Config Question

2007-07-26 Thread Chuck Payne
I got a question... this keeps popping up in my log and I have tried to google it, and haven't found an answer on how to fix it. Jul 27 02:49:40 magi spamd[4980]: config: SpamAssassin failed to parse line, "/home/spamd/bayes" is not valid for "bayes_path", skipping: bayes_path /home/spamd/bayes

Re: Semi-OT perl question

2007-07-26 Thread Thomas Hochstein
John Rudd schrieb: > 1) it was installed via CPAN. Anyone know of a good way to uninstall > perl modules in general, esp. ones installed via CPAN? Perhaps is helpful? (Not tested.) -thh

Re: BAYES_99 and ham

2007-07-26 Thread Magnus Holmgren
On Thursday 26 July 2007 13:40, Joe Zitnik wrote: > Bump your BAYES_99 score. And perhaps even define a BAYES_99_9 and/or BAYES_99_99 rule for bayes probabilities over 99.9% and 99.99%, respectively. I use body BAYES_99 eval:check_bayes('0.99', '0.999') body BAYES_999 eval:c

when will 3.2.2 be posted to CPAN?

2007-07-26 Thread Dave Hill
when will 3.2.2 be posted to CPAN? I see it up on the mirrors, but the index doesn't seem to have been updated or something. "recent" doesn't seem to show it, and if I try to install it says that "3.002001" is up to date. thank you! -- View this message in context: http://www.nabble.com/whe

Re: query failed: 2.2.3.saupdates.openprotect.com => NXDOMAIN

2007-07-26 Thread Daryl C. W. O'Shea
Eddy Beliveau wrote: Now, I just install SA 3.2.2, everything seems to work but I noticed that sa-update returned the following error: query failed: 2.2.3.saupdates.openprotect.com => NXDOMAIN I test it with # dig +short TXT 0.2.3.saupdates.openprotect.com @ns14.zoneedit.com "78" #

Re: where and how can I add new rule

2007-07-26 Thread McDonald, Dan
On Thu, 2007-07-26 at 09:19 -0700, lochness wrote: > thank for you quick response , I would mean score how to get best score > because all of my spam test have score=1.2 point on required=5 how can > configure that if you have a type file it's possible to send me taht? I have a lot of custom rul

RE: Have Spamassassin forward mail to Spam Folder

2007-07-26 Thread Skip Brott
These are more appropriately procmail questions, but Do you know if this ruleset will process before or after attempted delivery to the user (and thus triggering the .forward file)? Is there a difference between using /usr/bin/spamassassin versus using /usr/bin/spamc ? And can I still use this r

Re: RDJ 404's

2007-07-26 Thread Richard Frovarp
Raquel wrote: On Thu, 26 Jul 2007 10:02:21 +0100 Adam Wilbraham <[EMAIL PROTECTED]> wrote: RulesDuJour is obsolete, you should use sa-update instead. Ahhh. Is sa-update compatible with SpamAssassin 3.0.3? Some of us are still using that version for what we feel is a good reason (s

RE: RDJ 404's

2007-07-26 Thread Skip Brott
> Ahhh. Is sa-update compatible with SpamAssassin 3.0.3? Some of us are still > using that version for what we feel is a good reason (still using Debian > Sarge on servers). I only recently moved to 3.1.9 so I could implement sa-update. I know I was on a version later than 3.0.3 and was unabl

query failed: 2.2.3.saupdates.openprotect.com => NXDOMAIN

2007-07-26 Thread Eddy Beliveau
Hi! I was using SA 3.2.1 on our academic RH4 server and everything was working correctly Now, I just install SA 3.2.2, everything seems to work but I noticed that sa-update returned the following error: query failed: 2.2.3.saupdates.openprotect.com => NXDOMAIN I test it with # dig +short TXT

Re: RDJ 404's

2007-07-26 Thread Raquel
On Thu, 26 Jul 2007 10:02:21 +0100 Adam Wilbraham <[EMAIL PROTECTED]> wrote: > RulesDuJour is obsolete, you should use sa-update instead. > > Ahhh. Is sa-update compatible with SpamAssassin 3.0.3? Some of us are still using that version for what we feel is a good reason (still using Debian Sa

zero score rules still show up in 3.2.2

2007-07-26 Thread McDonald, Dan
I may have dreamed it, but I thought I remembered a discussion about removing rules with a zero score from spam reports. I upgraded one of my systems to 3.2.2 today (Mandriva Corporate Server 4.0, perl 5.8.7, called from amavisd-new 2.5.2) and still see zero scores from plugins displayed: Jul 26

Re: Problem with SA 3.2.2 upgrade (dcc related?)

