Re: Testing the Subject header - decoded?

2007-07-03 Thread Loren Wilton
How do I write a rule for the subject header, but for working on the mimedecoded contents? For instance a simple rule to check the length of the subject: header BW_SUBJECT_LONG Subject =~ /.{100}/ Problem is - when the subject has been mime-encoded, it's already very long: Subject: =?iso-8859-

Re: Testing the Subject header - decoded?

2007-07-03 Thread Per Jessen
Per Jessen wrote: > How do I write a rule for the subject header, but for working on the > mimedecoded contents? > Sorry, just found the answer. Ignore me. /Per Jessen, Zürich

Testing the Subject header - decoded?

2007-07-03 Thread Per Jessen
How do I write a rule for the subject header, but for working on the mimedecoded contents? For instance a simple rule to check the length of the subject: header BW_SUBJECT_LONG Subject =~ /.{100}/ Problem is - when the subject has been mime-encoded, it's already very long: Subject: =?iso-8859

Re: bayes_ignore_header for X-Spam values

2007-07-03 Thread Matt Kettler
Jeremy Fairbrass wrote: > Hi all, > Can someone please advise me: is it good or bad to add "bayes_ignore_header" > values in my local.cf file for the X-Spam headers that > are added by SA? It's pointless.. SA already removes it's own markings when learning messages. The only time you'd need to d

RE:Upgrade to 3.2

2007-07-03 Thread John D. Hardin
On Tue, 3 Jul 2007 [EMAIL PROTECTED] wrote: > I downloaded the traball and made a rpm; which created > perl-spamassassin.rpm and mail-spamassassin.rpm. I installed > perl-spamassassin first using yast and then spamassassin using > yast. The spamassassin rpm failed to installed but when i do a rpm

Question about missing rules for 3.2.1 upgrade

2007-07-03 Thread Albert E. Whale
I recently upgraded to 3.2.1 In doing so, I find that the following rules which were previously used are no longer in service. Can someone explain why? [/etc/mail/spamassassin] spamassassin --lint [22753] warn: config: warning: score set for non-existent rule HTML_FONT_INVISIBLE [22753] warn: co

RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Robert - eLists
> > I for one agree with the protected model. > > I've read post after post in this group and others where people complain > that some new method is no longer effective due to the "other guys" > knowing our every step. > > If there were an application process, which would be too burdensome on >

Re:Upgrade to 3.2

2007-07-03 Thread admin
>> Well, i may have really messed up now. I uninstalled all spamassassin >> 3.1 using red carpet and the installed perl-spamassassin from rpm >> usingyast (this was fine). Then i tried to install spamassassin 3.2 >> from rpm >> using yast, this gives this error: >> ERROR(InstTarget:E_RpmDB_subproce

RE: RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Robert - eLists
> > Despite of my opinion about security-by-obscurity approach, I still > experience major connection problems with that site. By now it seems that > it does not resolve it's hostname to me at all. At least from my subnet, > which is unfortunately one of those "polish-spam" 83.x subnets, that are

Re:Upgrade to 3.2

2007-07-03 Thread carnold5
> Well, i may have really messed up now. I uninstalled all spamassassin > 3.1 using red carpet and the installed perl-spamassassin from rpm > usingyast (this was fine). Then i tried to install spamassassin 3.2 > from rpm > using yast, this gives this error: > ERROR(InstTarget:E_RpmDB_subprocess_f

RE:Upgrade to 3.2

2007-07-03 Thread carnold5
Well, i may have really messed up now. I uninstalled all spamassassin 3.1 using red carpet and the installed perl-spamassassin from rpm using yast (this was fine). Then i tried to install spamassassin 3.2 from rpm using yast, this gives this error: ERROR(InstTarget:E_RpmDB_subprocess_failed) --- er

TQMcube apparently gone dormant

2007-07-03 Thread Bart Schaefer
If you read JM's Planet Antispam, you know this already, but: http://www.dnsbl.com/2007/06/status-of-dnsbltqmcubecom-abandoned.html

