Re: Another FuzzyOcr question

2006-09-22 Thread Loren Wilton
So, what's the secret in getting the right values? For example, do you generally modify the grey level first and try to see if the words come out. Then when you get close, make small variations in the dust size and spacewidth? This is pretty neat. Ususally -d 1 or 2 is fine. Playing with -

RE: Another FuzzyOcr question

2006-09-22 Thread Matt Rossiter
So, what's the secret in getting the right values? For example, do you generally modify the grey level first and try to see if the words come out. Then when you get close, make small variations in the dust size and spacewidth? This is pretty neat. Matt -Original Message- From: Jim

Re: Another FuzzyOcr question

2006-09-22 Thread Jim Knuth
Heute (23.09.2006/03:13 Uhr) schrieb Benny Pedersen, > On Sat, September 23, 2006 02:54, Jim Knuth wrote: >> Heute (23.09.2006/02:54 Uhr) schrieb Benny Pedersen, >>> On Sat, September 23, 2006 01:47, Matt Rossiter wrote: http://rossiters.com/images/Viagra-Photo.jpg (I promise it's safe)

Re: Any plugins that scan looking for phone numbers?

2006-09-22 Thread Loren Wilton
I have a need to isolate any mail that contains a UK phone number. I would expect there's a plugin that does something already? Not that I know of. There is the SARE EvilNumbers.cf rule list (which is rather out of date). But I don't know of a plugin that was ever done for this sort of thin

RE: Another FuzzyOcr question

2006-09-22 Thread Matt Rossiter
Whoah. That worked perfect. Thanks! Matt -Original Message- From: Benny Pedersen [mailto:[EMAIL PROTECTED] Sent: Friday, September 22, 2006 5:55 PM To: users@spamassassin.apache.org Subject: Re: Another FuzzyOcr question On Sat, September 23, 2006 01:47, Matt Rossiter wrote: > http:

Re: Another FuzzyOcr question

2006-09-22 Thread Benny Pedersen
On Sat, September 23, 2006 02:54, Jim Knuth wrote: > Heute (23.09.2006/02:54 Uhr) schrieb Benny Pedersen, >> On Sat, September 23, 2006 01:47, Matt Rossiter wrote: >>> http://rossiters.com/images/Viagra-Photo.jpg (I promise it's safe) >>> Any advice? >> gocr -d 2 -l 90 Viagra-Photo.jpg >> works he

Re: Another FuzzyOcr question

2006-09-22 Thread Jim Knuth
Heute (23.09.2006/02:54 Uhr) schrieb Benny Pedersen, > On Sat, September 23, 2006 01:47, Matt Rossiter wrote: >> http://rossiters.com/images/Viagra-Photo.jpg (I promise it's safe) >> Any advice? > gocr -d 2 -l 90 Viagra-Photo.jpg > works here not for me :/ gocr -d 2 -l 90 Viagra-Photo.jpg sh:

Any plugins that scan looking for phone numbers?

2006-09-22 Thread Robert Nicholson
I have a need to isolate any mail that contains a UK phone number. I would expect there's a plugin that does something already?

Re: Another FuzzyOcr question

2006-09-22 Thread Benny Pedersen
On Sat, September 23, 2006 01:47, Matt Rossiter wrote: > http://rossiters.com/images/Viagra-Photo.jpg (I promise it's safe) > Any advice? gocr -d 2 -l 90 Viagra-Photo.jpg works here -- "This message was sent using 100% recycled spam mails."

