Re: One BUG found: userpref whitelist pattern BUG/DOC prob;

Bowie Bailey wrote: > Linda Walsh wrote: > >> I found, BURIED, in the doc "Mail::SpamAssassin::Conf the broken, >> primitive rules for white/black list patterns allowed: >> > > Where else would they be? This is the main location for documentation > of the SA configuration and rule def

Re: RFC's suck

On Thursday, April 02, 2009 12:53 AM +0200 mouss wrote: Spam is a social problem, and social problems can't be solved by technical means only. technology des certainly help, to some extent. One of the ways technology can help is by increasing the cost of spam. SA has already done that by ma

Re: [OT] Re: SpamAssassin is EXTREMLY slow

On Wed, 2009-04-01 at 15:23 -0700, John Hardin wrote: > > So /etc/resolv.conf has 127.0.0.1 as the only resolver? > Semi-related to this thread, why when running two different spams through "spamassassin -D -t do I get widely different lookup times: [17232] dbg: async: timing: 0.042 . NS:spamh

Re: Best practices and procedures for good results?

No you don't need to say anything :-( our packages were being held back due to some dependencies and its fixed now and updated to 3.2.5 and seems to be working very well again! Thanks for your help, it's much appreciated. Karsten Bräckelmann wrote: On Thu, 2009-04-02 at 13:23 +1300, Aran wrot

Re: Best practices and procedures for good results?

On Thu, 2009-04-02 at 13:23 +1300, Aran wrote: > SpamAssassin version 3.1.7-deb3 ^ > running on Perl version 5.10.0 > > Karsten Bräckelmann wrote: > > On Thu, 2009-04-02 at 11:51 +1300, Aran wrote: > > > > > We use the most recent version and keep it up to date. > >

Re: Using local.cf from a different directory

On Wed, 2009-04-01 at 17:38 -0700, John Hardin wrote: > On Wed, 1 Apr 2009, Asim Sinan YUKSEL wrote: > > > > On Wed, 1 Apr 2009, asimsinan wrote: > > > > > > > The only place I can make changes is desktop. So is there a way to use > > > > the > > > > local.cf file from desktop? Please *do* reply

Re: Using local.cf from a different directory

On Wed, 1 Apr 2009, Asim Sinan YUKSEL wrote: Cool thanks. I will try it On Wed, Apr 1, 2009 at 8:38 PM, John Hardin wrote: So basically you're running a test message through SA. Make a subdirectory under your home directory (do you have command line access?) and copy all of the files from

Re: Best practices and procedures for good results?

On Thu, 2 Apr 2009, Aran wrote: SpamAssassin version 3.1.7-deb3 running on Perl version 5.10.0 You should upgrade. Current is 3.2.5, and older SAs perform more poorly as time passes due to the changing nature of spam. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin

Re: Using local.cf from a different directory

On Wed, 1 Apr 2009, Asim Sinan YUKSEL wrote: On Wed, 1 Apr 2009, asimsinan wrote: The only place I can make changes is desktop. So is there a way to use the local.cf file from desktop? Sure. I want to see the results for different threshold values. Default is 5.0. My teacher asked me to sho

Re: user-db size, excess growth...limits ignored

RW wrote: > On Wed, 01 Apr 2009 12:27:22 -0700 > Linda Walsh wrote: > > >> 01234567890123456789012345678901234567890123456789012345678901234567890123456789 >> Matt Kettler wrote: >> > > How often does the whitelist get sync'd to disk? >>> In the case of the whitelist

Re: Best practices and procedures for good results?

SpamAssassin version 3.1.7-deb3 running on Perl version 5.10.0 Karsten Bräckelmann wrote: On Thu, 2009-04-02 at 11:51 +1300, Aran wrote: We use the most recent version and keep it up to date. That's not a version. I've seen that refer to a years old release... You say there's a

Re: Using local.cf from a different directory

On Wed, 1 Apr 2009, asimsinan wrote: I want to use local.cf file from a different directory. I dont have permissions to access and change the values in local.cf in a linux machine. The only place I can make changes is desktop. So is there a way to use the local.cf file from desktop? A polite q

Re: Best practices and procedures for good results?

On Thu, 2009-04-02 at 11:51 +1300, Aran wrote: > We use the most recent version and keep it up to date. That's not a version. I've seen that refer to a years old release... > You say there's a very long list of practices and that the list is way > too long - well where is this list? why is it so

Using local.cf from a different directory

I want to use local.cf file from a different directory. I dont have permissions to access and change the values in local.cf in a linux machine. The only place I can make changes is desktop. So is there a way to use the local.cf file from desktop? Can it be done by -C option of spamd? -- View this

Re: Best practices and procedures for good results?

