Re: SA -D --lint Result.

[7918] warn: Subroutine new redefined at /etc/mail/spamassassin/FuzzyOcr.pm line 116. [7918] warn: Subroutine parse_config redefined at /etc/mail/spamassassin/FuzzyOcr.pm line 126. [7918] warn: Subroutine dummy_check redefined at /etc/mail/spamassassin/FuzzyOcr.pm line 223. [7918] warn: Subroutine

SA -D --lint Result.

Dear All Following is result of "spamassassin -D --lint" command at my mail server. You are requested to review and suggest me any changes. My problem is that most of junk emails having .gif as attachment NOT being cought. == [EMAIL PRO

Re: change spamhaus.org's score

On Monday, November 13, 2006, 8:29:16 PM, Matt Kettler wrote: > Payal Rathod wrote: >> On Mon, Nov 13, 2006 at 08:09:39PM -0500, Michael Scheidell wrote: >> I want to give a higher score to those mails whose senders IPs are listed which are listed in spamhaus.org, how do I do that? I

Re: פריצת דרך מ אתגרת

Benny Pedersen wrote: > Subject: Re: פריצת דרך מאתגרת Of course I can see the glyphs but I can't read the meaning. Care to clue us in? I don't see the original message to which you were replying and neither does it seem to be in the mailing list archive. > Philip Prindeville wrote: > > At the r

Re: change spamhaus.org's score

Payal Rathod wrote: > On Mon, Nov 13, 2006 at 08:09:39PM -0500, Michael Scheidell wrote: > >>> I want to give a higher score to those mails whose senders IPs are >>> listed which are listed in spamhaus.org, how do I do that? I use SA >>> in its default configuration. >>> >> As with any

Re: Microsoft blacklisted?

Benny Pedersen wrote: > On Tue, November 14, 2006 03:56, Philip Prindeville wrote: > > >> Nov 13 14:59:29 mail mimedefang[5737]: kADLxLLR021067: Bouncing because >> filter >> instructed us to >> > > i hope it will reject not bounce > > >> Nov 13 14:59:29 mail sendmail[21067]: kADLxLLR02

Re: Microsoft blacklisted?

On Tue, November 14, 2006 03:56, Philip Prindeville wrote: > Nov 13 14:59:29 mail mimedefang[5737]: kADLxLLR021067: Bouncing because filter > instructed us to i hope it will reject not bounce > Nov 13 14:59:29 mail sendmail[21067]: kADLxLLR021067: Milter: data, reject=554 > 5.7.1 Message reject

Re: what are default rule priorities?

Theo Van Dinter wrote: > On Mon, Nov 13, 2006 at 09:57:15PM -0500, Matt Kettler wrote: > >> Priorities don't exist in released versions SA, only the 3.2 development >> branch. >> > > Priorities have existed for a while. 3.2 will have short circuit > capabilities, which is recommended to be

Re: what are default rule priorities?

snowcrash+spamassassin wrote: >> > but, what ARE the other rules' priorities? >> > >> > is there documentation of that? nothing on the wiki that i've found. >> > >> Priorities don't exist in released versions SA, only the 3.2 development >> branch. > > as i understand it, fuzzyocr -- which runs wit

Re: what are default rule priorities?

Priorities have existed for a while. 3.2 will have short circuit capabilities, which is recommended to be combined with changing priorities. ok. thanks.

Re: ????? ??? ??????

On Tue, November 14, 2006 02:44, Philip Prindeville wrote: > At the risk of appearing to be (or revealing myself to be ;-) an > anti-Windows bigot (actually, I'm more of a pro-Open Standards > cheerleader), we mark all of the "charset=Windows-125[0-8]" > messages by 4.85... got this in the mailhe

Re: what are default rule priorities?

On Mon, Nov 13, 2006 at 09:57:15PM -0500, Matt Kettler wrote: > Priorities don't exist in released versions SA, only the 3.2 development > branch. Priorities have existed for a while. 3.2 will have short circuit capabilities, which is recommended to be combined with changing priorities. -- Rand

Re: Microsoft blacklisted?

Philip Prindeville wrote: > Matt Kettler wrote: > > >> Philip Prindeville wrote: >> >> >> >>> I recently saw an email get bounced that was legitimately coming >>> >> >from Microsoft: >> >>> Nov 13 14:59:26 mail mimedefang.pl[19053]: helo: maila.microsoft.com >>> (131.107.115.