Re: FP: URI_NOVOWEL

2006-09-22 Thread Loren Wilton
Title: RE: FP: URI_NOVOWEL > > So the test catches legitimate URIs. an immediate improvement is > > > > uri URI_NOVOWEL  /https?\:\/\/[bcdfghjklmnpqrstvwxz]{7}/i > > > > because the goal is to catch URIs with random hostname > parts. Of course, > > they can still put that in the middle, ak

Another FuzzyOcr question

2006-09-22 Thread Matt Rossiter
My question is pretty simple. Everything is working pretty good so far. This plugin has been able to successfully read lots of spam images and filter them out. I've had this image slip through a few times --> http://rossiters.com/images/Viagra-Photo.jpg (I promise it's safe) but gocr can only rec

Re: sa-learn question

2006-09-22 Thread John D. Hardin
On Fri, 22 Sep 2006, Russell Jones wrote: > @daily sa-learn --spam > /home/eggycrew/imap/eggycrew.com/rjones/Maildir/.INBOX.spam > @daily sa-learn --ham /home/eggycrew/imap/eggycrew.com/rjones/Maildir/cur > @daily sa-learn --ham /home/eggycrew/imap/eggycrew.com/rjones/Maildir/new Put all your le

sa-learn question

2006-09-22 Thread Russell Jones
If I have multiple sa-learn processes going at the same time, can that corrupt the database and/or cause some other problem that I don't want to happen? Or is it safe to have the following in crontab for example:   @daily sa-learn --spam /home/eggycrew/imap/eggycrew.com/rjones/Maildir/.INBOX

Re: FuzzyOcrPlugin and SA 3.1.0

2006-09-22 Thread John Thompson
On 2006-09-22, ma <[EMAIL PROTECTED]> wrote: > I'm running SA 3.1.0. I'm being hit by a bunch of image spam, so I am = > trying to get FuzzyOcrPlugin working. I'm a bit scared to upgrade my SA = > install because it is working quite well and I don't want to break it. > > My issue is FuzzyOcrPlug

Re: Global configuration question

2006-09-22 Thread Matt Kettler
Russell Jones wrote: > Alrighty, now that I've had some time to look at it, I would like to > make sure I understand this correctly. > > In the man page for it, it says: bayes_path /path/filename > (default: ~/.spamassassin/bayes) > > So, if I change the ~/.spamassassin/bayes to, for example,

70_sare_stocks.cf

2006-09-22 Thread Doc Schneider
I just committed a fix to the one which had lint errors. #version: 01.00.36 -- -Doc SA/SARE -- Ninja 3:24pm up 20 days, 18:58, 19 users, load average: 1.02, 0.79, 0.74 SARE HQ http://www.rulesemporium.com/

Re: Sitewide SQL bayes?

2006-09-22 Thread Tim Rosmus
On Fri, 22 Sep 2006, Tim Rosmus wrote: |# I then did a 'sa-learn --dump magic' on the DB server and |# also on one of the incoming servers. Why the different |# numbers? (I use bayes_sql_override_username on all) |# Disregard, found the problem. A slight spelling error for the bayes_sql_over

RE: Global configuration question

2006-09-22 Thread Bowie Bailey
Yes. If you set bayes_path to an absolute path, it will be a global database. Bowie Russell Jones wrote: > Okay, but other than that it'll begin using a global database for > every email account it is protecting, correct? > > > - Original Message - > From: "Bowie Bailey" <[EMAIL PROTE

RE: FP: URI_NOVOWEL

2006-09-22 Thread Chris Santerre
Title: RE: FP: URI_NOVOWEL > -Original Message- > From: jdow [mailto:[EMAIL PROTECTED]] > Sent: Friday, September 22, 2006 7:41 AM > To: users@spamassassin.apache.org > Subject: Re: FP: URI_NOVOWEL > > > From: "mouss" <[EMAIL PROTECTED]> > > Chris Santerre wrote: > >>   > >>>

Re: Global configuration question

2006-09-22 Thread Russell Jones
Okay, but other than that it'll begin using a global database for every email account it is protecting, correct? - Original Message - From: "Bowie Bailey" <[EMAIL PROTECTED]> To: Sent: Friday, September 22, 2006 2:10 PM Subject: RE: Global configuration question Russell Jones wrot

