RE: OT - Is XO a good ISP?

2005-11-14 Thread Kurt Buff
Just got back from vaca - take a look at the current issue of Network World. It seems the XO is selling off their wireline stuff, and going wireless. XO, a CLEC, is selling its national wireline telecommunications business for $700 million in cash to finance its transition to a fixed broadband

RE: SA Errors on --lint run

2005-11-14 Thread Tracey Gates
Thanks Craig, It took someone else to point out that I didn't read the entire error message. On first glance I thought it was correct but I misspelled spamassissin (I spelled it "spamassisin" with one less "s"). DUH!!! Thanks again! Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South B

Re: SA Errors on --lint run

2005-11-14 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tracey Gates wrote: > I'm trying to run it as user root but I'm still getting these error > messages: > > > [EMAIL PROTECTED] mail]# /usr/local/sbin/rules_du_jour > mkdir: cannot create directory `/etc/mail/spamassasin/RulesDuJour': No >

RE: SA Errors on --lint run

2005-11-14 Thread Tracey Gates
I'm trying to run it as user root but I'm still getting these error messages: [EMAIL PROTECTED] mail]# /usr/local/sbin/rules_du_jour mkdir: cannot create directory `/etc/mail/spamassasin/RulesDuJour': No such file or directory /usr/local/sbin/rules_du_jour: line 675: cd: /etc/mail/spa

Re: SA Errors on --lint run

2005-11-14 Thread Matt Kettler
Tracey Gates wrote: > Thanks Matt. > > What should the permissions & ownership be to run the Rules Du Jour > script? Getting the following: > > > > Rules Du Jour Run Summary:RulesDuJour Run Summary on yoursummit.com: > > ***NOTICE***: Cannot write to /etc/mail/spamassasin. Are you >

RE: Rule for this ??-LINT

2005-11-14 Thread Jean-Paul Natola
On Monday 14 November 2005 11:22, Casey King wrote: >Okay, > >I have the rule in my local.cf as > >body L_DRUGS11 /([CVAXP] ){5}/ >header L_DRUGS12 MESSAGEID =~ >/^<[EMAIL PROTECTED]>/ >meta L_DRUGS1 L_DRUGS11 && L_DRUGS12 >score L_DRUGS1 5 >describe L_DRUGS1 Strange Message-ID and Spam signature

Re: SA as a plug-in for Apple Mail?

2005-11-14 Thread Vivek Khera
On Nov 14, 2005, at 10:50 AM, David A. Roth wrote: While the junk mail filter on Apple Mail is ok, SA is much better. Is there a way to run SA on the Mac OS X where the Apple Mail client can make use of SA? you run SA on your mail server as normal, and tell Apple Mail to honor the SA res

[SARE] Changes in Spoof ruleset

2005-11-14 Thread Fred
I made changes to the spoof set, no more 104 points for any rules. I added meta's to check for whitelist_from, if whitelist_from hits AND sare_forged_(ebay|paypal|etc) then we score 100 points. This way, if people don't whitelist then the spoof will only score 4.0 from our ruleset.. If it's a sp

RE: SA Errors on --lint run

2005-11-14 Thread Tracey Gates
Title: Message Thanks Matt.What should the permissions & ownership be to run the Rules Du Jour script?  Getting the following: Rules Du Jour Run Summary:RulesDuJour Run Summary on yoursummit.com:***NOTICE***: Cannot write to /etc/mail/spamassasin.  Are you running as the correct user? 

RE: Problems with DomainKeys

2005-11-14 Thread Matt Rossiter
Yeah that was it. I got rid of most of the errors by installing the RSA Module # cd /usr/ports/security/p5-Crypt-OpenSSL-RSA. # make install Then I got just this error message. www# spamassassin --lint [28576] warn: rules: failed to run DK_POLICY_SIGNALL test, skipping: [28576] warn: _(Can't

Re: SA Errors on --lint run

2005-11-14 Thread Matt Kettler
Tracey Gates wrote: > I'm getting the following errors when I run SpamAssassin --lint: > > I haven't touched my config file for a very long time and SA seems to > have been working fine. I'm trying to run Rules Du Jour to update my > SARE rules and am getting the following error. I'm running Sp

Re: Problems with DomainKeys

2005-11-14 Thread Chris Stone
On Mon, November 14, 2005 12:09 pm, Matt Rossiter wrote: > I am running FreeBSD 5.4 with the latest version of SpamAssassin 3.1.0. > I'm also using Mimedefang 2.54. Spamassassin was installed from a > recently updated version of /usr/ports/mail/p5-Mail-SpamAssassin/. > > I am having a hard time f

SA Errors on --lint run

2005-11-14 Thread Tracey Gates
Title: Message I'm getting the following errors when I run SpamAssassin --lint:   I haven't touched my config file for a very long time and SA seems to have been working fine.  I'm trying to run Rules Du Jour to update my SARE rules and am getting the following error.  I'm running SpamAssassin v

Problems with DomainKeys

2005-11-14 Thread Matt Rossiter
I am running FreeBSD 5.4 with the latest version of SpamAssassin 3.1.0.  I’m also using Mimedefang 2.54.  Spamassassin was installed from a recently updated version of /usr/ports/mail/p5-Mail-SpamAssassin/.   I am having a hard time figuring out how to fix this problem when I run ‘spamass

Re: What countries to block ?