Re: Microsoft blacklisted?

Matt Kettler wrote: >Philip Prindeville wrote: > > >>I recently saw an email get bounced that was legitimately coming >>from Microsoft: >> >>Nov 13 14:59:26 mail mimedefang.pl[19053]: helo: maila.microsoft.com >>(131.107.115.212) said "helo smtp.microsoft.com" >>Nov 13 14:59:26 mail sendmail[21

Re: change spamhaus.org's score

On Mon, Nov 13, 2006 at 08:09:39PM -0500, Michael Scheidell wrote: > > I want to give a higher score to those mails whose senders IPs are > > listed which are listed in spamhaus.org, how do I do that? I use SA > > in its default configuration. > > As with any SA rule, just edit local.cf, put in

Re: what are default rule priorities?

> but, what ARE the other rules' priorities? > > is there documentation of that? nothing on the wiki that i've found. > Priorities don't exist in released versions SA, only the 3.2 development branch. as i understand it, fuzzyocr -- which runs with v3.1.x ("SpamAssassin 3.1.4 or higher")-- speci

Re: Autolearn threshold

Dennis Clark wrote: > Some messages are autolearn=spam at 24 points, others are autolearn=no > at 32 points. What is the criteria that triggers autolearn=spam if > not points? First, be aware the the score used in learning decisions is not the same score you see for the message. The "learning sco

Re: Microsoft blacklisted?

Philip Prindeville wrote: > I recently saw an email get bounced that was legitimately coming > from Microsoft: > > Nov 13 14:59:26 mail mimedefang.pl[19053]: helo: maila.microsoft.com > (131.107.115.212) said "helo smtp.microsoft.com" > Nov 13 14:59:26 mail sendmail[21067]: kADLxLLR021067: from=<[

Re: what are default rule priorities?

snowcrash+spamassassin wrote: > i understand that the fuzzyocr plugin can be set to have a high (900?) > priority, so as to run last. > > i assume this priority is a threshhold number relative to other rules' > priorities. > > but, what ARE the other rules' priorities? > > is there documentation of

Microsoft blacklisted?

I recently saw an email get bounced that was legitimately coming from Microsoft: Nov 13 14:59:26 mail mimedefang.pl[19053]: helo: maila.microsoft.com (131.107.115.212) said "helo smtp.microsoft.com" Nov 13 14:59:26 mail sendmail[21067]: kADLxLLR021067: from=<[EMAIL PROTECTED]>, size=1207, class=

Re: new spam

san wrote: > Hello sir, > > I need your help to avoid this type of spam. i tried SARE rules but not able > find any score. Can anyone write a small rule. It will be great help for me > and iam still learning spamassassin and not able to catch this one. > http://www.nabble.com/file/4147/States.gif

Re: new spam

Hi, You should use FuzzyOcr and GOCR, ImageINFO to work with Spamassassin. Best Regards, Bruce Cheng 2006/11/14, san <[EMAIL PROTECTED]>: Hello sir, I need your help to avoid this type of spam. i tried SARE rules but not able find any score. Can anyone write a small rule. It will be great

new spam

Hello sir, I need your help to avoid this type of spam. i tried SARE rules but not able find any score. Can anyone write a small rule. It will be great help for me and iam still learning spamassassin and not able to catch this one. http://www.nabble.com/file/4147/States.gif http://www.nabble.com

RE: ????? ??? ??????

> At the risk of appearing to be (or revealing myself to be ;-) an > anti-Windows bigot (actually, I'm more of a pro-Open Standards > cheerleader), we mark all of the "charset=Windows-125[0-8]" > messages by 4.85... > > Why? Because none of the Windows charsets do anything that > the ISO-8859-x c

(fixed) Re: fuzzyocr 342 fires error & warn, but scores anyway ... does it work?

GIF-LIB error: Failed to Read from given file. [13690] warn: MLDBM error: Second level tie failed, "No such file after some monkeying about, it seems that the GIF-LIB error is typical/common for non-gif &/or corrupt images. these then, apparently, get "Fixed" and scanned. the M

RE: ????? ??? ??????

> At the risk of appearing to be (or revealing myself to be ;-) an > anti-Windows bigot (actually, I'm more of a pro-Open Standards > cheerleader), we mark all of the "charset=Windows-125[0-8]" > messages by 4.85... > > Why? Because none of the Windows charsets do anything that > the ISO-8859-x c

Re: user_prefs - Do I need to bounce spamd after updating this?

