Re: [OT] Planet Antispam

2006-01-17 Thread Michele Neylon:: Blacknight.ie
Justin Mason wrote: > Hey all -- > > Since there's now a few anti-spam bloggers about, I took the liberty of > setting up a "Planet" on the subject: > > http://planet.spam.abuse.net/ > > (A "Planet" is a subject-specific weblog aggregator; republishing weblog > entries in a single place, and

[OT] Planet Antispam

2006-01-17 Thread Justin Mason
Hey all -- Since there's now a few anti-spam bloggers about, I took the liberty of setting up a "Planet" on the subject: http://planet.spam.abuse.net/ (A "Planet" is a subject-specific weblog aggregator; republishing weblog entries in a single place, and providing a central spot for a group

Re: Image-only stock spam -- nice try!

2006-01-17 Thread Brian Godette
On Tuesday 17 January 2006 02:52 pm, Justin Mason wrote: > Brian Godette writes: > > On Tuesday 17 January 2006 01:02 pm, Justin Mason wrote: > > > yeah, we were chatting about that on John-Graham Cumming's weblog. All > > > I can think of is that they're attempting to evade another anti-spam > > >

RE: spam scores low (Sendmail + smtp-vilter + SA )

2006-01-17 Thread Mike Sassaman
> > % spamassassin --lint shows no output, so I'm thinking that means no > > problems in my local.cf. > > Good, 'spamassassin --lint' should show no outout, it ony barks when > there's something wrong. Now 'spamassassin --lint -D' gives -tons- > of output, but any error messages often get buried

Re: [exim] Exim4 and SA: Overloading the system

2006-01-17 Thread Gary V
PS: more RAM usually is a good idea but situations have been reported, where adding memory just killed performance, so be careful with such generalizations. There have been Intel-mainboard-chipsets with 2nd-level-caches supporting up to 256MB. Adding more memory gave you more memory, sure. But

Re: Spamassassin & Bayes

2006-01-17 Thread jdow
From: "Markus Braun" <[EMAIL PROTECTED]> >For an example setup: If my network is 192.168.1.0/24 and I have two mailservers at 192.168.1.2 and 192.168.1.3, I could set it up two different ways. Individually: trusted_networks 192.168.1.2 trusted_networks 192.168.1.3 Or the entire netwo

Re: Image-only stock spam -- nice try!

2006-01-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian Godette writes: > On Tuesday 17 January 2006 01:02 pm, Justin Mason wrote: > > yeah, we were chatting about that on John-Graham Cumming's weblog. All I > > can think of is that they're attempting to evade another anti-spam > > product, one that

Re: Merging Bayes database on a single system

2006-01-17 Thread Michael Parker
Frank Bures wrote: > Due to unfortunate typo, several Bayes databases were created on my system. > I am running central Bayes database but now I have another one for the last > two days. > Is there a way how to import that database into the main one? > Short answer, no. Long answer: http://arti

Re: Image-only stock spam -- nice try!

2006-01-17 Thread Matt Kettler
Brian Godette wrote: > On Tuesday 17 January 2006 01:02 pm, Justin Mason wrote: > >>yeah, we were chatting about that on John-Graham Cumming's weblog. All I >>can think of is that they're attempting to evade another anti-spam >>product, one that uses OCR, but is secret/proprietary hence *we* don't

Re: Image-only stock spam -- nice try!

2006-01-17 Thread Brian Godette
On Tuesday 17 January 2006 01:02 pm, Justin Mason wrote: > yeah, we were chatting about that on John-Graham Cumming's weblog. All I > can think of is that they're attempting to evade another anti-spam > product, one that uses OCR, but is secret/proprietary hence *we* don't > know about it. Or the

Re: huge files in /tmp?

2006-01-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kendall Libby writes: > > I'm not entirely certain that this is a spamassassin issue, but since > I can't find a more likely culprit I thought I'd check here... We're > running SA 3.04 on Solaris 8. > > This past weekend our mail relays started usi

Re: Image-only stock spam -- nice try!

2006-01-17 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kelson Vibber writes: > Got an interesting variation on those "Strong Buy!" stock scams. > Instead of a straight message, they'd taken a screen shot of the pitch > and rotated it slightly (presumably to make OCR more difficult), then > placed the i

Re: [exim] Exim4 and SA: Overloading the system

2006-01-17 Thread Patrick von der Hagen
Bill Hacker wrote: [...] The volume, type, and size of messages and attachments, (spam and genuine) is more important than user-count. Have a look if your mail-throughput has increased since activating SA. There have been reports where someone disabled recipient verification when activating SA,

huge files in /tmp?

