Training SPAM Assassin and keeping it upto date automatically

2007-08-07 Thread Netdynamix
Hi There, I am getting a HUGE amount of Spam which basically states that a Friend, Collegue, Worshipper, Fan, etc has sent me an eCard... This is happening to a number of my clients as well... I want to beef up SpamAssassin and get it up to date so that it can tag incoming spam better... curren

Re: Unable to SPamAssassin 3.2.2 started

2007-08-07 Thread Duane Hill
On Tue, 7 Aug 2007 at 20:05 -0700, [EMAIL PROTECTED] confabulated: Thanks for that. Spamd hadn't started. There was an error in the local.cf file. It looks liek some of the other software I installed modified it. Thanks for the pointers - it should've been the first place I looked. Anybody ha

Re: Unable to SPamAssassin 3.2.2 started

2007-08-07 Thread Sparecreative
Thanks for that. Spamd hadn't started. There was an error in the local.cf file. It looks liek some of the other software I installed modified it. Thanks for the pointers - it should've been the first place I looked. Anybody have any experience with Communigate Pro and CGPSA. I'm now having troub

Re: Unable to SPamAssassin 3.2.2 started

2007-08-07 Thread Matt Kettler
Sparecreative wrote: > I've just installed SA 3.2.2 and the installation went fine with no errors. > Then when I tried to invoke it via a rule in Communigate Pro it fails. I > checked the logs and this is what I see: > > Aug 8 00:22:54 SpareServer spamc[12563]: connect to spamd on 127.0.0.1 > fail

Re: Unable to SPamAssassin 3.2.2 started

2007-08-07 Thread McDonald, Dan
On Tue, 2007-08-07 at 18:01 -0700, Sparecreative wrote: > I've just installed SA 3.2.2 and the installation went fine with no errors. > Then when I tried to invoke it via a rule in Communigate Pro it fails. I > checked the logs and this is what I see: > > Aug 8 00:22:54 SpareServer spamc[12563]:

Re: Unable to SPamAssassin 3.2.2 started

2007-08-07 Thread Jari Fredriksson
Are you sure there is spamd process running on the same host calling this? Looks that there is not. > I've just installed SA 3.2.2 and the installation went > fine with no errors. Then when I tried to invoke it via a > rule in Communigate Pro it fails. I checked the logs and > this is what I se

Unable to SPamAssassin 3.2.2 started

2007-08-07 Thread Sparecreative
I've just installed SA 3.2.2 and the installation went fine with no errors. Then when I tried to invoke it via a rule in Communigate Pro it fails. I checked the logs and this is what I see: Aug 8 00:22:54 SpareServer spamc[12563]: connect to spamd on 127.0.0.1 failed, retrying (#1 of 3): Connect

Re: spamd is invoked 3 times / forgot the subject

2007-08-07 Thread Expertsites, Inc.
- Original Message - From: "Stein Magne Bjorklund" <[EMAIL PROTECTED]> To: "Michael Worobcuk" <[EMAIL PROTECTED]>; Sent: Tuesday, August 07, 2007 1:11 AM Subject: Re: spamd is invoked 3 times / forgot the subject On 8/7/07, Michael Worobcuk <[EMAIL PROTECTED]> wrote: Hi, I am runnin

Bayesian db per domain

2007-08-07 Thread Juan Miguel Alcarria Herrera
Hi for all, this is mi first messagge to the list, thanks for your time and sorry for my English (I'm Spanish) ;-) My problem is this: I would like have a first server with postfix and spamassassin only for check spam an virus (with clamd) and relay the mail to the optimum server with a privat

Re: spamd is invoked 3 times / forgot the subject

2007-08-07 Thread Stein Magne Bjorklund
On 8/7/07, Michael Worobcuk <[EMAIL PROTECTED]> wrote: > Hi, > I am running SpamAssassin-3.2.1_1 on FreeBSD. > My MTA is Exim. > > My problem is that spamd seems to be invoked 3 times by exim. Cant really help you as my Exim/Spamassassin is also broken at the moment. I have problem running spamc o

