> to be pretty recent. Or are they saying that both ham and spam collected
> should be from the same time period. If so, do you know what the maximum
> time discrepancy could be? Should I worry about it at all?
Spam needs to be recent. Ham should be recent if convenient. But ham
usually doesn't
Yes, there was a MySQL issue with the bugs table. I think I fixed it and BZ
seems to be back up and running now. :)
On Tue, Apr 11, 2006 at 08:17:18PM -0700, jdow wrote:
> Software error:
> DBD::mysql::st execute failed: Can't open file: 'bugs.MYI'. (errno: 145)
> [for Statement "SELECT bug_id F
Software error:
DBD::mysql::st execute failed: Can't open file: 'bugs.MYI'. (errno: 145) [for Statement
"SELECT bug_id FROM bugs WHERE bug_id = 3838"] at Bugzilla/DB.pm line 62
Bugzilla::DB::SendSQL('SELECT bug_id FROM bugs WHERE bug_id = 3838') called at CGI.pl
line 171
main::Validate
martin wrote:
> Matt Kettler comcast.net> writes:
>
>
>> martin wrote:
>>
>>> using spamassassin-3.0.4-2, spamass-milter-0.3.0, clamav-0.88,
>>> clamav-milter-0.88, sendmail-8.13.1 under FC3. All parts seem work fine, but
>>> found some mails had dropped to mbox directly and seem not sca
Matt Kettler comcast.net> writes:
>
> martin wrote:
> > using spamassassin-3.0.4-2, spamass-milter-0.3.0, clamav-0.88,
> > clamav-milter-0.88, sendmail-8.13.1 under FC3. All parts seem work fine, but
> > found some mails had dropped to mbox directly and seem not scanned
> > by sa (X-Spam head
On Tue, Apr 11, 2006 at 08:32:33PM -0400, Robert Swan wrote:
> I am stumped with a lint error I am getting below, everything is running
> ok but when I run -lint I get this error, anybody know what the problem
> might be?
>
> config: SpamAssassin failed to parse line, skipping: \
As it says, you
All,
I am stumped with a lint error I am getting below,
everything is running ok but when I run –lint I get this error, anybody
know what the problem might be? I have pasted the debul log entries that are
close to it. I am running SpamAssassin version 3.1.1 running on Perl version
5.8.6
Thanks for the follow-ups guys, its much appreciated. I'm building
and testing furiously :)
On Apr 11, 2006, at 6:05, Matt Kettler wrote:
Dan wrote:
Follow up question (even more odd than weight limits):
I want to flag all messages as spam, then configure various rules as
exceptions, ma
Kenneth Porter wrote:
> On Tuesday, April 11, 2006 4:19 PM -0700 List Mail User
> <[EMAIL PROTECTED]> wrote:
>
>> Is anyone here familiar with the web page email address scraping
>> software sold at: http://newsman.asp.be/featuresu.jsp ?
>
>> From that page:
>
>> NewsMan Pro sends one messag
On Tuesday, April 11, 2006 4:19 PM -0700 List Mail User
<[EMAIL PROTECTED]> wrote:
Is anyone here familiar with the web page email address scraping
software sold at: http://newsman.asp.be/featuresu.jsp ?
From that page:
NewsMan Pro sends one message per recipient and shows the mem
On Tuesday, April 11, 2006 1:37 PM -0700 [EMAIL PROTECTED] wrote:
Agreed. Spammers have access to all the free CPU bandwidth and
processing time they can steal - legitimate MTAs are limited to a budget.
Any anti-spam solution that simply rewards CPU and bandwidth spent* is
playing into the hand
Hi,
Is anyone here familiar with the web page email address scraping
software sold at: http://newsman.asp.be/featuresu.jsp ?
I only found this because one of their programmers, subscribed to
this list (i.e. [EMAIL PROTECTED]), is running an "out-of-office" auto-responder
a
I recently switched to using mysql bayes. I am getting a [1135] dbg:
bayes: unable to initialize database for root user, aborting! When I do
spamassassin -d --lint any idea what I need to change?
