Re: BAYES_99 makes lots of false-positive

2006-07-13 Thread Joshua, C.S. Chen
Matt Kettler wrote: In sa 2.6x or older, yes.. in sa 3.0.0 or higher, no. First, phrases isn't quite accurate.. bayes stores tokens, and most of the tokens are simply words, not phrases. In SA 3.0.0 or higher the text tokens themselves are not stored, only the SHA1 hash of them is stored.

Re: Network tests slowing down spamassassin

2006-07-13 Thread Daryl C. W. O'Shea
On 7/13/2006 11:06 AM, Ramprasad wrote: So what is the best way to reduce network traffic. We are already getting the sbl-xbl lists from spamhaus so as to serve those lists locally , can I get any other lists locally ? Commercial agreements also are ok. Many/most lists will provide rsync ac

Re: Network tests slowing down spamassassin

2006-07-13 Thread Ramprasad
On Thu, 2006-07-13 at 11:17 -0400, Craig Morrison wrote: > Ramprasad wrote: > > Hi, > > SA works fine , for the quiet large setup that we have. ( we get upto > > 200k mails an hour at peak times ) > > But I notice it is too network dependent. A little problem with the > > network and all hell

RE: The best way to use Spamassassin is to not use Spamassassin

2006-07-13 Thread John D. Hardin
On Thu, 13 Jul 2006, Michael Scheidell wrote: > From: John D. Hardin [mailto:[EMAIL PROTECTED] > > > > doesn't work the skip it and move on. I get rid of 120,000 > > > spams a day > > > using that trick. > > > > Ooo. Set it to maila.microsoft.com... {evil grin} > > Not a good idea, since mai

Re: Image only spam

2006-07-13 Thread Steven Stern
Jack Gostl wrote: > > - Original Message - From: "Steven Stern" > <[EMAIL PROTECTED]> > To: "Spamass" > Sent: Wednesday, July 12, 2006 4:31 PM > Subject: Re: Image only spam > > >> Jack Gostl wrote: >>> Thanks for the response. >>> >>> Take it slow with me, spamassassin has been running

RE: The best way to use Spamassassin is to not use Spamassassin

2006-07-13 Thread Michael Scheidell
> -Original Message- > From: John D. Hardin [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 13, 2006 9:52 AM > To: Marc Perkel > Cc: Bart Schaefer; users@spamassassin.apache.org > Subject: Re: The best way to use Spamassassin is to not use > Spamassassin > > > > doesn't work the skip

Re: Spamassassin for web input forms ?

2006-07-13 Thread Kelson
Loren Wilton wrote: If this web form isn't high volume, you could format the form input as a mail message and pipe it to spamassassin, then check the result. Also, if the web form is written in Perl, you could access the SpamAssassin Perl modules directly. -- Kelson Vibber SpeedGate Communic

Spamassassin for web input forms ?

2006-07-13 Thread Milan 'Koudis' Koudelka
Hi, i have an idea to use spamassassin for checking web inputs forms. But i wanna different spam database from mail spam database on the same machine. I think that i can send web form to some e-mail address, if spamassassin say thats ok, send it to another e-mail address and theris some maildr

Re: Problems on rethad 9.0

2006-07-13 Thread Kelson
Benny Pedersen wrote: the same was a fault from redhat to say we don't like to support older redhat relases, since we now need to donwload a iso file again to upgrade what could have being done from up2date ? You might find the following useful: HOWTO: yum upgrade to CentOS 4.0 http://www.cent

SPAMASSASSIN PER-USER AND QMAIL TOASTER

2006-07-13 Thread Marcos
It is possible to configure preferences to per-user using mySQL and the Spamassassin, using the Qmail Toaster ? I am trying to make this, but I below receive the message from error: spamd: service unavailable: Error fetching to user preferences saw SQL at /usr/bin/spamd line 1684, line 2. S

Re: Spamassassin for web input forms ?

2006-07-13 Thread Loren Wilton
i have an idea to use spamassassin for checking web inputs forms. But i Ok. wanna different spam database from mail spam database on the same machine. Ok. I think that i can send web form to some e-mail address, if spamassassin say thats ok, send it to another e-mail address and theris som

dnsbl debugging

2006-07-13 Thread Ben Wylie
I am running SpamAssassin 3.1.2 on Windows 2003. I have had a problem with dnsbl lookups, as even though they complete, they do not return any results. It appears that only when i get a dns timeout that any that did complete and were positive are actually returned and score the email. I wrote

