Re: spamd wont start with bayesd on mysql

2005-07-28 Thread mouss
[EMAIL PROTECTED] wrote: Can't locate Mail/Spamassassin/BayesStore/SQL.pm in @INC (@INC contains: did you install the perl DBD-mysql module?

Re: Please test sc2.surbl.org (and xs.surbl.org)

2005-07-28 Thread Clay Irving
On Tue, Jul 26, 2005 at 08:58:30PM -0700, jdow wrote: >> I added them yesterday, and I've had no hits. I am hitting other SURBLs: > > Did you restart spamd? Yes. My "no hits" is attributed to bad analysis. :) XS 2,698 times JP 12,251 times XS2 4,733 times -- Clay Irving <[EMAIL PROTECT

Re: RulesDuJour - position of rulesets in config file

2005-07-28 Thread Chris Thielen
Hiya Thijs, Thijs Koetsier | Exception IT wrote: Hi all, I'm using spamassassin 3.0.4-2 on Debian 3.1 with Exim4, together with RulesDuJour. I have a question about the last, which I just installed for the first time. I believe it's a fairly beginners-one, which I hope someone can help me with

Re: Forcing autolearn

2005-07-28 Thread Robert Menschel
Hello Magnus, Thursday, July 28, 2005, 12:06:20 AM, you wrote: MH> Is there a way to say to SA that "if this custom rule of mine triggers, MH> then the mail *is* spam and you have to autolearn it as such.", except MH> looking for MY_CUSTOM_RULE in X-Spam-Status afterwards and feeding the MH> mail

RE: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Rob McEwen
Frank M. Cook asked: >>are you calling the rbl with a www dot? should be sbl-xbl.spamhaus.org. I think you misunderstood me. In my original e-mail, I thought I made it clear that the RBL access was working just fine. The problem I was referring to was not being able to access their web site in a

RulesDuJour - position of rulesets in config file

2005-07-28 Thread Thijs Koetsier | Exception IT
Hi all, I'm using spamassassin 3.0.4-2 on Debian 3.1 with Exim4, together with RulesDuJour. I have a question about the last, which I just installed for the first time. I believe it's a fairly beginners-one, which I hope someone can help me with. In the config-file of rulesdujour (/etc/rulesduj

Re[4]: autolearn

2005-07-28 Thread Robert Menschel
Hello Frank, Thursday, July 28, 2005, 2:09:52 PM, you wrote: FMC> it's getting more complicated.  we didn't find any bayes FMC> files at all. now I'm seeing some entries in the log saying FMC> autolearn=no and others saying =unavailable.  they almost FMC> alternate although perhaps the difference

Re: Trying to id spam

2005-07-28 Thread jdow
Please check with the ClamAV people. There is absolutely no way to get SpamAssassin to delete emails or even drop them. {^_^} - Original Message - From: "Dr Robert Young" <[EMAIL PROTECTED]> > Have a virus scanner that correctly identified the email as having a > virus attachment, but

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread List Mail User
ping always works (14-18ms). telnet to port 80 comes and goes, as does hping to port 80. Paul Shupak [EMAIL PROTECTED] P.S. Just reached it again, but all links timed out and telnet began failing again. Also, I have multiple pipes (though most end up in a single SBC ATM t

Re: Trying to id spam

2005-07-28 Thread Dr Robert Young
Have a virus scanner that correctly identified the email as having a virus attachment, but it still passed along the "cleaned" (ie the attachment was removed) email. I was asked if there was a way to "trash" the resulting "cleaned" email... On Jul 28, 2005, at 4:13 PM, Rick Macdougall wr

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Frank M. Cook
are you calling the rbl with a www dot? should be sbl-xbl.spamhaus.org. Frank M. Cook Association Computer Services, Inc. http://www.acsplus.com

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread jdow
Ah - now working - it seems they may be overloaded or something. {^_^} - Original Message - From: "Evan Platt" <[EMAIL PROTECTED]> > -Original Message- > From: "Rob McEwen" <[EMAIL PROTECTED]> > To: > Date: Thu, 28 Jul 2005 18:43:38 -0400 > Subject: I Can't Access www.spamhaus.o

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread jdow
From: "Raymond Dijkxhoorn" <[EMAIL PROTECTED]> > Hi! > > > > > Is it just me, or are others having the same problems? Also, anyone know > > why? > > > > (BTW - their RBLs seem to be working just fine) > > > > No, working just fine here. > > bye, > Raymond. On another paw it's dead here. {^_^}

