On Wednesday 08 February 2006 01:33, Craig White wrote:
>On Wed, 2006-02-08 at 01:10 -0500, Gene Heskett wrote:
>> Greetings all;
>> Does anyone here have any experience with previous versions of this
>> utility? And if so, any hints to toss my way?
>
>
>personally, I think you should handle
On Wed, 2006-02-08 at 01:10 -0500, Gene Heskett wrote:
> Greetings all;
>
> I just stumbled over an announcement on freshmeat about getmail as a
> substitute for fetchmail, but from looking at the web page & FAQ, its
> not clear if getmail can both filter by passing the incoming mail thru
> SA,
Greetings all;
I just stumbled over an announcement on freshmeat about getmail as a
substitute for fetchmail, but from looking at the web page & FAQ, its
not clear if getmail can both filter by passing the incoming mail thru
SA, and put it in the /var/spool/user mailfile format that kmail
expe
On Tuesday 07 February 2006 15:27, Clay Davis wrote:
>Does anyone have any good techniques for capturing a sample of ham
> that can be used as the ham corpus. I'm in a corporate environment
> and am not keen on the idea of intercepting non-spam messages. I
> will if I have to, but was hoping some
On Tue, 2006-02-07 at 22:51 -0500, Daryl C. W. O'Shea wrote:
> jdow wrote:
> > From: "Julian Underwood" <[EMAIL PROTECTED]>
> >> To answer Evan and Matt's question, I use MIMEDefang to send spams to
> >> the spam box. Again, most spam is tagged correctly and moved
> >> accordingly.
> >>
> >>> Or a
jdow wrote:
From: "Julian Underwood" <[EMAIL PROTECTED]>
To answer Evan and Matt's question, I use MIMEDefang to send spams to
the spam box. Again, most spam is tagged correctly and moved
accordingly.
Or are you saying that when one of these puppies gets through and you go
back later and test
From: "Julian Underwood" <[EMAIL PROTECTED]>
Hey guys, thanks for your replies, it's appreciated.
On Tue, 2006-02-07 at 10:44 -0800, Loren Wilton wrote:
>
I cna't seem to connect to your site, so I'll just assume that is a standard
vertical drug spam.
Yep. I've been getting weird Horizon
From: "Julian Underwood" <[EMAIL PROTECTED]>
http://168.100.199.67/message.txt
Sorry if this is the third time I've posted this, I've been having
problems posting. Anyhow, I've been receiving the above type of emails
(vertical drug advertisements) and they appear to receive a very high
score.
Julian Underwood wrote:
Here's another example message:
http://168.100.199.67/message2.txt
This message contains both SURBL hits, a correct score total, and
appropriate mark up.
I think the problem is SURBL points aren't being tallied or even
calculated when a spam first comes in, theref
Jim C. Nasby wrote:
> On Tue, Feb 07, 2006 at 07:59:37PM -0500, Matt Kettler wrote:
>
>> Jim,
>>
>> Bayes is NOT used when calculating autolearning score, that would
>> promote self feedbac. As I said before, the autolearner's concept of
>> score is VERY different from the final message score. S
Hey guys, thanks for your replies, it's appreciated.
On Tue, 2006-02-07 at 10:44 -0800, Loren Wilton wrote:
> >
>
> I cna't seem to connect to your site, so I'll just assume that is a standard
> vertical drug spam.
>
Yep. I've been getting weird Horizontal spams too which are slipping
by.
To
Michael W Cocke wrote:
On Tue, 07 Feb 2006 18:58:08 +0100, you wrote:
I know that SuSE had -L as default at one point in time. Just remove the
'-L' part.
It still does as of 10.0, Bog knows why. And as of 9.3 it was a an
incredibly poor idea to allow YaST to update SpamAssassin.
I know RedH
On Tue, Feb 07, 2006 at 07:59:37PM -0500, Matt Kettler wrote:
> Jim,
>
> Bayes is NOT used when calculating autolearning score, that would
> promote self feedbac. As I said before, the autolearner's concept of
> score is VERY different from the final message score. Score
> contributions from bayes
Larry Rosenman wrote:
> I have run into an issue, that I think is SA's.
>
> If I have Mail::DomainKeys 0.80 installed, SA's DomainKeys plugin
> can't find Method 'header'.
>
> Is this known?
Yup.
> Is a fix/patch available?
Yup.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4623
(bu
I have run into an issue, that I think is SA's.
If I have Mail::DomainKeys 0.80 installed, SA's DomainKeys plugin can't find
Method 'header'.
Is this known?
Is a fix/patch available?
