Re: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread jdow
-0.1 should be rather good. There are generally not many rules that will drive a score downwards. (This may not be a good thing?) So placing the threshold either a tenth of a point below or above zero is perhaps best.) {^_^} - Original Message - From: "Mike Sassaman" <[EMAIL PROTECTED]>

Re: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread jdow
From: "Mike Sassaman" <[EMAIL PROTECTED]> Thanks everyone for your suggestions. This is what I've done: required_score 4 rewrite_header Subject *SPAM* May I suggest a hint for the above line which may make handling spam in a spam folder much easier? If you change it to: rewrite_head

Re: mail deleted by spamassassin?

2006-01-13 Thread jdow
SpamAssassin Never Deletes Email. Please stand at the blackboard and write the above 1000 times. It is OTHER tools, such as AmaVisD, MailScanner, or procmail, which perform any deleting. Look to their configurations not the SpamAssassin configuration. {^_^} - Original Message - From: "

Re: SURBL

2006-01-13 Thread Jeff Chan
I forgot to add, if you're processing more than 100k messages per day, then you should probably apply for rsync access to the SURBL zone files and serve them up locally: http://www3.surbl.org/rsync-signup.html That too will improve performance. Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] ht

Re: SURBL

2006-01-13 Thread Jeff Chan
On Friday, January 13, 2006, 10:12:40 AM, Irina Irina wrote: > Hello Matt and all, > I enabled SURBL checks on a secondary server yesterday. It catches spam so > great that I like it very much. > Today I enabled it on our main server... Queue started to grow, messages > were piling up. I had t

Re: mail deleted by spamassassin?

2006-01-13 Thread Jim Knuth
Heute (14.01.2006/02:34 Uhr) schrieb Bob Hou ([EMAIL PROTECTED]), > Hi, > I am running linux FC4 (kernel-2.6.14) with spamassassin-3.0.4 and > sendmail-8.13.4. > I notice that the users did not get any spam marked email after I update the > system from FC3 to FC4. So I test it with a blacklist_fro

Re: mail deleted by spamassassin?

2006-01-13 Thread Theo Van Dinter
On Fri, Jan 13, 2006 at 07:36:16PM -0700, Robert Bartlett wrote: > Then send the same email and watch the log. I believe there is a setting or > by default SA deletes the spam if it is high? SA has no way to delete mail, it simply marks it up. > Or maybe that is the job for > something like qmail

RE: mail deleted by spamassassin?

2006-01-13 Thread Robert Bartlett
Look in the logs, tail /var/log/maillog -f   Then send the same email and watch the log. I believe there is a setting or by default SA deletes the spam if it is high? Or maybe that is the job for something like qmail-scanner? I notice in my log if something scores really high I see SPAM-DELE

mail deleted by spamassassin?

2006-01-13 Thread Bob Hou
Hi, I am running linux FC4 (kernel-2.6.14) with spamassassin-3.0.4 and sendmail-8.13.4. I notice that the users did not get any spam marked email after I update the system from FC3 to FC4. So I test it with a blacklist_from. It seems very strange that I don't get the email sent from the email acco

Re: Spamassassin & Bayes

2006-01-13 Thread Loren Wilton
> I have made > > spamassassin -D --lint > > but i got the warnings in the attached file. Are you running German-language rules on 3.0.x? If so this is (unfortunately) expected. If you are only running English-language rules files, then this would probably indicate that you had rules from 2.6x o

RE: Spamassassin & Bayes

2006-01-13 Thread Bowie Bailey
Markus Braun wrote: > > I have made > > spamassassin -D --lint > > but i got the warnings in the attached file. >> warning: description for EXCUSE_6 is over 50 chars This is fairly common. It indicates that your SA and ruleset versions do not match. Search the mailing list logs. This proble

