Correct use of 'spamassassin --report'?

Greetings again, I just upgraded my SA system and installed Razor. I have two e-mail addresses set up for spam and ham reporting. Both are sent to an mbox that is, twice an hour, shipped off to a script that runs sa-learn. When I installed Razor I modified the script to send the same messages t

[exim] RE: Removing message/rfc822 attachments to separate files

> -Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 26, 2005 10:55 PM > To: users@spamassassin.apache.org > Subject: Re: Removing message/rfc822 attachments to separate files > > If you could set up public ham and spam folders for your > users and ha

RE: Removing message/rfc822 attachments to separate files

> Mail::SpamAssassin::Message ? ;) > > You can also read through PerMsgStatus which has code to wrip > out an encapsulated message. Thanks. Right under my nose -- but better to feel silly than to have to re-invent the code. -- Herb Martin

Re: New open http redirector?

These people (adtech.de) call themselves (excuse any bad translation, all my fault). an "E-Mail solutions" and "on-line marketing" firm. It would seem that just like the nate. com case, the redirector is quite intentional and it would not be unlikely that the "abusers" are paying customers

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

> caution: that's quite a lot of speculation.   Yup.   Then again, I get paid specifically for making those kinds of speculations and being right about them a goodly percentage of the time, even in code I'm not familiar with.   I'll stand behind my workaround being functional until proven ot

Re: Please test sc2.surbl.org (and xs.surbl.org)

From: "Clay Irving" <[EMAIL PROTECTED]> > I added them yesterday, and I've had no hits. I am hitting other SURBLs: Did you restart spamd? {^_^}

Re: Removing message/rfc822 attachments to separate files

If you could set up public ham and spam folders for your users and have them drag the messages into those folders, and then harvest the folders using IMAP things would work with tools likely to be mostly found already lying around. Loren

Re: spamd blank lines after syslog entries

From: "Loren Wilton" <[EMAIL PROTECTED]> > > I was curious why spamd log entries always had an extra blank line > > after them. > > > > It looks like Sys::Syslog always does that so any perl script > > reporting to syslog via that mechanism has extra blank lines. (MacOS > > X 10.4.2). > > I would

Re: Removing message/rfc822 attachments to separate files

On Tue, Jul 26, 2005 at 09:21:25PM -0500, Herb Martin wrote: > While I will eventually be able to write a parser to > go through these and find the 'outer' Mime part marker, > skip over the Content headers of each message and then > save the following lines up to the next marker to a > separate fil

Re: Please test sc2.surbl.org (and xs.surbl.org)

On Mon, Jul 25, 2005 at 09:13:38PM -0700, Jeff Chan wrote: > That will work, but it's technically incorrect since the > standalone lists sc2 and xs aren't bitmask-encoded, which is what > urirhssub is intended for. Standalone lists should be used with > urirhsbl, so correct, working rules for the

Removing message/rfc822 attachments to separate files

When forwarding a batch of missed spam (or ham) from Outlook back to SpamAssassin the best way seems to be for our users to select more than a single message, and use the menu: Action->Forward which puts them all in as attachments. (Selecting a single item just does a normal forward.) While I wi

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 caution: that's quite a lot of speculation. I would suggest checking first to see if the crash doesn't happen if there's > 1 eval call involved, if there's multiple procedures, if SpamAssassin isn't in the picture etc.; there are several possible work

Re: spamd blank lines after syslog entries

That is what I thought, but I test with a simple perl script to call syslog with a string with no terminating new line and it does indeed add two. I also looked at the spamd code that calls syslog and it strips off any trailing newlines. I guess it is just built into Sys::Syslog. On Jul 2

Re: spamd blank lines after syslog entries

> I was curious why spamd log entries always had an extra blank line > after them. > > It looks like Sys::Syslog always does that so any perl script > reporting to syslog via that mechanism has extra blank lines. (MacOS > X 10.4.2). I would guess, without looking at any code, that the syslog stuf

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

> The line in $evalstr that causes the stack fault is: > > if ($self->{conf}->{scores}->{q{WLS_URI_OPT_377}}) { > > Which is on line 21720 (out of ~30800 lines). From what I've gathered, each > rule in the .cf files results in 4 lines being strung together in $evalstr: > > if ($self->{conf}-

Re: New open http redirector?