Re: DK_POLICY_SIGNSOME

2007-08-07 Thread Dave Mifsud
On 06/08/07 12:52, Rob Sterenborg wrote: > ... I'm wondering: when exactly does an email > hit this rule? > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5485 -- Dave Mifsud Systems Engineer Computing Services Centre University of Malta CSC Tel: (+356) 2340 3004 CSC Fax: (+356) 2

ver. 3.2.2. spamc is only returning 0/0

2007-08-07 Thread Stein Magne Bjørklund
My first posting to the list gave me an error, so sorry if this causes a dbl post. Spamassassin have stopped working, when I dont know, or way So I updateded Spamassassin in hope that is may solve it self. Installed from CPAN the latest version (3.2.2) but the problem still remain. it IS SCANN

Re: iXhash zone transfer?

2007-08-07 Thread Jakob Hirsch
Rosenbaum, Larry M. wrote: > Is it possible to get zone transfers of the iXhash data? According to an email they sent some weeks ago, only to people using a BIND9-Slave (IXFR) and running it as a public service.

Re: spamd wont start

2007-08-07 Thread Theo Van Dinter
On Tue, Aug 07, 2007 at 10:50:22AM -0700, niss wrote: > Starting spamd: HTML::Parser object version 3.26 does not match bootstrap > parameter 3.56 at /usr/lib/perl5/5.8.0/i386-linux-thread-multi/XSLoader.pm > line 106. You have two different versions of HTML::Parser installed. > It seems like eve

Re: iXhash zone transfer?

2007-08-07 Thread Kai Schaetzl
Larry M. Rosenbaum wrote on Tue, 07 Aug 2007 15:21:14 -0400: > Is it possible to get zone transfers of the iXhash data? Ask them. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

iXhash zone transfer?

2007-08-07 Thread Rosenbaum, Larry M.
Is it possible to get zone transfers of the iXhash data?

spamd wont start

2007-08-07 Thread niss
I help administer our linux mail server. We are running red hat 9. After editing the manual whitelist, I tried to restart spamd and got this error message. Starting spamd: HTML::Parser object version 3.26 does not match bootstrap parameter 3.56 at /usr/lib/perl5/5.8.0/i386-linux-thread-multi/XSL

Re: Number spam

2007-08-07 Thread SM
At 02:18 07-08-2007, John Andersen wrote: All it contains is 6 digit numbers. What's up with that stuff? Address verification. Test for missing message-id and "QUALCOMM Windows Eudora Version 7.1.0.9" as the X-Mailer. Regards, -sm

Re: SA + Procmail Conundrum

2007-08-07 Thread Kris Deugau
Mark Sansome wrote: I am trying to run SA site-wide. That sounds far grander than it actually is. I am running fetchmail -> procmail -> clamav -> SA on a FC6 platform which acts as a server for my home system. What I am trying to achieve is as follows: fetchmail scoops up all the mail for all th

RE: Error after compiling rules

2007-08-07 Thread Bowie Bailey
Nice try, but no banana... :) I cleared out the sare rules when I switched from RDJ to sa-update. Both of these errors only show when I am trying to use the compiled rules. If I comment out the Rule2XSBody plugin, I don't see the errors. Bowie Randal, Phil wrote: > My guess is that you have

RE: Error after compiling rules

2007-08-07 Thread Randal, Phil
My guess is that you have copies of the sare rules in both /var/lib/spamassassin/3.002001/ and /etc/mail/spamassassin. Clear them out from the latter. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: Bowie Bailey [mailto:[EM

RE: Error after compiling rules

2007-08-07 Thread Bowie Bailey
Bowie Bailey wrote: > After running sa-compile and un-commenting the plugin, everything > seems > to be working. There are no lint errors and it is scoring mail. But > when I look in the logs, I noticed some errors like this: > > Can't locate Mail/SpamAssassin/CompiledRegexps/body_neg950.pm in