Best regards,
JD Smith
You possibly have not learned a message as root yet. As root, try this:
On Tuesday April 11 2006 23:17, Kelson wrote:
> mouss wrote:
> > - multiple "internal" hops at either sender or receiver (I have N
> > Received headers added by my own MTA. and for mail fetched from an MSP,
> > there are still more).
>
> Actually, if I'm reading this right, it's the number of I
JD Smith wrote:
> I recently switched to using mysql bayes. I am getting a [1135] dbg:
> bayes: unable to initialize database for root user, aborting! When I do
> spamassassin -d --lint any idea what I need to change?
>
Its kind of a bad warning message. Bayes will not attempt to initialize
mouss wrote:
> Matt Kettler wrote:
>>
>> Why anyone in Guatemala thinks I'll visit their store to spend "Q. 22"
>> on a
>> patio log fake fire log or "Q. 85" on a generic brand weed and feed
>> fertilizer
>> is beyond me.
>>
>
> dunno, but I can tell you that the net if full of people who love me
JD Smith writes:
I recently switched to using mysql bayes. I am getting a [1135] dbg:
bayes: unable to initialize database for root user, aborting! When I do
spamassassin -d --lint any idea what I need to change?
Try a "select id,username,spam_count,ham_count from bayes_vars" on your
bate
On Tue, 2006-04-11 at 08:13 -0500, JD Smith wrote:
> Does amavisd-new happen to have a pre-built front-end similar to
> MailWatch? If not then it's no use to me as I don't have time to build
> one from scratch, especially not after the time I've already spent
> customizing MailWatch.
Do you mean
Matt Kettler wrote:
There's only one spammer that's done this to me. There's some group of stores in
Guatemala that sends me high-res scans of their newspaper.
Consejeros en Finanzas Empresariales, some kind of bank
La Cuacao - some kind of electronics shop? or an eye doctor?
cefesa hardware -
I recently switched to using mysql bayes. I am getting a [1135] dbg:
bayes: unable to initialize database for root user, aborting! When I do
spamassassin -d --lint any idea what I need to change?
Best regards,
JD Smith
Kelson wrote:
> Actually, if I'm reading this right, it's the number of IP hops
> between the sending server and the receiving server -- in other
> words, how many lines you'd see if you were on the receiving server
> and ran traceroute to the sending MTA.
Ah... that makes much more sense :)
--
Am Dienstag, 11. April 2006 22:28 schrieb mouss:
> [EMAIL PROTECTED] wrote:
> > mouss wrote:
> >> I would conjecture that most legitimate mail has two "real" hops
> >> (the sending MTA and the receiving MTA).
> >
> > That would be one hop.
>
> depends on how you count:
>
> MUA -> my MTA1 -> y
mouss wrote:
- multiple "internal" hops at either sender or receiver (I have N Received
headers added by my own MTA. and for mail fetched from an MSP, there are
still more).
Actually, if I'm reading this right, it's the number of IP hops between
the sending server and the receiving server -
mouss wrote:
> so greetpause will certainly stop some ratware spam, but is not a
> "full" solution.
Agreed. Spammers have access to all the free CPU bandwidth and processing time
they can steal - legitimate MTAs are limited to a budget. Any anti-spam
solution that simply rewards CPU and bandwi
[EMAIL PROTECTED] wrote:
mouss wrote:
I would conjecture that most legitimate mail has two "real" hops (the
sending MTA and the receiving MTA).
That would be one hop.
depends on how you count:
MUA -> my MTA1 -> your MTA -> your mailbox
that's two MTAs, so that's two hops. I prefe
Mike Jackson wrote:
You can also impose this cost on spammers by enabling the GreetPause
feature in the more recent versions of sendmail. This tells sendmail not
to answer right away when receiving a connection, and to drop the
connection if anything is received before the greeting is sent out. T
You can also impose this cost on spammers by enabling the GreetPause
feature in the more recent versions of sendmail. This tells sendmail not
to answer right away when receiving a connection, and to drop the
connection if anything is received before the greeting is sent out. This
punishes "slammer
Kenneth Porter wrote:
> You can also impose this cost on spammers by enabling the GreetPause
> feature in the more recent versions of sendmail. This tells sendmail not
> to answer right away when receiving a connection, and to drop the
> connection if anything is received before the greeting is se
On Tuesday, April 11, 2006 2:14 PM -0400 Matt Kettler
<[EMAIL PROTECTED]> wrote:
I've not seen it with dummy text, but I have seen the large image spam.
