Re: IP whitelist?

2005-05-13 Thread Duncan Hill
On Friday 13 May 2005 23:51, Ryan L. Sun wrote: > If an incomming email is from a IP listed in IP whitelist, we don't > need to check it at all. > The whitelist I mentioned here is a large-scale one. Say Microsoft and > Yahoo's IPs should be added to IP whitelist since we suppose they > won't send

Re: Challenge Response Authentication

2005-05-13 Thread Matt Kettler
jdow wrote: > From: "Theo Van Dinter" <[EMAIL PROTECTED]> > >>That said, C/R is really annoying and IMO not worth the effort. YMMV. :) > > > Anybody who does that to me ends up in my .procmailrc file redirected > to /dev/null. C/R is an example of that with which I will not put. > > {^_^} >

Re: Challenge Response Authentication

2005-05-13 Thread jdow
From: "jdow" <[EMAIL PROTECTED]> > From: "Theo Van Dinter" <[EMAIL PROTECTED]> > > > That said, C/R is really annoying and IMO not worth the effort. YMMV. :) > > Anybody who does that to me ends up in my .procmailrc file redirected > to /dev/null. C/R is an example of that with which I will not p

translations and PO files

2005-05-13 Thread Justin Mason
Quick question for anyone who may know -- is a .po (gettext-style) file more usable for translators out there? In particular, Ubuntu's Rosetta -- https://launchpad.ubuntu.com/rosetta/ -- uses this format. That looks cool, but I'm curious about other tools that can be used to edit .po files as wel

Re: Unable to whitelist...

2005-05-13 Thread Jonathan Nichols
Kevin W. Gagel wrote: Try adding the "Return-Path: <[EMAIL PROTECTED]>" address and see if thats it. Oddly enough, that worked. Hrm. I wonder why

Re: Challenge Response Authentication

2005-05-13 Thread jdow
From: "Theo Van Dinter" <[EMAIL PROTECTED]> > That said, C/R is really annoying and IMO not worth the effort. YMMV. :) Anybody who does that to me ends up in my .procmailrc file redirected to /dev/null. C/R is an example of that with which I will not put. {^_^}

RE: SQL Question -- FIX

2005-05-13 Thread Steven Manross
***This now works (with minor mods to the SA distro files [SQL.pm] and the creation of an additional MS SQL User defined function) I've mocked up an MS SQL Version of RPAD that could be easily introduced into the readme code that creates the bayes tables, and sets the version. (please correct the

SA + PostFix + Virtual final question for a while

2005-05-13 Thread Gerald V. Livingston II
I don't expect I'll get a reply quick enough to help. It's been strongly suggested that I switch our mail server over to ANYTHING other than what we have before the weekend is out. I've been bouncing around the web and digging through documentation trying to figure out how to do SA + virus scannin

Re: SQL Question

2005-05-13 Thread Daryl C. W. O'Shea
Michael Parker wrote: debug: bayes: tok_get_all: Token Count: 302 debug: bayes: tok_get_all: SQL Error: [Microsoft][ODBC SQL Server Driver][SQL Se rver]'RPAD' is not a recognized function name. (SQL-42000) [Microsoft][ODBC SQL Server Driver][SQL Server]Statement(s) could not be prepare d. (SQL-4200

Re: IP whitelist?

2005-05-13 Thread Ryan L. Sun
If an incomming email is from a IP listed in IP whitelist, we don't need to check it at all. The whitelist I mentioned here is a large-scale one. Say Microsoft and Yahoo's IPs should be added to IP whitelist since we suppose they won't send spams. Currently I am maintaining a RBL list, and hopefull

Re: IP whitelist?

2005-05-13 Thread Matt Kettler
Ryan L. Sun wrote: > Do you guys have any idea how to build up an effective and accurate IP > whitelist? > Since IP always cause false positive and I believe IP whitelist may be > a good idea. > > Thanks. > -Ryan > What do you use to call SA? While the idea is good, any whitelisting at all done

IP whitelist?