Re: *****SPAM***** Re: DNS list service to detect the registrar barrier

2007-07-03 Thread jdow
From: "arni" <[EMAIL PROTECTED]> jdow schrieb: You are if you're the only one dumb enough to run email from this list through SpamAssassin then you might be. I dont exactly know why you have to flame people on this mailinglist but i'm gonna explain it to you: This list offers a great way to

RE:Upgrade to 3.2

2007-07-03 Thread carnold5
John D. Hardin wrote: > On Tue, 3 Jul 2007 [EMAIL PROTECTED] wrote: > >> Theo Van Dinter wrote: >>> "perl-spamassassin" sounds like a package. Don't mix using CPAN and using >>> packages. If you're using a package, upgrade SA through a package. >>> If you want to use CPAN, get rid of the packag

Re: Re: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Theo Van Dinter
On Tue, Jul 03, 2007 at 07:16:19PM -0500, Dallas Engelken wrote: > ... we have to release a new plugin, and a new > ruleset. Its not like we just release a new ruleset, someone runs > RDJ/sa-update and they are off.There is no way to auto-update the > plugin (currently) besides to announce

RE:Upgrade to 3.2

2007-07-03 Thread admin
> Theo Van Dinter wrote: >> "perl-spamassassin" sounds like a package. Don't mix using CPAN and >> using >> packages. If you're using a package, upgrade SA through a package. > If you >> want to use CPAN, get rid of the packages first. >> > I did install from rpm. So, if i understand you right, i

RE:Upgrade to 3.2

2007-07-03 Thread John D. Hardin
On Tue, 3 Jul 2007 [EMAIL PROTECTED] wrote: > Theo Van Dinter wrote: > > "perl-spamassassin" sounds like a package. Don't mix using CPAN and using > > packages. If you're using a package, upgrade SA through a package. > > If you want to use CPAN, get rid of the packages first. > > I did install

Re: Mail Queue stops working

2007-07-03 Thread John D. Hardin
On Tue, 3 Jul 2007, David Boltz wrote: > Thanks for the info. Could it be that because the debug mode > tries to do an commit before it closes and the system is set to > auto commit for when it's running continuously it says this? No idea. That's why it's a wild guess. -- John Hardin KA7OHZ

RE:Upgrade to 3.2

2007-07-03 Thread carnold5
Theo Van Dinter wrote: > "perl-spamassassin" sounds like a package. Don't mix using CPAN and using > packages. If you're using a package, upgrade SA through a package. If you > want to use CPAN, get rid of the packages first. > I did install from rpm. So, if i understand you right, i need to uni

RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Thomas Raef
I for one agree with the protected model. I've read post after post in this group and others where people complain that some new method is no longer effective due to the "other guys" knowing our every step. If there were an application process, which would be too burdensome on the maintainers, I'

Re: Mail Queue stops working

2007-07-03 Thread David Boltz
Thanks for the info. Could it be that because the debug mode tries to do an commit before it closes and the system is set to auto commit for when it's running continuously it says this? Regards, Dave B.. "J

Re: Botnet over aggressive?

2007-07-03 Thread John Rudd
René Berber wrote: John Rudd wrote: Botnet's score of 5 is meant to say "this message should be quarantined or flagged for review". It's not saying "this message is _definitely_ spam".[snip] The trouble is redundancy in scores, the BOTNET score is usually just the start of a HELO_DYNAMIC_DHC

Re: Re: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Dallas Engelken
Jason Haar wrote: Theo Van Dinter wrote: All in all, you're better off just making things public. I agree. It's sort of like saying that Open Source cannot work as a model in the antivirus/antispam arena... It can, if you have the people willing to contribute new dats on every