2007-07-26 Thread Henry Kwan
Justin Mason wrote: > > > hi -- what spamd command line are you using? > Are you running with "-u root" or similar? > > Hi Justin, The options for spamd are: # Set default spamd configuration. SPAMDOPTIONS="-d -c -m8 -H" Thanks. -- View this message in context: http://www.nabble.com/Pr

RE: measuring SA

2007-07-26 Thread Jean-Paul Natola
Hash: SHA1 On 7/25/07 1:32 PM, Ralf Hildebrandt wrote: > * David Newman <[EMAIL PROTECTED]>: >> SA 3.2.1 with Postfix >> >> What tools are available to measure how many messages SA classifies as >> spam per hour/day/week? > > mailgraph? >Perfect, thanks. It tracks mail and spam usage (and appar

Re: Have Spamassassin forward mail to Spam Folder

2007-07-26 Thread Evan Platt
Please do not use the redirect. That makes it appear a message originated from someone it didn't. Thanks. At 10:45 AM 7/26/2007, Evan Platt (Redirected by "James wrote: (Redirected by "James Butler" <[EMAIL PROTECTED]>) >>Could anyone give me an idea of how to have spamassassin forward spam

Re: measuring SA

2007-07-26 Thread Ralf Hildebrandt
* David Newman <[EMAIL PROTECTED]>: > Perfect, thanks. It tracks mail and spam usage (and apparently Ralf > wrote a related program for postfix queue stats). > Yes, can be helpful at times. I see a peak, I take a peek. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charit

Re: measuring SA

2007-07-26 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 7/25/07 1:32 PM, Ralf Hildebrandt wrote: > * David Newman <[EMAIL PROTECTED]>: >> SA 3.2.1 with Postfix >> >> What tools are available to measure how many messages SA classifies as >> spam per hour/day/week? > > mailgraph? Perfect, thanks. It trac

Re: Have Spamassassin forward mail to Spam Folder

2007-07-26 Thread Evan Platt
(Redirected by "James Butler" <[EMAIL PROTECTED]>) >>Could anyone give me an idea of how to have spamassassin forward spam to >>either a catch all spam folder or (*preferably) a users spam folder. My >>email clients are in an exchange environment and I wish to have all >>messages marked as spam de

Re: Have Spamassassin forward mail to Spam Folder

2007-07-26 Thread Evan Platt
At 10:43 AM 7/26/2007, Jason Holbrook wrote: Hello all: Could anyone give me an idea of how to have spamassassin forward spam to either a catch all spam folder or (*preferably) a users spam folder. My email clients are in an exchange environment and I wish to have all messages marked as spam de

Have Spamassassin forward mail to Spam Folder

2007-07-26 Thread Jason Holbrook
Hello all: Could anyone give me an idea of how to have spamassassin forward spam to either a catch all spam folder or (*preferably) a users spam folder. My email clients are in an exchange environment and I wish to have all messages marked as spam delivered to a spam folder instead of the inbox.

RE: Two errors with 3.2.2

2007-07-26 Thread Ed Kasky
At 10:03 AM Thursday, 7/26/2007, Rick Cooper wrote -=> > -Original Message- > From: Ed Kasky [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 26, 2007 12:22 AM > To: users@spamassassin.apache.org > Subject: Two errors with 3.2.2 > > I upgraded today from 3.2.1 to 3.2.2 on a RH7.2

Fwd: ***SPAM 15.7*** NDN: Re: RDJ 404's

2007-07-26 Thread Kevin W. Gagel
Here is that silly auto-reply again. I'll paste the headers for the list moderator to view and perhaps ban the address from the list. ---Paste--- Received: from avas.cnc.bc.ca (avas.cnc.bc.ca [142.27.70.214]) by mail.cnc.bc.ca (CNC's internal mail server) with ESMTP id 94847-1875351 for <[EMAIL