Raymond Dijkxhoorn wrote: Hi! http://adserver.adtech.de/?adlink|2.0|340|436977|1|16|AdId=323398;BnId=1;link=target.com (where 'target.com' is the spammer site). Anybody know anything about this? I mailed their abuse dept but it seems they dont care. They are abuse by spammers by running a

Re: spamc doesn't add headers

Le lundi 25 Juillet 2005 11:28, Thomas Arend a écrit : > [...] > > But the problem is that in kmail(1.7.1) i don't know the name of the > > command 'spamc < spam > spam_marked_up' will not work. > > I read kmail documentation, and whatever i do it doesn't get this output. > > Now it's a kmail probl

spamd blank lines after syslog entries

I was curious why spamd log entries always had an extra blank line after them. It looks like Sys::Syslog always does that so any perl script reporting to syslog via that mechanism has extra blank lines. (MacOS X 10.4.2). Anyone know why or if there is a way to change that behavior? -- Steve Ma

Re: generating rule stats from spamd logs

From: "Justin Mason" <[EMAIL PROTECTED]> > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > jdow writes: > > From: "Chris Santerre" <[EMAIL PROTECTED]> > > > > > Do you mean this script? > > > > > > http://www.rulesemporium.com/programs/sa-stats.txt > > > > > > Note: It may be named the same a

Re: generating rule stats from spamd logs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jdow writes: > From: "Chris Santerre" <[EMAIL PROTECTED]> > > > Do you mean this script? > > > > http://www.rulesemporium.com/programs/sa-stats.txt > > > > Note: It may be named the same as sa-stats.pl, but it is different. Per > > rule based. > > >

RE: New open http redirector?

> From: Raymond Dijkxhoorn [mailto:[EMAIL PROTECTED] > > > http://adserver.adtech.de/?adlink|2.0|340|436977|1|16|AdId=323398;BnId > > =1;link=target.com (where 'target.com' is the spammer site). > > Anybody know anything about this? > > I mailed their abuse dept but it seems they dont care. They

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

From: "Justin Mason" <[EMAIL PROTECTED]> > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > John Narron writes: > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > > -BEGIN PGP SIGNED MESSAGE- > > > Hash: SHA1 > > > > > > > > > ah, so it does. >

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

From: "John Narron" <[EMAIL PROTECTED]> > Skipping ahead even more, and after using the perl debugger, I traced the > fault to line 1958 of Mail::SpamAssassin::PerMsgStatus > > DB<4> v > 1955EOT > 1956 > 1957 # and run it. > 1958==> eval $evalstr; > 1959: if ($@) { > 1960:

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Narron writes: > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, July 26, 2005 3:37 PM > > To: [EMAIL PROTECTED] > > Cc: users@spamassassin.apache.org > > Subject: Re: SpamAssassin, FreeBSD,

Re: New open http redirector?

From: "Kai Schaetzl" <[EMAIL PROTECTED]> > Duncan Hill wrote on Tue, 26 Jul 2005 21:00:53 +0100: > > > I know I've reported ~20 into Spamcop, and Spamcop has indicated 'sent mail to > > [EMAIL PROTECTED]'. Haven't actually tested it recently to see if it still > > works. > > It does. I sent a mai

Re: generating rule stats from spamd logs

From: "Chris Santerre" <[EMAIL PROTECTED]> > Do you mean this script? > > http://www.rulesemporium.com/programs/sa-stats.txt > > Note: It may be named the same as sa-stats.pl, but it is different. Per rule > based. > > Another Dallas miracle! Oh? Er, how does it determine if a message was ham or

Re: spamd not keeping up

nothing jumped out at me from the log. I don't remember if it stopped mid-message or seemed to be waiting for the next one. I'll try to check the next time it happens.I've never fed it any messages.  pretty sure the checking log says autolearn=no.  however, it's possible I need to actively

SARE Whitelist candidate

whitelist_from_rcvd [EMAIL PROTECTED] fidelity2.m0.net Fidelity Investment's Newsletters {^_^}

Russian Spamassassin

We sometimes joke about the grisly nature of our favorite software's name, but apparently someone's finally made it real: Russian Media Hails Spammer’s Murder Anton Nossik MosNews.Com Russia’s most (in)famous spammer, Vardan Kushni

RE: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 26, 2005 3:37 PM > To: [EMAIL PROTECTED] > Cc: users@spamassassin.apache.org > Subject: Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my! > > -BEGIN PGP SIGNED MESSAGE- > Hash:

Re: New open http redirector?

