Re: SpamAssassin large-scale users willing to comment?

A hundred million or a hundred thousand? I really mean a hundred million. _ Call Anyone, Anytime, Anywhere in the World - FREE! Free Internet calling from NetZero Voice Visit http://www.netzerovoice.com today!

Re: Updated Pump and Dump rules. 2006-02-23

Gene Heskett wrote: On Thursday 23 February 2006 01:06, Doc Schneider wrote: I just committed version 01.00.08 of this ruleset to: http://rulesemporium.com/rules/70_sare_stocks.cf It should appear within the hour. Enjoy. -Doc (SA/SARE/URIBL/SURBL -- Ninja) I've copied this one from that li

Re: Updated Pump and Dump rules. 2006-02-23

On Thursday 23 February 2006 01:06, Doc Schneider wrote: >I just committed version 01.00.08 of this ruleset to: > >http://rulesemporium.com/rules/70_sare_stocks.cf > >It should appear within the hour. > >Enjoy. > >-Doc (SA/SARE/URIBL/SURBL -- Ninja) I've copied this one from that link into the dir

Updated Pump and Dump rules. 2006-02-23

I just committed version 01.00.08 of this ruleset to: http://rulesemporium.com/rules/70_sare_stocks.cf It should appear within the hour. Enjoy. -Doc (SA/SARE/URIBL/SURBL -- Ninja)

Re: SpamAssassin large-scale users willing to comment?

Jeff Peng wrote: I'm interested in this reporter.We use spamassassin's partial features, it's original now,while we should improve it. Thre are more than a hundred million users are protected under SA here. A hundred million or a hundred thousand? Cami

Re: When rules run amok....

From: "Gene Heskett" <[EMAIL PROTECTED]> On Wednesday 22 February 2006 21:51, jdow wrote: Try that again Dig that forged origin ID: Received: from ADSL-200-59-108-16.capfed2.uolsinectis.com.ar ([200.59.108.16]) by mx-clapper.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP \ id 1fbZE76yn3

Re: When rules run amok....

On Wednesday 22 February 2006 21:51, jdow wrote: >Try that again >Dig that forged origin ID: > Received: from ADSL-200-59-108-16.capfed2.uolsinectis.com.ar > ([200.59.108.16]) by mx-clapper.atl.sa.earthlink.net (EarthLink SMTP > Server) with SMTP \ id 1fbZE76yn3Nl34b0; Wed, 22 Feb 2006 14:27:31 > -

Re: SpamAssassin large-scale users willing to comment?

I'm interested in this reporter.We use spamassassin's partial features,it's original now,while we should improve it.Thre are more than a hundred million users are protected under SA here. -- [EMAIL PROTECTED] (Justin Mason) wrote: Hey all -- Apache SpamAssassin has won DataMation Product of the

Re: When rules run amok....

Try that again Dig that forged origin ID: Received: from ADSL-200-59-108-16.capfed2.uolsinectis.com.ar ([200.59.108.16]) by mx-clapper.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP \ id 1fbZE76yn3Nl34b0; Wed, 22 Feb 2006 14:27:31 -0500 (EST) X-Originating-IP: 37.111.211.35 by smt

Re: When rules run amok....

Dig that forged origin ID: - Original Message - From: "Chris" <[EMAIL PROTECTED]> To: Sent: Wednesday, February 22, 2006 15:33 Subject: Re: When rules run amok

Re: SpamAssassin large-scale users willing to comment?

On Wednesday 22 February 2006 17:27, jdow wrote: >From: "Chris Santerre" <[EMAIL PROTECTED]> > >>> From: Kristopher Austin [mailto:[EMAIL PROTECTED] >>> >>> We're a university. I'm not sure if we are as big as you're >>> looking for >>> (around 2100 mailboxes), but I'd be willing to talk to a repo

FINAL CALL - Conference on Email and Anti-Spam 2006

Want to make sure folks know about this! - Forwarded message - Date: Wed, 22 Feb 2006 15:01:28 -0800 Subject: FINAL CALL - Conference on Email and Anti-Spam 2006 THE THIRD CONFERENCE ON EMAIL AND ANTI-SPAM (CEAS 2006) Thursday July 27 and Friday July 28, 2006

Re: When rules run amok....

