Re: sa-learn explained

[oops... I hit the wrong key and it sent before I was finished. sorry. Here is the entire e-mail I intended to send.] RE: Spamhaus's Zen list Speaking of which, does anyone know what **exactly** the following xbl-derived return codes represent on the Zen list 127.0.0.4|5|6|7|8 I know that 4 p

Re: sa-learn explained

RE: Spamhaus's Zen list Speaking of which, does anyone know what **exactly** the following xbl-derived return codes represent on the Zen list Rob McEwen PowerView Systems [EMAIL PROTECTED] (478) 475-9032 -Original message- From: snowcrash+spamassassin [EMAIL PROTECTED] Date: Sat, 30

Re: sa-learn explained

Perhaps it's not ready for prime time. I can't imagine that if it was they would not be making it headline news. linford has, apparently, stated in posts to newgroups that folks should switch _now_. i think there's a reference in this list's archive, iirc. public announcements, i'd guess, will

Re: sa-learn explained

On Friday 29 December 2006 23:55, snowcrash+spamassassin wrote: > and this, > > http://www.spamhaus.org/zen > > "Caution: zen.spamhaus.org replaces sbl-xbl.spamhaus.org. > > If you are currently using sbl-xbl.spamhaus.org you can now replace > 'sbl-xbl' with 'zen' (sbl-xbl.spamhaus.org will eventua

Re: sa-learn explained

and this, http://www.spamhaus.org/zen "Caution: zen.spamhaus.org replaces sbl-xbl.spamhaus.org. If you are currently using sbl-xbl.spamhaus.org you can now replace 'sbl-xbl' with 'zen' (sbl-xbl.spamhaus.org will eventually become obsolete and may in the future be withdrawn from service). zen.s

Re: sa-learn explained

On Friday 29 December 2006 16:23, Duane Hill wrote: > Phil Barnett wrote: > > On Friday 29 December 2006 14:50, Vernon Webb wrote: > >> What are you using? > > > > Right now, I'm using sbl-xbl. > > I could be mistaken. sbl-xbl is being replaced by zen.spamhaus.org. That > is what I'm currently usi

Re: RBLs

Sander Holthaus wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: John D. Hardin wrote: On Fri, 29 Dec 2006, Larry Nedry wrote: On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: What are you using? Currently I am using only zen.spamhaus.org. The rest of the RBLs that I

Re: RBLs

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: > John D. Hardin wrote: >> On Fri, 29 Dec 2006, Larry Nedry wrote: >> >>> On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: What are you using? >>> Currently I am using only zen.spamhaus.org. The rest of the >>> RBLs that I have t

Re: --lint test fails

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vernon Webb wrote: >> Erm, you're not supposed to remove it. You're supposed to ADD it, or if >> it's already there, make sure it's not commented out with a #. > > Well it was there and it was not commented out so I did comment it out but I am still >

Re: --lint test fails

On Fri, Dec 29, 2006 at 07:56:09PM -0500, Vernon Webb wrote: > Well it was there and it was not commented out so I did comment it out but I > am still > get the error. Ok, there's 2 things going on here. 1) You need the plugin loaded. It sounds like you have that, if the "loadplugin" line is t

Re: RBLs

John D. Hardin wrote: On Fri, 29 Dec 2006, Larry Nedry wrote: On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: What are you using? Currently I am using only zen.spamhaus.org. The rest of the RBLs that I have tried have had too many false positives to be useful for my requirements. Which RBLs

Re: --lint test fails

> Erm, you're not supposed to remove it. You're supposed to ADD it, or if > it's already there, make sure it's not commented out with a #. Well it was there and it was not commented out so I did comment it out but I am still get the error.

Re: --lint test fails

Vernon Webb wrote: > I'm using 3.1.4 and I tried removing the line in the v310pre however I am > still get > that error. > Erm, you're not supposed to remove it. You're supposed to ADD it, or if it's already there, make sure it's not commented out with a #. > >> assuming you're running a

Re: RBLs (was: sa-learn explained)

On Fri, 29 Dec 2006, Larry Nedry wrote: > On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: > >What are you using? > > Currently I am using only zen.spamhaus.org. The rest of the RBLs > that I have tried have had too many false positives to be useful > for my requirements. > > Which RBLs do the r

RE: any lots of CC related rule?