On Mon, Nov 13, 2006 at 08:42:56PM -0500, Steve Lake wrote: > I don't know why I never thought to ask this before, but do I need > to restart spamd after any changes to this, or will the changes be seen > dynamically? user_prefs is read in at scan time. -- Randomly Selected Tagline: "W

Re: פריצת דרך מאתגרת

At the risk of appearing to be (or revealing myself to be ;-) an anti-Windows bigot (actually, I'm more of a pro-Open Standards cheerleader), we mark all of the "charset=Windows-125[0-8]" messages by 4.85... Why? Because none of the Windows charsets do anything that the ISO-8859-x charsets don't

Re: razor and dcc : high cpu load

On Fri, Nov 10, 2006 at 04:12:44PM -0200, Rejaine Monteiro wrote: > > Ok, validrcptto seems to be nice for me... > I just can't forget to insert all -default aliases (qmail-default) and > use a validrcptto version with this support (to using with qmail-rocks) > > Thanks for all tips > In ca

user_prefs - Do I need to bounce spamd after updating this?

I don't know why I never thought to ask this before, but do I need to restart spamd after any changes to this, or will the changes be seen dynamically? Steven Lake Owner/Technical Writer Raiden's Realm www.raiden.net A friendly web community

Re: Autolearn threshold

On Mon, November 13, 2006 18:01, Dennis Clark wrote: > Some messages are autolearn=spam at 24 points, others are autolearn=no at 32 > points. What is the criteria that triggers autolearn=spam if not points? tflag noautolearn grep the rules that scores for it and yes scores is olso part of when

RE: change spamhaus.org's score

> -Original Message- > From: Payal Rathod [mailto:[EMAIL PROTECTED] > Sent: Monday, November 13, 2006 12:06 PM > To: SpamAssassin > Subject: change spamhaus.org's score > > > Hi, > I want to give a higher score to those mails whose senders IPs are > listed which are listed in spamhaus.

Re: Install of 1.4.8 with Courier IMAP

On Mon, November 13, 2006 22:21, Scott Lockwood wrote: > I am almost certain this is not a squirrelmail issue, but it's driving me up > the wall, and I'm hoping someone in here can point me in the right > direction. [snip] what happend when you send a mail to the users mailbox throught sendmail

Re: RelayChecker 0.3 (more overhead?)

Dylan, > Even after setting the reduced_dns option to 1 the load on the server > stays high. I re-enabled AWL and my load stays low as long as I don't > enable the RelayChecker. I get the following in the log::: > > Nov 13 15:51:23 p1-lk-mxfilter.power1.com /usr/sbin/amavisd[30169]: > (30169-01) e

Re: Changing WHITELIST_FROM scoring?

Theo Van Dinter apache.org> writes: > > On Mon, Nov 13, 2006 at 09:28:38PM +, Henry Kwan wrote: > > Is there a way to change the scoring for WHITELIST_FROM? > > If there were such a rule, yes. whitelist_from and whitelist_from_rcvd share > USER_IN_WHITELIST. > Ah, I forgot to look at ht

Re: Changing WHITELIST_FROM scoring?

On Mon, Nov 13, 2006 at 09:28:38PM +, Henry Kwan wrote: > Is there a way to change the scoring for WHITELIST_FROM? If there were such a rule, yes. whitelist_from and whitelist_from_rcvd share USER_IN_WHITELIST. -- Randomly Selected Tagline: "A bride must be carried over this, but a vampire

RE: razor and dcc : high cpu load

I've seen a big CPU load with pyzor, but not with razor or DCC (using dccifd). I'd say disable these checks one at a time to see which one is causing the highest loads on your machine, and if your machine can't quite handle the current load, disable the ones with the highest loads, at least tempor

Changing WHITELIST_FROM scoring?

Hi, Is there a way to change the scoring for WHITELIST_FROM? I tried to stick this in local.cf: score WHITELIST_FROM -10.0 But got this error when I linted: [12804] warn: config: warning: score set for non-existent rule WHITELIST_FROM Thanks.

