Re: AWL confusion.. (drinking game)

2006-08-29 Thread Matt Kettler
Anders Norrbring wrote: > >> *sigh*.. do we really need to start a SpamAssassin-Users mailing list >> drinking game? >> >> For those not familiar, when you get home for the evening, sit down, >> with a beverage of your choice (milk, soda, coffee, wine, beer) and read >> the days mail for spamassass

RE: Rawbody problems

2006-08-29 Thread Sven Riedel
> > I'm getting a bit of HTML spam with lines like > > > > right" face=Arial> w > > > > To catch this style of obfuscation, I did two rules, > > being unsure how to escape the carets: > > > > rawbody htmlobscu1 /\>\s*\w\s*\<\// > > rawbody htmlobscu2 />\s*\w\s*<\// > > Hmm... from th

Re: AWL confusion.. (drinking game)

2006-08-29 Thread Anders Norrbring
*sigh*.. do we really need to start a SpamAssassin-Users mailing list drinking game? For those not familiar, when you get home for the evening, sit down, with a beverage of your choice (milk, soda, coffee, wine, beer) and read the days mail for spamassassin-users. 3 drinks - Poster believes th

Re: Rawbody problems

2006-08-29 Thread Matt Kettler
Sven Riedel wrote: > Hi, > I'm getting a bit of HTML spam with lines like > > right" face=Arial> w > > To catch this style of obfuscation, I did two rules, > being unsure how to escape the carets: > > rawbody htmlobscu1 /\>\s*\w\s*\<\// > rawbody htmlobscu2 />\s*\w\s*<\// > > both wit

Re: AWL confusion.. (drinking game)

2006-08-29 Thread Matt Kettler
Theo Van Dinter wrote: > On Tue, Aug 29, 2006 at 08:51:14PM +0200, Anders Norrbring wrote: > >> Shouldn't mail in the AWL get a *negative* score? Or did I just mess my >> mind up? >> > > http://wiki.apache.org/spamassassin/AwlWrongWay > > *sigh*.. do we really need to start a SpamAssass

Rawbody problems

2006-08-29 Thread Sven Riedel
Hi, I'm getting a bit of HTML spam with lines like right" face=Arial> w To catch this style of obfuscation, I did two rules, being unsure how to escape the carets: rawbody htmlobscu1 /\>\s*\w\s*\<\// rawbody htmlobscu2 />\s*\w\s*<\// both with scores and descriptions of course. Bu

Re: FuzzyOCR Install - Issues processing ONLY Gif images.

2006-08-29 Thread Tim Litwiller
try changing your time out from 10 seconds to 15 or 20 and verify that giffix is installed and working correctly. libungif-utils rpm on fedora Michael Grey wrote: Installed FuzzyOCR and believe all the dependencies. Using the sample images I get a Pipe Error ONLY on gif images; resulting in

Re: Perfect spamassassin setup?

2006-08-29 Thread Robert LeBlanc
jdow wrote: > From: "Stuart Johnston" <[EMAIL PROTECTED]> > >> Eric Persson wrote: >> >>> This might be a shot in the dark, but after running a patched qmail, >>> qmailscanner with spamassassin and mysqlsupport for a while and a >>> selfdeveloped webinterface, we've started to look around what oth

FuzzyOCR Install - Issues processing ONLY Gif images.

2006-08-29 Thread Michael Grey
Installed FuzzyOCR and believe all the dependencies.   Using the sample images I get a Pipe Error ONLY on gif images; resulting in no hits on FUZZY_OCR. Pipe Command "/usr/bin/giftopnm -"   Giftopnm exists in that path.   Running giftopnm on the command line seems to work with no e

Re: Discourage broken content

2006-08-29 Thread Kenneth Porter
--On Tuesday, August 29, 2006 9:58 AM +0100 Justin Mason <[EMAIL PROTECTED]> wrote: I'm sure they know this -- but there are dangers there too. It's pretty trivial in HTML to craft a MIME part that contains 100 KB of innocent-looking HTML, followed by 4 KB of spam payload, where the payload is

Re: Discourage broken content

2006-08-29 Thread Kenneth Porter
--On Tuesday, August 29, 2006 9:41 AM +0100 Anthony Peacock <[EMAIL PROTECTED]> wrote: This issue is currently being discussed on the MailScanner users list, under the Subject "Max SpamAssassin Size problems". Which can be found here:

Re: Perfect spamassassin setup?

