Re: How can I view bayes score for individual words?

2009-07-24 Thread RW
On Fri, 24 Jul 2009 17:38:39 -0700 (PDT) snowweb wrote: > > I tried to view the files bayes.toks, bayes.journal, bayes.seen and > autowhitelist but they just look jibberish when opened in a unix > editor. What's the solution to this? I was hoping to be able to tweak > some of the scores and add

Re: How can I view bayes score for individual words?

2009-07-24 Thread Matt Kettler
snowweb wrote: > I tried to view the files bayes.toks, bayes.journal, bayes.seen and > autowhitelist but they just look jibberish when opened in a unix editor. > What's the solution to this? > The bayes database stores truncated SHA1 hashes of the words, it is not reversible back to human readab

Re: DNSWL

2009-07-24 Thread Matt Kettler
twofers wrote: > I get: > * -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at > http://www.dnswl.org/, low > * trust > > and I read the dnswl.org home page, but I don't understand why this > rule would get a -1.0 for a "LOW" trust rating. > > It just seems awkward to me, I think

How can I view bayes score for individual words?

2009-07-24 Thread snowweb
I tried to view the files bayes.toks, bayes.journal, bayes.seen and autowhitelist but they just look jibberish when opened in a unix editor. What's the solution to this? I was hoping to be able to tweak some of the scores and add certain words etc. -- View this message in context: http://www.nab

Re: whitelist_from questions

2009-07-24 Thread Benny Pedersen
On Fri, July 24, 2009 20:10, John Hardin wrote: > On Fri, 24 Jul 2009, Greg Troxel wrote: >> I have long wanted to be able to >> whitelist_from f...@bar -3.0 >> to have per-entry scores. Obviously though I haven't wanted it enough >> to write the code. > How does this not work? >header WL_FRO

Re: whitelist_from questions

2009-07-24 Thread Karsten Bräckelmann
On Fri, 2009-07-24 at 11:57 -0700, John Hardin wrote: > On Fri, 24 Jul 2009, Greg Troxel wrote: > > > > I have long wanted to be able to > > > > > > > > whitelist_from f...@bar -3.0 > > > > > > > > to have per-entry scores. Obviously though I haven't wanted it > > > > enough to write the code. F

Re: whitelist_from questions

2009-07-24 Thread John Hardin
On Fri, 24 Jul 2009, Greg Troxel wrote: John Hardin writes: On Fri, 24 Jul 2009, Greg Troxel wrote: I have long wanted to be able to whitelist_from f...@bar -3.0 to have per-entry scores. Obviously though I haven't wanted it enough to write the code. How does this not work? header W

Re: whitelist_from questions

2009-07-24 Thread Greg Troxel
John Hardin writes: > On Fri, 24 Jul 2009, Greg Troxel wrote: > >> I have long wanted to be able to >> >> whitelist_from f...@bar -3.0 >> >> to have per-entry scores. Obviously though I haven't wanted it >> enough to write the code. > > How does this not work? > > header WL_FROM_FOO From =~

Re: whitelist_from questions

2009-07-24 Thread John Hardin
On Fri, 24 Jul 2009, Greg Troxel wrote: I have long wanted to be able to whitelist_from f...@bar -3.0 to have per-entry scores. Obviously though I haven't wanted it enough to write the code. How does this not work? header WL_FROM_FOO From =~ /\bf...@bar/i score WL_FROM_FOO -3.00

Re: whitelist_from questions

2009-07-24 Thread Greg Troxel
jida...@jidanni.org writes: > Actually there should be one or two more whitelists, so one can e.g., score > -100 one's friends > -10 one's schools > -1 one's country I have long wanted to be able to whitelist_from f...@bar -3.0 to have per-entry scores. Obviously though I haven't wanted i

Re: whitelist_from questions

2009-07-24 Thread jidanni
Actually there should be one or two more whitelists, so one can e.g., score -100 one's friends -10 one's schools -1 one's country

Re: Certain spam not parsed by spamd!

2009-07-24 Thread Matus UHLAR - fantomas
> >> LuKreme wrote: > >> > On Jul 23, 2009, at 22:45, snowweb wrote: > >> > > >> > Is the email with attachment over 250KB? > > > > On 24.07.09 01:13, snowweb wrote: > >> No, it's just 74Kb > Matus UHLAR - fantomas wrote: > > the email or the attachment? In config you posted e-mails over 100K >

Re: DNSWL

2009-07-24 Thread Benny Pedersen
On Fri, July 24, 2009 14:07, twofers wrote: > I get: >     * -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, > low >     *  trust >   > and I read the dnswl.org home page, but I don't understand why this rule > would get a -1.0 for a "LOW" trust rating. you can o

Re: DNSWL

2009-07-24 Thread Hajdú Zoltán
They only White-list. So if the trust is higher, then the score should be lower... Cheers, twofers írta: I get: * -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low * trust and I read the dnswl.org home page, but I don't understand why this rule w

DNSWL

2009-07-24 Thread twofers
I get:     * -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low     *  trust   and I read the dnswl.org home page, but I don't understand why this rule would get a -1.0 for a "LOW" trust rating.   It just seems awkward to me, I think LOW trust would dictate a posi

United-MAP spam flood

2009-07-24 Thread Paweł Tęcza
Hello Folks, Did you also get many spams from "United-MAP, a dynamic company with rapid development, with a united team of professionals in its core."? :) Or maybe this new spam flood is only Poland targeted? Here are a few spam samples: http://pastebin.com/m178f4a58 http://pastebin.com/m6d07f79

Re: Certain spam not parsed by spamd!