On Wednesday 22 February 2006 6:24 pm, Daryl C. W. O'Shea wrote: > On 2/22/2006 4:58 AM, Justin Mason wrote: > > the errors are harmless AFAIK. > > Harmless and already fixed in both trunk and the 3.1 branch (they're > caused by the extremely liberal IPv6 regex that was in use). > > Daryl Thanks f

Re: When rules run amok....

On 2/22/2006 4:58 AM, Justin Mason wrote: the errors are harmless AFAIK. Harmless and already fixed in both trunk and the 3.1 branch (they're caused by the extremely liberal IPv6 regex that was in use). Daryl

Re: When rules run amok....

On Wednesday 22 February 2006 4:30 pm, jdow wrote: > I've been wondering if anybody would call "1_801.457.4483" and find out > who it is, just for grins and giggles. > > And it's not QUITE what you posted. The "3" in "3BER" is spurious. That > is the last digit of the phone number. > > Chris mentio

Re: spamd & mysql redux

To specify the socket in a perl DBI connect do the following: my $DBH = DBI->connect('dbi:mysql:databaseName;mysql_socket=/tmp/mysql.sock', 'user', 'password', {ShowErrorStatement => 1}) or die "Can't open database"; Steve Thomas wrote: Feb 22 11:45:42 ronin spamd[3322]: bayes:

Re: Take a look at this spam

wrote: HelLo -at-use! I fouNd yoUr profile in seaRch result Here. whEn I read it I deCidEd to wriTe you and intRoduce mysElf. sO, mY nAme iS AnAstasia. I Know tHat my letteR may get loSt among oThers that comE to you evEry day, but It will be coOL if yoU'll write me. If yoU really sear

Take a look at this spam

HelLo -at-use! I fouNd yoUr profile in seaRch result Here. whEn I read it I deCidEd to wriTe you and intRoduce mysElf. sO, mY nAme iS AnAstasia. I Know tHat my letteR may get loSt among oThers that comE to you evEry day, but It will be coOL if yoU'll write me. If yoU really searChing for your

Re: spamd & mysql redux

On Wed, 22 Feb 2006, Steve Thomas wrote: > > i googled a bit and found this related to fedora3 and SELinux: > > http://forums.mysql.com/read.php?11,20759,21482#msg-21482 > > I had seen that page, but didn't know what selinux was (thought it was a > distro!) so I thought it was irrelevant. After ch

Re: When rules run amok....

I've been wondering if anybody would call "1_801.457.4483" and find out who it is, just for grins and giggles. And it's not QUITE what you posted. The "3" in "3BER" is spurious. That is the last digit of the phone number. Chris mentions that the bozoid continues to do it, too. {^_-} - Origin

Re: SpamAssassin large-scale users willing to comment?

From: "Chris Santerre" <[EMAIL PROTECTED]> From: Kristopher Austin [mailto:[EMAIL PROTECTED] We're a university. I'm not sure if we are as big as you're looking for (around 2100 mailboxes), but I'd be willing to talk to a reporter. You know, I got to thinking about the last time I talked to

Re: spamd & mysql redux

> i googled a bit and found this related to fedora3 and SELinux: > http://forums.mysql.com/read.php?11,20759,21482#msg-21482 I had seen that page, but didn't know what selinux was (thought it was a distro!) so I thought it was irrelevant. After checking it out, it turns out that that's what the pr

Re: spamd & mysql redux

Steve Thomas wrote: I'm most curious about the error number given - (13). In mysql speak, that's a 'permission denied', but according to the logs, there's no connection attempt even being made. I don't know if that number is coming from spamd, the perl db api or mysql. I doubt it's coming from my

Re: spamd & mysql redux

On Wed, 22 Feb 2006, Steve Thomas wrote: > >> Feb 22 11:45:42 ronin spamd[3322]: bayes: unable to connect to database: > >> Can't connect to local MySQL server through socket > >> '/var/lib/mysql/mysql.sock' (13) > > > > Is that where mysql.sock is located? I don't know where the MySQL RPMs > > mi

