Re: www.rulesemporium.com unreachable

2005-07-22 Thread Chris Thielen
wolfgang wrote: Hi, http connections to www.rulesemporium.com are timing out here. Maybe someone in charge is reading this and can fix it ... regards, wolfgang There seems to be an issue with the filesystem on that box. Email sent to the appropriate people, but it looks like a manual

Re: www.rulesemporium.com unreachable

2005-07-22 Thread Ed Kasky
At 12:58 PM Friday, 7/22/2005, wolfgang wrote -=> Hi, http connections to www.rulesemporium.com are timing out here. Maybe someone in charge is reading this and can fix it ... This seems to happen once in a a while... I wonder if it's ISP related? Ed Kasky ~ Randomly Generated Quote (

www.rulesemporium.com unreachable

2005-07-22 Thread wolfgang
Hi, http connections to www.rulesemporium.com are timing out here. Maybe someone in charge is reading this and can fix it ... regards, wolfgang

Verify using SARE updates

2005-07-22 Thread Curtis Vaughan
I used an update script from SARE (www.rulesemporium.com) and subscribed to the following lists: TRIPWIRE, EVILNUMBERS, SARE_RANDOM, SARE_FRAUD, SARE_ADULT, ANTIDRUG Now the update seems to work just fine. And I find the rules in /etc/ spamassassin. But how can be sure they are working? I mea

Re: behavior with amavisd-new-20030616-p10

2005-07-22 Thread Thomas Hochstein
Matt Kettler schrieb: > Amavis ONLY adds the x-spam-* headers when the score is above the "tag level" _AND_ when it's addressed to a domain amavisd-new considers local. Most probably you'll have to tweak you local_domains setting in amavisd-new. -thh

Re: Procmail for site wide usage

2005-07-22 Thread Kelson
Chris Barnes wrote: This is really the key - from a SA standpoint, the best you can do is mark the message as spam and let the MUA (Outlook) deal with putting things into the proper folders on the user's machine (in the .pst file). I don't know OL well enough, but I suspect that there is likel

Re: behavior with amavisd-new-20030616-p10 - SOLVED!

2005-07-22 Thread Jonathan Gonzalez
:-) Funny! I have been reading, quite quick :) and have found the error. Was a error of mine. I didn't populate a variable with my domains, because such variable indicates amavis to put or not put the X headers. The variable is @local_domains_acl = qw( .example.com .example2.com ); Once popu

Re: behavior with amavisd-new-20030616-p10

2005-07-22 Thread Matt Kettler
Matt Kettler wrote: > Amavis does it's own message tagging, and does not keep SA's markups. It > consults spamassassin merely as a scanner. > > I'm not an amavis expert, so I can't tell you how, but I can tell you that > it's > amavis you need to reconfigure if you want these added, as only amavi

Re: behavior with amavisd-new-20030616-p10

2005-07-22 Thread Matt Kettler
Jonathan Gonzalez wrote: > Hi, > > i would like to know if there's some special feature that needs to be > enabled/disabled in order to work 100% compliant with amavis. > > I'm my actual installation (Exim 4.50 + amavisd-new-20030616-p10 + > ClamAV 0.86 + SpamAssassin 3.0 on a Debian Sarge platfo

behavior with amavisd-new-20030616-p10

2005-07-22 Thread Jonathan Gonzalez
Hi, i would like to know if there's some special feature that needs to be enabled/disabled in order to work 100% compliant with amavis. I'm my actual installation (Exim 4.50 + amavisd-new-20030616-p10 + ClamAV 0.86 + SpamAssassin 3.0 on a Debian Sarge platform) the MTA passes the email to am

Re: Procmail for site wide usage

2005-07-22 Thread Chris Barnes
Mark Williams <[EMAIL PROTECTED]> wrote: > (Q) Given that this RH machine runs only POP3 (management will not > allow anything else) This is really the key - from a SA standpoint, the best you can do is mark the message as spam and let the MUA (Outlook) deal with putting things into the proper f

Re: Detecting ISO Encoded Subjects

2005-07-22 Thread Duane Hill
On Friday, July 22, 2005 at 12:32:34 PM, [EMAIL PROTECTED] confabulated: > A lot of my spam lately has had an ISO encoded subject line, like: > =?iso-8859-1?B?T2ZmaWNlIHNvZnR3YXJlIC0gNzUlIE9GRg==?= > Since none of my friends ever use ISO encoded subject lines, I > wanted to create a rule to flag

Detecting ISO Encoded Subjects

2005-07-22 Thread Joseph D. Wagner
A lot of my spam lately has had an ISO encoded subject line, like: =?iso-8859-1?B?T2ZmaWNlIHNvZnR3YXJlIC0gNzUlIE9GRg==?= Since none of my friends ever use ISO encoded subject lines, I wanted to create a rule to flags those messages. However, everything I've found indicates that Spamassassin tes

Re: URIDNSBL and subdomains

2005-07-22 Thread List Mail User
>... >On Thu, 21 Jul 2005, Loren Wilton wrote: > >> Sounds like an surbl problem if spamsite.com isn't listed. > >That's just an example I made up... :) >... Bad choice of example: spamsite. com is an actual "spamsite". The domain "example.com" is reserved for exactly this type of usage a

Re: Bayes poisoning ?

2005-07-22 Thread Loren Wilton
The best thing to do is probably throw the current database away and start over. As you seem to have several users, you should have bayes working again within a very few hours, or less. You should delete the current database, reset the scores to normal (and increase the bayes_99 score to somethin

Bayes poisoning ?

2005-07-22 Thread Ramprasad A Padmanabhan
Hi We are using Spamassassin + Postfix + Mailscanner on our SMTP servers. Of late I have noticed that a lot of ham mails are getting a high BAYES score. I have overriden bayes with lower scores in order to avoid false postives ( and possibly mail loss ) How do I de-poison the bayes database, a

Re: Procmail for site wide usage

2005-07-22 Thread Thomas Arend
Am Freitag, 22. Juli 2005 08:15 schrieb jdow: > There generally is no specific procmail log file. It is generally in one > of the mail log files in /var/log/. Yes. But you can create user user specific lof file with LOGFILE=$HOME/.procmail.log Thomas -- icq:133073900 http://www.t-arend.de pg

Re: URIDNSBL and subdomains

2005-07-22 Thread Loren Wilton
> OK, so that's supposed to happen. Is there any way to have the entire > host checked? I've seen a good volume of junk where the domain is clean, > but if I do a manual lookup on the entire hostname in the spam it is > indeed listed. I *suspect* what is happening here is that the domain isn't i