RE: Install of 1.4.8 with Courier IMAP

Sorry, wrong list! Please disregard - unless you know the answer! :-D -Original Message- From: Scott Lockwood [mailto:[EMAIL PROTECTED] Sent: Monday, November 13, 2006 3:22 PM To: users@spamassassin.apache.org Subject: Install of 1.4.8 with Courier IMAP I am almost certain this is not a

Install of 1.4.8 with Courier IMAP

I am almost certain this is not a squirrelmail issue, but it's driving me up the wall, and I'm hoping someone in here can point me in the right direction. I have just setup a box with Ubuntu 6.06.1 LTS, courier-imap sendmail and squirrelmail. For some very odd reason, it won't create the default s

RE: RelayChecker 0.3 (more overhead?)

> -Original Message- > From: John Rudd [mailto:[EMAIL PROTECTED] > Sent: Monday, November 13, 2006 2:21 PM > To: John Rudd > Cc: Dylan Bouterse; users@spamassassin.apache.org > Subject: Re: RelayChecker 0.3 (more overhead?) > > John Rudd wrote: > > Dylan Bouterse wrote: > >> > >>> -Ori

Re: Conditional Whitelisting?

Henry Kwan designmedia.com> writes: > I can't seem to get this rule to hit. > > I have this in my local.cf > > whitelist_from_spf * designmedia.com > > But I never see the rule in X-Spam-Status. SPF checking seems > to be working since SPF_HELO_PASS & SPF_PASS are there. > It turns out th

Re: question re. whitelist_from_rcvd

Miles Fidelman wrote: whitelist_from_rcvd [EMAIL PROTECTED] hmmm...not sure how that last bit made it into my email, I thought I'd just typed whitelist_from_rcvd [EMAIL PROTECTED] must have to do with typing it at 2:46 in the am, sigh... Nah, it's probably jus

RE: rule secrecy *again* (Re: Well, that didn't take very bloody long)

Title: RE: rule secrecy *again* (Re: Well, that didn't take very bloody long) > > ho hum... here we go again. :( :)  >Secrecy is *NOT* an essential element of rule development.  It seems >logical to think it is, but evidence repeatedly demonstrates otherwise. You know I differ in that

Re: Help with dumb mistake

Dimitri Yioulos wrote: I'm currently running spamassassin-3.0.4-1 on a CentOS 3.8 server, along with sendmail-8.12.11-4.RHEL3.6. I don't want to upgrade either just yet. But, I do want to keep SA default rules up to date. Alas, sa-update doesn't work; it simply doesn't do anything that I ca

RE: sa-update Windows fails

I am running SpamAssassin 3.1.7 on Windows 2003 Server. My SpamAssassin installation works fine, with DNSBL and URIBL tests along with other DNS tests working fine. However I have attempted to use sa-update which I gather should function fine on Windows now. Unfortunately I couldn't get a pos

RE: Help with rawbody rule

That is WAY too big of a sting to look for. Rawbody doesn't handle line breaks either. Maybe a bunch of meta rules would be better?   Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com -Original Message-From: Tim Macrina [mailto:[EMAIL PROTECTE

Re: RelayChecker 0.3 (more overhead?) now AWL issue?

Dylan Bouterse wrote: -Original Message- From: John Rudd [mailto:[EMAIL PROTECTED] Sent: Monday, November 13, 2006 1:54 PM To: Dylan Bouterse; users@spamassassin.apache.org Subject: Re: RelayChecker 0.3 (more overhead?) Dylan Bouterse wrote: -Original Message- From: John Rudd [m

Re: RelayChecker 0.3 (more overhead?)

John Rudd wrote: Dylan Bouterse wrote: -Original Message- From: John Rudd [mailto:[EMAIL PROTECTED] Sent: Sunday, November 12, 2006 8:26 PM To: SpamAssassin Users Subject: RelayChecker 0.3 New version of RelayChecker. http://people.ucsc.edu/~jrudd/spamassassin/RelayChecker.tar Chan

RE: RelayChecker 0.3 (more overhead?) now AWL issue?

> -Original Message- > From: John Rudd [mailto:[EMAIL PROTECTED] > Sent: Monday, November 13, 2006 1:54 PM > To: Dylan Bouterse; users@spamassassin.apache.org > Subject: Re: RelayChecker 0.3 (more overhead?) > > Dylan Bouterse wrote: > > > >> -Original Message- > >> From: John Rudd

Help with rawbody rule

I am having a hard time writing a rawbody rule that looks for the following html string. Could someone please help! A text file of the string can be found at http://www.timmacrina.com/spamassassin/case1.txt or you can view the string that I am looking for below Thanks,   style="PADDING-RIGHT:

Re: RelayChecker 0.3 (more overhead?)

