Re: SA suddenly giving lots of FP's?

2006-01-02 Thread jdow
From: "Gene Heskett" <[EMAIL PROTECTED]> On Monday 02 January 2006 23:22, jdow wrote: From: "Gene Heskett" <[EMAIL PROTECTED]> On Monday 02 January 2006 22:34, Craig White wrote: On Mon, 2006-01-02 at 22:19 -0500, Gene Heskett wrote: On Sunday 01 January 2006 22:51, jdow wrote: [...] >> An

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Gene Heskett
On Monday 02 January 2006 23:22, jdow wrote: >From: "Gene Heskett" <[EMAIL PROTECTED]> > >> On Monday 02 January 2006 22:34, Craig White wrote: >>>On Mon, 2006-01-02 at 22:19 -0500, Gene Heskett wrote: On Sunday 01 January 2006 22:51, jdow wrote: [...] >> Anyway, the rule thats

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Gene Heskett
On Monday 02 January 2006 23:16, jdow wrote: >From: "Gene Heskett" <[EMAIL PROTECTED]> > >> On Monday 02 January 2006 00:50, Chris Purves wrote: >>>On Sunday 01 January 2006 12:24, Gene Heskett wrote: On Saturday 31 December 2005 20:21, Chris Purves wrote: >On Sun, January 1, 2006 3:28 am

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Craig White
On Mon, 2006-01-02 at 20:16 -0800, jdow wrote: > From: "Gene Heskett" <[EMAIL PROTECTED]> > Fetchmail is verbatim in the sense needed. Does fetchmail go through > the tool that fires off SpamAssassin or is this done up in KMail as > it reads? If so KMail may have sanitized off headers in much the

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Chris Purves
Gene Heskett wrote: In that event, how do I go about telling fetchmail that the mailfile it generates in /var/spool/mail/gene is to be a verbatum copy of what was sucked in the vz's server. My fetchmailrc is comparatively clean, with no options that I know about set that would encourage the

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread jdow
From: "Gene Heskett" <[EMAIL PROTECTED]> On Monday 02 January 2006 22:34, Craig White wrote: On Mon, 2006-01-02 at 22:19 -0500, Gene Heskett wrote: On Sunday 01 January 2006 22:51, jdow wrote: [...] >> Anyway, the rule thats applying the 3.8 score is >> HELO_DYNAMIC_IPADDR2. >> >> ATM, I have

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Craig White
On Mon, 2006-01-02 at 22:57 -0500, Gene Heskett wrote: > > > >to my knowledge, fetchmail doesn't remove any headers at all. > > Procmail may be doing it or your MTA, depending upon how you are > > handling it. > > > Humm, AFAIK, fetchmail gets it from vz, writing it > to /var/spool/mail/gene

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread jdow
From: "Gene Heskett" <[EMAIL PROTECTED]> On Monday 02 January 2006 00:50, Chris Purves wrote: On Sunday 01 January 2006 12:24, Gene Heskett wrote: On Saturday 31 December 2005 20:21, Chris Purves wrote: >On Sun, January 1, 2006 3:28 am, Gene Heskett said: >> On Saturday 31 December 2005 13:38,

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Gene Heskett
On Monday 02 January 2006 22:34, Craig White wrote: >On Mon, 2006-01-02 at 22:19 -0500, Gene Heskett wrote: >> On Sunday 01 January 2006 22:51, jdow wrote: >> [...] >> >> >> Anyway, the rule thats applying the 3.8 score is >> >> HELO_DYNAMIC_IPADDR2. >> >> >> >> ATM, I have a "grep -R HELO_DYNAMIC_

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Craig White
On Mon, 2006-01-02 at 22:19 -0500, Gene Heskett wrote: > On Sunday 01 January 2006 22:51, jdow wrote: > [...] > > >> Anyway, the rule thats applying the 3.8 score is > >> HELO_DYNAMIC_IPADDR2. > >> > >> ATM, I have a "grep -R HELO_DYNAMIC_IPADDR2 *" running from / > >> because that rule isn't pres

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Gene Heskett
On Sunday 01 January 2006 22:51, jdow wrote: [...] >> Anyway, the rule thats applying the 3.8 score is >> HELO_DYNAMIC_IPADDR2. >> >> ATM, I have a "grep -R HELO_DYNAMIC_IPADDR2 *" running from / >> because that rule isn't present in any of the >> .spamassassin(/rulesdujour) or /etc/mail/spamassas

Re: SA suddenly giving lots of FP's?

2006-01-02 Thread Gene Heskett
On Monday 02 January 2006 00:50, Chris Purves wrote: >On Sunday 01 January 2006 12:24, Gene Heskett wrote: >> On Saturday 31 December 2005 20:21, Chris Purves wrote: >> >On Sun, January 1, 2006 3:28 am, Gene Heskett said: >> >> On Saturday 31 December 2005 13:38, Rick Macdougall wrote: >> >>>Gene H

Re: Parse and check URIs

2006-01-02 Thread Jeff Chan
On Sunday, January 1, 2006, 1:46:40 PM, Markus Mayer wrote: > Now it seems to be sites hosted > somewhere in China, with arbitrary domain-names. I have been getting > more and more of those lately. They slip right through Spamassassin > with very low spam-scores. Do you have SURBLs enabled? Most

uninitialized value in numeric gt ???