Re: Number spam (paranoid guess)

2007-08-07 Thread Yet Another Ninja
On 8/7/2007 4:34 PM, Henrik Krohns wrote: On Tue, Aug 07, 2007 at 02:52:25PM +0100, UxBoD wrote: This appears to work okay :- header __LOCAL_PROBE1 subject =~ /[0-9]{4,6}/i body__LOCAL_PROBE2 /([a-z|0-9]{8})/i describeLOCAL_PROBE1Daft N

Re: Number spam (paranoid guess)

2007-08-07 Thread UxBoD
Yes I know :( has been pointed out to me so has been revised :- header __LOCAL_DIG1subject =~ /^\d[0-9]{4,6}$/ body__LOCAL_DIG2/^([a-f|0-9]{8})$/i describeLOCAL_DIG1 Daft Number Scam metaLOCAL_DIG1 __LOCAL_D

RE: Error after compiling rules

2007-08-07 Thread Bowie Bailey
Yes, re2c is installed. $ re2c -v re2c 0.13.0 Bowie Randal, Phil wrote: > Do you have re2c installed? > > Cheers, > > Phil > > > > -Original Message- > > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > Sent: 07 August 2007 15:16 > > To: Spamassassin List (E-mail) > > Subjec

Re: more verbose logging of spamd ?

2007-08-07 Thread Theo Van Dinter
On Tue, Aug 07, 2007 at 03:07:23PM +0200, Starckjohann, Ove wrote: > Is it possible to make the logging more verbose and to add the scores > beside the names like it is done my mailscanner on another machine? There is no verbosity option for the logging, you get what you get. So you could change

RE: Error after compiling rules

2007-08-07 Thread Randal, Phil
Do you have re2c installed? Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > Sent: 07 August 2007 15:16 > To: Spamassassin List (E-mail) > Subject: Error after compiling rules > > Af

SA + Procmail Conundrum

2007-08-07 Thread Mark Sansome
I am trying to run SA site-wide. That sounds far grander than it actually is. I am running fetchmail -> procmail -> clamav -> SA on a FC6 platform which acts as a server for my home system. What I am trying to achieve is as follows: fetchmail scoops up all the mail for all the various POP3 account

Error after compiling rules

2007-08-07 Thread Bowie Bailey
After running sa-compile and un-commenting the plugin, everything seems to be working. There are no lint errors and it is scoring mail. But when I look in the logs, I noticed some errors like this: Can't locate Mail/SpamAssassin/CompiledRegexps/body_neg950.pm in @INC (@INC contains: /var/lib/spa

Re: Number spam (paranoid guess)

2007-08-07 Thread UxBoD
This appears to work okay :- header __LOCAL_PROBE1 subject =~ /[0-9]{4,6}/i body__LOCAL_PROBE2 /([a-z|0-9]{8})/i describeLOCAL_PROBE1Daft Number Probe metaLOCAL_PROBE1(__LOCAL_PROBE1 + __LOCAL_PROBE2 > 1) score

Re: Number spam (paranoid guess)

2007-08-07 Thread Greg Skouby
On Tue, Aug 07, 2007 at 12:14:31PM +0200, Chr. v. Stuckrad wrote: > > My most paranoid guess is: > > - Cause: we have summer vacation time ... > > So LOTS of people are on holidays. > If you use E-Mails with totally useless content which goes > through all filters for a short time, you can trigg

more verbose logging of spamd ?

2007-08-07 Thread Starckjohann, Ove
Hi! We're using spamd on Debian Sarge. Logging in /var/log/mail.log looks like: Aug 7 14:49:35 admin05 spamd[31778]: spamd: result: Y 29 - BAYES_99,DATE_IN_FUTURE_03_06,FB_B0NUS,HTML_10_20,HTML_MESSAGE,MIME_BASE 64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2 _CF_RANGE_

Re: DK_POLICY_SIGNSOME

2007-08-07 Thread Mark Martinec
Kai, > Mark Martinec wrote on Tue, 7 Aug 2007 10:22:22 +0200: > > Domains which choose a default policy are not required to publish > > a policy (or SSP) record. Penalizing them for choosing not > > to explicitly publish what is a default anyway, would be unjust. > I think that's not the point.