Re: autolearn

2005-07-28 Thread Kai Schaetzl
Frank M. Cook wrote on Thu, 28 Jul 2005 16:09:52 -0500: > now I'm seeing some entries in the log > saying autolearn=no Frank, this just means that the score isn't in the range to autolearn it. It doesn't mean disabled. The other one (unavailable) is more serious, though ... Kai -- Kai Schät

RE: Trying to id spam

2005-07-28 Thread Herb Martin
> -Original Message- > From: David B Funk [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 28, 2005 6:15 PM > To: users@spamassassin.apache.org > Subject: Re: Trying to id spam > > On Thu, 28 Jul 2005, Rick Macdougall wrote: > > > Dr Robert Young wrote: > > > > > We had a very short spam

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Kelson
Magnus Holmgren wrote: Curiously enough, It don't seem to be able to connect either. It responds to pings but not to connections to port 80/tcp. Here's a traceroute: I couldn't get at it initially (same thing - ping but no HTTP), but it's responding now. Maybe they just had a server glitch?

Re: Trying to id spam

2005-07-28 Thread David B Funk
On Thu, 28 Jul 2005, Rick Macdougall wrote: > Dr Robert Young wrote: > > > We had a very short spam come in (actually it had a virus attachment > > named "updated-password.zip"). There is not much to grab onto [snip..] > > attachment in the header/body of the email to ID this (see below). > > Any

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Magnus Holmgren
Rob McEwen wrote: > RE: I can't Access www.spamhaus.org > > Is it just me, or are others having the same problems? Also, anyone know > why? > > (BTW - their RBLs seem to be working just fine) > > Rob McEwen > PowerView Systems > Curiously enough, It don't seem to be able to connect either. It r

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Evan Platt
-Original Message- From: "Rob McEwen" <[EMAIL PROTECTED]> To: Date: Thu, 28 Jul 2005 18:43:38 -0400 Subject: I Can't Access www.spamhaus.org, anyone know why??? > RE: I can't Access www.spamhaus.org > > Is it just me, or are others having the same problems? Also, anyone > know > why? Ca

Re: I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Raymond Dijkxhoorn
Hi! Is it just me, or are others having the same problems? Also, anyone know why? (BTW - their RBLs seem to be working just fine) No, working just fine here. bye, Raymond.

I Can't Access www.spamhaus.org, anyone know why???

2005-07-28 Thread Rob McEwen
RE: I can't Access www.spamhaus.org Is it just me, or are others having the same problems? Also, anyone know why? (BTW - their RBLs seem to be working just fine) Rob McEwen PowerView Systems

Re: Re[2]: autolearn

2005-07-28 Thread Frank M. Cook
it's getting more complicated.  we didn't find any bayes files at all. now I'm seeing some entries in the log saying autolearn=no and others saying =unavailable.  they almost alternate although perhaps the difference is a function of the scan result.   the bottom line problem remains that spa

Re: what to sa-learn, poisoning

2005-07-28 Thread Loren Wilton
> I assume everyone else sees spam sneak through that contains a "spammy" > subject (usually mentioning drugs with some mis-spellings/obfu), an > attached image that apparently has the actual spam "message" in it, then > some text that is very hammy in it's content. I tend to not see a lot of thes

RE: Trying to id spam

2005-07-28 Thread Herb Martin
From: Andy Jezierski [mailto:[EMAIL PROTECTED] Dr Robert Young <[EMAIL PROTECTED]> wrote on 07/28/2005 03:09:48 PM:>> We had a very short spam come in (actually it had a virus attachment>> named "updated-password.zip"). There is not much to grab onto >> [snip]>Don't use SA for trapping viru

Re: what to sa-learn, poisoning

2005-07-28 Thread Matt Kettler
Charles Sprickman wrote: > Hello, > > I'm not seeing it in the FAQ/wiki, but I've missed things in there > before, so I thought I'd ask a quick question here. > > I assume everyone else sees spam sneak through that contains a "spammy" > subject (usually mentioning drugs with some mis-spellings/ob

what to sa-learn, poisoning

2005-07-28 Thread Charles Sprickman
Hello, I'm not seeing it in the FAQ/wiki, but I've missed things in there before, so I thought I'd ask a quick question here. I assume everyone else sees spam sneak through that contains a "spammy" subject (usually mentioning drugs with some mis-spellings/obfu), an attached image that appare