Re: Abuse of SARE whitelist

2006-07-13 Thread Theo Van Dinter
On Thu, Jul 13, 2006 at 11:21:09AM +0100, Justin Mason wrote: > ok -- there's the bug ;) SpamAssassin is misinterpreting your > MX's Received headers. [...] > Could you open a bug on the SpamAssassin bugzilla about that? Attach > the debug output and sample again (it can be tricky to find posts t

Re: Network tests slowing down spamassassin

2006-07-13 Thread Craig Morrison
Ramprasad wrote: Hi, SA works fine , for the quiet large setup that we have. ( we get upto 200k mails an hour at peak times ) But I notice it is too network dependent. A little problem with the network and all hell breaks loose. Mailq shoots up and SA starts timing out. Probably because I

Re: Network tests slowing down spamassassin

2006-07-13 Thread Rick Macdougall
Ramprasad wrote: Hi, SA works fine , for the quiet large setup that we have. ( we get upto 200k mails an hour at peak times ) But I notice it is too network dependent. A little problem with the network and all hell breaks loose. Mailq shoots up and SA starts timing out. Probably because I

Network tests slowing down spamassassin

2006-07-13 Thread Ramprasad
Hi, SA works fine , for the quiet large setup that we have. ( we get upto 200k mails an hour at peak times ) But I notice it is too network dependent. A little problem with the network and all hell breaks loose. Mailq shoots up and SA starts timing out. Probably because I have enabled all ki

Re: Image only spam

2006-07-13 Thread Dimitri Yioulos
On Thursday July 13 2006 9:28 am, Jack Gostl wrote: > - Original Message - > From: "Steven Stern" <[EMAIL PROTECTED]> > To: "Spamass" > Sent: Wednesday, July 12, 2006 4:31 PM > Subject: Re: Image only spam > > > Jack Gostl wrote: > >> Thanks for the response. > >> > >> Take it slow with me

Re: SA RPMs for Suse 10.0?

2006-07-13 Thread Mick Pollard
Just d'l the source tar ball and build rpm's from it. /*rpmbuild -tb Mail-SpamAssassin-3.1.3.tar.gz* /That should produce a binary RPM for you. I have not tested it yet. Regards Mick Pollard __lunix-aus__/ / Paul Hutchings wrote: I have a Suse 10.0 system running Spamassassin from the Suse RPMs

Re: $from and $to

2006-07-13 Thread Matt Kettler
Pezhman Lali wrote: > Hi > which variables in spamd, contained "from" and "to" of the processed > mail? > if nothing, > how can I add this variables? Which "from" and "to" are you referring to? The ones in the message body, or the actual ones from the envelope (ie: RCPT TO: and MAIL FROM commands

Re: BAYES_99 makes lots of false-positive

2006-07-13 Thread Matt Kettler
Joshua, C.S. Chen wrote: > Hello folks, > My users speak Chinese. I found that spamassassin seems not working well > about chinese chset (utf8 or big5) on the bayes issue. Many normal mails > (almost) get BAYES_99 score although the real spam also get BAYES_99. It > looks like foreign language like

Re: The best way to use Spamassassin is to not use Spamassassin

2006-07-13 Thread John D. Hardin
On Wed, 12 Jul 2006, Marc Perkel wrote: > Depends on what he's doing it might work. I catch most spam based on > sender behavior rather than message content. For example, anyone can do > this trick. Set your highest MX record (add a new one) to an IP address > that doesn't exist. Some spammers

Re: Image only spam

2006-07-13 Thread Jack Gostl
- Original Message - From: "Steven Stern" <[EMAIL PROTECTED]> To: "Spamass" Sent: Wednesday, July 12, 2006 4:31 PM Subject: Re: Image only spam Jack Gostl wrote: Thanks for the response. Take it slow with me, spamassassin has been running so well for so long that I haven't had to

Spamassassin for web input forms ?

2006-07-13 Thread Milan 'Koudis' Koudelka
Hi, i have an idea to use spamassassin for checking web inputs forms. But i wanna different spam database from mail spam database on the same machine. I think that i can send web form to some e-mail address, if spamassassin say thats ok, send it to another e-mail address and theris some maildr

Re: Problems on rethad 9.0

2006-07-13 Thread Benny Pedersen
On Wed, July 12, 2006 11:53, Tom Brown wrote: >> Im working in rethad 9.0 and try to install spamassassin in a good way > why redhat 9? why redhat at all ? :-) >> How can i fix this problem? > use a more upto date OS ?? 70 million people still use windows 98, now microsoft stops supporting secu

$from and $to

2006-07-13 Thread Pezhman Lali
Hi which variables in spamd, contained "from" and "to"  of the processed mail? if nothing, how can I add this variables?   Best Pezhman How low will we go? Check out Yahoo! Messenger’s low PC-to-Phone call rates.

modifying log

2006-07-13 Thread Pezhman Lali
hi Where is the module of logging in spamd? I want to add $from and $to to logging? which file, and which part must be changed?   Best pezhman Lali   Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1¢/min.