2006-08-29 Thread jdow
From: "Stuart Johnston" <[EMAIL PROTECTED]> Eric Persson wrote: This might be a shot in the dark, but after running a patched qmail, qmailscanner with spamassassin and mysqlsupport for a while and a selfdeveloped webinterface, we've started to look around what others are using? Is there any pro

Re: Bayes SQL DB problem

2006-08-29 Thread Benny Pedersen
On Tue, August 29, 2006 19:05, John D. Hardin wrote: > ...your fingers seem to be stuck in .ie it was me that typed at a lowres fb device with scrampled chars now i have highres radeonfb at 1600x1200 :-) -- "This message was sent using 100% recycled spam mails."

Re: Hashcash

2006-08-29 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arik Raffael Funke wrote: > decoder wrote: >> Arik Raffael Funke wrote: >>> Hello, >>> >>> how does spamassassin handle hashcash? It is turned on by >>> default, right? >> Yes but you still need to define your accept range as you tried >> to do above:)

Re: Perfect spamassassin setup?

2006-08-29 Thread Stuart Johnston
Eric Persson wrote: This might be a shot in the dark, but after running a patched qmail, qmailscanner with spamassassin and mysqlsupport for a while and a selfdeveloped webinterface, we've started to look around what others are using? Is there any project that combines the strength of spamassass

Re: Hashcash

2006-08-29 Thread Arik Raffael Funke
decoder wrote: Arik Raffael Funke wrote: Hello, how does spamassassin handle hashcash? It is turned on by default, right? Yes but you still need to define your accept range as you tried to do above:) I am using v3.1.2 and have in init.pre "loadplugin Mail::SpamAssassin::Plugin::Hashcash". How

Re: Hashcash

2006-08-29 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Arik Raffael Funke wrote: > Hello, > > how does spamassassin handle hashcash? It is turned on by default, > right? Yes but you still need to define your accept range as you tried to do above:) > > I am using v3.1.2 and have in init.pre "loadplugin

Hashcash

2006-08-29 Thread Arik Raffael Funke
Hello, how does spamassassin handle hashcash? It is turned on by default, right? I am using v3.1.2 and have in init.pre "loadplugin Mail::SpamAssassin::Plugin::Hashcash". However, the hashcash contained in incoming mails seems to have been ignored. I added following to local.cf, but I am stil

Re: Suse OpenExchange forwarding to Microsoft Exchange

2006-08-29 Thread Sanford Whiteman
> I'm having a strange problem with SpamAssassin running on my Linux > box which then forwards (with .forward) the mail to some users on > Exchange. When the mail gets scanned and makes it through and then > forwards to Exchange the email comes up completely blank with 'From: > Spam Filter

Re: Perfect spamassassin setup?

2006-08-29 Thread DAve
Ken A wrote: DAve wrote: Ken A wrote: http://mailwatch.sourceforge.net/ Doesn't do per user SA rule scores since it works with MailScanner, and MailScanner doesn't support that, but does do pretty much everything else SA, clamav and MailScanner do, including logging to mysql, quarantine &

Re: Perfect spamassassin setup?

2006-08-29 Thread Ken A
DAve wrote: Ken A wrote: http://mailwatch.sourceforge.net/ Doesn't do per user SA rule scores since it works with MailScanner, and MailScanner doesn't support that, but does do pretty much everything else SA, clamav and MailScanner do, including logging to mysql, quarantine & release, plus

Re: Perfect spamassassin setup?

2006-08-29 Thread DAve
Ken A wrote: http://mailwatch.sourceforge.net/ Doesn't do per user SA rule scores since it works with MailScanner, and MailScanner doesn't support that, but does do pretty much everything else SA, clamav and MailScanner do, including logging to mysql, quarantine & release, plus some pretty gr

Re: Perfect spamassassin setup?