RE: Global configuration question

2006-09-22 Thread Bowie Bailey
Russell Jones wrote: > Alrighty, now that I've had some time to look at it, I would like to > make sure I understand this correctly. > > In the man page for it, it says: bayes_path /path/filename > (default: ~/.spamassassin/bayes) > > So, if I change the ~/.spamassassin/bayes to, for example

Re: Global configuration question

2006-09-22 Thread Russell Jones
Alrighty, now that I've had some time to look at it, I would like to make sure I understand this correctly. In the man page for it, it says: bayes_path /path/filename (default: ~/.spamassassin/bayes) So, if I change the ~/.spamassassin/bayes to, for example, /var/spamassassin/bayes, the

Sitewide SQL bayes?

2006-09-22 Thread Tim Rosmus
SA-3.1.5 I recently moved from individual incoming machine Bayes DBs to a central MySql Bayes that all incoming servers connect to. I noticed that running 'sa-learn --force-expire' on the DB server worked the first time but has done nothing in the last few weeks. A "--dump magic" shows the sa

Re: SA increasing load average a lot and spams getting through

2006-09-22 Thread John Goubeaux
you might also want to check: http://spamassassin.apache.org/full/3.1.x/dist/doc/Mail_SpamAssassin_Conf.html#miscellaneous_options eg lock_method I had the same bayes files errors and set this to lock_method flock and think i have alleviated the problems. -john sokka wrote: 1. Increase

Re: SA increasing load average a lot and spams getting through

2006-09-22 Thread sokka
1. Increase your RAM 2. Increase your child spam process.   regards  On 9/21/06, Payal Rathod <[EMAIL PROTECTED]> wrote: Hi,A friend of mine is maintaining a mail server for a school and I amhelpig her out. There are just 150-200 accounts and the machine is having 512 Mb RAM and 1Gb swap running Ce

Re: FuzzyOcrPlugin and SA 3.1.0

2006-09-22 Thread Rob
On Fri, Sep 22, 2006 at 12:22:08PM -0400, ma wrote: > >Hi Folks, >I'm running SA 3.1.0. I'm being hit by a bunch of image spam, so I am >trying to get FuzzyOcrPlugin working. I'm a bit scared to upgrade my >SA install because it is working quite well and I don't want to break >

FuzzyOcrPlugin and SA 3.1.0

2006-09-22 Thread ma
Title: FuzzyOcrPlugin and SA 3.1.0 Hi Folks, I'm running SA 3.1.0.  I'm being hit by a bunch of image spam, so I am trying to get FuzzyOcrPlugin working.  I'm a bit scared to upgrade my SA install because it is working quite well and I don't want to break it. My issue is FuzzyOcrPlugin is

Re: Trying to understand SpamCop plugin

2006-09-22 Thread Theo Van Dinter
On Fri, Sep 22, 2006 at 05:04:00PM +0700, Olivier Nicole wrote: > I also added a debug line in each funtion of the plugin that report > the name of the function; as you can see, only set_config function is > being called. spamcop_report is never called while the sample message > scores at 15. Of c

Re: Problem with user_white_list

2006-09-22 Thread Theo Van Dinter
On Fri, Sep 22, 2006 at 04:01:20AM -0400, Matt Kettler wrote: > >> The moral here is NEVER use whitelist_from. > > ...does this indicate that whitelist_from should be obsoleted? > should, yes.. will be, probably not. Well, there is a need and are uses for whitelist_from, specifically when the oth

Re: Problem with user_white_list

2006-09-22 Thread jdow
From: "Salatiel Filho" <[EMAIL PROTECTED]> On 9/21/06, John D. Hardin <[EMAIL PROTECTED]> wrote: On Thu, 21 Sep 2006, Salatiel Filho wrote: > What would be the main difference between > whitelist_from_spf and whitelist_from ? whitelist_from_spf only trusts the sender address if the message pa

Re: FP: URI_NOVOWEL

2006-09-22 Thread jdow
From: "mouss" <[EMAIL PROTECTED]> Chris Santerre wrote: -Original Message- From: mouss [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 20, 2006 6:12 PM To: SpamAssassin Subject: Re: FP: URI_NOVOWEL Theo Van Dinter wrote: On Tue, Sep 19, 2006 at 10:58:46PM +0200, mouss wro

Re: Anyon eelse hit errors with the SARE stock rule update?