However, it's very rare. The problem being that if you're a large-volume
spammer, large messages take a longer time to send, and thus reduce y
mouss wrote:
> I would conjecture that most legitimate mail has two "real" hops (the
> sending MTA and the receiving MTA).
That would be one hop.
Mark Martinec wrote:
http://www.ijs.si/software/amavisd/fig1.gif
Spam score vs. IP distance in hops (our server is
in European academic network Geant)
This one is amazing. there seems to be an empty space (most mail has
nhops <= 10 or => 14). I would "guess" that most ham wih large
mouss wrote:
> since most filters skip large messages, it may be tempting for spammers
> to send large messagess:
I did some statistical analysis few weeks ago with SA 3.1.1
(SA called from amavisd-new, but that is beside the point).
Please see:
http://www.ijs.si/software/amavisd/fig4.gif
Theo Van Dinter wrote:
> On Tue, Apr 11, 2006 at 02:46:41PM -0400, Matt Kettler wrote:
>> Of course, this can't work if you're using any kind of encapsulation options
>> in
>> report_safe, but since MailScanner does all the markup itself, it doesn't
>> hurt
>> it to send Mail::SpamAssassin a trun
On Tue, Apr 11, 2006 at 02:46:41PM -0400, Matt Kettler wrote:
> Of course, this can't work if you're using any kind of encapsulation options
> in
> report_safe, but since MailScanner does all the markup itself, it doesn't hurt
> it to send Mail::SpamAssassin a truncated version. Converting this to
Theo Van Dinter wrote:
> On Tue, Apr 11, 2006 at 02:14:26PM -0400, Matt Kettler wrote:
>> Well, SA automatically ignores attachments in recent versions. However,
>> hash-based plugins like razor, dcc, and pyzor work best when seeing all the
>> attachments.
>
> For completeness, the first sentence
On Tue, Apr 11, 2006 at 02:14:26PM -0400, Matt Kettler wrote:
> Well, SA automatically ignores attachments in recent versions. However,
> hash-based plugins like razor, dcc, and pyzor work best when seeing all the
> attachments.
For completeness, the first sentence isn't exactly true.
SA "automati
mouss wrote:
> since most filters skip large messages, it may be tempting for spammers
> to send large messagess:
>
> - using a large but "invisible" part (either by using mime and putting a
> large text part in an alternative mime, or using "invisible" chars
> before their own text).
>
> - using
I am very new to qmail and spamassassin
We have qmail with spamassassin installed, the spaassassin adds the
following flags to header
X-Spam-Score:
X-Spam-Checker-Version:
X-Spam-Level:
X-Spam-Status
Now in the UI of email client , we would like to mark a message as Not Spam,
and change the lo
since most filters skip large messages, it may be tempting for spammers
to send large messagess:
- using a large but "invisible" part (either by using mime and putting a
large text part in an alternative mime, or using "invisible" chars
before their own text).
- using a large image
- large
jdow wrote:
That's true, but you'd still be over 5.0 even without it.
Why did you modify it? Bayes zero should typically have a fairly hefty
negative score.
It seems that the art of "error and ignore" has replaced the art of
trial and error.
Given the OP From display, we can only say: s
> antidrug.cf is unnecessary on SA 3.0.0 and higher. The rules have
> been incorporated into the default set. Your "drug" message probably
> doesn't trigger any of the rules. Take a look at the file and see
> what it is looking for.
Cool! Thank you!
>> The problem seems to be that rawbody looks at the message "one line
at
>> a time". I won't bore you with every way I've tried to create a rule
>> that spans this line break, but none of them have worked.
>>
>> Has anyone enountered/resolved this issue?
