bayes DBM versus SQL

2006-03-01 Thread Webmaster
Those of you you have used both native DBM and new SQL bayesian, can you comment on benefits of one versus the other please. Much appreciated!

Re: Any rule to flag missing message-id's as SPAM?

2006-03-01 Thread Graham Murray
Robert Nicholson <[EMAIL PROTECTED]> writes: > Hi, > > Is there a rule that says that any message without a message-id is SPAM ie. > one who's SCORE I can increase. > > I've got a spammer sending messagegs without message-id's. Just change the score for MSGID_FROM_MTA_ID. This rule will be hit w

Any rule to flag missing message-id's as SPAM?

2006-03-01 Thread Robert Nicholson
Hi,Is there a rule that says that any message without a message-id is SPAM ie. one who's SCORE I can increase.I've got a spammer sending messagegs without message-id's.I have no problem with this being considered as SPAM. From:   [EMAIL PROTECTED] Subject: Nate Crosswait Date: February 17, 2006

Re: How to deinstall the old version of Spamassassin [v2.43] if I can't do it by make && make deinstall???

2006-03-01 Thread jdow
From: "Zarshedi H. Ismoilzoda" <[EMAIL PROTECTED]> My FreeBSD version is 5.3. I’m not familiar with Linux just learning it. I installed Spamassassin [v2.43] but that version was old and I downloaded the new one [v 3.1.0] and installed manually. Now it is not correctly functioning because I d

Re: Automatically Updating Rules on Windows

2006-03-01 Thread jdow
Heh, I built my own bash script for updating. It is rude, crude, and effective. If somebody develops an irrational ideological repulsion to RDJ I can share it. I'd recommend RDJ. I'm just a hard core reactionary who developed her script about the time RDJ was developed. I stopped when it was "enou

SA Howto question

2006-03-01 Thread Abel Jeffcoat
I don't mean to sound like a I repeat questions, so if this has been answered - I'm sorry. Are there any good Howto documents on SA? In Particular running Qmail? I have been using SA for a while, but really want to learn how to use it to its fullest. Any help would be appreciated. Abel Jeff

Re: Wiki and use_terse_report

2006-03-01 Thread Matt Kettler
Philip Prindeville wrote: > I couldn't find any obvious indication of what "use_terse_report" has been > replaced with... Anyone? report_template

RE: question on training spamassassin

2006-03-01 Thread Webmaster
> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: February 27, 2006 5:18 PM > To: Jeff Portwine > Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org > Subject: Re: question on training spamassassin > > Jeff Portwine wrote: > > Hmm.. I don't quite understand

Re: sa-learn question

2006-03-01 Thread mouss
Drew Burchett a écrit : > Does sa-learn read subdirectories? If you mean maildir folders, yes.

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread mouss
Ken Morley a écrit : > > #anti spammer robots > > /^X-Mailer: .*(PSS Bulk Mailer|ccMail > Link|IXO-Mail|MMailer|K-ML|GoldMine|MAGIC|bomber|expeditor|Brooklyn > North|Broadcast|DMailer|Extractor|EMailing List Pro|News > Breaker|dbMail|Unity|PG-MAILINGLIST PRO|Dynamic| > Splio|Sarbacane|sMailing|[E

Re: False hits on rules... But Debugging doesn't show them.(SA3.1.0)

2006-03-01 Thread Hamish Marson
On Tue, 2006-02-28 at 16:51 -0800, jdow wrote: > From: "Hamish Marson" <[EMAIL PROTECTED]> > > > On Tue, 2006-02-28 at 17:55 +, Hamish Marson wrote: > >> I have a problem... Got aload of complaints about emails not coming > >> through. On investigating, I have discovered that we're getting ru

Re: SARE_LEGIT_PAYPAL scores -0.0?

2006-03-01 Thread Philip Prindeville
David B Funk wrote: >On Wed, 1 Mar 2006, Philip Prindeville wrote: > > > >>Loren Wilton wrote: >> >> >> could I be doing that would avoid this sort of FP? >>>You don't seem to be running net tests. I see headers for both SPF and >>>DomainKeys in that mail. These tests

Re: SARE_LEGIT_PAYPAL scores -0.0?

