Re: Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Jeff Chan
Quoting Matt Kettler <[EMAIL PROTECTED]>: > [18696] dbg: config: read file /etc/mail/spamassassin/blacklist-uri.cf > [18696] dbg: config: read file /etc/mail/spamassassin/blacklist.cf > > Ditch blacklist and blacklist-uri. These two are well known ways to > kill spamassassin on all but the absolu

Re: RCVD_IN_DNSWL_LOW

2007-10-25 Thread ram
On Thu, 2007-10-25 at 03:13 -0400, Dan Mahoney, System Admin wrote: > On Wed, 17 Oct 2007, ram wrote: > > > Sorry I meant "like spamcop" .. I think I must proof-read my own mail > > now before Ctrl-Enter :-) > > The problem with SpamCop is: the two step reporting process makes things a > bear to

Re: What has change, can't use pyzor and terse any more

2007-10-25 Thread Matt Kettler
cpayne wrote: > >> > OK, I am not getting anything in the headers still this is my test Do you even have the pyzor and DCC plugins loaded? ie: check your v310.pre and make sure that these lines aren't commented out: loadplugin Mail::SpamAssassin::Plugin::Pyzor loadplugin Mail::SpamAssassin::P

Re: Question concerning MIME_QP_LONG_LINE

2007-10-25 Thread Matt Kettler
Office of the Postmaster wrote: > * 1.8 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 > chars > > --=_NextPart_000_0001_47200277.05070052 > Content-Type: text/html; > charset="us-ascii" > Content-Transfer-Encoding: quoted-printable > > message body > > =_NextPart_007_

Question concerning MIME_QP_LONG_LINE

2007-10-25 Thread Office of the Postmaster
* 1.8 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars --=_NextPart_000_0001_47200277.05070052 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable message body =_NextPart_007_9001_45c82de7.099C8585_B7D4-- I'm gettin

Re: mailmerged spam

2007-10-25 Thread Matt Kettler
NFN Smith wrote: > On the male enhancement spam that's hitting my spamtraps, I'm noticing > that nearly all the messages (presumably a single spammer), are > following a fairly regular pattern -- in particular, where either the > first or second line of text shows some sort of colloquial greeting >

Re: sa-learn

2007-10-25 Thread Matt Kettler
Jonn Taylor wrote: > Is it ok to send mail to salearn that has been tagged by spamassassin? Yes, that's fine. In fact, you *should* send them to sa-learn if they haven't triggered the autolearner. Even if they've already hit bayes_99 there's still likely to be some token information to be learned

Re: Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Matt Kettler
Joey wrote: > > Hello All, > > > > I am currently running SA 3.2.3 compiled from cpan. > > I have a situation where CPU is just going through the roof on just a > few messages and I really can’t tell what part of SA is the slow down. > > > > I’m not that familiar with all the config stuff, so I

mailmerged spam

2007-10-25 Thread NFN Smith
On the male enhancement spam that's hitting my spamtraps, I'm noticing that nearly all the messages (presumably a single spammer), are following a fairly regular pattern -- in particular, where either the first or second line of text shows some sort of colloquial greeting (e.g., "hi there" or "

Re: FuzzyOCR / Gifsicle errors

2007-10-25 Thread René Berber
Martin Svensson wrote: > Sorry for bumping this, but I still haven't found a solution. Any hints > are most appreciated. Isolate a sample email and send it to the FuzzyOcr list, or report it as a possible problem in its bug tracker: http://fuzzyocr.own-hero.net/ . [snip] > Has anyone noticed

Re: Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Karsten Bräckelmann
On Thu, 2007-10-25 at 09:23 -0400, Joey wrote: > I have a situation where CPU is just going through the roof on just a > few messages and I really can’t tell what part of SA is the slow down. Since this happens for a few messages only, I would start by checking if these messages got something in

Re: FuzzyOCR / Gifsicle errors

2007-10-25 Thread Martin Svensson
Sorry for bumping this, but I still haven't found a solution. Any hints are most appreciated. Thanks. /martin On 10/15/07, Martin Svensson <[EMAIL PROTECTED]> wrote: > > Hi all. > > I've just installed Fuzzyocr 3.5.1 with SA 3.1.9 on RHEL 5 (Gifsicle 1.48) > and I've noticed some issues with gif