2006-01-17 Thread Kendall Libby
I'm not entirely certain that this is a spamassassin issue, but since I can't find a more likely culprit I thought I'd check here... We're running SA 3.04 on Solaris 8. This past weekend our mail relays started using up too much swap. Looking in /tmp, I fould a bunch of files similar to these:

new archive-iterator errors (?) on sa-learn

2006-01-17 Thread OpenMacNews
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 hi all, i've SA-HEAD (r369233) installed on OSX 10.4.4 i'm running an sa-learn cron job on ham/spam folders. sometimes, of course, those folders are empty ... i've started getting cron job errors of: "config: no configuration text or files f

Re: Exim4 and SA: Overloading the system

2006-01-17 Thread Gary V
otubo wrote: Friends, I am running exim4 with SA for 216 users in a networkThe configuration of my server is: P4 1.4GHz, 256 RAM and 40GB HD. And myserver is NEW, i´ve just finished configuring it last week, and it s getting overloaded. The webmail takes too long to be loaded in a brows

Re: Exim4 and SA: Overloading the system

2006-01-17 Thread Stuart Johnston
otubo wrote: Friends, I am running exim4 with SA for 216 users in a networkThe configuration of my server is: P4 1.4GHz, 256 RAM and 40GB HD. And my server is NEW, i´ve just finished configuring it last week, and it is getting overloaded. The webmail takes too long to be loaded in a brows

RE: Merging Bayes database on a single system

2006-01-17 Thread Kristopher Austin
Thanks, Frank! This looks very useful. Kris -Original Message- From: Frank Bures [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 17, 2006 10:05 AM To: users@spamassassin.apache.org Subject: Merging Bayes database on a single system -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to

Image-only stock spam -- nice try!

2006-01-17 Thread Kelson Vibber
Got an interesting variation on those "Strong Buy!" stock scams. Instead of a straight message, they'd taken a screen shot of the pitch and rotated it slightly (presumably to make OCR more difficult), then placed the image in an email. And yet check out the score it got: Message scored 14.2 p

Re: How to dump Bayes

2006-01-17 Thread Matt Kettler
Clay Davis wrote: > How do I dump my Bayes db so I can see what the tokes are scored at? sa-learn --dump However, if you use SA 3.0.0 or higher you won't be able to actually read the tokens. They are stored in SHA hash form, and cannot be reversed back into the original text. The hashing provid

How to dump Bayes

2006-01-17 Thread Clay Davis
How do I dump my Bayes db so I can see what the tokes are scored at? Thanks, Clay

Merging Bayes database on a single system

2006-01-17 Thread Frank Bures
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to unfortunate typo, several Bayes databases were created on my system. I am running central Bayes database but now I have another one for the last two days. Is there a way how to import that database into the main one? Thanks Frank Bures, Dept

Using SQL for AWL and bayes on Windows

2006-01-17 Thread Bret Miller
After someone commented recently on the overhead that the default awl and bayes databases use and how using SQL could reduce that, I did some testing with using SQL on a Windows server. You should be able to get the latest MySQL, install it and follow the readme instructions to get it going. But,

Question about spam sent to non-user.

2006-01-17 Thread Steven W. Orr
All the mail that comes to the few users on my system is going through SA just fine. I happen to also be using sendmail and spamass-milter and the milter is set to reject mail before reception completes if SA says so. I also run a few mailinglists. My problem is that I get a regular stream of

Re: Exim4 and SA: Overloading the system

2006-01-17 Thread Christian Eichert
otubo schrieb: > Friends, > I am running exim4 with SA for 216 users in a networkThe > configuration of my server is: P4 1.4GHz, 256 RAM and 40GB HD. And my > server is NEW, i´ve just finished configuring it last week, and it is > getting overloaded. The webmail takes too long to be loaded

Re: Gain an extra 25%! (was "Purging the Spamassassin Database")

2006-01-17 Thread Michael Parker
Justin Mason wrote: > > It'd be worth opening a feature enhancement request in the bugzilla > for this. I'd like Michael to comment on it... > SQL configs are specifically generic, to work for the widest range of people without editing. So I'd be -1 on a change like this, it possibly narrows t

RE: Exim4 and SA: Overloading the system

2006-01-17 Thread Martin Hepworth
RAM add more RAM. 256MB is pretty low, it's probably swapping a lot. Add more RAM - I've got 1.5GB for 120 users. BUT I have a lot extra Rulesets etc. I';m using about 1.2GB but that includes a mysql emai logging DB as well. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +4

RE: Spamassassin & Bayes

2006-01-17 Thread Bowie Bailey
Markus Braun wrote: > > It's more like "I know all machines in 10.2.3.xxx belong to my > > network which is safe and which I trust, so I'll add 10.2.3.xxx/24 > > to trusted_networks" > > > > I don't think it's safe to add a external network like gmx to your > > trusted_networks list. > > > But

Exim4 and SA: Overloading the system

2006-01-17 Thread otubo
Friends, I am running exim4 with SA for 216 users in a networkThe configuration of my server is: P4 1.4GHz, 256 RAM and 40GB HD. And my server is NEW, i´ve just finished configuring it last week, and it is getting overloaded. The webmail takes too long to be loaded in a browser, the mail ak

New RDJ configs..

2006-01-17 Thread Martin Hepworth
Hi all (and Chris Thielen specifically) I'm try to create some new RDJ config sets ... here's an example JG_badhosts=9006; CF_URLS[9006]="http://files.grayonline.id.au/rules/local_badhosts. cf"; CF_NAMES[9006]="James Gray's badhost rules"; PARSE_NEW_VER_SCRIPTS[9006]="${PERL} -ne

RE: Spamassassin & Bayes

2006-01-17 Thread Markus Braun
For an example setup: If my network is 192.168.1.0/24 and I have two mailservers at 192.168.1.2 and 192.168.1.3, I could set it up two different ways. Individually: trusted_networks 192.168.1.2 trusted_networks 192.168.1.3 Or the entire network: trusted_networks 192.168.1. My ISP m

Re: Spamassassin & Bayes

2006-01-17 Thread Loren Wilton
> But what is my internal network. I have one server in cologne. ping from the SA machine. Loren