Re: Rule debugging

John D. Hardin wrote: > On Fri, 6 Apr 2007, J. wrote: > > >> I get no output. Is there a better way to find what matched? Thanks. >> > > Use egrep instead of grep? > > You might want to look at this instead of trying to hand-roll > obfuscation rules: > > http://www.impsec.org/~jhardin/anti

Re: Rule debugging

On Fri, 6 Apr 2007, J. wrote: > I get no output. Is there a better way to find what matched? Thanks. Use egrep instead of grep? You might want to look at this instead of trying to hand-roll obfuscation rules: http://www.impsec.org/~jhardin/antispam/obfusc.pl -- John Hardin KA7OHZ

Re: Rule for "hoodia"?

J. wrote: > I've gotten quite a few false negatives today. Is there any good reason > not to just score any match on "hoodia" with a 4 or so? Thanks. 4 might be a bit strong, depending on your network. I've got a lot of users that subscribe to "personal interest" newsletters at work, and many of t

Re: Rule debugging

Please do not hijack other threads by replying to a mail, if you actually mean to start an unrelated thread. Removing the quoted text is not sufficient. On Fri, 2007-04-06 at 15:19 -0700, J. wrote: > I got a false positive that was triggered by this: > > bodyMY_VIAG > /\b(v(i|l)a.{0,4}g.{

Re: Rule debugging

--- Theo Van Dinter <[EMAIL PROTECTED]> wrote: > On Fri, Apr 06, 2007 at 03:19:09PM -0700, J. wrote: > > bodyMY_VIAG > > /\b(v(i|l)a.{0,4}g.{0,4}r.{0,4}a)|(v.{0,4}(i|l).{0,4}a.{0,4}gra)/i > > just because it makes me cringe: > - use [il] for character classes, not (i|l) > - don't use

Re: Rule debugging

On Fri, Apr 06, 2007 at 03:19:09PM -0700, J. wrote: > bodyMY_VIAG > /\b(v(i|l)a.{0,4}g.{0,4}r.{0,4}a)|(v.{0,4}(i|l).{0,4}a.{0,4}gra)/i just because it makes me cringe: - use [il] for character classes, not (i|l) - don't use (...) if you don't need capturing, use (?:...) :) > grep -i

Rule debugging

I got a false positive that was triggered by this: bodyMY_VIAG /\b(v(i|l)a.{0,4}g.{0,4}r.{0,4}a)|(v.{0,4}(i|l).{0,4}a.{0,4}gra)/i score MY_VIAG 5 But when I try to see what it matched using this: grep -i '(v(i|l)a.{0,4}g.{0,4}r.{0,4}a)|(v.{0,4}(i|l).{0,4}a.{0,4}gra)' /home/domainma

Re: Need help finding an old rule making page.

On 4/6/07 Josh Graham wrote: >Last year there was this page I had bookmarked that was basically a php >form where you enter criteria and it would output Spamassassin rules for >you. SpamAssassin Configuration Generator HTH, Nedry

Re: Need help finding an old rule making page.

On Fri, 6 Apr 2007 12:13:03 -0700, "Josh Graham" <[EMAIL PROTECTED]> wrote: >Last year there was this page I had bookmarked that was basically a php >form where you enter criteria and it would output Spamassassin rules for >you. I lost all my bookmarks when a flash drive died, does anyone know >o

Rule for "hoodia"?

I've gotten quite a few false negatives today. Is there any good reason not to just score any match on "hoodia" with a 4 or so? Thanks. -Jason Get your own web address. Have a HUGE year through Yahoo! Small

Re: Need help finding an old rule making page.

Josh Graham wrote: > Last year there was this page I had bookmarked that was basically a php > form where you enter criteria and it would output Spamassassin rules for > you. I lost all my bookmarks when a flash drive died, does anyone know > of the page I'm talking about? > > I can't remember ex

Need help finding an old rule making page.

Last year there was this page I had bookmarked that was basically a php form where you enter criteria and it would output Spamassassin rules for you. I lost all my bookmarks when a flash drive died, does anyone know of the page I'm talking about? I can't remember exactly but I know "rule generato

Re: whitelisting question

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 thank you. Matt Kettler wrote: > Ilya Vishnyakov wrote: >> Hello Spamassassin Gurus! I have the spam email, showing that it >> was sent from our user (from [EMAIL PROTECTED] to >> [EMAIL PROTECTED]) How do I whitelist the spam email like this >> one?

Re: NOTICE: SpamAssassin 3.2.0-rc1 PRERELEASE available

--On Friday, March 23, 2007 3:10 PM + Justin Mason <[EMAIL PROTECTED]> wrote: So when are the betas of the "(STILL TODO ;)"'s coming out? :-) Doc has promised to do them really soon. ;) http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5382 And according to that bug, it's now in th

Re: Alternative to red.uribl.com?

On Apr 6, 2007, at 2:12 AM, Bill Landry wrote: ram wrote the following on 4/5/2007 10:23 PM -0800: On Wed, 2007-04-04 at 08:11 -0700, Bill Landry wrote: ram wrote the following on 4/4/2007 12:56 AM -0800: On Tue, 2007-04-03 at 13:15 -0700, Bill Landry wrote: Dave Pooser wrote the follow

RE: Sa-update

> -Original Message- > From: Emre BALCI [mailto:[EMAIL PROTECTED] > Sent: Friday, April 06, 2007 6:59 AM > To: users@spamassassin.apache.org > Subject: Sa-update > > > Hi all > I am using sa on gentoo when I run sa-update its > copying rules into /var/lib/spamassassin/version > I sho

Sa-update

Hi all I am using sa on gentoo when I run sa-update its copying rules into /var/lib/spamassassin/version I should copy rules form this location to /usr/share/spamassassin ? can I use rules between diffrent versions ?

bug 5313 - prefork: select returned -1!

two of my spamassassin 3.1.8 servers are experiencing the " warn: prefork: select returned -1! recovering: Bad file descriptor " problem described at: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5313 I patched a vanilla Mail-Spamassassin-3.1.8 with http://issues.apache.org/SpamAssassin

Re: bug 5313 - prefork: select returned -1!

Please don't ask the same question in two different places. I've answered on the bug. --j. Jeremy Kister writes: > On 4/6/2007 4:37 AM, Jeremy Kister wrote: > > But now, i get a different warning: > > I should add that I'm getting the warning every two seconds, but spamd > does seem to be worki

Re: bug 5313 - prefork: select returned -1!

On 4/6/2007 4:37 AM, Jeremy Kister wrote: > But now, i get a different warning: I should add that I'm getting the warning every two seconds, but spamd does seem to be working. 2007-04-06 04:49:12 [99625] warn: JMD bug5313 child_just_exited = 0 at /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssa

bug 5313 - prefork: select returned -1!

two of my spamassassin 3.1.8 servers are experiencing the " warn: prefork: select returned -1! recovering: Bad file descriptor " problem described at: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5313 I patched a vanilla Mail-Spamassassin-3.1.8 with http://issues.apache.org/SpamAssassin

I'm trying to upgrade from SA 3.1.7 to 3.1.8 using CPAN. I'm running

I'm trying to upgrade from SA 3.1.7 to 3.1.8 using CPAN. I'm running Active State Perl 5.8.8 under windows XP. The build of SpamAssassin works but the tests fail. It has problem with the strip2 tests: t/strip2FAILED tests 1-15 Failed 15/16 tests, 6.25% okay t/strip_no