2005-05-13 Thread Ryan L. Sun
Do you guys have any idea how to build up an effective and accurate IP whitelist? Since IP always cause false positive and I believe IP whitelist may be a good idea. Thanks. -Ryan

Re: Suddenly load average of 15-18???

2005-05-13 Thread Martin G. Diehl
jdow wrote: From: "Thomas Cameron" <[EMAIL PROTECTED]> On Thu, 2005-05-12 at 08:31 -0700, Loren Wilton wrote: Usually a high load average means that a spamd child suddenly (or possibly slowly) got fat, and you are out of memory and thrashing to beat the band. [snip] Again, study what causes the p

RE: SQL Question

2005-05-13 Thread Steven Manross
Hmmm.. I can't believe I missed that.. Thanks for the info. If it's a matter of creating a function in SQL to replicate spaces (or something else) at the end of the string, I can code that easily enoug (called RPAD). Wouldn't varchar types probably be a better usage in this scenario. I'll play

Re: Looks like we have someone doing auto-spam-reports on this list.

2005-05-13 Thread Daryl C. W. O'Shea
Matt Kettler wrote: Brian Godette wrote: [EMAIL PROTECTED] appears to be not only running this mailing list thru spamassassin (bad idea) but also auto-reporting any positive hits (incredibly bad idea). Agreed... SA ditched the "auto_report_threshold" feature back in 2.30 back in 2002. If it was

SpamAssassin 3.0.3 errors - connect(AF_INET) to spamd at 127.0.0.1 failed

2005-05-13 Thread Mick Szucs
I'm running spamassassin 3.0.3 as a "proxy" on three mail servers. This morning at 2am one of the three (but not the other two) started spewing a lot of spamc[8000]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#1 of 3) and did not identify any messages as spam until a user compl

Re: SQL Question

2005-05-13 Thread Michael Parker
> debug: bayes: tok_get_all: Token Count: 302 > debug: bayes: tok_get_all: SQL Error: [Microsoft][ODBC SQL Server Driver][SQL > Se > rver]'RPAD' is not a recognized function name. (SQL-42000) > [Microsoft][ODBC SQL Server Driver][SQL Server]Statement(s) could not be > prepare > d. (SQL-42000)(DBD

Re: Challenge Response Authentication

2005-05-13 Thread Theo Van Dinter
On Fri, May 13, 2005 at 01:28:08PM -0600, The Doctor wrote: > IS there a good package that one can plug into Spam Assassin for C-r? I doubt there's one you plug into SA, since SA doesn't stop mail from being delivered. You're likely looking for one that uses SA as a possible flag to go c-r. That

Challenge Response Authentication

2005-05-13 Thread The Doctor
IS there a good package that one can plug into Spam Assassin for C-r? -- Member - Liberal International This is [EMAIL PROTECTED] Ici [EMAIL PROTECTED] God Queen and country! Beware Anti-Christ rising! BC, Vote Liberal!!

Re: AWL -> SQL

2005-05-13 Thread Alan Munday
Alan Munday wrote the following on 13/05/2005 17:48: Michael Parker wrote the following on 13/05/2005 17:32: On Fri, May 13, 2005 at 05:28:14PM +0100, Alan Munday wrote: Is it possible to move the awl data when migrating to SQL? tools/convert_awl_dbm_to_sql Michael Michael Ah ha, I did not have t

Re: Looks like we have someone doing auto-spam-reports on this list.

2005-05-13 Thread Matt Kettler
Brian Godette wrote: >[EMAIL PROTECTED] appears to be not only running this mailing >list thru spamassassin (bad idea) but also auto-reporting any positive hits >(incredibly bad idea). > > > Agreed... SA ditched the "auto_report_threshold" feature back in 2.30 back in 2002. If it was a bad ide

RE: SQL Question

2005-05-13 Thread Steven Manross
Thanks for the quick response... I'll be glad to help in any way I can. Sorry for top-posting... Outlook doesn't thread very well for comments nested in previous messages. (Or I haven't figured out how to.. :) The sa-learn restore was done with the same override user name as the production use

Any way to make spamassassin not check the relays against the rbls?

