test my bleeding edge broken code. with your finger!

two bits of sa related code i've written, neither of them are what i'd particularly call "polished", but if you feel like firing them up, i'd love to hear your feedback: Phisher: http://www.faisal.com/software/phisher/ This is a plugin that does nothing more complicated than check for the c

Re: Training Spamassassin

John D. Hardin wrote: On Thu, 24 Aug 2006, Edward Diener wrote: Is this true ? Am I supposed to be putting copies of messages which Spamassassin has not marked as spam and which are not spam into my 'ham-to-learn' folder, as opposed to messages which Spamassassin has erroneously marked as spam

Re: How to whitelist_from <> ?

Philip Prindeville wrote: > > There's no way to whitelist just the empty address then? Rather than > everything? > > -Philip > > Not given the simple file-glob format of the whitelist commands. You'd need a regular expression and negation. You could do it with a rule... header __NULL_RETURN

Re: bayes autolearn acting up

On Aug 24, 2006, at 10:11 AM, [EMAIL PROTECTED] wrote: Since upgrading to 3.14, when I turn on bayes auto-learn with: bayes_auto_learn 1 and I set the learn boundaries with: bayes_auto_learn_threshold_nonspam-3.5 bayes_auto_learn_threshold_spam 15.5 I get unexpected auto-learnin

RE: Adding 'SA scores' to all incoming mails

Why is it 'better' ? I didn't say it was... Simply one of the possible approaches to getting the full headers. Michael Grey -Original Message- From: John D. Hardin [mailto:[EMAIL PROTECTED] Sent: Thursday, August 24, 2006 3:14 PM To: Michael Grey Cc: users@spamassassin.apache.org Sub

Re: Training Spamassassin

On Thu, 24 Aug 2006, Edward Diener wrote: > Is this true ? Am I supposed to be putting copies of messages > which Spamassassin has not marked as spam and which are not spam > into my 'ham-to-learn' folder, as opposed to messages which > Spamassassin has erroneously marked as spam ? That is true.

Re: Filtering Aliases/Forwarders

Restart if you are using it daemonized one way or another. {^_^} - Original Message - From: "DuBois, Joseph" <[EMAIL PROTECTED]> Ok I added the Score to the header, so I now have the following set of rules(below). Also added the case insensitive expresion. Also found out version info

Re: catch-all = sa-learn folder

On Thu, 24 Aug 2006, Chris Mills (Chrysalis) wrote: > Idea, I have 100 domains on the same server, for all of which I > had deleted the catch-all accounts. How about I recreate the catch > all for all 100 domains, and point them all to the one single pop > mail account and then run sa-learn on tha

RE: Filtering Aliases/Forwarders

Ok I added the Score to the header, so I now have the following set of rules(below). Also added the case insensitive expresion. Also found out version information is, now do I have to restart anything when I adjust rules? spamassassin -V SpamAssassin version 3.1.4 running on Perl version 5.8.7 b

RE: Filtering Aliases/Forwarders

On Thu, 24 Aug 2006, DuBois, Joseph wrote: > So I can only think, that one it is not parsing Alias/forward > emails? Well, check for that. Do the messages have any X-Spam-* headers that imply SA on that machine has seen the messages? There should be *something* there if SA processed the message,

Re: Filtering Aliases/Forwarders

nb - I typoed the score rule. Should be: rewrite_header subject * Rated SPAM: _SCORE(00)_ * ^ I left that off. sorry. And, of course, the rule did not fire. You are testing for "spam" and you sent "SPAM". If you want a case insensitive test then you n

Re: Do I have too many rules? [WAS: timeout help]

From: "Josh Trutwin" <[EMAIL PROTECTED]> On Sat, 19 Aug 2006 18:06:59 -0400 "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote: Josh Trutwin wrote: > On Fri, 18 Aug 2006 12:16:51 -0400 > "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote: > >> Josh Trutwin wrote: >>> I've recently had a server exper

Re: Calling Regex Experts

From: "D.J." <[EMAIL PROTECTED]> I'm expecting these type of strings for sure: cat dog cat dog dog cat But I may get something like this too: cat cat dog dog dog Essentially I want it to match if anything other than cat or dog is in the string. And do what with "cat cat dog catapult"? {^_^

Re: Where to install imageinfo.pm?