2006-03-01 Thread David B Funk
On Wed, 1 Mar 2006, Philip Prindeville wrote: > Loren Wilton wrote: > > >>could I be doing that would avoid this sort of FP? > > > >You don't seem to be running net tests. I see headers for both SPF and > >DomainKeys in that mail. These tests should have pulled the score down by > >some amount i

Wiki and use_terse_report

2006-03-01 Thread Philip Prindeville
I couldn't find any obvious indication of what "use_terse_report" has been replaced with... Anyone? -Philip

Re: SARE_LEGIT_PAYPAL scores -0.0?

2006-03-01 Thread Philip Prindeville
Loren Wilton wrote: >>could I be doing that would avoid this sort of FP? >> >> > >You don't seem to be running net tests. I see headers for both SPF and >DomainKeys in that mail. These tests should have pulled the score down by >some amount if you had run them. > > How do you know if SPF

RE: Problem with SA / Razor

2006-03-01 Thread Drew Burchett
Sounds like Razor2 isn't installed correctly. I'd reinstall and see if this clears the problem up. -Original Message- From: Joey [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 01, 2006 12:42 PM To: SpamAssassin Subject: Problem with SA / Razor I keep getting the below message in maill

Problem with SA / Razor

2006-03-01 Thread Joey
I keep getting the below message in maillog, but when I installed Razor via cpan, I had NO errors. I appreciate your help... Joey Mar 1 13:42:50 pluto spamd[7790]: Can't locate Razor2/Client/Agent.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/

Re: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Steve Thomas
> I think it was Steve that said his database is in SQL format. How do I > convert the spamassassin database on FreeBSD 5.4 to SQL? I used the procedure found on this page as a guide: http://www200.pair.com/mecham/spam/fc4-spamassassin-sql.html

RE: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Matthew.van.Eerde
Marc Dufresne wrote: > I think it was Steve that said his database is in SQL format. How do I > convert the spamassassin database on FreeBSD 5.4 to SQL? http://wiki.apache.org/spamassassin/BetterDocumentation/SqlReadmeBayes -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hisp

AW: Multidomain Mailhosting on one physical host

2006-03-01 Thread sa
Lisa, > Hi, > > > > > Well, lets say the hosted domains are dom1.org and dom2.org > > > > My problem is: > > > > User Sam and Joe has internet access via DSL with a dynamic ip address. > > The > > mail going from [EMAIL PROTECTED] to [EMAIL PROTECTED] is identified as SPAM > because > > the send

Re: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Marc Dufresne
I think it was Steve that said his database is in SQL format. How do I convert the spamassassin database on FreeBSD 5.4 to SQL? I just renamed the bayes_toks file to .org and copied a backup over. Now sa-learn --sync and sa-learn --dump magic work. Marc Dufresne, Corporate IT Officer St. Lawrenc

RE: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Marc Dufresne
What are my options at this point to resolve the issue? Marc Dufresne, Corporate IT Officer St. Lawrence Parks Commission 13740 County Road 2 Morrisburg, ON K0C 1X0 E-mail: [EMAIL PROTECTED] Voice: 613-543-3704 Ext#2455 Fax: 613-543-2847 Corporate website: www.parks.on.ca >>> <[EMAIL PROTECTE

sa-learn question

2006-03-01 Thread Drew Burchett
Does sa-learn read subdirectories?  If not, is there a way to make it read subdirectories? -- CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthoriz

Automatically Updating Rules on Windows

2006-03-01 Thread Bret Miller
Thanks to a recent post with a sample of how to download rules in Perl, I managed to create a nice perl-based updating tool for SARE rules. Why? Because for a lot of Windows admins, setting up a CYGWIN environment for RulesDuJour was daunting. I had a previous example of a Windows-based tool, but

Re: General assistance

2006-03-01 Thread DAve
Chris Santerre wrote: I would like to make a quick comment to everyone who has helped in this thread: Great job. Seriously. Some good answers here. Can we we all take a minute to make sure these answers are posted somewhere on the SA wiki's for future reference? Its been a while since we had a p