Re: AWL question

> From: Magnus Holmgren <[EMAIL PROTECTED]> > Organization: Lysator ACS > Date: Wed, 22 Feb 2006 12:10:47 +0100 > To: > Cc: Jon Essen-Moller <[EMAIL PROTECTED]> > Subject: Re: AWL question > > Jon Essen-Moller skrev: >> Shouldn't addresses in the AWL result in points being subtracted? > > Käre

RE: SpamAssassin large-scale users willing to comment?

Title: RE: SpamAssassin large-scale users willing to comment? > -Original Message- > From: Kristopher Austin [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 22, 2006 2:26 PM > To: [EMAIL PROTECTED]; users@spamassassin.apache.org > Subject: RE: SpamAssassin large-scale users wi

Re: spamd & mysql redux

>> Feb 22 11:45:42 ronin spamd[3322]: bayes: unable to connect to database: >> Can't connect to local MySQL server through socket >> '/var/lib/mysql/mysql.sock' (13) > > Is that where mysql.sock is located? I don't know where the MySQL RPMs > might > stick it, but source installs stick it at /tmp/m

Re: spamd & mysql redux

Feb 22 11:45:42 ronin spamd[3322]: bayes: unable to connect to database: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) Is that where mysql.sock is located? I don't know where the MySQL RPMs might stick it, but source installs stick it at /tmp/mysql.sock by

spamd & mysql redux

Howdy list, I'm having the exact same problem that Glenn is/was having as posted about last week. (see http://article.gmane.org/gmane.mail.spam.spamassassin.general/77708) I'm using Fedora Core 4, perl 5.8.6, SA 3.1.0 and mysql 4.1. SA was installed by building an RPM directly from the tarball. I

RE: SpamAssassin large-scale users willing to comment?

Matthew.van.Eerde wrote: > FWIW, the new Windows Live Mail Beta service uses SpamAssassin. Er, wait, no it doesn't. Never mind. I was misreading the headers. Clickability uses SpamAssassin. They power CNN's "Email this story" tool. I had sent myself a CNN story to a Windows Live Mail Beta ad

RE: SpamAssassin large-scale users willing to comment?

[EMAIL PROTECTED] wrote: > Hey all -- > > Apache SpamAssassin has won DataMation Product of the Year in the > anti-spam category *again* this year -- for the second year running! > (yay!) > > One thing that would be really cool would be some comments from our > "customers", for the press surround

Re: Unsubsribe

On Wed, February 22, 2006 11:34 am, Mads Ipsen wrote: > Sorry to bother about this, but couldn't seem to find the answer. How do I > unsubscribe from this list? In the headers of each message: list-unsubscribe:

Re: Unsubsribe

Mads Ipsen wrote: > Sorry to bother about this, but couldn't seem to find the answer. How do I > unsubscribe from this list? > > // Mads list-help: list-unsubscribe: -- Mr Michele Neylon Blacknight Solutions Quality Business Hosting & Colocat

Re: SpamAssassin large-scale users willing to comment?

Justin, I am a local ISP that uses SpamAssassin to filter mail for our users. We have about 1 mail users, my daily mail volume is nearly 1,000,000 messages (of which most are blocked of course). I have in past been quoted in the news, but it is interesting how most of the technical informat

Unsubsribe

Sorry to bother about this, but couldn't seem to find the answer. How do I unsubscribe from this list? // Mads

RE: SpamAssassin large-scale users willing to comment?

We're a university. I'm not sure if we are as big as you're looking for (around 2100 mailboxes), but I'd be willing to talk to a reporter. Kris > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 22, 2006 12:00 PM > To: users@SpamAssassin.

Re: SpamAssassin large-scale users willing to comment?

Chris Santerre wrote: > > >> -Original Message- >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, February 22, 2006 1:00 PM >> To: users@spamassassin.apache.org >> Subject: SpamAssassin large-scale users willing to comment? >> >> >> Hey all -- >> >> Apache SpamAssas

RE: SpamAssassin large-scale users willing to comment?

