Re: Spam messages got negative points

2005-05-04 Thread Tom Q. Citizen
How does one delete the bayes database? Peace... Tom On Wed, May 4, 2005 3:02 pm, Ryan Castellucci said: > Looks like bayes is dropping the score. Did you manualy train your > bayes database, or use autolearning? > > You may need to delete your bayes database and start over. > > On 5/4/05, BAKON

Re: memory-usage going BOOM

2005-05-04 Thread jdow
Thanks. That does help understand what is going on. This might be a good writeup for the wiki. {^_^} - Original Message - From: "Justin Mason" <[EMAIL PROTECTED]> > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > jdow writes: > > From: <[EMAIL PROTECTED]> > > > > > BTDT, bought th

Re: memory-usage going BOOM

2005-05-04 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jdow writes: > From: <[EMAIL PROTECTED]> > > > BTDT, bought the T-shirt. Adding memory will help. Short term solution > > can be adding swap space. Another option can be running SA remotely > > on another machine (users run spamc -d sa.machine.com)

Re: OT: The highest score?

2005-05-04 Thread Fred
Chris Lear wrote: > I've removed the SARE forged rules now altogether, and > most of the remaining spam scores under 50 (just one 52.9 yesterday). > > Chris Nope no citibank here, just making a generic rule like the rest, if you give me some info on what's wrong with it, I'll gladly fix it. Just

Re: Phishing filtering?

2005-05-04 Thread Fred
Steve Lake wrote: > I'm curious. How well does SA do with handling phishing spam and is > there stuff built into it to identify and nail these kind of emails? > I'm just curious because I heard that in just the past 5 months > Netcraft has logged over 5600 unique phishing sites on the net, so I >

Re: Problem with changing the Markup

2005-05-04 Thread Carlo Wood
On Wed, May 04, 2005 at 01:03:18PM -0400, Matt Kettler wrote: > >In -well- every mail. That is not too weird, since > >this is my domain! Why does rate 'alinoe.com' and 'com' > >and 'carlo' as spammy tokens? Is that normal? > > > No, it's not normal. > > Have you been training your bayes using

Re: Spam messages got negative points

2005-05-04 Thread BAKONYI Péter - paha
X-Spam-Status: No, score=1.5 required=6.6 tests=BAYES_00,DATE_IN_FUTURE_96_XX, EARN_PER_WEEK,HTML_50_60,HTML_IMAGE_RATIO_06,HTML_MESSAGE, HTML_WEB_BUGS autolearn=no version=3.0.2 It's the BAYES_00 rule that's doing you in. I suggest you wipe out your Bayes database and carefully tr

Re: Spam messages got negative points

2005-05-04 Thread Ryan Castellucci
Looks like bayes is dropping the score. Did you manualy train your bayes database, or use autolearning? You may need to delete your bayes database and start over. On 5/4/05, BAKONYI Péter - paha <[EMAIL PROTECTED]> wrote: > Hi! > > >>I'm new at this list. I'm using spamassassin on my debian box

RE: Spam messages got negative points

2005-05-04 Thread Matthew.van.Eerde
BAKONYI Péter - paha wrote: > Hi! > >>> not identified to be a spam because of some _negative_ points. >> Can you post an X-Spam-Status header? > thanks for your replies. here's an X-Spam-Status header from a > message which was identified to be a spam before the new version and > not spam right

Re: Spam messages got negative points

2005-05-04 Thread BAKONYI Péter - paha
Hi! I'm new at this list. I'm using spamassassin on my debian box since 2 years and now I've upgraded to a new machine, new installation and a new version (3.0.2) os spamassassin. But something seems to be wrong because I got a lot of spam messages which is not identified to be a spam because o

usr_prefs not working

2005-05-04 Thread Randy Gibson
Hello, I just upgraded my spamassassin from v3.0.1 to v3.0.3 and know my "user_prefs" don't appear to being read. I have a couple of test rules I use to verify if the local.cf or user_prefs are be read and local.cf works but user_prefs don't. I'm using spamassassin on a redhat box and using spa

Re: memory-usage going BOOM

2005-05-04 Thread jdow
From: <[EMAIL PROTECTED]> > BTDT, bought the T-shirt. Adding memory will help. Short term solution > can be adding swap space. Another option can be running SA remotely > on another machine (users run spamc -d sa.machine.com) This might be "A GOOD TIME" for someone to create a small exposition r

Re: AWL whaaat

2005-05-04 Thread jdow
From: "Matt Kettler" <[EMAIL PROTECTED]> > Kelson wrote: > > > Matt Kettler wrote: > > > >> Or were you under the misconception based on the name AWL that it is > >> only a whitelist? > >> > >> The AWL isn't really a whitelist, it's a score averager. It has effect > >> of both an automatic whitel