LER
--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 512-248-2683 E
From: "Matt Kettler" <[EMAIL PROTECTED]>
Jim C. Nasby wrote:
Are there any autolearn strings? Are they all "autolearn=no"? are there any
decent number that are autolearn=failed or autolearn=disabled?
grep -r autolearn caughtspam/ | grep -v 'Binary file' | sed -e
's/.*autolearn=\([^ ]*\).*/\1
Jim C. Nasby wrote:
> On Tue, Feb 07, 2006 at 05:36:56PM -0600, Jim C. Nasby wrote:
>
>> On Tue, Feb 07, 2006 at 06:17:20PM -0500, Matt Kettler wrote:
>>
>>> Jim C. Nasby wrote:
>>>
> Are there any autolearn strings? Are they all "autolearn=no"? are there
> any
> decent
Jim C. Nasby wrote:
On Tue, Feb 07, 2006 at 05:45:54PM -0600, mike wrote:
Probably would work if you were running Linux.
The problem isn't that it isn't working, the problem is that it's
working too well. I guess maybe that's something you're not used to. :P
Something tells me if
On Tue, Feb 07, 2006 at 05:45:54PM -0600, mike wrote:
> Probably would work if you were running Linux.
The problem isn't that it isn't working, the problem is that it's
working too well. I guess maybe that's something you're not used to. :P
--
Jim C. Nasby, Database Architect[EMAI
On Tue, Feb 07, 2006 at 06:47:06PM -0500, Matt Kettler wrote:
> Jim C. Nasby wrote:
> >> Are you using network tests? Without DNSBLs it's often hard to get enough
> >> header
> >> points to cause spam learning..
> >
> > I believe so...
> >
> > grep loadplugin /usr/local/etc/mail/spamassassin/ini
On Tue, Feb 07, 2006 at 05:36:56PM -0600, Jim C. Nasby wrote:
> On Tue, Feb 07, 2006 at 06:17:20PM -0500, Matt Kettler wrote:
> > Jim C. Nasby wrote:
> > >> Are there any autolearn strings? Are they all "autolearn=no"? are there
> > >> any
> > >> decent number that are autolearn=failed or autolear
On Tue, 07 Feb 2006 18:58:08 +0100, you wrote:
>I know that SuSE had -L as default at one point in time. Just remove the
>'-L' part.
It still does as of 10.0, Bog knows why. And as of 9.3 it was a an
incredibly poor idea to allow YaST to update SpamAssassin.
Mike-
(Amavisd-new, f-prot, clam
Jim C. Nasby wrote:
>> Are you using network tests? Without DNSBLs it's often hard to get enough
>> header
>> points to cause spam learning..
>
> I believe so...
>
> grep loadplugin /usr/local/etc/mail/spamassassin/init.pre
> # loadplugin Mail::SpamAssassin::Plugin::RelayCountry
> loadplugin Mai
Probably would work if you were running Linux.
Jim C. Nasby wrote:
On Tue, Feb 07, 2006 at 05:47:36PM -0500, Matt Kettler wrote:
Chupacabra
On Tue, Feb 07, 2006 at 06:17:20PM -0500, Matt Kettler wrote:
> Jim C. Nasby wrote:
> >> Are there any autolearn strings? Are they all "autolearn=no"? are there any
> >> decent number that are autolearn=failed or autolearn=disabled?
> >>
> >
> > grep -r autolearn caughtspam/ | grep -v 'Binary file
On Tue, Feb 07, 2006 at 05:47:36PM -0500, Matt Kettler wrote:
> Jim C. Nasby wrote:
> > On Tue, Feb 07, 2006 at 05:02:25PM -0500, Matt Kettler wrote:
> >> Jim C. Nasby wrote:
> >>> On Tue, Feb 07, 2006 at 04:40:40PM -0500, Matt Kettler wrote:
> I would also check to make sure you don't have a
Jim C. Nasby wrote:
>> Are there any autolearn strings? Are they all "autolearn=no"? are there any
>> decent number that are autolearn=failed or autolearn=disabled?