2006-08-29 Thread Ken A
http://mailwatch.sourceforge.net/ Doesn't do per user SA rule scores since it works with MailScanner, and MailScanner doesn't support that, but does do pretty much everything else SA, clamav and MailScanner do, including logging to mysql, quarantine & release, plus some pretty graphs. Ken A.

Re: problem with RX subjects

2006-08-29 Thread John D. Hardin
On Tue, 29 Aug 2006, Paul Tenfjord wrote: > I am using the following SARE rulesets : > TRUSTED_RULESETS="SARE_STOCKS TRIPWIRE SARE_ADULT SARE_OBFU0 SARE_OBFU1 > SARE_URI0 SARE_URI1 SARE_REDIRECT_POST300 SARE_SPECIFIC SARE_FRAUD SARE_OEM" > They have not once detected this type of spam, do have a

Suse OpenExchange forwarding to Microsoft Exchange

2006-08-29 Thread Dave Higgins
SpamAssassin version 3.1.3 running on Perl version 5.8.8 Systems: Linux mail 2.4.21-241-smp #1 SMP Tue Aug 10 15:55:34 UTC 2004 i686 unknown MS Exchange 2003 --- I'm having a strange problem with SpamAssassin running on my Linux box which then forwards (with .forward) the mail to some users on Ex

Re: AWL confusion..

2006-08-29 Thread Anthony Peacock
Anders Norrbring wrote: I just got rediciously confused.. I sent a mail to myself, testing some stuff, and of course it's in the same domain and network as the server. I got: 9.6 AWL AWL: From: address is in the auto white-list Shouldn't mail in the AWL get a *negative* score? Or did I just

Re: AWL confusion..

2006-08-29 Thread Andreas Pettersson
Anders Norrbring wrote: I just got rediciously confused.. I sent a mail to myself, testing some stuff, and of course it's in the same domain and network as the server. I got: 9.6 AWL AWL: From: address is in the auto white-list Shouldn't mail in the AWL get a *negative* score? Or did I jus

Re: AWL confusion..

2006-08-29 Thread Theo Van Dinter
On Tue, Aug 29, 2006 at 08:51:14PM +0200, Anders Norrbring wrote: > Shouldn't mail in the AWL get a *negative* score? Or did I just mess my > mind up? http://wiki.apache.org/spamassassin/AwlWrongWay -- Randomly Generated Tagline: QOTD: Talk about willing people... over half of them are

Perfect spamassassin setup?

2006-08-29 Thread Eric Persson
This might be a shot in the dark, but after running a patched qmail, qmailscanner with spamassassin and mysqlsupport for a while and a selfdeveloped webinterface, we've started to look around what others are using? Is there any project that combines the strength of spamassassin, mysql and a good w

AWL confusion..

2006-08-29 Thread Anders Norrbring
I just got rediciously confused.. I sent a mail to myself, testing some stuff, and of course it's in the same domain and network as the server. I got: 9.6 AWL AWL: From: address is in the auto white-list Shouldn't mail in the AWL get a *negative* score? Or did I just mess my mind up? -- A

Re: Bayesian DB problem?

2006-08-29 Thread Aaron Hill
host:/etc/spamassassin/bayes# ls total 60 drwxrwxr-x 2 root spamd 4096 2006-08-29 14:02 . drwxr-xr-x 4 root root 4096 2006-08-29 14:01 .. -rw-rw-rw- 1 root root 12288 2006-08-29 14:02 bayes_db_seen -rw-rw-rw- 1 root root 49152 2006-08-29 14:02 bayes_db_toks It worked! Thanks! My users a

Re: What does "ALL_NATURAL BODY" mean?

2006-08-29 Thread Evan Platt
At 10:35 AM 8/29/2006, you wrote: > What does "ALL_NATURAL BODY" mean? No silicone. And no roids.

Re: What does "ALL_NATURAL BODY" mean?