Re: AWL whaaat

2005-05-04 Thread Matt Kettler
Chris Santerre wrote: >>-Original Message- >>From: Matt Kettler [mailto:[EMAIL PROTECTED] >>Sent: Wednesday, May 04, 2005 4:16 PM >>To: Andy Jezierski >>Cc: users@spamassassin.apache.org >>Subject: Re: AWL whaaat >> >> >>Andy Jezierski wrote: >> >> >> >>>I like it! And since the score

RE: AWL whaaat

2005-05-04 Thread Chris Santerre
>-Original Message- >From: Matt Kettler [mailto:[EMAIL PROTECTED] >Sent: Wednesday, May 04, 2005 4:16 PM >To: Andy Jezierski >Cc: users@spamassassin.apache.org >Subject: Re: AWL whaaat > > >Andy Jezierski wrote: > >> >> I like it! And since the scores can shift over time, you'd probably

Re: AWL whaaat

2005-05-04 Thread Matt Kettler
Andy Jezierski wrote: > > I like it! And since the scores can shift over time, you'd probably > want people to check them every now and then so you could tell them to > > Keep Intercepting Suspected Spam Monitor Your Average Scoring System > > Sorry, couldn't resist. > > > Andy (Hangs his hea

RE: AWL whaaat

2005-05-04 Thread Andy Jezierski
Chris Santerre <[EMAIL PROTECTED]> wrote on 05/04/2005 02:20:01 PM: > > > >-Original Message- > >From: Matt Kettler [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, May 04, 2005 1:11 PM > >To: users@spamassassin.apache.org > >Subject: Re: AWL whaaat > > > > > >Kelson wrote: > > > >> Matt K

Re: AWL whaaat

2005-05-04 Thread Doc Schneider
I'd have to turd... er third it! -Doc Gary W. Smith wrote: I second. HSA (Historical Score Averager) might be reasonably accurate, but unless you think about the math, it's purpose isn't clear. (And in my experience, most people don't enjoy thinking about math. ) Got any better suggestions for a n

Re: Combining whitelist_from and to

2005-05-04 Thread David B Funk
On Tue, 3 May 2005, Loren Wilton wrote: > Use a meta: > > header __MY_FROMFrom =~ /from\.tld/ > header __MY_TO To =~ /someone\.somewhere/ > meta MY_FUNNY_WHITELIST __MY_FROM && __MY_TO > score MY_FUNNY_WHITELIST 10 > > Loren Um, for a whitelist shouldn't that be a -10 for the score? N

RE: AWL whaaat

2005-05-04 Thread Gary W. Smith
I second. > >HSA (Historical Score Averager) might be reasonably accurate, > >but unless > >you think about the math, it's purpose isn't clear. (And in my > >experience, most people don't enjoy thinking about math. ) > > > >Got any better suggestions for a name? > > Average Scoring System or ASS

RE: AWL whaaat

2005-05-04 Thread Chris Santerre
>-Original Message- >From: Matt Kettler [mailto:[EMAIL PROTECTED] >Sent: Wednesday, May 04, 2005 1:11 PM >To: users@spamassassin.apache.org >Subject: Re: AWL whaaat > > >Kelson wrote: > >> Matt Kettler wrote: >> >>> Or were you under the misconception based on the name AWL that it is >>>

Re: AWL whaaat

2005-05-04 Thread Bill Landry
- Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> > Kelson wrote: > > > Matt Kettler wrote: > > > >> Or were you under the misconception based on the name AWL that it is > >> only a whitelist? > >> > >> The AWL isn't really a whitelist, it's a score averager. It has effect > >

Re: memory-usage going BOOM

2005-05-04 Thread dave
I've been using SpamAssassin 3.0.2 for quite some time (about three month) on my mailservers and so far I didn't notice any problems. Load and message-throughput have been quite constant. However, yesterday one of my servers went BANG, due to lack of memory. First I suspected Bind9, but when the me

Re: AWL whaaat

2005-05-04 Thread Matt Kettler
Kelson wrote: > Matt Kettler wrote: > >> HSA (Historical Score Averager) might be reasonably accurate, but unless >> you think about the math, it's purpose isn't clear. (And in my >> experience, most people don't enjoy thinking about math. ) > > > I don't know what it says about my current state o

Re: memory-usage going BOOM

2005-05-04 Thread Stephen M. Przepiora
I have, and I did the same as you along with dropping in another gig of ram. Steve Patrick von der Hagen wrote: Hi all, I've been using SpamAssassin 3.0.2 for quite some time (about three month) on my mailservers and so far I didn't notice any problems. Load and message-throughput have been quite c

RE: How ill-advised are nightlies?