Re: Number spam

2007-08-07 Thread Chaitu
I agree..Is there any other reason U can see? -- Chaitu "Linux means productivity and fun. NT means 'Not Today'." On Tue, 2007-08-07 at 13:46 +0300, Henrik Krohns wrote: > On Tue, Aug 07, 2007 at 04:13:03PM +0530, Chaitu wrote: > > Bayesian Poisoning.. > > ...is a myth.

Re: Number spam

2007-08-07 Thread Chaitu
Bayesian Poisoning.. Chaitu "The Heart of the Cosmos is DUALITY...A balance of Antitheses, the cycle of Life and Death." On Tue, 2007-08-07 at 01:18 -0800, John Andersen wrote: > Ok, what is this stuff. > All it contains is 6 digit numbers. What's up with that stuff?

Re: Botnet 0.8 Plugin is available (FINALLY!!!)

2007-08-07 Thread Kai Schaetzl
John D. Hardin wrote on Mon, 6 Aug 2007 16:45:45 -0700 (PPT): > Why not just script the release process to copy the relevant > files to a temp directory and tar that? or that ;-) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: DK_POLICY_SIGNSOME

2007-08-07 Thread Kai Schaetzl
Mark Martinec wrote on Tue, 7 Aug 2007 10:22:22 +0200: > Domains which choose a default policy are not required to publish > a policy (or SSP) record. Penalizing them for choosing not > to explicitly publish what is a default anyway, would be unjust. I think that's not the point. The point is to

Re: Number spam (paranoid guess)

2007-08-07 Thread Chr. v. Stuckrad
On Tue, 07 Aug 2007, John Andersen wrote: > Ok, what is this stuff. > All it contains is 6 digit numbers. What's up with that stuff? My most paranoid guess is: - Cause: we have summer vacation time ... So LOTS of people are on holidays. If you use E-Mails with totally useless content which go

Number spam

2007-08-07 Thread John Andersen
Ok, what is this stuff. All it contains is 6 digit numbers. What's up with that stuff? -- _ John Andersen

Re: DK_POLICY_SIGNSOME

2007-08-07 Thread Mark Martinec
Dan, > > Yes, this is normal. An absence of a policy record implies > > a default policy, which is a neutral 'signs some mail'. > > True, but perhaps, SA could hit a different rule when encountering the > EXPLICIT "signsome" policy versus the IMPLICIT, i.e. > DK_POLICY_SIGNSOME_DEFAULT or somethin

Re: [sa-list] Re: DK_POLICY_SIGNSOME

2007-08-07 Thread Dan Mahoney, System Admin
On Mon, 6 Aug 2007, Mark Martinec wrote: Rob, When the domainkey policy record for the domain in question says the domain signs some of its email. Heheh.. Yeah, I guessed that much, but, we *don't* sign email. Not DK(IM) or anything else. Yes, this is normal. An absence of a policy record

spamd is invoked 3 times / forgot the subject

2007-08-07 Thread Michael Worobcuk
Hi, I am running SpamAssassin-3.2.1_1 on FreeBSD. My MTA is Exim. My problem is that spamd seems to be invoked 3 times by exim. Here is an excerpt of my mysql-query-log: 9102 Connect [EMAIL PROTECTED] on spamassassin 9102 Query set autocommit=1

[no subject]

2007-08-07 Thread Michael Worobcuk
Hi, I am running SpamAssassin-3.2.1_1 on FreeBSD. My MTA is Exim. My problem is that spamd seems to be invoked 3 times by exim. Here is an excerpt of my mysql-query-log: 9102 Connect [EMAIL PROTECTED] on spamassassin 9102 Query set autocommit=1