2006-09-22 Thread Nigel Frankcom
rting SpamAssassin. >>> Rollback command is: mv -f /etc/mail/spamassassin/70_sare_stocks.cf >>> /etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.2; mv -f >>> /etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.20060922-1042 >>> /etc/mail/spamassass

Re: Anyon eelse hit errors with the SARE stock rule update?

2006-09-22 Thread Matthias Haegele
/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.20060922-1042 /etc/mail/spamassassin/70_sare_stocks.cf; Lint output: [6533] warn: config: invalid regexp for rule SARE_MLB_Stock6: /(?:(E\.GL\.y)|(Eg \|_ y)|(e g \| y)|(egly)|.P.\s+.P.\s+.?\s+.T.\s+.L.|.P.\s+.P.\s+.T.\s+.L.|A B S Y|A D\s+Y E

Trying to understand SpamCop plugin

2006-09-22 Thread Olivier Nicole
Hi, I am running SA and I cannot get the SpamCop plugin to do anything. SA version is: SpamAssassin version 3.1.5 running on Perl version 5.8.8 When I run SA with and look for lines containing SpamCop, I get: $ spamassassin -t -D < FuzzyOcr-2.3b/samples/png.eml 2>&1 |grep -y spamcop [1324] db

Anyon eelse hit errors with the SARE stock rule update?

2006-09-22 Thread Nigel Frankcom
-f >/etc/mail/spamassassin/RulesDuJour/70_sare_stocks.cf.20060922-1042 >/etc/mail/spamassassin/70_sare_stocks.cf; > >Lint output: [6533] warn: config: invalid regexp for rule SARE_MLB_Stock6: >/(?:(E\.GL\.y)|(Eg \|_ y)|(e g \| >y)|(egly)|.P.\s+.P.\s+.?\s+.T.\s+.L.|.P.\s+.P.\s+.T.\s+.L.|

Re: Problem with user_white_list

2006-09-22 Thread Matt Kettler
John D. Hardin wrote: > On Thu, 21 Sep 2006, Matt Kettler wrote: > > >> The moral here is NEVER use whitelist_from. >> > > ...does this indicate that whitelist_from should be obsoleted? should, yes.. will be, probably not.

Re: Problem with user_white_list

2006-09-22 Thread Matt Kettler
Salatiel Filho wrote: > What would be the main difference between > whitelist_from_spf and whitelist_from ? whitelist_from - whitelist anything matching the specified From: header. whitelist_from_rcvd - whitelist anything matching the specified From AND reverse DNS hostname from a Received: heade

Re: 70_sare_spoof.cf False Pos - Bank of America

2006-09-22 Thread Loren Wilton
"Legit" in this particular instance is open to interpretation. :-( The mail isn't from BofA. The mail is from CheckFree Inc. Which is a legit banking company, but it isn't BofA. So they are lying in the From address about who they are. In that sense, the mail is a spoof. On the other hand, i

Re: Problem with user_white_list

2006-09-22 Thread Loren Wilton
> Well , i have added a spf record for mydomain.edu.br and changed my user_prefs> from whitelist_from *@mydomain.edu.br to  whitelist_from_rcvd *@mydomain.edu.br> but i think it's not working. I sent a mail for [EMAIL PROTECTED]  > from [EMAIL PROTECTED]> Here is the mail status:> X-Spam-St

Re: SA increasing load average a lot and spams getting through

2006-09-22 Thread Loren Wilton
Will reducing it to -m 5 make the mail delivery slow? If you were thrashing and reducing the number of children gets you out of thrashing it will probably speed things up, not slow them down. I don't know what your mail volume is. If you get a lot of mail you may need more children, or if m