Re: Trying to id spam

2005-07-28 Thread Andy Jezierski
Dr Robert Young <[EMAIL PROTECTED]> wrote on 07/28/2005 03:09:48 PM: > We had a very short spam come in (actually it had a virus attachment > named "updated-password.zip"). There is not much to grab onto > [snip] Don't use SA for trapping viruses, get a virus scanner.  ClamAV comes to mind. An

Re: Trying to id spam

2005-07-28 Thread Rick Macdougall
Dr Robert Young wrote: We had a very short spam come in (actually it had a virus attachment named "updated-password.zip"). There is not much to grab onto Content analysis details: (1.5 points, 5.0 required) pts rule name description -- ---

Trying to id spam

2005-07-28 Thread Dr Robert Young
We had a very short spam come in (actually it had a virus attachment named "updated-password.zip"). There is not much to grab ontoContent analysis details:   (1.5 points, 5.0 required)     pts rule name  description  -- --

RE: how to use sa-learn in a mail gateway?

2005-07-28 Thread Matthew.van.Eerde
Carlos Mario Mora Restrepo wrote: > I have a mail gateway with postfix filtering the messages to a MS > Exchange Server; but i dont know how to train the sa filters, because > the mails never are deliveried to the postfix server; or are passed > to exchange, or are forwarder to an external account

how to use sa-learn in a mail gateway?

2005-07-28 Thread Carlos Mario Mora Restrepo
Hi I have a mail gateway with postfix filtering the messages to a MS Exchange Server; but i dont know how to train the sa filters, because the mails never are deliveried to the postfix server; or are passed to exchange, or are forwarder to an external account. I dont have mailboxes in the postfi

Global spamassassin Use

2005-07-28 Thread John D. Maag
I am looking for an easy way to use spamassassin for the entire site. I am having trouble with spamass and was wondering if I can have the following kind of stuff from an individual procmailrc in a global procmailrc file. :0fw: spamassassin.lock | /usr/bin/spamc -f # Mails with a score of 15 or

Re: Custom Rules

2005-07-28 Thread Matt Kettler
[EMAIL PROTECTED] wrote: > Matt Kettler wrote: > >>/\b800\s{1,3}E.?\s{1,3}Vermont\b/i > > > Or this: > /\b800\s{1,3}E\.?\s{1,3}Vermont\b/i > > (Sorry to nitpick) > By all means, do nitpick. Missing the \ in front of the . after E was a mistake on my part..

Thanks all

2005-07-28 Thread John D. Maag
This is great. Spamassassin has a big learnign curve and I will still like to figure out how to use spamass but my email is getting filtered really well and pretty acurately. To all of you who have helped me thanks.

RE: Custom Rules

2005-07-28 Thread Matthew.van.Eerde
Matt Kettler wrote: > /\b800\s{1,3}E.?\s{1,3}Vermont\b/i Or this: /\b800\s{1,3}E\.?\s{1,3}Vermont\b/i (Sorry to nitpick) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer AIM/Yahoo: mvaneerde MSN: [EMAIL PROTECT

Re: Custom Rules

2005-07-28 Thread Matt Kettler
John D. Maag wrote: > OK, one last question. I am getting email with this header: > > From: "Connie Trivitt" <[EMAIL PROTECTED]> Add to Address Book > To: "John D Maag" <[EMAIL PROTECTED]> > Subject: 800 E Vermont #25101 has a 4.88% fixed rate option. > Date: Thu, 28 Jul 2005 11:50:27 -0400

RE: Custom Rules

2005-07-28 Thread Pierre Thomson
The problem lies with the \b sequence. That matches a word _boundary_ but it does not match white space between words. For that you can use \s (matches a single space, tab, CR, LF or form feed) or \s+ (matches one or more spaces). Or you can just use a space in your pattern, since that addres

Re: New open http redirector?