2005-05-13 Thread Matthew Schumacher
I would like for the rbl checking to happen for the connecting host (just like if it was provisioned in sendmail), but I don't want it to check each and every relay. I find frequently that a user behind nat will get the nat address blacklisted because of zombies behind the same address, but the le

Re: Re[2]: [SARE] obfu rule set update

2005-05-13 Thread Jack L. Stone
At 06:59 PM 5.12.2005 -0700, Robert Menschel wrote: >Hello Jack, Chris, > >Thursday, May 12, 2005, 8:46:40 AM, you wrote: > >JLS> At 09:19 AM 5.12.2005 +0100, Chris Russell wrote: >>>Trying to Update this morning gives: >>>Lint output: warning: description exists for non-existent rule >JLS> SARE_OB

Re: AWL -> SQL

2005-05-13 Thread Alan Munday
Michael Parker wrote the following on 13/05/2005 17:32: On Fri, May 13, 2005 at 05:28:14PM +0100, Alan Munday wrote: Is it possible to move the awl data when migrating to SQL? tools/convert_awl_dbm_to_sql Michael Michael Ah ha, I did not have the tools installed. Maybe a reference to this could be

Re: Spam Percentages

2005-05-13 Thread Martin Hepworth
Fred wrote: Ben Hanson wrote: Shortly after the first of the year, I noticed the percentage of spam messages for our organization dropped consistently by 10-15%. Ben I see between 83-85% spam. We use SARE rules + my own home-brew rules + the new BLACK uribl lists + unreleased SARE rules. In the

Re: Spam Percentages

2005-05-13 Thread Fred
Ben Hanson wrote: > Shortly after the first of the year, I noticed the percentage of spam > messages for our organization dropped consistently by 10-15%. > Ben I see between 83-85% spam. We use SARE rules + my own home-brew rules + the new BLACK uribl lists + unreleased SARE rules. In the past 24

Re: AWL -> SQL

2005-05-13 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alan Munday wrote: | | Is it possible to move the awl data when migrating to SQL? | Sounds like a job for convert_awl_dbm_to_sql which, here at least, is in: /var/cpan/build/Mail-SpamAssassin-3.0.3/tools/ Then again, I might be talking out of my behind.

Re: AWL -> SQL

2005-05-13 Thread Michael Parker
On Fri, May 13, 2005 at 05:28:14PM +0100, Alan Munday wrote: > > Is it possible to move the awl data when migrating to SQL? > tools/convert_awl_dbm_to_sql Michael pgpLEE1vUbWPI.pgp Description: PGP signature

AWL -> SQL

2005-05-13 Thread Alan Munday
Is it possible to move the awl data when migrating to SQL? Thanks Alan

Spam Percentages

2005-05-13 Thread Ben Hanson
Shortly after the first of the year, I noticed the percentage of spam messages for our organization dropped consistently by 10-15%. We had been averaging 60 to 65% for the last year or so, ever since I began with SA, right up until then, when it dropped consistently to just over 50%. I didn'

Re: Mail::SpamAssassin to setup required_score

2005-05-13 Thread Theo Van Dinter
On Fri, May 13, 2005 at 09:05:34AM -0700, Markus Hardiyanto wrote: > Why Mail::SpamAssassin module always giving output > spam score 0? while if i run spamassassin from console > to check the same sample-spam file it give spam score > 4? Mail::SpamAssassin doesn't actually check your mail. Pleas

Re: Mail::SpamAssassin to setup required_score

2005-05-13 Thread Markus Hardiyanto
Why Mail::SpamAssassin module always giving output spam score 0? while if i run spamassassin from console to check the same sample-spam file it give spam score 4? --- Markus Hardiyanto <[EMAIL PROTECTED]> wrote: > can i use Mail::SpamAssassin to setup > required_score? > i already read the manu

Looks like we have someone doing auto-spam-reports on this list.

2005-05-13 Thread Brian Godette
[EMAIL PROTECTED] appears to be not only running this mailing list thru spamassassin (bad idea) but also auto-reporting any positive hits (incredibly bad idea).