--On Thursday, August 24, 2006 2:12 PM +0530 BG Mahesh <[EMAIL PROTECTED]> wrote: I am using SA-3.1.4. I am in the process of installing http://www.rulesemporium.com/plugins.htm Where do I install ImageInfo.pm[which directory]? On Fedora I pu

RE: Adding 'SA scores' to all incoming mails

On Thu, 24 Aug 2006, Michael Grey wrote: > In this example, all emails get an additional header : > > X-Spam-score-breakdown calvin score 6.77/4.5 > > "add_header all score-breakdown calvin score _HITS_/_REQD_ " And that's better than this: X-Spam-Status: No, score=3.5 required=5.0 tests=BAY

Re: word doc spams

On Thu, 24 Aug 2006, John D. Hardin wrote: > Could somebody gzip up a raw word-doc spam (complete message pls, not > from Outlook) and send it to me offlist? I only ever got one and > didn't keep a copy of the raw message, and I think I'll take a shot at > a plugin for them so I need an example.

False positives and Bayes

Title: False positives and Bayes Hello, all. A couple of months ago I built new mail servers to replace our existing ones that had aging mail configurations (and disparate OS configurations), running sendmail 8.12.6 and SA 3.0.2. Our configuration now consists of 2 RHEL 4 ES servers that sha

Re: RBL Rules Misfiring

On 8/23/06, Stuart Johnston <[EMAIL PROTECTED]> wrote: As a quick guess, you probably need to fix your Trust Path:http://wiki.apache.org/spamassassin/TrustPath No, I've got that set properly, as I didn't trust the autodiscovery.  So I've already entered the class C for my MX's and SMTP's there for

word doc spams

Could somebody gzip up a raw word-doc spam (complete message pls, not from Outlook) and send it to me offlist? I only ever got one and didn't keep a copy of the raw message, and I think I'll take a shot at a plugin for them so I need an example. TIA. -- John Hardin KA7OHZICQ#15735746http

Re: Adding 'SA scores' to all incoming mails

On Thu, 24 Aug 2006, list wrote: > I'd like SA to make a extra line/section under all my mails where it > tells what score the mail got (or maybe even which rules scored on the > mail) is there such a setting? > > it would help me to finetune my SA. You mean, actually paste the score into the

Re: "sa-learn -q" patch in FreeBSD

Vivek Khera wrote: > in the current port for 3.1.4, there are no freebsd-specific patches > to SA, so whatever this was is no longer there. You are one day behind :) > On Aug 23, 2006, at 5:01 PM, Justin Mason wrote: > > anyone know what this is/does? > > http://cia.navi.cx/stats/project/FreeB

RE: Adding 'SA scores' to all incoming mails

Check the docs for 'add_header' in local.cf or user_prefs. The key words here are 'add_header all ' then the text and variables you want to have displayed; the Rule Scoring is another 'variable' that can be sourced. In this example, all emails get an additional header : X-Spam-score-breakdown ca

Re: Calling Regex Experts

On 8/24/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: D.J. wrote:> On 8/24/06, Bowie Bailey <[EMAIL PROTECTED]> wrote:> > D.J. wrote:> > > On 8/24/06, Bart Schaefer < [EMAIL PROTECTED]> wrote:> > > > On 8/24/06, D. J. <[EMAIL PROTECTED] > wrote:> > > > >> > > > > I'm expecting these type of strings f

RE: Calling Regex Experts

D.J. wrote: > On 8/24/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: > > D.J. wrote: > > > On 8/24/06, Bart Schaefer <[EMAIL PROTECTED]> wrote: > > > > On 8/24/06, D. J. <[EMAIL PROTECTED] > wrote: > > > > > > > > > > I'm expecting these type of strings for sure: > > > > > > > > > > cat > > > > > do

Re: Calling Regex Experts

On 8/24/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: D.J. wrote:> On 8/24/06, Bart Schaefer <[EMAIL PROTECTED]> wrote:> > On 8/24/06, D. J. <[EMAIL PROTECTED] > wrote:> > >> > > I'm expecting these type of strings for sure:> > >> > > cat> > > dog> > > cat dog> > > dog cat> > > > > > But I may get so

Training Spamassassin

For my IMAP mail account my e-mail host has setup Spamassassin to be automatically trained by using a 'spam-to-learn' and 'ham-to-learn' IMAP folders for my mailbox on the server. I had assiduously been moving messages not already marked as [SPAM] by Spamassassin into the 'spam-to-learn' folder

RE: Calling Regex Experts

D.J. wrote: > On 8/24/06, Bart Schaefer <[EMAIL PROTECTED]> wrote: > > On 8/24/06, D. J. <[EMAIL PROTECTED]> wrote: > > > > > > I'm expecting these type of strings for sure: > > > > > > cat > > > dog > > > cat dog > > > dog cat > > > > > > But I may get something like this too: > > > > > > cat

Re: Another SARE channel with the most used rules available

On Aug 24, 2006, at 7:26 AM, [EMAIL PROTECTED] wrote: Yes, downloading the gpg and using "sa-update import" doesn't have that problem though. So, how to extract this public key alone from the public key ring to copy over to the sa-update public key ring? Any idea on this is welcome :) gp

Re: "sa-learn -q" patch in FreeBSD

On Aug 23, 2006, at 5:01 PM, Justin Mason wrote: anyone know what this is/does? http://cia.navi.cx/stats/project/FreeBSD/.message/32ba98d/xml --j. in the current port for 3.1.4, there are no freebsd-specific patches to SA, so whatever this was is no longer there.