2005-07-28 Thread Kelson
Loren Wilton wrote: At that point it's a matter of locking it down so that only specific targets are allowed, etc., or else you end up setting up a script that can be abused by spammers. Which brings us to where this thread started. Ah, but at least they would have a log of the number of clic

Custom Rules

2005-07-28 Thread John D. Maag
OK, one last question. I am getting email with this header: From: "Connie Trivitt" <[EMAIL PROTECTED]> Add to Address Book To: "John D Maag" <[EMAIL PROTECTED]> Subject: 800 E Vermont #25101 has a 4.88% fixed rate option. Date: Thu, 28 Jul 2005 11:50:27 -0400 I have added this rule to local

RE: generating rule stats from spamd logs

2005-07-28 Thread Matthew Yette
Is there any way to modify this code to accept another command-line argument for domain-specific? Meaning, I want to look for all rule hits for mail destined for domain.com? -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597

Re: Authentication

2005-07-28 Thread Dimitri Yioulos
Thanks, Andy. That's kinda what I'm looking for. And, again, sorry to be so far OT. Dimitri On Thursday July 28 2005 11:41 am, you wrote: > Ran across this a while back. Not exactly what you're looking for but. > > http://groups-beta.google.com/group/comp.mail.sendmail/browse_thread/thread >

Re: Basic Questions

2005-07-28 Thread Matt Kettler
John D. Maag wrote: > Ok, If I put preferences in the user_prefs file in $HOME/.spamassassin, do I > call the file the same thing in /etc/mail/spamassassin? > Short answer: No. SA reads /etc/mail/spamassassin/*.cf. It will not read user_prefs from this directory. Most people use local.cf if th

Re: [SPAM] (6.70/5.00) Re: [FW: spam control

2005-07-28 Thread Matt Kettler
The Doctor wrote: > Question: How can ever user use Spam Assassin without having to specify a > user? It would be nice for every user to govern their own account. > SA will scan mail as the userid of the process calling SA, unless you pass -u to either spamc or spamd. SA has no way of reliabl

RE: Relearning/routing spam/ham with Outlook client

2005-07-28 Thread Herb Martin
From: Loren Wilton [mailto:[EMAIL PROTECTED] Sent: Thursday, July 28, 2005 7:50 AMTo: users@spamassassin.apache.orgSubject: Re: Relearning/routing spam/ham with Outlook client This is a very common question, there are a number of solutions detailed in the Wiki, complete

Re: Authentication

2005-07-28 Thread Dimitri Yioulos
>On Thu, Jul 28, 2005 at 11:02:43AM -0400, Dimitri Yioulos wrote: >> It seems as though I've seen references to using winbind or ldap to do the >>sendmail authentication, but I can't seem to find any good documentation.  I >> readily admit that it might be my bad.  If someone could point me in th

Re: New open http redirector?

2005-07-28 Thread Kai Schaetzl
Chris Santerre wrote on Wed, 27 Jul 2005 17:46:32 -0400: > Your tellng me you can't get a redir for your own website? Chris, I'm not talking about myself. I'm talking of the general use of third-party redirectors/trackers, see Matthew's answer. They *are* necessary for certain uses. That doesn'

Re: Authentication

2005-07-28 Thread Theo Van Dinter
On Thu, Jul 28, 2005 at 11:02:43AM -0400, Dimitri Yioulos wrote: > It seems as though I've seen references to using winbind or ldap to do the > sendmail authentication, but I can't seem to find any good documentation. I > readily admit that it might be my bad. If someone could point me in the

Authentication

2005-07-28 Thread Dimitri Yioulos
Hello to all. I've been using sendmail successfully in our shop for the past year+. Our network is ADS-based (the only Windows machine, btw), but I've been creating users on the mail server so that our users can authenticate and use sendmail. That's been easy up to now, because the comapny's

Re: spamd wont start with bayesd on mysql

2005-07-28 Thread Matt Kettler
At 04:08 PM 7/27/2005, [EMAIL PROTECTED] wrote: Can't locate Mail/Spamassassin/BayesStore/SQL.pm Is said file missing from your /usr/lib/perl5 tree? It should probably be somewhere under site_perl//. Also, in general I'd suggest not being within any part of SA's tarball or perl install dire

OT: Dr's. was [FW: spam control

2005-07-28 Thread Andy Jezierski
"jdow" <[EMAIL PROTECTED]> wrote on 07/27/2005 06:35:46 PM: [snip] > > (One thing I have found is that people who use the term "Dr." in front > of their monikers when "out in public" are incapable of learning because > all the public is too dumb to listen to. It earns them incredible amounts > o

