RE: Win32 Vircom Agent?

2005-07-06 Thread Steven Manross
My experience with VopMail (earlier form of ModusMail) was that I needed to control releasing the message to the user's mailbox after the batch finished in the script. With that said, I think your "copy %1 %2" should be modified so that you are working on a copy of the file that does not live in y

Re: How to log negatives as well?

2005-07-06 Thread JamesDR
Felix Natter wrote: I guess *that* makes it impossible? Is there any other way to achieve this? that depends a lot on what /bin/spamcheck does. Where did it come from? Oh, I thought it was part of spamassassin. Now I realize it was installed by the webserver management software vam

Re: SORBS_DUL and NJABL_DUL

2005-07-06 Thread Rick Macdougall
Daryl C. W. O'Shea wrote: [EMAIL PROTECTED] wrote: Received: from host-212-158-194-14.bulldogdsl.com (HELO phoenix.example.com) (212.158.194.14) by secure.example.name with (DHE-RSA-AES256-SHA encrypted) SMTP; 1 Jul 2005 10:00:52 +0100 What SMTP service generates this header? Hi Daryl

Re: SORBS_DUL and NJABL_DUL

2005-07-06 Thread Daryl C. W. O'Shea
[EMAIL PROTECTED] wrote: Received: from host-212-158-194-14.bulldogdsl.com (HELO phoenix.example.com) (212.158.194.14) by secure.example.name with (DHE-RSA-AES256-SHA encrypted) SMTP; 1 Jul 2005 10:00:52 +0100 What SMTP service generates this header? phoenix.example.com is a machine NATte

Re: -u flag problem | spamassassin (spamd) | vpopmail | qmail-scanner-queue

2005-07-06 Thread [EMAIL PROTECTED]
On Wed, 06 Jul 2005 04:16:26 +0200, Matt Kettler <[EMAIL PROTECTED]> wrote: At 08:49 PM 7/5/2005, Bjoern Olausson wrote: Qmail-scanner-queu semms not to submitt the -u flag to spamd. So if I run spamd with the "-v -u vpopmail" option I get the following error: check your settings for the vpop

Win32 Vircom Agent?

2005-07-06 Thread Jerry
I have been having a problem with the simple batch file that I use for my mail agent with Vircom's ModusMailL. The batch is this: (%1 being the message name of the file and %2 being the emailbox name) --- copy %1 %2 @call spamassassin -e -D <%2> %1 --- Does anyone have a better working batch

Re: surbl miss

2005-07-06 Thread mouss
Theo Van Dinter wrote: On Wed, Jul 06, 2005 at 12:18:32PM +0200, mouss wrote: In fact, the problem seems with quoted-printable, not with the redirection. here is an example (reduced to the minimum, and with munged URI). Actually it has nothing to do with quoted-printable. The spammer put i

RE: How can I correctly detect these spams?

2005-07-06 Thread Bret Miller
> -Original Message- > From: Thomas Booms [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 06, 2005 2:59 PM > To: users@spamassassin.apache.org > Subject: How can I correctly detect these spams? > > Hi all, > > I have set all BAYES tests to default values and put in the > $GLOBAL all SOR

How can I correctly detect these spams?

2005-07-06 Thread Thomas Booms
Hi all, I have set all BAYES tests to default values and put in the $GLOBAL all SORBS test in my users database. But since the last hours I got these following listed spams through without tagging as spam: From - Wed Jul 6 23:41:18 2005 X-UIDL: 1120671712.M917383P13835051595651377415.hos

Re: Question on 3.1.0 mass-checks

2005-07-06 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 07/06/2005 04:02:34 PM: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Andy Jezierski writes: > > I'm running the mass-checks on my corpus and am noticing that I'm getting > > the same errors I reported in bug 4115. > > > > Will the results be valid? Or sho

Re: Question on 3.1.0 mass-checks

2005-07-06 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andy Jezierski writes: > I'm running the mass-checks on my corpus and am noticing that I'm getting > the same errors I reported in bug 4115. > > Will the results be valid? Or should I not bother? I don't think it's 4115 -- 4415 looks more likely. I

Question on 3.1.0 mass-checks

2005-07-06 Thread Andy Jezierski
I'm running the mass-checks on my corpus and am noticing that I'm getting the same errors I reported in bug 4115. Will the results be valid? Or should I not bother? Thanks Andy

Re: FW: Strange Rules Du Jour error

2005-07-06 Thread Chris Thielen
Hi Dave, What os are you on and what version of curl do you have installed? [EMAIL PROTECTED]:~$ curl --version curl 7.13.2 (i386-pc-linux-gnu) libcurl/7.13.2 OpenSSL/0.9.7e zlib/1.2.2 libidn/0.5.13 Protocols: ftp gopher telnet dict ldap http file https ftps Features: IDN IPv6 Largefile NTL