Re: RDJ 404's

2007-07-26 Thread Kevin W. Gagel
- Original Message - From: Richard Frovarp <[EMAIL PROTECTED]> To: users@spamassassin.apache.org Subject: Re: RDJ 404's Date: Thu, 26 Jul 2007 11:25:46 -0500 >The author of RDJ has indicated on lists that they are no longer >maintain the script and recommend switching to sa-update. Your

RE: Two errors with 3.2.2

2007-07-26 Thread Rick Cooper
> -Original Message- > From: Ed Kasky [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 26, 2007 12:22 AM > To: users@spamassassin.apache.org > Subject: Two errors with 3.2.2 > > I upgraded today from 3.2.1 to 3.2.2 on a RH7.2 server using perl > 5.8.1 and am having 2 issues.

Re: BAYES_99 and ham

2007-07-26 Thread John D. Hardin
On Thu, 26 Jul 2007, Matus UHLAR - fantomas wrote: > The downside is, that even if user train much, they'll get _much_ > of spam hitting only 3.5 points with BAYES_99. There's some reluctance to put Poison Pill rules into the default distribution... :) If you trust your Bayes training, then inc

Re: RDJ 404's

2007-07-26 Thread Richard Frovarp
The author of RDJ has indicated on lists that they are no longer maintain the script and recommend switching to sa-update. Martin.Hepworth wrote: Maybe obsolete for sare rules (due to ddos issues etc), but its very handy for other peoples rulesets you want to keep up-to date.. -- Martin Hepwo

Re: where and how can I add new rule

2007-07-26 Thread lochness
thank for you quick response , I would mean score how to get best score because all of my spam test have score=1.2 point on required=5 how can configure that if you have a type file it's possible to send me taht? juste to see what file I can modify thank you -- View this message in context:

Re: where and how can I add new rule

2007-07-26 Thread Daniel J McDonald
On Thu, 2007-07-26 at 07:14 -0700, lochness wrote: > hello all i'm new user of spamassassin and I'm looking how to add rules and > what file to edit, excusme for my bad english thank for your help system wide, you can create a new file in /etc/mail/spamassassin. anything with a .cf ending will be r

Re: RDJ 404's

2007-07-26 Thread Adam Wilbraham
Sorry yes thats true, although I think in this instance its the SARE rules they're having problems getting. On Thu, 26 Jul 2007 16:20:30 +0100 "Martin.Hepworth" <[EMAIL PROTECTED]> wrote: > Maybe obsolete for sare rules (due to ddos issues etc), but its very > handy for other peoples rulesets y

Antwort: Re: Negative impact with Content-Transfer-Encoding: binary?

2007-07-26 Thread Nico Prenzel
Thanks for your answer Matus, >In such case you should do the filtering before mail reaches domino server. >That will require machine between lotus and world, where you can store >copies of all (suspicious) mail to some folder on the, and feed them to >spamassassin from there. However in such case

Re: another bouncing list person

2007-07-26 Thread Bart Schaefer
On 7/25/07, Jerry Durand <[EMAIL PROTECTED]> wrote: > It also is trying to claim to come from me, I don't have a POST or > OFFICE address here. > > Begin forwarded message: > > > From: [EMAIL PROTECTED], [EMAIL PROTECTED] It's almost certainly the case that your own mail server did that. The ori

How long before 3.2.2 is in cpan?

2007-07-26 Thread MIKE YRABEDRA
Anxious to upgrade ;-) -- Mike Yrabedra B^)>

RE: RDJ 404's

2007-07-26 Thread Martin.Hepworth
Maybe obsolete for sare rules (due to ddos issues etc), but its very handy for other peoples rulesets you want to keep up-to date.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTEC

Re: RDJ 404's

2007-07-26 Thread Adam Wilbraham
Thats been the general jist of whats been said on here for a while now. We've switched all our servers to sa-update, I don't really see the need to use RDJ any more when theres a proper update tool included with SpamAssassin these days... On Thu, 26 Jul 2007 08:14:40 -0700 "Kevin W. Gagel" <[EM

Re: RDJ 404's

2007-07-26 Thread Kevin W. Gagel
- Original Message - From: Adam Wilbraham <[EMAIL PROTECTED]> To: users@spamassassin.apache.org> Subject: Re: RDJ 404's Date: Thu, 26 Jul 2007 10:02:21 +0100 >RulesDuJour is obsolete, you should use sa-update instead. Really? Why doesn't it say that on the TWiki or the rulesemporium websi

Re: How do you stop others from sending emails from your email addresses ?