Re: Spamassassin & Bayes

2006-01-13 Thread Markus Braun
sa-learn will help here. Another way to help is by grabbing some of the rulesets off of rulesemporium.com that cover the spam which is giving you the most trouble. I have made spamassassin -D --lint but i got the warnings in the attached file. i have debian and installed it with: apt-get

Re: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread Loren Wilton
> Thanks everyone for your suggestions. This is what I've done: > > required_score 4 > rewrite_header Subject *SPAM* > add_header all Report _REPORT_ > bayes_auto_learn_threshold_nonspam -5 > > As you can see I: > > Lowered my nonspam threshold so in theory only very low scoring mails shou

Re: Spamassassin & Bayes

2006-01-13 Thread Loren Wilton
> By learning HAM, am I increasing the probability of HAM tokens? Perhaps the way to think about it is that by learning ham and spam, you are showing bayes what ham and spam look like for you, and which is which. That may translate to probabilities internally, but that is really a level of detail

Re: optimization failing--fixed

2006-01-13 Thread Anne Ramey
Anne Ramey wrote: I'm installed SA 3.1 with Amavisd-new and postfix 2.2.5 on fedora core 3 and am having serious mail slowdowns, as much as and hour. I've figure out it's SA because the SA check as taking 8-12 seconds, which was about 75%+ of the processing. I've been trying to sort through

RE: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread David B Funk
On Fri, 13 Jan 2006, Mike Sassaman wrote: > Thanks everyone for your suggestions. This is what I've done: > > required_score 4 > rewrite_header Subject *SPAM* > add_header all Report _REPORT_ > use_razor2 1 > razor_config /etc/mail/spamassassin/.razor/razor-agent.conf > razor_timeout 600

RE: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread Bowie Bailey
Mike Sassaman wrote: > > Last but not least I added the line: > add_header all Report _REPORT_ > > so that I can see what rules are being hit. Unfortunately I am still > not seeing these headers added to the messages. The only headers I > get are these: > > X-SMTP-Vilter-Version: 1.1.9 > X-SMT

RE: Spamassassin & Bayes

2006-01-13 Thread Bowie Bailey
Clay Davis wrote: > By learning HAM, am I increasing the probability of HAM tokens? When you learn ham, you are teaching bayes about tokens that appear in ham. When you learn spam, you are teaching bayes about tokens that appear in spam. -- Bowie

Re: double Subject in header - only one marked as spam

2006-01-13 Thread Kelson
Vincenzo Martiello wrote: Anyone has notice of this?: spammers send mail with two row "Subject" in mail when spamassassin mark as spam mail with two row "Subject" in the header mail, then it marks only the first row "Subject" is there the way to mark all header row with "Subject" Not sure a

Re: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread Chris Purves
Mike Sassaman wrote: Last but not least I added the line: add_header all Report _REPORT_ so that I can see what rules are being hit. Unfortunately I am still not seeing these headers added to the messages. The only headers I get are these: X-SMTP-Vilter-Version: 1.1.9 X-SMTP-Vilter-Spam-Back

RE: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread Mike Sassaman
It appears that nonspam -5 might be excessively low, changed it to -2. > -Original Message- > From: Mike Sassaman [mailto:[EMAIL PROTECTED] > Sent: Friday, January 13, 2006 1:30 PM > To: users@spamassassin.apache.org > Subject: RE: spam scores low (Sendmail + smtp-vilter + SA ) > > > Tha

RE: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread Mike Sassaman
Thanks everyone for your suggestions. This is what I've done: required_score 4 rewrite_header Subject *SPAM* add_header all Report _REPORT_ use_razor2 1 razor_config /etc/mail/spamassassin/.razor/razor-agent.conf razor_timeout 600 trusted_networks w.x.y.z use_bayes 1 use_bayes_rules 1 b

RE: Spamassassin & Bayes

2006-01-13 Thread Clay Davis
By learning HAM, am I increasing the probability of HAM tokens? >>> On 1/13/2006 at 1:17:27 pm, in message <[EMAIL PROTECTED]>, Bowie Bailey <[EMAIL PROTECTED]> wrote: > Clay Davis wrote: >> If I only ever sa-learn SPAM and never HAM, will the process >> eventually assign all "tokens" a high proba