FW: Strange Rules Du Jour error

2005-07-06 Thread Dave Duffner - PSCGi
Greetings, Sent this to the MailScanner List, didn't realize my subscription to the SA List had taken a hike for some reason! Anyone with a clue, I'm all ears! > > > Ok, > > > > > > Determined Curl Error 7, Socket Error 110 to > > > be a failure to connect to the 'Host' to r

Re: Autolearn problem

2005-07-06 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 it looks like the mutex might not be respecting multiple uids and bayes_file_mode as in bug 4161. doh. btw, the mutex file is intended to be long-lived. See Mail::SpamAssassin::Conf for documentation on that (iirc). - --j. Joe Borg writes: > Hi, >

Re: SPF Checks

2005-07-06 Thread Brian Taber
Random email that was forwarded to the customers Exchange server.. no way to debug... I just happened to notice it later... The biggest thing is I see the HELO setup on mail servers incorrectly all the time, I didn't think SPF had anything to do with HELO... > Brian Taber wrote: >> Hmmm... A

Re: surbl miss

2005-07-06 Thread Theo Van Dinter
On Wed, Jul 06, 2005 at 12:18:32PM +0200, mouss wrote: > In fact, the problem seems with quoted-printable, not with the > redirection. here is an example (reduced to the minimum, and with munged > URI). Actually it has nothing to do with quoted-printable. The spammer put in an invalid HTML tag:

Re: How to log negatives as well?

2005-07-06 Thread Felix Natter
> >I guess *that* makes it impossible? Is there any other way > to achieve > >this? > > that depends a lot on what /bin/spamcheck does. Where did it > come from? Oh, I thought it was part of spamassassin. Now I realize it was installed by the webserver management software vamsys. It is a m

Re: X-Mailer: Microsoft Outlook, Build 10.0.2616 --> scores 3.9

2005-07-06 Thread Loren Wilton
Perhaps it is causing fps because of something else in your mail path. For instance, if you have a virus scanner that inserts oddly-formatted Received: headers this sort of rule will often end up triggering, since you have managed to reproduce a typical spammer indication, presumably unintentional

Re: How to log negatives as well?

2005-07-06 Thread Matt Kettler
At 08:16 AM 7/6/2005, Felix Natter wrote: > What tool are you using to call SA? I am using qmail, using a .qmail-file: |/bin/spamcheck [EMAIL PROTECTED] /home/m2004001/popuser/ldc.de/felix.natter/Maildir/ I guess *that* makes it impossible? Is there any other way to achieve this? that depend

RE: Starting SA with Procmail

2005-07-06 Thread Chris Santerre
Or you could use user aliases to local procmail scripts, and when the scripts are done, they simply forward the email to the internal server. Works great. Chris Santerre System Admin and SARE/URIBL Ninja http://www.rulesemporium.com http://www.uribl.com >-Original Message- >From: Greg

Re: Still need to work on Mail SpamAssassin 3.1.0

2005-07-06 Thread Andy Jezierski
The Doctor <[EMAIL PROTECTED]> wrote on 07/05/2005 07:41:30 PM: > Spam Assassin 3.0.4 works with milter-spamc 0.25, smf-spamd and MailScanner > Current. > > Spam Assassin 3.1.0 only works MailScanner Current less than 10% . > > How can I help to determine where the source of the problem is? >  

RE: X-Mailer: Microsoft Outlook, Build 10.0.2616 --> scores 3.9

2005-07-06 Thread Philipp Snizek
> > pts rule name description > > -- > > -- > > [..snip..] > > 3.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS > > Outlook > > [..snip..] > > > > > > When changing X-Mailer: Microsoft Outlo

Re: How to log negatives as well?

2005-07-06 Thread Kai Schaetzl
You should have answered Matt's question. F.i. if you were using MailScanner and Mailwatch this wouldn't be a problem at all ... Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de & http://msie.winware.org

Re: Thai language mails false positive

2005-07-06 Thread Kai Schaetzl
wrote on Wed, 6 Jul 2005 15:49:30 +0800: > I'm using spamassassin 3.0.2 running on Linux. But I found that some > rules such as 'UNIQUE_WORDS' > is not applicable with Thai language and > it cause false positive on Thai mails. So how should I do? Is there > > another way to protect Thai languag

Re: More spam since upgrading

2005-07-06 Thread Kai Schaetzl
Steven Dickenson wrote on Wed, 6 Jul 2005 06:33:59 -0400: > That's probably what makes me a little paranoid about bayes, we run > it site wide so I'm always worried the database will go south PDQ. I think the decision on using user-specific or site-wide Bayes strongly depends on how much (man

Re: X-Mailer: Microsoft Outlook, Build 10.0.2616 --> scores 3.9

2005-07-06 Thread Christian Recktenwald
On Wed, Jul 06, 2005 at 02:07:39PM +0200, Philipp Snizek wrote: > Hi > > > pts rule name description > -- > -- > [..snip..] > 3.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS > Outlook > [..sn

Re: How to log negatives as well?

