcome: move messages > from this sender to the recipients Spam folder, but do not reject (I > have simscan rejecting scores over 18 points). T

Config problem: Inconsistent spamassassin

2005-05-02 Thread Chris
I've noticed some inconsistencies in how spamassassin is marking up messages on my host. At first I thought it was the way mimedefang was in the mix on my host but now that I'm digging a little further I am noticing something weird and would appreciate some help troubleshooting it. If I run th

My first rule

2005-05-02 Thread Joe Kletch
So excited--I created my first rule. It ran through lint with no errors and seems to be achieving the requested outcome: move messages from this sender to the recipients Spam folder, but do not reject (I have simscan rejecting scores over 18 points). The Threshold for moving to the Spam folder

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Stuart Johnston
Michael Parker wrote: On Mon, May 02, 2005 at 03:44:25PM -0500, Stuart Johnston wrote: Bookworm wrote: I've read through the archives several times, and hoped that over the last year or so someone would build the functionality, or at least mention it one way or another - I haven't seen it. Is th

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Michael Parker
On Mon, May 02, 2005 at 03:44:25PM -0500, Stuart Johnston wrote: > Bookworm wrote: > >I've read through the archives several times, and hoped that over the > >last year or so someone would build the functionality, or at least > >mention it one way or another - I haven't seen it. > > > >Is there a

Re: OT: The highest score?

2005-05-02 Thread Kelson
Roman Serbski wrote: What was the highest score you've ever seen? I received a message yesterday that was scored with 51.9(!). =) Unfortunately I just purged the spamtraps, but that's what log files are for. Here's the highest one from this week: Score: 63.173 BAYES_99 BIZ_TLD DOMAIN_RATIO FORGE

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Stuart Johnston
Bookworm wrote: I've read through the archives several times, and hoped that over the last year or so someone would build the functionality, or at least mention it one way or another - I haven't seen it. Is there any way to take an already trained Mozilla bayes structure and hand it directly of

Re: autolearn=ham

2005-05-02 Thread Matt Kettler
Kelson wrote: > Matt Kettler wrote: > >> Robert Swan wrote: >> >>> How do I clear, or unlearn the bayes filter it seems that it is picking >>> up wrong. E-mail that is SPAM has autolearn=ham in the header and this >>> is wrong. >> >> >> Is it? > > > If it's spam being learned as ham, then yes, it

Re: Adding addresses to blacklist manually

2005-05-02 Thread Matt Kettler
Gregory P. Ennis wrote: >Everyone, > >I installed 3.03 this afternoon and everything looks good. > >I finally decided to set up a user alias e-mail address to take >advantage of the following command: > >spamassassin --add-to-blacklist < /tmp/$FILENAME > >When I run this command from root I get

RE: autolearn=ham

2005-05-02 Thread Robert Swan
Hello all, I am using file based bayes DB and do Not have autolearn enabled, I do manual learning using IMAP Spam Begone. Robert Peace he would say instead of goodbyepeace my brother. -Original Message- From: James R [mailto:[EMAIL PROTECTED] Sent: Monday, May 02, 2005 3:

Re: autolearn=ham

2005-05-02 Thread Kelson
Matt Kettler wrote: Robert Swan wrote: How do I clear, or unlearn the bayes filter it seems that it is picking up wrong. E-mail that is SPAM has autolearn=ham in the header and this is wrong. Is it? If it's spam being learned as ham, then yes, it is wrong. Autolearn may be doing what it's suppose

Re: autolearn=ham

2005-05-02 Thread James R
Robert Swan wrote: How do I clear, or unlearn the bayes filter it seems that it is picking up wrong. E-mail that is SPAM has autolearn=ham in the header and this is wrong. I am Running SPAMASSASSIN 3.0.3 on a Linux Red Hat 9 server. (just upgraded) did this in version 3.0.2 also, unrelated I

Re: OT: The highest score?