>stemming from
>http://issues.ap
Although I am not specifically familiar with MailWatch, there is Maia
Mailguard which uses a customized version of amavisd-new 2.2.0. There
is also MailZu but it only does quarantine management.
http://www.maiamailguard.com/
http://www.mailzu.org/
JD Smith wrote:
Does amavisd-new happen to
I suppose I shouldn't be shocked by this but it surprised me to receive
some spam sent with Mailman.
I have a folder for catching all mailing list mail that doesn't yet have
its own procmail rule. The catch-all procmail rule looks for anything with
a List-Id header and dumps it in ~/mail/Lists/Un
Sergei Gerasenko wrote:
I just downloaded antidrug.cf from drugemporium and dropped it in the
rules directory. spamassassin -D says that it's reading it but running a
"drug" message through doesn't trigger the rules. Should I rename
antidrug.cf to say 35_antidrug.cf or it doesn't matter? Is there
On Tue, Apr 11, 2006 at 10:15:45AM -0400, Rosenbaum, Larry M. wrote:
> # sa-update
> error: can't verify SHA1 signature
> channel: SHA1 verification failed, channel failed
>
> At this point the
> /var/lib/spamassassin/3.001001/updates_spamassassin_org directory was
> empty, but SpamAssassin was st
Sergei Gerasenko wrote:
> I just downloaded antidrug.cf from drugemporium and dropped it in the
> rules directory. spamassassin -D says that it's reading it but
> running a "drug" message through doesn't trigger the rules. Should I
> rename antidrug.cf to say 35_antidrug.cf or it doesn't matter? Is
I just downloaded antidrug.cf from drugemporium and dropped it in the
rules directory. spamassassin -D says that it's reading it but running a
"drug" message through doesn't trigger the rules. Should I rename
antidrug.cf to say 35_antidrug.cf or it doesn't matter? Is there anyway
I can test the rul
Robert Fitzpatrick wrote:
> Having process load issues, I found that removing my two sa-blacklist
> rules took care of it. If fact, very good processing times now that
> they're gone. My question is, what I'm I missing? Spam filtering is
> doing a fine job since changes applied 24 hours ago.
>
s
> The problem seems to be that rawbody looks at the message "one
> line at a time". I won't bore you with every way I've
> tried to create a rule that spans this line break, but
> none of them have worked.
>
> Has anyone enountered/resolved this issue?
stemming from
http://issues.apac
Hi
folks,
Let's say that I
want to recognize this HTML tag in a rawbody rule:
It's easy to write a
rule that recognizes this. I use "rawbody" because "full" and "body"
ignore html.
Now suppose
that there's a line break in the html tag. This is legal, and is still
recognized by mai
Having process load issues, I found that removing my two sa-blacklist
rules took care of it. If fact, very good processing times now that
they're gone. My question is, what I'm I missing? Spam filtering is
doing a fine job since changes applied 24 hours ago.
I run Postfix 2.2.8 with amavisd-new 2.
I upgraded a Solaris 9 system from v3.1.0 to v3.1.1. The upgrade went
fine, but when I attempted to run sa-update, I got the following error:
# sa-update
sa-update: importing default keyring to
'/etc/mail/spamassassin//sa-update-keys'...
error: can't verify SHA1 signature
channel: SHA1 verificati
Hi Richard,
Thank you for a thoughtful reply. I'm ok with collecting spam. The only
thing is that I read in the docs somewhere that this collected spam has
to be pretty recent. Or are they saying that both ham and spam collected
should be from the same time period. If so, do you know what the maxi
martin wrote:
> using spamassassin-3.0.4-2, spamass-milter-0.3.0, clamav-0.88,
> clamav-milter-0.88, sendmail-8.13.1 under FC3. All parts seem work fine, but
> found some mails had dropped to mbox directly and seem not scanned by sa
> (X-Spam
> header had not added, spam.log can't found related
Does amavisd-new happen to have a pre-built front-end similar to
MailWatch? If not then it's no use to me as I don't have time to build
one from scratch, especially not after the time I've already spent
customizing MailWatch.
Best regards,
JD Smith
-Original Message-
From: Sipos Gabor [
Dan wrote:
> Follow up question (even more odd than weight limits):
>
> I want to flag all messages as spam, then configure various rules as
> exceptions, marking them as ham. But how do I universally mark
> messages one way in SpamAssassin and then unmark them in the other?
