TQMcube Geo Zone config files

In case anybody is interrested, I've compiled a config file for the geo zone at TQM http://tqmcube.com/worldzone.php It might not be of great use, but it is interresting to gather some statistics of where the mails come from. Files found here http://anp.ath.cx/tqmcube/ Regards, Andreas

Re: Marking Mail in the future as SPAM?

On Sep 8, 2006, at 9:17 PM, Stuart Johnston wrote: John Rudd wrote: On Sep 8, 2006, at 5:59 PM, Stuart Johnston wrote: [EMAIL PROTECTED] wrote: When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I fig

Re: Marking Mail in the future as SPAM?

John Rudd wrote: On Sep 8, 2006, at 5:59 PM, Stuart Johnston wrote: [EMAIL PROTECTED] wrote: When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local timezo

Re: Customizing RBL and SURBL lists

Bowie Bailey wrote: D.J. wrote: Excellent! This has worked flawlessly. Now for part 2 of this project, sort of related to the first part. So now I have only the zones I want to query. When I wish to move to my local servers, is it as simple as adding a new "header" line into my local.cf fi

Re: pyzor: check failed: internal error

John Thompson wrote: I just updated SA from v3.1.4 to v3.1.5 and have started seeing this error (pyzor: check failed: internal error) in my maillog. I rebuilt pyzor and the message continues to appear. Is this significant? Running on FreeBSD-5.2 with SA/pyzor/etc. built from the ports collectio

Re: Marking Mail in the future as SPAM?

On Sep 8, 2006, at 5:59 PM, Stuart Johnston wrote: [EMAIL PROTECTED] wrote: When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local timezone I would have peo

Re: SPF Scores

Michel Vaillancourt wrote: > I set up SPF for Wolfstar.ca yesterday, and I've been reading a bit off > the website about SPF itself. WRT to SA, I'm interested in knowing if folks > have adjusted their "stock" SPF scores or if they've done some custom rules > to lever this technology? >

Re: Marking Mail in the future as SPAM?

[EMAIL PROTECTED] wrote: When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local timezone I would have people leaving messages in the future that always sit at t

Re: BUG? sa-learn --ham vs spamassassin -r different results

Michael Scheidell wrote: > Matt Kettler wrote: >> >>> >>> Further, spamassassin -r and sa-learn --spam learn differently, give >>> different results: >>> >>> >> By any chance was the message used scanned by SA already? >> >> I'm wondering if it's a bug where spamassassin -r is stripping mar

.spamassin folder not created after bugfix #4932

Greetings! I am hoping someone can confirm if this is a bug or desired behaviour? Or if something else is causing it to go astray? Running SA 3.13 SPAMDOPTIONS="-d -c -m5 -H" Runs on a per user basis - i.e. users who want to use SA have this code placed in /home/user/domain-mail/.rc.local.init

OT: Webmail (was Re: LOG: Re: Marking Mail in the future as SPAM?)

jdow wrote: Take to heart my comment about web mail clients. At today's prices for bits on disks IMAO Web Mail clients are not worth the price of their storage for the executable file. Even Outlook Express, which I use, is faster and sorts by either received date or sent date apparently with cor

pyzor: check failed: internal error

I just updated SA from v3.1.4 to v3.1.5 and have started seeing this error (pyzor: check failed: internal error) in my maillog. I rebuilt pyzor and the message continues to appear. Is this significant? Running on FreeBSD-5.2 with SA/pyzor/etc. built from the ports collection. -- John ([EMAIL

Re: LOG: Re: Marking Mail in the future as SPAM?

Take to heart my comment about web mail clients. At today's prices for bits on disks IMAO Web Mail clients are not worth the price of their storage for the executable file. Even Outlook Express, which I use, is faster and sorts by either received date or sent date apparently with correct regard f

Re: LOG: Re: Marking Mail in the future as SPAM?

I've used Horde/IMP for ever but is there a commonly regarded better quality web based IMAP client then?On Sep 8, 2006, at 5:50 PM, jdow wrote:    Accepting to folder lists/unix/spamassassin-usersFrom: "jdow" <[EMAIL PROTECTED]>Date: September 8, 2006 5:50:36 PM CDTTo:

Re: Marking Mail in the future as SPAM?

From: <[EMAIL PROTECTED]> When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local timezone I would have people leaving messages in the future that always sit at

Re: Marking Mail in the future as SPAM?