Title: RE: SpamAssassin large-scale users willing to comment? > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 22, 2006 1:00 PM > To: users@spamassassin.apache.org > Subject: SpamAssassin large-scale users willing to comment? > >

RE: Pling pling, many exclamations, and Yahoo!

Philip Prindeville wrote: > Unfortunately Yahoo! also changed the policy about generating > the MAIL FROM: line. It used to be that of the person sending > to you. Now it's some long unique id: > > <[EMAIL PROTECTED]> Good for Yahoo. And about time, too. CNN's Clickability send-to-friend tool

Re: Pling pling, many exclamations, and Yahoo!

Chris Santerre wrote: > > From: Philip Prindeville [mailto:[EMAIL PROTECTED] > > > Sent: Tuesday, February 21, 2006 9:45 PM > > To: users@spamassassin.apache.org > > Subject: Pling pling, many exclamations, and Yahoo! > > > > > > I was noticing that every time that someone forwards me an > > artic

SpamAssassin large-scale users willing to comment?

Hey all -- Apache SpamAssassin has won DataMation Product of the Year in the anti-spam category *again* this year -- for the second year running! (yay!) One thing that would be really cool would be some comments from our "customers", for the press surrounding this. If you, or someone you know, w

Re: sa-learn

On Wed, Feb 22, 2006 at 11:32:28AM -0500, Payal Rathod wrote: > It just forwards the spam mail to a mailbox. > The real checking is done by spamc I guess. > How can I make spamc add that header even to clean messages? spamc leaves markup to spamd, which would add in that header if you configured i

Re: sa-learn

Payal Rathod wrote: On Wed, Feb 22, 2006 at 11:24:11AM -0500, Theo Van Dinter wrote: Usually you would see a X-Spam-Status header which would include a BAYES_## rule hit. I cannot see such a header. I have no idea how that program works so I have no input for you about how it operates. It m

Re: sa-learn

On Wed, Feb 22, 2006 at 11:24:11AM -0500, Theo Van Dinter wrote: > Usually you would see a X-Spam-Status header which would include a > BAYES_## rule hit. I cannot see such a header. > I have no idea how that program works so I have no input for you about > how it operates. It may not put in a S

Re: sa-learn

On Wed, Feb 22, 2006 at 11:19:55AM -0500, Payal Rathod wrote: > How would I know which mails have bayes score of over 70% ? Usually you would see a X-Spam-Status header which would include a BAYES_## rule hit. > One thing I alway don't understand, how do I know scores of mails which > are below

Re: sa-learn

On Wed, Feb 22, 2006 at 11:12:49AM -0500, Theo Van Dinter wrote: > I think that would be fine. I'd say you should definitely continue > learning any ham mails that get a Bayes score over 70%, but otherwise > auto-learning will probably take care of things for you. How would I know which mails ha

Re: sa-learn

On Wed, Feb 22, 2006 at 11:00:00AM -0500, Payal Rathod wrote: > 0.000 0 42960 0 non-token data: nspam > 0.000 0 86243 0 non-token data: nham > > Is it ok if I don't learn anymore hams for a while? > I have, > auto_learn 1 > bayes_auto_learn 1 > > Is

Re: sa-learn

On Wed, Feb 22, 2006 at 10:54:45AM -0500, Theo Van Dinter wrote: > This is normal. Here's a post I made about it last month: > > http://article.gmane.org/gmane.mail.spam.spamassassin.general/76672 > > as long as the data seen via "sa-learn --dump magic" changes, you're > all set. Thanks for the

Re: sa-learn

On Wed, Feb 22, 2006 at 10:50:19AM -0500, Payal Rathod wrote: > The size of bayes_seen & bayes_toks is still the same and bayes_journal > is gone. Is this unusual? Why are the sizes still the same especially > when I learned around 107 more new spams? This is normal. Here's a post I made about

sa-learn

Hi, I am not sure if spam learning is really taking place. I have, # ll /var/bayes/ total 14548 -rwxrwxrwx 1 spamd spamd89616 Feb 21 20:49 bayes_journal -rwxrwxrwx 1 root root 10567680 Feb 21 20:43 bayes_seen -rwxrwxrwx 1 spamd spamd 5304320 Feb 21 20:43 bayes_toks I used sa-learn to lea

RE: Pling pling, many exclamations, and Yahoo!