Re: Upgrade to 3.2

2007-07-03 Thread Theo Van Dinter
On Tue, Jul 03, 2007 at 07:56:00PM -0400, [EMAIL PROTECTED] wrote: > OK, so i installed HTML::Parser and now tried installing SA 3.2 with > cpan. This is what i get with cpan install: [...] > Mail::SpamAssassin is up to date. > > Do you need to also update perl-spamassassin too? Because when i loo

Re: Mail Queue stops working

2007-07-03 Thread John D. Hardin
On Tue, 3 Jul 2007, David Boltz wrote: > I went through all the mysql databases and repaired any tables > that contained errors as well but that didn't seem to help. > commit ineffective with AutoCommit enabled at > /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, > line 70

RE: Upgrade to 3.2

2007-07-03 Thread carnold5
OK, so i installed HTML::Parser and now tried installing SA 3.2 with cpan. This is what i get with cpan install: Going to read /root/.cpan/sources/modules/03modlist.data.gz Going to write /root/.cpan/Metadata Mail::SpamAssassin is up to date. cpan> quit Caught SIGINT Lockfile removed. Do you need

Re: Upgrading to 3.2

2007-07-03 Thread Luis Hernán Otegui
Hi, 2007/7/3, [EMAIL PROTECTED] <[EMAIL PROTECTED]>: We are trying to upgrade from 3.1.0 on SLES9 using spamd. I have viewed the install notes and downloaded the zip. Extracted and CD'd to that new SA dir. Followed these install instructions: [unzip/untar the archive] cd Mail-SpamAssassi

Re: *****SPAM***** Re: DNS list service to detect the registrar barrier

2007-07-03 Thread arni
jdow schrieb: You are if you're the only one dumb enough to run email from this list through SpamAssassin then you might be. I dont exactly know why you have to flame people on this mailinglist but i'm gonna explain it to you: This list offers a great way to learn bayes with spam related ham,

Upgrading to 3.2

2007-07-03 Thread carnold5
We are trying to upgrade from 3.1.0 on SLES9 using spamd. I have viewed the install notes and downloaded the zip. Extracted and CD'd to that new SA dir. Followed these install instructions: [unzip/untar the archive] cd Mail-SpamAssassin-* perl Makefile.PL [option: add -DSPAM

Mail Queue stops working

2007-07-03 Thread David Boltz
I'm having problems with my mail not getting processed properly. This setup has been in place for years and worked without problems. All of a sudden this weekend it stopped delivering its mail from the incoming queue. If I modify my MailScanner.conf file to run in debug mode it will process a bu

Re: Botnet over aggressive?

2007-07-03 Thread René Berber
John Rudd wrote: > Botnet's score of 5 is meant to say "this message should be quarantined > or flagged for review". It's not saying "this message is _definitely_ > spam".[snip] The trouble is redundancy in scores, the BOTNET score is usually just the start of a HELO_DYNAMIC_DHCP,HELO_DYNAMIC_HC

Re: *****SPAM***** Re: DNS list service to detect the registrar barrier

2007-07-03 Thread jdow
You are if you're the only one dumb enough to run email from this list through SpamAssassin then you might be. {o.o} - Original Message - From: "arni" <[EMAIL PROTECTED]> To: "mouss" <[EMAIL PROTECTED]> Cc: Sent: Monday, 2007, July 02 13:06 Subject: Re: *SPAM* Re: DNS list serv

DB_File::AUTOLOAD error

2007-07-03 Thread John Goubeaux
Folks, SpamAssassin version 3.2.1 running on Perl version 5.8.8 Solaris 10 x86 I am seeing the following error at startup of spamd. Does DB_File.pm load to make a connection to the AWL and Bayes DBs ? If so does this point to a corrupt or munged db? SA/Spamd built fine and has been running

Re: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Raymond Dijkxhoorn
Hi! All in all, you're better off just making things public. model in the antivirus/antispam arena... ...and it may be true - but no-one on this list believes it ;-) Its a matter of fact that published rules (see sare rulesets) become less effective immediate after publishing. That due to

Re: MD5 Hash of URL's

2007-07-03 Thread John D. Hardin
On Tue, 3 Jul 2007, Matt wrote: > Why can't Spamassassin do like a MD5 hash of any URL's in a > message and check them against a database? I just think it would > help catch things like: geocities.com/spamer123/ or > spamer123.tripod.com and etc. Too easy to defeat using a URI with random parame

Re: SA on iPhone yet?