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Ken Morley
Scott Russell wrote: > No. If this was amavisd or spamd it would be logged as such. This is postfix header checks rejecting the > message. Check your postfix config.   Thanks for the quick and accurate reply Scott!   I checked /etc/postfix/header_checks and found:   #anti spammer ro

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Scott Russell
Ken Morley wrote: Here's what shows in our maillog: Feb 28 14:07:49 maildrop postfix/cleanup[6597]: 2428D5A0004: reject: header X-Mailer: GoldMine [6.50.31113] from s16.vom.com[63.145.240.14]; from=<[EMAIL PROTECTED] > [EMAIL PROTECTED] pr

RE: SORBS unreasonable

2006-03-01 Thread Shayne Lebrun
> jdow wrote: > > Extortion means extracting funds by some form of criminal means. > > Extortion in the form of, pay or we block access to your business, > > is as wrong as "pay or we'll break your legs." > > > > {^_^} > > SORBS isn't blocking access to anybody's business. The worst > they could b

Re: Failed to parse line...

2006-03-01 Thread Ken Morley
Drew Burchett wrote: > I made this same mistake yesterday.  Turned out that I hadn’t enabled razor in v310.pre.   Thanks very much for the reply Drew!   I found that the line loading the Razor plug-in in v310.pre was commented out:   # Razor2 - perform Razor2 message checks. # # Ra

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Ken Morley
  "Tim Jackson" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]... Ø   That message hasn't come from SpamAssassin, it's from an MTA. Either you > have something in your MTA config that is doing it, or it's been > rejected by a mailserver before it gets to you (check your

Re: Multidomain Mailhosting on one physical host

2006-03-01 Thread Uwe Kiewel
On Wednesday 01 March 2006 12:21, you wrote: > Have you tried whitelisting the problem addresses? > > whitelist_from [EMAIL PROTECTED] > In this case, what happens, if a spammer fake the "from" and use the whitelisted address? Uwe

Re: X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Tim Jackson
Ken Morley wrote: I have had a complaint about a message sent using GoldMine being rejected. The NDR included "Remote host said: 550 Error: Header X-Mailer indicates message sent by spambot". That message hasn't come from SpamAssassin, it's from an MTA. Either you have something in your MTA

Failed to parse line...

2006-03-01 Thread Ken Morley
I have a mailfilter running RedHat ES3, Postfix 2.2.8 (chroooted), amavis-d, SpamAssassin, etc. and it is generally working very well. When I "spamassassin -D --lint" I see: [7670] dbg: plugin: registered Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8edd2c0) [7670] info: config: faile

X-Mailer: GoldMine equated as spam...

2006-03-01 Thread Ken Morley
I have a mailfilter running RedHat ES3, Postfix 2.2.8 (chroooted), amavis-d, SpamAssassin, etc. and it is generally working very well. I have had a complaint about a message sent using GoldMine being rejected. The NDR included "Remote host said: 550 Error: Header X-Mailer indicates message

Re: UNWANTED_LANGUAGE_BODY gives different scores

2006-03-01 Thread Loren Wilton
> X-Spam-Status: No, score=1.8 required=5.0 tests=AWL,BAYES_00,HTML_40_50, > HTML_LINK_PUSH_HERE,HTML_MESSAGE,UNWANTED_LANGUAGE_BODY autolearn=no > version=3.1.0 > > > You see: UNWANTED_LANGUAGE_BODY rule applies to this message, but does > not give the desired score, otherwise the score would

Re: Spamassassin behavior

2006-03-01 Thread Matt Kettler
Alan Au wrote: > Hi Mr. Matt, > > Thanks a lot for replying me. I have some thing to clarify. Please see > below : > > We forward a wrongly classifed email as attachement (RFC822) . Will it > be OK for SpamAssassin to learn? If you strip the attachment and feed that to SA, yes. If you feed the