Title: RE: Pling pling, many exclamations, and Yahoo! > -Original Message- > From: Philip Prindeville [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, February 21, 2006 9:45 PM > To: users@spamassassin.apache.org > Subject: Pling pling, many exclamations, and Yahoo! > > > I was noticing

RE: Own HAM Rule doesn't work

Title: RE: Own HAM Rule doesn't work > -Original Message- > From: Muenz, Michael [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 22, 2006 3:57 AM > To: users@spamassassin.apache.org > Subject: Re: Own HAM Rule doesn't work > > > Hi, > > > maybe the rule is missing the "<>"

RE: Bayes Advise and Question ?

Thank you sir :) -Original Message- From: Bowie Bailey [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 22, 2006 4:35 PM To: users@spamassassin.apache.org Subject: RE: Bayes Advise and Question ? Vahric MUHTARYAN wrote: > > I red some articules about bayes and something is not clea

RE: Bayes Advise and Question ?

Vahric MUHTARYAN wrote: > > I red some articules about bayes and something is not clear for me > and I need spamassassin people advises > > I’m using spamassassin rules , some SARE rules , razor and I’m happy > with spam detection . First I think that I should disable > autolearning and manuelly

Bayes Advise and Question ?

Hi Everybody ,   I red some articules about bayes and something is not clear for me and I need spamassassin people advises     I’m using spamassassin rules , some SARE rules , razor and I’m happy with spam detection . First I think that I should disable autolearning and manuelly train

Re: AWL question

Jon Essen-Moller skrev: > Hej Magnus, > > Tack för snabbt svar. Följfråga dock. Vet du ifall "sa-learn --ham > $file" påverkar awl poängsättning? > Please stick to English on the list. No, sa-learn only updates the bayes database. It doesn't affect awl. -- Magnus Holmgren signature.asc Desc

Re: AWL question

Hej Magnus, Tack för snabbt svar. Följfråga dock. Vet du ifall "sa-learn --ham $file" påverkar awl  poängsättning? /jon Magnus Holmgren said the following on 2006-02-22 12:10: Jon Essen-Moller skrev: Shouldn't addresses in the AWL result in points being subtracted? Kä

'Amazon Customer' and others - scoring

Does anyone have a good rule set to stop the Amazon Customer - 983A-987 type emails? Also getting a few of the Starbucks ones through - I have managed to stop some by tweaking Bayes but they are only just getting scored high enough - Anyone know any good rules for these? thanks

Re: AWL question

Jon Essen-Moller skrev: > Shouldn't addresses in the AWL result in points being subtracted? Käre Jon, This is probably the most frequently asked question of them all. AWL adds or subtracts points towards the previous average score of the sender. See http://wiki.apache.org/spamassassin/AwlWrongWay

AWL question

Hi, I'm using SA 3.01 on a RedHat 8 box. Sometimes spam points are added and the logs refer to the AWL list.: --- X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on mail.local X-Spam-Level: X-Spam-Status: Yes, score=0.4 required=0.2 tests=AWL autolearn=h

Re: When rules run amok....

haha. "NUMBER[0-255]" s/NUM/randomdigit/g -> "3BER[0-255]" oops! the errors are harmless AFAIK. --j. jdow writes: > I received this from a fellow on another list. It took some puzzling > until I figured out what went wrong. He has yet to get back to me with > whether or not there

Re: Own HAM Rule doesn't work

Hi, > maybe the rule is missing the "<>" which encloses the to entry. > at least this fits <[EMAIL PROTECTED]>: > echo "<[EMAIL PROTECTED]>"| perl -ne 'print if m/\.be\>$/i' damn right! Thank you very much (also mouss) for your help! What a stupid mistake ... Michael