2007-07-03 Thread MIKE YRABEDRA
on 7/3/07 2:01 PM, John Rudd at [EMAIL PROTECTED] wrote: > MIKE YRABEDRA wrote: >> on 7/2/07 10:08 PM, Robert - eLists at [EMAIL PROTECTED] wrote: >> >>> Anyone get Spamassassin installed on their iPhone yet? >>> >>> :-) >>> >>> - rh >>> >>> >> >> >> What are you talking about? SA is a ser

Re: RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Michał Jęczalik
On Tue, 3 Jul 2007, Dallas Engelken wrote: The PDFInfo.pm and accompanying ruleset will not be public. If you want it, please go to http://www.rulesemporium.com/plugins.htm#pdfinfo and request it. Despite of my opinion about security-by-obscurity approach, I still experience major connectio

Re: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Jason Haar
Theo Van Dinter wrote: > All in all, you're better off just making things public. > I agree. It's sort of like saying that Open Source cannot work as a model in the antivirus/antispam arena... ...and it may be true - but no-one on this list believes it ;-) -- Cheers Jason Haar Information Se

Re: Botnet over aggressive?

2007-07-03 Thread Michele Neylon :: Blacknight
My take on botnet scoring, like that of any "custom" rule is that I can change the scoring to suit my requirements. Considering the kind of users we deal with adding in the "default" scores would have caused a lot of headaches, so I actually tested it with scores of 0 on all to see how many hi

Re: Botnet over aggressive?

2007-07-03 Thread John Rudd
Botnet's score of 5 is meant to say "this message should be quarantined or flagged for review". It's not saying "this message is _definitely_ spam". Lots of people lower its score to something like 2-3 if they feel it's too aggressive. I keep it at a 5, and have VERY FEW false positives.

Re: SA on iPhone yet?

2007-07-03 Thread John Rudd
MIKE YRABEDRA wrote: on 7/2/07 10:08 PM, Robert - eLists at [EMAIL PROTECTED] wrote: Anyone get Spamassassin installed on their iPhone yet? :-) - rh What are you talking about? SA is a server level tool. Why, if it was even possible, would you install it on a phone? SA is not necessa

Re: SA on iPhone yet?

2007-07-03 Thread Bob Proulx
MIKE YRABEDRA wrote: > Robert - eLists wrote: > > Anyone get Spamassassin installed on their iPhone yet? > > What are you talking about? SA is a server level tool. What are *you* talking about? As far as I can tell (I don't have one) the iphone is perfectly capable enough to be considered a serve

Re: Returned mail: see transcript for details

2007-07-03 Thread SM
Hi Zbigniew, At 09:08 03-07-2007, Zbigniew Szalbot wrote: And for the sake of argument, why on earth a POLISH spammer? Why does a spammer have to be Polish. I happen to live in Poland but I am no way a spammer, never have been and never will be. It's easier to blame some country for the spam pr

Re: RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Theo Van Dinter
On Tue, Jul 03, 2007 at 11:35:01AM -0500, Dallas Engelken wrote: > The mechanism used for accurate detection in the PDFInfo plugin is not > going to be a part of this.. and I'd recommend you request the plugin > and use it privately. If the information gets publicized, that method > would s

Re: Returned mail: see transcript for details

2007-07-03 Thread Craig Carriere
Jonathan: No need to apologize at all; you did me a favor by letting me know we were still having these issues with our ISP's "anti-spam" methods. Will get this sorted out one way or the other. Trying to keep your user's mailboxes free of spam is work enough, but having to to battle with your IS