Re: bayes autolearn acting up

Since upgrading to 3.14, when I turn on bayes auto-learn with: bayes_auto_learn 1 and I set the learn boundaries with: bayes_auto_learn_threshold_nonspam-3.5 bayes_auto_learn_threshold_spam 15.5 I get unexpected auto-learning. Example: I just saw a spam come through that scored 9

Re: Calling Regex Experts

On 8/24/06, Bart Schaefer <[EMAIL PROTECTED]> wrote: On 8/24/06, D. J. <[EMAIL PROTECTED]> wrote:>> I'm expecting these type of strings for sure:>> cat> dog> cat dog> dog cat >> But I may get something like this too:>> cat cat dog> dog dog>> Essentially I want it to match if anything other than cat

Re: Calling Regex Experts

On 8/24/06, D. J. <[EMAIL PROTECTED]> wrote: I'm expecting these type of strings for sure: cat dog cat dog dog cat But I may get something like this too: cat cat dog dog dog Essentially I want it to match if anything other than cat or dog is in the string. That constraint means you have to

Re: Calling Regex Experts

I'm not quite clear on what you want here.  Your example should NOThave matched on "cat dog bird" since it contains one of your terms. It would have matched on "bird", since it doesn't.Oops... that's what I meant.  It doesn't match (though I want it to) because it contains one of the terms.

Re: Calling Regex Experts

On 8/24/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: D.J. wrote:> OK, I'm stumped.  I need to create a regex that will match if> anything other than two terms I've specified exist.>> So for example, I have two terms I like, say "cat" and "dog".  I want > the rule to match if a string contains anythi

Re: Calling Regex Experts

On 8/24/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: D.J. wrote:> OK, I'm stumped.  I need to create a regex that will match if> anything other than two terms I've specified exist.>> So for example, I have two terms I like, say "cat" and "dog".  I want > the rule to match if a string contains anythi

RE: Calling Regex Experts

D.J. wrote: > OK, I'm stumped. I need to create a regex that will match if > anything other than two terms I've specified exist. > > So for example, I have two terms I like, say "cat" and "dog". I want > the rule to match if a string contains anything other than cat or > dog. > > I tried ...

Adding 'SA scores' to all incoming mails

I'd like SA to make a extra line/section under all my mails where it tells what score the mail got (or maybe even which rules scored on the mail) is there such a setting? it would help me to finetune my SA. tnx

Re: Calling Regex Experts

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 D.J. wrote: > OK, I'm stumped. I need to create a regex that will match if anything > other than two terms I've specified exist. > > So for example, I have two terms I like, say "cat" and "dog". I want > the rule to match if a string contains anyt

Calling Regex Experts

OK, I'm stumped.  I need to create a regex that will match if anything other than two terms I've specified exist.So for example, I have two terms I like, say "cat" and "dog".  I want the rule to match if a string contains anything other than cat or dog. I tried ...$value !~ /cat|dog/ ...but this ha

Re: RBL Rules Misfiring

On 8/24/06, D. J. <[EMAIL PROTECTED]> wrote: D.J. wrote:> Hello all.>> I searched my archive of the list, and couldn't find a similar issue. > This is probably something I've misconfigured, but here goes.  Running> SA 3.14 via the Mail::SpamAssassin Perl plugin from amavisd-new.  Have> been runnin

Re: Do I have too many rules? [WAS: timeout help]

On Thu, 24 Aug 2006 10:11:28 -0400 Bowie Bailey <[EMAIL PROTECTED]> wrote: > Josh Trutwin wrote: > > > > Still having problems - even with -L. Server has 1 GB of > > memory, more is on the way I hope. > > You said previously that you were running 12 children. With 1GB > of RAM, I would suggest

Problem with version

Hello, I've built spamassasin 3.1.4, I had some problem, so I installed it with CPAN and then i overwrited it with a source version hehe and now everything is fine BUT when i see the headers of a email i can see (spamassassin: 3.0.3. perlscan: 2.01st. But a spamd -V shows spamd -V SpamAssassi

RE: Do I have too many rules? [WAS: timeout help]

Josh Trutwin wrote: > > Still having problems - even with -L. Server has 1 GB of memory, > more is on the way I hope. You said previously that you were running 12 children. With 1GB of RAM, I would suggest that you drop it to 6 and see what happens. > Anyway - I have the following rules: > >

Re: How to whitelist_from <> ?