>>
>
> grep -r autolearn caughtspam/ | grep -v 'Binary file' | sed -e
> 's/.*autolearn=\([^ ]*\).*/\1/'|sort|uniq -c
> 1545 no
> 140
On Tue, Feb 07, 2006 at 01:45:48PM -0800, jdow wrote:
> From: "Jim C. Nasby" <[EMAIL PROTECTED]>
>
> >On Tue, Feb 07, 2006 at 03:16:57PM -0500, Matt Kettler wrote:
> >>My current training ratio is about 7:1 spam:nonspam, but in the past it's
> >>been
> >>as bad as 20:1. Both of those are very far
Jim C. Nasby wrote:
> On Tue, Feb 07, 2006 at 05:02:25PM -0500, Matt Kettler wrote:
>> Jim C. Nasby wrote:
>>> On Tue, Feb 07, 2006 at 04:40:40PM -0500, Matt Kettler wrote:
I would also check to make sure you don't have a lot of spam coming in
that's
getting autolearned as ham. (not
Does anyone have any good techniques for capturing a sample of ham that
can be used as the ham corpus. I'm in a corporate environment and am not
keen on the idea of intercepting non-spam messages. I will if I have to,
but was hoping someone had a better idea.
Depending on your MTA/MDA, you m
On Tue, Feb 07, 2006 at 05:02:25PM -0500, Matt Kettler wrote:
> Jim C. Nasby wrote:
> > On Tue, Feb 07, 2006 at 04:40:40PM -0500, Matt Kettler wrote:
> >> I would also check to make sure you don't have a lot of spam coming in
> >> that's
> >> getting autolearned as ham. (note: the learner's idea o
Hi,
I was experimenting with something similar, although as a client of a big ISP I
need full match
rather than domain match.
My experience so far: some mail that does not have me in To or Cc is definitely
spam,
or worse. The other part is legit mail, mostly from mailinglists or other mail
for
Jim C. Nasby wrote:
> On Tue, Feb 07, 2006 at 04:40:40PM -0500, Matt Kettler wrote:
>> I would also check to make sure you don't have a lot of spam coming in that's
>> getting autolearned as ham. (note: the learner's idea of score is very
>> different
>> than the final message score, so a message
On Tue, Feb 07, 2006 at 04:40:40PM -0500, Matt Kettler wrote:
> I would also check to make sure you don't have a lot of spam coming in that's
> getting autolearned as ham. (note: the learner's idea of score is very
> different
> than the final message score, so a message CAN be tagged as spam, and
From: "Jim C. Nasby" <[EMAIL PROTECTED]>
On Tue, Feb 07, 2006 at 03:16:57PM -0500, Matt Kettler wrote:
My current training ratio is about 7:1 spam:nonspam, but in the past it's been
as bad as 20:1. Both of those are very far off from equal amounts, but the
imbalance has never caused me any prob
Jim C. Nasby wrote:
> On Tue, Feb 07, 2006 at 03:16:57PM -0500, Matt Kettler wrote:
>> My current training ratio is about 7:1 spam:nonspam, but in the past it's
>> been
>> as bad as 20:1. Both of those are very far off from equal amounts, but the
>> imbalance has never caused me any problems.
>>
>
On Tue, Feb 07, 2006 at 03:16:57PM -0500, Matt Kettler wrote:
> My current training ratio is about 7:1 spam:nonspam, but in the past it's been
> as bad as 20:1. Both of those are very far off from equal amounts, but the
> imbalance has never caused me any problems.
>
> From my sa-learn --dump magi
This is what automatic training attempts to solve.
If you are reliably nailing spam with your current setup you can experiment
with the automatic learning. But I'd widen the score ranges a little, as
far as is practical for your mail mix.
{^_^}
- Original Message -
From: "Clay Davis" <[
From: "Matt Kettler" <[EMAIL PROTECTED]>
Philip Prindeville wrote:
Interestingly enough, Japan also has laws against spam that most
legitimate ISPs attemp to conform to. You probably weren't aware of
that.
You'd never know it from their effectiveness!
This isn't really any differen
carlos baptista wrote:
> Hi,
>
> Does anyone can help me with a strage problem? I have installed a
> spamassassin+clamv+qmail, and it's working. Today I nedded to change the
> local.cf, but spamassassin just keep using the old settings. I already
> restart the services, even rebooted the server
Does anyone have any good techniques for capturing a sample of ham that can be
used as the ham corpus. I'm in a corporate environment and am not keen on the
idea of intercepting non-spam messages. I will if I have to, but was hoping
someone had a better idea.
Regards,
Clay
>>> On 2/7/2006 a
On Tue, Feb 07, 2006 at 04:51:00PM +, carlos baptista wrote:
> Does anyone can help me with a strage problem? I have installed a
> spamassassin+clamv+qmail, and it's working. Today I nedded to change the
> local.cf, but spamassassin just keep using the old settings. I already
> restart the s
[EMAIL PROTECTED] wrote:
> Can you just feed spamassassin spam or do you need to give it ham also?
>
> I read the docs and it didn't say you had to feed it ham.