Re: Please test sc2.surbl.org (and xs.surbl.org)

2005-07-28 Thread Jeff Chan
On Thursday, July 28, 2005, 12:29:49 AM, Raymond Dijkxhoorn wrote: > Hi! >> I added them yesterday, and I've had no hits. I am hitting other SURBLs: >> >> URIBL_AB_SURBL 1,345 times >> URIBL_OB_SURBL 2,982 times >> URIBL_SC_SURBL 2,564 times >> URIBL_WS_SURBL 1,111 times > You dont use UR

Re: SURBL Rules Not Being Used

2005-07-28 Thread Jeff Chan
On Wednesday, July 27, 2005, 5:03:58 PM, Timothy Spear wrote: > Second Test: Using a local .eml file I have a hyper link to > http://test.surbl.org I then pass with file to either spamassassin or spamc > Third Test: Send an email from a yahoo account with the same >

Re: Basic Questions

2005-07-28 Thread Bob McClure Jr
On Wed, Jul 27, 2005 at 10:45:10PM -0500, John D. Maag wrote: > Ok, If I put preferences in the user_prefs file in $HOME/.spamassassin, do I > call the file the same thing in /etc/mail/spamassassin? No. The traditional filename is local.cf, but any file named *.cf in /etc/mail/spamassassin will

Re: Relearning/routing spam/ham with Outlook client

2005-07-28 Thread Loren Wilton
This is a very common question, there are a number of solutions detailed in the Wiki, complete with code you can steal in some cases.   Basically you can't forward, as you have discovered.  What you CAN do is:   1    Forward as an attachment.  Users will tend to forget to make it an attachmen

Relearning/routing spam/ham with Outlook client

2005-07-28 Thread Mark Williams
Hi All,   Setup: RH9.0 using sendmail with procmail and spamassassin (3.0.4) for site wide use. Clients: Windows XP, using Microsoft Oulook 2000, connecting to RH9.0 server using POP3. Have created 2 users ( [EMAIL PROTECTED] and [EMAIL PROTECTED]) which users can send False Negatives to. Have a c

Re: Removing message/rfc822 attachments to separate files

2005-07-28 Thread Chris Lear
* Herb Martin wrote (28/07/2005 06:21): [...] > > After writing the following and trying > Mail::SpamAssassin::Message (off and on all afternoon) > I stumbled upon the tool intended for the job: > > MIME::Parser from MIME::Toolkit (which was already on > my system) -- the pod doc examples had al

Re: Basic Questions

2005-07-28 Thread Kai Schaetzl
John D. Maag wrote on Wed, 27 Jul 2005 22:45:10 -0500: > Ok, If I put preferences in the user_prefs file in $HOME/.spamassassin, do I > call the file the same thing in > /etc/mail/spamassassin? Now, that's not clear. What do you mean? Files in /etc/mail/spamassassin should end in *.cf and ar

Re: Forcing autolearn

2005-07-28 Thread Kai Schaetzl
Magnus Holmgren wrote on Thu, 28 Jul 2005 09:06:20 +0200: > In other words, is there a way to bypass the 3 points minimum for header > and body? (Why isn't that limit configurable, by the way?) It's trying to prevent you from accidently poisoning your Bayes db. Kai -- Kai Schätzl, Berlin, Ger

Re: Removing message/rfc822 attachments to separate files

2005-07-28 Thread Kai Schaetzl
Herb Martin wrote on Thu, 28 Jul 2005 00:21:54 -0500: > I understand the latter, but No, the method sends the full > headers/messages encapsulated as message/rfc822 top level parts. Ah, good, then my guess was wrong :-) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Se

Re: autolearn

2005-07-28 Thread Kai Schaetzl
Frank M. Cook wrote on Wed, 27 Jul 2005 22:34:02 -0500: > is there a file I can check to see if it has become large? better yet is > there some kind of routine to run to do the purging? run sa-learn --force-expire and see what it says. Be patient if it seems to hang. Kai -- Kai Schätzl, Ber

Forcing autolearn

2005-07-28 Thread Magnus Holmgren
Is there a way to say to SA that "if this custom rule of mine triggers, then the mail *is* spam and you have to autolearn it as such.", except looking for MY_CUSTOM_RULE in X-Spam-Status afterwards and feeding the mail to sa-learn if found? In other words, is there a way to bypass the 3 points min