On Thu, 2 Apr 2009, Aran wrote: We use the most recent version and keep it up to date. We only have 5 users and all of us care about the spam and file it properly. It was working really well and in the last month has failed worse and worse. I don't see any patterns in the spams that get throug

Spam from an odd alias

Has anybody else noticed spam coming from dmulk.com? It seems to be associated with Yahoo: its in their IP space, has MX addresses pointing to Yahoo mailservers, is a cname for one of Yahoo's servers. www.dmulk.com is a Californian biker's blog so its probably within the Yahoo blogosphere. Marti

Re: Looking for list of bank domains

Marc Perkel a écrit : > > > Matt Garretson wrote: >> Marc Perkel wrote: >> >>> I'd like to get a more complete list of banks or bank like institutions >>> and sites where hackers are trying to steal passwords to log into >>> people's accounts. Here's my small list. Like to get more. I might se

Re: RFC's suck

Kenneth Porter a écrit : > --On Monday, March 30, 2009 7:52 PM +0100 Rik > wrote: > >> The MAIL RFC's were conceives a long time ago and have had some changes. >> Sure - the mail system is not ideal - however, with no RFC's we would >> end up with closed, stupid proprietary systems that don't tal

Re: Best practices and procedures for good results?

We use the most recent version and keep it up to date. We only have 5 users and all of us care about the spam and file it properly. It was working really well and in the last month has failed worse and worse. I don't see any patterns in the spams that get through, just many different kinds, like v

Re: [OT] Re: SpamAssassin is EXTREMLY slow

On Wed, 1 Apr 2009, alexus wrote: On Wed, Apr 1, 2009 at 5:52 PM, John Hardin wrote: How fast are non-SA DNS queries on that box? If they take ten seconds to return an answer, SA is not the culprit. without dns they are 0.1 - 1.5s, with DNS they are ~7s ...what precisely do you mean by "w

Re: user-db size, excess growth...limits ignored

On Wed, 01 Apr 2009 12:27:22 -0700 Linda Walsh wrote: > 01234567890123456789012345678901234567890123456789012345678901234567890123456789 > Matt Kettler wrote: > >> How often does the whitelist get sync'd to disk? > > In the case of the whitelist, it's per-message. > - > *ouch* -- you

Re: [OT] Re: SpamAssassin is EXTREMLY slow

On Wed, Apr 1, 2009 at 5:52 PM, John Hardin wrote: > On Wed, 1 Apr 2009, alexus wrote: > >> okay, we like really far away from original thread, i said that >> SpamAssassin runs really slow for me and on top of that I even found which >> plugin causing that, which is this: >> >> loadplugin Mail::Sp

Re: [OT] Re: SpamAssassin is EXTREMLY slow

On Wed, 1 Apr 2009, alexus wrote: okay, we like really far away from original thread, i said that SpamAssassin runs really slow for me and on top of that I even found which plugin causing that, which is this: loadplugin Mail::SpamAssassin::Plugin::DNSEval I had to disable it, if someone can

Re: Best practices and procedures for good results?

On Thu, 2009-04-02 at 10:15 +1300, Aran wrote: > Hi, I've been using spamassassin with exim4 for a few months now and after > the first month of building up the baysean rules it began working very well > only letting about 1 spam in 50 through. And your SA version is...? > We have it set up such

Re: [OT] Re: SpamAssassin is EXTREMLY slow

alexus wrote: On Wed, Apr 1, 2009 at 4:49 PM, David Morton wrote: Karsten Bräckelmann wrote: On Fri, 2009-03-27 at 23:59 +0200, Jari Fredriksson wrote: I just hope that as good as SA is will be written in some programming language, and not scripting language. Even Java would be better. Dude,

Re: [OT] Re: SpamAssassin is EXTREMLY slow

On Wed, Apr 1, 2009 at 4:49 PM, David Morton wrote: > Karsten Bräckelmann wrote: >> On Fri, 2009-03-27 at 23:59 +0200, Jari Fredriksson wrote: >>> I just hope that as good as SA is will be written in some programming >>> language, and not scripting language. Even Java would be better. >> >> Dude,

Best practices and procedures for good results?