Re: SQL Question

2005-05-13 Thread Michael Parker
On Fri, May 13, 2005 at 08:35:08AM -0700, Steven Manross wrote: > On that same note, > > I was playing around with BAYES on a MS SQL Server... > (I followed the directions in the readme files and tweaked the mysql.sql > code to work for MS SQL in creation of the tables.) Ahhh, most excellent, I d

Re: URIDNSBL Scores

2005-05-13 Thread Scott Schaffer
So why do they work on one machine and not the other? Both machines are SA 3.0.0. and are virtually identical in setup. >>> Jeff Chan <[EMAIL PROTECTED]> 05/13/05 09:34AM >>> On Friday, May 13, 2005, 8:19:57 AM, Scott Schaffer wrote: > SA 3.0.0 on both machines One thing to note is that the URID

RE: SQL Question

2005-05-13 Thread Steven Manross
On that same note, I was playing around with BAYES on a MS SQL Server... (I followed the directions in the readme files and tweaked the mysql.sql code to work for MS SQL in creation of the tables.) The import worked fine (no errors that I could see). sa-learn --D --backup >bayes-backup.txt) Mod

Re: URIDNSBL Scores

2005-05-13 Thread Jeff Chan
On Friday, May 13, 2005, 8:19:57 AM, Scott Schaffer wrote: > SA 3.0.0 on both machines One thing to note is that the URIDNSBL rules in 3.0.0 are type "header" while they're type "body" in later versions. If you're using rules quoted for URIDNSBL for example on the SURBL site, they usually mention

Re: URIDNSBL Scores

2005-05-13 Thread Scott Schaffer
SA 3.0.0 on both machines >>> Matt Kettler <[EMAIL PROTECTED]> 05/13/05 08:06am >>> At 06:14 PM 5/12/2005, Scott Schaffer wrote: >I am migrating spamassassin from my perimeter firewall to another server >to lighten the load on the firewall. I have installed SA3.0 on the new >machine and have don

Re: Help with Bayes auto-learn

2005-05-13 Thread Matt Kettler
At 02:38 AM 5/13/2005, Geoff Sweet wrote: 2005-05-12 23:30:33.432514500 2005-05-13 06:30:33 [88906] i: result: Y 23 - BAYES_99,FORGED_MUA_THEBAT_BOUN,FORGED_THEBAT_HTML,FORGED_YAHOO_RCVD,HEAD_ILLEGAL_CHARS,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MSGID_RANDY,NORMAL_H

Re: URIDNSBL Scores

2005-05-13 Thread Matt Kettler
At 06:14 PM 5/12/2005, Scott Schaffer wrote: I am migrating spamassassin from my perimeter firewall to another server to lighten the load on the firewall. I have installed SA3.0 on the new machine and have done some testing. I am getting different results on each SA install. Which EXACT version

Re: [OT]Appropriate OS and other software to work with SA

2005-05-13 Thread Bookworm
Bowie Bailey wrote: From: Ben Wylie [mailto:[EMAIL PROTECTED] Currently I am running my mailserver on a windows box. I have just bought a new server and will probably be running CentOS on it. I would like to migrate my mailserver onto this linux box so that hopefully I will be able to get a fas

RE: [OT]Appropriate OS and other software to work with SA

2005-05-13 Thread Bowie Bailey
From: Ben Wylie [mailto:[EMAIL PROTECTED] > > Currently I am running my mailserver on a windows box. I have just bought > a new server and will probably be running CentOS on it. I would like to > migrate my mailserver onto this linux box so that hopefully I will be able > to get a faster, more st

Re: Outbound Filtering.

2005-05-13 Thread James R
[EMAIL PROTECTED] wrote: I'm interested in using SpamAssassin and would like to know if anyone has used it for outbound filtering. For example: I would like the ability to filter messages by domain. To prevent being blacklisted by AOL or such companies, I would like to filter outbound email des

Re: Outbound Filtering.

2005-05-13 Thread Martin Hepworth
Nina depends on how you are calling SA. I use MailScanner and it's perfectly possible to get MailScanner to scan outbound email for spam only for certain domains. BUT as most spammer infected machines have their MTA, you'll prob need a firewall rule to redirect all outbound SMTP messages to the

Outbound Filtering.