2006-08-29 Thread John D. Hardin
> What does "ALL_NATURAL BODY" mean? No silicone. -- John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 -

Silent bug in FuzzyOcr 2.3b, database feature - hotfix

2006-08-29 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, someone discovered that the DB was not working properly in most cases, please fix line 492: It says: print DB "$score::$digest\n"; Should be: print DB "${score}::${digest}\n"; As a result, the produced hashdb is unusable, please de

Re: problem with RX subjects

2006-08-29 Thread Paul Tenfjord
I am using the following SARE rulesets : TRUSTED_RULESETS="SARE_STOCKS TRIPWIRE SARE_ADULT SARE_OBFU0 SARE_OBFU1 SARE_URI0 SARE_URI1 SARE_REDIRECT_POST300 SARE_SPECIFIC SARE_FRAUD SARE_OEM" They have not once detected this type of spam, do have a set that actually do? Example of one of the RX t

Re: Bayes SQL DB problem

2006-08-29 Thread John D. Hardin
On Tue, 29 Aug 2006, Benny Pedersen wrote: > sa-laern --dump magic -u root > sa-laern --dump magic -u vscan > sa-laern --claen ...your fingers seem to be stuck in .ie -- John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174pgpk -a [EMA

Re: problem with RX subjects

2006-08-29 Thread John D. Hardin
> X-Spam-Status: No, score=0.1 required=3.0 tests=BAYES_50,FORGED_RCVD_HELO, >HTML_MESSAGE autolearn=ham version=3.1.4 No network tests? No SARE rulesets? Those are the low-hanging fruit you should check first. And you probably should turn off autolearning. -- John Hardin KA7OHZI

Re: Bayesian DB problem?

2006-08-29 Thread Theo Van Dinter
On Tue, Aug 29, 2006 at 12:44:42PM -0400, Aaron Hill wrote: > bayes_path /etc/spamassassin/bayes > > /etc/spamassassin/bayes/ has permissions 775, and is owned by root.spamd > It's currently empty. It looks as if your bayes_path is set wrong. If /etc/spamassassin/bayes is a directory, you proba

Re: What does "ALL_NATURAL BODY" mean?

2006-08-29 Thread Kelson
jdow wrote: Somebody who write the rule had a sense of humor, I suspect. ... "2.6 ALL_NATURAL BODY: Spam is 100% natural?!" I wonder if it dates back to the time of the original PURE_PROFIT rule, which was described as something like, "Profit is dirty, not pure" -- Kelson Vibber SpeedGate

Bayesian DB problem?

2006-08-29 Thread Aaron Hill
Hi,   I have a question regarding the Bayes Token database for SA. I'm using: SpamAssassin version 3.1.4Debian Linux kernel 2.4.27-2 on a Pentium II based system Qmail v1.03 (using qmail-queue and procmail to filter [SPAM] mails) Courier IMAP   We have a network with about 200-300 users, and

Re: Stupid phisher

2006-08-29 Thread Magnus Holmgren
On Tuesday 29 August 2006 17:43, Gino Cerullo took the opportunity to say: > On 29-Aug-06, at 7:49 AM, Magnus Holmgren wrote: > > On Monday 28 August 2006 01:00, Chris took the opportunity to say: > >> This is a pretty good fake site except he left a little something > >> from > >> Mother Russia at

Re: Stupid phisher

2006-08-29 Thread Gino Cerullo
On 29-Aug-06, at 7:49 AM, Magnus Holmgren wrote: On Monday 28 August 2006 01:00, Chris took the opportunity to say: This is a pretty good fake site except he left a little something from Mother Russia at the bottom. http://signin-ebay-co-uk-ebay.land.ru/ ws.eBayISAPI.dll.SignIn.pUserId.co.p

RE: Getting Spamassasin to work.

2006-08-29 Thread Bret Miller
> First, thanks all that sent me help to get a test message to > work. I was > able to successfully get SA to trigger. > > It appears that SA is only currently working on my local mail accounts > and not the alias/forward emails. > > So what I have is an Hosting provider which hosts my domain, that

Re: Incorrect message-id logged?