2005-07-06 Thread Felix Natter
> > I've got a question: from the docs I see this syntax: > > add_header { spam | ham | all } header_name string and on > my system > > I have: > > add_header all Status "_YESNO_, score=_SCORE_ required=_REQD_ > > tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_" > > > > But no headers

Re: SpamAssassin w/POP3 & SMTP outsourced e-mail server...

2005-07-06 Thread Paolo Cravero as2594
Jesse Shumaker wrote: Hi This looks good and I think I may try this perl module. It seems that it's geared towards a single workstation and not a network of machines. They say that you point your client to localhost, which means that each machine must have this installed. How are you guys run

X-Mailer: Microsoft Outlook, Build 10.0.2616 --> scores 3.9

2005-07-06 Thread Philipp Snizek
Hi pts rule name description -- -- [..snip..] 3.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook [..snip..] When changing X-Mailer: Microsoft Outlook, Build 10.0.2616 to X-Mailer: Micr

Re: How to log negatives as well?

2005-07-06 Thread JamesDR
Felix Natter wrote: I am experimenting with spamassassin (3.0.x) settings and for this purpose I would like to see why some messages were not recognized as spam (which tests matched and how many points total), just like the information I get to see for positives. Is there a way to achieve this

Re: How to log negatives as well?

2005-07-06 Thread Felix Natter
> I am experimenting with spamassassin (3.0.x) settings and for > this purpose I would like to see why some messages were not > recognized as spam (which tests matched and how many points > total), just like the information I get to see for positives. > Is there a way to achieve this? I've got

RE: Autolearn problem

2005-07-06 Thread Joe Borg
Hi, Here is some relevant info: 1. this is a site-wide install. I.e. all users have the same local.cf etc. 2. spamd seems to be running as root. 3. I found this site; I don't know whether this is my problem but I'll try: http://aspn.activestate.com/ASPN/Mail/Message/spamassassin-dev/2507226 4. User

RE: Autolearn problem

2005-07-06 Thread Sander Holthaus - Orange XL
> Hi, > These are the lines in my local.cf: > > bayes_path /home/sharedspam/.spamassassin/bayes > auto_whitelist_path /home/sharedspam/.spamassassin/auto-whitelist > bayes_file_mode 777 > auto_whitelist_file_mode 777 > lock_method flock 777 is rather insecure... What's the output of ls -al on

RE: Autolearn problem

2005-07-06 Thread Joe Borg
Hi, These are the lines in my local.cf: bayes_path /home/sharedspam/.spamassassin/bayes auto_whitelist_path /home/sharedspam/.spamassassin/auto-whitelist bayes_file_mode 777 auto_whitelist_file_mode 777 lock_method flock Except for the last line, the others were also present for my 2.63 config an

Re: More spam since upgrading

2005-07-06 Thread Steven Dickenson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Jul 6, 2005, at 12:44 AM, jdow wrote: OK OK - I made it 4.999 just for you. {^_-} Thanks, I'll sleep better now knowing this... :-P I was under the impression you made BAYES_99 worth 99 points. 5 points for bayes isn't terrible, provided yo

Re: Still need to work on Mail SpamAssassin 3.1.0

2005-07-06 Thread Kai Schaetzl
The Doctor wrote on Tue, 5 Jul 2005 18:41:30 -0600: > Spam Assassin 3.1.0 only works MailScanner Current less than 10% . What do you mean by that? MailScanner latest plus SA 3.1.0-pre-something works. No problems at all. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet S

Re: Autolearn problem

2005-07-06 Thread crisppy fernandes
On 7/6/05, Joe Borg <[EMAIL PROTECTED]> wrote: > Hi, > I've tried moving the file. What happens is that a new one is created; > usually belonging to a different user on the system and then, that get This is something strange. > stuck. In other words the problem keeps on reoccurring. What all is