Re: RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Dallas Engelken
Chris Santerre wrote: You didn't miss anything. I don't believe they are released yet. FInal testing being done. Results look great. I'll see if they can get released soon. --Chris > -Original Message- > From: Michal Jeczalik [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 03, 2007

Re: MD5 Hash of URL's

2007-07-03 Thread Messaging Directories
Funny you should mention that. I recently wrote a proof of concept plugin that does exactly what you're talking about. The point was to check URLs against google's safebrowsing list, which was just announced. Unfortunately, the results were rather poor. The only hits that I got were on message

Re: MD5 Hash of URL's

2007-07-03 Thread Daryl C. W. O'Shea
Matt wrote: Why can't Spamassassin do like a MD5 hash of any URL's in a message and check them against a database? Because there isn't such a database? Daryl

Re: Returned mail: see transcript for details

2007-07-03 Thread Jonathan Allen
List and [EMAIL PROTECTED], > First off sorry for the problem and to any from the country of Poland > that were offended by this. I need to apologise to the nice chap at cobatco - I really didn't mean to cause you any embarassment on the public list, but I didn't think I could reach you any other

Re: Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Jeff Chan
Quoting Theo Van Dinter <[EMAIL PROTECTED]>: > On Tue, Jul 03, 2007 at 06:04:33AM -0500, Jeff Chan wrote: > > Please DO NOT use sa-blacklist. Use multi.surbl.org instead. Bill will > tell > > you the same thing when he gets a chance. > > It seems as if the blacklist.cf file is still available fo

Re: MD5 Hash of URL's

2007-07-03 Thread Daniel J McDonald
On Tue, 2007-07-03 at 10:11 -0500, Matt wrote: > Why can't Spamassassin do like a MD5 hash of any URL's in a message > and check them against a database? Well, not MD5, but Whiplash type 8 signatures in Razor-2 are pretty similar. > I just think it would help catch > things like: geocities.com/

Re: Returned mail: see transcript for details

2007-07-03 Thread SM
Hi Jonathan, Yes: [EMAIL PROTECTED], to whom I was trying to respond. But I worded my question badly - what I meant was: why on earth should their machine think that I am a Polish spammer ? The IP address is in one of the static blocks administered by my (UK) ISP. They may be using a "blackli

Re: Returned mail: see transcript for details

2007-07-03 Thread Administrator
Jonathan and all: First off sorry for the problem and to any from the country of Poland that were offended by this.  The response came from our ISP which we fetch our mail from; they run a anti-spamming service that we are suppose to be opted out off but apparently are not.   One of its many "f

Re: Botnet over aggressive?

2007-07-03 Thread Daniel J McDonald
On Tue, 2007-07-03 at 16:39 +0200, Cliff Stanford wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I'm still a bit vague on how the SpamAssassin rules fit together but > I've noticed that, since upgrading to the latest version, I'm getting a > lot of false positives. > > The common ca

Re: Returned mail: see transcript for details

2007-07-03 Thread Evan Platt
At 09:04 AM 7/3/2007, Jonathan Allen wrote: Yes: [EMAIL PROTECTED], to whom I was trying to respond. But I worded my question badly - what I meant was: why on earth should their machine think that I am a Polish spammer ? The IP address is in one of the static blocks administered by my (UK) ISP.

Re: Returned mail: see transcript for details

2007-07-03 Thread Jörg Reisslein
Maybe because statistic talks :) Zbigniew Szalbot schrieb: Hi, Yes: [EMAIL PROTECTED], to whom I was trying to respond. But I worded my question badly - what I meant was: why on earth should their machine think that I am a Polish spammer ? The IP address is in one of the static blocks adm

Re: Returned mail: see transcript for details

2007-07-03 Thread Michał Jęczalik
On Tue, 3 Jul 2007, Jonathan Allen wrote: I just tried to reply to a kind soul that had offered some help with the 3.2.1 root errors and got: - The following addresses had permanent fatal errors - <[EMAIL PROTECTED]> (reason: 554 : Client host rejected: Polish Spammer) - Tr