2005-11-14 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrzej Adam Filip writes: >Bowie Bailey wrote: >> From: Andrzej Adam Filip [mailto:[EMAIL PROTECTED] >> >>>Have you tried to use AS scoring instead of (or together with) >>>country scoring? [AS = Autonoumous (Routing) System] >>> >>>IMHO it is not a

Re: GERMAN ruleset updated

2005-11-14 Thread Dhawal Doshy
Michael Monnerie writes: On Samstag, 12. November 2005 16:04 Dhawal Doshy wrote: warning: description for ZMIfish_VOLKSBANK2 is over 50 chars warning: rule 'ZMIde_EMAIL_CAREERBULLDER' is over 22 chars warning: rule 'ZMIfish_NETBANKING_FROM' is over 22 chars Oh sorry. I got a report once about

Re: Rules Du Jour Script Error

2005-11-14 Thread Chris Thielen
Hi Tracey! Tracey Gates wrote: I have followed the installation steps from the Rules Du Jour site (_http://www.exit0.us/index.php?pagename=RulesDuJour_) and am trying to run the script manually but I get the following error: [EMAIL PROTECTED] sbin]# ./rules_du_jour : bad interpreter: No su

Re: What countries to block ?

2005-11-14 Thread Andrzej Adam Filip
Bowie Bailey wrote: From: Andrzej Adam Filip [mailto:[EMAIL PROTECTED] Have you tried to use AS scoring instead of (or together with) country scoring? [AS = Autonoumous (Routing) System] IMHO it is not a bad idea to give incetives to good ISP in a bad countries. That's an interesting idea.

Rules Du Jour Script Error

2005-11-14 Thread Tracey Gates
Title: Message I have followed the installation steps from the Rules Du Jour site (http://www.exit0.us/index.php?pagename=RulesDuJour) and am trying to run the script manually but I get the following error:   [EMAIL PROTECTED] sbin]# ./rules_du_jour: bad interpreter: No such file or directory  

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kenneth Porter wrote: > --On Sunday, November 13, 2005 11:26 PM + Craig McLean > <[EMAIL PROTECTED]> wrote: > >> Ok, well if you read my last message, I've indicated a better way than >> appending the whole thing in. Just include it using a line l

RE: What countries to block ?

2005-11-14 Thread Bowie Bailey
From: Andrzej Adam Filip [mailto:[EMAIL PROTECTED] > Have you tried to use AS scoring instead of (or together with) > country scoring? [AS = Autonoumous (Routing) System] > > IMHO it is not a bad idea to give incetives to good ISP in a bad > countries. That's an interesting idea. Is there a plug

Re: What countries to block ? and detectng Trojan attachments?

2005-11-14 Thread Dave Pooser
> That's fun, we're blocking each other! Most spam here in the Netherlands > comes from the US. Most spam in the US comes from the US too; it's a matter of blocking countries that rarely or never send us legitimate email. After all, if my only purpose were to never receive spam I'd just unplug my

Re: What countries to block ? and detectng Trojan attachments?

2005-11-14 Thread Menno van Bennekom
> Currently I am blocking all mails from = *.nl *.br *.ch etc.. That's fun, we're blocking each other! Most spam here in the Netherlands comes from the US.. We block almost everything from China, Korea and Taiwan in postfix based on domain-name and on ip-range (mostly complete B-classes). But also

Re: Rule for this ??

2005-11-14 Thread Gene Heskett
On Monday 14 November 2005 11:22, Casey King wrote: >Okay, > >I have the rule in my local.cf as > >body L_DRUGS11 /([CVAXP] ){5}/ >header L_DRUGS12 MESSAGEID =~ >/^<[EMAIL PROTECTED]>/ >meta L_DRUGS1 L_DRUGS11 && L_DRUGS12 >score L_DRUGS1 5 >describe L_DRUGS1 Strange Message-ID and Spam signature i

RE: Rule for this ??

2005-11-14 Thread Casey King
Okay, I have the rule in my local.cf as body L_DRUGS11 /([CVAXP] ){5}/ header L_DRUGS12 MESSAGEID =~ /^<[EMAIL PROTECTED]>/ meta L_DRUGS1 L_DRUGS11 && L_DRUGS12 score L_DRUGS1 5 describe L_DRUGS1 Strange Message-ID and Spam signature in body Since it did not seem to get picked up by the rule.