On Fri, 29 Dec 2006, vertito wrote: > You can configure your MTA to restrict the number of recipients > and deny any excess ones. That has zero to do with the CC: header, as the MTA will block based on the number of SMTP envelope recipients rather than the message headers. Monty Ree wrote: > I

Re: RBLs

Larry Nedry wrote: On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: What are you using? Currently I am using only zen.spamhaus.org. The rest of the RBLs that I have tried have had too many false positives to be useful for my requirements. Which RBLs do the rest of you folks feel comfortabl

Re: RBLs (was: sa-learn explained)

On 12/29/06 at 2:50 PM -0500 Vernon Webb wrote: >What are you using? Currently I am using only zen.spamhaus.org. The rest of the RBLs that I have tried have had too many false positives to be useful for my requirements. Which RBLs do the rest of you folks feel comfortable using? Nedry

Re: sa-learn explained

Phil Barnett wrote: On Friday 29 December 2006 14:50, Vernon Webb wrote: What are you using? Right now, I'm using sbl-xbl. I could be mistaken. sbl-xbl is being replaced by zen.spamhaus.org. That is what I'm currently using.

Re: sa-learn explained

On Friday 29 December 2006 14:50, Vernon Webb wrote: > What are you using? Right now, I'm using sbl-xbl. -- My other computer is your Windows machine

Re: --lint test fails

I'm using 3.1.4 and I tried removing the line in the v310pre however I am still get that error. > assuming you're running a recent 31x ver of SA, that cmd is no longer > the way to enable pyzor ... > > rather, this > >    loadplugin Mail::SpamAssassin::Plugin::Pyzor > > is added to init.

Newbie spam reporting question

Is there a best practice to let users report their unrecognized spam mails as message/rfc822 mime parts of a single reporting mail to, say [EMAIL PROTECTED] -- Thanks in advance, Alex

Re: --lint test fails

In running a lint test on one of my boxes I get the following error which I can't seem to figure out why. Pyzor is installed and the path is correct: [3075] warn: config: failed to parse line, skipping: pyzor_add_header 1 [3075] warn: lint: 1 issues detected, please rerun with debug enabled for

Re: VBounce with SA 3.0.4

Hello again, On 12/28/06 at 10:51 AM -0600 Larry Nedry wrote: >I am administering a linux box that has the Plesk 8.1 control panel >installed. SpamAssassin 3.0.4 comes with the Plesk package and it doesn't >look like it would be easy to upgrade to the latest version of SA. > >I want to install VB

Re: sa-learn explained

What are you using? Vernon Webb (201) 703-1232 web designs & web hosting by comp-wiz.com, inc. Information in this transmission is privileged & confidential. It is intended for the use of the individual or entity named above. Any review, dissemination, disclosure, alteration, printing, circ

--lint test fails

In running a lint test on one of my boxes I get the following error which I can't seem to figure out why. Pyzor is installed and the path is correct: [3075] warn: config: failed to parse line, skipping: pyzor_add_header 1 [3075] warn: lint: 1 issues detected, please rerun with debug enabled for

Re: sa-learn explained

On 12/29/06 at 12:09 PM -0500 Vernon Webb wrote: >Yes, ORDB-RBL & SBL+XBL FWIW, relays.ordb.org no longer exists: Nedry

RE: sa-learn explained

personally, attended sa-learn is better for me rather than having 1 with unattended auto learn, as what they always say, one man's spam is another man's ham. 2 cents here. -Original Message- From: Jim Maul [mailto:[EMAIL PROTECTED] Sent: Friday, December 29, 2006 6:28 PM To: users@spam

Re: sa-learn explained

Dave Koontz wrote: I guess milage varies. Auto-Learn has been a life saver for us and has drastically reduced false postives we used to get with emails to our College's Health Care & Research departments. We pass all local user email through SA as well, so this really helps the system learn w

Re: sa-learn explained

Vernon Webb wrote: Yesterday someone asked if I used sa-learn and the response to myself was, I have something else to learn. Can someone explain to me how to use it? If I understand correctly sa-learn can be used to train SA to recognize certain messages as SPAM or HAM. I've run the sa-learn

Re: sa-learn explained

> My first question would be: > Have you installed Rules Du Jour and set it up to have comprehensive > coverage? > Is pyzor, razor and DCC running? Yes > Are you using an RBL? Yes, ORDB-RBL & SBL+XBL

Re: sa-learn explained

On Friday 29 December 2006 08:23, Vernon Webb wrote: > These guys are beginning to > drive me nuts and obvioulsy I have something wrong as others are telling me > these are being caught as SPAM on their systems. My first question would be: Have you installed Rules Du Jour and set it up to have c

RE: sa-learn explained

I guess milage varies. Auto-Learn has been a life saver for us and has drastically reduced false postives we used to get with emails to our College's Health Care & Research departments. We pass all local user email through SA as well, so this really helps the system learn what is 'good' email.

Re: sa-learn explained

On Fri, 29 Dec 2006 09:51:05 -0500, Andy Figueroa <[EMAIL PROTECTED]> wrote: >I still fee like a tyro with SpamAssassin, but my installation is >catching better than 99% with perhaps 0.1% false positives (thanks in >large part to things I've learned from this list), and I think I can >tell you

Re: Any anti-spam solution against outgoing mail?