2006-01-02 Thread Michael D Schleif
Happy New Year! I just installed spamassassin 3.1.0 (2005-09-13) on a debian box. Everything appears to be running OK, except these incessant errors: Use of uninitialized value in numeric gt(>) at /usr/lib/perl/5.8/DB_File.pm line 271. I have googled to no avail. Probably, there is somethi

Re: Real-Time Stats Plugin Released - UPDATE RELEASED

2006-01-02 Thread Duane Hill
On Monday, January 2, 2006 at 6:50:15 PM, [EMAIL PROTECTED] confabulated: > You did have the latest version Duane. > I guess MySQL 4.1 doesn't care if you have the "WHERE" clause after it; > as I have been using the updated version for sometime and have not > received any errors. But MySQL 5.0

Re: Real-Time Stats Plugin Released - UPDATE RELEASED

2006-01-02 Thread James Keating
You did have the latest version Duane. I guess MySQL 4.1 doesn't care if you have the "WHERE" clause after it; as I have been using the updated version for sometime and have not received any errors. But MySQL 5.0, apparently, doesn't like that syntax. I removed the WHERE clause and tested it

Re: question on RBLs

2006-01-02 Thread Leonardo Rodrigues Magalhães
Matt Kettler escreveu: Are the offending tests combined queries like SBL/XBL, NJABL or the like? If so, instert a score 0 statement for the unscored parent rule (the one with a double underscore at the start of it's name in the dnsbl config file) and it should disable the query. Disabli

Re: question on RBLs

2006-01-02 Thread Matt Kettler
At 01:33 PM 1/2/2006, Leonardo Rodrigues Magalhães wrote: Hello Guys, I'm using SA 3.1.0 and i'd like to make some questions about using RBLs with spamassassin. SA is configured and running just fine. It's being called from amavisd. That's not the problem, it's working fine. M

question on RBLs

2006-01-02 Thread Leonardo Rodrigues Magalhães
Hello Guys, I'm using SA 3.1.0 and i'd like to make some questions about using RBLs with spamassassin. SA is configured and running just fine. It's being called from amavisd. That's not the problem, it's working fine. My question is related to RBL using. I have disabled the 'l

Re: Real-Time Stats Plugin Released - UPDATE RELEASED

2006-01-02 Thread Duane Hill
I am running MySQL 5.0 and WAS receiving an error for the SQL statement that had the 'ON DUPLICATE KEY UPDATE'. After doing a little investigation and looking into the MySQL docs I have fixed the issue. I dropped the entire WHERE from the statement. According to MySQL docs, there is

Re: "promoting spamtraps"

2006-01-02 Thread Theo Van Dinter
[shifting to users@ since it's not a dev@ issue] On Sun, Jan 01, 2006 at 07:31:45PM -0800, Loren Wilton wrote: > Actually, while he phrased the RFE in terms of sa-learn, it is actually > something that could be done as an SA plugin, if SA were run on the > spamtrap. Sure, it'd be pretty trivial t

Re: Per-User - Bayes Learning

2006-01-02 Thread Duane Hill
On Monday, January 2, 2006 at 3:56:40 AM, [EMAIL PROTECTED] confabulated: > At 10:00 PM 1/1/2006, Duane Hill wrote: >>Hello All, >> >>I have e-mail accounts that have been sending Spam to a specific >>e-mail address as an attachment for some time now. Before they were >>manually gone t

Re: Parse and check URIs

2006-01-02 Thread List Mail User
>... >I want to be able to assign spam-scores based on the country/countries >hosting the web-server (or servers) mentioned in the body of an e-mail >(if there are any links in the mail). > >I want to assign a spam-score of say 4.0, if the a mail contains a URI >that resolves to a server in Chin

sa-learn

2006-01-02 Thread Jaime Aguado Luna
Hi, I have installed spamassassin with amavis and postfix. I also created a dir where I put all the spam mails that spamassassin dont mark as spam in order to run the sa-learn script hourly. Our corporate email client is Outlook 2000/2003 and since Outlook add some kind of header I am not sure if

A self-declared Bulk message

2006-01-02 Thread Paolo Cravero as2594
Just reviewed the spam that passed through our amavisd-new + SA3.1.0 barrier and noticed something funny at the bottom of a message: This email has been sent with an unregistered version of MaxBulk Mailer. MaxBulk Mailer is a new easy-to-use mail merge software for Macintosh. This message cam

spamd: pyzor: check failed: internal error

2006-01-02 Thread Wolfgang . Fuertbauer
I'm getting the errormessage below; Who can help ? Wolfgang Jan  2 09:25:58 saxophon spamd[13330]: spamd: connection from localhost [127.0.0.1] at port 40156 Jan  2 09:25:58 saxophon spamd[13330]: spamd: checking message <[EMAIL PROTECTED]> for exim:502 Jan  2 09:26:00 saxophon spamd[13330]: inte