RE: Spamassasin on Ubuntu with VHCS

2006-03-01 Thread James Smith
> You need to add the "universe" repository. As to how you do > this -- I'd suggest asking on an Ubuntu forum -- this is an > issue with your apt setup, not SpamAssassin itself. Thanks, added the new repositories and it now looks to be working. -- Jay

Re: Spamassasin on Ubuntu with VHCS

2006-03-01 Thread Justin Mason
You need to add the "universe" repository. As to how you do this -- I'd suggest asking on an Ubuntu forum -- this is an issue with your apt setup, not SpamAssassin itself. --j. James Smith writes: > I need to get spamassasin installed and working on Ubuntu with VHCS. I have > googled this and

How to deinstall the old version of Spamassassin [v2.43] if I can't do it by make && make deinstall???

2006-03-01 Thread Zarshedi H. Ismoilzoda
My FreeBSD version is 5.3. I’m not familiar with Linux just learning it. I installed Spamassassin [v2.43] but that version was old and I downloaded the new one [v 3.1.0] and installed manually. Now it is not correctly functioning because I didn’t deinstall the previous [v2.43]. How ca

Spamassasin on Ubuntu with VHCS

2006-03-01 Thread James Smith
I need to get spamassasin installed and working on Ubuntu with VHCS. I have googled this and found a tutorial or two all of which start with the same line... apt-get install clamav clamav-daemon amavisd-new spamassassin Unfortunately this bombes out immediately with the error... ---

Multidomain Mailhosting on one physical host

2006-03-01 Thread Uwe Kiewel
Hi there, on my server, there are two mail domains hostet. Spam and virus check is done by amavis. Amavis uses SpamAssassin 3.1 and H+BEDV Antivir in current versions. The administration front end for SpamAssassin is MaiaMailguard Well, lets say the hosted domains are dom1.org and dom2.org My

Re: FP on URIBL_JP_SURBL + URIBL_SBL

2006-03-01 Thread Jeff Chan
On Monday, February 27, 2006, 10:27:59 AM, Dave Pooser wrote: > So I noticed some messages from one of my mailing lists landed in the ol' > spambucket; there was a URI in there for 4dquiz-com (dot instead of dash) > and it hit on URIBL_JP_SURBL and URIBL_SBL which scored enough to override > BAYES_

Re: Spamassassin does not learn

2006-03-01 Thread Chris Purves
Egoitz Aurrekoetxea Aurre wrote: First of all I don't understand how spamd and spamc work... I use spampd to act as smtp proxy for spamassassin, and I've uninstalled the exim4 fro the machine. Could anyone give me a link or an explanation of this? I'm very newbie; I've got the default configurati

How to deinstall the old version of Spamassassin [v2.43] if I can't do it by make && make deinstall???

2006-03-01 Thread Zarshedi H. Ismoilzoda
My FreeBSD version is 5.3. I’m not familiar with Linux just learning it. I installed Spamassassin [v2.43] but that version was old and I downloaded the new one [v 3.1.0] and installed manually. Now it is not correctly functioning because I didn’t deinstall the previous [v2.43]. How ca

Re: UNWANTED_LANGUAGE_BODY gives different scores

2006-03-01 Thread nick
Gerhard Hofmann wrote: Hi all, we are a German company and 99 per cent of our daily email communication is in German language. There is only a very small amount of legitimate English email coming from some well known sources (mailing lists like [EMAIL PROTECTED], [EMAIL PROTECTED] and so on),

UNWANTED_LANGUAGE_BODY gives different scores

2006-03-01 Thread Gerhard Hofmann
Hi all, we are a German company and 99 per cent of our daily email communication is in German language. There is only a very small amount of legitimate English email coming from some well known sources (mailing lists like [EMAIL PROTECTED], [EMAIL PROTECTED] and so on), any other non-German em

Re: Spamassassin behavior

2006-03-01 Thread jdow
Maybe. If the ENTIRE email is attached, all header lines and all body lines, in a format that can be easily extracted then "yes" is a possibility. You will probably have to write the automatic extraction tool to get the attachment out of the forwarded email and feed it to salearn. {^_^} - Ori