2005-05-02 Thread Matt Kettler
Roman Serbski wrote: >Hi all, > >What was the highest score you've ever seen? I received a message >yesterday that was scored with 51.9(!). =) > I hate to say it, but I've seen scores over 1000.0. All you need to do is include a GTUBE :) USER_IN_BLACKLIST will also jack it up quite a bit with a

Re: autolearn=ham

2005-05-02 Thread Matt Kettler
Robert Swan wrote: >How do I clear, or unlearn the bayes filter it seems that it is picking >up wrong. E-mail that is SPAM has autolearn=ham in the header and this >is wrong. > > > Is it? The autolearner uses the score the message would have gotten if bayes was disabled, all userconf (ie: white

Re: autolearn=ham

2005-05-02 Thread Andy Jezierski
"Robert Swan" <[EMAIL PROTECTED]> wrote on 05/02/2005 02:15:45 PM: > How do I clear, or unlearn the bayes filter it seems that it is > picking up wrong. E-mail that is SPAM has autolearn=ham in the > header and this is wrong. >   > I am Running SPAMASSASSIN 3.0.3 on a Linux Red Hat 9 server. (j

autolearn=ham

2005-05-02 Thread Robert Swan
How do I clear, or unlearn the bayes filter it seems that it is picking up wrong. E-mail that is SPAM has autolearn=ham in the header and this is wrong.   I am Running SPAMASSASSIN 3.0.3 on a Linux Red Hat 9 server. (just upgraded) did this in version 3.0.2 also, unrelated I know.    

Re: bayes problem

2005-05-02 Thread Matt Kettler
Payal Rathod wrote: >On Mon, May 02, 2005 at 02:11:19PM -0400, Matt Kettler wrote: > > >>How is SA called? from procmail, or something else? >> >> > >For .qmail file with a script ifspamh > > > >>One major problem I see is that the bayes files have permissions of 400, >>but the bayes DB is

Re: bayes problem

2005-05-02 Thread Payal Rathod
On Mon, May 02, 2005 at 02:11:19PM -0400, Matt Kettler wrote: > How is SA called? from procmail, or something else? For .qmail file with a script ifspamh > > One major problem I see is that the bayes files have permissions of 400, > but the bayes DB is site-wide. You generally need to use bayes_

Testing the new SA version

2005-05-02 Thread Geoff Manning
Pardon the newbish question, I am new to my position and SA in general. We have 2 mail relay servers running SA 3.0.2 and a test server that I have upgraded to 3.0.3. I would like a solid testing process where I can run a test of a bunch of Spam emails against the test server (SA 3.0.3) then t

Re: bayes problem

2005-05-02 Thread Matt Kettler
Payal Rathod wrote: >Hi, >I am looking after a friend's email server till he returns from his >vacation. In his local.cf (SA 2.61 and yes I know it is time for >upgrade) file he has, >bayes_path /etc/mail/spamassassin/bayes >use_bayes 1 >score BAYES_50 0.001 > >Also bayes is well trained with,

Re: Reporting scams to fraudwatchinternational

2005-05-02 Thread Jay Lee
Kris Deugau said: >> If you use a competent email client you will be offered the option >> of keeping a local copy, which saves the redundant recipient. > > Some people deliberately turn this off. I'm not sure why. (I can > *sort* of understand it for mailing list mail, but not for "direct" > mai

Re: Observation on secondary MX

2005-05-02 Thread Kenneth Porter
--On Monday, May 02, 2005 7:48 AM -0400 Kevin Peuhkurinen <[EMAIL PROTECTED]> wrote: The interesting thing is that now, about a month later, I'm still seeing spam going to that server! I wonder if the spammers have cached the old MX entry or if they have some database of mail server addresses a

Re: system-wide AWL in SQL?

2005-05-02 Thread Michael Parker
On Mon, May 02, 2005 at 06:09:32PM +0200, Arvinn Løkkebakken wrote: > > > Thanks. This shouldn't be all that much changes. Is there a patch for > getting this in 3.0.3? Search bugzilla, there was a review patch for the 3.0 tree but it never got enough votes to go in so I dropped it. I think it s

Re: Observation on secondary MX

2005-05-02 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Niek writes: > On 5/2/2005 1:48 PM +0200, Kevin Peuhkurinen wrote: > > spam going to that server! I wonder if the spammers have cached the > > old MX entry > > Jup. BTW I've seen a few discussions recently where people rediscover (sorry Kevin) th

Re: OT: The highest score?