Turns out Horde's IMP allows me to sort by Arrival Date to that will do what I want. Doing what I describe below would be when you don't want to rely on the client but manipulate the message on it's way in and rewrite it's Date: header since at the very least a Mail client will allow you to sort by

Re: Marking Mail in the future as SPAM?

When using a web client like IMP from Horde it seems the Date header is kept in the original format and never converted to my local timezone. I figure that if I converted the Date to my local timezone I would have people leaving messages in the future that always sit at the top of my Inbox. For ins

Re: Marking Mail in the future as SPAM?

On Fri, Sep 08, 2006 at 03:27:21PM -0500, [EMAIL PROTECTED] wrote: > Are there any rules right now that pertain to mail with bogus dates? Yes. > Is there anything in place that can calculate based on your location where is > in > the future (relative to the rest of the world?) DATE_IN_FUTURE_*

Marking Mail in the future as SPAM?

Hi, Are there any rules right now that pertain to mail with bogus dates? A common trick is to use a date in the future in order to ensure the message is noticed at the very top of the list. Is there anything in place that can calculate based on your location where is in the future (relative to t

Re: Customizing RBL and SURBL lists

> Excellent!  This has worked flawlessly.  Now for part 2 of this> project, sort of related to the first part.  So now I have only the > zones I want to query.  When I wish to move to my local servers, is> it as simple as adding a new "header" line into my local.cf file for> each list, or will I ne

Re: Fuzzy OCR false positives from Screenshots...

From: "David B Funk" <[EMAIL PROTECTED]> On Fri, 8 Sep 2006, Michael Grey wrote: In regards to the second, many large companies have outside companies do work for them in the areas of marketing and other aspects. So this also will happen regardless. Let me clarify; this is an OUTSIDE relay to

RE: Customizing RBL and SURBL lists

D.J. wrote: > On 9/8/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: > > D.J. wrote: > > > Greetings all: > > > > > > I intend to eventually have local copies for the lists I wish to > > > use, so it's important for me to figure this out. Currently, I'm > > > just trying to get SA to only do checks a

Re: Fuzzy OCR false positives from Screenshots...

It MAY be that FuzzyOcr needs to become aware of whitelists. But then, if you use a whitelist entry for the cell account summaries the FuzzyOcr scores are basically meaningless. {^_^} - Original Message - From: "Michael Grey" <[EMAIL PROTECTED]> To: Sent: Friday, September 08, 2006 09:

Re: Which DB is actually used?

From: "Logan Shaw" <[EMAIL PROTECTED]> On Fri, 8 Sep 2006, Bo Mellberg wrote: It seems like the exim-users database is being touched regularly, so I'm guessing that it has been set up by apt-get in some "auto-learning" state. Yes, you might want to check whatever's running SpamAssassin and se

Re: BAYES_00

On Fri, Sep 08, 2006 at 12:04:12PM -0700, Michael Grey wrote: > If you hit on BAYES_00, does that mean explicitly that the email has been > learned as NOT SPAM ? The rule BAYES_00 has nothing to do with whether or not the message has already been learned. > If this is not the case ( or ONLY the

BAYES_00

Forgive what may be a newbie question;   If you hit on BAYES_00, does that mean explicitly that the email has been learned as NOT SPAM ?   If this is not the case ( or ONLY the case,) what other conditions may cause this ? ( Presuming the DB is available / healthy etc. )   Thanks…

A Note Regarding DHCP Zone

Based upon removal requests, we are seeing a considerable increase in SA usage. I added some notes to our website recently that I wanted to share on this list: Please Note:The dhcp zone also contains some static generic hosts: * Most of these are in mixed dynamic and static ranges. We are whi

Re: Customizing RBL and SURBL lists

On 9/8/06, Bowie Bailey <[EMAIL PROTECTED]> wrote: D.J. wrote:> Greetings all:>> I intend to eventually have local copies for the lists I wish to use,> so it's important for me to figure this out.  Currently, I'm just> trying to get SA to only do checks against the lists that I want to > eventually

RE: Fuzzy OCR false positives from Screenshots...

On Fri, 8 Sep 2006, Michael Grey wrote: > In regards to the second, many large companies have outside companies do work > for them in the areas of marketing and other aspects. So this also will > happen regardless. > > Let me clarify; this is an OUTSIDE relay to INSIDE... > > A FuzzyOCR White List

RE: [Bump] No log to syslog after upgrade

This is news to me - I'll have to dig into the docs again, and see what I can find. Sigh. I must be getting old or something. | -Original Message- | From: Stuart Johnston [mailto:[EMAIL PROTECTED] | Sent: Thursday, September 07, 2006 15:27 | To: Kurt Buff; users@spamassassin.apache.org |

Re: Fuzzy OCR false positives from Screenshots...