2009-07-24 Thread Jari Fredriksson
> > > > Jari Fredriksson wrote: >> >>> >>> The headers of the strange spam are: >>> >>> Return-path: >>> Envelope-to: u...@host.co.uk >>> Delivery-date: Fri, 24 Jul 2009 11:12:38 +0800 >>> Received: from [190.144.0.42] (helo=CWXNQKBTZ) >>>by s1.host.info with esmtp (Exim 4.67) >>>(

spamassassin not scanning messages

2009-07-24 Thread José Campos
I just installed on qmailtoaster with spamassassin and clamv. Looking at email full header I realize that the messages not been scanned. Something is not working as it should. Can someone help me.

Re: Certain spam not parsed by spamd!

2009-07-24 Thread snowweb
Matus UHLAR - fantomas wrote: > >> LuKreme wrote: >> > On Jul 23, 2009, at 22:45, snowweb wrote: >> > >> > Is the email with attachment over 250KB? > > On 24.07.09 01:13, snowweb wrote: >> No, it's just 74Kb > > the email or the attachment? In config you posted e-mails over 100K > aren't ch

Re: Certain spam not parsed by spamd!

2009-07-24 Thread Matus UHLAR - fantomas
> Jari Fredriksson wrote: > > It apparently was never seen by SpamAssassin, if there were no X-Spam-* > > -headers. > > > > How you call SpamAssassin? Any whitelisting there, do you call > > SpamAssassin for your own mail? It seems the sender address is same as > > receiver address. Whitelisted so

Re: Certain spam not parsed by spamd!

2009-07-24 Thread Matus UHLAR - fantomas
> LuKreme wrote: > > On Jul 23, 2009, at 22:45, snowweb wrote: > > > > Is the email with attachment over 250KB? On 24.07.09 01:13, snowweb wrote: > No, it's just 74Kb the email or the attachment? In config you posted e-mails over 100K aren't checked. 74K attachment results in >100K mail. -- M

Re: whitelist_from questions

2009-07-24 Thread Matus UHLAR - fantomas
> Le 24/07/2009 04:09, MySQL Student a écrit : >> I don't doubt that if we removed a substantial amount of them that SA >> would do what's right, but there doesn't seem to be any scientific way >> to do that successfully. > > Can't you just look at the scores that the whitelisted messages are > g

Re: Malware list Q

2009-07-24 Thread Yet Another Ninja
On 7/24/2009 11:34 AM, Brent Clark wrote: Hiya Do any of you guys use the following list. http://malware.hiperlinks.com.br/cgi/submit?action=list_sa If so, may I ask how do you find the results, and is it worth adding to spamassassin. I've been using the ClamAV sigs for quite a while. They

Re: Malware list Q

2009-07-24 Thread John Horne
> On Fri, Jul 24, 2009 at 10:34, Brent Clark wrote: > > Do any of you guys use the following list. > > http://malware.hiperlinks.com.br/cgi/submit?action=list_sa > > If so, may I ask how do you find the results, and is it worth adding to > spamassassin. > Hi, We use malwarepatrol with our central

Re: Malware list Q

2009-07-24 Thread Justin Mason
looks interesting! I've asked the developer if he's interested in us testing it out On Fri, Jul 24, 2009 at 10:34, Brent Clark wrote: > Hiya > > Do any of you guys use the following list. > > http://malware.hiperlinks.com.br/cgi/submit?action=list_sa > > If so, may I ask how do you find the r

Malware list Q

2009-07-24 Thread Brent Clark
Hiya Do any of you guys use the following list. http://malware.hiperlinks.com.br/cgi/submit?action=list_sa If so, may I ask how do you find the results, and is it worth adding to spamassassin. Kind Regards Brent Clark

Re: Certain spam not parsed by spamd!

2009-07-24 Thread snowweb
Jari Fredriksson wrote: > >> >> The headers of the strange spam are: >> >> Return-path: >> Envelope-to: u...@host.co.uk >> Delivery-date: Fri, 24 Jul 2009 11:12:38 +0800 >> Received: from [190.144.0.42] (helo=CWXNQKBTZ) >>by s1.host.info with esmtp (Exim 4.67) >>(envelope-fro

Re: Certain spam not parsed by spamd!

2009-07-24 Thread snowweb
Jari Fredriksson wrote: > > It apparently was never seen by SpamAssassin, if there were no X-Spam-* > -headers. > > How you call SpamAssassin? Any whitelisting there, do you call > SpamAssassin for your own mail? It seems the sender address is same as > receiver address. Whitelisted somehow, a

Re: Certain spam not parsed by spamd!

2009-07-24 Thread snowweb
LuKreme wrote: > > On Jul 23, 2009, at 22:45, snowweb wrote: > > Is the email with attachment over 250KB? > No, it's just 74Kb -- View this message in context: http://www.nabble.com/Certain-spam-not-parsed-by-spamd%21-tp24638560p24640402.html Sent from the SpamAssassin - Users mailing lis

Re: Certain spam not parsed by spamd!

2009-07-24 Thread LuKreme
On Jul 23, 2009, at 22:45, snowweb wrote: there is one email which seems capable of avoiding getting parsed by spamd. Is the email with attachment over 250KB?