Dylan Bouterse wrote: -Original Message- From: John Rudd [mailto:[EMAIL PROTECTED] Sent: Sunday, November 12, 2006 8:26 PM To: SpamAssassin Users Subject: RelayChecker 0.3 New version of RelayChecker. http://people.ucsc.edu/~jrudd/spamassassin/RelayChecker.tar Changes: - It's now

RE: sa-update Windows fails

> I am running SpamAssassin 3.1.7 on Windows 2003 Server. > > My SpamAssassin installation works fine, with DNSBL and URIBL tests > along with other DNS tests working fine. However I have > attempted to use > sa-update which I gather should function fine on Windows now. > Unfortunately I couldn't g

Re: what are default rule priorities?

check perldoc Mail::SpamAssassin::Conf -- ... The default test priority is 0 (zero). ok. i suppose this means that the searchable wiki does NOT include the docs. i thought it did. thanks.

fuzzyocr 342 fires error & warn, but scores anyway ... does it work?

i've installed fuzzyocr 3.4.2. using a sample-file from the trac site, spamassassin -t -x < ocr-gif.eml i get an error & a warning: GIF-LIB error: Failed to Read from given file. [13690] warn: MLDBM error: Second level tie failed, "No such file or directory" at /etc/mai

Re: what are default rule priorities?

snowcrash+spamassassin writes: > i understand that the fuzzyocr plugin can be set to have a high (900?) > priority, so as to run last. > > i assume this priority is a threshhold number relative to other rules' > priorities. > > but, what ARE the other rules' priorities? > > is there documentati

Re: Can you use a matched element in one rule against another match in a second?

On Mon, Nov 13, 2006 at 01:46:48PM -0500, Mark Hennessy wrote: > I found a thread from almost 3 years ago in the archive with the subject "Can > you use a matched element in one rule against another match in a second ". I No. > have been seeing lots of spam where the spammer puts the same name i

Can you use a matched element in one rule against another match in a second?

I found a thread from almost 3 years ago in the archive with the subject "Can you use a matched element in one rule against another match in a second ". I was wondering if as of 3.1.7 it was possible to take the string results of one check and compare that against the string results of another che

what are default rule priorities?

i understand that the fuzzyocr plugin can be set to have a high (900?) priority, so as to run last. i assume this priority is a threshhold number relative to other rules' priorities. but, what ARE the other rules' priorities? is there documentation of that? nothing on the wiki that i've found.

RE: RelayChecker 0.3

> -Original Message- > From: John Rudd [mailto:[EMAIL PROTECTED] > Sent: Sunday, November 12, 2006 8:26 PM > To: SpamAssassin Users > Subject: RelayChecker 0.3 > > > New version of RelayChecker. > > http://people.ucsc.edu/~jrudd/spamassassin/RelayChecker.tar > > Changes: > > - It's no

Re: First time sa-update gotcha questions

On Mon, 13 Nov 2006 12:07:44 -0500 Bowie Bailey <[EMAIL PROTECTED]> wrote: > James Lay wrote: > > On Mon, 13 Nov 2006 09:54:11 -0700 > > James Lay <[EMAIL PROTECTED]> wrote: > > > > > On Mon, 13 Nov 2006 11:07:32 -0500 > > > Bowie Bailey <[EMAIL PROTECTED]> wrote: > > > > > > > James Lay wrote:

sa-update Windows fails

I am running SpamAssassin 3.1.7 on Windows 2003 Server. My SpamAssassin installation works fine, with DNSBL and URIBL tests along with other DNS tests working fine. However I have attempted to use sa-update which I gather should function fine on Windows now. Unfortunately I couldn't get a posi

Re: R: BIG increase in spam today

Federico Giannici wrote: What about combining BlackListing and GreyListing? I'm experimenting ab it with that right now. I've got my greylisting code to use a configurable number of checks before it decides if the greylist should be in use for an incoming connection. The idea is to avoid del

Re: AWL and Windows

Matt Kettler wrote: >> I'm running SA 3.1.7 on Windows XP and it is working >> pretty well. However I have a question about AWL. >> Every now and then I can see a spam header >> where AWL gives some negative score. > > That alone should not be worrisome. A negative score does not > imply the AWL

Re: do imageinfo and fuzzyocr plugins' results overlap?