>
> I realize this is
[EMAIL PROTECTED] wrote:
>
> I'm wanting to test SA's SPF implementation here by running a test
> message through a "sandbox" machine that
> is configured like our production environment.
>
> Our domain has an SPF record, and I've made sure that it's reflected
> on our internal network. I've teste
Philip Prindeville wrote:
> Daryl C. W. O'Shea wrote:
>
>
>> Screaming Eagle wrote:
>>
>>
>>
>>> All,
>>> Emailing with outlook and from internal network is marked as spam:
>>> pts rule name description
>>> --
>>>
Max
You're right - sometimes I'm such an idiot..
I did as you suggested and it now works fine (once I'd deleted the
sa-update-keys directory)
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -Original Message-
> From: Max Matslofva [mailto:[EMAIL
Hi Martin
I think you are missing gpg
If you try this..
delete the directory /etc/mail/spamassassin/sa-update-keys
and run sa-update -D
/Max
Martin Hepworth skrev:
Hi all
Running SA 3.1.1 on FreeBSD 4.10 (installed via CPAN)
When I run "sa-update" it's trying to make the directory
/etc/mai
I'm wanting to test SA's SPF implementation
here by running a test message through a "sandbox" machine that
is configured like our production environment.
Our domain has an SPF record, and I've
made sure that it's reflected on our internal network. I've tested
SPF
as a standalone implementation,
Hi all
Running SA 3.1.1 on FreeBSD 4.10 (installed via CPAN)
When I run "sa-update" it's trying to make the directory
/etc/mail/spamassassin/sa-update-keys, but on the second time around this
fails as it's already there..
Am I missing a stage where I have to download the keys first or am I just
> I tried sa-learn, but don't you need a sizable spam collection for it to
> work? The docs say that you need to collect about a thousand of ham and
> spam messages before the training starts to work. That sounds like a
> pain in the neck. Or am I missing something?
By default you need 200 hams an
> I want to flag all messages as spam, then configure various rules as
> exceptions, marking them as ham. But how do I universally mark
> messages one way in SpamAssassin and then unmark them in the other?
>
> I realize this is unorthodox, but I would appreciate any suggestions.
>From experience
> I installed SpamAssassin today for the first time and "The Ultimate
> Online Pharmaceutical" (seems like a LOT of people get this one in
If you don't have any SARE rules you should probably grab a handful. They
help with these little nasties. www.rulesemporium.com
Loren
From: "Philip Prindeville" <[EMAIL PROTECTED]>
Daryl C. W. O'Shea wrote:
Screaming Eagle wrote:
All,
Emailing with outlook and from internal network is marked as spam:
pts rule name description
--
--
-1
> So you're saying 307 integers and 15 decimals?:
307 total digits if you happen to have the decimal point on the right. The
first 15 of those will be non-zero, all the rest will be zero.
Or alternately 280+ leading zeros and 15 trailing digits if you go to the
right of the decimal point.
Postfix and mailScanner work fine...
http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:pos
tfix:politics
yes it doesn't use the 'accepted' interface but it works fine and many many
people have implemented PF and MS together with no problems.
--
Martin Hepworth
Snr System
> The total range for the mantissa of a double-precision float is 52-bits,
with 1
> bit for sign. This means that the range between your most significant and
least
Minor quibble: the number of mantissa bits stored is 52, but as the mantissa
is assumed to be normalized except in some very special c
Hello,
If you are using postfix, don't use mailscanner, it uses a
non-documented (and therefore not supported) access to the postfix
queue files. Use amavisd-new instead to integrate postfix and
spamassassin.
Anyways, the default rules in spamassassin will NOT get you anything
much than 70% in c
using spamassassin-3.0.4-2, spamass-milter-0.3.0, clamav-0.88,
clamav-milter-0.88, sendmail-8.13.1 under FC3. All parts seem work fine, but
found some mails had dropped to mbox directly and seem not scanned by sa (X-Spam
header had not added, spam.log can't found related message). The system (P4,
72 matches
Mail list logo
