Re: HAM and SPAM mailboxes

2007-03-05 Thread Johann Spies
On Mon, Mar 05, 2007 at 10:58:00AM -0300, Luis Hernán Otegui wrote: > OK, Chris, I think I'll go on with you suggestion. I seems simpler, and a > lower > load for my busted servers. However, I'm not a Perl Guru myself, so, mind if > you could clarify what did you ment with "In that case, Perl's >

Russian and Chinese spam rulesets?

2007-03-05 Thread Eray Aslan
Hello, Some Russian and Chinese spam (especially Russian) is making its way to our users inboxes. We do business with those 2 countries. Consequently, lots of legitimate emails go back and forth so that I cannot just bump up the score for these 2 locales. We do use user submitted spam/ham emails

auto-learn learned_points

2007-03-05 Thread ram01
"auto-learn? no: scored as spam but learner indicated ham" is given if if ($learned_points < $learner_said_ham_points)where $learner_said_ham_points = -1.0 what exactly is learned_points -- View this message in context: http://www.nabble.com/auto-learn-learned_points-tf3353775.html#a932685

Re: [2] best method for sa-learn

2007-03-05 Thread ram01
Thanks I think this is what I am looking for, have not had a chance to try it though. ram01 wrote: > > yes the learning folders are stored on the server. The same server is > running IMAP, MTA, and SA. The site does not have a high load of email, > so processor load shouldn't be a big issue,

Re: add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ > tests=_TESTSSCORES(,)_

2007-03-05 Thread Chris
On Sunday 04 March 2007 11:54 pm, Theo Van Dinter wrote: > Anyway, reading the debug output... It appears that your installation is > very messed up. To start, get rid of the *.cf files in > /etc/mail/spamassassin which reference anything from sa-update. According > to the output you're loading

Re: SA to deal with mail errors

2007-03-05 Thread Ed Kasky
At 06:44 AM Monday, 3/5/2007, Erik Dasque wrote -=> Hi, I've been using sa for a while and it's worked very well for me. In the past 18 month or so, spammers have discovered my domain name and are sending tons of email with frenchguys.com in the from ([EMAIL PROTECTED], [EMAIL PROTECTED], and so

Re: Spamassassin filter files? / Oh, i forgot

2007-03-05 Thread Mário Gamito
You have to have qmail-scanner installed. I suppose you do. -- Mário Gamito Mário Gamito wrote: night duke wrote: Hi i wish to know if it's possible to filter on email files like .mp3 .exe .vbs .scr .com .pif etc... with spamassassin? Yes, it's possible. Let's say you want to block .exe file

Re: Spamassassin filter files?

2007-03-05 Thread Mário Gamito
night duke wrote: Hi i wish to know if it's possible to filter on email files like .mp3 .exe .vbs .scr .com .pif etc... with spamassassin? Yes, it's possible. Let's say you want to block .exe files. Edit file /var/spool/qmailscan/quarantine-attachments.txt and insert the line .exe 0 You van f

Re: Spamassassin filter files?

2007-03-05 Thread Jim Knuth
Heute (05.03.2007/19:05 Uhr) schrieb Evan Platt, > At 09:57 AM 3/5/2007, night duke wrote: >>Hi i wish to know if it's possible to filter on email files like >>.mp3 .exe .vbs .scr .com .pif etc... with spamassassin? > I'm far from a spamassassin expert, but sure.. You could write a rule > that lo

Re: add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ > tests=_TESTSSCORES(,)_

2007-03-05 Thread Daryl C. W. O'Shea
Chris wrote: On Sunday 04 March 2007 11:54 pm, Theo Van Dinter wrote: Anyway, reading the debug output... It appears that your installation is very messed up. To start, get rid of the *.cf files in /etc/mail/spamassassin which reference anything from sa-update. According to the output you'r

Re: Spamassassin filter files?

2007-03-05 Thread John D. Hardin
On Mon, 5 Mar 2007, night duke wrote: > Hi i wish to know if it's possible to filter on email files like > .mp3 .exe .vbs .scr .com .pif etc... with spamassassin? SA isn't a security or A/V tool, don't try to make it one. http://www.impsec.org/email-tools/procmail-security.html -- John Ha

Re: Spamassassin filter files?

2007-03-05 Thread Evan Platt
At 09:57 AM 3/5/2007, night duke wrote: Hi i wish to know if it's possible to filter on email files like .mp3 .exe .vbs .scr .com .pif etc... with spamassassin? I'm far from a spamassassin expert, but sure.. You could write a rule that looks at the body of the message and looks at the (I'm not

RE: Spamassassin filter files?