2007-07-26 Thread hamann . w
Hi, if you implement some whitelisting too, you could slightly change qmail to require authentication if the sender pretends to be from your domain. This will only affect the envelope from, however spammers that believe it is easier to bypass filters with the local domain usually put it into the

Mail not tagged

2007-07-26 Thread Guillaume Charhon
Hi, I have a problem with spam assassin. I have just followed the tutorial : http://svn.apache.org/repos/asf/spamassassin/branches/3.2/INSTALL (the part Installing SpamAssassin for Personal Use (Not System-Wide)) But my emails are not tagged :'( I am using Debian Etch. Thank you for your hel

Re: Update default settings?

2007-07-26 Thread Duane Hill
On Thu, 26 Jul 2007 at 07:21 -0700, [EMAIL PROTECTED] confabulated: I only see two SpamAssassin options there: SpamAssassin Spam Filter SpamAssassin Spam Box delivery for messages marked as spam (user configurable) Both of those are already on, but there are still accounts that have SpamAssass

Re: another bouncing list person

2007-07-26 Thread Matus UHLAR - fantomas
> On 25.07.07 22:00, Jerry Durand wrote: > > Subject: another bouncing list person > > > > It also is trying to claim to come from me, I don't have a POST or > > OFFICE address here. On 26.07.07 16:18, Matus UHLAR - fantomas wrote: > Yes, I get them too. I'm hopefully Cc:-ing to owner of this

Re: BAYES_99 and ham

2007-07-26 Thread Michał Jęczalik
On Thu, 26 Jul 2007, martin f krafft wrote: Hi list, I just had a flood of spam coming through, which SA classified as ham. On closer inspection, it turns out that the only tests triggered for all those mails were HTML_MESSAGE and BAYES_99. HTML messages are commonplace today (unfortunately),

Re: Update default settings?

2007-07-26 Thread HDG
I only see two SpamAssassin options there: SpamAssassin Spam Filter SpamAssassin Spam Box delivery for messages marked as spam (user configurable) Both of those are already on, but there are still accounts that have SpamAssassin off (and I want to turn it on for everyone at once) Matt Kettler-3

where and how can I add new rule

2007-07-26 Thread lochness
hello all i'm new user of spamassassin and I'm looking how to add rules and what file to edit, excusme for my bad english thank for your help -- View this message in context: http://www.nabble.com/where-and-how-can-I-add-new-rule-tf4151907.html#a11811353 Sent from the SpamAssassin - Users mailin

Re: another bouncing list person

2007-07-26 Thread Matus UHLAR - fantomas
On 25.07.07 22:00, Jerry Durand wrote: > Subject: another bouncing list person > > It also is trying to claim to come from me, I don't have a POST or > OFFICE address here. Yes, I get them too. I'm hopefully Cc:-ing to owner of this list... Received: from smtpguard.norrkoping.se (smtpguard.

Re: Bye for good FuzzyOCR

2007-07-26 Thread Steve West
decoder wrote: Try using the SVN Version (revision 132). This is basically the same as the latest 3.5.x release but some issues with SA 3.2.x were fixed. Best regards, Chris We are running SA 3.2.1 and just wondering if anyone using the SVN version on a production server processing 10,000

Re: Delivery-Failure on Spam

2007-07-26 Thread Matthias Haegele
Matus UHLAR - fantomas schrieb: On 26.07.07 15:13, Sebastian Ries wrote: I have the problem that I get Delivery Failure notice and such mails sent to one email address. This also includes Vacations Answeres an such stuff. Theese answeres are sent on Spam - so someone is faking the "From:" Read

Re: Scantime on messages

2007-07-26 Thread Matus UHLAR - fantomas
> >On 26.07.07 14:11, Stefan Klewer wrote: > >>Rsync all RBLs, which are listed in the spamassassin config and integrate > >>them into a local rbldnsd. it really helps fasten up scanning > On Thu, 26 Jul 2007 at 15:21 +0200, [EMAIL PROTECTED] confabulated: > >I'm afraid that rsyncing of spamhaus a

Re: Negative impact with Content-Transfer-Encoding: binary?