On Fri, 8 Sep 2006, Michael Grey wrote: We are testing a new configuration using FuzzyOCR, and found it to work very well overall... However, there have been two occasions in the last 24 hrs where screenshots embedded into the emails caused false positives. One was an 'account summary' from a c

RE: Fuzzy OCR false positives from Screenshots...

On Fri, 8 Sep 2006, Randal, Phil wrote: Score appropriately, train your Bayes well, and the false positives should diminish. FUZZY_OCR gives crazily high scores to certain things. One point per matched keyword, I believe. I've seen FUZZY_OCR, by itself, give scores as high as 24.00. Here's th

Re: Which DB is actually used?

On Fri, 8 Sep 2006, Logan Shaw wrote: Second, once you determine the correct user, in most cases sa-learn should consult the same configuration file that the learning process does, so there shouldn't be a reason to give --dbpath. Oops, that should have said "that the scanning process does".

Re: Quarantined Spam.

Vincent Li System Admin On Fri, 8 Sep 2006, Jared wrote: Hi, Is there anyway I can resend the emails which have been quarantined. as some of the emails should not have been quarantined. I'm using plesk 7.5 reloaded with spam assassin. I am using Amavisd-new SQL quarantine and MailZu

RE: Fuzzy OCR false positives from Screenshots...

Score appropriately, train your Bayes well, and the false positives should diminish. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: Michael Grey [mailto:[EMAIL PROTECTED] > Sent: 08 September 2006 18:43 > To: users@spamass

RE: Fuzzy OCR false positives from Screenshots...

You will have to ask the cell company about the first issue ... In regards to the second, many large companies have outside companies do work for them in the areas of marketing and other aspects. So this also will happen regardless. Let me clarify; this is an OUTSIDE relay to INSIDE... A FuzzyO

Re: Fuzzy OCR false positives from Screenshots...

On Fri, 8 Sep 2006, Michael Grey wrote: > However, there have been two occasions in the last 24 hrs where screenshots > embedded into the emails caused false positives. > > One was an 'account summary' from a cell company, the other was some internal > marketing info. > > Are there other approac

Re: Spam on Exchange

On Friday, September 8, 2006 at 4:09:55 PM, Bowie confabulated: > Ok, I'll give you that one. I tend to forget about that limitation > since I mostly work with linux. We migrated away from Windows to FreeBSD about three months ago mostly because of tools that were readily available to the

RE: Spam on Exchange

Thanks for the responses I tried using the command spamassassin.bat < c:\esa\ham\message and it gave me the same score as spamassassasin -t < c:\esa\ham\message and it also gave me the same score as spamassassin.bat -t < c:\esa\ham\message I am at a loss for words and actions...I do not know

Fuzzy OCR false positives from Screenshots...

We are testing a new configuration using FuzzyOCR, and found it to work very well overall…   However, there have been two occasions in the last 24 hrs where screenshots embedded into the emails caused false positives.   One was an ‘account summary’ from a cell company, the other was so

SPF Scores

I set up SPF for Wolfstar.ca yesterday, and I've been reading a bit off the website about SPF itself. WRT to SA, I'm interested in knowing if folks have adjusted their "stock" SPF scores or if they've done some custom rules to lever this technology? -- --Michel Vaillancourt

RE: Customizing RBL and SURBL lists

D.J. wrote: > Greetings all: > > I intend to eventually have local copies for the lists I wish to use, > so it's important for me to figure this out. Currently, I'm just > trying to get SA to only do checks against the lists that I want to > eventually check. However, it still appearst to be che

Re: Customizing RBL and SURBL lists

D.J. wrote: I've basically taken the 20_dnsbl_tests.cf and 25_uribl.cf files, copied them to my /etc/mail/spamassassin directory, and commented out the lists that I don't want checked. That won't work, because SpamAssassin will try to merge a bunch of comments with the default rules... and c

Customizing RBL and SURBL lists

Greetings all:I intend to eventually have local copies for the lists I wish to use, so it's important for me to figure this out.  Currently, I'm just trying to get SA to only do checks against the lists that I want to eventually check.  However, it still appearst to be checking all of them.  I've b