We Use MailScanner which has concepts of "low-" and "high-" scoring spam. I set focr_autodisable_score to just above my "high spam score" score. If it's already scored high enough for it to not reach the user's mailbox, there's no need for FuzzyOcr to do anything. clear. thanks!

RE: First time sa-update gotcha questions

James Lay wrote: > On Mon, 13 Nov 2006 09:54:11 -0700 > James Lay <[EMAIL PROTECTED]> wrote: > > > On Mon, 13 Nov 2006 11:07:32 -0500 > > Bowie Bailey <[EMAIL PROTECTED]> wrote: > > > > > James Lay wrote: > > > > Hello All! > > > > > > > > SoI'm thinking about trying sa-update. My rules are

RE: Autolearn threshold

It's explained here:   http://wiki.apache.org/spamassassin/AutolearningNotWorking   "Finally, SpamAssassin requires at least 3 points from the header and 3 points from the body, to auto-learn as spam. If either section contributes fewer points, the message will not be auto-learned."   Cheers

RE: do imageinfo and fuzzyocr plugins' results overlap?

That depends on the environment in which you're running. We Use MailScanner which has concepts of "low-" and "high-" scoring spam. I set focr_autodisable_score to just above my "high spam score" score. If it's already scored high enough for it to not reach the user's mailbox, there's no need for

Autolearn threshold

Some messages are autolearn=spam at 24 points, others are autolearn=no at 32 points.  What is the criteria that triggers autolearn=spam if not points?    ** Dennis Clark* Information Technology Manager* Financial Aid Director

Re: First time sa-update gotcha questions

On Mon, 13 Nov 2006 09:54:11 -0700 James Lay <[EMAIL PROTECTED]> wrote: > On Mon, 13 Nov 2006 11:07:32 -0500 > Bowie Bailey <[EMAIL PROTECTED]> wrote: > > > James Lay wrote: > > > Hello All! > > > > > > SoI'm thinking about trying sa-update. My rules are > > > in /etc/mail/spamassassin. Ar

change spamhaus.org's score

Hi, I want to give a higher score to those mails whose senders IPs are listed which are listed in spamhaus.org, how do I do that? I use SA in its default configuration. With warm regards, -Payal

Re: First time sa-update gotcha questions

On Mon, 13 Nov 2006 11:07:32 -0500 Bowie Bailey <[EMAIL PROTECTED]> wrote: > James Lay wrote: > > Hello All! > > > > SoI'm thinking about trying sa-update. My rules are > > in /etc/mail/spamassassin. Are there any gotchas or things I need > > to be wary of before I plunge ahead? Just curio

Re: do imageinfo and fuzzyocr plugins' results overlap?

I use both here. In FuzzyOcr.cf, set focr_autodisable_score to the threshold you require. That way it only scans images if the SA score so far is under the specified threshold. It's a lot "cheaper" to bump up the score using ImageInfo than to do a couple of OCR scans. ok, that does make sense

RE: do imageinfo and fuzzyocr plugins' results overlap?

I use both here. In FuzzyOcr.cf, set focr_autodisable_score to the threshold you require. That way it only scans images if the SA score so far is under the specified threshold. It's a lot "cheaper" to bump up the score using ImageInfo than to do a couple of OCR scans. Cheers, Phil -- Phil Rand

do imageinfo and fuzzyocr plugins' results overlap?

i've been using the ImageInfo plugin. i've just installed the FuzzyOcr v3.4.2 plugin. i've found references to hit rates for both -- with FuzzyOcr hitting, generally, at "higher to much higher" rates. but, i can't tell if those are REDUNDANT hits. do i need both plugins?