2005-05-04 Thread Bret Miller
> On Wed, May 04, 2005 at 07:24:07AM -0400, [EMAIL PROTECTED] wrote: > > > > I know from watching that 3.1 might be a ways off, and am > wondering if > > based on anyone's experience whether running an interim > build is a good > > idea or not? I understand the risks of doing this in general, just

Re: AWL whaaat

2005-05-04 Thread Kelson
Matt Kettler wrote: HSA (Historical Score Averager) might be reasonably accurate, but unless you think about the math, it's purpose isn't clear. (And in my experience, most people don't enjoy thinking about math. ) I don't know what it says about my current state of mind, but I misread that as His

Re: AWL whaaat

2005-05-04 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler wrote: | | HSA (Historical Score Averager) might be reasonably accurate, but unless | you think about the math, it's purpose isn't clear. (And in my | experience, most people don't enjoy thinking about math. ) | | Got any better suggestions

Re: AWL whaaat

2005-05-04 Thread Matt Kettler
Kelson wrote: > Matt Kettler wrote: > >> Or were you under the misconception based on the name AWL that it is >> only a whitelist? >> >> The AWL isn't really a whitelist, it's a score averager. It has effect >> of both an automatic whitelist and an automatic blacklist. >> >> http://wiki.apache.org

memory-usage going BOOM

2005-05-04 Thread Patrick von der Hagen
Hi all, I've been using SpamAssassin 3.0.2 for quite some time (about three month) on my mailservers and so far I didn't notice any problems. Load and message-throughput have been quite constant. However, yesterday one of my servers went BANG, due to lack of memory. First I suspected Bind9, but whe

Re: Some rules help please

2005-05-04 Thread Matt Kettler
David Jelinek wrote: > If someone would help me, I would appreciate it. We are getting a lot > of messages that get through that have various subjects bodies etc. > but they all have an attachment of the form xxxinfoxxx.zip although > the zip file really is not there (that's why it doesn't get sto

Re: Problem with changing the Markup

2005-05-04 Thread Matt Kettler
Carlo Wood wrote: >On Wed, May 04, 2005 at 12:03:15PM -0400, Matt Kettler wrote: > > >>If you're using qmail-scanner's fast_spamassassin option, that's your >>problem. >> >> > >Thank you! I had a qmail-scanner 1.21 which didn't have >a verbose_spamassassin option. I got 1.25 and configured

Re: AWL whaaat

2005-05-04 Thread Kelson
Matt Kettler wrote: Or were you under the misconception based on the name AWL that it is only a whitelist? The AWL isn't really a whitelist, it's a score averager. It has effect of both an automatic whitelist and an automatic blacklist. http://wiki.apache.org/spamassassin/AutoWhitelist I've said it

RE: Phishing filtering?

2005-05-04 Thread Chris Santerre
>-Original Message- >From: Steve Lake [mailto:[EMAIL PROTECTED] >Sent: Monday, May 02, 2005 10:18 PM >To: users@spamassassin.apache.org >Subject: Phishing filtering? > > > I'm curious. How well does SA do with handling >phishing spam and is there >stuff built into it to identify

Re: Problem with changing the Markup

2005-05-04 Thread Carlo Wood
On Wed, May 04, 2005 at 12:03:15PM -0400, Matt Kettler wrote: > If you're using qmail-scanner's fast_spamassassin option, that's your > problem. Thank you! I had a qmail-scanner 1.21 which didn't have a verbose_spamassassin option. I got 1.25 and configured it with --scanners=verbose_spamassassi

Some rules help please

2005-05-04 Thread David Jelinek
-BEGIN PGP SIGNED MESSAGE-   If someone would help me, I would appreciate it. We are getting a lot of messages that get through that have various subjects bodies etc. but they all have an attachment of the form xxxinfoxxx.zip although the zip file really is not there (that's why it doe

Re: Problem with changing the Markup

2005-05-04 Thread Matt Kettler
Carlo Wood wrote: >Hi, I am having some problems with false-positives and >want to know why spamassassin is giving the rating it >gives. > >In order to achieve that, I added the rule: > >add_header all Scores _TESTSSCORES(,)_ > >To my config file. >When that didn't work, I found out that many othe

Problem with changing the Markup

2005-05-04 Thread Carlo Wood
Hi, I am having some problems with false-positives and want to know why spamassassin is giving the rating it gives. In order to achieve that, I added the rule: add_header all Scores _TESTSSCORES(,)_ To my config file. When that didn't work, I found out that many other things in that config file

Re: How ill-advised are nightlies?

2005-05-04 Thread Michael Parker
On Wed, May 04, 2005 at 07:24:07AM -0400, [EMAIL PROTECTED] wrote: > > I know from watching that 3.1 might be a ways off, and am wondering if > based on anyone's experience whether running an interim build is a good > idea or not? I understand the risks of doing this in general, just > wonderi

RE: [SURBL] how to report

2005-05-04 Thread martin smith
M>-Original Message- M>From: Jeff Chan [mailto:[EMAIL PROTECTED] M>Sent: 04 May 2005 02:29 M>To: users@spamassassin.apache.org M>Subject: Re: [SURBL] how to report M> M>On Monday, May 2, 2005, 11:34:14 PM, hamann w wrote: M>> I just came across this website M>> www.webspawner.com/users/mon

RE: OT: The highest score?

