training

2006-08-12 Thread virtualgeorge
I am just learning to use SA with my reseller shared hosting account. When training I tried sa-learn --mbox --spam ~/mail/DOMAIN/ACCOUNT/learn_spam & got something like this: Learned tokens from 4 message(s) (17 message(s) examined) One of my accounts on this domain I get: Learned tokens from 0

Re: Registrar RBL: nomination and scoring

2006-08-12 Thread Benny Pedersen
On Sun, August 13, 2006 02:11, John D. Hardin wrote: > On Sat, 12 Aug 2006, John Rudd wrote: > > 127.0.0.1 ... 127.0.0.100 perhaps? How would a rule to score points > based on the returned IP look? Can/does SA cache the returned IP and > test it in multiple rules without making multiple DNS queries

RE: Registrar RBL: nomination and scoring

2006-08-12 Thread Rob McEwen
>I'm not sure zone transfers will be feasible, since the registrar >determination will be made dynamically. I think, to prevent processing overloads, you might want to cache results at least for a period of minutes and not recalculate results for every thing query. I'm sure this isn't something th

Re: statistic amavisd + spamassassin

2006-08-12 Thread jdow
From: "John Andersen" <[EMAIL PROTECTED]> If it wasn't so embedded in SLES9 I would rip it out, but doing so breaks a lot of the standard postfix-amavis-cyrus-ldap setup for sles9. That is one of the reasons I am not finding SLES10 at all a pleasant alternative for FCwhatever. The ENTIRE email

Re: Registrar RBL: nomination and scoring

2006-08-12 Thread John D. Hardin
On Sat, 12 Aug 2006, John Rudd wrote: > On Aug 12, 2006, at 5:11 PM, John D. Hardin wrote: > > > >> b) have an RBL which returns different values for different > >> confidence levels. > > > > 127.0.0.1 ... 127.0.0.100 perhaps? How would a rule to score points > > based on the returned IP look? Can

Re: Registrar RBL: nomination and scoring

2006-08-12 Thread John Rudd
On Aug 12, 2006, at 5:11 PM, John D. Hardin wrote: b) have an RBL which returns different values for different confidence levels. Something like a percentage of known spammers are on that specific provider. So, if a registrar is 60% spammers and 40% bystanders, it will return "60"... and I

Registrar RBL: nomination and scoring

2006-08-12 Thread John D. Hardin
On Sat, 12 Aug 2006, John Rudd wrote: > If someone does make a Registrar RBL and a Name Server RBL (both > of which are good ideas), _PLEASE_ do something like this: > > a) have two lists for each RBL, one which has the above "kill the > bystanders" point of view, and one which is much more conse

Re: SPAM: Increase in targeted spams

2006-08-12 Thread John D. Hardin
On Sat, 12 Aug 2006, Stuart Johnston wrote: > John D. Hardin wrote: > > On Sat, 12 Aug 2006, Michael Scheidell wrote: > > > >> (can we come up with an RBL for domains registered with jokers?) > > > > A while back I suggested a more-general spammer-friendly-registrar > > RBL. > > > > Can anyone

Re: SPAM: Increase in targeted spams

2006-08-12 Thread John Rudd
On Aug 12, 2006, at 10:26 AM, Michael Scheidell wrote: Whois registrat is joker (can we come up with an RBL for domains registered with jokers?) There are some legit domains hosted on joker :p Ok, so out of thousands, there are 'some'. You sleep with dogs, you get flees. Bleh. As much

Re: SPAM: Increase in targeted spams

2006-08-12 Thread John Rudd
On Aug 12, 2006, at 7:42 AM, Michael Scheidell wrote: It is very easy to unsubscribe at genutrust.com/trust . It would be impossible to get all the Even easier to add scores to SA rules so that thousands of users don't have to individually unsubscribe from your partners lists. Also, violatio

Re: SPAM: Increase in targeted spams

2006-08-12 Thread Stuart Johnston
John D. Hardin wrote: On Sat, 12 Aug 2006, Michael Scheidell wrote: (can we come up with an RBL for domains registered with jokers?) A while back I suggested a more-general spammer-friendly-registrar RBL. Can anyone give me a seed list of the registrars we would consider "spammer-friendly"?

Re: statistic amavisd + spamassassin

2006-08-12 Thread John Andersen
On Saturday 12 August 2006 07:36, Markus Edholm wrote: > Hi all > I´m looking for some simple statistic script > using amavisd and spamassassin just to se how my own and "standard" > rules work > I tested sa-stat.pl but it wont work on amavisd log. > I tried to get amavis-stat to work, but there wa

RE: SPAM: Increase in targeted spams

2006-08-12 Thread Michael Scheidell
> -Original Message- > From: Duncan Hill [mailto:[EMAIL PROTECTED] > Sent: Saturday, August 12, 2006 11:32 AM > To: Michael Scheidell > Subject: Re: SPAM: Increase in targeted spams > > > > > Whois registrat is joker > > (can we come up with an RBL for domains registered with jokers?)

Re: SPAM: Increase in targeted spams

2006-08-12 Thread Stuart Johnston
John D. Hardin wrote: On Sat, 12 Aug 2006, Michael Scheidell wrote: (can we come up with an RBL for domains registered with jokers?) A while back I suggested a more-general spammer-friendly-registrar RBL. Can anyone give me a seed list of the registrars we would consider "spammer-friendly"?

RE: SPAM: Increase in targeted spams

2006-08-12 Thread John D. Hardin
On Sat, 12 Aug 2006, Michael Scheidell wrote: > (can we come up with an RBL for domains registered with jokers?) A while back I suggested a more-general spammer-friendly-registrar RBL. Can anyone give me a seed list of the registrars we would consider "spammer-friendly"? I want to try some ideas

statistic amavisd + spamassassin

2006-08-12 Thread Markus Edholm
Hi all I´m looking for some simple statistic script using amavisd and spamassassin just to se how my own and "standard" rules work I tested sa-stat.pl but it wont work on amavisd log. I tried to get amavis-stat to work, but there was to much error for my poor mind. Something simple?

RE: SPAM: Increase in targeted spams

2006-08-12 Thread Michael Scheidell
> -Original Message- > From: Genutrust [mailto:[EMAIL PROTECTED] > Sent: Friday, August 11, 2006 10:58 PM > To: users@spamassassin.apache.org > Subject: Re: SPAM: Increase in targeted spams > > > > Just a quick note. I am from Genutrust.com. We do not harvest > any information, nor do

Re: SPAM: Increase in targeted spams

2006-08-12 Thread John D. Hardin
On Fri, 11 Aug 2006, John Rudd wrote: > Any service sending ads that doesn't regularly ask "still want to > be on our list?" and automatically unsubscribe anyone who doesn't > positively respond, has no business saying that they're not > sending spam. Most definitely true. > To: Genutrust <[EMAI

Re: Slow scan time

2006-08-12 Thread Loren Wilton
So... They fabricated a mail with a fake mailer, added some fake double-bounce headers, and then sent it to your postmaster account? That seems exceptionally unclever of some idiot. I just ran that twice here on an unloaded system and it took about 6.5 seconds. Only net rule it hit was spam