Re: Returned mail: see transcript for details

2007-07-03 Thread Zbigniew Szalbot
Hi, > Yes: [EMAIL PROTECTED], to whom I was trying to respond. But I worded > my question badly - what I meant was: why on earth should their machine > think that I am a Polish spammer ? The IP address is in one of the > static blocks administered by my (UK) ISP. And for the sake of argument, w

Re: Returned mail: see transcript for details

2007-07-03 Thread Jonathan Allen
SM, > > Where on earth did this response come from ? > > The response came from the mail server for cobatco.com. They have a > user subscribed to this mailing list. Yes: [EMAIL PROTECTED], to whom I was trying to respond. But I worded my question badly - what I meant was: why on earth should

yet another FuzzyOcr version question

2007-07-03 Thread polloxx
I have another question concerning FozzyOcr 2.3b versus FuzzyOcr 3.5.1: A spam picture like this: http://213.146.165.18/spam2.gif does generate a SA FuzzyOcr score of 19 with version 2.3b (and gocr 0.40). With version 3.5.1 (and gocr 0.44) does not generate a score at all. I'm sure the systems wo

Re: Returned mail: see transcript for details

2007-07-03 Thread SM
At 08:26 03-07-2007, Jonathan Allen wrote: I am neither a spammer, nor in Poland but a legitimate UK business with Are you absolutely sure you are not in Poland? :-) Antispam systems can sometimes be geography-challenged. the same IP address for some years. Where on earth did this respons

RE: SA on iPhone yet?

2007-07-03 Thread Jean-Paul Natola
-Original Message- From: Loren Wilton [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 03, 2007 9:16 AM To: users@spamassassin.apache.org Subject: Re: SA on iPhone yet? > on 7/2/07 10:08 PM, Robert - eLists at [EMAIL PROTECTED] wrote: > >> Anyone get Spamassassin installed on their iPhone

Re: A plan for HAM - White list for ham domains

2007-07-03 Thread Marc Perkel
Loren Wilton wrote: Who likes this idea? While its a little out of date now and was manually generated and verified, SARE has a whitelist of hosts and the like that are supposedly never spam, even though they may be commercial mail. Loren Looks like a useful list. I'm going to

PDF spam indicator: unusual document dimensions?

2007-07-03 Thread John D. Hardin
In today's SANS diary: During the last two days, we've received continuous reports of new PDF spam. This time the pages attached are generally of different size each time (no longer A4, but 4x3 inch or 6x1 inch). Might a non-standard-paper-size PDF attachment be worth a point? -- John Ha

Re: Returned mail: see transcript for details

2007-07-03 Thread Jonathan Allen
All, I just tried to reply to a kind soul that had offered some help with the 3.2.1 root errors and got: - The following addresses had permanent fatal errors - <[EMAIL PROTECTED]> (reason: 554 : Client host rejected: Polish Spammer) - Transcript of session follows - ..

Re: A plan for HAM - White list for ham domains

2007-07-03 Thread Loren Wilton
Who likes this idea? While its a little out of date now and was manually generated and verified, SARE has a whitelist of hosts and the like that are supposedly never spam, even though they may be commercial mail. Loren

R: A plan for HAM - White list for ham domains

2007-07-03 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Marc Perkel [mailto:[EMAIL PROTECTED] > > A little play on words spoofing "A plan for spam". > > I have been testing a new technique for detecting ham that is working > quite well. It's nearly (or possibly at) 100% accurate in that what it > identifies is ham

bayes_ignore_header for X-Spam values

2007-07-03 Thread Jeremy Fairbrass
Hi all, Can someone please advise me: is it good or bad to add "bayes_ignore_header" values in my local.cf file for the X-Spam headers that are added by SA? For example: bayes_ignore_header X-Spam-Status bayes_ignore_header X-Spam-Level bayes_ignore_header X-Spam-Checker-Version bayes_ignore_hea