Hi, I've been using spamassassin with exim4 for a few months now and after the first month of building up the baysean rules it began working very well only letting about 1 spam in 50 through. We have it set up such that we file our false positives and negatives in "Spam" and "Not spam" IMAP folde

[OT] Re: SpamAssassin is EXTREMLY slow

Karsten Bräckelmann wrote: > On Fri, 2009-03-27 at 23:59 +0200, Jari Fredriksson wrote: >> I just hope that as good as SA is will be written in some programming >> language, and not scripting language. Even Java would be better. > > Dude, you just lost a credit point... ;) > > Everyone, if you fe

RE: One BUG found: userpref whitelist p attern BUG/DOC prob;

Linda Walsh wrote: > > I found, BURIED, in the doc "Mail::SpamAssassin::Conf the broken, > primitive rules for white/black list patterns allowed: Where else would they be? This is the main location for documentation of the SA configuration and rule definitions. > Whitelist and

Re: user-db size, excess growth...limits ignored

01234567890123456789012345678901234567890123456789012345678901234567890123456789 Matt Kettler wrote: Linda Walsh wrote: Matt Kettler wrote: I see 3 DB's in my user directory (.spamassassin). auto-whitelist (~80MB), bayes_seen (~40MB), bayes_toks (~20MB) expiry will only affect bayes_t

One BUG found: userpref whitelist pattern BUG/DOC prob;

Bowie Bailey wrote: Linda Walsh wrote: I get many emails addressed to internal sendmail 's. 123...@mydomain, 1abd56.ef7...@mydomain (seem to fit a basic pattern but don't know how to specify the pattern (or I don't have it right): <(start of an email-address)>[0-9][0-9a-fa-f\@my

Re: Always show test scores in email header

Andrew, > Odd, because on SpamAssassin it never showed that header unless the message > was marked as spam. Although I should have mentioned that it's being > called through amavisd-new which may have had something to do with it. > I've added a custom header, and played with the $sa_tag_level_def

RE: Razor agents sdk woes

-Original Message- From: Bowie Bailey [mailto:bowie_bai...@buc.com] Sent: woensdag 1 april 2009 18:03 To: users@spamassassin.apache.org Subject: RE: Razor agents sdk woes > > Wanting to update my Razor, too -- as I'm doing an overall > > spamassassin update -- I just downloaded razor-agen

RE: Razor agents sdk woes

Mark wrote: > Wanting to update my Razor, too -- as I'm doing an overall > spamassassin update -- I just downloaded razor-agents-sdk-2.07 > (needed) from sourceforge.. It seems this install overwrites > existing, newer packages, like Digest::SHA, with older versions! What > gives? Pretty annoying,

Razor agents sdk woes

Wanting to update my Razor, too -- as I'm doing an overall spamassassin update -- I just downloaded razor-agents-sdk-2.07 (needed) from sourceforge. It seems this install overwrites existing, newer packages, like Digest::SHA, with older versions! What gives? Pretty annoying, really. Has anyone

RE: how integrate spamassassin in courier

Pol Hallen wrote: > Hi folks :-) > > Using spamassassin 3.2.5-2 (debian stable) and courier (only with pop3 > support - courier 0.61.0) I can't understand how I can integrate > spamassassin in courier to check emails. > > Google doesn't report me nothing about resolution of problem > > in syslog

Re: New kind of spam part 2

On 01.04.09 09:52, Arthur Kerpician wrote: > I don't know why but these tests are not running on my spamassassin 3.1.0: > RCVD_IN_BL_SPAMCOP_NET > RCVD_IN_XBL Didn't you disable rbl lookups? Can you upgrade to 3.2.5 or at least do you keep rules up-to-date using sa-update? > Yesterday I configure

Re: SPF plugin per-user?

On 31.03.09 14:40, Ricardo Kleemann wrote: > Is there a user preference to disable SPF in SA for some users and enable > for others? why? requiring that is an indication of something being broken. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to recei

Re: how integrate spamassassin in courier

> > Using spamassassin 3.2.5-2 (debian stable) and courier > > (only with pop3 support - courier 0.61.0) I can't > > understand how I can integrate spamassassin in courier to > > check emails. On 01.04.09 12:40, Jari Fredriksson wrote: > I use Courier, but not with SpamAssassin. SpamAssassin is i

Re: quirks with bayes ?

On Tue, 31 Mar 2009, LuKreme wrote: On 31-Mar-2009, at 11:13, Lucio Chiappetti wrote: And even resetting the AWL ... Why would you reset the AWL? I can't see any circumstance on which that would be a good idea. I had the impression that the latest category of spam going through (online adve

Re: how integrate spamassassin in courier

> Hi folks :-) > > Using spamassassin 3.2.5-2 (debian stable) and courier > (only with pop3 support - courier 0.61.0) I can't > understand how I can integrate spamassassin in courier to > check emails. > I use Courier, but not with SpamAssassin. SpamAssassin is integrated to my mail delivery,

Re: RFC's suck

Hi, [repost from yesterday, I was not using the correct From address for this list...] Yes, it means that every Received: header in an email is valid with a valid IP, valid configuration (whatever that is deemed to be), and valid DNS. Only servers that were correctly classified as mailserver

Re: New kind of spam part 2

Chris wrote: Scored as this on my home box: pts rule name description -- -- 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see