Matt Kettler wrote: >Philip Prindeville wrote: > > >>> >>> >>> >>Well, yes, especially since the IP address of the sender is reserved for >>a machine that does ticketing and auto-replies exclusively (I was going >>to use whitelist_from_rcvd and not just whitelist_from). >> >> > >At

Re: Do I have too many rules? [WAS: timeout help]

On Sat, 19 Aug 2006 18:06:59 -0400 "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote: > Josh Trutwin wrote: > > On Fri, 18 Aug 2006 12:16:51 -0400 > > "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote: > > > >> Josh Trutwin wrote: > >>> I've recently had a server experience some really slow spam > >>>

RE: Filtering Aliases/Forwarders

Joanne, Thanks for info, yeah saw the variables I could make substitutions on and will probably do that once I get it up and running so I can make better rules, but I am just trying to get it running right now. For my tests, I am just trying to get it to work. I was sending emails to myself from

Re: Another SARE channel with the most used rules available

Justin Mason wrote: hey, btw, it might be better to extract the gpg public key from "gpg", instead of copying over the entire public key ring -- since that will (a) overwrite any existing SA-update keys, including the system ones, and (b) will trust any existing GPG correspondents to publish SA

Re: Filtering spam in national language

Find an Italian who wants to work with say the SARE ninjas for some Italian specific rule versions, perhaps? {^_^} - Original Message - From: "cmon" <[EMAIL PROTECTED]> To: Sent: Thursday, August 24, 2006 03:01 Subject: Filtering spam in national language I work in an italian compan

Re: Where to install imageinfo.pm?

BG Mahesh wrote: hi I am using SA-3.1.4. I am in the process of installing http://www.rulesemporium.com/plugins.htm Where do I install ImageInfo.pm [which directory]? On my FreeBSD box, I put ImageInfo.pm here: /usr/local/lib/perl5/site_

Re: a new kind of spam (with images)

fanx all, i setted up fuzzyocr yesterday and it gives pretty good result i need some time to well understand all : - sometimes, using spamc -R or spamassassin -t, i can see fuzzy ocr filter displaying score results - but looking in spam folder and at the report of the marked as spam mail : i

Filtering spam in national language

I work in an italian company, we are receiving some spam written in (very bad) italian language, obviously produced by some automatic translator.Although their content is heavily pornographic, the spam score is very low, because they don't match any of the porn-specific rules, which are designed on

Re: How remove vigra gif message ?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 FuzzyOcr recognizes this image with the following scanset: $gocr -l 100 -i - - -l 140 also works, but not as good. Chris Philippe Couas wrote: > Message Hi > > How could i remover theses messages ? Regard Philippe > > - Original Message - *

Where to install imageinfo.pm?

hiI am using SA-3.1.4. I am in the process of installing http://www.rulesemporium.com/plugins.htmWhere do I install ImageInfo.pm [which directory]?-- --B.G. Maheshhttp://www.greynium.com/http://www.oneindia.in/ http://www.click.in/ - Free Indian Classifieds

Re: Train from Outlook?

I use a nifty tool called OLSpamCop to achieve this functionality with my Outlook. OLSpamCop is an Outlook plugin, it adds a new toolbar to Outlook and basically allows you to select an email, hit either a "spam" or "ham" button on the toolbar, and OLSpamCop will forward the email to an address you

Re: How to whitelist_from <> ?

Philip Prindeville wrote: > >> > > Well, yes, especially since the IP address of the sender is reserved for > a machine that does ticketing and auto-replies exclusively (I was going > to use whitelist_from_rcvd and not just whitelist_from). At that point, you should be able to use: whitelis

Re: bayes autolearn acting up

[EMAIL PROTECTED] wrote: > Hello, > > Since upgrading to 3.14, when I turn on bayes auto-learn with: > > bayes_auto_learn 1 > > and I set the learn boundaries with: > > bayes_auto_learn_threshold_nonspam-3.5 > bayes_auto_learn_threshold_spam 15.5 > > I get unexpected auto-learning. Examp

Re: bayes autolearn acting up

From: <[EMAIL PROTECTED]> Hello, Since upgrading to 3.14, when I turn on bayes auto-learn with: bayes_auto_learn 1 and I set the learn boundaries with: bayes_auto_learn_threshold_nonspam-3.5 This doesn't answer your question. But, I suspect a -3.5 here will all but turn off learning on