Re: Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Peter Farrell
Thanks for all the advice. It's been extremely helpful. RE: the comment for local caching name server - I'd not really thought about that when I was deploying these, but it makes sense and I rolled that out this afternoon. RE: RulesDuJour I didn't find these things documented anywhere. Ie. What's

MD5 Hash of URL's

2007-07-03 Thread Matt
Why can't Spamassassin do like a MD5 hash of any URL's in a message and check them against a database? I just think it would help catch things like: geocities.com/spamer123/ or spamer123.tripod.com and etc. It would also work for Tinyurl links and the like. Matt

Re: Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Theo Van Dinter
On Tue, Jul 03, 2007 at 06:04:33AM -0500, Jeff Chan wrote: > Please DO NOT use sa-blacklist. Use multi.surbl.org instead. Bill will tell > you the same thing when he gets a chance. It seems as if the blacklist.cf file is still available for people to download, since this question comes up period

Re: Errors in CPAN test

2007-07-03 Thread MIKE YRABEDRA
Force install or wait for 3.2.2 on 7/3/07 10:46 AM, Jonathan Allen at [EMAIL PROTECTED] wrote: > Hi List, > > So what's with 3.2.1 ? I'm running 3.1.8 and did the standard: > >cpan Mail::SpamAssassin > > and got: > > t/spamc_optCFAILED tests 2, 4, 6, 8 > Failed 4/9 t

Re: Which version fuzzyocr

2007-07-03 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gary V wrote: >> Hello, >> >> On the fuzzyocr site I see 3.5.1 version is not SA 3.2.X >> compatible ? Is this true, or can I safely ignore :-) >> >> We have an older server with SA 3.2.0 and Fuzzyocr 2.3b and it >> works. >> >> Greetings.. Richard > >

Errors in CPAN test

2007-07-03 Thread Jonathan Allen
Hi List, So what's with 3.2.1 ? I'm running 3.1.8 and did the standard: cpan Mail::SpamAssassin and got: t/spamc_optCFAILED tests 2, 4, 6, 8 Failed 4/9 tests, 55.56% okay t/spamc_optLFAILED tests 1-16 Failed 16/16 tests, 0.00% okay t/spamd_all

Botnet over aggressive?

2007-07-03 Thread Cliff Stanford
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm still a bit vague on how the SpamAssassin rules fit together but I've noticed that, since upgrading to the latest version, I'm getting a lot of false positives. The common cause seems to be Botnet.cf. Where a server has no reverse DNS, BOTNET_NOR

A plan for HAM - White list for ham domains

2007-07-03 Thread Marc Perkel
A little play on words spoofing "A plan for spam". I have been testing a new technique for detecting ham that is working quite well. It's nearly (or possibly at) 100% accurate in that what it identifies is ham. First of all you get a verified RDNS lookup on the host. Verified means that you

RE: So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Chris Santerre
You didn't miss anything. I don't believe they are released yet. FInal testing being done. Results look great. I'll see if they can get released soon. --Chris > -Original Message- > From: Michal Jeczalik [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 03, 2007 9:47 AM > To: users@spamassa

So what about rulesemporium.com and these anti-PDF rules?

2007-07-03 Thread Michał Jęczalik
It's been announced that these rules are coming soon and...? Or maybe I missed something? -- Michał Jęczalik, +48.603.64.62.97 INFONAUTIC, +48.33.487.69.04

Re: Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Matt Kettler
Peter Farrell wrote: > Hi all. > > Testing new setup: > CentOS 4.4 > amavisd-new-2.5.1 > SpamAssassin version 3.2.1 > running on Perl version 5.8.5 > +RulesDuJour > Quad proc Dell PE w/ 4 GB RAM. > Point blank. In general, *NOBODY* should use WS's blacklist file's for ANYTHING. It is most unfortun

FuzzyOcr and PDF files

2007-07-03 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello all, because some people insisted on it, I added an experimental feature to FuzzyOcr that allows you to scan PDFs as if they were images. The feature was implemented in the latest SVN revision and is of course disabled by default. Personally,

Re: SA on iPhone yet?

