Re: geocities rule?

2005-11-15 Thread Daryl C. W. O'Shea
List Mail User wrote: Of course, the originals transmogrify quite quickly and the '/?' was posted a couple of days ago. Actually it was posted a couple weeks ago. About two or three days later I started to get spams without the query string. The rule worked well for a few weeks befo

Installation Issues

2005-11-15 Thread Joey
I have used spamassassin for a few years installing it with cpan and really not running into any problems with installation etc. I was trying to install via CPAN again, and received the following errors: --- /bin/tar: Read 6656 bytes from - Removing previously used /root/.cpan

Re: geocities rule?

2005-11-15 Thread List Mail User
>... >> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A >lot of >> "enthusiast" websites of various sorts are hosted there and my users like >to >> forward around links to them. > >I wonder what the effect of listing /\w\.\w\w\.geocities\.com\b/ would be? >That would only c

Re: Better way to whitelist a host ?

2005-11-15 Thread Matt Kettler
At 03:36 PM 11/15/2005, Christopher X. Candreva wrote: On Tue, 15 Nov 2005, Andy Jezierski wrote: > How are you invoking SA? In my setup, I'm calling SA via a milter, so > when I want to whitelist a host, I do it at the milter level, this way SA > never even sees the message. I'm running it th

Re: Do you need a Pop3 Proxy?

2005-11-15 Thread mouss
Andrzej Adam Filip a écrit : John Woolsey wrote: I tried to install one of the ones out there under Linux and I found that it didn't work properly. I then took a quick look inside the code and it seems that the person who wrote it used windows slashes in the unix script etc. After a bit of

Re: geocities rule?

2005-11-15 Thread Matt Kettler
Matt Kettler wrote: > mouss wrote: > >>Matt Kettler a écrit : >> >> >>>mouss wrote: >>> >>> >>> They used other geocities sites since a long time. I just score 4 for any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. >>> >>> >>>Unfortunately, I've had plenty of FPs with

Re: geocities rule?

2005-11-15 Thread Matt Kettler
mouss wrote: > Matt Kettler a écrit : > >> mouss wrote: >> >> >>> They used other geocities sites since a long time. I just score 4 for >>> any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. >>> >> >> >> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. > > Y

Re: geocities rule?

2005-11-15 Thread mouss
Matt Kettler a écrit : mouss wrote: They used other geocities sites since a long time. I just score 4 for any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. You may have missed the "/?" part. I don't

Re: geocities rule?

2005-11-15 Thread Loren Wilton
> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A lot of > "enthusiast" websites of various sorts are hosted there and my users like to > forward around links to them. I wonder what the effect of listing /\w\.\w\w\.geocities\.com\b/ would be? That would only catch the non-

Re: geocities rule?

2005-11-15 Thread Matt Kettler
mouss wrote: > > They used other geocities sites since a long time. I just score 4 for > any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A lot of "enthusiast" websites of various sorts are hosted there and my use

Re: geocities rule?

2005-11-15 Thread mouss
Evan Platt a écrit : I run my own site, so my site, my rules... But looking through my archived mail for uk.geoc1ties.com, I see NO legit mail. I'm at the point of adding a body_check rule in postfix to /dev/null anything with the above in the body. I see now they've started to use de.geoc

Re: geocities rule?

2005-11-15 Thread Evan Platt
At 12:43 PM 11/15/2005, you wrote: This is a collection of various geocities rules that I've been using. You might want to run them by a corpus to see what their FPs are like for you, but this is a good starting point. These are based on rules posted by others on the list, with a few limited ha

Re: geocities rule?

2005-11-15 Thread Matt Kettler
Jeff Chan wrote: > Does anyone have a geocities rule that catches most of the spams > and has few FPs? This is a collection of various geocities rules that I've been using. You might want to run them by a corpus to see what their FPs are like for you, but this is a good starting point. These are

Re: Better way to whitelist a host ?

2005-11-15 Thread Christopher X. Candreva
On Tue, 15 Nov 2005, Andy Jezierski wrote: > How are you invoking SA? In my setup, I'm calling SA via a milter, so > when I want to whitelist a host, I do it at the milter level, this way SA > never even sees the message. I'm running it through procmail, otherwise that's a good idea.

Re: apple mail better than SA?

2005-11-15 Thread Simon Butler
On Nov 15, 2005, at 11:33 AM, <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> wrote: Simon Butler wrote: read this link for more info on apple mail spam filtering http://www.macdevcenter.com/pub/a/mac/2004/05/18/spam_pt2.html Sounds like per-user Bayes to me. actually if you search for bayes

Re: apple mail better than SA?

2005-11-15 Thread Theo Van Dinter
On Tue, Nov 15, 2005 at 11:51:34AM -0800, Justin Mason wrote: > Pretty similar, alright. It's another probabilistic classifier, like our > BAYES_* rules. It uses a fancier algorithm (LSA), but research hasn't > really proven if that helps in real-world use; some reviews have said our > results ar

Re: apple mail better than SA?