Duncan Hill wrote on Tue, 26 Jul 2005 21:00:53 +0100: > I know I've reported ~20 into Spamcop, and Spamcop has indicated 'sent mail > to > [EMAIL PROTECTED]'. Haven't actually tested it recently to see if it still > works. It does. I sent a mail to them in German now. Let's see. Kai -- Kai

Re: New plugin - asking for feedback

Yes, you're right. The advantage - at least for me - is that, after having set up rbldnsd, I can easily access the data I get from the spamtrap addresses we run. With razor you can't run your own server, and if you're actually allowed to use the client if you use SpamAssassin on a commercial ba

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ah, so it does. http://article.gmane.org/gmane.mail.spam.spamassassin.general/70459 so it couldn't be fixed with a simple 'ulimit -s unlimited'? - --j. John Narron writes: > We've already determined that it is a stack-size problem, see the original

Re: New open http redirector?

Hi! http://adserver.adtech.de/?adlink|2.0|340|436977|1|16|AdId=323398;BnId=1;link=target.com (where 'target.com' is the spammer site). Anybody know anything about this? I mailed their abuse dept but it seems they dont care. They are abuse by spammers by running a open redirector. This is go

Re: New open http redirector?

On Tuesday 26 July 2005 18:13, David B Funk wrote: > Got a spam that contains what appears to be an open http > redirector that is new to me: > http://adserver.adtech.de/?adlink|2.0|340|436977|1|16|AdId=323398;BnId=1;li >nk=target.com (where 'target.com' is the spammer site). > Anybody know anythin

Re: New plugin - asking for feedback

>> >> On Tue, Jul 26, 2005 at 03:27:09PM +0200, Dirk Bonengel wrote: >> > Given a mail that has at least 16 spaces in it, NiXSpam does the followin= >> g: >> > - reduce all duplicate occurences of [:space:]-chars to just one >> > - remove all characters of the [:graph:]-class >> >> Since [:graph:

RE: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

We've already determined that it is a stack-size problem, see the original e-mail John Narron| "Sacrifice, they always say Network Administration | Is a sign of nobility CDS/CDSinet, LLC | But where does one draw the line http://www.cdsinet.net | In the face of injury?" (660)

Re: New plugin - asking for feedback

On Tue, Jul 26, 2005 at 03:27:09PM +0200, Dirk Bonengel wrote: > Given a mail that has at least 16 spaces in it, NiXSpam does the following: > - reduce all duplicate occurences of [:space:]-chars to just one > - remove all characters of the [:graph:]-class Since [:graph:] is anything "printable" e

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 That sounds like a "ulimit" problem. Check your process limits... - --j. John Narron writes: > The line in $evalstr that causes the stack fault is: > > if ($self->{conf}->{scores}->{q{WLS_URI_OPT_377}}) { > > Which is on line 21720 (out of ~30800

Re: RBL lookup failures

Hello all, Quick answer if you're running FreeBSD and using Net::DNS from ports... Install the p5-IO-INET6-2.01 port or package. I ran into this, and I checked with Daniel and it worked for him as well. It appears someone missed that as a dependancy on the latest Net::DNS port. Charles On

RE: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

The line in $evalstr that causes the stack fault is: if ($self->{conf}->{scores}->{q{WLS_URI_OPT_377}}) { Which is on line 21720 (out of ~30800 lines). From what I've gathered, each rule in the .cf files results in 4 lines being strung together in $evalstr: if ($self->{conf}->{scores}->{

RE: generating rule stats from spamd logs

> -Original Message- > From: Charles Sprickman [mailto:[EMAIL PROTECTED] > Sent: Monday, July 25, 2005 10:46 PM > To: users@spamassassin.apache.org > Subject: generating rule stats from spamd logs > > > Hi, > > Anyone aware of anything that can parse a day's spamd logs > and then give

New open http redirector?