Monty Ree wrote: > Hello, list. > > I have used well SA with procmail well against incoming mail. > But there are lots of outgoing spam-mails using web programs or using > sendmail at my server. > (There are several domains are hosted at the server.) > > So is there any program like spamassass

Re: Best / Easiest way to report spam?

Micke Andersson <[EMAIL PROTECTED]> writes: > Andrzej Adam Filip wrote: >> Anders Norrbring <[EMAIL PROTECTED]> writes: >> >> >>> Micke Andersson wrote: >>> Anders Norrbring wrote: > I have a setup with Postfix, Amavis-new and SpamAssassin on one > > >> >> 0) Micke suggested

Re: sa-learn explained

I still fee like a tyro with SpamAssassin, but my installation is catching better than 99% with perhaps 0.1% false positives (thanks in large part to things I've learned from this list), and I think I can tell you a couple of things better than just read the manual. (But, do read the manual!)

Re: Any anti-spam solution against outgoing mail?

I would think that rate limiting per sender of say 2 messages a minute might discourage spammers from using your system for outgoing email. Just a thought.

RE: sa-learn explained

man sa-learn -Original Message- From: Vernon Webb [mailto:[EMAIL PROTECTED] Sent: Friday, December 29, 2006 2:24 PM To: SpamAssassin Subject: sa-learn explained Yesterday someone asked if I used sa-learn and the response to myself was, I have something else to learn. Can someone expla

Re: sa-learn explained

Hi On Friday 29 December 2006 14:23, Vernon Webb wrote: > Yesterday someone asked if I used sa-learn and the response to myself was, > I have something else to learn. Can someone explain to me how to use it? man sa-learn sa-learn [options] [file]... As I know sa-learn takes nearly every email-for

sa-learn explained

Yesterday someone asked if I used sa-learn and the response to myself was, I have something else to learn. Can someone explain to me how to use it? If I understand correctly sa-learn can be used to train SA to recognize certain messages as SPAM or HAM. I've run the sa-learn command but it is no

Re: SA not catching apostrophes in sender's addressess?

John Rudd writes: > Chris wrote: > > On Thursday 28 December 2006 12:22 pm, Benny Pedersen wrote: > > >> if clamav knows its a virus, why then test it as spam in spamassassin ? > > Why not? I'm using the clamav plug-in as part of the spamassassin install. > > Because SpamAssassin is rather expen

question about getpwuid and authdaemon

Hello spamassasin_list, Hello all! I'm new in this list, so maybe I'll say something wrong. I seccesfully installed the sa on my system(freebsd 5.3) and attached him to courirer 0.53. I'm using the AuthCourier.pm script for cooperation between courier and sa and that is my maildroprc f

RE: SA crashes on higher load

Further reconfiguration of MTA can handle this issues. Denying any other mail connections while load is high is also advisable. Delaying those connections is also another alternative while the server load is not in normal. You might want to check that email and restrict SA to scan email who has

RE: Any anti-spam solution against outgoing mail?

You can also reconfigure your MTA to restrict sending of spam per connection and or per IP or per domain or per minute. Postfix and sendmail could do these jobs so far. -Original Message- From: Monty Ree [mailto:[EMAIL PROTECTED] Sent: Friday, December 29, 2006 8:19 AM To: [EMAIL PROTEC

RE: any lots of CC related rule?

You can configure your MTA to restrict the number of recipients and deny any excess ones. -Original Message- From: Monty Ree [mailto:[EMAIL PROTECTED] Sent: Friday, December 29, 2006 7:54 AM To: users@spamassassin.apache.org Subject: any lots of CC related rule? Hello, all.. I have

SA crashes on higher load

Hi there! I have running a Spamassassin SpamAssassin version 3.1.7 running on Perl version 5.8.8 (running on a Debian sarge, upgraded SA from etch) About once a week the spamd process crashes and the error message that occures in the maillog is: prefork: select returned -1! recovering: Bad fil

Re: Problem with Update

On Thu, 28 Dec 2006 12:48:16 +0100, "sasa" <[EMAIL PROTECTED]> wrote: >Hi, I have updated SA from spamassassin-3.0.4 to spamassassin-3.1.7 with YUM >method and all it's ok, but when I run sa-update I have this error: > >[EMAIL PROTECTED] ~]# sa-update >Can't locate IO/Zlib.pm in @INC (@INC contai

Re: SA not catching apostrophes in sender's addressess?

On Thu, 28 Dec 2006 15:40:49 -0800, John Rudd <[EMAIL PROTECTED]> wrote: >Chris wrote: >> On Thursday 28 December 2006 12:22 pm, Benny Pedersen wrote: > >>> if clamav knows its a virus, why then test it as spam in spamassassin ? >> Why not? I'm using the clamav plug-in as part of the spamassassin