Re: sa-learn

2007-10-25 Thread Emmanuel Seyman
* Jonn Taylor : > > Is it ok to send mail to salearn that has been tagged by spamassassin? Yes (Spamassassin tags will be removed from the mails before they are learnt from). http://wiki.apache.org/spamassassin/LearningMarkedUpMessages Emmanuel

sa-learn

2007-10-25 Thread Jonn Taylor
Is it ok to send mail to salearn that has been tagged by spamassassin? Jonn

RE: Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Randal, Phil
First off, Do an sa-update -D as soon as possible. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK From: Joey [mailto:[EMAIL PROTECTED] Sent: 25 October 2007 14:24 To: users@spamassassin.

RE: Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Joey
From: Pedro Correia [mailto:[EMAIL PROTECTED] Sent: Thursday, October 25, 2007 9:35 AM To: 'Joey' Subject: RE: Help figuring our why SA is taking like 1.5 minutes to filter... Are you running SA on the same box as the mail server? I transfered my SA instalation to a dedicated box and manag

Re: Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Jeff Chan
Quoting Joey <[EMAIL PROTECTED]>: > I am currently running SA 3.2.3 compiled from cpan. > > I have a situation where CPU is just going through the roof on just a few > messages and I really can't tell what part of SA is the slow down. [...] > Here is a list of files in each of my SA folders as wel

Blank Subject & Body

2007-10-25 Thread Joey
I forgot to mention that I am also getting messages sent with no body & subject, which is defiantly being stripped by SA, not sure why, this used to work well. Thanks!

Help figuring our why SA is taking like 1.5 minutes to filter...

2007-10-25 Thread Joey
Hello All, I am currently running SA 3.2.3 compiled from cpan. I have a situation where CPU is just going through the roof on just a few messages and I really can't tell what part of SA is the slow down. I'm not that familiar with all the config stuff, so I'm looking for some help to figur

Re: RCVD_IN_DNSWL_LOW

2007-10-25 Thread Yet Another Ninja
On 10/25/2007 9:13 AM, Dan Mahoney, System Admin wrote: On Wed, 17 Oct 2007, ram wrote: Sorry I meant "like spamcop" .. I think I must proof-read my own mail now before Ctrl-Enter :-) The problem with SpamCop is: the two step reporting process makes things a bear to do. I understand the log

Ipswitch IMail and SpamAssassin 3.2.3

2007-10-25 Thread Dan Barker
Shameless plug follows: ... I've updated the doc and installation for SpamAssassin Caller to handle the new SpamAssassin release. See http://www.visioncomm.net/sac for more details. Dan Barker Intro: SpamAssassin is an excellent Anti-Spam tool for Unix/Linux users. Using it with IMail (Ipswitch)

Re: Received from rule?

2007-10-25 Thread Christian Nygaard
Thanks for all helpful replies regarding writing the header rule! You are very right Karsten in what was the issue! header FROM_EXAMPLE_COM Received =~ /from mail3\.example\.com/i The ? mark was the issue, I replaced that with a . and now things works much better. Greets, Chris On 10/

Re: RCVD_IN_DNSWL_LOW

2007-10-25 Thread Dan Mahoney, System Admin
On Wed, 17 Oct 2007, ram wrote: Sorry I meant "like spamcop" .. I think I must proof-read my own mail now before Ctrl-Enter :-) The problem with SpamCop is: the two step reporting process makes things a bear to do. I understand the logic behind it, but once or twice I've taken a couple hund

Re: Received from rule?

2007-10-25 Thread Matt Kettler
Christian Nygaard wrote: > How do I write a local spamassassin rule that matches received from > header mail?.example.com . I've tried > writing a header matching rule but it doesnt seem to work. Can you > show a short example > of a working header matching rule for received from? > > Received: fro

Re: spamassassin conditional rules

2007-10-25 Thread Matt Kettler
ram wrote: >>> >>> >> Really? It's that bad to add a single, very simple, body regex? Have you >> looked at how many body regexes the stock SA configuration runs? Have >> you looked at how many are hundreds of times more complex, just by >> themselves? >> >> >> For example 20_drugs.cf co