2005-05-02 Thread Kris Deugau
Roman Serbski wrote: > What was the highest score you've ever seen? I received a message > yesterday that was scored with 51.9(!). =) Bah. I've seen a few that scored ~55 with stock 2.64 scores. With SpamCopURI, and custom scores, they jumped to ~80. I *think* I found one that scored ~80 on the

Re: SpamAssassin 3.0.3 Released

2005-05-02 Thread Matias Lopez Bergero
Michael Parker wrote: On Mon, May 02, 2005 at 12:57:54PM -0300, Matias Lopez Bergero wrote: I'm the only one with problems checking the pgp sig of the tarball? Are you by chance using GPG 1.4.x? There is this note in the release announcement: Note: GnuPG 1.4.0, and possibly 1.3.x versions, seem t

Re: Reporting scams to fraudwatchinternational

2005-05-02 Thread Kris Deugau
John Andersen wrote: > If you use a competent email client you will be offered the option > of keeping a local copy, which saves the redundant recipient. Some people deliberately turn this off. I'm not sure why. (I can *sort* of understand it for mailing list mail, but not for "direct" mail.) >

RE: regexp: exclude a string

2005-05-02 Thread Chris Santerre
>-Original Message- >From: wolfgang [mailto:[EMAIL PROTECTED] >Sent: Sunday, May 01, 2005 2:03 PM >To: users@spamassassin.apache.org >Subject: Re: regexp: exclude a string > > >In an older episode (Sunday 01 May 2005 12:49), Loren Wilton wrote: >> > /p(?:0|o)rtf(?:0|o)(?:\||l)i(?:0|o)/ >>

Re: system-wide AWL in SQL?

2005-05-02 Thread =?ISO-8859-1?Q?Arvinn_L=F8kkebakken?=
Michael Parker wrote: Probably not, there is a concept in 3.1 that allows you to do systemwide or groupwide AWL dbs in SQL, similar to how you can currently do it in Bayes (via override_username). Michael Thanks. This shouldn't be all that much changes. Is there a patch for getting this in 3.0.

Re: SpamAssassin 3.0.3 Released

2005-05-02 Thread Michael Parker
On Mon, May 02, 2005 at 12:57:54PM -0300, Matias Lopez Bergero wrote: > > I'm the only one with problems checking the pgp sig of the tarball? > Are you by chance using GPG 1.4.x? There is this note in the release announcement: Note: GnuPG 1.4.0, and possibly 1.3.x versions, seem to have probl

Re: SpamAssassin 3.0.3 Released

2005-05-02 Thread Matias Lopez Bergero
Hello, I'm the only one with problems checking the pgp sig of the tarball? BR, Matías.

Re: SA + SQL + per-user prefs

2005-05-02 Thread Michael Parker
On Mon, May 02, 2005 at 04:33:28PM +0100, Mike Grice wrote: > > Nope, but think of how it would scale. The design above is bad because > there is no unique data in there, so the table will get slow. A better > design would be this: > Howdy, SpamAssassin is an open source project that welcomes

Re: SA + SQL + per-user prefs

2005-05-02 Thread Mike Grice
On Mon, 2005-05-02 at 09:34 +0200, Arvinn L?kebakken wrote: > > Gerald V. Livingston II wrote: > > >OK, this is probably just an over-cautious MySQL question. > > > >All of the examples I look at for setting up per-user prefs using SQL show > >creating a table that looks like: > > > >username pr

Re: Upgrading to 3.0.3 - *CPAN* indexes stale?

2005-05-02 Thread Tom Q. Citizen
Dan O'Brien wrote: Now that I'm trying to update my production server from 3.0.2 to 3.0.3 (since Friday eve), every CPAN mirror I try results in the following messages Going to read /root/.cpan/sources/modules/02packages.details.txt.gz Database was generated on Sat, 19 Mar 2005 21:41:38 GMT CPA

spamd log error

2005-05-02 Thread Derril Hedk
Hello, I am receiving the following errors every time mail is processed by spamd. Any ideas on a solution or what the problem is? Derril H May 2 08:04:52 admin2 spamd[19328]: Use of uninitialized value in hash element at /usr/lib/perl5/site_perl/5.8.1/Mail/SpamAssassin/Message/Metadata/Received

RE: Blacklist Not Working

2005-05-02 Thread Ron Shuck
First, Thanks for the help. Craig noticed that the rule ALL_TRUSTED was matched. There was a potential issue with Trusted Path if trusted_networks was not configured. I tried that. The final mail server is Exchange, and I am having a hard time getting the headers back from the users. I posted a l

problem with WrongMx.pm

2005-05-02 Thread Wolfgang . Fuertbauer
I'm getting this errormessage: Failed to run WRONGMX SpamAssassin test, skipping:__(Can't use an undefined value as an ARRAY reference at /usr/lib/perl 5/site_perl/5.8.0/Mail/SpamAssassin/Plugin/WrongMX.pm line 31, line 62._) this is SA 3.0.3 Thanks Wolfgang ---

Re: Web based helpdesk tool for SA?