2007-07-03 Thread Loren Wilton
on 7/2/07 10:08 PM, Robert - eLists at [EMAIL PROTECTED] wrote: Anyone get Spamassassin installed on their iPhone yet? :-) - rh What are you talking about? SA is a server level tool. Why, if it was even possible, would you install it on a phone? -- Mike Yrabedra B^)> Perhaps because

Re: Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Richard Frovarp
Jeff Chan wrote: Quoting Peter Farrell <[EMAIL PROTECTED]>: Hi all. Testing new setup: CentOS 4.4 amavisd-new-2.5.1 SpamAssassin version 3.2.1 running on Perl version 5.8.5 +RulesDuJour Quad proc Dell PE w/ 4 GB RAM. Using calls to the timestamp function I've been testing this setup over

Re: MySQL Quotas

2007-07-03 Thread Duane Hill
On Tue, 3 Jul 2007 at 08:12 -0400, [EMAIL PROTECTED] confabulated: I am posting this here thinking this may be more of an OS thing than a mysql thing... Since all mysql databases and tables need to be owned by the mysql user, is there, er, has anyone figured out a way to impose disk quotas pe

MySQL Quotas

2007-07-03 Thread Grant Peel
Hi, I am posting this here thinking this may be more of an OS thing than a mysql thing... Since all mysql databases and tables need to be owned by the mysql user, is there, er, has anyone figured out a way to impose disk quotas per database for mysql? -Grant

Re: Writing a rule to access SA ClamAV Plugin Header

2007-07-03 Thread Justin Mason
Jonas Eckerman writes: > > There is a SpamAssassin plugin which checks messages with > > ClamAV, which adds the following header to emails > > > What I would like to do would be to score the ClamAV > > detection differently depending on whether it was > > Your problem is that the ClamAV plug

Re: Writing a rule to access SA ClamAV Plugin Header

2007-07-03 Thread Jonas Eckerman
> There is a SpamAssassin plugin which checks messages with > ClamAV, which adds the following header to emails > What I would like to do would be to score the ClamAV > detection differently depending on whether it was Your problem is that the ClamAV plugin doesn't add a header as metadata to t

Re: Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Jeff Chan
Quoting Peter Farrell <[EMAIL PROTECTED]>: > Hi all. > > Testing new setup: > CentOS 4.4 > amavisd-new-2.5.1 > SpamAssassin version 3.2.1 > running on Perl version 5.8.5 > +RulesDuJour > Quad proc Dell PE w/ 4 GB RAM. > > Using calls to the timestamp function I've been testing this setup > over

Re: ClamAV in SA( was: SaneSecurity)

2007-07-03 Thread Jonas Eckerman
OliverScott wrote: Is [running two instances of clamd] the following easy to do? I think it's pretty easy. Exactly how you do it depends on the platform/distribution you use. Here's what I did in FreeBSD: I copied the init script (/usr/local/etc/rc.d/clamav-clamd.sh to /usr/local/etc/rc.d

Are W. Stearn's blacklist in 3.2.* usable?

2007-07-03 Thread Peter Farrell
Hi all. Testing new setup: CentOS 4.4 amavisd-new-2.5.1 SpamAssassin version 3.2.1 running on Perl version 5.8.5 +RulesDuJour Quad proc Dell PE w/ 4 GB RAM. Using calls to the timestamp function I've been testing this setup over the past week. While following the debug output I've removed: SARE

Re: SA on iPhone yet?

2007-07-03 Thread MIKE YRABEDRA
on 7/2/07 10:08 PM, Robert - eLists at [EMAIL PROTECTED] wrote: > Anyone get Spamassassin installed on their iPhone yet? > > :-) > > - rh > > What are you talking about? SA is a server level tool. Why, if it was even possible, would you install it on a phone? -- Mike Yrabedra B^)>