RE: Spamassassin & Bayes

2006-01-13 Thread Bowie Bailey
Clay Davis wrote: > If I only ever sa-learn SPAM and never HAM, will the process > eventually assign all "tokens" a high probability? Likewise, if I > have never sa-learn[ed] any HAM will the first message that is > sa-learn[ed] as SPAM assign a 1.000 to all tokens processed? If you only learn

Re: SURBL

2006-01-13 Thread Irina
Hello Matt and all, I enabled SURBL checks on a secondary server yesterday. It catches spam so great that I like it very much. Today I enabled it on our main server... Queue started to grow, messages were piling up. I had to revert back, queue then went down gradually. Compared on both server

RE: Spamassassin & Bayes

2006-01-13 Thread Clay Davis
holy crap! I'll just take your word for it. :) >>> On 1/13/2006 at 12:56:36 pm, in message <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> wrote: > Clay Davis wrote: >> If I only ever sa-learn SPAM and never HAM, will the process >> eventually assign all "tokens" a high probability? Likewise, if I >> h

Re: Stopping spamd from writing to /root/.spamassassin

2006-01-13 Thread Chris Purves
Mark Cooke wrote: Hi, I've setup postfix and spamassassin (3.0) Debian (Sarge) to both use a MySQL database for it's rulesets, I'm running spamassassin as a filter in the /etc/postfix/master.cf file. But the problem I have is no matter what I do, I cannot stop spamd from writing to /root/.

double Subject in header - only one marked as spam

2006-01-13 Thread Vincenzo Martiello
invoking SpamAssassin from: MailScanner version of SpamAssassin: spamassassin-2.64 platform: redhat AS2.1 kernel 2.4.9-e.48 --- Anyone has notice of this?: spammers send mail with two row "Subject" in mail when spamassassin mark as spam mail with two row "Subject" in the header mail, then it m

Re: Logging the Sendmail queue id in the SpamAssassin logs?

2006-01-13 Thread Theo Van Dinter
On Fri, Jan 13, 2006 at 11:27:34AM +0100, Marco Teeuwen wrote: > SpamAssassin doesn't seem to be able to log the Sendmail queue id's in > it's logfiles. Is there a way to accomplish this? How do you know which There is no way to do this since SA doesn't know what (sendmail|postfix|exim|exchange|et

RE: Spamassassin & Bayes

2006-01-13 Thread Matthew.van.Eerde
Clay Davis wrote: > If I only ever sa-learn SPAM and never HAM, will the process > eventually assign all "tokens" a high probability? Likewise, if I > have never sa-learn[ed] any HAM will the first message that is > sa-learn[ed] as SPAM assign a 1.000 to all tokens processed? No. See Paul Gra

Re: Spamassassin & Bayes

2006-01-13 Thread Clay Davis
If I only ever sa-learn SPAM and never HAM, will the process eventually assign all "tokens" a high probability? Likewise, if I have never sa-learn[ed] any HAM will the first message that is sa-learn[ed] as SPAM assign a 1.000 to all tokens processed? Thanks, Clay >>> On 1/13/2006 at 9:40:02 a

Re: Stopping spamd from writing to /root/.spamassassin

2006-01-13 Thread François Conil
Mark Cooke a écrit : Apart from this, it seems to be running ok, but for the life of me I cannot stop it writing to the root directory. If anyone can point anything out, I would be grateful Make a symbolic link from /root/.spamassassin to /your/specified/path/.spamassassin cheers, -- Fran

Re: optimization failing

2006-01-13 Thread Anne Ramey
Anne Ramey wrote: Loren Wilton wrote: Basically only two possibilities: you're thrashing the poor box to death by running out of memory, or network tests are taking an age. Or maybe both. ok, I had a pyzor test timing out, but I've removed that, and it's still taking 6-15 seconds for th

Stopping spamd from writing to /root/.spamassassin

2006-01-13 Thread Mark Cooke
Hi, I've setup postfix and spamassassin (3.0) Debian (Sarge) to both use a MySQL database for it's rulesets, I'm running spamassassin as a filter in the /etc/postfix/master.cf file. spamassassin unix - n n - - pipe flags=Rq user=spamd argv=/etc/postfix/spam

Re: [SOLVED] Re: rules_du_jour/curl suddenly broken?