Got a spam that contains what appears to be an open http redirector that is new to me: http://adserver.adtech.de/?adlink|2.0|340|436977|1|16|AdId=323398;BnId=1;link=target.com (where 'target.com' is the spammer site). Anybody know anything about this? -- Dave Funk

Re: SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

> I find out where in $evalstr that the Bus Error > occurs. Removing the offending line, and everything after results with a > successful eval call. Hum. It might be mildly interesting to know what the line is that causes the stack fault. I assume this is generated code, and possibly a slight c

SpamAssassin, FreeBSD, Perl 5.8.7, bus errors, oh my!

I've searched the archives, loosely, and I haven't really seen this issue discussed much, if at all, but I know several people have been having this problem, including myself. So, I took it upon myself to find the issue and come up with answer. The situation started when Perl 5.8.7 was released

Re: rbl checking

Frank M. Cook wrote: > I just posted a message about spamd not keeping up. I'm asking this > question separately to keep the answers distinct. > > my spamd hasn't been keeping up and so I turned on rbl checking ahead of > spamassassin. that reduced the load but it also seems to be catching more

Re: New plugin - asking for feedback

Hi Dirk, Dirk Bonengel wrote: Hi all, maybe this list can give me some feedback on a plugin I've written a few weeks ago. The Plugin is based on parts of the 'NiXSpam' project by the German IT magazine iX. NiXSpam is an elaborate procmail recipe (for more info see http://www.heise.de/ix/ni

rbl checking

I just posted a message about spamd not keeping up. I'm asking this question separately to keep the answers distinct. my spamd hasn't been keeping up and so I turned on rbl checking ahead of spamassassin. that reduced the load but it also seems to be catching more spam than spamassassin was on i

Re: spamd not keeping up

Frank M. Cook wrote: I run spamd on a machine of it's own. the spamc is on a separate windows computer (actually it's winspamc). it's version 3 of spamd. everything was working fine until a week or so ago and then things started to back up regularly. I'd look in the morning and thousands of f

spamd not keeping up

I run spamd on a machine of it's own. the spamc is on a separate windows computer (actually it's winspamc). it's version 3 of spamd. everything was working fine until a week or so ago and then things started to back up regularly. I'd look in the morning and thousands of files were backed up on

Re: Ham & spam addresses

On Tuesday, July 26, 2005 at 1:57:32 PM, [EMAIL PROTECTED] confabulated: > If I was to create an account for spam and an account for ham - for our > clients to forward mail to in order to train our bayes db, is forwarding > enough? Meaning - do they need to take steps to forward as an > attachmen

Re: Ham & spam addresses

Matthew Yette wrote: If I was to create an account for spam and an account for ham - for our clients to forward mail to in order to train our bayes db, is forwarding enough? Meaning - do they need to take steps to forward as an attachment, then I have to save the attachment to a folder and then l

Re: IMAP problems on MS Exchange

Jeffrey N. Miller said: > I'm experiencing problems with the imap-sa-learn.pl script but it may be more > because my Exchange server. I've started the IMAP virtual server but clients > can't > recognize it as an IMAP server? What am I missing? I've never configured an > IMAP > server and there

Ham & spam addresses

If I was to create an account for spam and an account for ham - for our clients to forward mail to in order to train our bayes db, is forwarding enough? Meaning - do they need to take steps to forward as an attachment, then I have to save the attachment to a folder and then learn on that, or will a

IMAP problems on MS Exchange

I'm experiencing problems with the imap-sa-learn.pl script but it may be more because my Exchange server.  I've started the IMAP virtual server but clients can't recognize it as an IMAP server?  What am I missing?  I've never configured an IMAP server and there is not much documentation on i

New plugin - asking for feedback

Hi all, maybe this list can give me some feedback on a plugin I've written a few weeks ago. The Plugin is based on parts of the 'NiXSpam' project by the German IT magazine iX. NiXSpam is an elaborate procmail recipe (for more info see http://www.heise.de/ix/nixspam/ - it's German, though), an

RE: RBL lookup failures

Daniel O'Connor wrote: > Hi, > I am using Spam Assassin 3.0.4 called from MIMEDefang 2.51 on > a FreeBSD > 4.9 box with perl 5.6.2 and I get the following messages in > my maillog on occasion.. > > Jul 26 12:43:36 cain sm-mta[81183]: j6Q3DUp1081183: > from=<[EMAIL PROTECTED]>, size=4221, > class=-