2007-07-26 Thread Matus UHLAR - fantomas
On 26.07.07 15:16, Nico Prenzel wrote: > what I need to know about SpamAssassin is: > Does SpamAssassin score the Content-Transfer-Encoding type "binary" > differently as other types? I don't think so. > I've got the problem that I don't get anything other than > "Content-Transfer-Encoding: binar

Delivery-Failure on Spam

2007-07-26 Thread Sebastian Ries
Hi I have the problem that I get Delivery Failure notice and such mails sent to one email address. This also includes Vacations Answeres an such stuff. Theese answeres are sent on Spam - so someone is faking the "From:" Reading the subject tells that is definitivly spam. Is there a possibility

Re: Scantime on messages

2007-07-26 Thread Duane Hill
On Thu, 26 Jul 2007 at 15:21 +0200, [EMAIL PROTECTED] confabulated: Per Jessen schrieb: It could be caused by DNS lookups taking longer. That would be my guess for anything taking more than 5 seconds. On 26.07.07 14:11, Stefan Klewer wrote: Rsync all RBLs, which are listed in the spamassass

Re: How do you stop others from sending emails from your email addresses ?

2007-07-26 Thread Matus UHLAR - fantomas
> Wednesday, July 25, 2007, 1:46:56 PM, you wrote: > > I constantly, (about 15-20 times a day), receive s**m > > emails from other people, but addressed from my email > > address. Is there any way of using SA to help on this > > in any way at all please ? > > > I want to stop myself from receivin

Re: Delivery-Failure on Spam

2007-07-26 Thread Matus UHLAR - fantomas
On 26.07.07 15:13, Sebastian Ries wrote: > I have the problem that I get Delivery Failure notice and such mails sent to > one email address. This also includes Vacations Answeres an such stuff. > > Theese answeres are sent on Spam - so someone is faking the "From:" > Reading the subject tells tha

Re: How do you stop others from sending emails from your email addresses ?

2007-07-26 Thread Peter Mikeska (MiKi)
Hello Chris, Wednesday, July 25, 2007, 1:46:56 PM, you wrote: > I constantly, (about 15-20 times a day), receive s**m > emails from other people, but addressed from my email > address. Is there any way of using SA to help on this > in any way at all please ? > I want to stop myself from receivi

Re: Scantime on messages

2007-07-26 Thread Matus UHLAR - fantomas
> Per Jessen schrieb: > > It could be caused by DNS lookups taking longer. That would be my guess > > for anything taking more than 5 seconds. On 26.07.07 14:11, Stefan Klewer wrote: > Rsync all RBLs, which are listed in the spamassassin config and integrate > them into a local rbldnsd. it really

Re: BAYES_99 and ham

2007-07-26 Thread Matus UHLAR - fantomas
> >martin f krafft writes: > >>I just had a flood of spam coming through, which SA classified as > >>ham. On closer inspection, it turns out that the only tests > >>triggered for all those mails were HTML_MESSAGE and BAYES_99. [...] > >>I know how SA scores are computed. I do wonder how that algori

Negative impact with Content-Transfer-Encoding: binary?