2006-01-13 Thread Mark Martinec
For the archive: > > TROUBLE in check_mail: spam_scan FAILED: panic: swash_fetch at > > /etc/mail/spamassassin/70_sare_specific.cf, rule SARE_SPEC_SHORTQ, line > > 1, line 1706. The problem turned out to be missing perl library directory 'unicore' in chroot jail. The need for it is documented in

Re: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-13 Thread Chris Purves
Mike Sassaman wrote: Mike Sassaman wrote: Post a sample list of rules that hit one of these negative scoring spams. Without a list of hits there's no really way to say what's going wrong. I'd love to! Could you tell me how to find which rules are being hit for a given message? That infor

Re: Spamassassin & Bayes

2006-01-13 Thread Matt Kettler
At 05:06 AM 1/13/2006, Markus Braun wrote: Hello together, At the moment i use spamassassin for spam protection. Also Autobayes is activated. I know when autobayes make some mistakes with ham or spam, that i can correct it manually. e.g. sa -- learn (the file) But what does sa--learn keep i

RE: Spamassassin & Bayes

2006-01-13 Thread Bowie Bailey
Markus Braun wrote: > > At the moment i use spamassassin for spam protection. > Also Autobayes is activated. > > I know when autobayes make some mistakes with ham or spam, that i can > correct it manually. > > e.g. > sa -- learn (the file) > > But what does sa--learn keep in mind? > > On the n

Re: optimization failing

2006-01-13 Thread Anne Ramey
Loren Wilton wrote: Basically only two possibilities: you're thrashing the poor box to death by running out of memory, or network tests are taking an age. Or maybe both. ok, I had a pyzor test timing out, but I've removed that, and it's still taking 6-15 seconds for the SA check. How many

Re: [exim] Continuing Exim 4.60 & SpamAssassin 3.1.0 Problems

2006-01-13 Thread George R . Kasica
>On Fri, 13 Jan 2006 12:40:14 +0100, you wrote: >George R. Kasica schrieb: > >> Help needed please! >> >> We are trying to upgrade from exim 3.36 and SA 3.0.4 to Exim 4.60 and >> SA 3.1 and are having no end of difficulties here. We just decided to >> pull SA 3.1 out and go back to 3.0.4 as we ca

Re: Continuing Exim 4.60 & SpamAssassin 3.1.0 Problems

2006-01-13 Thread Chris Purves
George R. Kasica wrote: Help needed please! We are trying to upgrade from exim 3.36 and SA 3.0.4 to Exim 4.60 and SA 3.1 and are having no end of difficulties here. We just decided to pull SA 3.1 out and go back to 3.0.4 as we cannot get it to scan each message, not time out or crash and not use

Logging the Sendmail queue id in the SpamAssassin logs?

2006-01-13 Thread Marco Teeuwen
Hello everybody, SpamAssassin doesn't seem to be able to log the Sendmail queue id's in it's logfiles. Is there a way to accomplish this? How do you know which SpamAssassin log lines are applicable to which mail? On a quiet server you can use the timestamps, but on a busy server this is not very p

Spamassassin & Bayes

2006-01-13 Thread Markus Braun
Hello together, At the moment i use spamassassin for spam protection. Also Autobayes is activated. I know when autobayes make some mistakes with ham or spam, that i can correct it manually. e.g. sa -- learn (the file) But what does sa--learn keep in mind? On the next day, a spam emails als