2007-03-05 Thread Thomas Raef
Look into simscan at www.inter7.com From: night duke [mailto:[EMAIL PROTECTED] Sent: Monday, March 05, 2007 11:57 AM To: users@spamassassin.apache.org Subject: Spamassassin filter files? Hi i wish to know if it's possible to fi

Spamassassin filter files?

2007-03-05 Thread night duke
Hi i wish to know if it's possible to filter on email files like .mp3 .exe .vbs .scr .com .pif etc... with spamassassin? Thanks - LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice

Re: Removing the last line of a file

2007-03-05 Thread Theo Van Dinter
On Mon, Mar 05, 2007 at 02:58:38PM +, Mário Gamito wrote: > I'm no PERL guru, far from that, i must confess. > I just use it in little things for system administration. > > $ perl -pi~ -e 's/include\ > /var/lib/spamassassin/3.001007/saupdates_openprotect_com/MIRRORED.BY//' > ./updates_spamassa

Re: Removing the last line of a file

2007-03-05 Thread John D. Hardin
On Mon, 5 Mar 2007, Mário Gamito wrote: > I'm no PERL guru, far from that, i must confess. > I just use it in little things for system administration. > > Now, i', trying to remove the last line of a file with: Don't become entranced by a single tool. You should be able to combine "head" and "w

a SpamAssassin rule-discovery algorithm (fwd)

2007-03-05 Thread Justin Mason
SpamAssassin rule developers might be interested in this post over at my blog: > So far, most SpamAssassin text rules are manually developed; somebody > looks at a few spam samples, spots common phrases, and writes a rule to > match that. It'd be great to automate more of that work. Here's an > al

Re: HAM and SPAM mailboxes

2007-03-05 Thread Chris St. Pierre
On Mon, 5 Mar 2007, Luis Hernán Otegui wrote: OK, Chris, I think I'll go on with you suggestion. I seems simpler, and a lower load for my busted servers. However, I'm not a Perl Guru myself, so, mind if you could clarify what did you ment with "In that case, Perl's Mail::Box::Manager is your fri

Removing the last line of a file

2007-03-05 Thread Mário Gamito
Hi, I'm no PERL guru, far from that, i must confess. I just use it in little things for system administration. Now, i', trying to remove the last line of a file with: $ perl -pi~ -e 's/include\ /var/lib/spamassassin/3.001007/saupdates_openprotect_com/MIRRORED.BY//' ./updates_spamassassin_org.cf

Re: SA to deal with mail errors

2007-03-05 Thread Justin Mason
Erik Dasque writes: > Hi, > > I've been using sa for a while and it's worked very well for me. In > the past 18 month or so, spammers have discovered my domain name and > are sending tons of email with frenchguys.com in the from > ([EMAIL PROTECTED], [EMAIL PROTECTED], and so forth). They'r

Re: SA to deal with mail errors

2007-03-05 Thread Evan Platt
At 06:44 AM 3/5/2007, Erik Dasque wrote: Hi, I've been using sa for a while and it's worked very well for me. In the past 18 month or so, spammers have discovered my domain name and are sending tons of email with frenchguys.com in the from ([EMAIL PROTECTED], [EMAIL PROTECTED], and so forth). Th

SA to deal with mail errors

2007-03-05 Thread Erik Dasque
Hi, I've been using sa for a while and it's worked very well for me. In the past 18 month or so, spammers have discovered my domain name and are sending tons of email with frenchguys.com in the from ([EMAIL PROTECTED], [EMAIL PROTECTED], and so forth). They're not using my smtp server, ju

Re: HAM and SPAM mailboxes

2007-03-05 Thread Luis Hernán Otegui
OK, Chris, I think I'll go on with you suggestion. I seems simpler, and a lower load for my busted servers. However, I'm not a Perl Guru myself, so, mind if you could clarify what did you ment with "In that case, Perl's Mail::Box::Manager is your friend." How do I extract the original mail from t

Re: add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ > tests=_TESTSSCORES(,)_

2007-03-05 Thread Chris
On Sunday 04 March 2007 11:54 pm, Theo Van Dinter wrote: > On Sun, Mar 04, 2007 at 06:56:19PM -0600, Chris wrote: > > The entire debug output is here: > > http://mediasafe.embarq.com/chris1948/Hosted/chrisdebug-1.txt.tar.bz2 > > Hrm. Well, a few thoughts, including -- why create a tar file for a s

Re: help! i'm a newbie and just broke our spam assassin / clamav

2007-03-05 Thread Jonas Eckerman
mrj wrote: > i was running out of space and normally i clear up the /var/spool/mqueue > folder, If I were you I would check if there is something else you could clear up before starting to forcefully delete queued mail. Also, if your disk regularly fills up due to queued mail you need to find o