2005-11-15 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] writes: > Simon Butler wrote: > > read this link for more info on apple mail spam filtering > > > > http://www.macdevcenter.com/pub/a/mac/2004/05/18/spam_pt2.html > > Sounds like per-user Bayes to me. Pretty similar, alright. It'

Re: apple mail better than SA?

2005-11-15 Thread Kelson
Simon Butler wrote: i've noticed however that my mac os 10.4.3 mail program catches all of the stuff spam assassin doesn't. i've done no custom rule setup on my powerbook. how do i get the apple mail spam filter intelligence into spam assassin. Wasn't is just yesterday that someone was saying

Re: Habeas?

2005-11-15 Thread Kelson
Dan Mahoney, System Admin wrote: On Wed, 9 Nov 2005, Martin [iso-8859-1] Schröder wrote: On 2005-11-08 17:37:01 -0500, Matt Kettler wrote: Actually, more to the point.. Habeas doesn't use or support plain-SWE anymore. Thanks. Habeas didn't bother to tell their "customers". http://www.habea

RE: apple mail better than SA?

2005-11-15 Thread Matthew.van.Eerde
Simon Butler wrote: > read this link for more info on apple mail spam filtering > > http://www.macdevcenter.com/pub/a/mac/2004/05/18/spam_pt2.html Sounds like per-user Bayes to me. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com

Re: Better way to whitelist a host ?

2005-11-15 Thread Andy Jezierski
"Christopher X. Candreva" <[EMAIL PROTECTED]> wrote on 11/15/2005 01:03:22 PM: > > I have one user that needs to whitelist a particular host. It is a web site > that is doing something silly, forwarding leads from forms people fill out, > but with an envelope sender set to the e-mail address o

Re: apple mail better than SA?

2005-11-15 Thread Jim Knuth
Hallo und Guten Abend Gary, Heute (am 15.11.2005 - 20:05 Uhr) schriebst Du: > And outlook catches some that SA misses as well. But I think > the question that needs to be asked is how aggressive apple > mail is. SA can be taught to be more aggressive and you can > also put harsher rules int

Better way to whitelist a host ?

2005-11-15 Thread Christopher X. Candreva
I have one user that needs to whitelist a particular host. It is a web site that is doing something silly, forwarding leads from forms people fill out, but with an envelope sender set to the e-mail address of the person making the request. I want to make sure we prevent any problems with SPF/Do

Re: User_Scores SQL database not working??

2005-11-15 Thread Michael Parker
Matthew Yette wrote: On 11/11/05 1:35 PM, "Matthew Yette" <[EMAIL PROTECTED]> wrote: I currently am using SA 3.1.0 with ClamAV 0.87.1 and Qmail-scanner 1.25st. I use SQL for my bayes as well as my user scores preferences databases. When testing the whitelist_from preference, mail comes throu

Re: Do you need a Pop3 Proxy?

2005-11-15 Thread Andrzej Adam Filip
John Woolsey wrote: I tried to install one of the ones out there under Linux and I found that it didn't work properly. I then took a quick look inside the code and it seems that the person who wrote it used windows slashes in the unix script etc. After a bit of fooling around I now have a work

Do you need a Pop3 Proxy?

2005-11-15 Thread John Woolsey
I tried to install one of the ones out there under Linux and I found that it didn't work properly. I then took a quick look inside the code and it seems that the person who wrote it used windows slashes in the unix script etc. After a bit of fooling around I now have a working Pop3 client that u

RE: Rule for this ??-LINT

2005-11-15 Thread Pierre Thomson
Jean-Paul Natola wrote: > > > Hi all, I *believe* I have applied the following rule correctly, > > To verify I ran the --lint , it all checked out ok BUT its giving > some errors with respect to the whitelisted entries I have in the > local.cf that resides in the SA directory > > I know my whi

Newbie problem: SA Header Modification

2005-11-15 Thread Karl Breeze
I've installed SpamAssassin 3.1.0 into a postfix mail server running on suse 8.2  Incoming emails are been passed through SA and SA appears to be deciding whether an email is spam or not.  However, SA is not modifying the email headers for any emails regardless of whether it thinks they are spam or

Re: [sa-list] Re: Habeas?

2005-11-15 Thread Dan Mahoney, System Admin
On Wed, 9 Nov 2005, Martin [iso-8859-1] Schr?der wrote: On 2005-11-08 17:37:01 -0500, Matt Kettler wrote: Actually, more to the point.. Habeas doesn't use or support plain-SWE anymore. Thanks. Habeas didn't bother to tell their "customers". http://www.habeas.com/en-US/FAQ_Miscellaneous.php#