Re: mangled uris

2006-07-13 Thread JamesDR
Ramprasad wrote: Spamassassin works pretty great for me, but some spammers keep upgrading. Some of my clients are still getting stupid spams thru I think this was discussed before how do I catch spam with mangled urls. Sorry if this is a repeat Something like -- visit http:

Re: Abuse of SARE whitelist

2006-07-13 Thread Justin Mason
ok -- there's the bug ;) SpamAssassin is misinterpreting your MX's Received headers. Received: from vm.vonage.com ([220.166.39.177]) by amsfep14-int.chello.nl (InterMail vM.6.01.04.04 201-2131-118-104-20050224) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]

Re: Abuse of SARE whitelist

2006-07-13 Thread Paul Boven
Hi Justin, everyone, Justin Mason wrote: It's worth checking this; that rule should fire only if the mail really *did* come from Vonage. I suspect a bug in how your mailserver's Received headers are parsed. Could you post: - a sample of a spam that passed this, with all headers - output

Re: The best way to use Spamassassin is to not use Spamassassin

2006-07-13 Thread Chris Lear
* Marc Perkel wrote (12/07/06 18:30): Catchy subject line eh? OK - so what I mean by this is that I now use SA for about 5% of all incoming email. The reaso of spam is rejected before I get to SA through a fairly large number of tricks that allow me to determine with near 100% accuracy things

SA RPMs for Suse 10.0?

2006-07-13 Thread Paul Hutchings
I have a Suse 10.0 system running Spamassassin from the Suse RPMs that used to be on Carsten Hoegers Suse FTP folder. They don't appear to be there any more, so I wondered if anyone had any pointers to compatible RPMs to get me up to 3.1.3? I know I could uninstall the existing Spamassassin RPMs

Re: BAYES_99 makes lots of false-positive

2006-07-13 Thread Johann Spies
On Thu, Jul 13, 2006 at 03:17:05PM +0800, Joshua, C.S. Chen wrote: > Hello folks, > My users speak Chinese. I found that spamassassin seems not working well > about chinese chset (utf8 or big5) on the bayes issue. Many normal mails > (almost) get BAYES_99 score although the real spam also get BAYES

Re: Abuse of SARE whitelist

2006-07-13 Thread Justin Mason
It's worth checking this; that rule should fire only if the mail really *did* come from Vonage. I suspect a bug in how your mailserver's Received headers are parsed. Could you post: - a sample of a spam that passed this, with all headers - output of "spamassassin -D -L -t < spam", the lines

Re: The best way to use Spamassassin is to not use Spamassassin

2006-07-13 Thread Bart Schaefer
On 7/12/06, Marc Perkel <[EMAIL PROTECTED]> wrote: Depends on what he's doing it might work. He's writing procmail recipes. He's a user on a hosted shell server, not a sysadmin. Strictly delivery-time header text analysis, no MTA-level configuration games. For example, anyone can do this t

No dns lookup in received header for trusted

2006-07-13 Thread Schmid Benoit
Hello, I have a problem with my trusted network config. An email with the following header received line does not work with trusted network. --- Received: from CONVERSION-DAEMON.romeo.unige.ch by romeo.unige.ch (PMDF V6.2-1x9 #31144) id <[EMAIL PROTECTED]>; Mon, 03 Jul 2006 17:10:03 +0200 (MES

Re: Abuse of SARE whitelist

2006-07-13 Thread Paul Boven
Hi everyone, Paul Boven wrote: One of my users just spotted a FN that had managed to slip trough. They're abusing 70_sare_whitelist.cf, specifically: whitelist_from_rcvd [EMAIL PROTECTED] vonage.com # Vonage voice mail notification I'm now catching these on several m

BAYES_99 makes lots of false-positive

2006-07-13 Thread Joshua, C.S. Chen
Hello folks, My users speak Chinese. I found that spamassassin seems not working well about chinese chset (utf8 or big5) on the bayes issue. Many normal mails (almost) get BAYES_99 score although the real spam also get BAYES_99. It looks like foreign language like Chinese is very easy to be high ba

Re: sa-learn slow with Bayes and PostgreSQL

2006-07-13 Thread Paul Boven
Hi Michael, everyone, Michael Parker wrote: I notice that using sa-learn with SQL now is very slow compared to file db. Is this normal, and is accessing the db while scanning mail any slower with SQL? Yes. Check out the benchmarks here: http://wiki.apache.org/spamassassin/BayesBenchmarkResul