2005-05-02 Thread Andy Jezierski
Kevin Peuhkurinen <[EMAIL PROTECTED]> wrote on 05/02/2005 06:59:01 AM: > Lately I've been thinking that something that would really be useful for > SA is a web based helpdesk tool.   The idea is to help out companies > that use SA as a proxy in front of their Notes/Exchange/Groupwise > servers

Re: Observation on secondary MX

2005-05-02 Thread List Mail User
>... > >About a month ago, there was a discussion on the list about how spammers >specifically target secondary MX records. After reading I verified >that indeed 99% of the mail that flowed through my store-and-forward >secondary mail server was spam. So, I removed the second MX record >fro

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Bookworm
Jo wrote: Bookworm wrote: I've read through the archives several times, and hoped that over the last year or so someone would build the functionality, or at least mention it one way or another - I haven't seen it. Is there any way to take an already trained Mozilla bayes structure and hand it d

syntax error

2005-05-02 Thread jj-ml
Hi, I have just install the latest release of spamassassin (3.03 from the tarball) on a debian Everything seems to work fine but i 've got a syntax error during URIDNS test when i run spamd -D: ... debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8496a28) implements 'parsed_metadata' deb

Re: system-wide AWL in SQL?

2005-05-02 Thread Michael Parker
On Mon, May 02, 2005 at 02:54:31PM +0200, Arvinn Løkkebakken wrote: > > > >Yes. Follow the instructions in the readme files. > >for user prefs and mysql see > >http://wiki.apache.org/spamassassin/UsingSQL > > > > > Allready read it. System-wide AWL is not disucussed there, is it? > Probably not,

RE: INVALID_MSGID hitting improperly?

2005-05-02 Thread Ring, John C
>>So, looking at: >> >>"/GUID:QPywoUg6DZ06+yvqCupCVJw*/G=Cam/S=Dowlat/OU=Corporate-Markham/O=A >>lcate l Cable/PRMD=ACAB/ADMD=ATTMAIL/C=CA/"@MHS >> >>"-GUID:QnGodydG460CKmx35BCOvbw*-G=Cam-S=Dowlat-OU=Corporate-Markham-O=A >>lcate l Cable-PRMD=ACAB-ADMD=ATTMAIL-C=CA-"@MHS > >Looking at the rule, I'm

Re: Web based helpdesk tool for SA?

2005-05-02 Thread Kevin Peuhkurinen
Chris Santerre wrote: IMHO, this is something that is needed. However, it would have to be seperate user based quarantines. Otherwise there would be privacys issues on one big quarantine that everyone could sift through. I believe that most commercial anti-spam systems provide a means for adm

Raising the score...

2005-05-02 Thread Kevin Morwood
Hello, I have an old email address that a few contacts still use to reach me. I've tried to get everyone up to date on the new address but no luck. That's not really the issue though... The reason I changed addresses was that the spam that was coming in was all addressed to the old address.

RE: The highest score?

2005-05-02 Thread Chris Santerre
>-Original Message- >From: jdow [mailto:[EMAIL PROTECTED] >Sent: Monday, May 02, 2005 1:41 AM >To: users@spamassassin.apache.org >Subject: Re: The highest score? > > >I cheat. I have a couple personal rules guaranteed to hit spam and no >ham whatsoever. They hit 100. "MOM Agent" is guaran

RE: Web based helpdesk tool for SA?

2005-05-02 Thread Chris Santerre
>-Original Message- >From: Kevin Peuhkurinen [mailto:[EMAIL PROTECTED] >Sent: Monday, May 02, 2005 7:59 AM >To: users@spamassassin.apache.org >Subject: Web based helpdesk tool for SA? > > >Lately I've been thinking that something that would really be >useful for >SA is a web based helpd

Re: system-wide AWL in SQL?

2005-05-02 Thread =?ISO-8859-1?Q?Arvinn_L=F8kkebakken?=
Philipp Snizek wrote: Hi. Is it possible to keep my system-wide AWL setup when using 'spamc -u recipient' with user preference and AWL stored in SQL? Yes. Follow the instructions in the readme files. for user prefs and mysql see http://wiki.apache.org/spamassassin/UsingSQL Philipp All

Web based helpdesk tool for SA?