2005-05-04 Thread Chris Santerre
>-Original Message- >From: Chris Lear [mailto:[EMAIL PROTECTED] >Sent: Wednesday, May 04, 2005 4:47 AM >To: users@spamassassin.apache.org >Subject: Re: OT: The highest score? > > >* Chris wrote (05/04/05 01:27): >> On Sunday 01 May 2005 04:49 pm, John Andersen wrote: >>> On Sunday 01 May

How ill-advised are nightlies?

2005-05-04 Thread leonard . gray
We have been waiting patiently to resolve the swapping problem caused by SA 3.0.x's forking algorithms.  I have been watching anxiously over the progress of 3.1 and am very encouraged about the new pre-forking code. However, we're have a real need to get SA installed now for "the never-ending bat

Debugging spamd/spamc interaction

2005-05-04 Thread Dirk Kuypers
Hi, we want to migrate our old mailserver (Sun E450 with Solaris 2.7, sendmail and SA 2.64) to a Linux rack-server with debian linux, qmail and SA 3.x on it. Now the new box is up and running so far and I wanted to test it first with spamd/spamc to compare the more or less vanilla SA 3 perform

Re: High memory usage

2005-05-04 Thread Bikrant Neupane
On Wednesday 04 May 2005 01:26, Daryl C. W. O'Shea wrote: > Bikrant Neupane wrote: > > I shifted to Spamassin 3.0.3 on FreeBSD 5.3 yesterday with dcc enabled. > > Hardware is Xeon (hyper threading) SC1420 with 1536 MB RAM. > > > > I am using following options to start spamd > > -d -i $O1 -m40

Re: rulesemporium.com outage again?????

2005-05-04 Thread Martin Hepworth
Chris seems to be OK this morning.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Chris Santerre wrote: -Original Message- From: Martin Hepworth [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 03, 2005 5:27 AM To: SpamAssassin Users Subject: rulesempori

Re: OT: The highest score?

2005-05-04 Thread Chris Lear
* Chris wrote (05/04/05 01:27): > On Sunday 01 May 2005 04:49 pm, John Andersen wrote: >> On Sunday 01 May 2005 02:02 am, Roman Serbski wrote: [...] > * 104 SARE_FORGED_EBAY Message appears to be forged, (ebay.com) [...] The SARE_FORGED_* rules are a good way to score over 100 points q

Re: High memory usage

2005-05-04 Thread Bikrant Neupane
On Wednesday 04 May 2005 01:26, Daryl C. W. O'Shea wrote: > Bikrant Neupane wrote: > > I shifted to Spamassin 3.0.3 on FreeBSD 5.3 yesterday with dcc enabled. > > Hardware is Xeon (hyper threading) SC1420 with 1536 MB RAM. > > > > I am using following options to start spamd > > -d -i $O1 -m40

SA-Learn & False negatives

2005-05-04 Thread Michael Priest
Howdy, I'm getting a lot of false negatives from SA, I'm in the process of trying to use SA-Learn but currently my mail is processed by my EXIM/ SA server and then forwarded to my exchange server. I've moved all false negative emails into a spam folder in my mailbox on exchange and then setup a f

Re: [SURBL] how to report

2005-05-04 Thread Jeff Chan
On Monday, May 2, 2005, 11:34:14 PM, hamann w wrote: > I just came across this website > www.webspawner.com/users/moneymakerman555 > What is the best way to have the spam that this will likely create blocked by > surbl? > Wolfgang Hamann A good way to report spams is to use SpamCop. The SpamCo

Re[2]: Extra Sare Rules for meds?

2005-05-04 Thread Robert Menschel
Hello Clayton, Tuesday, May 3, 2005, 11:13:01 AM, you wrote: CK> Jesse Houwing wrote: >> Keith Ivey wrote: >>> Jesse Houwing wrote: BODY TABLEOBFU m{]+|"[^"]+)>(<([^>]+|"[^"]+)>)*[a-z]{1,2}(<([^>]+|"[^"]+)>)*]+|"[^"]+)>}i >>> >>> m{"]+|"[^"]*")*>(<([^>"]+|"[^"]*")*>)*[a-z]{1,2}(<([^>"]+

Re: OT: The highest score?

2005-05-04 Thread Chris
On Sunday 01 May 2005 04:49 pm, John Andersen wrote: > On Sunday 01 May 2005 02:02 am, Roman Serbski wrote: > > Hi all, > > > > What was the highest score you've ever seen? I received a message > > yesterday that was scored with 51.9(!). =) > > Since you can control the scores by setting the score