2006-08-29 Thread John Horne
On Tue, 2006-08-29 at 10:25 -0400, Theo Van Dinter wrote: > On Tue, Aug 29, 2006 at 03:06:54PM +0100, John Horne wrote: > > scantime=5.2,size=3097,mid=,bayes=1, > > > > I have searched through the MTA logs for the past month, and used a > > shortened part of the above mid, but nothing was found. S

RE: AW: AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Gary V
Why not use amavisd-new (afaik should it work with most virusscanners)? Is there a special reason? yes there is a reason, i didnt find a tutorial how to set it up ;-) http://www.freespamfilter.org/ _ Windows Live Spaces is her

Re: Incorrect message-id logged?

2006-08-29 Thread Theo Van Dinter
On Tue, Aug 29, 2006 at 10:26:06AM -0400, Matt Kettler wrote: > If there is no message-ID, spamassassin generates a SHA1 hash of a > portion of the body, converts it to hex, and uses that instead. > > SA does this for bayes-seen tracking purposes. For Bayes, yes. For spamd, no. And I was just n

Re: Incorrect message-id logged?

2006-08-29 Thread Matt Kettler
John Horne wrote: > Hello, > > We run site-wide SA (3.0.6), and I was asked to investigate a problem > (what exactly is not relevant). I noticed in our SA log entries such as: > > === > Aug 29 09:56:17 mary spamd[23037]: result: Y 13 - > B

Re: Incorrect message-id logged?

2006-08-29 Thread Theo Van Dinter
On Tue, Aug 29, 2006 at 03:06:54PM +0100, John Horne wrote: > scantime=5.2,size=3097,mid=,bayes=1, > > I have searched through the MTA logs for the past month, and used a > shortened part of the above mid, but nothing was found. So the question > is how come SA shows a 'mid=dfee66ed26bce3c839092a9

Incorrect message-id logged?

2006-08-29 Thread John Horne
Hello, We run site-wide SA (3.0.6), and I was asked to investigate a problem (what exactly is not relevant). I noticed in our SA log entries such as: === Aug 29 09:56:17 mary spamd[23037]: result: Y 13 - BAYES_99,FH_SALES_REPLY,HTML_50_6

Re: Honest spammer

2006-08-29 Thread Ryan Steele
Ah, now that gave me a good chuckle. Good way to start off a Tuesday : ) Thanks Chris! Ryan Chris wrote: Now this is an honest spammer: Spam from Vasya. Date: Mon Aug 28 10:45:22 2006 From: "Stacie Kendrick" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Hi my diar friend! This is the spa

RE: Getting Spamassasin to work.

2006-08-29 Thread DuBois, Joseph
First, thanks all that sent me help to get a test message to work. I was able to successfully get SA to trigger. It appears that SA is only currently working on my local mail accounts and not the alias/forward emails. So what I have is an Hosting provider which hosts my domain, that I setup alia

Re: Problems with ClamAV Plugin

2006-08-29 Thread Matthias Haegele
Jürgen Ladstätter schrieb: yes there is a reason, i didnt find a tutorial how to set it up ;-) [Quoting canceled] [...] Why not use amavisd-new (afaik should it work with most virusscanners)? Is there a special reason? /etc/postfix/main.cf: content_filter = amavisd-new:[127.0.0.1]:10024

AW: AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Jürgen Ladstätter
yes there is a reason, i didnt find a tutorial how to set it up ;-) Mit freundlichen Grüßen Jürgen Ladstätter ( [EMAIL PROTECTED] ) ___ P.I.C.S. EDV GmbH. A-5020 Salzburg, Landsturmstraße 18 Tel.: +43 (662) 455467 Fax.: +43 (662) 455468 Web: http://w

Re: AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Matthias Haegele
Jürgen Ladstätter schrieb: already solved my problem! its scanning now, but clamd must be running on 127.0.0.1 restricted. the only problem i have - postfix doesnt throw the attachment away. so the user still would get the virus. (in this case the eicar testvirus) Why not use amavisd-new (afaik

Re: Stupid phisher

2006-08-29 Thread Magnus Holmgren
On Monday 28 August 2006 01:00, Chris took the opportunity to say: > This is a pretty good fake site except he left a little something from > Mother Russia at the bottom. > > http://signin-ebay-co-uk-ebay.land.ru/ws.eBayISAPI.dll.SignIn.pUserId.co.pa >rtnerid.siteid.pageType.pa1.i1.html Speaking a

AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Jürgen Ladstätter
already solved my problem! its scanning now, but clamd must be running on 127.0.0.1 restricted. the only problem i have - postfix doesnt throw the attachment away. so the user still would get the virus. (in this case the eicar testvirus) Mit freundlichen Grüßen Jürgen Ladstätter ( [EMAIL PROTECTE

Re: AW: Problems with ClamAV Plugin

2006-08-29 Thread jdow
That requires it to run. ===8<--- [7703] warn: plugin: failed to parse plugin (from @INC): Can't locate File/Scan/ClamAV.pm in @INC (@INC contains: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux /usr/lib/perl5/vendor_perl/5.8.8 /etc/perl /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.

Re: Problems with ClamAV Plugin

2006-08-29 Thread jdow
man File::Scan::ClamAV works? clamav.pm from the spamassassin plugin is NOT ClamAv. Anyway it appears from your traces that the plugin is found but the File::Scan::ClamAV is not found or is not available. (ClamAV does not need to be running. It is not running on my system. {^_^} - Original M

BAYES_99_99 and such

2006-08-29 Thread Magnus Holmgren
The highest and lowest bayes rules are BAYES_99 (spam probability > 99%) and BAYES_00 (spam probability < 1%), but often the confidence is as high as 0. or 1. (rounded). 0.999 instead of 0.99 means (in theory at least) that the FP chance decreases by a factor 10. Conversely at the other

Re: AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Nigel Frankcom
On Tue, 29 Aug 2006 13:23:47 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote: >it does the following when it finds a virus: > >} elsif($code eq 'FOUND') { >Mail::SpamAssassin::Plugin::dbg("ClamAV: Detected virus: $virus"); >$header = "Yes ($virus)"; >$isspam = 1; > >so it adds a fla

AW: AW: Problems with ClamAV Plugin

2006-08-29 Thread Jürgen Ladstätter
it does the following when it finds a virus: } elsif($code eq 'FOUND') { Mail::SpamAssassin::Plugin::dbg("ClamAV: Detected virus: $virus"); $header = "Yes ($virus)"; $isspam = 1; so it adds a flag for SA

Re: AW: Problems with ClamAV Plugin

2006-08-29 Thread Nigel Frankcom
On Tue, 29 Aug 2006 13:07:50 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote: >x-virus header is now shown, but it doesnt drop the file. i think it would >be better, because outlook doesnt show any warning, header isnt rewritten, >file isnt dropped. so its still unsecure :-/ > > > >Mit freundl

AW: Problems with ClamAV Plugin

2006-08-29 Thread Jürgen Ladstätter
it is installed :) Mit freundlichen Grüßen Jürgen Ladstätter ( [EMAIL PROTECTED] ) ___ P.I.C.S. EDV GmbH. A-5020 Salzburg, Landsturmstraße 18 Tel.: +43 (662) 455467 Fax.: +43 (662) 455468 Web: http://www.pics.co.at E-Mail: [EMAIL PROTECTED] Ihr Par

Re: AW: Problems with ClamAV Plugin

2006-08-29 Thread Nigel Frankcom
On Tue, 29 Aug 2006 13:07:50 +0200, Jürgen Ladstätter <[EMAIL PROTECTED]> wrote: >x-virus header is now shown, but it doesnt drop the file. i think it would >be better, because outlook doesnt show any warning, header isnt rewritten, >file isnt dropped. so its still unsecure :-/ > > > >Mit freundl

Re: Problems with ClamAV Plugin

2006-08-29 Thread jdow
From: "Jürgen Ladstätter" <[EMAIL PROTECTED]> i found the clamav plugin and thought thats a good idea :) so i did everything how it was explained, but no virus header is added to an email. also eicar testvirus is going through. logs tell my why: <> By the way, I cannot vouch for its performance.