Re: whitelist not recognized?

2005-11-14 Thread Kris Deugau
Thijs Koetsier wrote: > I'm running spamassassin 3.0.4 on Debian-exim. > > In my /etc/spamassassin/whitelist.cf I've this line: > > whitelist_to [EMAIL PROTECTED] OK; inbound mail sent to this *EXACT* address will be whitelisted. Note that you're probably better off just not passing mail for t

SA as a plug-in for Apple Mail?

2005-11-14 Thread David A . Roth
While the junk mail filter on Apple Mail is ok, SA is much better. Is there a way to run SA on the Mac OS X where the Apple Mail client can make use of SA? Thanks! David Roth rothmail (at) comcast (dot) net

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread Kenneth Porter
--On Sunday, November 13, 2005 11:26 PM + Craig McLean <[EMAIL PROTECTED]> wrote: Ok, well if you read my last message, I've indicated a better way than appending the whole thing in. Just include it using a line like: include(`/usr/share/sendmail-cf/hack/block_bad_helo.m4')dnl to your sen

RE: Rule for this ??

2005-11-14 Thread Pierre Thomson
Casey King wrote: >> body L_DRUGS11 /([CVAXP] ){5}/ >> header L_DRUGS12 MESSAGEID =~ >> /^<[EMAIL PROTECTED]>/ >> meta L_DRUGS1 L_DRUGS11 && L_DRUGS12 >> score L_DRUGS1 5 >> describe L_DRUGS1 Strange Message-ID and Spam signature in body. > > This rule goes in the local.cf file right? I added thi

RE: Rule for this ??

2005-11-14 Thread Casey King
This rule goes in the local.cf file right? I added this rule, and restarted MailScanner and it does not seem to be reading the rule. I am not so good with writing rules, but I was wondering Body L_DRUGS11 Score L_DRUGS1 Are these supposed to be set this way, or do these both need to be set

Re: User_Scores SQL database not working??

2005-11-14 Thread JamesDR
Matthew Yette wrote: I currently am using SA 3.1.0 with ClamAV 0.87.1 and Qmail-scanner 1.25st. I use SQL for my bayes as well as my user scores preferences databases. When testing the whitelist_from preference, mail comes through just fine and is recognized to be part of that preference and is

Re: User_Scores SQL database not working??

2005-11-14 Thread Matthew Yette
On 11/11/05 1:35 PM, "Matthew Yette" <[EMAIL PROTECTED]> wrote: > I currently am using SA 3.1.0 with ClamAV 0.87.1 and Qmail-scanner 1.25st. > > I use SQL for my bayes as well as my user scores preferences databases. When > testing the whitelist_from preference, mail comes through just fine an

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread List Mail User
>... >List Mail User a écrit : > >> You're a lot more polite than I am. I prefer: >> >>my_domain.tld 550 You're lying - Trying to use my host >>.my_domain.tld550 You're lying - Trying to use my host >> >> >I don't wanna risk being sued/beaten by some angry guy:) >

Re: whitelist not recognized?

2005-11-14 Thread Steven Stern
Use "all_spam_to" instead of "whitelist_to". Thijs Koetsier wrote: Hi all, I'm running spamassassin 3.0.4 on Debian-exim. In my /etc/spamassassin/whitelist.cf I've this line: whitelist_to [EMAIL PROTECTED] Today, this user recieved an e-mail marked as spam with

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread Andy Pieters
Hi List Thank you all for your contributions. With kind regards Andy -- Now listening to Alphaville - Forever Young on amaroK Geek code: www.vlaamse-kern.com/geek Registered Linux User No 379093 If life was for sale, what would be its price? www.vlaamse-kern.com/sas/ for free php utilities

whitelist not recognized?

2005-11-14 Thread Thijs Koetsier
Hi all,   I'm running spamassassin 3.0.4 on Debian-exim.   In my /etc/spamassassin/whitelist.cf I've this line:   whitelist_to [EMAIL PROTECTED]   Today, this user recieved an e-mail marked as spam with the following header:   Return-path: <[EMAIL PROTECTED]>Envelope-to: [EMAIL PROTECTED] De

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread mouss
List Mail User a écrit : You're a lot more polite than I am. I prefer: my_domain.tld 550 You're lying - Trying to use my host .my_domain.tld 550 You're lying - Trying to use my host I don't wanna risk being sued/beaten by some angry guy:) It is also goo

RE: Rule for this ??

2005-11-14 Thread Rikhardur.EGILSSON
This one works like magic .. Also on the new variant which seems to have been released this weekend. body L_DRUGS11 /([CVAXP] ){5}/ header L_DRUGS12 MESSAGEID =~ /^<[EMAIL PROTECTED]>/ meta L_DRUGS1 L_DRUGS11 && L_DRUGS12 score L_DRUGS1 5 describe L_DRUGS1 Strange Message-ID and Spam signature i