>
> I then read another doc and it said you should feed it equal amounts of
> spam and ham.
Yes, you really should feed it both. You al
From: "Philip Prindeville" <[EMAIL PROTECTED]>
Alan Premselaar wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Philip Prindeville wrote:
Matt Kettler wrote:
Philip Prindeville wrote:
I.e. any provider or country that doesn't have an institutional policy
of prosecut
Philip Prindeville wrote:
>>>
>>
>> Interestingly enough, Japan also has laws against spam that most
>> legitimate ISPs attemp to conform to. You probably weren't aware of
>> that.
>>
>>
>
> You'd never know it from their effectiveness!
This isn't really any different than the US with u-ca
Alan Premselaar wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Philip Prindeville wrote:
Matt Kettler wrote:
Philip Prindeville wrote:
I.e. any provider or country that doesn't have an institutional policy
of prosecuting spam senders...
Erm, so you're go
> What SARE rules would folks recommend for a default 3.1.0
> SpamAssassin installation (non RDJ)?
I'd recommend at least all of the "0" rule sets,a nd probably the matching
"1" rule sets also. Also sare_specific. Some of the old standbys like
tripwire (available from the sare site) also are sti
> http://168.100.199.67/message.txt
I cna't seem to connect to your site, so I'll just assume that is a standard
vertical drug spam.
> they appear to receive a very high
> score. However they always seem to get past spamassassin--other spams
> get tagged and redirected to our spam box fine.
Now
> So far, what I've been doing is logging in as root and running
> sa-learn --ham /path/to/each/mail/folder/* and of course
> sa-learn --spam /path/to/spam/folder/*
> my email account is actually under a username of brian though if I run it
> logged in a brian, it doesn't change the size of the b
200 of each to even make it start working on sa-learn email. I then
feed it representative amounts of ham and spam. The ratio it comes in.
[EMAIL PROTECTED] wrote:
Can you just feed spamassassin spam or do you need to give it ham also?
I read the docs and it didn't say you had to feed it ha
[EMAIL PROTECTED] wrote:
> Can you just feed spamassassin spam or do you need to give it ham
> also?
>
> I read the docs and it didn't say you had to feed it ham.
>
> I then read another doc and it said you should feed it equal amounts
> of spam and ham.
You need to feed it both. I wouldn't wo
> > header __TO_DOMAIN_NETToCc =~ /[EMAIL PROTECTED]/i
> >
> > But the above rule would match "@domain.net" as well as
> > "@domain.net.in"
>
> You have not tried it, have you? The \b assures that it will not match
> on @domain.net.in.
Well, no, it will. The dot is a wordbreak, and \b is onl
Can you just feed spamassassin spam or do you need to give it ham also?
I read the docs and it didn't say you had to feed it ham.
I then read another doc and it said you should feed it equal amounts of
spam and ham.
Brian S. Meehan schrieb:
I'm not sure how to set or change the default setup for spamd to make sure
it's running with -L
Brian
Brian,
what OS do you run spamd on?
In SuSE eg. (newer releases) those parameters are contained in
/etc/sysconfig/spamd. I think this is a RedHat-ism so there sho
On Sunday, February 5, 2006, 3:41:22 PM, Doc Schneider wrote:
> I just updated this ruleset with some new rules and also added in the
> counts for the scoring.
> Also updated http://www.rulesemporium.com/rules.htm adding this new set
> to it.
> And please if anyone is using this set let us know
> Ole Nomann Thomsen wrote:
>
> > Hi All.
> >
> > I was scanning my SA log-files, when i noticed that about 30% of the
> > "result:" -lines do not contain any "BAYES_*" score.
> >
> > Version info:
> > SpamAssassin version 3.1.0
> > running on Perl version 5.8.4
> > on Debian and Redhat Li
Hi,
Does anyone can help me with a strage problem? I have installed a
spamassassin+clamv+qmail, and it's working. Today I nedded to change the
local.cf, but spamassassin just keep using the old settings. I already restart
the services, even rebooted the server.
These are my settings:
To star
On Dienstag, 7. Februar 2006 16:57 [EMAIL PROTECTED] wrote:
> Feb 7 16:46:10 mail..de /usr/sbin/amavisd-new[31097]:
> SpamControl: initializing Mail::SpamAssassin auto-whitelist: syntax
> error at (eval 851) line 2, near "require Mail::SpamAssassin:" syntax
> error at (eval 851) line 3, near "
Brian S. Meehan wrote:
> Dirk,
> I adjusted the rights as follows in /etc/mail/spamassassin:
> drw-rw-rw- 3 root root 352 Feb 5 17:04 .