RE: Spam on Exchange

Duane Hill wrote: > On Friday, September 8, 2006 at 3:40:06 PM, Bowie confabulated: > > > Floyd wrote: > > > Hi, > > > > > > I am new to SpamAssassin, I have been testing it for about 3 to 4 > > > weeks now and I have categorized about > > > 4000 ham and about 1000 spam, and I still get the same

Re: Spam on Exchange

On Friday, September 8, 2006 at 3:40:06 PM, Bowie confabulated: > Floyd wrote: >> Hi, >> >> I am new to SpamAssassin, I have been testing it for about 3 to 4 >> weeks now and I have categorized about >> 4000 ham and about 1000 spam, and I still get the same spam after a >> few days. >> What I am

Re: Which DB is actually used?

On Fri, 8 Sep 2006, Bo Mellberg wrote: It seems like the exim-users database is being touched regularly, so I'm guessing that it has been set up by apt-get in some "auto-learning" state. Yes, you might want to check whatever's running SpamAssassin and see what user it's running as and also chec

RE: Spam on Exchange

Floyd wrote: > Hi, > > I am new to SpamAssassin, I have been testing it for about 3 to 4 > weeks now and I have categorized about > 4000 ham and about 1000 spam, and I still get the same spam after a > few days. > What I am trying to figure out is about sa-learn. > When I look at the logs and it c

Spam on Exchange

Hi, I am new to SpamAssassin, I have been testing it for about 3 to 4 weeks now and I have categorized about 4000 ham and about 1000 spam, and I still get the same spam after a few days. What I am trying to figure out is about sa-learn. When I look at the logs and it classifies an incoming mail

RE: site-wide config?

Russell Jones wrote: > Sorry if this is covered somewhere in the documentation, and if so > can someone be nice enough to point it to me :) I can't seem to > locate it. > > I would like to set spamassassin to use a site-wide configuration, so > that when I tell it to sa-learn, it will apply what

RE: Some Spam getting through

David Reta wrote: > I am having an issue with spam not getting caught by the filter. > > The spam will score low initially but when I run it on the > quarantined message a minute later the message will score well over > the threshold. > > I am using spamassassin 3.1.4 and it is being called thr

Re: Which DB is actually used?

jdow skrev: From: "Bo Mellberg" <[EMAIL PROTECTED]> I have SA 3.1.4 configured and running on Debian Sarge using apt-get. I'm finding it hard to know what directory is actually used for the bayes-database: max:~# ls /root/.spamassassin/ -al total 2344 drwx-- 2 root root4096 Sep 8

Re: Juste a little question

From: <[EMAIL PROTECTED]> Hi everyone, I have a little problem : As you can see below, this message is scoring : 25.1 pts, but instead i see 10,00 points. How to i set spamassassin to have stronger limit or the score ? Content analysis details: (10,00 points, 6,00 required) pts rule nam

Re: Which DB is actually used?

From: "Bo Mellberg" <[EMAIL PROTECTED]> I have SA 3.1.4 configured and running on Debian Sarge using apt-get. I'm finding it hard to know what directory is actually used for the bayes-database: max:~# ls /root/.spamassassin/ -al total 2344 drwx-- 2 root root4096 Sep 8 07:52 . drwxr

Juste a little question

Hi everyone, I have a little problem : As you can see below, this message is scoring : 25.1 pts, but instead i see 10,00 points. How to i set spamassassin to have stronger limit or the score ? Content analysis details: (10,00 points, 6,00 required) pts rule name description -

Re: Can't get sa-learn to work

AHA! That brings me to my other question on this mailing list "Which DB is actually used?". General rule for learning: learn as the user you use to filter mail. Corolary: don't learn as root, since SA never runs as root. You can generally set up SA two different ways: site-wide bayes, or ind

Re: Can't get sa-learn to work

Loren Wilton skrev: max:~# sa-learn --dump magic 0.000 0 3 0 non-token data: bayes db version 0.000 0 0 0 non-token data: nspam 0.000 0 0 0 non-token data: nham 0.000 0 0 0 non-token

Re: Can't get sa-learn to work

max:~# sa-learn --dump magic 0.000 0 3 0 non-token data: bayes db version 0.000 0 0 0 non-token data: nspam 0.000 0 0 0 non-token data: nham 0.000 0 0 0 non-token data: ntokens 0.000