Re: surbl miss

2005-07-06 Thread mouss
Raymond Dijkxhoorn wrote: That domain is listed for quitte some time... URIBL_BLACK 3.00, URIBL_JP_SURBL 4.26, URIBL_OB_SURBL 3.21, URIBL_SBL 4.26, URIBL_WS_SURBL 1.46 But then again, without headers we also dont know much more then you do :) True! In fact, the problem seems with quoted-

RE: Autolearn problem

2005-07-06 Thread Joe Borg
Hi, I've tried moving the file. What happens is that a new one is created; usually belonging to a different user on the system and then, that get stuck. In other words the problem keeps on reoccurring. Joe -Original Message- From: crisppy fernandes [mailto:[EMAIL PROTECTED] Sent: 06 July

Fwd: Autolearn problem

2005-07-06 Thread crisppy fernandes
-- Forwarded message -- From: crisppy fernandes <[EMAIL PROTECTED]> Date: Jul 6, 2005 3:33 PM Subject: Re: Autolearn problem To: Joe Borg <[EMAIL PROTECTED]> On 7/6/05, Joe Borg <[EMAIL PROTECTED]> wrote: > Hi Crisppy, > Yes I've run that command and the output seems just fine. >

RE: Autolearn problem

2005-07-06 Thread Joe Borg
Hi Crisppy, Yes I've run that command and the output seems just fine. I've now noticed however that in my bayes directory there is a (strange) file called auto-whitelist.mutex. The file only has rw permissions for the user and the file seems to be created with the user and group of a given user on

Re: -u flag problem | spamassassin (spamd) | vpopmail | qmail-scanner-queue

2005-07-06 Thread [EMAIL PROTECTED]
On Wed, 06 Jul 2005 04:16:26 +0200, Matt Kettler <[EMAIL PROTECTED]> wrote: At 08:49 PM 7/5/2005, Bjoern Olausson wrote: Qmail-scanner-queu semms not to submitt the -u flag to spamd. So if I run spamd with the "-v -u vpopmail" option I get the following error: check your settings for the vp

RE: Autolearn problem

2005-07-06 Thread Joe Borg
Hi Daryl, Even though the Argument problem is now gone, I'm still getting Autolearn=fail in my spam messages. I'm under the impression that autolearning is turned on by default is this correct? What else could be the issue? Thanks, Joe -Original Message- From: Joe Borg [mailto:[EMAIL PRO

Re: Re: surbl miss

2005-07-06 Thread Raymond Dijkxhoorn
Hi! 3.0.4 finds it fine in my test. As usual, run with -D: debug: uri found: http://ar.atwola.com/redir/B0/NIGMELhw-OhjdGRhu9krS8hjdsxhHJMd7aZyBahYZOlB1rRxxNchtg$$/http://medsavenow.com/?name=revup debug: uri found: http://medsavenow.com/?name=revup The problem is likely that when the message

Re: Still need to work on Mail SpamAssassin 3.1.0

2005-07-06 Thread Raymond Dijkxhoorn
Hi! Spam Assassin 3.0.4 works with milter-spamc 0.25, smf-spamd and MailScanner Current. Spam Assassin 3.1.0 only works MailScanner Current less than 10% . How can I help to determine where the source of the problem is? I have no idea what you are talking about. Are you talking about MailSc

Thai language mails false positive

2005-07-06 Thread r.wongwisarnsee
Hi! I'm using spamassassin 3.0.2 running on Linux. But I found that some rules such as 'UNIQUE_WORDS' is not applicable with Thai language and it cause false positive on Thai mails. So how should I do? Is there another way to protect Thai language to hit some rules while the English messages ca

RE: Autolearn problem

2005-07-06 Thread Joe Borg
Thanks Daryl, Solved the problem. Had use_auto_whitelist with no Boolean. Joe -Original Message- From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] Sent: 06 July 2005 09:41 To: Joe Borg Cc: users@spamassassin.apache.org Subject: Re: Autolearn problem Joe Borg wrote: > Hi, > I've just upg

Re: Autolearn problem

2005-07-06 Thread Daryl C. W. O'Shea
Joe Borg wrote: Hi, I've just upgraded from Spamassassin 2.63 to 3.04 (deleted old bayes since I wanted new bayes). I've now noticed that in the message header I'm getting autolearn=failed. Running spamassassin --lint gives the following result: Argument "" isn't numeric in numeric eq (==) at /u

Autolearn problem

2005-07-06 Thread Joe Borg
Hi, I've just upgraded from Spamassassin 2.63 to 3.04 (deleted old bayes since I wanted new bayes). I've now noticed that in the message header I'm getting autolearn=failed. Running spamassassin --lint gives the following result: Argument "" isn't numeric in numeric eq (==) at /usr/lib/perl5/site_