> drwxr-xr-x 3 root root80 Jul 13 2005 ..
> drw-rw-rw- 2 root users 48 Nov 29 15:15 bayes
> -rw--- 1 root root60 Feb 5 07:54 bayes.lock
> -r
Brian S. Meehan wrote:
> Hi Bob,
> spamassassin --lint returns no errors. I've been checking it after I add
> rules.
>
> You can view my entire local.cf at http://www.meehanontheweb.com/local.cf.txt
I spot one minor bug in your local.cf:
bayes_file_mode 0666
That should be 7's not 6's.. (note in
Hi there,
i have the newes spmassassin and amavisd-new installed.
if i run amavisd-new debug, i receive an systnax error
inside the debug messages:
Feb 7 16:46:10 mail..de /usr/sbin/amavisd-new[31097]: SpamControl:
initializing Mail::SpamAssassin
auto-whitelist: syntax error at (eval 851)
Julian Underwood wrote:
> http://168.100.199.67/message.txt
>
> Sorry if this is the third time I've posted this, I've been having
> problems posting. Anyhow, I've been receiving the above type of emails
> (vertical drug advertisements) and they appear to receive a very high
> score. However they
Please unsubscribe [EMAIL PROTECTED] I'm getting a Out
Of Office reply to each of my posts to the list.
Thanks.
At 07:13 AM 2/7/2006, you wrote:
http://168.100.199.67/message.txt
Sorry if this is the third time I've posted this, I've been having
problems posting. Anyhow, I've been receiving the above type of emails
(vertical drug advertisements) and they appear to receive a very high
score. However they
jdow wrote:
> From: "Ramprasad" <[EMAIL PROTECTED]>
>
>> Hi,
>> I want to write a personal domain-wise rule The rule I am using now is
>> header __TO_DOMAIN_NETToCc =~ /[EMAIL PROTECTED]/i
>>
>> But the above rule would match "@domain.net" as well as
>> "@domain.net.in"
>
> You have not trie
http://168.100.199.67/message.txt
Sorry if this is the third time I've posted this, I've been having
problems posting. Anyhow, I've been receiving the above type of emails
(vertical drug advertisements) and they appear to receive a very high
score. However they always seem to get past spamassass
Hi Bob,
spamassassin --lint returns no errors. I've been checking it after I add
rules.
You can view my entire local.cf at http://www.meehanontheweb.com/local.cf.txt
I haven't seen "ALL_TRUSTED" in any of the x-spam-status headers in any
message.
So far, what I've been doing is logging in as roo
Hi,
I have two stock Debian 3.1 (Sarge) machines that seem to show a
different behavior of spamassassin.
The first machine has the following files in the bayes_path:
-rw--- 1 amavis amavis 344064 2006-02-07 13:06 auto-whitelist
-rw--- 1 amavis amavis 45056 2006-01-23 08:19 bayes_see
Ole Nomann Thomsen wrote:
> Hi All.
>
> I was scanning my SA log-files, when i noticed that about 30% of the
> "result:" -lines do not contain any "BAYES_*" score.
>
> Version info:
> SpamAssassin version 3.1.0
> running on Perl version 5.8.4
> on Debian and Redhat Linux
The explanation was
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Philip Prindeville wrote:
> Matt Kettler wrote:
>
>> Philip Prindeville wrote:
>>
>>
>>> I.e. any provider or country that doesn't have an institutional policy
>>> of prosecuting spam senders...
>>>
>> Erm, so you're going to block all of the U
I've been using it, seems to work well for me on my MDaemon server
Cheers,
Jeremy
"Doc Schneider" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Chris Santerre wrote:
>>
>>
>> > -Original Message-
>> > From: Doc Schneider [mailto:[EMAIL PROTECTED]
>> > Sent: Frida
On Tue, 2006-02-07 at 00:15 -0800, jdow wrote:
> From: "Ramprasad" <[EMAIL PROTECTED]>
>
> > Hi,
> > I want to write a personal domain-wise rule
> > The rule I am using now is
> >
> > header __TO_DOMAIN_NETToCc =~ /[EMAIL PROTECTED]/i
> >
> > But the above rule would match "@domain.net"
From: "Ramprasad" <[EMAIL PROTECTED]>
Hi,
I want to write a personal domain-wise rule
The rule I am using now is
header __TO_DOMAIN_NETToCc =~ /[EMAIL PROTECTED]/i
But the above rule would match "@domain.net" as well as
"@domain.net.in"
You have not tried it, have you? The \b assur
73 matches
Mail list logo