Re: Problems with ClamAV Plugin

2006-08-29 Thread jdow
It looks like the perl ClamAV scanner is not installed on the system. It needs to be installed but not running. If it is installed "man File::Scan::ClamAV" will give a man page. Otherwise you need to install it. (I used cpan to install: /usr/lib/perl5/site_perl/5.8.6/File/Scan/ClamAV.pm ) You mig

AW: problem with RX subjects

2006-08-29 Thread Whisky
Dear Ivago,   I managed to capture that sort of spam with a pretty simple rule:   header SUBJECT_PHARMACY_25 Subject =~ /(RX|MEDZ)/   Maybe this one can help you as well.   Regards,   -=W=-       Von: Sally K Scheer [mailto:[EMAIL PROTECTED] Gesendet: Dienstag, 29. Au

Re: Bayes SQL DB problem

2006-08-29 Thread Benny Pedersen
On Tue, August 29, 2006 10:04, Anders Norrbring wrote: > So, maybe I need to tell SA that "vscan" is authorized to use it, the > question is how... Would I need to install and configure the AuthzUser > plugin? Or some other? no it bounded to the unix login name su vscan sa-learn --dump magic exit

Re: Bayes SQL DB problem

2006-08-29 Thread Benny Pedersen
On Tue, August 29, 2006 09:45, Anders Norrbring wrote: > Benny Pedersen skrev: >> On Tue, August 29, 2006 08:16, Anders Norrbring wrote: >> >>> [6204] dbg: bayes: unable to initialize database for vscan user, aborting! >> >> from a new sql database this is default error, means that there is no data

Re: Discourage broken content

2006-08-29 Thread Anthony Peacock
Justin Mason wrote: Anthony Peacock writes: Rick Cooper wrote: From: decoder [mailto:[EMAIL PROTECTED] Sent: Friday, August 25, 2006 4:23 PM To: Rick Cooper Cc: users@spamassassin.apache.org Subject: Re: Discourage broken content -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Cooper wrot

Re: Discourage broken content

2006-08-29 Thread Justin Mason
Anthony Peacock writes: > Rick Cooper wrote: > >> From: decoder [mailto:[EMAIL PROTECTED] > >> Sent: Friday, August 25, 2006 4:23 PM > >> To: Rick Cooper > >> Cc: users@spamassassin.apache.org > >> Subject: Re: Discourage broken content > >> > >> > >> -BEGIN PGP SIGNED MESSAGE- > >> Hash:

Re: Bayes SQL DB problem

2006-08-29 Thread Anders Norrbring
Anders Norrbring skrev: Anders Norrbring skrev: Benny Pedersen skrev: [..snip..] After some more error-message-surfing on Google, it looks like it's SA itself that doesn't allow any other username than root to use the Bayes SQL plugin. So, maybe I need to tell SA that "vscan" is authorized

Re: Discourage broken content

2006-08-29 Thread Anthony Peacock
Rick Cooper wrote: -Original Message- From: decoder [mailto:[EMAIL PROTECTED] Sent: Friday, August 25, 2006 4:23 PM To: Rick Cooper Cc: users@spamassassin.apache.org Subject: Re: Discourage broken content -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Cooper wrote: -Original

Re: Bayes SQL DB problem

2006-08-29 Thread Anders Norrbring
Anders Norrbring skrev: Benny Pedersen skrev: On Tue, August 29, 2006 08:16, Anders Norrbring wrote: [6204] dbg: bayes: unable to initialize database for vscan user, aborting! from a new sql database this is default error, means that there is no data to work with so far Well, there actua

Re: Bayes SQL DB problem

2006-08-29 Thread Anders Norrbring
Benny Pedersen skrev: On Tue, August 29, 2006 08:16, Anders Norrbring wrote: [6204] dbg: bayes: unable to initialize database for vscan user, aborting! from a new sql database this is default error, means that there is no data to work with so far Well, there actually IS one post in the DB..

Re: Bayes SQL DB problem

2006-08-29 Thread Benny Pedersen
On Tue, August 29, 2006 08:16, Anders Norrbring wrote: > [6204] dbg: bayes: unable to initialize database for vscan user, aborting! from a new sql database this is default error, means that there is no data to work with so far > Shouldn't SA try to contact MySQL as "username" and not as "vscan"?