2005-05-13 Thread spamassassin
I'm interested in using SpamAssassin and would like to know if anyone has used it for outbound filtering. For example: I would like the ability to filter messages by domain. To prevent being blacklisted by AOL or such companies, I would like to filter outbound email destined to AOL for spam an

Re: SA/RDJ/Bogus Virus Warnings Problem

2005-05-13 Thread Tim Jackson
On Thu, 12 May 2005 09:14:18 -0400 Dimitri Yioulos <[EMAIL PROTECTED]> wrote: > I am, indeed, using the latest incarnation of RDJ. Show the output from your latest RDJ run then. It should be using the rulesemporium.com URL. It certainly won't have a timj.co.uk 500 error. If you're still having pr

unsubscribing

2005-05-13 Thread kmd
can the moderator please unsubscribe me off this list. i've already sent 5 mails to <[EMAIL PROTECTED]> without success, i keep receiving the mails of this list. Please unsubscribe me thank you -- kmd

Re: bayes tie failed

2005-05-13 Thread kmd
On 5/12/05, kmd <[EMAIL PROTECTED]> wrote: > On 5/12/05, kmd <[EMAIL PROTECTED]> wrote: > > On 5/11/05, kmd <[EMAIL PROTECTED]> wrote: > > > today i spent many hours building SA on perl 5.8.6, instead of the > > > 5.8.1 perl that is default installed on the mdk 9.2 linux box (it's > > > very diffic

Re: Help with Bayes auto-learn

2005-05-13 Thread wolfgang
In an older episode (Friday 13 May 2005 12:26), Joe Zitnik wrote: > Yes, but his scoring list BAYES_99 as one of the scores, which means > bayes is active, which means it has been fed the necessary 200 spam and > 200 ham. If it hadn't been fed the necessary spam and ham, it would not > have been g

Re: URIDNSBL Scores

2005-05-13 Thread Jeff Chan
On Thursday, May 12, 2005, 3:14:13 PM, Scott Schaffer wrote: > Machine behind the firewall results > - > debug: bayes: score = 0.505530427067805 > debug: bayes: 276 untie-ing > debug: bayes: 276

Re: Help with Bayes auto-learn

2005-05-13 Thread Joe Zitnik
Yes, but his scoring list BAYES_99 as one of the scores, which means bayes is active, which means it has been fed the necessary 200 spam and 200 ham.  If it hadn't been fed the necessary spam and ham, it would not have been given a BAYES score at all.  The fact that the mail was not autolearned co

Re: my internal server is making records in the AWL

2005-05-13 Thread Arvinn Løkkebakken
James R wrote: Arvinn Løkkebakken wrote: James R wrote: Arvinn Løkkebakken wrote: Arvinn Løkkebakken wrote: How can that happen? Anybody else here with the same experience? Are we talking about a bug here? I would really like to know if this is a problem in my setup or if others are experien

Re: bayes tie failed

2005-05-13 Thread kmd
On 5/12/05, kmd <[EMAIL PROTECTED]> wrote: > On 5/11/05, kmd <[EMAIL PROTECTED]> wrote: > > today i spent many hours building SA on perl 5.8.6, instead of the > > 5.8.1 perl that is default installed on the mdk 9.2 linux box (it's > > very difficult to upgrade perl with rpm, it breaks things). so,

Re: Help with Bayes auto-learn

2005-05-13 Thread wolfgang
In an older episode (Friday 13 May 2005 08:38), Geoff Sweet wrote: > I would like to enable the Bayes system with auto-learning. I thought > that I had my config setup correctly but apparently I don't. My config > looks like this: > > ## > # How we want to modify the email > rewrite_he

RE: Help with Bayes auto-learn

2005-05-13 Thread George Breahna
I can swear I saw this question in at least 20 different messages, not to mention the website I really recommend you research your question before asking it. autolearn=no means that it didn't 'learn' this message. Other possible states are 'spam, 'ham' and ... 'DISABLED' If autolearn were to be