2007-07-26 Thread Nico Prenzel
Hello all, what I need to know about SpamAssassin is: Does SpamAssassin score the Content-Transfer-Encoding type "binary" differently as other types? I've got the problem that I don't get anything other than "Content-Transfer-Encoding: binary" for every mail/attachment out of my Lotus Domino inte

single gif attachment

2007-07-26 Thread Marc Deslauriers
Hi, A lot of the remaining spam that is getting through our setup is basically an empty body with a single small gif attachment. The only rules that get triggered are SB_GIF_AND_NO_URIS and SARE_GIF_ATTACH. Has anyone made a rule that detects an empty body? If I'm not mistaking, there are a coup

RE: Scantime on messages

2007-07-26 Thread Stefan Klewer
Rsync all RBLs, which are listed in the spamassassin config and integrate them into a local rbldnsd. it really helps fasten up scanning -Ursprüngliche Nachricht- Von: Jan Doberstein [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 25. Juli 2007 20:54 An: users@spamassassin.apache.org Betref

Re: BAYES_99 and ham

2007-07-26 Thread Joe Zitnik
Bump your BAYES_99 score. That's the beauty of spamassassin, it is highly customizable. The determinant of whether it is spam or not is the total score versus your threshold. You can change either. I have my BAYES_99 set to 5.0 points. My threshold is 4.0 points. If there is enough about that

Re: BAYES_99 and ham

2007-07-26 Thread Matthias Haegele
Justin Mason schrieb: martin f krafft writes: Hi list, I just had a flood of spam coming through, which SA classified as ham. On closer inspection, it turns out that the only tests triggered for all those mails were HTML_MESSAGE and BAYES_99. HTML messages are commonplace today (unfortunately)

Re: BAYES_99 and ham

2007-07-26 Thread Justin Mason
martin f krafft writes: > Hi list, > > I just had a flood of spam coming through, which SA classified as > ham. On closer inspection, it turns out that the only tests > triggered for all those mails were HTML_MESSAGE and BAYES_99. > > HTML messages are commonplace today (unfortunately), so they

BAYES_99 and ham

2007-07-26 Thread martin f krafft
Hi list, I just had a flood of spam coming through, which SA classified as ham. On closer inspection, it turns out that the only tests triggered for all those mails were HTML_MESSAGE and BAYES_99. HTML messages are commonplace today (unfortunately), so they don't add anything to the score. BAYES

Re: Problem with SA 3.2.2 upgrade (dcc related?)

2007-07-26 Thread Justin Mason
hi -- what spamd command line are you using? Are you running with "-u root" or similar? --j. Henry Kwan writes: > Am trying to upgrade to the new 3.2.2 and everything looked OK during > make/test/install but during operation, I'm getting these errors: > > Jul 25 13:46:53 boxen spamd[25710]: dcc

Re: RDJ 404's

2007-07-26 Thread Adam Wilbraham
RulesDuJour is obsolete, you should use sa-update instead. On Thu, 26 Jul 2007 16:59:12 +1000 "Leigh Sharpe" <[EMAIL PROTECTED]> wrote: > > I'm downloading once a day from only one PC. > > Regards, > Leigh > > Leigh Sharpe > Network Systems Engineer > Pacific Wireless > Ph +61

Re: Should all servers Spamassasin .cf be the same???

2007-07-26 Thread Per Jessen
Duncan Wiggill wrote: > I i'm sort of new to SPamassasin and just though some one here could > help me out, currently I have Spamassasin loaded on three of my > servers and found that there .cf files in the /etc/mail/spamassasin > directory are not the same, been getting a lot of spam comming > th

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-26 Thread Matus UHLAR - fantomas
On 25.07.07 09:28, Skip Brott wrote: > Just as in 3.2.1, I still get this error when trying to build: > > REQUIRED module out of date: HTML::Parser > > But I already installed HTML::Parser 3.56 with no errors. don't you have older version of HTML::Parser installed manually somewhere? -- Matus

Should all servers Spamassasin .cf be the same???

2007-07-26 Thread Duncan Wiggill
I i'm sort of new to SPamassasin and just though some one here could help me out, currently I have Spamassasin loaded on three of my servers and found that there .cf files in the /etc/mail/spamassasin directory are not the same, been getting a lot of spam comming through, not sure if its related t

RE: RDJ 404's

2007-07-26 Thread Leigh Sharpe
I'm downloading once a day from only one PC. Regards, Leigh Leigh Sharpe Network Systems Engineer Pacific Wireless Ph +61 3 9584 8966 Mob 0408 009 502 Helpdesk 1300 300 616 email [EMAIL PROTECTED] web www.pacificwireless.com.au -Original Message- From: Jan Doberstein [mai