2005-05-02 Thread Kevin Peuhkurinen
Lately I've been thinking that something that would really be useful for SA is a web based helpdesk tool. The idea is to help out companies that use SA as a proxy in front of their Notes/Exchange/Groupwise servers (such as my own). The MTA on the SpamAssassin box would quarantine spam on th

Re: Observation on secondary MX

2005-05-02 Thread Niek
On 5/2/2005 1:48 PM +0200, Kevin Peuhkurinen wrote: spam going to that server! I wonder if the spammers have cached the old MX entry Jup. Niek

Observation on secondary MX

2005-05-02 Thread Kevin Peuhkurinen
About a month ago, there was a discussion on the list about how spammers specifically target secondary MX records. After reading I verified that indeed 99% of the mail that flowed through my store-and-forward secondary mail server was spam. So, I removed the second MX record from my DNS zon

RE: system-wide AWL in SQL?

2005-05-02 Thread Philipp Snizek
> Hi. Is it possible to keep my system-wide AWL setup when > using 'spamc -u recipient' with user preference and AWL stored in SQL? Yes. Follow the instructions in the readme files. for user prefs and mysql see http://wiki.apache.org/spamassassin/UsingSQL Philipp

Raising the score...

2005-05-02 Thread Kevin Morwood
Hello, I have an old email address that a few contacts still use to reach me. I've tried to get everyone up to date on the new address but no luck. That's not really the issue though... The reason I changed addresses was that the spam that was coming in was all addressed to the old address. I

Re: Question about Bayes training - mozilla specifically

2005-05-02 Thread Jo
Bookworm wrote: I've read through the archives several times, and hoped that over the last year or so someone would build the functionality, or at least mention it one way or another - I haven't seen it. Is there any way to take an already trained Mozilla bayes structure and hand it directly of

system-wide AWL in SQL?

2005-05-02 Thread Arvinn Løkkebakken
Hi. Is it possible to keep my system-wide AWL setup when using 'spamc -u recipient' with user preference and AWL stored in SQL? I currently have a system-wide AWL of more than a million rows that it would be a pity to loose. .. or should I switch to personal AWL's anyway? Arvinn

Re: SA + SQL + per-user prefs

2005-05-02 Thread =?ISO-8859-1?Q?Arvinn_L=F8kkebakken?=
Gerald V. Livingston II wrote: OK, this is probably just an over-cautious MySQL question. All of the examples I look at for setting up per-user prefs using SQL show creating a table that looks like: username pref value So, if I want to allow users to control 5 values I would have a table that lo

bayes problem

2005-05-02 Thread Payal Rathod
Hi, I am looking after a friend's email server till he returns from his vacation. In his local.cf (SA 2.61 and yes I know it is time for upgrade) file he has, bayes_path /etc/mail/spamassassin/bayes use_bayes 1 score BAYES_50 0.001 Also bayes is well trained with, -rw---1 root root

Re: The highest score?

2005-05-02 Thread jdow
I cheat. I have a couple personal rules guaranteed to hit spam and no ham whatsoever. They hit 100. "MOM Agent" is guaranteed spam. It seems to hit 200. So it's not fair. I have, however, seen over 100 with pure SARE rule sets so many of them were hit. {^_-} - Original Message - From: "Ro

Re: Folder redirection

2005-05-02 Thread Mark Harwood
Loren, Greg, Thanks.  The problem was that I had set up a single-user config prior to the system-wide config.  Greg, my system-wide config looks almost exactly as you described.  Loren, your comment about procmail doing the move reminded me that the single-user set up included a .procmailrc in

Re: Folder redirection

2005-05-02 Thread Loren Wilton
> Apologies if I missed this rather simple question in the FAQ's, but I really did look. Good reason for you to miss it, it isn't there. SA doesn't route messages, it only filters them. Something else looks at the filtering and decides what to do with the message. As someone else suggested this

Re: Reporting scams to fraudwatchinternational

2005-05-02 Thread Chris
On Sunday 01 May 2005 07:46 am, Chris wrote: > > Nope, I finally managed to get an email off to the tech- support contact to > whom the domain is registered to, I'll have to see what happens from there. > > Chris Found out the entire fraudwatchinternational site had been down for over 32hrs. It