RE: rulesemporium

jp wrote: > Does anyone know how to get the replacements for the 88_FVGT* rules? > I was trying to update them and the ones at www.rulesemporium.com > refer to a new numbering system that starts with 00_FVGT. Those files > don't exist. Rulesemporium is the master site for the the files > according

rulesemporium

Does anyone know how to get the replacements for the 88_FVGT* rules? I was trying to update them and the ones at www.rulesemporium.com refer to a new numbering system that starts with 00_FVGT. Those files don't exist. Rulesemporium is the master site for the the files according to the comments

RE: First time sa-update gotcha questions

James Lay wrote: > Hello All! > > SoI'm thinking about trying sa-update. My rules are > in /etc/mail/spamassassin. Are there any gotchas or things I need to > be wary of before I plunge ahead? Just curious as I see a lot of > traffic on this topic in here. Thanks. There was a problem with

Re: SA filter load: massive increase

Garry Glendown writes: > Justin Mason wrote: > > for what it's worth, I would suggest an iterative search -- remove all > > extra rulesets, and re-add them gradually until you spot one or two > > that are causing the load issues. > > I'll try, but I still can't see that the rulesets are actually

Re: bayes_seen on MySQL, growing and growing

Paolo Cravero wrote: Hi, while doing some checkup on production servers, I noticed that the bayes_seen table on MySQL is rather big: row: 15'814'021 (15.8Mr) size: 1'853'882'368 bytes ( 1.8GB) I've understood SA doesn't clean-up that table, so it has to be done manually. Can

bayes_seen on MySQL, growing and growing

Hi, while doing some checkup on production servers, I noticed that the bayes_seen table on MySQL is rather big: row: 15'814'021 (15.8Mr) size: 1'853'882'368 bytes ( 1.8GB) I've understood SA doesn't clean-up that table, so it has to be done manually. Can I simply do a "DELETE

Re: Flooded by pointless spam

Ramprasad wrote: > I am no getting what the spammer intends to say here > http://ecm.netcore.co.in/tmp/spam1.txt > > > There is no meaningful message , no sales pitch , no stock > recommendation nothing at all > > Any ideas ? > > > Looks like it came from a spam tool that auto-generates baye

Re: Confirmation about sa-learn

Nigel Frankcom wrote: > On Mon, 13 Nov 2006 10:49:11 +0100, Cedric BUSCHINI > <[EMAIL PROTECTED]> wrote: > > >> Hello List, >> >> I d just like to have a confirmation about how to use sa-learn. >> >> 1 - create a directory containing spams (mails tagged as spam and mails not >> tagged as spam

Re: AWL and Windows

Jyri Korhonen wrote: > I'm running SA 3.1.7 on Windows XP and it is working > pretty well. However I have a question about AWL. > Every now and then I can see a spam header > where AWL gives some negative score. That alone should not be worrisome. A negative score does not imply the AWL thinks the

AWL and Windows

I'm running SA 3.1.7 on Windows XP and it is working pretty well. However I have a question about AWL. Every now and then I can see a spam header where AWL gives some negative score. The "debora" stock spams seem to have this problem more often than the others. I'd like to check the contents of th

Re: question about bayes database

pinoyskull schrieb: Matthias Haegele wrote: pinoyskull schrieb: will it be ok if i have 1000+ spam learned and only 300+ ham learned, will it still be effective? Dont know. But i think it´s better if you learn *all* spam and ham ... that's my problem, spams overwhelmed ham on our server (If

Re: Confirmation about sa-learn

On Mon, 13 Nov 2006 10:49:11 +0100, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote: >Hello List, > >I d just like to have a confirmation about how to use sa-learn. > >1 - create a directory containing spams (mails tagged as spam and mails not >tagged as spam but which are real spams) >2 - create a

Confirmation about sa-learn

Hello List, I d just like to have a confirmation about how to use sa-learn. 1 - create a directory containing spams (mails tagged as spam and mails not tagged as spam but which are real spams) 2 - create a directory containing hams (mails not tagged as spam and which are not spam at all and

Re: Flooded by pointless spam

On 13-nov-2006, at 9:03, Ramprasad wrote: I am no getting what the spammer intends to say here http://ecm.netcore.co.in/tmp/spam1.txt There is no meaningful message , no sales pitch , no stock recommendation nothing at all Any ideas ? Hmm, preemptive Bayes and/or AWL poisoning perhaps? By

Re: SpamAssassin in Mac OSX Server?

You risk any Apple OS/security update to overwrite your up-to-date SA. I run my own SA on OSX Server in different directories. But I don't use the built in Postfix (We have CommuniGate Pro) so it's easy for me. It'll be tricky to get the built-in postfix to work with any SA other than the de

Flooded by pointless spam

I am no getting what the spammer intends to say here http://ecm.netcore.co.in/tmp/spam1.txt There is no meaningful message , no sales pitch , no stock recommendation nothing at all Any ideas ? Thanks Ram